last executing test programs:

11.541631989s ago: executing program 0 (id=4752):
socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, 0x0, 0x0)
connect$inet(r0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/uevent_seqnum', 0x68040, 0x8)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006000600080600000800", @ANYRES32=r3], 0x30}, 0x1, 0x0, 0x0, 0x4048030}, 0xc000)

11.371496128s ago: executing program 0 (id=4753):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xabe}, 0x94)
socket(0x2b, 0x1, 0x1)
syz_emit_ethernet(0xbe, 0x0, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x4606, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet6(0xa, 0x2, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02180000100000000000000000000000030006000000000002004e23000000000000000000000000080012000000000000000000000000001700000000000000000000000000000002000000000000000000000000000000fe800000000000000000000000000000030005000000000002"], 0x80}}, 0x2)
fchmod(0xffffffffffffffff, 0x1c2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = eventfd2(0xe5c, 0x80000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000002500190326bd700800800004050090000c00388008009d8004006700"], 0x20}}, 0x404c0c4)
r6 = eventfd2(0x4001, 0x800)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000100)={r4, 0x7, 0x2, r6})
ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0x9e95)

10.071568401s ago: executing program 4 (id=4759):
socket$netlink(0x10, 0x3, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x82, &(0x7f0000006680))
socket(0x1, 0x80003, 0x29)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000000201010800000000000000000a000000040001800c0019"], 0x24}, 0x1, 0x0, 0x0, 0x10050}, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5)
socket$alg(0x26, 0x5, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), r2)
sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000140)={0x24, r3, 0x8808916c5f45b02d, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x400a}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4068010)
r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00')
close(0xffffffffffffffff)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xffff, 0x62, &(0x7f0000000400)=""/98, 0x41000, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x1efbf}, 0x94)
ioctl$sock_TIOCINQ(r5, 0x541b, &(0x7f0000000040))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800)
recvmmsg(r6, &(0x7f00000079c0)=[{{&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4}}}, 0x80, &(0x7f0000000a00)=[{&(0x7f00000004c0)=""/91, 0x5b}, {&(0x7f0000000280)=""/9, 0x9}, {&(0x7f0000000800)=""/140, 0x8c}, {&(0x7f00000008c0)=""/22, 0x16}, {&(0x7f0000000900)=""/220, 0xdc}], 0x5}}, {{&(0x7f0000000a80)=@nl=@unspec, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000b00)=""/66, 0x42}], 0x1}, 0xfff}, {{&(0x7f0000000bc0)=@generic, 0x80, &(0x7f00000031c0)=[{&(0x7f0000000c40)=""/69, 0x45}, {&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000001cc0)=""/228, 0xe4}, {&(0x7f0000001dc0)=""/236, 0xec}, {&(0x7f0000001ec0)=""/86, 0x56}, {&(0x7f0000001f40)=""/109, 0x6d}, {&(0x7f0000008cc0)=""/4099, 0x1003}, {&(0x7f0000002080)=""/173, 0xad}, {&(0x7f0000003080)=""/247, 0xf7}, {&(0x7f0000003180)=""/49, 0x31}], 0xa}, 0x57}, {{&(0x7f0000003280)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000003840)=[{&(0x7f0000003300)=""/150, 0x96}, {&(0x7f00000033c0)=""/19, 0x13}, {&(0x7f0000003400)=""/199, 0xc7}, {&(0x7f0000003500)=""/69, 0x45}, {&(0x7f0000003580)=""/214, 0xd6}, {&(0x7f0000002240)=""/221, 0xdd}, {&(0x7f0000003780)=""/175, 0xaf}], 0x7, &(0x7f00000038c0)=""/104, 0x68}, 0xff}, {{&(0x7f0000003940)=@alg, 0x80, &(0x7f0000004c00)=[{&(0x7f0000000640)=""/149, 0x95}, {&(0x7f0000003a80)=""/166, 0xa6}, {&(0x7f0000003b40)=""/4096, 0x1000}, {&(0x7f0000004b40)=""/154, 0x9a}], 0x4, &(0x7f0000002340)=""/182, 0xb6}, 0x6}, {{&(0x7f0000004d00)=@sco={0x1f, @none}, 0x80, &(0x7f0000004f40)=[{&(0x7f0000004d80)=""/43, 0x2b}, {&(0x7f0000004dc0)=""/157, 0x9d}, {&(0x7f0000004e80)=""/151, 0x97}], 0x3, &(0x7f0000004f80)=""/76, 0x4c}, 0x8}, {{&(0x7f0000005000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000006180)=[{&(0x7f0000002140)=""/241, 0xf1}, {&(0x7f0000005180)=""/4096, 0x1000}], 0x2, &(0x7f00000061c0)=""/239, 0xef}, 0x5c80}, {{&(0x7f00000062c0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000007980)=[{&(0x7f00000066c0)=""/4096, 0x1000}, {&(0x7f0000001fc0)=""/182, 0xb6}, {&(0x7f0000007780)=""/234, 0xea}, {&(0x7f0000007880)=""/236, 0xec}], 0x4}}], 0x8, 0xfc0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)

7.499422956s ago: executing program 4 (id=4762):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="640000000101010200000000000000000a0000000c001980080001008d070000440001802c00018014000300fc01000000000000000000000000000114000400fc0000000000000000000000000000040c000280050001008400"], 0x64}, 0x1, 0x0, 0x0, 0x8000000}, 0x24008850)
r1 = socket$igmp(0x2, 0x3, 0x2)
ioctl$SIOCGETSGCNT(r1, 0x89e1, &(0x7f0000000000)={@local, @local})

6.854391027s ago: executing program 4 (id=4766):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0x7, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf09010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0)
recvmsg(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001700)=""/4108, 0x100c}], 0x1}, 0x100)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$rxrpc(0x21, 0x2, 0xa)
r4 = getpid()
r5 = syz_pidfd_open(r4, 0x0)
ioctl$VIDIOC_QBUF(r5, 0xc058ff0b, &(0x7f0000000200)=@multiplanar_mmap={0x99f2, 0x7, 0x4, 0x40, 0x8, {}, {0x4, 0x1, 0x9d, 0xa, 0x7, 0x3, "4f518405"}, 0x8, 0x1, {0x0}, 0x3})
r6 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r3, 0x110, 0x4, &(0x7f0000000040)=0xfffffffd, 0x4)
connect$rxrpc(r6, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24)
sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0)
connect$rxrpc(r6, &(0x7f0000000380)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x1}}, 0x24)
sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x1, 0x4c00}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400b595ffff3800fdffefff0a180000", @ANYBLOB="1400010000000000000000000000ffff64010102"], 0x2c}}, 0x0)
socket(0x10, 0x803, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000), 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r8)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/vlan0\x00')

4.473203943s ago: executing program 2 (id=4770):
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @mcast1, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dstopts_2292={{0x20, 0x29, 0x4, {0x88, 0x1, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0x20}, 0x44010)

4.329775644s ago: executing program 2 (id=4772):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58)
r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
close(r1)
socket$phonet_pipe(0x23, 0x5, 0x2)
bind$phonet(r1, &(0x7f0000000040)={0x23, 0xf, 0xc7, 0x1}, 0xffffffffffffffbc)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000000000), 0x0, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

3.992633077s ago: executing program 0 (id=4775):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x2000, &(0x7f0000000080)={&(0x7f0000000400)=@newsa={0x13c, 0x10, 0x413, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0xfffd, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@rand_addr=0x64010100, 0x20, 0x3c}, @in6=@private1, {0x0, 0x7, 0x800000000000, 0x4, 0xb5f7, 0x4, 0x20000000008}, {0x100000001, 0x8, 0xcc, 0x8}, {0x12b, 0x0, 0x3}, 0x0, 0x4, 0x2, 0x0, 0x1}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x40}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20}, 0x8090)

3.932696589s ago: executing program 4 (id=4776):
r0 = socket(0x10, 0x803, 0x0)
connect$netlink(r0, &(0x7f0000000280)=@unspec, 0xc)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="6bb6e5fef2e9fc6442967cf89f4318586ca5ad64342fc85f07364938787cfe27222fefeccdd2452d861e051bb9d6252c43fb6a8335a9b51e9dced2a5767f3eb10e6673385a16d0ef76ac9337fb2b5431c413bb", 0x53)
socket$alg(0x26, 0x5, 0x0)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x34, r1, 0x1, 0x0, 0xfffffffc, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}]}]}, 0x34}}, 0x800)
r3 = socket$packet(0x11, 0x2, 0x300)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newnexthop={0x28, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x5}]}, @NHA_FDB={0x4}]}, 0x28}, 0x1, 0xa00, 0x0, 0x24008000}, 0x4000)
setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x0, 0x20300, 0xfc}, 0x1c)
syz_usb_connect(0x9885f221b8707a61, 0x5b4, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0x92, 0x71, 0x2f, 0x10, 0x1410, 0xa006, 0x6197, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5a2, 0x4, 0x0, 0xfa, 0x80, 0x8, "", [{{0x9, 0x4, 0x1c, 0xb, 0x2, 0xc0, 0x26, 0x3f, 0x7, [], [{{0x9, 0x5, 0x80, 0x10, 0x200, 0x91, 0x6, 0x7, [@generic={0x23, 0x24, "39cf32d7567e7b9989784a11fb8301cda72d0e992866d213e5c129bf2c04f23352"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x81, 0xff}]}}, {{0x9, 0x5, 0x4, 0x2, 0x3ff, 0x3, 0x6, 0x9d, [@generic={0x90, 0x23, "24465a300ffa4d500d693fa411d68e79421892756309a91435318e57be82da9fb3a8cec8ec6aa2d86e10903df9bf34fc7ecefddab9f78e4ca61808524e061961fe0169a595ad7e723ab07e0ecd7ebdf053ca910908f1a495f30bc2b87239af8d1ba5f457b6255ceba98368ad4bbbe3a9f4cc40fe623fa2369b7516f6aac904af9ebb82939f39e59ea4be69ce394d"}]}}]}}, {{0x9, 0x4, 0xab, 0x44, 0xe, 0xff, 0xff, 0x30, 0xf9, [@hid_hid={0x9, 0x21, 0x4, 0x3, 0x1, {0x22, 0xdd2}}, @hid_hid={0x9, 0x21, 0x6, 0x1, 0x1, {0x22, 0xb}}], [{{0x9, 0x5, 0xb, 0x1, 0x400, 0x8, 0x5, 0x0, [@generic={0x15, 0xc, "998fca8f9a6e8a83660386e2497419b3bb0935"}, @generic={0xbd, 0x22, "ab630351a301a3963e59f351ca8b5e4398119834e9143d95f62ea4058e249a1180720d4fad5e90dc237eb77bc041002918b2bd0e8f530e8326f5247793fac69c1ed250fbf2537c3d81166620974839e12194d5a1a2299c4be013ab440f59e64adf2e1de8905d8ff76127584d5bed4b6bd6f4d66b521cbcc3c41cab595588033b2ab670664956fcc813c15e2d62a5603b15589106d14e995b5c9e2ebfd8dc8ed751a0e2cdeed9af8b8610d8cdac684b0917f06d6010ecdfd8e14f56"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x448, 0x89, 0x3, 0xc5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x73, 0xfff}]}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0x23, 0x4, 0x9a, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x80, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x5}]}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0xf8, 0x1, 0x4}}, {{0x9, 0x5, 0xf, 0x10, 0x7bf, 0x6, 0x4, 0x6, [@generic={0xdf, 0x21, "59b582f81929285363bd33b803167f52a94acf2c235d2ecb4bf6e893caccb74f5c67da1a8f828a69e597c8f636d5d9b09222c5369df472a0bf012f74dc16e4799a2a94c4f94ba62cb6b033ee9297580cd49a001e3d511f33b21183cfd0239e4c8ef2a6ebeae052dd873a4f99870ce27f418f05847e994311a07bc675ea079e566e2aa4715fc6219a9ec92501cbacf4f8d57a83be5b65f38b5df5422d05c930e6f0b1d0daabb9e2c8ec05efc69ff8c89dbbe5071ed666bb1fc917085123dc8ecccbb7e1ab0fd6865bfa7a4d56293cffdcc9f7632041c821dea2c36d05f3"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x8, 0x6, 0x2, 0x5}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x5, 0x0, 0xff}}, {{0x9, 0x5, 0x80, 0x4, 0x400, 0x9, 0xf, 0x2, [@generic={0x82, 0x9, "68a8f3491e83f9e2bd0b95f505df2e33a03c5e473f1e4ed3aa67e166a355dbee55d5e75c5f4ba0f77f6ec76a15d6a17238a8eb91d5abc2bce1b5d8da316775e6910bc8a0dd512a018e1bb76b33d6faf37d2e507afa4b4b7f6f8eea2522e4c18be32fee0836220b8365d54827c20de988e93eb5837d282528642ceea6da3df77d"}]}}, {{0x9, 0x5, 0x4, 0x1, 0x10, 0x6, 0xf, 0x1, [@generic={0x34, 0x2, "64c01bb86a9ebea981b6ca6ea0ee1a00afe19288f2679564b0de3091108c452bb59b3624c423b95a018a5715f0d8f1395e1f"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x1}]}}, {{0x9, 0x5, 0xf, 0x8, 0x10, 0x3, 0x1, 0x14, [@generic={0x42, 0x0, "ac0673bb40abbb094d0739f7e6e9b62230112a792498f4e10fc24a5a108d56be57606946a236689a996abad42e979fa4147fbc796c4275575a34e18ef1ce9f82"}]}}, {{0x9, 0x5, 0x6, 0x19, 0x20, 0x0, 0x4, 0x3a, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x29, 0x80}]}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x3, 0x40, 0x6, [@generic={0x1c, 0xc, "30ecbfbf250e43c79401d6877ffb54909feadb5a9a7551de6d84"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x20, 0x3, 0x6, 0x81, [@generic={0x3d, 0x9, "d636bae79bda9b3394b1beff65f7176502f44da80f1ec58cd878e22e0afd7f3f9787c689dd83212186b2f3fa786b26f7eba2e2c28354e999776e78"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x3, 0x8, 0x4a, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x7fff}]}}]}}, {{0x9, 0x4, 0x20, 0x0, 0x3, 0xff, 0x5d, 0x1, 0xbc, [], [{{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x3, 0x0, 0x7}}, {{0x9, 0x5, 0x0, 0x1, 0x400, 0x9, 0x1, 0xfa}}, {{0x9, 0x5, 0xe, 0x1, 0x40, 0xc, 0x4, 0x8}}]}}, {{0x9, 0x4, 0x8f, 0x6d, 0x4, 0x53, 0x67, 0xff, 0x0, [], [{{0x9, 0x5, 0x8b, 0x4, 0x40, 0x8, 0x4, 0x8b, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0xf32c}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0x4}]}}, {{0x9, 0x5, 0x2, 0x4, 0x20, 0xd6, 0x80, 0x8, [@generic={0xa0, 0x11, "14e77f91a28a71b6cff09ce24ab8207c21ffdf61eab4459ea4be2460f19d0f19fb5c4c76b866489b65860bb26f42516c7a6450047ab1f02002c24032495c5b4cd252c237045716507d8b268361088d12815cbdd4375789b430ca466553859d3a0ecddb9c1767bde259009a0d8e982e23b1323199b693eae01f53b89ae7d37eab230adfeb7228b3a990a71fc078e690c67e847378f955424687be13e53d39"}]}}, {{0x9, 0x5, 0x5, 0x9d588d8b405b51f4, 0x400, 0x4, 0xb1, 0x9}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0x0, 0x5, 0x7}}]}}]}}]}}, &(0x7f0000000a00)={0xa, &(0x7f0000000880)={0xa, 0x6, 0x201, 0x9, 0xeb, 0x0, 0xff}, 0x5, &(0x7f00000008c0)={0x5, 0xf, 0x5}, 0x1, [{0xef, &(0x7f0000000900)=@string={0xef, 0x3, "b725bfcdda4202d4f3dad955da3c8a47a1e7e34686a89069d5b4542efd677f4afd19b4d50a5ffbb0f608fc98ff5145d37f023324bd95adb36b71381ae7b8275e19339d696d4c46283d24129c0461f0d999b3634207d5ee90a4322167723360b5b085fe91ccf03d4d1249201cc27f89b1f70075772b652be5b8dccde0174d017486212d3333c0e2da3dfcf0a744e51438409a44a583a3fe0fa7a301db45fefb40d1e3f5def1c8ff5295b15973d19e8e22d24cf5af5bd72b78b0768235237aa3a26ddbb3612d334eff1c2ac2f1d976144ef25c62e5c2f55e2d6a54c504ee8b95a53c63f2efcdcac099af7d171909"}}]})

3.742416972s ago: executing program 0 (id=4778):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12aaf1e75c40000004000000020000000051c1c92ad10d3ceb1f4cdbe1ec7fbbfd5cd4294783fe91f1008115bd9a53d4961f13abdf93f6f27aa72686a7a31fc18618621b6b31b88e0d17f8a27831fef50200eb5a740f2e83ff3f8f4b1f04afbdb5e4702eabd7eba5d13f9cad41e87c6951115f314710f331720ebefec0f7", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400009118f32f850000000300000095000000000000007877c062e90c59efa9d4e8fa7be545b5042c3cd8e6854f14599a54d9bf224dd45b76180f34757b2810e7de95f288d54feb554947fc4c054230a30b551ca6a9a03998761b04a62d42644677fccf0742a0f6499dee054d3d62501cbf7f8cf40b96c2346bb80414"], 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000300)=r3)
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd1}, 0x50)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00', @ANYRES16, @ANYBLOB="010000140000000000000200", @ANYRES32], 0x40}}, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x48, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x48}}, 0x4000000)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e", 0xc2}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044)

3.410384531s ago: executing program 1 (id=4779):
r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
ioctl$OCFS2_IOC_UNRESVSP64(r0, 0x4030582b, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x9, 0xffffff23, 0x3})
syz_usb_connect(0x2, 0x519, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x7, 0x6f, 0xa0, 0x20, 0xaf0, 0xc100, 0x21b3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x507, 0x2, 0xfa, 0x2b, 0x20, 0xf8, "", [{{0x9, 0x4, 0x29, 0x4, 0xb, 0x4a, 0x9a, 0x6e, 0x9d, [@uac_as={[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x81, 0x1, 0x64, 0x7, "d773a8f5da"}, @as_header={0x7, 0x24, 0x1, 0x4, 0xc, 0x4}]}, @hid_hid={0x9, 0x21, 0x1, 0x24, 0x1, {0x22, 0x7}}], [{{0x9, 0x5, 0x4, 0x4, 0x1b7, 0x1, 0xd8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xd, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x5}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x3, 0x9, 0x24}}, {{0x9, 0x5, 0x0, 0x8, 0x400, 0x1, 0x1, 0x3, [@generic={0xee, 0x3, "78f359571f13c70e2d95ffb0123682031e9f494b675c1983489285ee029380a572a6d664c73045acf6bbbaed182fe283cb99339f4f355fdc1df0ceb5597dc044800ac48a9001f6bd42ccd4bc6e71621f23a788a1421debcdb6314181200f88ffe6d03f6a3aced984b4bfcc80084bbe46c656d180c124d9efff6cc03e76985fa4d1e082c13eaa87160417585ade4eff5e25c90c243a6b1736398ddac65a93fc842354aeaa3a43d6d76f95b73189d2ca7b0a917eaa3ec1e5d0d047378001b8db0300d8017d681666ccbdaa69c5ada2d17acbe7e31f1ba00e8958d3ba81ddcc78f8646d25fcf11922e7cbec34e1"}]}}, {{0x9, 0x5, 0x5, 0x1, 0x20, 0x9, 0x1, 0xe, [@generic={0xdd, 0x9, "ebb40482742336bdddf7ad2d1f587c1034d27ffc873a07ff640bc73cda44205b45f57bf2e9f00fcca3edf2a9141f0b7f1cd49fc837640140654be7436f5b216e3dbb057793be3fba91492aa31de178f610f7b5e846a2883fd27ba61a2bb2502771fcd8bc6f6e5f9136b1404db304dbbae7f7efdf031aed347f0d7205b6807b060c08d8eaf03f30efff47eae8a7222cd66420ed1d5340fe451c8fe826c6c380fac756a0158156656670c41768547f9bd98d1a2523f113e6938040437b50d3a81b8eaee5ce52f03b34237da0f687d11d8f914fb430dbbc7b2b257232"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x1, 0x6, 0xc, [@generic={0x7c, 0x0, "82c35d86f28f46f79354bb4a7ca29125ecafa9727c1f3a0d9d30f53c7e6a8d178a9d5a345ca677c95f778b7e28d37388d1520ef4d2112b48d87da354b2cd3ce4af56dec529c44d4ade8cff97050784f52fe84e7bc65ccfcc86c0543e6aa480ada73b81c2417753cf6c8e350e2ed40e26bf9d58278c392d1d6966"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0xd6, 0x9b, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xe, 0x7ff}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0x3}]}}, {{0x9, 0x5, 0xf, 0xc, 0x40, 0x7, 0x4f, 0xff, [@generic={0xef, 0x30, "cc66144a55f17f062e916bc089f32aafca2b5ee6033cc328b44b71dfd666a442687ea64435433faf79ce829b5f045aa5acc350fe25102a4562a0b7978c9297bf4896f603b0be5c37050fee0a80304dc099b12b63bf5f522474e7969acc4c4adec498ff52957c64eda6ac0d27ad361589d879c69d377bf8b1d85c86fa3a2fcbdf44efbc7e323517d29f06244bb594c173db09748d9919f510e96ae0f99e1c072c170d7832cd0870f7f542dcfdbae4faff64b3bc616f06d11cfa8e6ba5c7fb97159d8ee7ed9d4ed611d72d80c1d9ac2e8f847b734a44bb6d57c92376d406bc3dbe95e8f9c74ce327c6c2da8ad5be"}, @generic={0x6, 0x5, "b444fc8f"}]}}, {{0x9, 0x5, 0xc, 0x8, 0x3ff, 0x1, 0x7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xe3, 0x4}]}}, {{0x9, 0x5, 0x4, 0x10, 0x3ff, 0x0, 0x7, 0x35, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xc, 0x1832}]}}, {{0x9, 0x5, 0x5, 0x2, 0x20, 0x20, 0x20, 0x1c}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x30, 0x6, 0x1}}]}}, {{0x9, 0x4, 0x0, 0x3, 0x2, 0xba, 0x69, 0x6c, 0x3, [], [{{0x9, 0x5, 0x4, 0xc, 0x400, 0x3, 0xd7, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x13f5}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0xc7a}]}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0xc9, 0x6, 0x1, [@generic={0xe6, 0xe, "d9ba5d3e855f7bb719f37595c5f33e8c36fca68879d3197ea521a3834acd7986d1ca89050dd96736c3abcfd72adb980a53a4bb3189da24fc0c0cbc4f2ada21ffa27cf666560e50a59314246e517479cfe8fbf497132eaf4f6712a8291efaea32732b239ceece0ed10172613dfd6cfda216b8a38f37775a05cc05d03b94fdf205699874e229d06d2c5a2144206fbe5520928b0e1ab26f727895b758d4c93f4b48e088f61ca53bfdb654520991016578d54521168e0ce804e647494a88ea00b474cdd73c080abea48eeacf60296423d2dd181637020e5358dc155a6f136e8add5e64d6c4c4"}]}}]}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x310, 0x2, 0xfd, 0x7, 0x20, 0xc}, 0xf, &(0x7f00000005c0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x38, 0x90, 0x5}]}, 0x4, [{0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0xc0a}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x380a}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x439}}]})
bpf$TOKEN_CREATE(0x24, &(0x7f0000000780)={0x0, r0}, 0x8)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000008c0)=@broute={'broute\x00', 0x20, 0x0, 0xc0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000800], 0x0, &(0x7f00000007c0), &(0x7f0000000800)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x138)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000009c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000d40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000d00)={&(0x7f0000000a00)={0x2ec, r1, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x57, 0x1, "7280107f833951d9b31e9e70abeb3506c1e24e972e9c6257b728ec0bef78cc2cca01b97195196e1479600a3a08ad1564b2b06ed3e7fffa2e0a4ea93f1ce298d89a9eb50e3af76cc096354e3f80a2b603b7e229"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9277}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x25c, 0x3, 0x0, 0x1, [{0x108, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x103, 0x1, "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"}}, {0xdc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xd7, 0x2, "77a058593dc73accb11272225690f1cc559410a455a872477721080e25aac80bf724609bba561ca460bd226c228bf3c31164c8c9518e3bf7d0c0035edab3ad701f32ababf03f7104daa5a1ee41d48ddccec417d196834e39cf644197351bab05986ebd359399d7d6c88e27f16dc938abc6ad89056d4561cbea6275c2c6e3e4dc64309e8e59d448daec7c89ec639fc943e886b24ba951d2efb8ba56292a3841ea00869d87b1f4dc23073f35996b95aa17c2c93a5a518b67edf64e9b51df529adc213df3331cd7fa9f1538098541eadff1212c1f"}}, {0x74, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x70, 0x2, "2e201c3042b8f1c0e5cd1b4fc553e5c8701514eccd0317a88a3810cf99d742cf9dd2aa0de47ed9616534eb2f56b87d642f368528d271cf62a7e60757af49ea0cc10c9e2cc3c154a7daa4e7f2e92d25c0f04edbe8b1bf023bc7dd69d18e426defe484fb8acbf9d8e5356ebc15"}}]}]}, 0x2ec}, 0x1, 0x0, 0x0, 0x20004000}, 0x4800)
setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000d80)=0x4, 0x4)
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2080, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x38, 0x3, 0x8, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8809}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x892f}]}, 0x38}}, 0x800)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000f00)=@assoc_value={0x0, 0x7f}, &(0x7f0000000f40)=0x8)
sendmmsg(r3, &(0x7f0000001600)=[{{&(0x7f0000000f80)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x80, &(0x7f0000001340)=[{&(0x7f0000001000)="58c58527ab75208944363864b03fdaabd1a51e1ee964fd9fbc3b5e955ab41a51aaf8faa96e150543d08983527e7e04d1f0bbec3cae7f7ba8a2214e40a7fe74e793de86285c4f0c4fb3fe01965d185f2d28502473e834fc288e0eca45e784f029724a004ff4c6384da7afa5e14932fd92e30a845f1b57c390046e536e216f16038f12cbf73efd18d1b9b17c0fe25680730bef2af2a9", 0x95}, {&(0x7f00000010c0)="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", 0xfd}, {&(0x7f00000011c0)="a99fe7ebccf7cc52d1cc978b77313afd8ab5", 0x12}, {&(0x7f0000001200)="a9143cf51bf7c66612b02509fff30f3076e1f6fd5907d57b45b9a8adc7238b3587bb1f5124e2946da9a3aa5e82a93de616bf9f3308702b2022718e38731d734b2fab40ee3141b9f532b037872e727987a0421f26970a6f24e03d8ac4b002eac83f815804152f8474d6875fe4fd1bf426dbf632b3451badb3f9380568babb685f4549e02cc1caa50d7131f52cca00d2b5a8a75e2e4e1089bad6cc697f59d93cfc4511d5", 0xa3}, {&(0x7f00000012c0)="23a1fb6c0b36373d6112e50df011af8a27cef4f478c1617814755c3840bdc9aa69bef6b1c4a9558611656790de330f287a22f3645b8325a008c8cd0d0ce6a4dfa951b6abaca4e280de304bdb9136f7a7539f00197c10ab3544032b25f5a2f5", 0x5f}], 0x5, &(0x7f00000013c0)=[{0x108, 0x119, 0xe75, "6beb8d9e5f57d4afe03c412e08c40081b9222d3fd5bd17013545fa4b8b4a311d1c2192867b5c5cdb928b94678aca8e5dfb1a306820a888f9d7b087607a0834bab59ad20eec7654abd87980813fe6d3b047e485f9f4eca98531433941e73aef5e7a6b3736088962c3347eac34bfbfa64a3d7292f2618701cccb46589ba8cb56a96c07a7fa6a39b1d82767b2b77bab3a8d364ad45b6c9602f171fd2caf5d8a00e712b032036f7824403a960492c73e99b6884caf655271f11471d764cb70ee97a4d2a944441f6f308ac1160c11602ff55b2aee1a7ab09aecf2770ed60c25c5c512a630439e356bf75169d156c89705f3b1507abdd38b42"}, {0x50, 0x84, 0xb, "92c8e350b8c20649cc32cfe8059303590c189801a65ff9a9785d59c068fb54f42537c268fd4e320d39f8a4fcc9286e10ea5b9824fb44c65e83"}, {0x78, 0x116, 0x4, "ab5e2f737b599b9d70242b801bac8234f67547ba08ef62783c3fda86c32a3ea2a2b4cd1167cbf460395fd1f3e815dae1660b0c011a946bd4f3c816765e9503809afa1f40167604db96fd986362395831f2672452ae08f5d7a24245fd5b2b12e5314704dc3a"}, {0x68, 0x1, 0xa4, "7540346171fbc47b83b5633b46e86bbb2bac7dd01cadab9cb0614ae01b753a4c39305c76bfb36f8e7e05e4e5c4e7e32ff3c52f7454e8e18f5f2435472cafa96ca234b37bb664b9a8b47dd91f6eb24c4da3098757"}], 0x238}}], 0x1, 0x400c081)
r4 = add_key$keyring(&(0x7f00000016c0), &(0x7f0000001700)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa)
add_key$keyring(&(0x7f0000001640), &(0x7f0000001680)={'syz', 0x1}, 0x0, 0x0, r4)
sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x38, r1, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3, 0x24}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1d2}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004804}, 0x890)
landlock_restrict_self(r3, 0x1)

3.399426108s ago: executing program 2 (id=4780):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0)
close(r1)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x6c2280, 0x0)
socket$kcm(0x2, 0xa, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x2, 0x300)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$inet6(0xa, 0x3, 0x8000000003c)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090)

3.399172837s ago: executing program 3 (id=4781):
getpgrp(0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
close(0x3)
shutdown(r1, 0x1)
prlimit64(0x0, 0xb, &(0x7f0000000100)={0x2000004, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x10e08a00, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
sendmsg$nl_route(r4, 0x0, 0x8000002)
r5 = fcntl$dupfd(r4, 0x406, r4)
read$FUSE(r5, &(0x7f0000000340)={0x2020}, 0x2020)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x109001, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f00000001c0)={0x7, "fa02791d2a69a2610f02000000000000001100010000000800", <r7=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r7, <r8=>0xffffffffffffffff})
r9 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x28d00, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000400)={0x7fff, "8a6035ceeae3ecc40017afad010000000000000400000000000600"})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r9, 0xc0285700, &(0x7f00000004c0)={0x9, "34e6498c270e0000b56a000005000000000000000000000000000100", <r10=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f00000000c0)={"0e337b42cc00d331ff0007000000000000001a00", r10})
close(r6)

3.242137624s ago: executing program 0 (id=4782):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0xe8c, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008000c"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0)

3.184467932s ago: executing program 4 (id=4783):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r2)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r3, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x4000000)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}}, 0x0)
write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYRES16=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000480)=[{0x3, 0x4, 0xb, 0x5}, {0x1, 0x4, 0xb, 0x5}], 0x10, 0x3}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000140)=ANY=[@ANYBLOB="aa780ab083aaaaaaaaaaaabb080045000070000000000001907864010100ac1414aa0bba907803000000450000000000ffff0089000000000000e0000001862a00000000000d5e000000ff00000000000000054eb8a600129606053d0006ff00800000b61af93a93831300ac1414007f000001e0000001"], 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, &(0x7f00000000c0), 0x4)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000200)={0x1, [<r7=>0x0]}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000580)={r7, 0xf5, "1f6473a8cb3169f45ba350000000000020e30000000000000033d1fffdaa735eeadf6f6b851652d7fc95f784b6595769678171757821c304d33fa069796915e5ffee8ca28ae1e45d4d535b6433fe8b8c54f3ae56aeb8d245e33af8e9d2c2e1a26db5cefeea6b04ebbd69b4a467bc91bf58d58e39976d8b4dd3312cedf3dd7f12b12fe4a6a7a9f62932089e84ad58bc4be86fcbe801000100000000006e7a7602663a479d4fd3613b3bea46cfcedad4063f3ef4aca407328b08915e51f88809eb644463ad4fea5a95a4a0464482eebbfd64771463be4863f0270041eee8a033c3d4534bc8ff3cb4e207faaec21b433b943348ea20f8"}, &(0x7f0000000700)=0xfd)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r4, {0x0, 0x6}, {0xfff1, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001b00)=ANY=[@ANYBLOB="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"/2503, @ANYRESHEX=r8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r9 = socket$inet6(0xa, 0x6, 0x119)
ioctl$sock_inet6_SIOCSIFDSTADDR(r9, 0x8918, &(0x7f0000001100)={@mcast1, 0xf, r4})
r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r10, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{0x0, 0x114}], 0x1}, 0x0)
syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0)
r11 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r11, 0x707, &(0x7f0000000040)={0x0})

3.079875519s ago: executing program 2 (id=4784):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) (fail_nth: 4)
setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0x304}, "611aa09f6de4ef2a", "4867f60c9366f8caca55097828d9173185df9cd607089de85deb98049bc3b01e", "7185a435", 'N_3\t\x00\x00\x008'}, 0x38)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000040)='}\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000240)='}\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006311a800000000008510000002000000850000002311b9f99e04007aa6412552683b3a539c000800"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14)
connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @short={0x2, 0x0, 0xffff}}, 0x14)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff})
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=<r4=>0x0)
ioprio_get$pid(0x1, r4)
getsockname$packet(r3, 0x0, &(0x7f0000000400))
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x14, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}}, 0x14}, 0x1, 0x0, 0x0, 0x4008001}, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)

2.570566166s ago: executing program 0 (id=4785):
syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aabaaaaaaa23aaaaaaaaaabb0800450000b000000000001190"], 0x0)
syz_usb_connect(0x5, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001d4f86540d804830047da010203010902380001020840b3090400b20102020194052406"], 0x0)

1.838509602s ago: executing program 3 (id=4786):
ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000100))

1.802367816s ago: executing program 3 (id=4787):
syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aabaaaaaaa23aaaaaaaaaabb0800450000b000000000001190"], 0x0)
syz_usb_connect(0x5, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001d4f86540d804830047da010203010902380001020840b3090400b20102020194052406"], 0x0)

1.354197271s ago: executing program 2 (id=4788):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0xa2100) (async)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0xa2100)
bind$can_j1939(r0, &(0x7f0000000080), 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0) (async)
sched_setaffinity(0x0, 0x0, 0x0)
getpid() (async)
getpid()
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
socket$inet6_udp(0xa, 0x2, 0x0)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
socket$inet_smc(0x2b, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
socket$tipc(0x1e, 0x5, 0x0)
r2 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

1.19288209s ago: executing program 3 (id=4789):
r0 = getpgid(0x0)
tkill(r0, 0x1)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000000)={0x1f})
r1 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000002c0)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x3, 0x9, 0x8})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000300)={&(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[{}], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x1, 0x4, 0x1, 0x0, r2})
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x8}, 0x10)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xa)
ioctl$KVM_CAP_XEN_HVM(r3, 0x4068aea3, &(0x7f00000003c0)={0x26, 0x0, 0x4e})
r4 = socket$inet6(0xa, 0x5, 0x7fffffff)
setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, &(0x7f0000000440)={@mcast2}, 0x14)
r5 = syz_open_dev$vivid(&(0x7f0000000480), 0x3, 0x2)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000540)=<r6=>0xffffffffffffffff)
ioctl$VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000580)=@multiplanar_overlay={0x4, 0xc, 0x4, 0x800000, 0x8, {}, {0x4, 0x0, 0x2, 0x7, 0xff, 0x88, "0f9f6758"}, 0xff, 0x3, {&(0x7f00000004c0)=[{0x7, 0x3af0a52a, {0x2}, 0xfffffff9}, {0x8, 0x3ff, {0x2}, 0x5}]}, 0x4, 0x0, r6})
r7 = syz_open_dev$dri(&(0x7f0000000600), 0xc000000000, 0x30000)
ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(r1, 0xc0386447, &(0x7f0000000680)={{0x8, 0x1, &(0x7f0000000640)=[{0x1, 0x0, 0x9}]}, 0x0, 0x5, 0x90, 0x1, 0x0, 0xfffffffffffffff9, 0x0, 0x3, 0x0, <r8=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01864c2, &(0x7f00000006c0)={<r9=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01864c2, &(0x7f0000000700)={<r10=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01864c2, &(0x7f0000000740)={<r11=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000780)={<r12=>0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01864c2, &(0x7f00000007c0)={<r13=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000800)={<r14=>0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01864c2, &(0x7f0000000840)={<r15=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000940)={<r16=>0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01864c2, &(0x7f0000000980)={<r17=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01864c2, &(0x7f0000000a00)={<r18=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000a40)={<r19=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000a80)={<r20=>0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000b00)={<r21=>0x0})
ioctl$DRM_IOCTL_PANTHOR_GROUP_SUBMIT(r7, 0xc0186449, &(0x7f0000000cc0)={r8, 0x0, {0x28, 0x5, &(0x7f0000000bc0)=[{0x8be, 0x44f5b8c8, 0xf0febf3ab10ce600, 0x7, 0x0, {0x10, 0x7, &(0x7f0000000880)=[{0xff, r9, 0x3}, {0x0, r10, 0x1}, {0xff, r11}, {0xff, r12, 0x8}, {0x80000000, r13, 0xffffffffffffffff}, {0x0, r14, 0x3ff}, {0x80000000, r15, 0x7fffffff}]}}, {0x800, 0x9f15f8b8, 0x7695e9c09087e340, 0x3ff, 0x0, {0x10, 0x0, &(0x7f0000000900)}}, {0x7, 0x7f6df8d8, 0xec29a3a2432e0040, 0x6ad70f31, 0x0, {0x10, 0x2, &(0x7f00000009c0)=[{0x1, r16, 0x8001}, {0x80000000, r17, 0xf000000000000000}]}}, {0xfffffff9, 0x2a472868, 0xaa3deae9bb422180, 0x4, 0x0, {0x10, 0x3, &(0x7f0000000ac0)=[{0xff, r18, 0x8f94}, {0x1, r19, 0x7}, {0x0, r20, 0x4}]}}, {0x1, 0x2c1794b8, 0xb9705c1525673700, 0x5, 0x0, {0x10, 0x2, &(0x7f0000000b80)=[{0xff, r21, 0x3}, {0x1, 0x0, 0xc1}]}}]}})

1.150001263s ago: executing program 1 (id=4790):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newsa={0x13c, 0x10, 0x413, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0xfffd, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@rand_addr=0x64010100, 0x20, 0x3c}, @in6=@private1, {0x0, 0x7, 0x800000000000, 0x4, 0xb5f7, 0x4, 0x20000000008}, {0x100000001, 0x8, 0xcc, 0x8}, {0x12b, 0x0, 0x3}, 0x0, 0x4, 0x2, 0x0, 0x1}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x40}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20}, 0x8090) (fail_nth: 6)

1.121320541s ago: executing program 3 (id=4791):
r0 = syz_open_dev$sndpcmp(&(0x7f00000054c0), 0x0, 0x40)
ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0x40044103, &(0x7f0000005500)=0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0xe00, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008000c"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0)

990.448852ms ago: executing program 1 (id=4792):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001480)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xfa, 0xfa, 0x3, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x4, 0x4}, {0x4, 0x2}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1}}, @type_tag={0xa, 0x0, 0x0, 0x12, 0x2}, @volatile={0x10, 0x0, 0x0, 0x9, 0x5}, @datasec={0xa, 0x1, 0x0, 0xf, 0x2, [{0x2, 0x9}], '^+'}, @union={0x5, 0x8, 0x0, 0x5, 0x1, 0x81, [{0xc, 0x1, 0x800}, {0x7, 0x5, 0x8}, {0x6, 0x0, 0x4}, {0x10, 0x5, 0x4438}, {0x1, 0x2, 0xe}, {0x8, 0x4, 0xfffffffd}, {0xd, 0x3, 0x8}, {0x4, 0x0, 0x8d}]}, @typedef={0x5, 0x0, 0x0, 0x8, 0x4}, @var={0x10, 0x0, 0x0, 0xe, 0x3}, @float={0x6, 0x0, 0x0, 0x10, 0x4}]}, {0x0, [0x0]}}, &(0x7f0000000480)=""/4096, 0x117, 0x1000, 0x0, 0x6}, 0x28)
fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1000)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x8900, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x9)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6)
sched_setaffinity(r6, 0x8, &(0x7f0000000240)=0x2)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x10, &(0x7f0000000080)={0x80000001})
ptrace$ARCH_SET_CPUID(0x1e, r6, 0x0, 0x1012)
write(r5, &(0x7f0000000040)="240000001e005f0214f6fffffffffff8070000000000000000000000080009000d000000", 0x24)

723.918286ms ago: executing program 3 (id=4793):
syz_open_dev$tty1(0xc, 0x4, 0x1)
unshare(0x6a000000)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, 0x0, 0x800)
recvmmsg(r0, 0x0, 0x0, 0x40012100, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x90000000000}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)}], 0x1, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000280)="0f01cf66f30f52af0060000066baf80cb808de698aef66bafc0c66b8000766efdbd5b9b50800000f32c4e2aaf5620ff3660f32c4e1fd6f4ed466b8da008ec866baf80cb86481d389ef66bafc0cb8d4600000ef", 0x53}], 0x1, 0x43, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r7=>0x0})
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000380)={0x1d, r7, 0x1, {0x0, 0xf0, 0x3}, 0xfe}, 0x18)
writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000080)="600b93", 0x3}], 0x1)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

580.799877ms ago: executing program 1 (id=4794):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
ioctl$SNDCTL_SYNTH_ID(r1, 0xc08c5114, &(0x7f0000000240)={"ded740a45441268041041d7b32576cb5d9fc0cbb3d1562d26d06fba437cb", 0x7ff, 0x0, 0x1, 0xff, 0x101, 0x4, 0x8, 0x0, [0xa, 0x8001, 0x8, 0x80, 0x0, 0x2000000, 0x7, 0x1, 0xffffff03, 0x48, 0x9a, 0x80000000, 0x98d, 0x2, 0x7, 0xf9, 0xffff, 0x1, 0xcc91]})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x4040000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000050900020073797a32000000001c000480180001800d00010073796e70726f787900c72b"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
statx(0xffffffffffffff9c, 0x0, 0x2000, 0x800, 0x0)
chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff)
sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0xe0}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000000030603000000000000000000010000070900020073797a3100000000050001000700"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x800)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000140000001000010000000000000000000000000ae0d1db3d4cad2591ebfc796585abc264205bf076b8cf87c91ab7a18dcb85d1261d5dede7572438cb2db935599601f2945dfa6147b18d208ec0f218c2ba9126494373165ab360534d4500d8e1d7a37c5ef6a3ab4489bfa9e8bbcf5dc1b5e6e77df2cbe49fb19e742ed1beeabe50"], 0x54}, 0x1, 0x0, 0x0, 0x20040841}, 0x4800)

422.062114ms ago: executing program 2 (id=4795):
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0)
r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x38, 0x2}, @cond=[{0x2, 0x5, 0x40, 0x9, 0x8001, 0xfc01}, {0x9, 0x6, 0x401, 0x3, 0x2000, 0x8}]})
write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, 0x0, 0x42)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_emit_ethernet(0x87a2f, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f0000002140)={{r4}, 0x7, 0xff, 0x2})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000010540)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000280)="456f6dd684989b7f267855dce7ff285b6c462c347d25feadd7ff12f82decbdb38d", 0x21}, {&(0x7f0000000300)="07ed6843f406cc420786375166714f5cef50470973f36794", 0x18}, {&(0x7f0000000340)="298afa5e6582ae2135b69d1cfd9d38099e2dde8ab175a533608581559ffe38a7534f4586b9c217923f8250d48478a74e171f2276202e3bad4f3a27c1857f55dd566ce64da086060efdd9eff3b751cf8b6d6eac00deb49f66d35d01a75e276bf0cc58848b38b270ac6581f3cb9df86a390285563fddac13ff4f77afa8187c3784ab60b6514f44f71aad53818d9234bd6cdbd8f4ed04b899b01b5b22ab6b577c1ceea50b323282d8d90b72695dac540048cd6122b9bfb75c8128c8596f44bb6d88c6ea47a201f35ecc59720f65b71bc8d1cf95584ae5f0e9ced9c0cda067cdfd726a1fe2c632c25c8dd3ce", 0xea}, {&(0x7f0000000440)="a3952a5c860ca0670e08e8b709c226fcb2935e10f0afa883f6", 0x19}, {&(0x7f00000004c0)="a4d556fd93d55b990b53be938a70fd4d3e097cbef0ec1f5b08043aa9b2787023b299402af0408ef9d67c004ff57c971512f6c0e86a262ea18cfad9dff54638d595b3fcbf106d268aa87daca641b36d99d4b1bb79dffec01e65dfa5af9351949c049e10d2e4970dc4a6f0ee35979d79a9273c4686fa60907320c2586c711118e3e7d62e973bb8a56ee24bf6459cbba5985fa035d057f8a872b009c884cb26f4032b94f1b633275dca9cf34b948b1ccbd7842bb3a7b07aa28aaa70d38be7ee8bbd04ae821605d6aa2f9da975500cd40f6a23a747ffe30a9748be05e7476e66c8e31965343e2036af7cef927dca1438d3a30e7a7c28d46b51ccdb", 0xf9}, {&(0x7f00000005c0)="72c2fa5c34120e7b6fd301307a19f8faadd08cd4523a25846be2f6a1087829432c26f023c694e564be19478ca13438b8cfb1264822c5916d16aef41b7d0b95083d5ebf8b1cde", 0x46}], 0x6, 0x0, 0x0, 0x22008010}}, {{&(0x7f0000000a00)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001d00)=[{&(0x7f0000000a80)="1b55c7b11a1e5a3d0e0a8cea5c092daab14d29dcfcfafcc0bf2d4977af9597e287a81f61520aa95badec190f115530ec7d4baab87f875357869fe265171eb0e77c2431f95105d2f3192124f3b64f272cfe0437824dca50c8ab12e97d28e1ea4d809ee63e026dacc6ff4d89810be6eef9ba47278262ecb0397cbc4fe5703dab0aa0e11f812306c4d08bba3c25558721c4", 0x90}, {&(0x7f0000000b40)="44450d6b27d1291c38b3ef95fa53a3f3ebc2b5a356cae9f89aec771d1bec587a2affe3b7f2404c3db18bfa535d1a2cfbffb1f166fbb2623084676e6867fa145c85f478c4de3402410b7a271d73a3102615c94e42daeb5bcdb16845bb5f4d807135f4811ffadbdfb094a104439a6d9f52b0262cb4af9f45d043a5f238994394c5ea64b35e842e4f9885c0d90a7d9f2de43eeef3bbe42ae55cea03aa6e76d7cee1f4f60607686c1a13a3b78f02d72d30b9448d3143cc36846001cbf6c4607bcdb9cefeef15a5d8b02fe99aa63e5dc39b7ee1aa8911d6c30ba35d9eea3a56be92b7c925d99c4402b7f3f86457dd33", 0xed}, {&(0x7f0000000c40)="bfe2022181917465c296790530d5c6d522acb8f87a04b31807c148d3b6501c6ec5c871c113d84ccba7e323c320e1422eb1ef7038ba5ca094273796ec6d27c068e54da62bb7d54be4866f91e19acc80f4df181625a41ce911ac73f9ec337b33e800936ff5ecb3a0540ee7b6c364e5660a834adb5dbd4abe5dfd2c823db60c1e0c46882fa6a465bdd6529c192e86c793907677bb12186db98c5ce5d92af069f5ba0e0c2945cc9bdc43b403cc6f12bbfded705acd2b8253cb5df1fddf0037a5141e8dbdf34e11bd67b0c529be72312c9019dd7b7ee19c7e1e224fffbb87e0b5427fd3ec582d24af649b8cf3c751efaaec787bdca649d0040c8352f235cdc2ffddf30ad4ce3549301bc7044e95435a7f3f2d6c47355aa72073da7ce14761815507c027277fab129c29a7ce56e974d1bb879fbc90183a6d26c1caf489ce7043bfc880311e9c373708e6219f0e258fa6b54e43cbd1fee0a773253154c31b9c827ceb0118e6dde7b15f580f663495bdecd669772e0dfe96c716d0d907fd7cb01707d951cd39ed3227a643594974499d290e87480c2a3f21e7f0a36f614def7748b3c2934167ddb7c57b9e3df3cb4d412505c57aae87d1087acedde7bedc20401323e113b6bf9da717de207dc536b83e4eb71749130edded2af16dfb52c96c59dfd17e41400a2f2d81e24f62c7413755cb747b2ce3874bdd5b7348ea5b65fe44f01d8f2b666e978a74b660f687fd61aba590e0d2e910db37a16444bf7e93516c718b3884ba9d8b02902c8175a572a6a7dc4f0ed5bf173c2583c3cb1242759447386d39694945a1eefd78c91f68dec3252fd57692a60abae039effbdf86f7eb59241ca10e25cef27f711cd8e7c8cdc94b7248510eaed1de58ec64775fd0af074b0d09452f3f9fce126e13e277bd2bc09d9259358a413d72a88ec73b6a90df61b7c5ea776c96b355f6f633d429def32e8a44c8a8a2ac588c82d3af8d4ab0edb880bc58eec50d1e7dbebb1b22ebce74a08426792d655d921c5af2d63c1da948746f4b6cc35dd142b48152e7c7c0986cf8f3207361f4b8fb1c489b3a6eab47a16c28bec02e8a390ccc177937b7fded28d510ffee0a0086339a1ade401352f466fd9851b9af6d8fdc5fedf4081509e93d05829902a515ff397e2880af4ed07460fa865d1fcee1c2174460d4e85e570509c684f224e5b445ef8e72f209fc1c129eab86240cc88066743f041155b6ff2d1b3b45d864490d565a2899a0e5f654c8102e4ba1790979352e7df1f4150c46b6b924d90695a801bf58da3b3830ded6008b9b035c5bd967a8dd74a9b074e9db79b66f086c132d423d9593fc6a1b6428edfa8fb1062fcac18889403ee22cbef47e45aaa45726cf1cd30cb444d48bf42ae84b25b78cffcbfb9e4ac44301352f8592f3e59e7dd2b5d08711639c72f657290d88e340a7e306a35b96b3e1c33977627795e2912d833add110a1447e5561f75d90e68e834e101c1bf23dbb1f8febdd988aca54c4f6802c27c6cca89df620367d35596e5541844e51f2f67ff0acf111612acb5c5fad84cb1680df59fd41dd2babd044eb7a1814f4c23dc7a0328530084197349501704deb29042ace168551535937f88acd111e904abe25cb9c6225b9cc76fb80b9aaf4fc890725300b4bf284ebb4b015c4640fff1466047d7b4015046b4c4b0cad9d2ed7f7163bdae99ab546fd2640f94240e2252102f14051942032df6b64501fa583d799266e12da2598c8ea38691b8ad9c550fbca11e2358b603b255a8e8b710c2890c3910f3520b3ca0bf65f4abaa89f53f4b83dd085acf461f361c3c1228084f85b3fce81986905184274f30159fea1b4948fb8ec8cf620841ede979928f6161465e53dc7ecd88341c6721fd1bf1b813c6d40530ed1d71a6229bd3cb49b758b60cfce13c770239797b59b77ed47485286385be35246ed78b1abfe392154ea6ac82d580bdf658433ba5f4eb170c9a09c6726e8ff030a0e97e5efe73980121af7627e93d290adc6915f3cffdc1f5152b699011e0d4d328e912162e5882cff3812cf545e1d5d33ae1b11d62e4604bd5d7a15354f4b167ce034fab828b0daae8f86e1c78ad39c9b5eb0f97cc3d2501e67a03d273a70f58d643afa04248c85f974e559d146796dd5753368c043df1ac4512ea2932e9adbaa3c7f5181976d4fd17beb6377ce017d97276346f0d30aced1957d3100e3c3d26fbb24e45036dfad46dc5ba381c55afd29d5b57332a380e301f8e2c5de5a917207f03b7baaf5a069c99c46ee34de568cc6013c8d02f24b70bf19b5f596893941e3b3cb1dcf3ee991002f8c0057490d27c0ac4f601f4ce4c7a492fa76d42f85b6fef5700152ea190635c030c89eedb597a0f02ede63154097e5639f35c4718a52914ac7b2b057cb386efee771af91fd574a746bbcdd432a63a7175d07818215cd8fb8de13536d62eb062dab654e396a092d02419853e0114ba7bf9e273c75b0af290d846ac5e3bf5319c96cacc62e5fa100c956bfe5b8e4924a6d74d47e475ae6e9258a47d41c9eebc861800699b95a75c534f1b65ea7d86682226e00948acf51cf2b5796166c376ade772954ca2751e6bc9553edde889feb382091bc9f4be74d32b535e0989d321c640e1183996f69c6a2bbca3771fa405b0258e03b9662aeec39ca633ffec6c36df144021125651ac1bae8cc0d82b230438fb1e4108000359a2df1306e4eb6d60dbdcab7606c11e7629f7247367362cbd821c70c9e18e1fc976ebb52588bafd9ec1d70c46ef3d8390a7638e27d4e28451270c1751fdd92f43444b33617bb06647f5e01df7a6f8d618b41c3733d6204ee2c9ba294c24e3d4c6417c4e8317f8d7033669f220cbb1f165e75ca5cb16aa20300b5c0527dbac37b823f91fac9a56de5d3ca5d3cc9228b948e84f43760662a114c393276b545e4cfd7660a3fa9ef0f8276e61914259b78176ab07024c459f8bc55d28ea4409f3b1cdf4ae79f58125b0e99502d8a730318b9ccb2761e063477a7f66d92b0a4b2344b0403221d4bcedf4a11d6fdbc67f9a7d046039d016402f99595037e7512f4f9478a8cdfdd1c44626f771feb5565e5eb0d6f6fe3647301cfa9e7f6909085bb0d83ef62caede23c23cc857468a5317c6f7ec298ab48655ad71088f5c3666af83d2a1cce4146a1ac27c95531fcc1dc68eacac4e0842345549fce19125878b399f5445080b1c4c6177b0b13fccc6b23bff3d4ed6436935b46b025559705c4e67e3561b7a93d7d1d0925da61ff9d42020fa82ac6069b5ec80cdfd18cfb1764be5b4859244763178addc9052769d4a7c4eebffdfcd9b7928389f04b2a36843040ab4c17406834eafab8094bc62f3f2b7a7efeec2d98a1a77510f6fd5906d4f1f8ba6e0f92e24cbdf222c3636057eda94a5e1cba0038f4d86bf3a745cc4444fe50e2b909af716b2317c04a54740c2cd34f3a46dff42fd0cdbba4d44da797a1a7f4a1dd283014a5d40d0033ec0df6182429e514c436ab3d026fec7c8edede64944ba42b5ba88d0bdb373c1e4511dcf7d49bc0130ed5058a5ec963ec7b5907161d51dc9e74e8b620f2620c3aad7bd3c9c8e4c58167d3c2d7f84838d3533cdaf96a7415ac8b4398b69f2efb10ac32c65b64c8ceb73fe7e08bbabb455e385b3374bd1f9503ec6f794ca319de614f2f8eda91c44bbcd39ae7ca90798fbbf590c9fea6e6023b2405b1c1e91210fa23a1c96890eb6fc19a8d0ac4e6459cbb1a018671ace64dea812bbf936b4cd306dab7b633ae24844efc848719ad141c440f9ca2de92ef3f1de4200a689ec76b761e2be5586a89c90a23ba2fa62f8d108ca02702b07d628a57162aebbf38e006b36dadc52214ab0d5b99daa632ac0874b83a49a0a6bcd65e2028c758b888c14f269e65dc9acc8de384616f458e6fde20c1a34890520ac98517ad8bb4d2a6932bc3538b346c7c033ce9fde4dc2aa3f431a612a41c644f73e25960caaeb0ba246c0558c795802ad6e3846f13eee12be9f61ba992063cb66cf5f8c40e29272d66e30ea37a57f551160a5fc8dcf3ac9207b99c7a5188078e3bb9800d645cbc80a7f49adfe26d352256e9d718884c451d3fc2365fcaa78e5f1f20c17943ba77d1ff6b772d199ed883ac8e68a087b71e6b681cb483c5df1ae1f97cdd7333e79ea48aed116b79714aa3819f2d1acdd7acfc18b7b6a054b015a915d5e05a8bff0a90e7965c42cf563e2aec617674becc832449e6f41c6472c71adf190cfe8c175424decbd818823749f10ae3182051bc31147c6884f2d2aacafbbf46ed33e2ca68a630187535bf7563914510650bcd6c828e5b67797afb3cdc512dd0551a028aa027a4281db418bc409e2498a6801c07a120a6a0fae4372c29cbdef24f3cfc1fba2857f83b2d7699dac8868ff4ddc98877f081435e67ba8065572da48f487f0de60e9e3257185e2b40ec53bd2163d03c54f4c98b47c7aaebd7b93803751ab14edb7418506e7916161c572dc660a969cf7533175da3c2508e4be818a07ad829d46a2839d96bd412a060ef3db650785afe78182436d2b225782830a5bcb322cc8fb0bf0d12eb6869bd510108d7706d6540e5403d92a05dd940f31478c6e292345227d00740b1bbc2a820fbaf2e05917595c4783112cb74cb60da392028d7383aca5af88ff286b0e82b0554c4b96aa75398f9f5b6bcb8ac486ff2d61bac368fe77c9562951ed517301d51876e896a3fb03536a89c5c626754bf7916fc44c17dd8c480726fdd3f50b0c1e8b7af6363ae827a8f8859199b83bdc8a4a45d9e2d8082ac3f0b2c5496e99c270c68841792641499a1ea3034550b24c26ac4debd1dfc1290f68960cee41f6d2b16aeaccc6298f9926ab56a23fa007f52cc894d169a6ed280fcdc2626011e2a45df61f2787947dbc66661d1d653cd6c2a3e9ca8cdc3b4d5178f201ccf06c52f6a9a7f2a7cd54b7f11ace0814362a61ff81c6021da50b427ed22e4bba4bfc9fca1c4afa2d1777a5942bd9ffcbbd4879aed9a2a688c914989143a4f55427e44f616045bd85d33950fe7b663b03692eb60fdd42b2aa513f6966e39d18c130f77f2769adf379220f55c7aa0ef49992b4999f73820907b77e647146a05647474e49eaea0740a0475233a09e90ceaf4d001fb7bbda80e9c975668fb20cfa0ce5f5af92169e9b4c2a9eafd153a8a7295cf922678782a48e921a4eeb4c156125de86dc775609f6d853d29f3c3c19d2a5ba31b3b86f6e5a0ec096ea8a3cab2ad9541709a5a2b530941f463e74a818e1f848dbb9e9f9d0d0671b0f845c1d4f4a438eeb1e8ad068249ca31a3e12a0c48ab5496b1a0f713d2729f87868a4a85b530ffbc88cc2c4f3a368273ba83ad104a326f7700584899dd501db9a14ec36af779689ff727fbccc7d0c8f4fc48013c6e763804a3bd1e46aa189b700024c096c3869b9f0ca8b1fedcf29b1279478bae67643c70d8b8f58b03a61a245547844ab8300b54fde1baf2e74ea61cfd8c0b8c9b283ff9405568d7d0acd14cbfed850268ff71a5b83d00d072517933eaef62e0e77c597a97caec078595eb5291678277cf9957bd0fbf780fe6b3b318e1ea255d6db274b54d2d308c5ce42ef315fe8436217a59ac53ed244e9649048a8bd9383c13dc49190f393efe78f136d277002655ade2b66e29d2ab082124a8d5c591f7bc1538f94413745361e53f67b64434e7a36d079f73f3ecb795b0aee5288128e4ffffe93af03bdb98b59c50c0e1463b70793670337d915637aa8c45c9659567a5254cdddd25fc1156987595947", 0x1000}, {&(0x7f0000001c40)="721493d8cfd240e579d6126edd6ff21d1a11806f941bef4b52220a7434f4a566a606a1c23f66d8a7d953de52d947da8052447741492efdb8bd55b63e", 0x3c}, {&(0x7f0000001c80)="1c64ad1ed9674ff5669c4a02de0764c97a3f8b2af926d16b6012bfb27656fda5919347cfa8bd16d0e55cb3f17b6e0af0c1871c168c4a14706e7a8a0622ba95006442ac1d2276943ebddb4966169423d2fd78121164a5b97cf9acc4d32e06af37", 0x60}], 0x5, &(0x7f0000001d80)=[@rights={{0x1c, 0x1, 0x1, [r5, r2, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @cred={{0x1c, 0x1, 0x2, {r3, 0xee01}}}, @rights={{0x24, 0x1, 0x1, [r6, r2, 0xffffffffffffffff, r2, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x34, 0x1, 0x1, [r5, r2, r5, r5, r0, r2, 0xffffffffffffffff, 0xffffffffffffffff, r5]}}, @rights={{0x34, 0x1, 0x1, [r6, r2, r2, r5, r1, r1, r6, r6, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r5]}}], 0x130, 0x1}}, {{&(0x7f000000c400)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f000000d940)=[{&(0x7f000000c480)="11724fbf39cb612a48deff2e1ac7f363cbec813a43e792fe871553d24a0f31d6faca3700210232d2c00f6e9b8bde2a7094c39ec8ed703c691f68e44aa1cffb1c4aeb4bd5f30fcd96c84430af2ccfeed401c1ff4fa75bb422d9bdcdbb55fe256e60242006376265b1db93e249cbe1f34844740b275ecdfec93152723ae3ccfeb8174aac2ba9aca6516c52843fd0760fa603657481f666da10ee24c227eec96ce309963ad8080e24f16fc06344a97633b014110f5f083054055cb5759b9e31219feeb6a943c60fd115c9b35ca7eb8d4aa8b90891b9c31d5536d3147b5e", 0xdc}, {&(0x7f000000c580)="0465f7628326b8e7200e61c3edbeb57862ff4527b024f09c4abf464caf54cb099718f770b7f7c921dcd717303d889a8a3bacdee86a46b08839526b37259090272cc5bb98d6698ce0cd6427fee8358b60501cd64a150101df6649b072ebbbe2e9f29624c950cf31f88f234592f8052903537ed5e3531da01693fad65240c924e7ebd5b6872d5c6faf347fe70e1d3b911333348a2add45f19dfdcd9cb1701105ac7ad444eaf2636c79d69a4012d56e4b0f2be8d08fdef8ce59bfe769b75dce8aad2ffd6abb61018560636a0a", 0x112}, {&(0x7f000000c680)="e8d736f3c94f0ef04ca75e61b8860866a675c90fb67677b5ce89bac1ed06c242e6db21322fd4291a9b616173728ad6d30423750b6122d643c01aebdd15b8a243dc592e0d3586ec865cbf4102d5da8e9882c12d8e394ee3c75750e52fd7a3a440d8e57f08fa45221e854b90ba8a48d5478aaf5db51f642c5a474003b22ae289fd8ca15cf294c29eab4f39e583a27017", 0x8f}, {&(0x7f000000c740)="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", 0x1000}, {&(0x7f000000d740)="df64ba6ef644f2554ab3186ece3ddc46e719ac8d378bb4ada1b23c16a3a8975a6b74aefbf787161c08c6dc0192692eb9ccd24d5b1bf487f9a755a7558371f89d1a8bdc5d7879a6f26f1cf2f51ecd96885a04dfe6dbf8f7a05550575ebe92ea4269d767c7", 0x64}, {&(0x7f000000d7c0)="18b88ffff0a2f900537a1aa232ab2aa41b37d481345f0d0dfdc9fe71da7095773e12fb84fd7779ad500ba20176204268256dca4173", 0x35}, {&(0x7f000000d800)="2abd5c5db9cbd9130bb01c2296708bef9cf4b0b49ae075c3fb9bbf29a802924562471be1d832431e809bb592568fb04b083597c930f029adcd772b70163abc37cbbf595a601ddbeb0dac28dd3139afdd363fbbb87bfce84414d4b7cd1bebe3dcc734556ff0c6fe26ec372a086a67c6933af0f3b9240358d6412da46044d45dd437e79d7463", 0x85}, {&(0x7f000000d8c0)="b93365f75a3396ad064da663944de8f02bf08ed22b1f8cbf71ce99be197ab8aa98ea790c8ffe877a176274c463965345a914221de494895d752414f47f65b3cb214ec45566320995e404b54c02ef9745e4fe79dbe681dfe73c68a8d97e702d8b353b08337d76cbf7f7899abe2d7a03e95a2371424d", 0x75}], 0x8, &(0x7f000000d9c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x0, 0x1, 0x1, [r2, r5]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r5, 0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {r3, 0x0, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, r0]}}], 0xe0}}, {{&(0x7f000000dac0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f000000df40)=[{&(0x7f000000db40)="15a6deceb95068b267c7ec991d851832a429fcf2393a515f5491cebd66f73268de845db60645e8ad2b1e1509d1e62c90fa510be965d082ba3d2a8f35473125ed2d6e6cf4d3803fcf31518f438cde9e717a1bdae7d76c30c735b060f80d5f23ab78e353c80aab826af5daa4212990d26de6e4d86402f884e9c56e9037e161b7c662ff286b5261bcb45d6675edaf78c717bfb9548f483d02ec3fa6c232d52173023f6c1e926a3937aab202d239d4f727c704ac8d3bb3e2453114d4b514443eae04aa22306ffde441fb007fa2c54b810fdc54182e926cdd60cc077802a50dfb9a91b6457b45e13653", 0xe7}, {&(0x7f000000dc40)="279e623c279ade4c6eca3ec8c796ceb66f5a408bcfc1de04b37a92c5fd719e1ae8b109afd0d1c4a081f0f46ae13f058ebe39da2f5d25c1b64172b4ebb464b559993480294e94d7ea1fc223409f9bc65068146d82322d2622cbcb85816a8b07de5288843c6a07d3828ee0994b733b76e98f8de9beaf98dab7c883ab680c1d2d738328fcaccffbb2e4661fdbb92044a3eabcafde13f69a9f1e529c7fa30a8a0095b356c7447bfb2d39d83633917842506330c2e9ef186590d1711a5ea93d1a6fbce6dbfb9f2a0542f2f301ad842863e83ec13624505edf52f35556ad3789d74f929b088746fa5572dd4c93c11075995659e672acac", 0xf4}, {&(0x7f000000dd40)="e74dec1f92736a3e11f26526944064548e8910ce414d8e28807cbb12cda66a7a26acbfcc9d7c75ffc80d8607a8bb32ae73fb260b9a8c9ff8434cfc68f56dc1e7b0dcb5d08c74bc6b7c9555e304d448a7ef9593d5ee84e4070f27d3a362828e4c5b0e9697b29354c7482393191f493118fe643cd7e4b54dc5b4d7929524247fadb251473101fdda036282ac1201f153c1d7aa01befdc761aefc31ea1f2f15ae80109a6d65c4664c63b8f48d950ba4f1ecaa07b76d015e47b48fcafb87ec31a9699a2dabb77260a993dfa7bda1886193806ab949878f70", 0xd6}, {&(0x7f000000de40)="b4f33b1f4ba3e895bbfdac30ef1d3e8c5febc6f7be45c32a57584f32204f46dfc97c6a3e0c5d559b489ff47dc4d200cb4795eb73c3f03e2b769529227fb2110144c78799977fd17221f44a06eb0091fab950b33a94aa1607615fa111ce914ab4dd52c5b6ac6654dee3f90b4d968c1e9a08987d78d2c2d91642489330597c346d21a3517d968a8e223576ca29f494d92ead890fcafc60dbbb264c5f5e48610a37a2641fe9e12835cb79f602d5555467ad66e04165f5e8202fa245b212400268c19c5ddc7027b20902495fed72617dba", 0xcf}], 0x4, &(0x7f000000e000)=[@cred={{0x1c}}], 0x20, 0x4008004}}, {{&(0x7f000000e040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f000000e480)=[{&(0x7f000000e0c0)="fa3c3effbd925e64", 0x8}, {&(0x7f000000e100)="fb59bc21e4f93591c0e53a3a972dd17c316dc01436318e308503d954c2b046d53e673cee6ef8dc3f66b29ed972c573ce797269d43e5330dea11219e69d6c5d0e962be91e23e6bd6498c00b1f43a171a40981e6ece6050db544aefda8a9260362da069b978d26d2473891e2eb18183304b718b71c1556e9c057b5357686877af2eadbd4482a17bea90ddb1b8f9c31f284918e754e97b3a9ced6af27dd99fce572d226ceac7ffe177f62b0b8cfa29e961f4d7157688ce21cd31495fd1047a6356a7041582775c05fe78259f950c877f44e71ef25521afd", 0xd6}, {&(0x7f000000e200)="5b71a2b77d3facc8f404b13916cf7f936ca3e212f44aac6279f55b9a183817e0b5b89a0e21bd1a5b1d19d74bfd88d249a3ae7e096bcd34d85aa171b1aef5bd7ef28fa4d4c5d988ef921753f4deee2fb9e6975abe7bf9cd65afdb07be23ec175eb255876f2dc320ff6890a7609e3ef7d56057dc", 0x73}, {&(0x7f000000e280)="ac40b77a30feed6228a3a41e61ba8c416622ce54e6b72d9bf829089e3cd420bc2d855ab9ac98d2ee59e1d011b35d390c7d0aa2184917cea79dfaeb604c7ee8e61c04b96c1efd076a8460ba42706e7f2bfdd2271b94e8a04c2747a87100f4dc4479a22ba20319a0a169fdf83a47f2d8156048410631973a6c2b9e11f6d8cb6df394c9b9a3635f18247fd063812f1c416ef623c6438c0080dddb13684491d15ac3f1bf09f76c73d673abf0bb1fade55b54371ec4f6afa4cbca4b86a4a25039e2df6b1fba4b", 0xc4}, {&(0x7f000000e380)="60979a826dc2377ff8060c66c0c778c9fd2daf72f8bb9b4f8c", 0x19}, {&(0x7f000000e3c0)="69aa77616f697fd922e1a3ade0ab60114dc355b6d48c2179b0dcd625c47aed73fb98a29ddc3db567bebbf2d9cbc006fdd95f29337e230edddeb58f8c0872d3e2e38a17465d21fc025c61ec1af6fb95c14928a47511550b7fa98479d10886f07376579c48ad49af14d2feb8dbf67d47eed79005bb6c02456bd98511e024357fb8130199f65590d645511b27f73e1f803ec33029ebe8dafbdfe4535f25dc", 0x9d}], 0x6, &(0x7f0000003f00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x0, 0x1, 0x2, {r3}}}], 0x120, 0x800}}, {{&(0x7f00000102c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000010400)=[{&(0x7f0000010340)="1192510a88df4f559cb8984f0bfb996c9ea726db7a1a6294a8cca5b25cefb7982bfd6899118264de6360631882bda0a1d2e6d1ccc208e1378ed958464eab247211c1d46885293585da7f13940c185682c13002797643c18023d686468e0a268366a641a9ee0cf841a2f49f00ebb437c8fd24311ed002bc84d72c6e97c8cee31871604a77dc3b435f3dbe34a1665d2f9d60a83a8ece", 0x95}], 0x1, &(0x7f0000010500)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38, 0x10}}], 0x6, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040))
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r7 = memfd_create(&(0x7f0000000680)='\x103q}2\x9a\xce\xaf^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99\x18\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1f\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\tRJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd99C\x9fF\x9c[M=\xa0^\xa8\xed)\xe8Z\xe8\x9b&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xc9\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8ZmH\x98\xaeb\xa5B5)\x80m\xff\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6\x05\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97O\xb7\xfa\x19\x06U)j!\x91\'\x98\xd2kFN\xfa\x80)O\xb9(!n\x9d\x13\x15\xf1\x1a\xb8y\x14l\xd1', 0x7)
pipe(&(0x7f0000000000)={<r8=>0xffffffffffffffff})
close(r8)
ioctl$UFFDIO_POISON(r8, 0xc020aa08, &(0x7f0000000100)={{&(0x7f000026f000/0x2000)=nil, 0x2000}})
ioctl$FS_IOC_RESVSP(r7, 0x402c5828, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x761})
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, 0x0)

95.398491ms ago: executing program 4 (id=4796):
getpgrp(0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
close(0x3)
shutdown(r1, 0x1)
prlimit64(0x0, 0xb, &(0x7f0000000100)={0x2000004, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x10e08a00, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
sendmsg$nl_route(r4, 0x0, 0x8000002)
r5 = fcntl$dupfd(r4, 0x406, r4)
read$FUSE(r5, &(0x7f0000000340)={0x2020}, 0x2020)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x109001, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f00000001c0)={0x7, "fa02791d2a69a2610f02000000000000001100010000000800", <r7=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r7, <r8=>0xffffffffffffffff})
r9 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x28d00, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000400)={0x7fff, "8a6035ceeae3ecc40017afad010000000000000400000000000600"})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r9, 0xc0285700, &(0x7f00000004c0)={0x9, "34e6498c270e0000b56a000005000000000000000000000000000100", <r10=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f00000000c0)={"0e337b42cc00d331ff0007000000000000001a00", r10})
close(r6)

47.957135ms ago: executing program 1 (id=4797):
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400))
shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000080)=""/43)
r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x147c40, 0x0)
preadv2(r0, 0x0, 0x0, 0x2000, 0x0, 0x1f)
dup(0xffffffffffffffff)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r1, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0})
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000040)={0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f00000001c0)={0x0, 0x0, 0x0})
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000340))
ioctl$XFS_IOC_DIOINFO(r1, 0x800c581e, &(0x7f00000000c0))
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0xfffffffffffffffc)
sendmsg$nl_route(r2, &(0x7f00000078c0)={0x0, 0x0, 0x0}, 0xea5bc50b6199d7fe)
ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1})
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f00000001c0)=0x304008000)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0x13)
ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000280)={0xd, 0x5, 0x48, 0x2, 0x8, "ad5bb70a175c1be1"})

0s ago: executing program 1 (id=4798):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00'})
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @private=0xa010102}, 0x10)
sendto$inet(r2, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10)
sendto$inet(r2, &(0x7f0000000440)='p', 0x1, 0x24008810, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x5, 0x30}, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000002000)=""/102384, 0x18ff0)
fdatasync(r1)
setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0xa0, 0x32, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x14, 0x7ff}, {0x0, 0x0, 0xdd, 0x1000000000000}, 0xfffffffe, 0x6e6bb2, 0x2}, {{@in=@rand_addr=0x64010102, 0x4d3, 0x33}, 0x0, @in6=@loopback, 0x2000000, 0x3, 0x0, 0xb4, 0x0, 0x8000000}}, 0xe8)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$usbfs(0x0, 0x76, 0x0)
ioctl$USBDEVFS_RESET(r6, 0x5514)

kernel console output (not intermixed with test programs):

int 0xC has invalid maxpacket 1023, setting to 64
[ 1487.622967][T24993] usb 5-1: config 250 interface 41 altsetting 4 has a duplicate endpoint with address 0x4, skipping
[ 1487.642068][T24993] usb 5-1: config 250 interface 41 altsetting 4 has a duplicate endpoint with address 0x5, skipping
[ 1487.662455][T24993] usb 5-1: config 250 interface 41 altsetting 4 has 12 endpoint descriptors, different from the interface descriptor's value: 11
[ 1487.680739][T24993] usb 5-1: config 250 interface 0 altsetting 3 has a duplicate endpoint with address 0x4, skipping
[ 1487.703808][T24993] usb 5-1: config 250 interface 0 altsetting 3 has an invalid descriptor for endpoint zero, skipping
[ 1487.722460][T24993] usb 5-1: config 250 interface 41 has no altsetting 0
[ 1487.734963][T24993] usb 5-1: config 250 interface 0 has no altsetting 0
[ 1487.756053][T24993] usb 5-1: Dual-Role OTG device on HNP port
[ 1487.758651][T31216] udevd[31216]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1487.766509][T24993] usb 5-1: New USB device found, idVendor=0af0, idProduct=c100, bcdDevice=21.b3
[ 1487.795095][T24993] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1487.811708][T24993] usb 5-1: Product: ã Š
[ 1487.822155][T24993] usb 5-1: Manufacturer: à°Š
[ 1487.849602][T24993] usb 5-1: SerialNumber: й
[ 1487.916825][  T344] ubi: mtd0 is already attached to ubi16
[ 1487.931378][  T344] netlink: 'syz.3.4399': attribute type 10 has an invalid length.
[ 1487.942178][  T344] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4399'.
[ 1487.954057][  T344] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check.
[ 1488.028019][T21173] usb 3-1: new full-speed USB device number 123 using dummy_hcd
[ 1488.112652][T32760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1488.126493][T32760] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1488.185388][T24993] hso 5-1:250.41: Not our interface
[ 1488.224589][T24993] hso 5-1:250.0: Not our interface
[ 1488.230086][T21173] usb 3-1: config 0 has an invalid interface number: 176 but max is 2
[ 1488.230113][T21173] usb 3-1: config 0 has an invalid interface number: 255 but max is 2
[ 1488.230132][T21173] usb 3-1: config 0 has no interface number 0
[ 1488.230148][T21173] usb 3-1: config 0 has no interface number 1
[ 1488.230185][T21173] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[ 1488.230216][T21173] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[ 1488.230242][T21173] usb 3-1: config 0 interface 255 has no altsetting 0
[ 1488.230268][T21173] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[ 1488.230287][T21173] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1488.232485][T21173] usb 3-1: config 0 descriptor??
[ 1488.256659][  T364] FAULT_INJECTION: forcing a failure.
[ 1488.256659][  T364] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1488.256692][  T364] CPU: 0 UID: 0 PID: 364 Comm: syz.0.4402 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1488.256715][  T364] Tainted: [L]=SOFTLOCKUP
[ 1488.256721][  T364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1488.256732][  T364] Call Trace:
[ 1488.256738][  T364]  <TASK>
[ 1488.256744][  T364]  dump_stack_lvl+0x100/0x190
[ 1488.256771][  T364]  should_fail_ex.cold+0x5/0xa
[ 1488.256795][  T364]  _copy_from_iter+0x1f4/0x1690
[ 1488.256818][  T364]  ? __asan_memset+0x23/0x50
[ 1488.256843][  T364]  ? __pfx__copy_from_iter+0x10/0x10
[ 1488.256864][  T364]  ? __pfx___alloc_skb+0x10/0x10
[ 1488.256887][  T364]  ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10
[ 1488.256921][  T364]  netlink_sendmsg+0x808/0xda0
[ 1488.256946][  T364]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1488.256965][  T364]  ? __might_fault+0xa0/0x140
[ 1488.256999][  T364]  ____sys_sendmsg+0x9e1/0xb70
[ 1488.257017][  T364]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1488.257040][  T364]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1488.257062][  T364]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1488.257083][  T364]  ? dummy_timer+0x1dba/0x36c0
[ 1488.257103][  T364]  ___sys_sendmsg+0x190/0x1e0
[ 1488.257126][  T364]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1488.257176][  T364]  __sys_sendmsg+0x170/0x220
[ 1488.257201][  T364]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1488.257238][  T364]  ? rcu_is_watching+0x12/0xc0
[ 1488.257266][  T364]  do_syscall_64+0x115/0x870
[ 1488.257287][  T364]  ? clear_bhb_loop+0x40/0x90
[ 1488.257308][  T364]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1488.257330][  T364] RIP: 0033:0x7f0afd19ce59
[ 1488.257344][  T364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1488.257360][  T364] RSP: 002b:00007f0afb3f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1488.257377][  T364] RAX: ffffffffffffffda RBX: 00007f0afd415fa0 RCX: 00007f0afd19ce59
[ 1488.257388][  T364] RDX: 0000000024000804 RSI: 0000200000003080 RDI: 0000000000000003
[ 1488.257398][  T364] RBP: 00007f0afb3f6090 R08: 0000000000000000 R09: 0000000000000000
[ 1488.257409][  T364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1488.257418][  T364] R13: 00007f0afd416038 R14: 00007f0afd415fa0 R15: 00007ffdabec7588
[ 1488.257442][  T364]  </TASK>
[ 1488.428393][  T348] SELinux:  policydb magic number 0xf97cff06 does not match expected magic number 0xf97cff8c
[ 1488.440279][T24993] usb 5-1: USB disconnect, device number 107
[ 1488.486578][  T348] SELinux: failed to load policy
[ 1488.697113][T21173] usb 3-1: Could not set interface, error -71
[ 1488.734895][T21173] usb 3-1: selecting invalid altsetting 0
[ 1488.740772][T21173] usb 3-1: Could not set interface, error -22
[ 1488.764490][T21173] usb 3-1: USB disconnect, device number 123
[ 1489.038108][  T394] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[ 1489.125866][  T394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4406'.
[ 1489.311264][  T394] openvswitch: netlink: Key 14 has unexpected len 4 expected 28
[ 1489.932212][  T411] ubi: mtd0 is already attached to ubi16
[ 1489.941832][  T411] netlink: 'syz.1.4411': attribute type 10 has an invalid length.
[ 1489.952271][  T411] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4411'.
[ 1489.964109][  T411] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check.
[ 1490.217109][  T419] netlink: 'syz.3.4413': attribute type 10 has an invalid length.
[ 1490.225031][  T419] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4413'.
[ 1490.237001][  T419] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check.
[ 1491.164664][  T446] vlan2: entered promiscuous mode
[ 1491.178716][  T446] bridge0: entered promiscuous mode
[ 1491.824634][  T461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1491.843164][  T461] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1491.995850][  T467] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4425'.
[ 1492.373667][  T480] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4429'.
[ 1492.729275][  T489] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1492.896648][T21173] usb 2-1: new high-speed USB device number 87 using dummy_hcd
[ 1492.955824][  T488] 8021q: VLANs not supported on ipvlan0
[ 1493.761657][  T508] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4431'.
[ 1493.932542][  T467] bond1: Removing last arp target with arp_interval on
[ 1493.939613][    T9] usb 1-1: new full-speed USB device number 83 using dummy_hcd
[ 1493.950667][  T467] bond1: entered promiscuous mode
[ 1493.981815][  T467] bond1: entered allmulticast mode
[ 1494.025281][  T467] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1494.098646][    T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1494.144862][    T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1494.173790][    T9] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 1494.205444][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1494.279152][    T9] usb 1-1: config 0 descriptor??
[ 1494.332810][    T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 1494.377416][    T9] dvb-usb: bulk message failed: -22 (3/0)
[ 1494.465554][    T9] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 1494.514215][    T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 1494.557595][    T9] usb 1-1: media controller created
[ 1494.595712][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1494.659937][    T9] dvb-usb: bulk message failed: -22 (6/0)
[ 1494.675925][    T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 1494.694304][    T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input63
[ 1494.763381][    T9] dvb-usb: schedule remote query interval to 150 msecs.
[ 1494.785143][    T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 1494.946727][    T9] dvb-usb: bulk message failed: -22 (1/0)
[ 1494.969609][    T9] dvb-usb: error while querying for an remote control event.
[ 1495.136788][  T990] dvb-usb: bulk message failed: -22 (1/0)
[ 1495.158091][  T990] dvb-usb: error while querying for an remote control event.
[ 1495.283135][   T29] audit: type=1400 audit(1781170422.462:1441): avc:  denied  { append } for  pid=568 comm="syz.3.4437" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[ 1495.347396][  T990] dvb-usb: bulk message failed: -22 (1/0)
[ 1495.360527][  T990] dvb-usb: error while querying for an remote control event.
[ 1495.382058][  T569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1495.382649][   T29] audit: type=1400 audit(1781170422.462:1442): avc:  denied  { map } for  pid=568 comm="syz.3.4437" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[ 1495.402825][  T569] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1495.556655][  T990] dvb-usb: bulk message failed: -22 (1/0)
[ 1495.563470][  T990] dvb-usb: error while querying for an remote control event.
[ 1495.648703][  T586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4440'.
[ 1495.658045][  T586] openvswitch: netlink: Key 14 has unexpected len 4 expected 28
[ 1495.736536][  T990] dvb-usb: bulk message failed: -22 (1/0)
[ 1495.742885][  T990] dvb-usb: error while querying for an remote control event.
[ 1495.940303][  T599] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4441'.
[ 1495.957164][  T990] dvb-usb: bulk message failed: -22 (1/0)
[ 1495.964075][  T990] dvb-usb: error while querying for an remote control event.
[ 1496.536490][T21173] dvb-usb: bulk message failed: -22 (1/0)
[ 1496.544984][T21173] dvb-usb: error while querying for an remote control event.
[ 1496.920884][  T990] dvb-usb: bulk message failed: -22 (1/0)
[ 1496.944862][  T990] dvb-usb: error while querying for an remote control event.
[ 1497.045644][  T803] usb 1-1: USB disconnect, device number 83
[ 1497.203702][  T803] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 1497.223311][  T623] binder: 619:623 ioctl 4018620d 0 returned -22
[ 1498.485586][   T29] audit: type=1400 audit(1781170425.662:1443): avc:  denied  { write } for  pid=648 comm="syz.1.4451" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[ 1498.586693][T21173] usb 1-1: new high-speed USB device number 84 using dummy_hcd
[ 1498.746826][T21173] usb 1-1: Using ep0 maxpacket: 8
[ 1498.755542][T21173] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1498.769902][T21173] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1498.780280][T21173] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1498.791071][T21173] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1498.804503][T21173] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1498.814670][T21173] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1498.934044][  T663] ufs: You didn't specify the type of your ufs filesystem
[ 1498.934044][  T663] 
[ 1498.934044][  T663] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[ 1498.934044][  T663] 
[ 1498.934044][  T663] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[ 1498.970632][  T663] ufs: ufstype=old is supported read-only
[ 1498.981726][  T663] ufs: ufs_fill_super(): bad magic number
[ 1499.091872][T21173] usb 1-1: GET_CAPABILITIES returned 0
[ 1499.115148][T27229] kernel read not supported for file /dsp1 (pid: 27229 comm: kworker/1:7)
[ 1499.881874][T21173] usbtmc 1-1:16.0: can't read capabilities
[ 1500.149934][   T29] audit: type=1326 audit(1781170427.333:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=672 comm="syz.2.4455" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e3a19ce59 code=0x7ffc0000
[ 1500.229670][   T29] audit: type=1326 audit(1781170427.403:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=672 comm="syz.2.4455" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f6e3a19ce59 code=0x7ffc0000
[ 1501.565323][    T9] usb 1-1: USB disconnect, device number 84
[ 1501.623303][   T29] audit: type=1326 audit(1781170428.803:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=672 comm="syz.2.4455" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e3a19ce59 code=0x7ffc0000
[ 1501.692583][   T29] audit: type=1326 audit(1781170428.873:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=672 comm="syz.2.4455" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e3a19ce59 code=0x7ffc0000
[ 1501.813466][  T714] overlayfs: missing 'lowerdir'
[ 1501.863359][   T29] audit: type=1326 audit(1781170429.043:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=672 comm="syz.2.4455" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6e3a19ce59 code=0x7ffc0000
[ 1502.978876][  T740] comedi comedi1: pcl812: I/O port conflict (0x100,16)
[ 1503.114537][  T751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1503.145359][  T751] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1503.165155][   T29] audit: type=1400 audit(1781170430.343:1449): avc:  denied  { ioctl } for  pid=759 comm="syz.4.4475" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x480f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[ 1503.302510][  T764] overlayfs: missing 'lowerdir'
[ 1503.328854][T21173] usb 2-1: new high-speed USB device number 88 using dummy_hcd
[ 1503.386110][    T9] usb 3-1: new high-speed USB device number 124 using dummy_hcd
[ 1503.496058][T21173] usb 2-1: Using ep0 maxpacket: 16
[ 1503.505016][T21173] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7
[ 1503.541026][T21173] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[ 1503.558587][T21173] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1503.571001][    T9] usb 3-1: config 2 has an invalid descriptor of length 120, skipping remainder of the config
[ 1503.581657][T21173] usb 2-1: Product: syz
[ 1503.587779][    T9] usb 3-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1503.605125][T21173] usb 2-1: Manufacturer: syz
[ 1503.615671][T21173] usb 2-1: SerialNumber: syz
[ 1503.625325][    T9] usb 3-1: config 2 interface 0 has no altsetting 0
[ 1503.635636][    T9] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47
[ 1503.652345][T21173] usb 2-1: config 0 descriptor??
[ 1503.661051][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1503.670258][    T9] usb 3-1: Product: syz
[ 1503.675894][T21173] hub 2-1:0.0: bad descriptor, ignoring hub
[ 1503.683526][    T9] usb 3-1: Manufacturer: syz
[ 1503.699635][T21173] hub 2-1:0.0: probe with driver hub failed with error -5
[ 1503.719912][    T9] usb 3-1: SerialNumber: syz
[ 1503.737671][T21173] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[ 1503.954444][    T9] ims_pcu 3-1:2.0: probe with driver ims_pcu failed with error -22
[ 1503.990552][    T9] usb 3-1: USB disconnect, device number 124
[ 1504.035196][  T990] usb 2-1: USB disconnect, device number 88
[ 1504.311530][   T29] audit: type=1400 audit(1781170431.493:1450): avc:  denied  { bind } for  pid=819 comm="syz.0.4479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[ 1504.480541][  T826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4480'.
[ 1504.491280][  T826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4480'.
[ 1504.500362][  T826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4480'.
[ 1504.509533][  T826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4480'.
[ 1504.518564][  T826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4480'.
[ 1504.853212][  T833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4482'.
[ 1504.863538][  T833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4482'.
[ 1504.872684][  T833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4482'.
[ 1504.881770][  T833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4482'.
[ 1505.005659][  T843] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4485'.
[ 1505.033352][  T844] overlay: Unknown parameter '/'
[ 1507.735232][  T881] overlayfs: missing 'lowerdir'
[ 1508.369983][  T886] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README
[ 1508.388583][  T886] Error validating options; rc = [-22]
[ 1510.201348][  T899] binder: 894:899 ioctl c0306201 0 returned -14
[ 1510.225038][  T901] overlay: Unknown parameter '/'
[ 1511.335668][    T9] usb 5-1: new high-speed USB device number 108 using dummy_hcd
[ 1511.856671][  T941] ubi: mtd0 is already attached to ubi16
[ 1511.867360][  T941] netlink: 'syz.0.4503': attribute type 10 has an invalid length.
[ 1511.875252][  T941] __nla_validate_parse: 7 callbacks suppressed
[ 1511.875287][  T941] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4503'.
[ 1511.891363][  T941] bridge0: port 3(veth1_macvtap) entered blocking state
[ 1511.898494][  T941] bridge0: port 3(veth1_macvtap) entered disabled state
[ 1511.905685][  T941] veth1_macvtap: entered allmulticast mode
[ 1511.916598][  T941] veth1_macvtap: left allmulticast mode
[ 1511.931192][  T941] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check.
[ 1512.185810][    T9] usb 5-1: Using ep0 maxpacket: 8
[ 1512.236844][    T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1512.400294][  T947] 8021q: VLANs not supported on ipvlan0
[ 1512.440163][    T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1512.498456][  T951] overlayfs: missing 'lowerdir'
[ 1512.629310][    T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1512.668451][    T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1512.751152][  T959] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4508'.
[ 1513.669996][    T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1513.690011][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1514.025250][    T9] usb 5-1: can't set config #16, error -71
[ 1514.088706][    T9] usb 5-1: USB disconnect, device number 108
[ 1514.437724][  T966] ubi: mtd0 is already attached to ubi16
[ 1514.449682][   T29] audit: type=1400 audit(1781170441.633:1451): avc:  denied  { create } for  pid=973 comm="syz.4.4510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[ 1514.982263][  T966] netlink: 'syz.0.4509': attribute type 10 has an invalid length.
[ 1515.004168][   T29] audit: type=1400 audit(1781170441.633:1452): avc:  denied  { ioctl } for  pid=973 comm="syz.4.4510" path="socket:[90496]" dev="sockfs" ino=90496 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[ 1515.036528][  T966] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4509'.
[ 1515.079470][  T966] bridge0: port 3(veth1_macvtap) entered blocking state
[ 1515.112574][  T982] overlay: Unknown parameter '/'
[ 1515.120382][  T966] bridge0: port 3(veth1_macvtap) entered disabled state
[ 1515.155579][  T966] veth1_macvtap: entered allmulticast mode
[ 1515.178644][  T966] veth1_macvtap: left allmulticast mode
[ 1515.213681][  T966] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check.
[ 1515.365831][  T992] netlink: 'syz.4.4513': attribute type 10 has an invalid length.
[ 1515.373773][  T992] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4513'.
[ 1515.473734][  T992] bridge0: port 1(veth1_macvtap) entered blocking state
[ 1515.489085][  T992] bridge0: port 1(veth1_macvtap) entered disabled state
[ 1515.496393][  T992] veth1_macvtap: entered allmulticast mode
[ 1515.506688][  T992] veth1_macvtap: left allmulticast mode
[ 1515.515529][  T992] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check.
[ 1515.675237][  T989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1515.684645][  T989] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1515.754349][ T1001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4516'.
[ 1515.790176][ T1001] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4516'.
[ 1516.142623][ T1014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1516.196997][ T1014] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1516.239641][T10695] block nbd3: Receive control failed (result -32)
[ 1516.535065][  T989] block nbd3: shutting down sockets
[ 1516.622505][ T1022] FAULT_INJECTION: forcing a failure.
[ 1516.622505][ T1022] name failslab, interval 1, probability 0, space 0, times 0
[ 1516.623173][ T1036] 8021q: VLANs not supported on ipvlan0
[ 1516.664000][ T1022] CPU: 1 UID: 0 PID: 1022 Comm: syz.1.4520 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1516.664028][ T1022] Tainted: [L]=SOFTLOCKUP
[ 1516.664034][ T1022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1516.664044][ T1022] Call Trace:
[ 1516.664051][ T1022]  <TASK>
[ 1516.664058][ T1022]  dump_stack_lvl+0x100/0x190
[ 1516.664082][ T1022]  should_fail_ex.cold+0x5/0xa
[ 1516.664107][ T1022]  should_failslab+0xc2/0x120
[ 1516.664127][ T1022]  kmem_cache_alloc_node_noprof+0x81/0x6f0
[ 1516.664153][ T1022]  ? __alloc_skb+0x140/0x710
[ 1516.664175][ T1022]  ? __alloc_skb+0x5b7/0x710
[ 1516.664203][ T1022]  __alloc_skb+0x140/0x710
[ 1516.664226][ T1022]  ? __alloc_skb+0x5b7/0x710
[ 1516.664251][ T1022]  ? __pfx___alloc_skb+0x10/0x10
[ 1516.664282][ T1022]  netlink_ack+0x117/0xb80
[ 1516.664311][ T1022]  netlink_rcv_skb+0x333/0x420
[ 1516.664333][ T1022]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1516.664352][ T1022]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1516.664383][ T1022]  ? netlink_deliver_tap+0x1ae/0xcc0
[ 1516.664408][ T1022]  netlink_unicast+0x585/0x850
[ 1516.664434][ T1022]  ? __pfx_netlink_unicast+0x10/0x10
[ 1516.664462][ T1022]  netlink_sendmsg+0x8b0/0xda0
[ 1516.664489][ T1022]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1516.664509][ T1022]  ? __might_fault+0xa0/0x140
[ 1516.664544][ T1022]  ____sys_sendmsg+0x9e1/0xb70
[ 1516.664564][ T1022]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1516.664588][ T1022]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1516.664620][ T1022]  ___sys_sendmsg+0x190/0x1e0
[ 1516.664644][ T1022]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1516.664701][ T1022]  __sys_sendmsg+0x170/0x220
[ 1516.664730][ T1022]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1516.664767][ T1022]  ? rcu_is_watching+0x12/0xc0
[ 1516.664797][ T1022]  do_syscall_64+0x115/0x870
[ 1516.664820][ T1022]  ? clear_bhb_loop+0x40/0x90
[ 1516.664842][ T1022]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1516.664861][ T1022] RIP: 0033:0x7f2b6e79ce59
[ 1516.664876][ T1022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1516.664893][ T1022] RSP: 002b:00007f2b6f625028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1516.664912][ T1022] RAX: ffffffffffffffda RBX: 00007f2b6ea15fa0 RCX: 00007f2b6e79ce59
[ 1516.664923][ T1022] RDX: 0000000000004000 RSI: 0000200000000200 RDI: 0000000000000005
[ 1516.664934][ T1022] RBP: 00007f2b6f625090 R08: 0000000000000000 R09: 0000000000000000
[ 1516.664944][ T1022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1516.664955][ T1022] R13: 00007f2b6ea16038 R14: 00007f2b6ea15fa0 R15: 00007ffcc29bdb58
[ 1516.664980][ T1022]  </TASK>
[ 1517.423084][ T1044] netlink: 'syz.1.4522': attribute type 1 has an invalid length.
[ 1517.681873][ T1063] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4524'.
[ 1518.921379][ T1082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4527'.
[ 1518.932516][ T1082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4527'.
[ 1518.941600][ T1082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4527'.
[ 1518.950742][ T1082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4527'.
[ 1518.959825][ T1082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4527'.
[ 1519.510675][ T1099] FAULT_INJECTION: forcing a failure.
[ 1519.510675][ T1099] name failslab, interval 1, probability 0, space 0, times 0
[ 1519.579930][ T1099] CPU: 0 UID: 0 PID: 1099 Comm: syz.3.4532 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1519.579964][ T1099] Tainted: [L]=SOFTLOCKUP
[ 1519.579970][ T1099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1519.579981][ T1099] Call Trace:
[ 1519.579988][ T1099]  <TASK>
[ 1519.579996][ T1099]  dump_stack_lvl+0x100/0x190
[ 1519.580023][ T1099]  should_fail_ex.cold+0x5/0xa
[ 1519.580048][ T1099]  ? io_cache_alloc_new+0x45/0xe0
[ 1519.580065][ T1099]  should_failslab+0xc2/0x120
[ 1519.580086][ T1099]  __kmalloc_noprof+0xe0/0x850
[ 1519.580119][ T1099]  io_cache_alloc_new+0x45/0xe0
[ 1519.580138][ T1099]  io_arm_apoll+0x8b9/0xa60
[ 1519.580160][ T1099]  ? __fget_files+0x215/0x3d0
[ 1519.580186][ T1099]  ? __pfx_io_arm_apoll+0x10/0x10
[ 1519.580216][ T1099]  ? __io_issue_sqe+0x14a/0x7a0
[ 1519.580241][ T1099]  io_arm_poll_handler+0x21f/0x2b0
[ 1519.580267][ T1099]  io_queue_async+0x159/0x290
[ 1519.580292][ T1099]  io_submit_sqes+0x1754/0x24b0
[ 1519.580326][ T1099]  __do_sys_io_uring_enter+0xa88/0x1b50
[ 1519.580356][ T1099]  ? __fget_files+0x21f/0x3d0
[ 1519.580378][ T1099]  ? __pfx___do_sys_io_uring_enter+0x10/0x10
[ 1519.580408][ T1099]  ? fput+0x79/0x100
[ 1519.580432][ T1099]  ? ksys_write+0x1ac/0x250
[ 1519.580452][ T1099]  ? __pfx_ksys_write+0x10/0x10
[ 1519.580474][ T1099]  ? rcu_is_watching+0x12/0xc0
[ 1519.580505][ T1099]  do_syscall_64+0x115/0x870
[ 1519.580528][ T1099]  ? clear_bhb_loop+0x40/0x90
[ 1519.580550][ T1099]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1519.580568][ T1099] RIP: 0033:0x7fcf3b59ce59
[ 1519.580584][ T1099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1519.580601][ T1099] RSP: 002b:00007fcf3c4fe028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1519.580619][ T1099] RAX: ffffffffffffffda RBX: 00007fcf3b815fa0 RCX: 00007fcf3b59ce59
[ 1519.580631][ T1099] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000
[ 1519.580647][ T1099] RBP: 00007fcf3c4fe090 R08: 0000000000000000 R09: 0000000000000000
[ 1519.580657][ T1099] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001
[ 1519.580668][ T1099] R13: 00007fcf3b816038 R14: 00007fcf3b815fa0 R15: 00007ffd6cca0758
[ 1519.580692][ T1099]  </TASK>
[ 1520.100263][ T1114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1520.149509][ T1114] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1520.213610][ T1120] overlayfs: missing 'lowerdir'
[ 1520.288668][ T1122] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4529'.
[ 1521.581083][ T1142] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4539'.
[ 1525.889235][ T1199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1525.928089][ T1199] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1526.257144][T24993] usb 1-1: new high-speed USB device number 85 using dummy_hcd
[ 1526.289163][T27229] usb 3-1: new high-speed USB device number 125 using dummy_hcd
[ 1526.419745][T24993] usb 1-1: config 2 has an invalid descriptor of length 120, skipping remainder of the config
[ 1526.758174][T27229] usb 3-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 0, changing to 7
[ 1527.458746][T24993] usb 1-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1527.478316][T27229] usb 3-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid wMaxPacketSize 0
[ 1527.494555][T24993] usb 1-1: config 2 interface 0 has no altsetting 0
[ 1527.509028][T27229] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1527.511139][ T1237] FAULT_INJECTION: forcing a failure.
[ 1527.511139][ T1237] name failslab, interval 1, probability 0, space 0, times 0
[ 1527.534757][ T1237] CPU: 0 UID: 0 PID: 1237 Comm: syz.1.4556 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1527.534787][ T1237] Tainted: [L]=SOFTLOCKUP
[ 1527.534793][ T1237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1527.534803][ T1237] Call Trace:
[ 1527.534810][ T1237]  <TASK>
[ 1527.534816][ T1237]  dump_stack_lvl+0x100/0x190
[ 1527.534841][ T1237]  should_fail_ex.cold+0x5/0xa
[ 1527.534865][ T1237]  should_failslab+0xc2/0x120
[ 1527.534885][ T1237]  kmem_cache_alloc_node_noprof+0x81/0x6f0
[ 1527.534912][ T1237]  ? __alloc_skb+0x140/0x710
[ 1527.534936][ T1237]  ? __alloc_skb+0x5b7/0x710
[ 1527.534962][ T1237]  __alloc_skb+0x140/0x710
[ 1527.534985][ T1237]  ? __alloc_skb+0x5b7/0x710
[ 1527.535008][ T1237]  ? __pfx___alloc_skb+0x10/0x10
[ 1527.535033][ T1237]  ? is_bpf_text_address+0x8a/0x1a0
[ 1527.535055][ T1237]  ? bpf_ksym_find+0x128/0x1c0
[ 1527.535082][ T1237]  alloc_skb_with_frags+0xdd/0x760
[ 1527.535099][ T1237]  ? __lock_acquire+0x4a5/0x2630
[ 1527.535130][ T1237]  ? unwind_get_return_address+0x59/0xa0
[ 1527.535159][ T1237]  sock_alloc_send_pskb+0x801/0x980
[ 1527.535186][ T1237]  ? do_raw_spin_lock+0x128/0x260
[ 1527.535212][ T1237]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[ 1527.535241][ T1237]  ? __lock_acquire+0x4a5/0x2630
[ 1527.535265][ T1237]  __ip_append_data+0x20c9/0x44c0
[ 1527.535293][ T1237]  ? __pfx_ip_generic_getfrag+0x10/0x10
[ 1527.535313][ T1237]  ? find_held_lock+0x2b/0x80
[ 1527.535335][ T1237]  ? ip_dst_mtu_maybe_forward.constprop.0+0x3e9/0x750
[ 1527.535363][ T1237]  ? __pfx___ip_append_data+0x10/0x10
[ 1527.535391][ T1237]  ip_make_skb+0x28b/0x310
[ 1527.535416][ T1237]  ? __pfx_ip_generic_getfrag+0x10/0x10
[ 1527.535440][ T1237]  ? __pfx_ip_make_skb+0x10/0x10
[ 1527.535477][ T1237]  ? udp_sendmsg+0x171c/0x2720
[ 1527.535496][ T1237]  udp_sendmsg+0x171c/0x2720
[ 1527.535524][ T1237]  ? __pfx_udp_sendmsg+0x10/0x10
[ 1527.535545][ T1237]  ? vsnprintf+0x4ee/0x1240
[ 1527.535567][ T1237]  ? __pfx_tomoyo_supervisor+0x10/0x10
[ 1527.535593][ T1237]  ? up_write+0x28c/0x4f0
[ 1527.535627][ T1237]  ? __lock_acquire+0x4a5/0x2630
[ 1527.535653][ T1237]  udpv6_sendmsg+0x1420/0x2c20
[ 1527.535671][ T1237]  ? find_held_lock+0x2b/0x80
[ 1527.535693][ T1237]  ? __pfx_udpv6_sendmsg+0x10/0x10
[ 1527.535709][ T1237]  ? do_raw_spin_lock+0x128/0x260
[ 1527.535761][ T1237]  ? rcu_is_watching+0x12/0xc0
[ 1527.535785][ T1237]  ? inet_autobind+0x145/0x1a0
[ 1527.535806][ T1237]  ? __local_bh_enable_ip+0x9e/0x120
[ 1527.535831][ T1237]  ? lockdep_hardirqs_on+0x78/0x100
[ 1527.535852][ T1237]  ? inet_autobind+0x145/0x1a0
[ 1527.535872][ T1237]  ? __local_bh_enable_ip+0x9e/0x120
[ 1527.535897][ T1237]  ? __pfx_udpv6_sendmsg+0x10/0x10
[ 1527.535916][ T1237]  ? inet6_sendmsg+0x105/0x140
[ 1527.535933][ T1237]  inet6_sendmsg+0x105/0x140
[ 1527.535953][ T1237]  ____sys_sendmsg+0x704/0xb70
[ 1527.535975][ T1237]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1527.536006][ T1237]  ___sys_sendmsg+0x190/0x1e0
[ 1527.536029][ T1237]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1527.536074][ T1237]  ? __pfx_vfs_write+0x10/0x10
[ 1527.536092][ T1237]  ? do_sys_openat2+0x157/0x1e0
[ 1527.536126][ T1237]  __sys_sendmsg+0x170/0x220
[ 1527.536152][ T1237]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1527.536188][ T1237]  ? rcu_is_watching+0x12/0xc0
[ 1527.536216][ T1237]  do_syscall_64+0x115/0x870
[ 1527.536237][ T1237]  ? clear_bhb_loop+0x40/0x90
[ 1527.536259][ T1237]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1527.536276][ T1237] RIP: 0033:0x7f2b6e79ce59
[ 1527.536291][ T1237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1527.536307][ T1237] RSP: 002b:00007f2b6f625028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1527.536324][ T1237] RAX: ffffffffffffffda RBX: 00007f2b6ea15fa0 RCX: 00007f2b6e79ce59
[ 1527.536335][ T1237] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[ 1527.536345][ T1237] RBP: 00007f2b6f625090 R08: 0000000000000000 R09: 0000000000000000
[ 1527.536356][ T1237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1527.536365][ T1237] R13: 00007f2b6ea16038 R14: 00007f2b6ea15fa0 R15: 00007ffcc29bdb58
[ 1527.536389][ T1237]  </TASK>
[ 1527.538945][T27229] usb 3-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3
[ 1528.150530][T24993] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47
[ 1528.162851][T24993] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1528.177659][T24993] usb 1-1: Product: syz
[ 1528.181849][T24993] usb 1-1: Manufacturer: syz
[ 1528.188784][T24993] usb 1-1: SerialNumber: syz
[ 1528.201853][T27229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1528.220623][T27229] usb 3-1: Product: syz
[ 1528.231731][T27229] usb 3-1: Manufacturer: syz
[ 1528.257922][T27229] usb 3-1: SerialNumber: syz
[ 1528.274490][T27229] usb 3-1: config 0 descriptor??
[ 1528.288465][T27229] keyspan 3-1:0.0: Keyspan 2 port adapter converter detected
[ 1528.304486][T27229] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7
[ 1528.564470][T27229] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81
[ 1528.578493][T24993] ims_pcu 1-1:2.0: probe with driver ims_pcu failed with error -22
[ 1528.589581][  T803] usb 2-1: new high-speed USB device number 89 using dummy_hcd
[ 1528.602720][T27229] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1
[ 1528.622238][T24993] usb 1-1: USB disconnect, device number 85
[ 1528.721567][T27229] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2
[ 1528.742077][T27229] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85
[ 1528.753628][T27229] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5
[ 1528.767340][  T803] usb 2-1: device descriptor read/64, error -71
[ 1528.778930][T27229] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[ 1528.793055][T27229] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83
[ 1528.810903][T27229] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 3
[ 1528.823255][T27229] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4
[ 1528.833870][T27229] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 86
[ 1528.847253][T27229] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6
[ 1528.861797][T27229] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[ 1529.017568][  T803] usb 2-1: new high-speed USB device number 90 using dummy_hcd
[ 1529.036796][ T1279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4560'.
[ 1529.050896][ T1279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4560'.
[ 1529.064657][ T1279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4560'.
[ 1529.075087][ T1279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4560'.
[ 1529.159747][  T803] usb 2-1: device descriptor read/64, error -71
[ 1529.453130][ T1211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1529.468212][ T1211] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1529.516982][  T803] usb usb2-port1: attempt power cycle
[ 1529.603926][T10695] block nbd2: Receive control failed (result -32)
[ 1529.608781][T24993] usb 3-1: USB disconnect, device number 125
[ 1529.613396][ T1263] block nbd2: shutting down sockets
[ 1529.640702][T24993] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[ 1529.729843][T24993] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[ 1529.799143][T24993] keyspan 3-1:0.0: device disconnected
[ 1529.888607][  T803] usb 2-1: new high-speed USB device number 91 using dummy_hcd
[ 1529.938079][  T803] usb 2-1: device descriptor read/8, error -71
[ 1530.187163][  T803] usb 2-1: new high-speed USB device number 92 using dummy_hcd
[ 1530.228592][  T803] usb 2-1: device descriptor read/8, error -71
[ 1530.359126][  T803] usb usb2-port1: unable to enumerate USB device
[ 1531.953308][ T1358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4568'.
[ 1532.071439][ T1368] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4568'.
[ 1532.303831][ T1371] 8021q: VLANs not supported on ipvlan0
[ 1532.431775][ T1374] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4570'.
[ 1533.165461][ T1378] ubi: mtd0 is already attached to ubi16
[ 1533.177490][ T1378] netlink: 'syz.2.4572': attribute type 10 has an invalid length.
[ 1533.185501][ T1378] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4572'.
[ 1533.194721][ T1378] bridge0: port 3(veth1_macvtap) entered blocking state
[ 1533.202185][ T1378] bridge0: port 3(veth1_macvtap) entered disabled state
[ 1533.210414][ T1378] veth1_macvtap: entered allmulticast mode
[ 1533.224479][ T1378] veth1_macvtap: left allmulticast mode
[ 1533.234816][ T1378] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check.
[ 1533.818644][ T1394] input: syz1 as /devices/virtual/input/input64
[ 1533.828548][ T1394] input: failed to attach handler leds to device input64, error: -6
[ 1534.690055][ T1405] binder: 1404:1405 ioctl c0306201 0 returned -14
[ 1535.394352][   T10] usb 5-1: new high-speed USB device number 109 using dummy_hcd
[ 1535.554430][   T10] usb 5-1: Using ep0 maxpacket: 32
[ 1535.565016][   T10] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[ 1535.586219][   T10] usb 5-1: config 0 has no interface number 0
[ 1535.608761][   T10] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 1535.621051][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1535.629414][   T10] usb 5-1: Product: syz
[ 1535.634398][   T10] usb 5-1: Manufacturer: syz
[ 1535.639036][   T10] usb 5-1: SerialNumber: syz
[ 1535.649135][   T10] usb 5-1: config 0 descriptor??
[ 1535.659745][   T10] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 1535.680128][ T1433] overlayfs: missing 'lowerdir'
[ 1536.004906][   T10] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[ 1536.032697][   T10] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[ 1536.318852][ T1452] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4584'.
[ 1537.268585][    C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71
[ 1537.268954][  T803] usb 5-1: USB disconnect, device number 109
[ 1537.319416][  T803] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[ 1537.351554][  T803] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[ 1537.420436][  T803] quatech2 5-1:0.51: device disconnected
[ 1538.308612][T24993] usb 1-1: new high-speed USB device number 86 using dummy_hcd
[ 1538.482220][T24993] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1538.502984][T24993] usb 1-1: config 63 has an invalid interface number: 66 but max is 0
[ 1538.520736][T24993] usb 1-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config
[ 1538.539076][T24993] usb 1-1: config 63 has no interface number 0
[ 1538.550293][T24993] usb 1-1: config 63 interface 66 has no altsetting 0
[ 1538.569817][ T1488] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4588'.
[ 1538.569899][T24993] usb 1-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4
[ 1538.593520][T24993] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1538.639986][T24993] usb 1-1: Product: syz
[ 1538.647705][T24993] usb 1-1: Manufacturer: syz
[ 1538.652448][T24993] usb 1-1: SerialNumber: syz
[ 1538.710988][ T1488] openvswitch: netlink: Key 13 has unexpected len 4 expected 24
[ 1538.863273][ T1496] netlink: 'syz.1.4589': attribute type 4 has an invalid length.
[ 1538.997234][    T9] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[ 1539.006902][    T9] hid-generic 0000:0000:0000.0018: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1539.181630][ T1509] hsr0: entered promiscuous mode
[ 1539.190299][ T1509] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4592'.
[ 1539.200931][ T1509] hsr_slave_0: left promiscuous mode
[ 1539.210061][ T1509] hsr_slave_1: left promiscuous mode
[ 1539.220069][ T1509] hsr0 (unregistering): left promiscuous mode
[ 1539.234153][   T10] usb 5-1: new full-speed USB device number 110 using dummy_hcd
[ 1539.606186][   T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1539.616528][   T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1539.625869][   T10] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 1539.635317][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1539.646309][   T10] usb 5-1: config 0 descriptor??
[ 1539.667906][   T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 1539.678200][   T10] dvb-usb: bulk message failed: -22 (3/0)
[ 1539.693097][   T10] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 1539.712643][   T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 1539.720250][   T10] usb 5-1: media controller created
[ 1539.727679][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1539.749109][   T10] dvb-usb: bulk message failed: -22 (6/0)
[ 1539.759803][   T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 1539.775032][   T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input65
[ 1539.816903][   T10] dvb-usb: schedule remote query interval to 150 msecs.
[ 1539.877162][   T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 1540.050523][   T10] dvb-usb: bulk message failed: -22 (1/0)
[ 1540.080706][   T10] dvb-usb: error while querying for an remote control event.
[ 1540.277713][  T990] dvb-usb: bulk message failed: -22 (1/0)
[ 1540.310184][  T990] dvb-usb: error while querying for an remote control event.
[ 1540.494060][   T10] dvb-usb: bulk message failed: -22 (1/0)
[ 1540.500263][   T10] dvb-usb: error while querying for an remote control event.
[ 1540.661788][T24993] uvcvideo 1-1:63.66: Found UVC 0.07 device syz (174f:8acf)
[ 1540.678364][T24993] uvcvideo 1-1:63.66: No valid video chain found.
[ 1540.692414][T24993] usb 1-1: USB disconnect, device number 86
[ 1540.736471][   T10] dvb-usb: bulk message failed: -22 (1/0)
[ 1540.742338][   T10] dvb-usb: error while querying for an remote control event.
[ 1540.857888][ T1559] overlayfs: missing 'lowerdir'
[ 1540.934107][  T990] dvb-usb: bulk message failed: -22 (1/0)
[ 1540.934144][  T990] dvb-usb: error while querying for an remote control event.
[ 1541.094087][   T10] dvb-usb: bulk message failed: -22 (1/0)
[ 1541.114216][   T10] dvb-usb: error while querying for an remote control event.
[ 1541.188579][ T1570] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4595'.
[ 1541.314161][   T10] dvb-usb: bulk message failed: -22 (1/0)
[ 1541.321824][   T10] dvb-usb: error while querying for an remote control event.
[ 1541.494001][   T10] dvb-usb: bulk message failed: -22 (1/0)
[ 1541.499855][   T10] dvb-usb: error while querying for an remote control event.
[ 1541.696299][   T10] dvb-usb: bulk message failed: -22 (1/0)
[ 1541.704065][   T10] dvb-usb: error while querying for an remote control event.
[ 1541.884018][   T10] dvb-usb: bulk message failed: -22 (1/0)
[ 1541.892255][   T10] dvb-usb: error while querying for an remote control event.
[ 1542.193980][   T10] dvb-usb: bulk message failed: -22 (1/0)
[ 1542.312158][   T10] dvb-usb: error while querying for an remote control event.
[ 1542.322362][  T990] usb 5-1: USB disconnect, device number 110
[ 1542.424666][  T990] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 1542.543524][ T1595] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4601'.
[ 1542.577758][ T1595] openvswitch: netlink: Missing key (keys=8040, expected=2000)
[ 1542.739896][ T1618] FAULT_INJECTION: forcing a failure.
[ 1542.739896][ T1618] name failslab, interval 1, probability 0, space 0, times 0
[ 1542.791356][ T1618] CPU: 1 UID: 0 PID: 1618 Comm: syz.0.4603 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1542.791384][ T1618] Tainted: [L]=SOFTLOCKUP
[ 1542.791391][ T1618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1542.791401][ T1618] Call Trace:
[ 1542.791408][ T1618]  <TASK>
[ 1542.791415][ T1618]  dump_stack_lvl+0x100/0x190
[ 1542.791441][ T1618]  should_fail_ex.cold+0x5/0xa
[ 1542.791466][ T1618]  should_failslab+0xc2/0x120
[ 1542.791487][ T1618]  __kvmalloc_node_noprof+0xfa/0xa00
[ 1542.791512][ T1618]  ? file_tty_write.isra.0+0x64e/0x890
[ 1542.791539][ T1618]  file_tty_write.isra.0+0x64e/0x890
[ 1542.791558][ T1618]  ? security_file_permission+0x76/0x210
[ 1542.791586][ T1618]  ? rw_verify_area+0xce/0x6d0
[ 1542.791607][ T1618]  vfs_write+0x6ac/0x1070
[ 1542.791636][ T1618]  ? __pfx_tty_write+0x10/0x10
[ 1542.791657][ T1618]  ? __pfx_vfs_write+0x10/0x10
[ 1542.791673][ T1618]  ? find_held_lock+0x2b/0x80
[ 1542.791706][ T1618]  ksys_write+0x12a/0x250
[ 1542.791725][ T1618]  ? __pfx_ksys_write+0x10/0x10
[ 1542.791747][ T1618]  ? rcu_is_watching+0x12/0xc0
[ 1542.791776][ T1618]  do_syscall_64+0x115/0x870
[ 1542.791799][ T1618]  ? clear_bhb_loop+0x40/0x90
[ 1542.791820][ T1618]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1542.791838][ T1618] RIP: 0033:0x7f0afd19ce59
[ 1542.791853][ T1618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1542.791870][ T1618] RSP: 002b:00007f0afb3d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1542.791888][ T1618] RAX: ffffffffffffffda RBX: 00007f0afd416090 RCX: 00007f0afd19ce59
[ 1542.791899][ T1618] RDX: 000000000000045c RSI: 00002000000004c0 RDI: 0000000000000004
[ 1542.791908][ T1618] RBP: 00007f0afb3d5090 R08: 0000000000000000 R09: 0000000000000000
[ 1542.791918][ T1618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1542.791927][ T1618] R13: 00007f0afd416128 R14: 00007f0afd416090 R15: 00007ffdabec7588
[ 1542.791950][ T1618]  </TASK>
[ 1543.048405][  T803] usb 2-1: new high-speed USB device number 93 using dummy_hcd
[ 1543.208075][  T803] usb 2-1: Using ep0 maxpacket: 32
[ 1543.219393][  T803] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[ 1543.231965][  T803] usb 2-1: config 0 has no interface number 0
[ 1543.248896][  T803] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 1543.260474][  T803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1543.272291][  T803] usb 2-1: Product: syz
[ 1543.279496][  T803] usb 2-1: Manufacturer: syz
[ 1543.286893][  T803] usb 2-1: SerialNumber: syz
[ 1543.293245][  T803] usb 2-1: config 0 descriptor??
[ 1543.306410][T24993] usb 5-1: new high-speed USB device number 111 using dummy_hcd
[ 1543.321926][  T803] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 1543.468341][T24993] usb 5-1: Using ep0 maxpacket: 16
[ 1543.479830][T24993] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7
[ 1543.500790][T24993] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[ 1543.518572][T24993] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1543.531434][T24993] usb 5-1: Product: syz
[ 1543.549545][  T803] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[ 1543.567733][T24993] usb 5-1: Manufacturer: syz
[ 1543.632072][T24993] usb 5-1: SerialNumber: syz
[ 1543.658416][  T803] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[ 1543.699119][T24993] usb 5-1: config 0 descriptor??
[ 1543.748705][T24993] hub 5-1:0.0: bad descriptor, ignoring hub
[ 1543.779224][T24993] hub 5-1:0.0: probe with driver hub failed with error -5
[ 1543.811891][T24993] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[ 1543.966302][ T1683] ubi: mtd0 is already attached to ubi16
[ 1543.985141][T21173] usb 1-1: new high-speed USB device number 87 using dummy_hcd
[ 1544.047549][ T1683] netlink: 'syz.3.4608': attribute type 10 has an invalid length.
[ 1544.058931][ T1683] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4608'.
[ 1544.075143][ T1683] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check.
[ 1544.223440][ T1688] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.4609'.
[ 1544.243745][T21173] usb 1-1: Using ep0 maxpacket: 8
[ 1544.250469][T21173] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1544.281699][T21173] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89
[ 1544.329981][T21173] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[ 1544.372705][T21173] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024
[ 1544.388035][T21173] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 1544.400436][T21173] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[ 1544.418293][T21173] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1544.442597][T21173] usb 1-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[ 1544.452175][T21173] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1544.461023][T21173] usb 1-1: Product: syz
[ 1544.466885][T21173] usb 1-1: Manufacturer: syz
[ 1544.471899][ T1693] overlayfs: missing 'lowerdir'
[ 1544.479714][T21173] usb 1-1: SerialNumber: syz
[ 1544.953962][T21173] usb 1-1: config 0 descriptor??
[ 1544.963137][ T1663] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[ 1544.979817][   T10] usb 5-1: USB disconnect, device number 111
[ 1544.995758][T21173] ati_remote 1-1:0.0: Initializing ati_remote hardware failed.
[ 1545.032173][T21173] ati_remote 1-1:0.0: probe with driver ati_remote failed with error -5
[ 1545.204344][T21173] usb 1-1: USB disconnect, device number 87
[ 1545.499677][    C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[ 1545.500090][   T10] usb 2-1: USB disconnect, device number 93
[ 1545.580539][   T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[ 1545.646323][   T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[ 1545.661903][   T10] quatech2 2-1:0.51: device disconnected
[ 1547.024069][ T1765] ubi: mtd0 is already attached to ubi16
[ 1547.136765][ T1765] netlink: 'syz.4.4615': attribute type 10 has an invalid length.
[ 1547.144892][ T1765] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4615'.
[ 1547.154068][ T1765] bridge0: port 1(veth1_macvtap) entered blocking state
[ 1547.161511][ T1765] bridge0: port 1(veth1_macvtap) entered disabled state
[ 1547.169734][ T1765] veth1_macvtap: entered allmulticast mode
[ 1547.180129][ T1765] veth1_macvtap: left allmulticast mode
[ 1547.186256][ T1765] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check.
[ 1548.152805][ T1780] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4616'.
[ 1548.847097][ T1790] overlayfs: missing 'lowerdir'
[ 1549.503788][ T1799] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4622'.
[ 1550.861966][T24993] usb 5-1: new high-speed USB device number 112 using dummy_hcd
[ 1551.046913][T24993] usb 5-1: Using ep0 maxpacket: 32
[ 1551.097098][T24993] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[ 1551.119874][T24993] usb 5-1: config 0 has no interface number 0
[ 1551.179273][T24993] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 1551.230630][T24993] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1551.256304][T27229] usb 2-1: new high-speed USB device number 94 using dummy_hcd
[ 1551.281496][T24993] usb 5-1: Product: syz
[ 1551.295992][T24993] usb 5-1: Manufacturer: syz
[ 1551.316772][T24993] usb 5-1: SerialNumber: syz
[ 1551.335633][  T990] usb 3-1: new low-speed USB device number 126 using dummy_hcd
[ 1551.342440][T24993] usb 5-1: config 0 descriptor??
[ 1551.438362][T24993] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 1551.451691][T27229] usb 2-1: Using ep0 maxpacket: 32
[ 1551.496349][T27229] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[ 1551.508516][T27229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1551.559019][  T990] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[ 1551.591009][T27229] gspca_main: nw80x-2.14.0 probing 055f:d001
[ 1551.600838][  T990] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1551.639933][T24993] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[ 1551.666766][  T990] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1551.683126][T24993] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[ 1551.788112][  T990] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1551.895543][  T990] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 1551.986534][  T990] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[ 1552.001353][  T990] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1552.033311][    C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71
[ 1552.051388][T24993] usb 5-1: USB disconnect, device number 112
[ 1552.052655][  T990] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1552.130656][T27229] gspca_nw80x: reg_w err -110
[ 1552.176998][T24993] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[ 1552.185297][  T990] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1552.223026][T27229] nw80x 2-1:3.0: probe with driver nw80x failed with error -110
[ 1552.269129][  T990] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 1552.301899][  T990] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[ 1552.313057][  T990] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1552.336088][  T990] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1552.361003][  T990] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1552.386881][  T990] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 1552.420590][  T990] usb 3-1: string descriptor 0 read error: -22
[ 1552.428041][  T990] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1552.447224][  T990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1552.570345][  T990] adutux 3-1:168.0: ADU100  now attached to /dev/usb/adutux0
[ 1552.571089][T24993] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[ 1552.648653][T24993] quatech2 5-1:0.51: device disconnected
[ 1553.132339][  T990] usb 2-1: USB disconnect, device number 94
[ 1553.315136][ T1890] netlink: 'syz.4.4629': attribute type 10 has an invalid length.
[ 1553.323073][ T1890] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4629'.
[ 1553.338458][ T1890] bridge0: port 1(veth1_macvtap) entered blocking state
[ 1553.345555][ T1890] bridge0: port 1(veth1_macvtap) entered disabled state
[ 1553.353247][ T1890] veth1_macvtap: entered allmulticast mode
[ 1553.364434][ T1890] veth1_macvtap: left allmulticast mode
[ 1553.372146][ T1890] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check.
[ 1555.251341][ T1894] FAULT_INJECTION: forcing a failure.
[ 1555.251341][ T1894] name failslab, interval 1, probability 0, space 0, times 0
[ 1555.358496][ T1894] CPU: 0 UID: 0 PID: 1894 Comm: syz.1.4631 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1555.358520][ T1894] Tainted: [L]=SOFTLOCKUP
[ 1555.358524][ T1894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1555.358531][ T1894] Call Trace:
[ 1555.358536][ T1894]  <TASK>
[ 1555.358540][ T1894]  dump_stack_lvl+0x100/0x190
[ 1555.358558][ T1894]  should_fail_ex.cold+0x5/0xa
[ 1555.358575][ T1894]  should_failslab+0xc2/0x120
[ 1555.358588][ T1894]  kmem_cache_alloc_noprof+0x7b/0x6e0
[ 1555.358606][ T1894]  ? security_file_alloc+0x34/0x2c0
[ 1555.358623][ T1894]  ? trace_kmem_cache_alloc+0xd5/0x100
[ 1555.358639][ T1894]  security_file_alloc+0x34/0x2c0
[ 1555.358658][ T1894]  init_file+0x95/0x480
[ 1555.358674][ T1894]  alloc_empty_file+0x79/0x1c0
[ 1555.358695][ T1894]  alloc_file_pseudo+0x13a/0x230
[ 1555.358721][ T1894]  ? __pfx_alloc_file_pseudo+0x10/0x10
[ 1555.358745][ T1894]  ? inode_init_always_gfp+0xc98/0xfb0
[ 1555.358769][ T1894]  sock_alloc_file+0x50/0x210
[ 1555.358781][ T1894]  do_accept+0x242/0x530
[ 1555.358796][ T1894]  ? do_raw_spin_lock+0x128/0x260
[ 1555.358814][ T1894]  ? __pfx_do_accept+0x10/0x10
[ 1555.358837][ T1894]  __sys_accept4+0x108/0x200
[ 1555.358853][ T1894]  ? __pfx___sys_accept4+0x10/0x10
[ 1555.358868][ T1894]  ? ksys_write+0x1ac/0x250
[ 1555.358880][ T1894]  ? __pfx_ksys_write+0x10/0x10
[ 1555.358895][ T1894]  __x64_sys_accept+0x74/0xb0
[ 1555.358910][ T1894]  ? lockdep_hardirqs_on+0x78/0x100
[ 1555.358925][ T1894]  do_syscall_64+0x115/0x870
[ 1555.358939][ T1894]  ? clear_bhb_loop+0x40/0x90
[ 1555.358953][ T1894]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1555.358964][ T1894] RIP: 0033:0x7f2b6e79ce59
[ 1555.358974][ T1894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1555.358985][ T1894] RSP: 002b:00007f2b6f625028 EFLAGS: 00000246 ORIG_RAX: 000000000000002b
[ 1555.358997][ T1894] RAX: ffffffffffffffda RBX: 00007f2b6ea15fa0 RCX: 00007f2b6e79ce59
[ 1555.359009][ T1894] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[ 1555.359016][ T1894] RBP: 00007f2b6f625090 R08: 0000000000000000 R09: 0000000000000000
[ 1555.359022][ T1894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1555.359029][ T1894] R13: 00007f2b6ea16038 R14: 00007f2b6ea15fa0 R15: 00007ffcc29bdb58
[ 1555.359047][ T1894]  </TASK>
[ 1556.256951][  T990] usb 5-1: new high-speed USB device number 113 using dummy_hcd
[ 1556.285961][T24993] usb 2-1: new high-speed USB device number 95 using dummy_hcd
[ 1556.372083][ T1914] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4634'.
[ 1556.387178][ T1914] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4634'.
[ 1556.434107][  T990] usb 5-1: Using ep0 maxpacket: 16
[ 1556.447083][  T990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7
[ 1556.456482][T24993] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1556.469587][  T990] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[ 1556.479450][  T990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1556.487280][T24993] usb 2-1: config 63 has an invalid interface number: 66 but max is 0
[ 1556.492532][  T990] usb 5-1: Product: syz
[ 1556.499822][  T990] usb 5-1: Manufacturer: syz
[ 1556.502067][T24993] usb 2-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config
[ 1556.508498][ T1919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1556.520565][T24993] usb 2-1: config 63 has no interface number 0
[ 1556.527976][  T990] usb 5-1: SerialNumber: syz
[ 1556.530205][  T990] usb 5-1: config 0 descriptor??
[ 1556.532121][  T990] hub 5-1:0.0: bad descriptor, ignoring hub
[ 1556.542151][T24993] usb 2-1: config 63 interface 66 has no altsetting 0
[ 1556.557063][ T1919] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1556.557270][  T990] hub 5-1:0.0: probe with driver hub failed with error -5
[ 1556.561267][  T990] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[ 1556.599846][T24993] usb 2-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4
[ 1556.618506][T24993] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1556.631272][T24993] usb 2-1: Product: syz
[ 1556.639376][T24993] usb 2-1: Manufacturer: syz
[ 1556.657979][T24993] usb 2-1: SerialNumber: syz
[ 1556.780357][ T1939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1556.802150][ T1939] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1556.833351][T10695] block nbd3: Receive control failed (result -32)
[ 1556.848752][ T1919] block nbd3: shutting down sockets
[ 1557.049492][  T990] usb 5-1: USB disconnect, device number 113
[ 1557.071726][ T1952] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4635'.
[ 1557.283920][  T990] usb 3-1: USB disconnect, device number 126
[ 1558.638973][ T1992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1559.121935][T24993] uvcvideo 2-1:63.66: Found UVC 0.07 device syz (174f:8acf)
[ 1559.150838][T24993] uvcvideo 2-1:63.66: No valid video chain found.
[ 1559.178152][T24993] usb 2-1: USB disconnect, device number 95
[ 1559.238973][   T29] audit: type=1400 audit(1781170486.416:1453): avc:  denied  { mount } for  pid=2001 comm="syz.1.4644" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1
[ 1559.309370][ T2012] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4646'.
[ 1559.336190][ T2012] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4646'.
[ 1560.194998][ T2033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1560.254067][ T2016] [U] 
[ 1560.268568][ T2033] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1560.773877][ T2045] ubi: mtd0 is already attached to ubi16
[ 1560.784894][ T2045] netlink: 'syz.4.4652': attribute type 10 has an invalid length.
[ 1560.792785][ T2045] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4652'.
[ 1560.802510][ T2045] bridge0: port 1(veth1_macvtap) entered blocking state
[ 1560.812785][ T2045] bridge0: port 1(veth1_macvtap) entered disabled state
[ 1560.820576][ T2045] veth1_macvtap: entered allmulticast mode
[ 1560.833451][ T2045] veth1_macvtap: left allmulticast mode
[ 1560.843016][ T2045] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check.
[ 1561.612430][ T2054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1561.628656][ T2054] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1561.860197][ T2056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4656'.
[ 1561.877285][ T2056] openvswitch: netlink: Key 14 has unexpected len 4 expected 28
[ 1561.938530][   T29] audit: type=1326 audit(1781170489.116:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2065 comm="syz.2.4657" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6e3a19ce59 code=0x0
[ 1562.116197][ T2069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4658'.
[ 1562.129257][ T2069] openvswitch: netlink: Key 14 has unexpected len 4 expected 28
[ 1562.296583][T24993] usb 3-1: new high-speed USB device number 127 using dummy_hcd
[ 1562.378501][ T2082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1562.648196][ T2089] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[ 1562.688104][ T2084] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1562.699209][T24993] usb 3-1: config 2 has an invalid interface number: 193 but max is 0
[ 1562.710525][T24993] usb 3-1: config 2 has no interface number 0
[ 1562.719755][T24993] usb 3-1: config 2 interface 193 has no altsetting 0
[ 1562.732476][T24993] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0800, bcdDevice=e5.52
[ 1562.745362][T24993] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1562.756532][T24993] usb 3-1: Product: syz
[ 1562.760748][T24993] usb 3-1: Manufacturer: syz
[ 1562.768602][T24993] usb 3-1: SerialNumber: syz
[ 1562.802935][   T10] usb 1-1: new high-speed USB device number 88 using dummy_hcd
[ 1562.962877][   T10] usb 1-1: Using ep0 maxpacket: 8
[ 1562.969282][   T10] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1562.983162][   T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1562.993330][   T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1563.004459][   T10] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1563.017557][   T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1563.026710][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1563.246552][   T10] usb 1-1: GET_CAPABILITIES returned 0
[ 1563.252264][   T10] usbtmc 1-1:16.0: can't read capabilities
[ 1563.938181][ T2111] netlink: 'syz.4.4664': attribute type 2 has an invalid length.
[ 1563.988730][ T2114] netlink: 'syz.4.4664': attribute type 2 has an invalid length.
[ 1565.764592][ T2118] ubi: mtd0 is already attached to ubi16
[ 1565.796162][ T2118] netlink: 'syz.1.4665': attribute type 10 has an invalid length.
[ 1565.806839][ T2118] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4665'.
[ 1566.080795][T24993] qmi_wwan 3-1:2.193: probe with driver qmi_wwan failed with error -22
[ 1566.118484][T24993] usb 3-1: USB disconnect, device number 127
[ 1566.183931][T21173] usb 1-1: USB disconnect, device number 88
[ 1566.224294][ T2118] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check.
[ 1566.659089][T24993] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[ 1566.925918][T24993] usb 3-1: device descriptor read/64, error -71
[ 1567.427103][   T29] audit: type=1400 audit(1781170494.606:1455): avc:  denied  { getopt } for  pid=2164 comm="syz.1.4672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 1567.484944][T24993] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[ 1567.598151][ T2174] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1567.735484][T24993] usb 3-1: device descriptor read/64, error -71
[ 1567.847479][T24993] usb usb3-port1: attempt power cycle
[ 1568.246052][T24993] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[ 1568.277505][T24993] usb 3-1: device descriptor read/8, error -71
[ 1568.505847][ T2183] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4670'.
[ 1568.550209][T24993] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[ 1568.600871][T24993] usb 3-1: device descriptor read/8, error -71
[ 1569.112187][T24993] usb usb3-port1: unable to enumerate USB device
[ 1569.236702][ T5837] usb 2-1: new high-speed USB device number 96 using dummy_hcd
[ 1569.306951][ T2201] netlink: 'syz.2.4678': attribute type 2 has an invalid length.
[ 1569.357774][ T2204] netlink: 'syz.2.4678': attribute type 2 has an invalid length.
[ 1569.411108][ T5837] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1569.446431][ T5837] usb 2-1: config 63 has an invalid interface number: 66 but max is 0
[ 1569.471629][ T5837] usb 2-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config
[ 1569.520238][ T5837] usb 2-1: config 63 has no interface number 0
[ 1569.581532][ T5837] usb 2-1: config 63 interface 66 has no altsetting 0
[ 1569.661339][ T5837] usb 2-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4
[ 1569.756764][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1569.819107][ T5837] usb 2-1: Product: syz
[ 1569.911892][ T5837] usb 2-1: Manufacturer: syz
[ 1569.981662][ T5837] usb 2-1: SerialNumber: syz
[ 1570.322420][T21173] usb 5-1: new full-speed USB device number 114 using dummy_hcd
[ 1571.272598][ T2213] ubi: mtd0 is already attached to ubi16
[ 1571.290607][ T2213] netlink: 'syz.3.4679': attribute type 10 has an invalid length.
[ 1571.298772][ T2213] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4679'.
[ 1571.310657][ T2213] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check.
[ 1571.369193][T21173] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1571.385589][T21173] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1571.681382][ T5837] uvcvideo 2-1:63.66: Found UVC 0.07 device syz (174f:8acf)
[ 1571.691802][ T5837] uvcvideo 2-1:63.66: No valid video chain found.
[ 1571.753683][T21173] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 1571.766535][T21173] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1571.778204][ T5837] usb 2-1: USB disconnect, device number 96
[ 1571.813630][T21173] usb 5-1: config 0 descriptor??
[ 1571.863492][T21173] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 1571.890505][T21173] dvb-usb: bulk message failed: -22 (3/0)
[ 1571.910502][T21173] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 1571.927601][T21173] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 1571.935386][T21173] usb 5-1: media controller created
[ 1571.942063][T21173] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1571.971911][T21173] dvb-usb: bulk message failed: -22 (6/0)
[ 1571.978380][ T2236] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4681'.
[ 1571.991606][T21173] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 1572.001996][T21173] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input67
[ 1572.016772][T21173] dvb-usb: schedule remote query interval to 150 msecs.
[ 1572.024580][T21173] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 1572.027970][ T2243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1572.090545][ T2243] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1572.105582][ T2236] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1572.139546][   T29] audit: type=1400 audit(1781170499.317:1456): avc:  denied  { create } for  pid=2233 comm="syz.3.4681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1
[ 1572.182460][    T9] dvb-usb: bulk message failed: -22 (1/0)
[ 1572.188254][    T9] dvb-usb: error while querying for an remote control event.
[ 1572.195722][ T5837] usb 2-1: new high-speed USB device number 97 using dummy_hcd
[ 1572.354932][ T5837] usb 2-1: Using ep0 maxpacket: 8
[ 1572.361380][ T5837] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1572.372286][    T9] dvb-usb: bulk message failed: -22 (1/0)
[ 1572.372314][    T9] dvb-usb: error while querying for an remote control event.
[ 1572.395743][ T5837] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1572.409789][ T5837] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1572.428586][ T5837] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1572.445686][ T5837] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1572.458202][ T5837] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1572.532737][    T9] dvb-usb: bulk message failed: -22 (1/0)
[ 1572.548472][    T9] dvb-usb: error while querying for an remote control event.
[ 1572.680785][ T5837] usb 2-1: GET_CAPABILITIES returned 0
[ 1572.689499][ T5837] usbtmc 2-1:16.0: can't read capabilities
[ 1572.722241][    T9] dvb-usb: bulk message failed: -22 (1/0)
[ 1572.729224][    T9] dvb-usb: error while querying for an remote control event.
[ 1572.914552][    T9] dvb-usb: bulk message failed: -22 (1/0)
[ 1572.920432][    T9] dvb-usb: error while querying for an remote control event.
[ 1573.080293][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1573.091392][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1573.102291][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1573.111382][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1573.120475][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1573.129560][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1573.138653][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1573.147734][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1573.157398][    T9] dvb-usb: bulk message failed: -22 (1/0)
[ 1573.165506][    T9] dvb-usb: error while querying for an remote control event.
[ 1573.195155][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1573.204276][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1573.213362][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1573.222457][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1573.282586][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1573.291691][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1573.300752][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1573.309820][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1573.330965][    T9] usb 5-1: USB disconnect, device number 114
[ 1573.793274][ T2306] ubi: mtd0 is already attached to ubi16
[ 1573.803266][ T2306] netlink: 'syz.3.4685': attribute type 10 has an invalid length.
[ 1573.811266][ T2306] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4685'.
[ 1573.822421][ T2306] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check.
[ 1574.619237][    T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 1574.668801][ T2321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1574.984549][ T2217] usb 2-1: USB disconnect, device number 97
[ 1575.619231][   T24] usb 2-1: new high-speed USB device number 98 using dummy_hcd
[ 1575.738681][ T2359] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[ 1575.798501][   T24] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1575.839046][   T24] usb 2-1: config 63 has an invalid interface number: 66 but max is 0
[ 1575.869278][   T24] usb 2-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config
[ 1575.888309][   T24] usb 2-1: config 63 has no interface number 0
[ 1575.897015][   T24] usb 2-1: config 63 interface 66 has no altsetting 0
[ 1575.909465][   T24] usb 2-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4
[ 1575.925104][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1575.936045][   T24] usb 2-1: Product: syz
[ 1575.940612][   T24] usb 2-1: Manufacturer: syz
[ 1575.949564][   T24] usb 2-1: SerialNumber: syz
[ 1576.241669][ T2386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1576.257593][ T2386] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1576.430534][ T2392] FAULT_INJECTION: forcing a failure.
[ 1576.430534][ T2392] name failslab, interval 1, probability 0, space 0, times 0
[ 1576.443223][ T2392] CPU: 0 UID: 0 PID: 2392 Comm: syz.4.4695 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1576.443252][ T2392] Tainted: [L]=SOFTLOCKUP
[ 1576.443258][ T2392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1576.443268][ T2392] Call Trace:
[ 1576.443276][ T2392]  <TASK>
[ 1576.443284][ T2392]  dump_stack_lvl+0x100/0x190
[ 1576.443309][ T2392]  should_fail_ex.cold+0x5/0xa
[ 1576.443333][ T2392]  ? __pfx_crypto_alg_extsize+0x10/0x10
[ 1576.443356][ T2392]  should_failslab+0xc2/0x120
[ 1576.443376][ T2392]  ? __pfx_crypto_alg_extsize+0x10/0x10
[ 1576.443399][ T2392]  __kmalloc_node_noprof+0xe6/0x850
[ 1576.443424][ T2392]  ? crypto_alloc_tfmmem.isra.0+0x38/0x110
[ 1576.443447][ T2392]  ? __pfx_crypto_alg_extsize+0x10/0x10
[ 1576.443470][ T2392]  crypto_alloc_tfmmem.isra.0+0x38/0x110
[ 1576.443491][ T2392]  crypto_create_tfm_node+0x85/0x350
[ 1576.443513][ T2392]  crypto_alloc_tfm_node+0x102/0x260
[ 1576.443536][ T2392]  __keyctl_dh_compute+0x2b7/0x10d0
[ 1576.443552][ T2392]  ? find_held_lock+0x2b/0x80
[ 1576.443567][ T2392]  ? get_pid_task+0xfc/0x250
[ 1576.443584][ T2392]  ? get_pid_task+0xfc/0x250
[ 1576.443603][ T2392]  ? __pfx___keyctl_dh_compute+0x10/0x10
[ 1576.443624][ T2392]  ? proc_fail_nth_write+0x9f/0x220
[ 1576.443667][ T2392]  keyctl_dh_compute+0xd9/0x140
[ 1576.443684][ T2392]  ? __pfx_keyctl_dh_compute+0x10/0x10
[ 1576.443706][ T2392]  ? ksys_write+0x1ac/0x250
[ 1576.443724][ T2392]  ? __pfx_ksys_write+0x10/0x10
[ 1576.443746][ T2392]  __do_sys_keyctl+0x464/0x5a0
[ 1576.443770][ T2392]  do_syscall_64+0x115/0x870
[ 1576.443792][ T2392]  ? clear_bhb_loop+0x40/0x90
[ 1576.443813][ T2392]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1576.443830][ T2392] RIP: 0033:0x7f58b299ce59
[ 1576.443845][ T2392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1576.443861][ T2392] RSP: 002b:00007f58b38c3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[ 1576.443879][ T2392] RAX: ffffffffffffffda RBX: 00007f58b2c16180 RCX: 00007f58b299ce59
[ 1576.443890][ T2392] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000017
[ 1576.443900][ T2392] RBP: 00007f58b38c3090 R08: 0000200000000180 R09: 0000000000000000
[ 1576.443916][ T2392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1576.443926][ T2392] R13: 00007f58b2c16218 R14: 00007f58b2c16180 R15: 00007ffdbac7f3f8
[ 1576.443949][ T2392]  </TASK>
[ 1576.443957][ T2392] could not allocate digest TFM handle sha256
[ 1577.290211][ T2399] Cannot find del_set index 4 as target
[ 1577.586825][ T2406] ubi: mtd0 is already attached to ubi16
[ 1577.607381][ T2406] netlink: 'syz.2.4700': attribute type 10 has an invalid length.
[ 1577.615427][ T2406] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4700'.
[ 1577.626590][ T2406] bridge0: port 3(veth1_macvtap) entered blocking state
[ 1577.635165][ T2406] bridge0: port 3(veth1_macvtap) entered disabled state
[ 1578.287368][   T24] uvcvideo 2-1:63.66: Found UVC 0.07 device syz (174f:8acf)
[ 1578.310241][ T2406] veth1_macvtap: entered allmulticast mode
[ 1578.316943][   T24] uvcvideo 2-1:63.66: No valid video chain found.
[ 1578.322409][ T2406] veth1_macvtap: left allmulticast mode
[ 1578.329871][   T24] usb 2-1: USB disconnect, device number 98
[ 1578.415372][ T2406] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check.
[ 1578.760242][ T2435] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2435 comm=syz.4.4704
[ 1579.041890][    T9] usb 2-1: new full-speed USB device number 99 using dummy_hcd
[ 1579.203350][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1579.225553][    T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[ 1579.265452][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[ 1579.321591][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[ 1579.380214][    T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1579.434203][    T9] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[ 1579.464221][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[ 1579.482626][    T9] usb 2-1: Product: syz
[ 1579.492722][    T9] usb 2-1: Manufacturer: syz
[ 1579.503659][    T9] usb 2-1: SerialNumber: syz
[ 1579.511035][ T2452] FAULT_INJECTION: forcing a failure.
[ 1579.511035][ T2452] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1579.513353][    T9] usb 2-1: config 0 descriptor??
[ 1579.554788][ T2452] CPU: 1 UID: 0 PID: 2452 Comm: syz.2.4706 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1579.554815][ T2452] Tainted: [L]=SOFTLOCKUP
[ 1579.554821][ T2452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1579.554832][ T2452] Call Trace:
[ 1579.554838][ T2452]  <TASK>
[ 1579.554844][ T2452]  dump_stack_lvl+0x100/0x190
[ 1579.554869][ T2452]  should_fail_ex.cold+0x5/0xa
[ 1579.554891][ T2452]  _copy_from_iter+0x1f4/0x1690
[ 1579.554907][ T2452]  ? __asan_memset+0x23/0x50
[ 1579.554924][ T2452]  ? __pfx__copy_from_iter+0x10/0x10
[ 1579.554938][ T2452]  ? __pfx___alloc_skb+0x10/0x10
[ 1579.554969][ T2452]  netlink_sendmsg+0x808/0xda0
[ 1579.554995][ T2452]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1579.555013][ T2452]  ? __might_fault+0xa0/0x140
[ 1579.555041][ T2452]  ____sys_sendmsg+0x9e1/0xb70
[ 1579.555053][ T2452]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1579.555069][ T2452]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1579.555088][ T2452]  ___sys_sendmsg+0x190/0x1e0
[ 1579.555110][ T2452]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1579.555157][ T2452]  __sys_sendmsg+0x170/0x220
[ 1579.555179][ T2452]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1579.555202][ T2452]  ? rcu_is_watching+0x12/0xc0
[ 1579.555224][ T2452]  do_syscall_64+0x115/0x870
[ 1579.555241][ T2452]  ? clear_bhb_loop+0x40/0x90
[ 1579.555262][ T2452]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1579.555278][ T2452] RIP: 0033:0x7f6e3a19ce59
[ 1579.555293][ T2452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1579.555309][ T2452] RSP: 002b:00007f6e3b0ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1579.555323][ T2452] RAX: ffffffffffffffda RBX: 00007f6e3a415fa0 RCX: 00007f6e3a19ce59
[ 1579.555330][ T2452] RDX: 0000000000044000 RSI: 0000200000000240 RDI: 0000000000000003
[ 1579.555337][ T2452] RBP: 00007f6e3b0ee090 R08: 0000000000000000 R09: 0000000000000000
[ 1579.555343][ T2452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1579.555350][ T2452] R13: 00007f6e3a416038 R14: 00007f6e3a415fa0 R15: 00007fff25bded98
[ 1579.555364][ T2452]  </TASK>
[ 1579.909632][    T9] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000
[ 1579.949885][    T9] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[ 1580.081795][    T9] radio-si470x 2-1:0.0: software version 167, hardware version 100
[ 1580.114737][    T9] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org
[ 1580.158721][ T2468] FAULT_INJECTION: forcing a failure.
[ 1580.158721][ T2468] name failslab, interval 1, probability 0, space 0, times 0
[ 1580.180501][ T2468] CPU: 1 UID: 0 PID: 2468 Comm: syz.2.4710 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1580.180530][ T2468] Tainted: [L]=SOFTLOCKUP
[ 1580.180537][ T2468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1580.180547][ T2468] Call Trace:
[ 1580.180553][ T2468]  <TASK>
[ 1580.180560][ T2468]  dump_stack_lvl+0x100/0x190
[ 1580.180586][ T2468]  should_fail_ex.cold+0x5/0xa
[ 1580.180612][ T2468]  should_failslab+0xc2/0x120
[ 1580.180633][ T2468]  kmem_cache_alloc_node_noprof+0x81/0x6f0
[ 1580.180661][ T2468]  ? __alloc_skb+0x140/0x710
[ 1580.180692][ T2468]  __alloc_skb+0x140/0x710
[ 1580.180714][ T2468]  ? __alloc_skb+0x5b7/0x710
[ 1580.180738][ T2468]  ? __pfx___alloc_skb+0x10/0x10
[ 1580.180761][ T2468]  ? genl_rcv_msg+0x4be/0x800
[ 1580.180793][ T2468]  netlink_ack+0x117/0xb80
[ 1580.180822][ T2468]  netlink_rcv_skb+0x333/0x420
[ 1580.180843][ T2468]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1580.180869][ T2468]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1580.180901][ T2468]  ? netlink_deliver_tap+0x1ae/0xcc0
[ 1580.180929][ T2468]  genl_rcv+0x28/0x40
[ 1580.180950][ T2468]  netlink_unicast+0x585/0x850
[ 1580.180980][ T2468]  ? __pfx_netlink_unicast+0x10/0x10
[ 1580.181009][ T2468]  netlink_sendmsg+0x8b0/0xda0
[ 1580.181033][ T2468]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1580.181054][ T2468]  ? __might_fault+0xa0/0x140
[ 1580.181089][ T2468]  ____sys_sendmsg+0x9e1/0xb70
[ 1580.181108][ T2468]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1580.181131][ T2468]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1580.181164][ T2468]  ___sys_sendmsg+0x190/0x1e0
[ 1580.181187][ T2468]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1580.181241][ T2468]  __sys_sendmsg+0x170/0x220
[ 1580.181268][ T2468]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1580.181307][ T2468]  ? rcu_is_watching+0x12/0xc0
[ 1580.181336][ T2468]  do_syscall_64+0x115/0x870
[ 1580.181358][ T2468]  ? clear_bhb_loop+0x40/0x90
[ 1580.181380][ T2468]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1580.181397][ T2468] RIP: 0033:0x7f6e3a19ce59
[ 1580.181413][ T2468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1580.181429][ T2468] RSP: 002b:00007f6e3b0ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1580.181448][ T2468] RAX: ffffffffffffffda RBX: 00007f6e3a415fa0 RCX: 00007f6e3a19ce59
[ 1580.181459][ T2468] RDX: 0000000020000080 RSI: 0000200000000280 RDI: 0000000000000006
[ 1580.181470][ T2468] RBP: 00007f6e3b0ee090 R08: 0000000000000000 R09: 0000000000000000
[ 1580.181480][ T2468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1580.181490][ T2468] R13: 00007f6e3a416038 R14: 00007f6e3a415fa0 R15: 00007fff25bded98
[ 1580.181515][ T2468]  </TASK>
[ 1580.498660][    T9] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71
[ 1580.511725][    T9] radio-si470x 2-1:0.0: submitting int urb failed (-90)
[ 1580.542700][    T9] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71
[ 1580.605627][  T803] usb 5-1: new high-speed USB device number 115 using dummy_hcd
[ 1580.764783][  T803] usb 5-1: Using ep0 maxpacket: 32
[ 1580.778934][  T803] usb 5-1: config 0 has no interfaces?
[ 1580.787502][  T803] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1580.801168][  T803] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1580.831270][  T803] usb 5-1: config 0 descriptor??
[ 1580.994285][    T9] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22
[ 1581.671773][    T9] usb 2-1: USB disconnect, device number 99
[ 1581.709894][ T2501] FAULT_INJECTION: forcing a failure.
[ 1581.709894][ T2501] name failslab, interval 1, probability 0, space 0, times 0
[ 1581.722868][ T2501] CPU: 0 UID: 0 PID: 2501 Comm: syz.1.4713 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1581.722897][ T2501] Tainted: [L]=SOFTLOCKUP
[ 1581.722903][ T2501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1581.722914][ T2501] Call Trace:
[ 1581.722920][ T2501]  <TASK>
[ 1581.722926][ T2501]  dump_stack_lvl+0x100/0x190
[ 1581.722953][ T2501]  should_fail_ex.cold+0x5/0xa
[ 1581.722977][ T2501]  should_failslab+0xc2/0x120
[ 1581.722997][ T2501]  __kvmalloc_node_noprof+0xfa/0xa00
[ 1581.723023][ T2501]  ? io_alloc_cache_init+0x38/0x170
[ 1581.723046][ T2501]  ? lockdep_init_map_type+0x5c/0x250
[ 1581.723072][ T2501]  io_alloc_cache_init+0x38/0x170
[ 1581.723091][ T2501]  io_uring_setup.cold+0x3cd/0x1cde
[ 1581.723112][ T2501]  ? __pfx_io_uring_setup+0x10/0x10
[ 1581.723135][ T2501]  ? find_held_lock+0x2b/0x80
[ 1581.723149][ T2501]  ? avc_has_perm_noaudit+0x11e/0x3b0
[ 1581.723168][ T2501]  ? avc_has_perm_noaudit+0x11e/0x3b0
[ 1581.723203][ T2501]  ? ksys_write+0x1ac/0x250
[ 1581.723222][ T2501]  ? __pfx_ksys_write+0x10/0x10
[ 1581.723245][ T2501]  __x64_sys_io_uring_setup+0xc2/0x170
[ 1581.723271][ T2501]  do_syscall_64+0x115/0x870
[ 1581.723292][ T2501]  ? clear_bhb_loop+0x40/0x90
[ 1581.723313][ T2501]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1581.723330][ T2501] RIP: 0033:0x7f2b6e79ce59
[ 1581.723346][ T2501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1581.723362][ T2501] RSP: 002b:00007f2b6f624fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[ 1581.723378][ T2501] RAX: ffffffffffffffda RBX: 0000200000002600 RCX: 00007f2b6e79ce59
[ 1581.723389][ T2501] RDX: 00002000000026c0 RSI: 0000200000002600 RDI: 0000000000002f8f
[ 1581.723400][ T2501] RBP: 00007f2b6f625090 R08: 0000000000000000 R09: 0000000000000101
[ 1581.723410][ T2501] R10: 0000200000002700 R11: 0000000000000206 R12: 00002000000026c0
[ 1581.723421][ T2501] R13: 0000200000002700 R14: 0000200000002680 R15: 00007ffcc29bdb58
[ 1581.723445][ T2501]  </TASK>
[ 1581.730945][ T2503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1581.938789][ T2465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1581.973164][ T2465] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1581.988538][ T2503] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1582.037952][ T2465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1582.080765][ T2465] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1582.101464][ T2528] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4714'.
[ 1582.145298][  T803] usb 5-1: USB disconnect, device number 115
[ 1582.492798][ T2555] ubi: mtd0 is already attached to ubi16
[ 1582.503318][ T2555] netlink: 'syz.2.4716': attribute type 10 has an invalid length.
[ 1582.511716][ T2555] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4716'.
[ 1582.521250][ T2555] bridge0: port 3(veth1_macvtap) entered blocking state
[ 1582.538334][ T2555] bridge0: port 3(veth1_macvtap) entered disabled state
[ 1582.545873][ T2555] veth1_macvtap: entered allmulticast mode
[ 1582.553913][ T2555] veth1_macvtap: left allmulticast mode
[ 1582.566054][ T2217] usb 2-1: new high-speed USB device number 100 using dummy_hcd
[ 1582.574535][ T2555] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check.
[ 1583.404158][ T2217] usb 2-1: Using ep0 maxpacket: 16
[ 1583.553140][ T2217] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7
[ 1583.609019][ T2217] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[ 1583.620584][ T2217] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1583.639773][ T2569] ufs: You didn't specify the type of your ufs filesystem
[ 1583.639773][ T2569] 
[ 1583.639773][ T2569] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[ 1583.639773][ T2569] 
[ 1583.639773][ T2569] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[ 1583.670618][ T2569] ufs: ufstype=old is supported read-only
[ 1583.676601][ T2569] ufs: ufs_fill_super(): bad magic number
[ 1583.715906][ T2217] usb 2-1: Product: syz
[ 1583.738113][ T2217] usb 2-1: Manufacturer: syz
[ 1583.752847][ T2217] usb 2-1: SerialNumber: syz
[ 1583.777580][ T2217] usb 2-1: config 0 descriptor??
[ 1583.800012][ T2217] hub 2-1:0.0: bad descriptor, ignoring hub
[ 1583.820590][ T2217] hub 2-1:0.0: probe with driver hub failed with error -5
[ 1583.834613][ T2217] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[ 1583.908034][ T2609] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[ 1584.024287][ T5837] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[ 1584.186925][ T5837] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1584.214192][ T5837] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1584.239535][ T5837] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 1584.268273][ T5837] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1584.309312][ T5837] usb 3-1: config 0 descriptor??
[ 1584.328686][ T2217] usb 2-1: USB disconnect, device number 100
[ 1584.331001][ T5837] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 1584.358162][ T5837] dvb-usb: bulk message failed: -22 (3/0)
[ 1584.386100][ T5837] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 1584.398941][ T5837] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 1584.409255][ T5837] usb 3-1: media controller created
[ 1584.421213][ T5837] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1584.495945][ T5837] dvb-usb: bulk message failed: -22 (6/0)
[ 1584.508721][ T5837] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 1584.520145][ T5837] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input68
[ 1584.536863][ T5837] dvb-usb: schedule remote query interval to 150 msecs.
[ 1584.548383][ T5837] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 1584.660926][   T29] audit: type=1326 audit(1781170511.837:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2581 comm="syz.0.4719" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0afd19ce59 code=0x7fc00000
[ 1584.705900][ T5837] dvb-usb: bulk message failed: -22 (1/0)
[ 1584.716459][ T5837] dvb-usb: error while querying for an remote control event.
[ 1584.795614][ T2663] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4725'.
[ 1584.885668][ T5837] dvb-usb: bulk message failed: -22 (1/0)
[ 1584.895188][ T5837] dvb-usb: error while querying for an remote control event.
[ 1584.912152][ T2217] usb 5-1: new high-speed USB device number 116 using dummy_hcd
[ 1585.066475][ T5837] dvb-usb: bulk message failed: -22 (1/0)
[ 1585.076782][ T5837] dvb-usb: error while querying for an remote control event.
[ 1585.339891][ T2691] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4728'.
[ 1585.414501][ T2217] usb 5-1: Using ep0 maxpacket: 16
[ 1585.424020][ T2217] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7
[ 1585.447354][ T2696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1585.458688][ T2696] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1585.467269][ T2217] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[ 1585.479659][ T2217] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1585.741881][ T2217] usb 5-1: Product: syz
[ 1585.746215][ T2217] usb 5-1: Manufacturer: syz
[ 1585.751084][ T2217] usb 5-1: SerialNumber: syz
[ 1585.831476][ T2696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1585.842975][ T2217] usb 5-1: config 0 descriptor??
[ 1585.869404][ T2217] hub 5-1:0.0: bad descriptor, ignoring hub
[ 1585.879690][ T2696] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1585.897284][ T2217] hub 5-1:0.0: probe with driver hub failed with error -5
[ 1585.939767][ T2217] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[ 1585.958855][T10695] block nbd3: Receive control failed (result -32)
[ 1585.975986][ T2705] block nbd3: shutting down sockets
[ 1586.197453][ T2727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1586.236692][ T2727] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1586.279828][ T2727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1586.314514][ T2727] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1586.357241][ T5837] dvb-usb: bulk message failed: -22 (1/0)
[ 1586.377666][ T5837] dvb-usb: error while querying for an remote control event.
[ 1586.554956][  T803] dvb-usb: bulk message failed: -22 (1/0)
[ 1586.560760][  T803] dvb-usb: error while querying for an remote control event.
[ 1587.127132][  T803] usb 3-1: USB disconnect, device number 6
[ 1587.185872][ T5713] usb 5-1: USB disconnect, device number 116
[ 1587.270575][  T803] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 1587.372471][ T2217] usb 2-1: new high-speed USB device number 101 using dummy_hcd
[ 1587.575735][ T2217] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1587.621556][ T2796] ufs: You didn't specify the type of your ufs filesystem
[ 1587.621556][ T2796] 
[ 1587.621556][ T2796] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[ 1587.621556][ T2796] 
[ 1587.621556][ T2796] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[ 1587.666408][ T2217] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1587.687566][ T2796] ufs: ufstype=old is supported read-only
[ 1587.694293][ T2217] usb 2-1: too many endpoints for config 1 interface 1 altsetting 0: 255, using maximum allowed: 30
[ 1587.694348][ T2217] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[ 1587.724541][ T2217] usb 2-1: New USB device found, idVendor=0582, idProduct=002b, bcdDevice= 0.40
[ 1587.724570][ T2217] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1587.724589][ T2217] usb 2-1: Product: syz
[ 1587.724603][ T2217] usb 2-1: Manufacturer: syz
[ 1587.724617][ T2217] usb 2-1: SerialNumber: syz
[ 1587.806884][ T2796] ufs: ufs_fill_super(): bad magic number
[ 1587.869813][ T2815] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4738'.
[ 1588.024698][ T2217] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 1588.978580][ T2217] usb 2-1: USB disconnect, device number 101
[ 1589.422100][T32677] udevd[32677]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1589.865368][ T2877] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4741'.
[ 1593.322560][ T5713] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[ 1593.514399][ T5713] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1593.562829][ T5713] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1593.610955][ T5713] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 1593.643833][ T5713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1593.713191][ T5713] usb 3-1: config 0 descriptor??
[ 1593.796761][ T5713] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 1593.837855][ T5713] dvb-usb: bulk message failed: -22 (3/0)
[ 1593.952056][ T5713] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 1594.005851][ T5713] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 1594.036221][ T5713] usb 3-1: media controller created
[ 1594.061273][ T5713] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1594.098238][ T5713] dvb-usb: bulk message failed: -22 (6/0)
[ 1594.113458][ T5713] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 1594.139477][ T5713] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input69
[ 1594.518633][ T5713] dvb-usb: schedule remote query interval to 150 msecs.
[ 1594.539765][ T5713] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 1594.685265][ T2929] vivid-000: =================  START STATUS  =================
[ 1594.696741][ T2929] vivid-000: Test Pattern: 75% Colorbar
[ 1594.700916][ T5713] dvb-usb: bulk message failed: -22 (1/0)
[ 1594.705582][ T2929] vivid-000: Fill Percentage of Frame: 100
[ 1594.712294][ T5713] dvb-usb: error while querying for an remote control event.
[ 1594.719607][ T2929] vivid-000: Horizontal Movement: No Movement
[ 1594.737248][ T2929] vivid-000: Vertical Movement: No Movement
[ 1594.747262][ T2929] vivid-000: OSD Text Mode: All
[ 1594.757457][ T2929] vivid-000: Show Border: false
[ 1594.766846][ T2929] vivid-000: Show Square: false
[ 1594.774886][ T2929] vivid-000: Sensor Flipped Horizontally: false
[ 1594.784394][ T2929] vivid-000: Sensor Flipped Vertically: false
[ 1594.806478][ T2929] vivid-000: Insert SAV Code in Image: false
[ 1594.815580][ T2929] vivid-000: Insert EAV Code in Image: false
[ 1594.824612][ T2929] vivid-000: Insert Video Guard Band: false
[ 1594.834376][ T2929] vivid-000: Reduced Framerate: false
[ 1594.840569][ T2929] vivid-000: HDMI 000-0 Is Connected To: Output HDMI 003-0
[ 1594.854548][ T2929] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator
[ 1594.866633][ T2929] vivid-000: Enable Capture Cropping: true
[ 1594.875789][ T2929] vivid-000: Enable Capture Composing: true
[ 1594.900903][ T5713] dvb-usb: bulk message failed: -22 (1/0)
[ 1594.915806][ T5713] dvb-usb: error while querying for an remote control event.
[ 1594.926838][ T2929] vivid-000: Enable Capture Scaler: true
[ 1594.938423][ T2929] vivid-000: Timestamp Source: End of Frame
[ 1594.948444][ T2929] vivid-000: Colorspace: sRGB
[ 1594.956445][ T2929] vivid-000: Transfer Function: Default
[ 1594.966558][ T2929] vivid-000: Y'CbCr Encoding: Default
[ 1594.976353][ T2929] vivid-000: HSV Encoding: Hue 0-179
[ 1594.985917][ T2929] vivid-000: Quantization: Default
[ 1594.993976][ T2929] vivid-000: Apply Alpha To Red Only: false
[ 1595.005018][ T2929] vivid-000: Standard Aspect Ratio: 4x3
[ 1595.010712][ T2929] vivid-000: DV Timings Signal Mode: Current DV Timings inactive
[ 1595.024873][ T2929] vivid-000: DV Timings: 640x480p59 inactive
[ 1595.034837][ T2929] vivid-000: DV Timings Aspect Ratio: Source Width x Height
[ 1595.046709][ T2929] vivid-000: Maximum EDID Blocks: 2
[ 1595.057780][ T2929] vivid-000: Limited RGB Range (16-235): false
[ 1595.068166][ T2929] vivid-000: Rx RGB Quantization Range: Automatic
[ 1595.078710][ T2929] vivid-000: Power Present: 0x00000001
[ 1595.088388][ T2929] tpg source WxH: 1280x720 (Y'CbCr)
[ 1595.097928][ T2929] tpg field: 1
[ 1595.115660][ T5713] dvb-usb: bulk message failed: -22 (1/0)
[ 1595.119955][ T2929] tpg crop: (0,0)/1280x720
[ 1595.156350][ T2936] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4750'.
[ 1595.169024][ T5713] dvb-usb: error while querying for an remote control event.
[ 1595.180641][ T2929] tpg compose: (0,0)/1280x720
[ 1595.188386][ T2929] tpg colorspace: 9
[ 1595.195124][ T2929] tpg transfer function: 0/3
[ 1595.199784][ T2929] tpg Y'CbCr encoding: 3/3
[ 1595.214760][ T2929] tpg quantization: 0/1
[ 1595.219003][ T2929] tpg RGB range: 0/2
[ 1595.227397][ T2929] vivid-000: ==================  END STATUS  ==================
[ 1595.320526][ T2941] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4746'.
[ 1595.443282][ T5713] dvb-usb: bulk message failed: -22 (1/0)
[ 1595.467659][ T5713] dvb-usb: error while querying for an remote control event.
[ 1595.586122][ T2946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4752'.
[ 1595.597371][ T2946] openvswitch: netlink: Key 14 has unexpected len 4 expected 28
[ 1595.630927][ T5713] dvb-usb: bulk message failed: -22 (1/0)
[ 1595.636790][ T5713] dvb-usb: error while querying for an remote control event.
[ 1595.734184][ T5713] usb 3-1: USB disconnect, device number 7
[ 1595.783303][ T5713] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 1596.199699][ T2980] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4756'.
[ 1597.623094][ T3001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4759'.
[ 1597.634127][ T3001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4759'.
[ 1597.643370][ T3001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4759'.
[ 1597.652623][ T3001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4759'.
[ 1599.830061][ T3028] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4762'.
[ 1599.997529][ T3035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1600.095360][ T3035] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1600.340053][ T3039] loop5: detected capacity change from 0 to 7
[ 1600.347545][ T3046] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4766'.
[ 1600.367406][ T3039] buffer_io_error: 9 callbacks suppressed
[ 1600.367420][ T3039] Buffer I/O error on dev loop5, logical block 0, async page read
[ 1600.445018][ T3052] program syz.1.4765 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1600.542641][ T3039] Buffer I/O error on dev loop5, logical block 0, async page read
[ 1600.550745][ T3039] Buffer I/O error on dev loop5, logical block 0, async page read
[ 1600.558871][ T3039] Buffer I/O error on dev loop5, logical block 0, async page read
[ 1600.568225][ T3039] Buffer I/O error on dev loop5, logical block 0, async page read
[ 1600.577687][ T3039] Buffer I/O error on dev loop5, logical block 0, async page read
[ 1600.588490][ T3039] Buffer I/O error on dev loop5, logical block 0, async page read
[ 1600.596573][ T3039] ldm_validate_partition_table(): Disk read failed.
[ 1600.603565][ T3039] Buffer I/O error on dev loop5, logical block 0, async page read
[ 1600.611751][ T3039] Buffer I/O error on dev loop5, logical block 0, async page read
[ 1600.619840][ T3039] Buffer I/O error on dev loop5, logical block 0, async page read
[ 1600.628769][ T3039] Dev loop5: unable to read RDB block 0
[ 1600.637788][ T3039]  loop5: unable to read partition table
[ 1600.646813][ T3039] loop5: partition table beyond EOD, truncated
[ 1600.661091][ T3039] loop_reread_partitions: partition scan of loop5 (úùƒWå¡™‰ü�¾Ã½¸*‹ºÐ	œëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5)
[ 1602.786561][ T3079] gretap0: entered promiscuous mode
[ 1602.806367][ T3079] vlan2: entered promiscuous mode
[ 1602.937916][ T3085] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4771'.
[ 1603.045961][   T29] audit: type=1400 audit(1781170530.228:1458): avc:  denied  { create } for  pid=3088 comm="syz.3.4774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[ 1603.107113][ T3092] lo speed is unknown, defaulting to 1000
[ 1603.195432][ T3110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4776'.
[ 1603.206611][ T3110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4776'.
[ 1603.308419][ T3122] FAULT_INJECTION: forcing a failure.
[ 1603.308419][ T3122] name failslab, interval 1, probability 0, space 0, times 0
[ 1603.327149][ T3122] CPU: 1 UID: 0 PID: 3122 Comm: syz.3.4777 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1603.327179][ T3122] Tainted: [L]=SOFTLOCKUP
[ 1603.327185][ T3122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1603.327196][ T3122] Call Trace:
[ 1603.327202][ T3122]  <TASK>
[ 1603.327209][ T3122]  dump_stack_lvl+0x100/0x190
[ 1603.327234][ T3122]  should_fail_ex.cold+0x5/0xa
[ 1603.327259][ T3122]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0
[ 1603.327285][ T3122]  should_failslab+0xc2/0x120
[ 1603.327305][ T3122]  __kmalloc_noprof+0xe0/0x850
[ 1603.327334][ T3122]  genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0
[ 1603.327365][ T3122]  genl_family_rcv_msg_doit+0xc7/0x300
[ 1603.327397][ T3122]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1603.327430][ T3122]  ? bpf_lsm_capable+0x9/0x10
[ 1603.327447][ T3122]  ? security_capable+0x80/0x260
[ 1603.327470][ T3122]  ? ns_capable+0xd2/0xf0
[ 1603.327497][ T3122]  genl_rcv_msg+0x560/0x800
[ 1603.327522][ T3122]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1603.327546][ T3122]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1603.327572][ T3122]  netlink_rcv_skb+0x159/0x420
[ 1603.327593][ T3122]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1603.327617][ T3122]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1603.327648][ T3122]  ? netlink_deliver_tap+0x1ae/0xcc0
[ 1603.327671][ T3122]  genl_rcv+0x28/0x40
[ 1603.327691][ T3122]  netlink_unicast+0x585/0x850
[ 1603.327714][ T3122]  ? __pfx_netlink_unicast+0x10/0x10
[ 1603.327741][ T3122]  netlink_sendmsg+0x8b0/0xda0
[ 1603.327766][ T3122]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1603.327786][ T3122]  ? __might_fault+0xa0/0x140
[ 1603.327819][ T3122]  ____sys_sendmsg+0x9e1/0xb70
[ 1603.327838][ T3122]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1603.327860][ T3122]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1603.327891][ T3122]  ___sys_sendmsg+0x190/0x1e0
[ 1603.327915][ T3122]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1603.327965][ T3122]  __sys_sendmsg+0x170/0x220
[ 1603.327992][ T3122]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1603.328030][ T3122]  ? rcu_is_watching+0x12/0xc0
[ 1603.328059][ T3122]  do_syscall_64+0x115/0x870
[ 1603.328082][ T3122]  ? clear_bhb_loop+0x40/0x90
[ 1603.328104][ T3122]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1603.328122][ T3122] RIP: 0033:0x7fcf3b59ce59
[ 1603.328138][ T3122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1603.328154][ T3122] RSP: 002b:00007fcf3c4fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1603.328173][ T3122] RAX: ffffffffffffffda RBX: 00007fcf3b815fa0 RCX: 00007fcf3b59ce59
[ 1603.328184][ T3122] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[ 1603.328194][ T3122] RBP: 00007fcf3c4fe090 R08: 0000000000000000 R09: 0000000000000000
[ 1603.328205][ T3122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1603.328215][ T3122] R13: 00007fcf3b816038 R14: 00007fcf3b815fa0 R15: 00007ffd6cca0758
[ 1603.328240][ T3122]  </TASK>
[ 1603.785941][ T3129] netlink: 'syz.2.4780': attribute type 25 has an invalid length.
[ 1603.838423][ T3142] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4782'.
[ 1604.004825][ T5837] usb 2-1: new full-speed USB device number 102 using dummy_hcd
[ 1604.057427][ T3158] FAULT_INJECTION: forcing a failure.
[ 1604.057427][ T3158] name failslab, interval 1, probability 0, space 0, times 0
[ 1604.098584][ T3158] CPU: 0 UID: 0 PID: 3158 Comm: syz.2.4784 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1604.098604][ T3158] Tainted: [L]=SOFTLOCKUP
[ 1604.098608][ T3158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1604.098615][ T3158] Call Trace:
[ 1604.098620][ T3158]  <TASK>
[ 1604.098625][ T3158]  dump_stack_lvl+0x100/0x190
[ 1604.098642][ T3158]  should_fail_ex.cold+0x5/0xa
[ 1604.098659][ T3158]  should_failslab+0xc2/0x120
[ 1604.098672][ T3158]  kmem_cache_alloc_noprof+0x7b/0x6e0
[ 1604.098690][ T3158]  ? dst_alloc+0x99/0x1a0
[ 1604.098708][ T3158]  dst_alloc+0x99/0x1a0
[ 1604.098723][ T3158]  ? ip_route_output_key_hash_rcu+0x1f8e/0x2870
[ 1604.098744][ T3158]  rt_dst_alloc+0x35/0x3a0
[ 1604.098760][ T3158]  ip_route_output_key_hash_rcu+0x87a/0x2870
[ 1604.098784][ T3158]  ip_route_output_key_hash+0x118/0x2b0
[ 1604.098803][ T3158]  ? __pfx_ip_route_output_key_hash+0x10/0x10
[ 1604.098825][ T3158]  ? _get_random_bytes+0xa8/0x220
[ 1604.098842][ T3158]  ? __pfx__get_random_bytes+0x10/0x10
[ 1604.098859][ T3158]  ip_route_output_flow+0x27/0x150
[ 1604.098871][ T3158]  tcp_v4_connect+0x8e8/0x1b40
[ 1604.098894][ T3158]  ? __pfx_tcp_v4_connect+0x10/0x10
[ 1604.098911][ T3158]  ? mptcp_token_new_connect+0x1e4/0x620
[ 1604.098926][ T3158]  mptcp_connect+0x4c6/0xaf0
[ 1604.098940][ T3158]  __inet_stream_connect+0x208/0xfa0
[ 1604.098961][ T3158]  ? __pfx___inet_stream_connect+0x10/0x10
[ 1604.098984][ T3158]  tcp_sendmsg_fastopen+0x3ed/0x750
[ 1604.099006][ T3158]  mptcp_sendmsg+0x1641/0x2210
[ 1604.099021][ T3158]  ? sock_has_perm+0x25a/0x2f0
[ 1604.099037][ T3158]  ? __pfx_sock_has_perm+0x10/0x10
[ 1604.099053][ T3158]  ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10
[ 1604.099072][ T3158]  ? import_ubuf+0x1b6/0x220
[ 1604.099085][ T3158]  ? __pfx_mptcp_sendmsg+0x10/0x10
[ 1604.099102][ T3158]  ? __pfx_mptcp_sendmsg+0x10/0x10
[ 1604.099117][ T3158]  inet_sendmsg+0x11c/0x140
[ 1604.099134][ T3158]  ____sys_sendmsg+0x98d/0xb70
[ 1604.099147][ T3158]  ? __pfx_inet_sendmsg+0x10/0x10
[ 1604.099164][ T3158]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1604.099180][ T3158]  ? __pfx__kstrtoull+0x10/0x10
[ 1604.099200][ T3158]  ___sys_sendmsg+0x190/0x1e0
[ 1604.099216][ T3158]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1604.099236][ T3158]  ? find_held_lock+0x2b/0x80
[ 1604.099257][ T3158]  __sys_sendmmsg+0x205/0x430
[ 1604.099276][ T3158]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1604.099299][ T3158]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1604.099321][ T3158]  ? fput+0x79/0x100
[ 1604.099337][ T3158]  ? ksys_write+0x1ac/0x250
[ 1604.099349][ T3158]  ? __pfx_ksys_write+0x10/0x10
[ 1604.099364][ T3158]  __x64_sys_sendmmsg+0x9c/0x100
[ 1604.099386][ T3158]  ? lockdep_hardirqs_on+0x78/0x100
[ 1604.099401][ T3158]  do_syscall_64+0x115/0x870
[ 1604.099415][ T3158]  ? clear_bhb_loop+0x40/0x90
[ 1604.099429][ T3158]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1604.099440][ T3158] RIP: 0033:0x7f6e3a19ce59
[ 1604.099451][ T3158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1604.099462][ T3158] RSP: 002b:00007f6e3b0ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1604.099473][ T3158] RAX: ffffffffffffffda RBX: 00007f6e3a415fa0 RCX: 00007f6e3a19ce59
[ 1604.099480][ T3158] RDX: 0000000000000001 RSI: 0000200000004980 RDI: 0000000000000003
[ 1604.099487][ T3158] RBP: 00007f6e3b0ee090 R08: 0000000000000000 R09: 0000000000000000
[ 1604.099493][ T3158] R10: 0000000020008000 R11: 0000000000000246 R12: 0000000000000001
[ 1604.099500][ T3158] R13: 00007f6e3a416038 R14: 00007f6e3a415fa0 R15: 00007fff25bded98
[ 1604.099515][ T3158]  </TASK>
[ 1604.455827][ T5837] usb 2-1: not running at top speed; connect to a high speed hub
[ 1604.469440][ T5837] usb 2-1: config 250 has an invalid interface number: 41 but max is 1
[ 1604.514927][ T5837] usb 2-1: config 250 has no interface number 1
[ 1604.524279][ T5837] usb 2-1: config 250 interface 41 altsetting 4 endpoint 0x4 has invalid maxpacket 439, setting to 64
[ 1604.563715][ T5837] usb 2-1: config 250 interface 41 altsetting 4 endpoint 0x7 has invalid maxpacket 512, setting to 64
[ 1604.580449][ T5713] usb 5-1: new full-speed USB device number 117 using dummy_hcd
[ 1604.645673][ T5837] usb 2-1: config 250 interface 41 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[ 1604.687254][ T5837] usb 2-1: config 250 interface 41 altsetting 4 endpoint 0xB has invalid maxpacket 512, setting to 64
[ 1604.709578][ T5837] usb 2-1: config 250 interface 41 altsetting 4 has an invalid endpoint descriptor of length 6, skipping
[ 1604.723778][ T5837] usb 2-1: config 250 interface 41 altsetting 4 endpoint 0xC has invalid maxpacket 1023, setting to 64
[ 1604.743717][ T5837] usb 2-1: config 250 interface 41 altsetting 4 has a duplicate endpoint with address 0x4, skipping
[ 1604.757704][ T5837] usb 2-1: config 250 interface 41 altsetting 4 has a duplicate endpoint with address 0x5, skipping
[ 1604.774831][ T5713] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1604.785051][ T5713] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1604.794165][ T5713] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 1604.803419][ T5713] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1604.813714][ T5713] usb 5-1: config 0 descriptor??
[ 1604.821551][ T5713] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 1604.833032][ T5713] dvb-usb: bulk message failed: -22 (3/0)
[ 1604.842211][ T5713] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 1604.848132][ T5837] usb 2-1: config 250 interface 41 altsetting 4 has 12 endpoint descriptors, different from the interface descriptor's value: 11
[ 1604.856389][ T5713] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 1604.874743][ T5713] usb 5-1: media controller created
[ 1604.876125][ T5837] usb 2-1: config 250 interface 0 altsetting 3 has a duplicate endpoint with address 0x4, skipping
[ 1604.881077][ T5713] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1604.913265][ T5837] usb 2-1: config 250 interface 0 altsetting 3 has an invalid descriptor for endpoint zero, skipping
[ 1604.935535][ T5837] usb 2-1: config 250 interface 41 has no altsetting 0
[ 1604.956882][ T5837] usb 2-1: config 250 interface 0 has no altsetting 0
[ 1604.970067][ T5837] usb 2-1: Dual-Role OTG device on HNP port
[ 1604.980075][ T5837] usb 2-1: New USB device found, idVendor=0af0, idProduct=c100, bcdDevice=21.b3
[ 1604.982207][ T5713] dvb-usb: bulk message failed: -22 (6/0)
[ 1605.003729][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1605.015963][ T5837] usb 2-1: Product: ã Š
[ 1605.026902][ T5837] usb 2-1: Manufacturer: à°Š
[ 1605.037017][ T5837] usb 2-1: SerialNumber: й
[ 1605.058341][ T5713] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 1605.120782][ T5713] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input70
[ 1605.156528][ T5713] dvb-usb: schedule remote query interval to 150 msecs.
[ 1605.181301][ T5713] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 1605.286019][ T3180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1605.298257][ T3180] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1605.315813][ T5837] hso 2-1:250.41: Not our interface
[ 1605.341765][    T9] dvb-usb: bulk message failed: -22 (1/0)
[ 1605.349137][    T9] dvb-usb: error while querying for an remote control event.
[ 1605.374896][ T5837] hso 2-1:250.0: Not our interface
[ 1605.419709][ T5837] usb 2-1: USB disconnect, device number 102
[ 1605.521218][    T9] dvb-usb: bulk message failed: -22 (1/0)
[ 1605.529468][    T9] dvb-usb: error while querying for an remote control event.
[ 1605.580466][ T5713] usb 1-1: new high-speed USB device number 89 using dummy_hcd
[ 1605.700971][ T2217] dvb-usb: bulk message failed: -22 (1/0)
[ 1605.707150][ T2217] dvb-usb: error while querying for an remote control event.
[ 1605.741753][ T5713] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[ 1605.752208][ T5713] usb 1-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1605.776877][ T5713] usb 1-1: config 2 interface 0 has no altsetting 0
[ 1605.786145][ T5713] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47
[ 1605.795856][ T5713] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1605.804281][ T5713] usb 1-1: Product: syz
[ 1605.808639][ T5713] usb 1-1: Manufacturer: syz
[ 1605.825455][ T5713] usb 1-1: SerialNumber: syz
[ 1605.882429][ T2217] dvb-usb: bulk message failed: -22 (1/0)
[ 1605.899260][ T2217] dvb-usb: error while querying for an remote control event.
[ 1605.947545][ T3212] FAULT_INJECTION: forcing a failure.
[ 1605.947545][ T3212] name failslab, interval 1, probability 0, space 0, times 0
[ 1605.960992][ T3212] CPU: 0 UID: 0 PID: 3212 Comm: syz.1.4790 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1605.961023][ T3212] Tainted: [L]=SOFTLOCKUP
[ 1605.961029][ T3212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1605.961040][ T3212] Call Trace:
[ 1605.961046][ T3212]  <TASK>
[ 1605.961052][ T3212]  dump_stack_lvl+0x100/0x190
[ 1605.961077][ T3212]  should_fail_ex.cold+0x5/0xa
[ 1605.961101][ T3212]  should_failslab+0xc2/0x120
[ 1605.961121][ T3212]  kmem_cache_alloc_node_noprof+0x81/0x6f0
[ 1605.961147][ T3212]  ? __alloc_skb+0x140/0x710
[ 1605.961177][ T3212]  __alloc_skb+0x140/0x710
[ 1605.961205][ T3212]  ? __alloc_skb+0x5b7/0x710
[ 1605.961228][ T3212]  ? __pfx___alloc_skb+0x10/0x10
[ 1605.961259][ T3212]  netlink_ack+0x117/0xb80
[ 1605.961279][ T3212]  ? trace_contention_end+0x122/0x170
[ 1605.961316][ T3212]  netlink_rcv_skb+0x333/0x420
[ 1605.961336][ T3212]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[ 1605.961359][ T3212]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1605.961396][ T3212]  xfrm_netlink_rcv+0x71/0x90
[ 1605.961415][ T3212]  netlink_unicast+0x585/0x850
[ 1605.961439][ T3212]  ? __pfx_netlink_unicast+0x10/0x10
[ 1605.961467][ T3212]  netlink_sendmsg+0x8b0/0xda0
[ 1605.961493][ T3212]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1605.961512][ T3212]  ? __might_fault+0xa0/0x140
[ 1605.961546][ T3212]  ____sys_sendmsg+0x9e1/0xb70
[ 1605.961565][ T3212]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1605.961588][ T3212]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1605.961619][ T3212]  ___sys_sendmsg+0x190/0x1e0
[ 1605.961641][ T3212]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1605.961692][ T3212]  __sys_sendmsg+0x170/0x220
[ 1605.961719][ T3212]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1605.961756][ T3212]  ? rcu_is_watching+0x12/0xc0
[ 1605.961784][ T3212]  do_syscall_64+0x115/0x870
[ 1605.961805][ T3212]  ? clear_bhb_loop+0x40/0x90
[ 1605.961826][ T3212]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1605.961843][ T3212] RIP: 0033:0x7f2b6e79ce59
[ 1605.961858][ T3212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1605.961874][ T3212] RSP: 002b:00007f2b6f625028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1605.961891][ T3212] RAX: ffffffffffffffda RBX: 00007f2b6ea15fa0 RCX: 00007f2b6e79ce59
[ 1605.961902][ T3212] RDX: 0000000000008090 RSI: 0000200000000000 RDI: 0000000000000003
[ 1605.961912][ T3212] RBP: 00007f2b6f625090 R08: 0000000000000000 R09: 0000000000000000
[ 1605.961922][ T3212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1605.961932][ T3212] R13: 00007f2b6ea16038 R14: 00007f2b6ea15fa0 R15: 00007ffcc29bdb58
[ 1605.961957][ T3212]  </TASK>
[ 1605.984179][ T3219] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4791'.
[ 1606.080288][ T2217] dvb-usb: bulk message failed: -22 (1/0)
[ 1606.106824][ T2217] dvb-usb: error while querying for an remote control event.
[ 1606.302228][ T5713] usb 1-1: USB disconnect, device number 89
[ 1606.398398][ T3240] lo speed is unknown, defaulting to 1000
[ 1606.450835][ T2217] dvb-usb: bulk message failed: -22 (1/0)
[ 1606.456759][ T2217] dvb-usb: error while querying for an remote control event.
[ 1606.551947][ T3265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4794'.
[ 1606.609310][ T3265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4794'.
[ 1606.654251][ T2217] dvb-usb: bulk message failed: -22 (1/0)
[ 1606.661053][ T2217] dvb-usb: error while querying for an remote control event.
[ 1606.705144][ T3265] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4794'.
[ 1606.778608][ T3269] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4794'.
[ 1606.796851][ T3267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4794'.
[ 1606.860655][ T3267] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4794'.
[ 1606.885580][ T5837] 
[ 1606.885594][ T5837] ======================================================
[ 1606.885601][ T5837] WARNING: possible circular locking dependency detected
[ 1606.885611][ T5837] syzkaller #0 Tainted: G             L     
[ 1606.885622][ T5837] ------------------------------------------------------
[ 1606.885628][ T5837] kworker/1:6/5837 is trying to acquire lock:
[ 1606.885638][ T5837] ffff88813feba0b8 (&buf->lock){+.+.}-{4:4}, at: tty_buffer_flush+0x72/0x310
[ 1606.885683][ T5837] 
[ 1606.885683][ T5837] but task is already holding lock:
[ 1606.885688][ T5837] ffffffff8e7d1ae0 (console_lock){+.+.}-{0:0}, at: vc_SAK+0x13/0x320
[ 1606.885731][ T5837] 
[ 1606.885731][ T5837] which lock already depends on the new lock.
[ 1606.885731][ T5837] 
[ 1606.885736][ T5837] 
[ 1606.885736][ T5837] the existing dependency chain (in reverse order) is:
[ 1606.885742][ T5837] 
[ 1606.885742][ T5837] -> #2 (console_lock){+.+.}-{0:0}:
[ 1606.885766][ T5837]        console_lock+0x7a/0xa0
[ 1606.885787][ T5837]        con_flush_chars+0x63/0x90
[ 1606.885802][ T5837]        n_tty_write+0xc74/0x11c0
[ 1606.885823][ T5837]        file_tty_write.isra.0+0x4d2/0x890
[ 1606.885841][ T5837]        vfs_write+0x6ac/0x1070
[ 1606.885858][ T5837]        ksys_write+0x12a/0x250
[ 1606.885874][ T5837]        do_syscall_64+0x115/0x870
[ 1606.885895][ T5837]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1606.885912][ T5837] 
[ 1606.885912][ T5837] -> #1 (&tty->termios_rwsem){++++}-{4:4}:
[ 1606.885935][ T5837]        down_write+0x8b/0x1f0
[ 1606.885962][ T5837]        n_tty_flush_buffer+0x23/0x1d0
[ 1606.885983][ T5837]        tty_buffer_flush+0x239/0x310
[ 1606.885999][ T5837]        tty_ldisc_flush+0x68/0xf0
[ 1606.886012][ T5837]        tty_port_close_start+0x323/0x510
[ 1606.886030][ T5837]        tty_port_close+0x26/0x180
[ 1606.886046][ T5837]        tty_release+0x40e/0x1300
[ 1606.886063][ T5837]        __fput+0x3ff/0xb50
[ 1606.886081][ T5837]        task_work_run+0x150/0x240
[ 1606.886098][ T5837]        exit_to_user_mode_loop+0x157/0x670
[ 1606.886116][ T5837]        do_syscall_64+0x666/0x870
[ 1606.886133][ T5837]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1606.886146][ T5837] 
[ 1606.886146][ T5837] -> #0 (&buf->lock){+.+.}-{4:4}:
[ 1606.886168][ T5837]        __lock_acquire+0x14b8/0x2630
[ 1606.886185][ T5837]        lock_acquire+0x1b1/0x370
[ 1606.886200][ T5837]        __mutex_lock+0x1a4/0x1b10
[ 1606.886219][ T5837]        tty_buffer_flush+0x72/0x310
[ 1606.886233][ T5837]        tty_ldisc_flush+0x68/0xf0
[ 1606.886245][ T5837]        __do_SAK+0x38f/0x4d0
[ 1606.886259][ T5837]        vc_SAK+0x7f/0x320
[ 1606.886276][ T5837]        process_one_work+0xa0e/0x1980
[ 1606.886293][ T5837]        worker_thread+0x5ef/0xe50
[ 1606.886309][ T5837]        kthread+0x370/0x450
[ 1606.886324][ T5837]        ret_from_fork+0x72b/0xd50
[ 1606.886340][ T5837]        ret_from_fork_asm+0x1a/0x30
[ 1606.886359][ T5837] 
[ 1606.886359][ T5837] other info that might help us debug this:
[ 1606.886359][ T5837] 
[ 1606.886365][ T5837] Chain exists of:
[ 1606.886365][ T5837]   &buf->lock --> &tty->termios_rwsem --> console_lock
[ 1606.886365][ T5837] 
[ 1606.886387][ T5837]  Possible unsafe locking scenario:
[ 1606.886387][ T5837] 
[ 1606.886392][ T5837]        CPU0                    CPU1
[ 1606.886396][ T5837]        ----                    ----
[ 1606.886400][ T5837]   lock(console_lock);
[ 1606.886410][ T5837]                                lock(&tty->termios_rwsem);
[ 1606.886421][ T5837]                                lock(console_lock);
[ 1606.886431][ T5837]   lock(&buf->lock);
[ 1606.886440][ T5837] 
[ 1606.886440][ T5837]  *** DEADLOCK ***
[ 1606.886440][ T5837] 
[ 1606.886444][ T5837] 4 locks held by kworker/1:6/5837:
[ 1606.886453][ T5837]  #0: ffff88813fe57140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980
[ 1606.886489][ T5837]  #1: ffffc9000410fd08 ((work_completion)(&vc_cons[currcons].SAK_work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980
[ 1606.886525][ T5837]  #2: ffffffff8e7d1ae0 (console_lock){+.+.}-{0:0}, at: vc_SAK+0x13/0x320
[ 1606.886562][ T5837]  #3: ffff8880641f30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_flush+0x1c/0xf0
[ 1606.886593][ T5837] 
[ 1606.886593][ T5837] stack backtrace:
[ 1606.886602][ T5837] CPU: 1 UID: 0 PID: 5837 Comm: kworker/1:6 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1606.886622][ T5837] Tainted: [L]=SOFTLOCKUP
[ 1606.886628][ T5837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1606.886637][ T5837] Workqueue: events vc_SAK
[ 1606.886656][ T5837] Call Trace:
[ 1606.886661][ T5837]  <TASK>
[ 1606.886668][ T5837]  dump_stack_lvl+0x100/0x190
[ 1606.886684][ T5837]  print_circular_bug.cold+0x178/0x1c7
[ 1606.886707][ T5837]  check_noncircular+0x146/0x160
[ 1606.886725][ T5837]  __lock_acquire+0x14b8/0x2630
[ 1606.886745][ T5837]  lock_acquire+0x1b1/0x370
[ 1606.886760][ T5837]  ? tty_buffer_flush+0x72/0x310
[ 1606.886775][ T5837]  ? __pfx___might_resched+0x10/0x10
[ 1606.886796][ T5837]  ? rcu_is_watching+0x12/0xc0
[ 1606.886817][ T5837]  __mutex_lock+0x1a4/0x1b10
[ 1606.886835][ T5837]  ? tty_buffer_flush+0x72/0x310
[ 1606.886849][ T5837]  ? tty_buffer_flush+0x72/0x310
[ 1606.886865][ T5837]  ? __pfx___mutex_lock+0x10/0x10
[ 1606.886887][ T5837]  ? ldsem_down_read_trylock+0x115/0x190
[ 1606.886907][ T5837]  ? tty_buffer_flush+0x72/0x310
[ 1606.886921][ T5837]  tty_buffer_flush+0x72/0x310
[ 1606.886937][ T5837]  tty_ldisc_flush+0x68/0xf0
[ 1606.886953][ T5837]  __do_SAK+0x38f/0x4d0
[ 1606.886968][ T5837]  ? mark_held_locks+0x40/0x70
[ 1606.886986][ T5837]  vc_SAK+0x7f/0x320
[ 1606.887004][ T5837]  process_one_work+0xa0e/0x1980
[ 1606.887025][ T5837]  ? __pfx_process_one_work+0x10/0x10
[ 1606.887044][ T5837]  ? __pfx_vc_SAK+0x10/0x10
[ 1606.887064][ T5837]  worker_thread+0x5ef/0xe50
[ 1606.887082][ T5837]  ? __pfx_worker_thread+0x10/0x10
[ 1606.887099][ T5837]  ? kthread+0x13a/0x450
[ 1606.887114][ T5837]  ? __pfx_worker_thread+0x10/0x10
[ 1606.887130][ T5837]  kthread+0x370/0x450
[ 1606.887144][ T5837]  ? __pfx_kthread+0x10/0x10
[ 1606.887160][ T5837]  ret_from_fork+0x72b/0xd50
[ 1606.887177][ T5837]  ? __pfx_ret_from_fork+0x10/0x10
[ 1606.887194][ T5837]  ? __switch_to+0x800/0x1100
[ 1606.887215][ T5837]  ? __pfx_kthread+0x10/0x10
[ 1606.887230][ T5837]  ret_from_fork_asm+0x1a/0x30
[ 1606.887253][ T5837]  </TASK>
[ 1606.888500][ T5837] tty tty1: SAK: killed process 3239 (syz.3.4793): by fd#3
[ 1606.888531][ T5837] tty tty1: SAK: killed process 3240 (syz.3.4793): by fd#3
[ 1606.888545][ T5837] tty tty1: SAK: killed process 3250 (syz.3.4793): by fd#3
[ 1606.909370][ T5713] dvb-usb: bulk message failed: -22 (1/0)
[ 1606.909391][ T5713] dvb-usb: error while querying for an remote control event.
[ 1606.921760][ T2217] usb 5-1: USB disconnect, device number 117
[ 1607.005659][ T2217] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.