last executing test programs:

11.726173668s ago: executing program 0 (id=2798):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0)
syz_open_dev$usbfs(&(0x7f00000000c0), 0x1, 0x92082)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x4, &(0x7f0000001a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@alu={0x7, 0x0, 0x9, 0x0, 0x0, 0x1}]}, &(0x7f0000001a40)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
r1 = syz_io_uring_setup(0x82b, &(0x7f00000000c0)={0x0, 0x14, 0x400, 0x5, 0x81}, &(0x7f00000001c0), &(0x7f0000000180))
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=ANY=[@ANYBLOB="02030003100000002cbd7000fbdbdf2502000900080000001c00000000000000030006000000000002004e22ac1414bb0000000000000000020001000000d1dd57160722af2b0000030005000000000002004e21ac1e01010000000000000000040004"], 0x80}, 0x1, 0x7}, 0x440c0)
io_uring_register$IORING_REGISTER_IOWQ_AFF(r1, 0x11, &(0x7f0000000440)="6fb73e", 0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x4)
writev(r4, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c100000000100224e0000", 0x58}], 0x1)
syz_open_procfs(0x0, &(0x7f0000000580)='stack\x00')

11.164943644s ago: executing program 4 (id=2802):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0)
mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e)
sendto$inet(r4, &(0x7f0000000240), 0x0, 0x8004881, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000), 0x4)
sendto$inet(r4, &(0x7f0000000080)='@', 0x1, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000180)=<r5=>0x0)
r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f00000001c0)={0x6, "42cbf017c075dd2a90e900000000000000000100", <r7=>0xffffffffffffffff})
io_submit(r5, 0x1, &(0x7f00000002c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}])
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007012bbd700000000000017c00000400fc800c0001800800", @ANYRES32=0x0, @ANYBLOB="080002807235ab62080007"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)

10.3228987s ago: executing program 0 (id=2803):
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x3, 0x4)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0xfffc, @broadcast}, 0x2}}, 0x2e)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800)
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e})
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000100)={@hyper})
r4 = epoll_create(0x2)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x30000015})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @host, 0xc, 0x0, 0x5e, 0x2000001, 0x4, 0x1c, 0x4})
r5 = userfaultfd(0x1)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79})

10.225578465s ago: executing program 4 (id=2804):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x40000000015, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0)
r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r6=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000001c0)={r6, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000580)={0x201, 0x1, &(0x7f0000000180)=[r7], 0x0, &(0x7f0000000640), 0x0, 0x0, 0xffffffffffffffff})
connect$inet(r1, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="440000001000ffff2f3d7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="13200200313402001c0012800b0001006970766c616e00000c000280060001000200000008000500", @ANYRES32, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x8000002)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a000100feffff040000004002000000000400000000000005001b00010000002e7728444c35168782039685dded057e00ffafd17916a5"], 0x24}}, 0x24008800)
r9 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c643c, &(0x7f0000000300)={0x0, 0x0, r9})
ioctl$BTRFS_IOC_GET_DEV_STATS(r9, 0xc4089434, &(0x7f0000000400)={0x0, 0x100000001, 0x1, [0x8, 0x7d189cdb, 0xf, 0x20007, 0x7], [0xfb98, 0x2, 0x6, 0xfffffffffffffffd, 0x10001, 0x5, 0x1, 0xfffffffffffffff8, 0x6, 0xbc63d5b, 0x10, 0x7, 0x5, 0x7, 0xfff, 0x3, 0x1, 0x7, 0x5, 0x0, 0xf, 0x1, 0xff, 0xe, 0x4000000, 0x8000, 0x10001, 0xbc, 0x9, 0x3, 0x1, 0x8001, 0x7, 0x2, 0x2, 0x7f, 0x9, 0x73, 0x1e2c00000, 0xffffffe000000000, 0x1ca, 0x2, 0x10, 0x6, 0x800, 0x8000, 0x5, 0x4, 0x9, 0x8b3, 0x80000000, 0x10001, 0x4, 0x2, 0x1, 0x80, 0x6, 0x1a7d, 0x3, 0x5, 0x2, 0xe, 0x7f, 0x63, 0x4, 0x81, 0x4, 0xb, 0x9, 0xcd, 0x28000000000000, 0x8000000000000001, 0x10a, 0x4, 0x8, 0x97b, 0x0, 0x8001, 0x3, 0x9, 0x15153467, 0x8, 0xd278, 0xf3a, 0x1, 0x100000000, 0x7, 0xa7, 0x2, 0xda, 0x1, 0x10000000000, 0x8001, 0x3, 0x0, 0x4, 0x6, 0x8, 0xeac, 0x4, 0x8000000000000001, 0x2, 0x6, 0x7ff, 0x0, 0x111, 0xff, 0x1, 0x7, 0xfeffffffffffffff, 0x8, 0x7, 0x7, 0x93000, 0x9, 0x1, 0x10000000009, 0xffff, 0x80000000, 0xfffffffffffffffb, 0x200000010001]})

10.067930781s ago: executing program 1 (id=2806):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc000)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4)
ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448d4, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4604}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYINDEX(r4, 0x0, 0x20000080)
syz_usb_connect(0x5, 0x24, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x1000080, 0x0)
syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYBLOB='s'], 0x0)

8.877979753s ago: executing program 0 (id=2807):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4004000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {0x3}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8914}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000000)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x15)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
r4 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, &(0x7f00000003c0)={'broute\x00', 0x0, 0x0, 0x0, [0x61, 0x10000, 0x9c9, 0xf, 0x4, 0x3]}, &(0x7f00000001c0)=0x50)
r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f00000008c0)={'filter\x00', 0x7, 0x4, 0x404, 0x0, 0x218, 0x10c, 0x324, 0x324, 0x324, 0x4, &(0x7f0000000280), {[{{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, 0xff000330, 0xffffffff, 0x4, 0x0, {@mac, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@local, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0xfff2, 0x101, 0x79, 0x1, 0x7ff, 0x8, '\x00', 'vcan0\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @mac=@local, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x8, 0x1}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="07aebe92cc85", @empty, @loopback, @broadcast, 0x8}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x1, 0x1}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x450)
ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)
r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01)
write$char_usb(r6, &(0x7f0000000040)="e2", 0xff0f)

8.804231725s ago: executing program 3 (id=2808):
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r4 = accept$alg(r3, 0x0, 0x0)
sendmmsg$alg(r4, &(0x7f0000001040)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000012c0)="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", 0x16c}], 0x1, 0x0, 0x0, 0x80}], 0x1, 0xc8d1)
recvmmsg(r4, &(0x7f0000002240)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000280)=""/60, 0x3c}, {&(0x7f00000004c0)=""/169, 0xa9}, {&(0x7f0000000940)=""/186, 0xba}], 0x3}, 0x6}], 0x1, 0x1, 0x0)

8.447720993s ago: executing program 4 (id=2809):
syz_open_dev$swradio(0x0, 0x0, 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x844}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4000000)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000002c0)={0x1c, r3, 0x303, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)

7.873133341s ago: executing program 3 (id=2813):
r0 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400048000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xfec7, 0xfffffffffffffe5d, &(0x7f00000000c0)="5fd63edbfd8a4a6077fd87686f9a", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$nl_route_sched(r4, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}]}, 0x24}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e22}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYBLOB="0a000100000070"], 0x64}}, 0x4000000)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004cc0)=@newtfilter={0x2708, 0x2c, 0x200, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x3, 0xd}, {0x10000, 0xb}, {0x5, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14bc, 0x2, [@TCA_CGROUP_EMATCHES={0x410, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffa}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x100}}, @TCA_EMATCH_TREE_LIST={0xd8, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x5c, 0x3, 0x0, 0x0, {{0x1ff, 0x9, 0x5e5}, [@TCA_EM_IPT_MATCH_DATA={0xf, 0x5, "e445ec8034a50322993452"}, @TCA_EM_IPT_MATCH_DATA={0x2d, 0x5, "f7571824cf233040c8ec4b3c58574a76bae40ba6af58cb75bbef8f23d2c0f8226559b98201f70e74f3"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_NFPROTO={0x5}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x3, 0x7, 0xb}, {{0x4, 0x0, 0x0, 0x1}, {0x4, 0x0, 0x1}}}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x8, 0x2, 0x8}, {0x8001, 0x4, 0x0, "e41b6bd6"}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x6, 0x1, 0x9}, {0x1, 0x7e1, 0x480, 0x6, 0x5, 0x1, 0x1}}}, @TCF_EM_IPT={0x38, 0x3, 0x0, 0x0, {{0x7, 0x9, 0x7}, [@TCA_EM_IPT_MATCH_DATA={0x2a, 0x5, "bb59b2fad69bde2000ed07b31ecadb7e29bc249b69b139ac6f9c55f97c32ffeb36701bc49dc9"}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x228, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x90, 0x2, 0x0, 0x0, {{0x3ff, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x5a, 0x5, "61bf1fdf5e174dd6bf8fb1d96baa8c14d2c29fd9de396b32139638fad451e67e353bbe8f60865c654fbb69fd80d69db3c2ec4b003ea3b021de752bfbfbbadd18a4c7b4f21c96dc1276fdaac0d1cd075b4f267d8b86c1"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x6}]}}, @TCF_EM_CONTAINER={0xd0, 0x2, 0x0, 0x0, {{0x7, 0x0, 0x469}, "3e1ae6309b69f57b2daa46704f2ca481364c1a36b849c3bef92bd6fc91f2ddd443c1b583f7dda7a99bd4c30f28587333bda704fb4570456b3d1298623edeec8626cb6d12ed2a735c31822fffed41028acde066b25b72d4df7a7898dd2f7478e52e8ec98e3ee31266f863b6112192a502fc11fe688285b595fe1b95a0f6112698d5ae1045cac58eb6e3c292ae1fd4ab2ca3ae792c7c21dbd648df254a4ee0f49c56863c92ad1bc47964f02fb6d5234074e18ad9d8972e0bf2c4183f233c8d9f70a41962fd"}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x3, 0x8, 0x3ff}, {0x4, 0x5, 0x1}}}, @TCF_EM_CONTAINER={0x5c, 0x3, 0x0, 0x0, {{0x5, 0x0, 0x9}, "f7b6261f851c5922987bc3da969981e9d8189ee588a65f2ece9c6513b50b5f33a36b6798fc9baa5806a7f063606bb944e3d13dab5b166b017c9a7b8a3682fd9d614c1c1459580df187b77124970b"}}, @TCF_EM_META={0x58, 0x1, 0x0, 0x0, {{0x6, 0x4, 0xf}, [@TCA_EM_META_LVALUE={0xf, 0x2, [@TCF_META_TYPE_VAR="533f0fa4dac797", @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_RVALUE={0x26, 0x3, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="fc23110c9df14c", @TCF_META_TYPE_VAR="3abd09fce5", @TCF_META_TYPE_VAR="f27d18", @TCF_META_TYPE_VAR="81ddc635b71d", @TCF_META_TYPE_VAR="f795e3d08f"]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x5]}]}}]}, @TCA_EMATCH_TREE_LIST={0xdc, 0x2, 0x0, 0x1, [@TCF_EM_META={0xb4, 0x1, 0x0, 0x0, {{0x2, 0x4, 0xe4cd}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x6, 0x2}, {0x400, 0x4, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xfff, 0x6, 0x2}, {0x6, 0x1, 0x1}}}, @TCA_EM_META_RVALUE={0x18, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x7, 0x2}, {0xf, 0x4}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x1, 0x438e581120f36f0e}, {0x5, 0x8}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x5, 0x2}, {0x3, 0x0, 0x1}}}, @TCA_EM_META_RVALUE={0x2d, 0x3, [@TCF_META_TYPE_VAR="fa005518b825", @TCF_META_TYPE_VAR="d74ca3476c7d1879", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="b9", @TCF_META_TYPE_VAR="95cb34c52a413011", @TCF_META_TYPE_VAR="9991794a485555a5cbfa", @TCF_META_TYPE_INT]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x5, 0x1}, {0x8000, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x40, 0x2}, {0x1, 0x8, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x8, 0x1}, {0x5, 0x0, 0x1}}}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x8000, 0x8, 0x1}, {0x4, 0x4, 0x3}}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x6, 0x2, 0xac38}, {0x2, 0x3, 0x0, "6ed38b"}}}]}]}, @TCA_CGROUP_POLICE={0x408, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xc4, 0x9, 0x3, 0xaf, 0x4, 0x0, 0x7, 0x80, 0x10000, 0x6, 0x7ff, 0x3ff, 0x9, 0x0, 0x4, 0x2, 0x5, 0x800, 0x4, 0x1, 0x4, 0x8, 0x6568ad29, 0x10, 0x8, 0x0, 0x0, 0x3, 0x7, 0x80000001, 0xdf, 0x7a2ed4bd, 0x80000000, 0x9, 0xc, 0x5, 0x401, 0xd27, 0x6, 0x7fffffff, 0x3, 0x2, 0x6cc6, 0xffffff81, 0x1, 0x5, 0xb, 0xeb, 0x5, 0x6, 0x2c5, 0x4c, 0x5, 0x5fa, 0x2aca, 0x3, 0xffff7bce, 0x0, 0x5, 0xe, 0x8c2, 0x9, 0x3, 0x5, 0x0, 0x0, 0x6, 0x0, 0x4, 0x1, 0x7, 0x0, 0x9, 0xfffffffa, 0x8, 0x9bdc, 0x10001, 0x8, 0xa, 0x7f, 0x10001, 0x4, 0x3, 0x949f, 0x4, 0x58, 0x4, 0x8001, 0x4, 0x6, 0xfffffeff, 0x0, 0x1, 0xe, 0x0, 0x200, 0x3ff, 0x5, 0xfffff93c, 0x2, 0xfffffe01, 0x6, 0xe7b2, 0x3, 0x7bf, 0x10000, 0x9bf, 0x7, 0x1, 0x8, 0x10000000, 0x7fffffff, 0x200, 0xa, 0x7, 0x9, 0x9d4e, 0x2, 0x5, 0x6, 0xf4, 0x9, 0x7, 0xf962, 0x86d0, 0x4000, 0x43, 0xffff7fff, 0x1ff, 0xa, 0x371a7b18, 0xb, 0x4, 0x7, 0x5, 0x5, 0xbd, 0x1ff, 0x6, 0x7f, 0x5, 0xf5a, 0x2, 0x0, 0x5, 0x5, 0x9, 0x75a, 0x5, 0x8, 0x10000, 0x101, 0x7a4e, 0x10000, 0xa, 0xffff8000, 0xd, 0x8, 0x0, 0x1000, 0x9, 0x618aea42, 0x292d, 0x5, 0x6, 0x9, 0x2, 0x6, 0x2, 0x4, 0xffff, 0x7, 0x1e, 0x81, 0x5, 0xfff, 0x7fffffff, 0x6, 0xffffffff, 0x80000000, 0x1, 0x0, 0xed, 0x4, 0x7, 0x81, 0xfffffffe, 0x3, 0x2, 0x0, 0x200, 0x2, 0x401, 0x8, 0xeda6, 0xeb, 0x80, 0x2, 0xfffffffe, 0x4, 0x8cf, 0xf8, 0x2, 0x1000, 0xd2, 0x71ac, 0x0, 0x2, 0x4, 0x20000, 0x7ff, 0x8000, 0x4f, 0x1, 0x1, 0xffff, 0x7fffffff, 0x8, 0x6, 0x7, 0x8, 0x1ff, 0x7, 0x87, 0x2, 0x2, 0x1, 0xa76f, 0x2, 0x0, 0x1, 0xfee7, 0x80000001, 0xc2, 0x80, 0x600000, 0x6, 0x80, 0x8001, 0x9, 0x2, 0x2, 0x9, 0xe, 0x7, 0x7, 0x519c, 0x6, 0x0, 0xd71, 0x1, 0xfffff800, 0x3, 0x9, 0x7, 0xffffffff]}]}, @TCA_CGROUP_POLICE={0x854, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0xfffffffd, 0x2, {0x7, 0x0, 0x0, 0x2, 0x8000}, {0xd, 0x1, 0x5, 0x4, 0x81, 0x6}, 0x9, 0x8}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x4, 0xfffffffd, 0x5, 0x7, 0x80000001, 0x4c, 0x480, 0x8, 0x6, 0xfffffffc, 0x5, 0x9, 0x2, 0x8, 0x80000000, 0x1ff, 0x6, 0x4, 0x6, 0xba63, 0x6, 0x2, 0x6061c821, 0x7, 0x4, 0x40, 0x9, 0x0, 0xa, 0x58, 0xd06, 0xa4, 0x8, 0x9, 0x7ff, 0x3, 0x6, 0x8, 0x10, 0x2, 0x67, 0x0, 0xf, 0x10000, 0x1, 0x81, 0x5, 0x2, 0x9, 0xc, 0xff, 0x1, 0xe, 0x7f, 0x71, 0x7, 0xfffffff8, 0x18cb72d, 0x9, 0x9, 0x9, 0x3ff, 0x1, 0x5, 0xff, 0x3, 0x9, 0x8, 0xfffffe01, 0x9, 0x4a, 0x5, 0x3, 0x4, 0xc2, 0x2, 0x9, 0xfffffff0, 0xe, 0x2d8, 0x2, 0xbaf2, 0x5f71, 0x1ff, 0x36d, 0x0, 0xfffffbff, 0x6, 0xff, 0x1, 0x5, 0x10, 0x3, 0x1, 0x81, 0x4de5, 0x4, 0x2, 0x4, 0x0, 0x7, 0x0, 0x0, 0x2, 0x1ff, 0x3, 0xff, 0x6, 0xc4f3, 0x1, 0x890, 0x7000, 0x7, 0x5, 0x31b, 0x2, 0x1ff, 0x200000, 0x80000001, 0x6, 0x400, 0x0, 0x1, 0x8, 0x0, 0x3044, 0x7, 0x4, 0x752c5009, 0x94, 0x8, 0x400, 0x10, 0x4, 0x8, 0xc, 0x6, 0x6e, 0xfffffffe, 0x4d50, 0x6, 0xffffff84, 0x7bc, 0xad, 0x6, 0x10001, 0x3, 0xa, 0x2, 0xd, 0x100, 0xe10, 0x2, 0x5ab, 0x4, 0x7, 0x5, 0x4, 0x5, 0x0, 0x9, 0x2, 0x8, 0x2, 0x0, 0x2, 0x7, 0x2bd3, 0x10001, 0x5, 0x3, 0xa, 0x80000000, 0x101, 0xd9, 0x50, 0x23, 0x4af6, 0x8, 0x2, 0x81, 0x5, 0x7, 0x5db4, 0x8001, 0x81, 0x7, 0x2cd, 0x0, 0x7, 0x105, 0x9, 0xe50, 0x81, 0x8, 0x3, 0x8, 0x5, 0x3, 0x7, 0xfffffffa, 0x2, 0xf8d, 0x96, 0x7, 0x1ff, 0x8, 0x0, 0x7ff, 0x6, 0x7f, 0x2a4000, 0x3, 0x9, 0x2, 0x81, 0x7, 0xef, 0x8, 0x4, 0xfb, 0x2f5, 0x5, 0x2, 0xb, 0xfffffff6, 0x1, 0xffffffff, 0xb39, 0x1b3, 0x8, 0x1ff, 0xfffffffb, 0x808, 0x81, 0x570c, 0x2, 0x4, 0xfff, 0x101, 0xffff, 0x8, 0x9, 0x5, 0x6, 0x4, 0x7, 0x1, 0x56, 0x8001, 0x81, 0xb, 0x423, 0xfffff24f, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x3, 0x8, 0xfffffffe, 0x9, 0x9263, 0x0, 0x1, 0x40, 0x9, 0x14a, 0x688, 0x0, 0x7, 0x2, 0x6, 0xf, 0x1, 0x5, 0x1ff, 0x9, 0x0, 0x7f, 0x5c7, 0x4, 0x56ff, 0x8d33, 0xffff, 0x8, 0x0, 0x3, 0x5d6, 0x6, 0xb, 0x9c33, 0x5, 0x9, 0x1, 0x7, 0x80000000, 0x800, 0xaf56, 0xd, 0x10, 0x3ff, 0x80000001, 0x40, 0x5, 0xb, 0x4, 0x6, 0x7ff, 0x2, 0x1ff, 0x7, 0x2, 0x4, 0x4, 0x9, 0x1, 0x7, 0xa, 0x7, 0x6, 0x401, 0x1, 0x0, 0x2, 0x81, 0x93f4, 0x9, 0xfffff800, 0xff, 0x2, 0x2, 0x9, 0x1000, 0x10001, 0x7, 0x3ff, 0xfffffff7, 0xffff0b09, 0x425, 0x5, 0xf, 0x80000001, 0x4, 0x4, 0x7, 0x1ff, 0x5, 0x9, 0x0, 0x8000, 0xd17, 0x10, 0x7, 0x5, 0x7f, 0x6, 0x2, 0x10001, 0x7, 0x9ac9, 0x1, 0x9, 0x1, 0x9, 0x0, 0xfff, 0x2, 0x2, 0x1ff, 0x5, 0x6, 0xf, 0x0, 0x8, 0x9, 0x1, 0x6, 0x2, 0x2, 0x0, 0x6314, 0x3, 0x40, 0x0, 0xed1b, 0x1, 0x6, 0xb, 0xd, 0x300000, 0xa2, 0x3ff, 0x1, 0xc0ca, 0x800, 0x85, 0x7, 0xfffffffc, 0x8, 0x4, 0x7, 0x2, 0x1, 0xfffffff7, 0x80, 0x1000, 0x2, 0x0, 0x8, 0x9, 0x80000001, 0x7, 0x0, 0x3, 0x200000, 0x9, 0x0, 0x1, 0x2, 0x8, 0x0, 0x9, 0x6, 0x7, 0x3, 0xc6, 0x3, 0x3, 0x2, 0x5, 0x3, 0x5, 0xe, 0x0, 0x401, 0x7ff, 0x57, 0x9, 0x7, 0x4, 0x401, 0x1, 0x1, 0x0, 0x0, 0x9, 0x800, 0x10, 0x5, 0x3, 0x9, 0x400, 0xfffffff8, 0x0, 0x1, 0x6, 0x80, 0x8, 0x80, 0x10, 0x55, 0x42, 0x6c77, 0xd7c, 0xafce, 0x698, 0xf, 0x3, 0x5, 0x5, 0x80000001, 0x4, 0xf, 0x4, 0x200, 0x1, 0xfff, 0x3, 0x7, 0xcfe, 0x403f, 0x4c, 0x2, 0xffff, 0x6, 0x5, 0x7, 0x3, 0x3, 0xcb, 0x2, 0x8001, 0x2, 0x7fffffff, 0x8000, 0x7, 0x8, 0x6, 0x3, 0xc6, 0x5, 0x6, 0x4, 0x4, 0x1, 0x3, 0x8, 0xff, 0x1, 0x1, 0xef7]}, @TCA_POLICE_PEAKRATE64={0xc}]}, @TCA_CGROUP_POLICE={0x44c, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x426f, 0x0, 0x4, 0x3, 0xb, {0x7, 0x2, 0x3, 0x7fff, 0x0, 0x8c}, {0xe, 0x2, 0x3, 0x8001, 0x2, 0x5}, 0x3ff, 0x3ff, 0x3}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0xa, 0x736, 0x7, 0x727, 0x8000, 0x8, 0x3ff, 0x6, 0x7, 0x0, 0x3, 0x2, 0xe93, 0xd18, 0x0, 0x5a5, 0x4, 0x6, 0x7ff, 0x5, 0xd551, 0xffff, 0x6, 0x1, 0x6, 0x6, 0xe, 0x5, 0x6a79, 0x800, 0x0, 0x6, 0x0, 0x5, 0x3, 0x36e8, 0x1ff, 0x101, 0x8, 0x10001, 0xd5, 0x7fffffff, 0xf, 0x10000, 0x600000, 0x3, 0x4, 0x2, 0x1, 0x297, 0x0, 0x3, 0x1, 0x8, 0x6, 0x8, 0x100, 0x2, 0x3, 0x200, 0x0, 0xe, 0x7, 0x1, 0x8, 0x1, 0x9, 0xd6b, 0x0, 0x8, 0xfffffff7, 0xb, 0x0, 0x3, 0x0, 0x1, 0x5aa8e61e, 0x5, 0x6, 0x1d, 0x7681, 0x1, 0x6, 0x200, 0x7, 0x401, 0xb2b, 0x5, 0x9, 0x981, 0x5, 0x6, 0x807, 0x2, 0x9, 0x5, 0x5, 0x4, 0x80000000, 0x2d70, 0x1ff, 0x800, 0x8001, 0x3, 0x3c, 0x6, 0x1000, 0x1200000, 0x4, 0x3, 0x7, 0x0, 0x1000, 0x2, 0x6, 0x1000, 0xe5, 0xfff, 0x0, 0x5, 0xffff8001, 0x378, 0x10, 0x5, 0x400, 0x10, 0x0, 0x8, 0x1c, 0xafa, 0x8000, 0x9, 0x3, 0x2, 0x408, 0x3, 0x2, 0x8000, 0x30, 0x1, 0x9, 0x40000000, 0x3, 0x5, 0x9, 0x9, 0x3, 0xe7, 0x8, 0x0, 0x0, 0x5, 0x8001, 0x3, 0x1000, 0x200, 0x8, 0x61a, 0x2, 0x6, 0x1, 0xa8c, 0x9, 0xfff, 0xa, 0x6, 0x7fffffff, 0x9, 0x2, 0x7f, 0x6, 0x3, 0x1, 0xad7, 0xbe15, 0x4, 0x3, 0x187, 0xf, 0xfffffff2, 0x10, 0x1, 0x1124, 0x1, 0x3, 0x0, 0x36e, 0x1, 0x3, 0x4, 0xb29a, 0x200, 0x16, 0x0, 0x4, 0x18db7f18, 0x3, 0x1, 0x21a9, 0x1000, 0x7, 0x4, 0xc000000, 0x3e19, 0xff, 0x7fff, 0xeb, 0x0, 0x401, 0x8, 0x10, 0x1a7214e0, 0x56, 0x800, 0x8, 0x9, 0x45b9, 0x5, 0x10, 0xe8, 0x8, 0x101, 0x9, 0x1, 0x743, 0xd, 0x5, 0x5, 0x5, 0x7fffffff, 0x8001, 0x0, 0x1ff, 0x2, 0x2, 0x7, 0x7, 0x1, 0x3ff, 0x8, 0x7b74a2d3, 0x1, 0x4, 0x52, 0x10, 0x800, 0x9, 0x7, 0x0, 0x1, 0x9, 0xc3ec, 0x800, 0xc773, 0x40]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0xfff}, @filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x8}}, @filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0xd}}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x4}}, @filter_kind_options=@f_u32={{0x8}, {0xc6c, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xe2}, @TCA_U32_DIVISOR={0x8, 0x4, 0x36}, @TCA_U32_POLICE={0xc2c, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0xfffffffa, 0x15f, 0x7, 0x80000000, 0x8, 0x8, 0x7f, 0x3, 0xff, 0xc5, 0xf, 0x1, 0x5, 0x7, 0x9, 0x80000001, 0x7, 0x1ff, 0x7, 0x8, 0x0, 0x1, 0x6, 0x3efeb296, 0x1000, 0x0, 0x7, 0x1, 0x7, 0x400, 0x8, 0x3, 0x9, 0x1e61, 0x0, 0x8, 0x6, 0x7, 0x8, 0x400, 0xc, 0x26, 0xf, 0x7ff, 0xb7, 0x6, 0x3, 0x822, 0x8000, 0x9, 0x3, 0x0, 0x5, 0x6, 0x6, 0x401, 0x8, 0x4, 0x5, 0x8, 0x7, 0x7, 0x1, 0x7fff, 0x7f, 0x18e, 0x3f, 0xff, 0x1, 0x5, 0x2, 0x9, 0x1, 0x281, 0x4, 0x9, 0x8001, 0x8, 0x9, 0xea, 0xb2c0, 0x400, 0x9, 0x0, 0x6, 0x7, 0x9, 0x9, 0x7f, 0x9, 0x6, 0x4, 0xfffffffb, 0x0, 0x8, 0x81, 0x7, 0xfffffffa, 0x81c0, 0x1, 0x0, 0x7, 0x7fffffff, 0x9, 0x0, 0x4, 0x1, 0x7, 0x1, 0x4, 0xcd, 0x7, 0x3, 0x10000, 0xc5f, 0xe, 0x89d, 0x3, 0x40, 0x10000, 0x7, 0x200, 0x6, 0x5, 0xfffffffd, 0x1d, 0x7, 0x8000000, 0xc, 0x8, 0x7, 0x9, 0x9, 0x6, 0x2, 0x2, 0x4, 0x1, 0x101, 0x2, 0x6, 0x4, 0x7, 0x80000001, 0x5, 0x3, 0xfffffffd, 0x7, 0x0, 0x6, 0x0, 0x1000, 0x0, 0x5, 0x9, 0x2, 0x14ed4cee, 0x3, 0x6, 0x1, 0xd25c, 0x4c, 0x0, 0x2, 0x80, 0x4, 0xffffe8aa, 0x0, 0x8, 0xc477, 0x8, 0x0, 0x81, 0x62, 0x7720000, 0x2, 0x3ff, 0xfffffffd, 0x9439, 0x1, 0x8, 0x1, 0x0, 0x5, 0xff21, 0x8, 0x3, 0x2, 0xfffffff7, 0xe, 0x9, 0x6, 0x2, 0xf130d1c, 0x5, 0x2, 0x6, 0x9, 0x7, 0x0, 0x3, 0x1, 0xfffffff3, 0x4, 0x3, 0x80000000, 0x1000, 0x88, 0x8, 0xfffffffb, 0xfffffffb, 0x9, 0x101, 0x100, 0x5, 0x7, 0x28000, 0xa, 0x7fff, 0x7, 0x1, 0x5, 0xc2, 0x1, 0xaf66, 0x834, 0x3, 0x4, 0x5, 0x1, 0x5a, 0x4, 0x6aa, 0xe, 0x5, 0x9, 0x3ff, 0xb4, 0x101, 0x5, 0x8, 0x62a, 0x8, 0x5, 0x5, 0x10001, 0xa, 0x3, 0x24, 0xe8, 0x7fff, 0x5, 0x8, 0x114a, 0x7, 0x200]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x7ff, 0x3ff, 0x2, 0x9, 0x4, 0x2, 0x0, 0x2, 0xd, 0x4, 0x5, 0x8, 0x6565, 0xca17, 0x2, 0x1ca, 0xd33, 0x86e, 0x1, 0xfffff8fd, 0xfffffff7, 0x8, 0x1, 0xa3, 0x4, 0x8, 0x7, 0xfffffff9, 0x2, 0x6, 0x3, 0x6, 0x3, 0x9, 0x18fa, 0x7, 0x7, 0x6, 0x4, 0xd27, 0x7310, 0x6, 0x5, 0x8001, 0x2, 0x38, 0x7, 0x8001, 0x9, 0x7c8, 0x80000000, 0x9, 0x6, 0x7, 0x6b, 0x9, 0x1, 0x1, 0x8, 0xfffffff8, 0xd, 0x3, 0x5, 0x6, 0x882, 0xe4f, 0xf73, 0x68000, 0x2, 0x4, 0x0, 0x3, 0x1, 0x80000000, 0x7fffffff, 0xff8f, 0x8001, 0x0, 0x2, 0x7, 0x2, 0x4, 0x9, 0x80000001, 0xffff, 0x8, 0x10001, 0x800, 0x74, 0x7, 0x4, 0xf5, 0x4, 0xfffff001, 0x9, 0x5, 0x80, 0x1, 0x9, 0x80, 0x81, 0x9, 0x4, 0x8, 0x9, 0xf2d9, 0x3, 0xfffffff7, 0xffffff80, 0x2, 0x9, 0x400, 0x9, 0x5, 0xfffffffb, 0x5, 0x2, 0x5, 0xd6b, 0x7fff, 0x9, 0x1ff, 0x4, 0x9, 0x10, 0xffffff7f, 0x91, 0x9, 0x0, 0x8d6b, 0x4555, 0x10001, 0x6, 0x1, 0x4, 0x8, 0x3eb1, 0x3ff, 0x2, 0x8, 0x4, 0x9, 0x8, 0x1d46bdfe, 0x40, 0x80, 0x23a7, 0x7, 0x0, 0x80000001, 0x101, 0x84b9, 0xf7ac, 0x3, 0x9, 0x2, 0xfffffffa, 0xb, 0xccc, 0xf9b, 0x0, 0x1, 0x8, 0x2, 0x9, 0x7d40, 0x7, 0x0, 0x2041c4b4, 0x9, 0x6, 0x5, 0xffff, 0x5, 0xfffff751, 0x0, 0x80, 0x6, 0x10001, 0x7fff, 0xfff, 0x7, 0x8, 0xa, 0x6, 0x5, 0xfffffff6, 0x869, 0xb27a, 0x2, 0x7, 0x81, 0x42e, 0x9, 0x3, 0x2, 0x80000000, 0x7fff, 0x9b6, 0x1, 0xffff8001, 0x1000, 0x188, 0x7, 0xa2b, 0xfff, 0x2, 0x10001, 0xfffff001, 0xc32, 0x10, 0x9, 0x1000, 0x5, 0x6, 0x80000000, 0x9, 0x4, 0x4, 0x6, 0x8, 0x9, 0x7, 0x9, 0x36b9, 0xfffffc00, 0x8, 0xa9, 0x3, 0x9, 0x3, 0xf7, 0x9, 0x5, 0x0, 0x5, 0xa, 0x200, 0x8, 0x8, 0x5, 0x0, 0x6, 0x80000001, 0x0, 0xfffff770, 0x10001, 0x4, 0x8, 0x8, 0x9, 0x100, 0x6, 0x8, 0x1e9e0c81]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x3, 0xbb81, 0x1, 0x0, 0x1a0d0e94, 0xc0, 0x5, 0x4, 0x8, 0x1, 0x0, 0x3, 0x6, 0x15fe, 0x4, 0x1, 0x10000, 0x6, 0xffff0001, 0x9, 0x9, 0xc, 0x3, 0xffffffe5, 0xfffffff9, 0x7, 0x7fff, 0x3569, 0x6, 0x100, 0x3, 0x4, 0xc, 0xd71b, 0x2, 0xe99a, 0xff, 0x8, 0xffff, 0x8, 0x3, 0xfff, 0xd5, 0xdc9e, 0x1, 0x200, 0x287b, 0x4, 0xb, 0x8, 0x2, 0x183, 0xa68, 0xa, 0x1, 0x7, 0x9, 0x3, 0x2, 0x0, 0x4, 0x1, 0x1, 0xfffffff2, 0x5, 0x1, 0x7, 0x200, 0x6, 0x1, 0x2, 0x5f09af33, 0xfffffffb, 0xe, 0x681, 0x2, 0x800000, 0x5, 0x81, 0x2, 0x3ff, 0x6, 0x5e0df5dc, 0x4, 0x5, 0x8, 0x6, 0x7, 0x6, 0x9, 0x100, 0x9f1, 0x2fe, 0x2, 0x9f21, 0x12000, 0x8, 0x8, 0x7, 0x10, 0x80000001, 0x8, 0x6, 0x6, 0x300, 0x4, 0x7, 0x4, 0x2, 0x4, 0x5, 0x3, 0x4, 0x6, 0x6, 0x7, 0x90, 0x0, 0xdc, 0x4, 0x100, 0x5, 0x800, 0x1, 0x5c3ef49d, 0x4, 0x1, 0x598, 0x6, 0x4b0, 0x1, 0x94, 0x74, 0xffff1355, 0x1, 0x0, 0xdc3, 0x7, 0x5, 0x6, 0x4, 0x8001, 0x3, 0x8, 0x8, 0x7, 0x3, 0x80, 0x10000, 0x10001, 0xfffffff8, 0x5, 0x0, 0x2e, 0x0, 0x5, 0x9d7, 0x1316, 0x3, 0x26, 0x0, 0x8, 0x474d, 0xffffffff, 0xe64a, 0x2, 0x9, 0xf8e, 0x9, 0xd5, 0x400, 0x4, 0xc6d, 0xe, 0x2, 0x200, 0x4, 0x3, 0x8, 0x7, 0xc5a1, 0xd713, 0x2, 0x7, 0x2, 0x9, 0x72a0, 0x1, 0x6, 0xa, 0xdb, 0x6, 0xa8, 0x0, 0x4, 0x9, 0x200, 0x0, 0x9, 0x1, 0x1, 0x401, 0xe1, 0x864, 0xffffffff, 0x682a, 0x0, 0x5, 0xc0000, 0xd, 0x6, 0x0, 0x4, 0x9, 0x1, 0x10, 0x6, 0x7f, 0x5255, 0x9, 0x9, 0xef3f, 0xa9, 0x4, 0x480, 0x9, 0x737055f, 0x9, 0xa20000, 0x1, 0xfffffe0a, 0x401, 0x8, 0x1, 0x8, 0x3ff, 0xd, 0x8001, 0x99, 0x4, 0x4, 0x950, 0x10000, 0x9, 0xc10d, 0x20f, 0xff, 0x22, 0x0, 0x1, 0xfffffffe, 0x2, 0xc1, 0x4, 0x8]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}]}, @TCA_U32_CLASSID={0x8, 0x1, {0xfff1}}, @TCA_U32_INDEV={0x14, 0x8, 'netpci0\x00'}, @TCA_U32_LINK={0x8, 0x3, 0x7}, @TCA_U32_LINK={0x8, 0x3, 0x6}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x32c, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3}}, @TCA_MATCHALL_ACT={0x318, 0x2, [@m_skbmod={0x70, 0x12, 0x0, 0x0, {{0xb}, {0x4}, {0x42, 0x6, "7b9bd482db4091ce3238591b48971e9c3d7405059faa06ce8fe2dbcf17fec5de55ed42ce2f16306b7341453c54b971392ad4b45466a1242cc9813ae2a0c2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_csum={0x84, 0x1a, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x10000, 0x10000000, 0x7fff, 0xdad}, 0x80}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x1, 0x7, 0xba2, 0x8001}, 0x38}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x10001, 0x7, 0x547a, 0x6d6dcb8b}, 0x71}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_bpf={0x130, 0xb, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}, @TCA_ACT_BPF_OPS={0x24, 0x4, [{0x7, 0xd, 0x9, 0x54}, {0x30b5, 0x1, 0x4, 0x8}, {0x510, 0x5, 0x7c, 0x2}, {0x1, 0x63, 0x5, 0x80000001}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}, @TCA_ACT_BPF_OPS={0x34, 0x4, [{0x8001, 0xa, 0xf7, 0x4}, {0xfff1, 0x6, 0x9, 0x5}, {0xf, 0x7, 0x49, 0xf}, {0x7, 0x10, 0xff, 0x3}, {0x6, 0x5, 0x81, 0x54}, {0x6e2, 0x81, 0x1, 0xffffff4a}]}, @TCA_ACT_BPF_OPS={0x4}]}, {0x8f, 0x6, "2a906b16a38a1f80c933b68e55de0de20fa9b696ed2347b6892950f3cad9463470d5d90bb473dd2d95205e654034f89293f435c3707652412c853a39ac1ffb49a4f61c7c15e8f06a858e28aea7aedad8f9e8b4fc3452f13bf0bea5b1ba52b51ef66295638843bf3f3d70c61d0355513f211afb919045481c4cceabad409749107d18f87e71ad977696c8ed"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_vlan={0xf0, 0x17, 0x0, 0x0, {{0x9}, {0x50, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x38, 0xfffffff8, 0x5, 0x1d}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xb8d}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x9a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x137}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x78, 0x6, "07473d7f64a640a6e1e4549596d62ab91f62716071f17d42262b3a37ff59f94916a8e96a8dced60da79c4fa37c6355cff22a18b5ba8c08c31564394da21d6f8298aaeeb300f5340ad90d165497939ff785f515287740d8c65c0c379021666c1c62e7d4e8a2cb3fa2291ab3e809a36c9c9f60b380"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}]}}, @filter_kind_options=@f_flow={{0x9}, {0x214, 0x2, [@TCA_FLOW_ACT={0x208, 0x9, 0x0, 0x1, [@m_sample={0xb0, 0x8, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x5, 0x100, 0x6, 0x80, 0xff}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1ff}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xfff}, @TCA_SAMPLE_TRUNC_SIZE={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x401}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1000}]}, {0x44, 0x6, "edbe8b848ab42c4b73890d9809c336f12db15e72fe8589173cfd71153214082f1394d78d445ca45e62912e8b54683f4d4a4c2a27932d48658c7bb96d5e0095b8"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0x2c, 0x11, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ctinfo={0x128, 0x1e, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xfa5}, @TCA_CTINFO_ACT={0x18, 0x3, {0x9f0, 0x7, 0x2, 0x6, 0x4}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7fffffff}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x401}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xfffffffa}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x63de}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x7}]}, {0xb1, 0x6, "30a1d12fdfdc03b870f8cc4f5cd89d02d40e0484567c523749e23a082fde96cc91f9576bdec2c7bf00c51ed40d0b904d71ffdf14a1e95305e548caeddac4bbdb8543d1f640efbeda12a1fdfa7c08523785662a1045b9d4b3e0bfcf442d57aea96c6ecb288b44340f684d5695d29723bade2e5b472c9c3716361997a64ec1a8adb3cc0e44691485a92a153c4ed2ab36cde9d6f5f18ed8bc74a6fc440154e693548d8a61de0ec810c42f08d49325"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x8}]}}]}, 0x2708}}, 0x0)
lseek(r0, 0x8000000000000000, 0x4)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000013906c08e90f01db9be9010203010902120001000000000904"], 0x0)
r10 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
r11 = fsmount(r10, 0x0, 0x0)
fchdir(r11)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x26)
r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
ioctl$KVM_X86_SET_MSR_FILTER(r13, 0x4188aec6, &(0x7f0000001100)={0x1, [{0x2, 0x10, 0x9, &(0x7f0000000540)="bbd2"}, {0x3, 0x18, 0x0, &(0x7f0000000600)="f7c117"}, {0x1, 0x0, 0x100, 0x0}, {0x0, 0x8, 0x3, &(0x7f0000000780)='X'}, {0x2, 0x0, 0xfffffffd, 0x0}, {0x1, 0x0, 0x8, 0x0}, {0x3, 0x0, 0x96a9, 0x0}, {0x2, 0x0, 0x1, 0x0}, {0x3, 0x0, 0x200, 0x0}, {0x0, 0x0, 0x7, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x8, 0x0}, {0x2, 0x0, 0x6, 0x0}, {0x1, 0x0, 0x5, 0x0}, {0x3, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x6, 0x0}]})

7.327760622s ago: executing program 4 (id=2816):
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={<r0=>0x0, @loopback}, &(0x7f0000000040)=0xc)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0xa, &(0x7f00000001c0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x3}, @ringbuf_output], 0x0, 0x95, 0x0, 0x0, 0x40f00, 0x4a, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1f979, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94)
socket$can_bcm(0x1d, 0x2, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
modify_ldt$read(0x0, 0x0, 0x11)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01134f9b3a000000fc006700000008000300", @ANYRES32=r5, @ANYBLOB="0c0099000000000000000000"], 0x3c}}, 0x40000)
sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x4008050)
socket$nl_xfrm(0x10, 0x3, 0x6)

6.821224295s ago: executing program 0 (id=2817):
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r4 = accept$alg(r3, 0x0, 0x0)
sendmmsg$alg(r4, &(0x7f0000001040)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000012c0)="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", 0x19f}], 0x1, 0x0, 0x0, 0x80}], 0x1, 0xc8d1)
recvmmsg(r4, &(0x7f0000002240)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000280)=""/60, 0x3c}, {&(0x7f00000004c0)=""/169, 0xa9}, {&(0x7f0000000940)=""/186, 0xba}], 0x3}, 0x6}], 0x1, 0x1, 0x0)

6.181683237s ago: executing program 1 (id=2818):
write(0xffffffffffffffff, &(0x7f0000000040)="2600000022004701050007108980e8ff0600", 0x12)
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x1200, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}})

5.800539337s ago: executing program 0 (id=2819):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x40000000015, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0)
r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r6=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000001c0)={r6, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000580)={0x201, 0x1, &(0x7f0000000180)=[r7], 0x0, &(0x7f0000000640), 0x0, 0x0, 0xffffffffffffffff})
connect$inet(r1, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="440000001000ffff2f3d7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="13200200313402001c0012800b0001006970766c616e00000c000280060001000200000008000500", @ANYRES32, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x8000002)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a000100feffff040000004002000000000400000000000005001b00010000002e7728444c35168782039685dded057e00ffafd17916a5"], 0x24}}, 0x24008800)
r9 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c643c, &(0x7f0000000300)={0x0, 0x0, r9})
ioctl$BTRFS_IOC_GET_DEV_STATS(r9, 0xc4089434, &(0x7f0000000400)={0x0, 0x100000001, 0x1, [0x8, 0x7d189cdb, 0xf, 0x20007, 0x7], [0xfb98, 0x2, 0x6, 0xfffffffffffffffd, 0x10001, 0x5, 0x1, 0xfffffffffffffff8, 0x6, 0xbc63d5b, 0x10, 0x7, 0x5, 0x7, 0xfff, 0x3, 0x1, 0x7, 0x5, 0x0, 0xf, 0x1, 0xff, 0xe, 0x4000000, 0x8000, 0x10001, 0xbc, 0x9, 0x3, 0x1, 0x8001, 0x7, 0x2, 0x2, 0x7f, 0x9, 0x73, 0x1e2c00000, 0xffffffe000000000, 0x1ca, 0x2, 0x10, 0x6, 0x800, 0x8000, 0x5, 0x4, 0x9, 0x8b3, 0x80000000, 0x10001, 0x4, 0x2, 0x1, 0x80, 0x6, 0x1a7d, 0x3, 0x5, 0x2, 0xe, 0x7f, 0x63, 0x4, 0x81, 0x4, 0xb, 0x9, 0xcd, 0x28000000000000, 0x8000000000000001, 0x10a, 0x4, 0x8, 0x97b, 0x0, 0x8001, 0x3, 0x9, 0x15153467, 0x8, 0xd278, 0xf3a, 0x1, 0x100000000, 0x7, 0xa7, 0x2, 0xda, 0x1, 0x10000000000, 0x8001, 0x3, 0x0, 0x4, 0x6, 0x8, 0xeac, 0x4, 0x8000000000000001, 0x2, 0x6, 0x7ff, 0x0, 0x111, 0xff, 0x1, 0x7, 0xfeffffffffffffff, 0x8, 0x7, 0x7, 0x93000, 0x9, 0x1, 0x10000000009, 0xffff, 0x80000000, 0xfffffffffffffffb, 0x200000010001]})

5.625724044s ago: executing program 3 (id=2820):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_mptcp(0xa, 0x1, 0x106)
mount(0x0, 0x0, 0x0, 0x40078, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='ntfs3\x00', 0x1000080, 0x0)

5.497451933s ago: executing program 1 (id=2821):
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000ec0)={0x80, 0xfffffffd, 0x2, 0x1d9, 0x81, 0x5})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000002480), 0xce4, r0}, 0x38)
bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x3ff, r0, 0x0, 0x100000000000000}, 0x38)

5.293984985s ago: executing program 1 (id=2822):
creat(0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/185, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0xec)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sched_setparam(r0, &(0x7f0000000280)=0xfff)
sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x108, &(0x7f0000000080)=0xfffffff9, 0x0, 0x4)
io_uring_enter(0xffffffffffffffff, 0x4e14, 0x912a, 0x41, 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800efe000000000000000000a00000000000007000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB="14000500"], 0x3c}, 0x1, 0x11}, 0x0)

3.560493454s ago: executing program 1 (id=2823):
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r4 = accept$alg(r3, 0x0, 0x0)
sendmmsg$alg(r4, &(0x7f0000001040)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000012c0)="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", 0x16c}], 0x1, 0x0, 0x0, 0x80}], 0x1, 0xc8d1)
recvmmsg(r4, &(0x7f0000002240)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000280)=""/60, 0x3c}, {&(0x7f00000004c0)=""/169, 0xa9}, {&(0x7f0000000940)=""/186, 0xba}], 0x3}, 0x6}], 0x1, 0x1, 0x0)

3.525854228s ago: executing program 3 (id=2824):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
sendmmsg$inet6(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)="82", 0x1}, {&(0x7f0000000240)="11", 0x1}], 0x2}}], 0x1, 0x4404c880)
sendto$inet6(r0, &(0x7f0000000000), 0x68, 0x44008, 0x0, 0xfffffffffffffdfd)

3.415367356s ago: executing program 3 (id=2826):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4048000}, 0x44450)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a0001006d6174636800000040000280080002400000000124000300d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d5324520e000100636f6e6e6c696d69740000000900010073797a30000000000900020073797a32"], 0xa8}}, 0x4048010)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0xa800, 0x0)
syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

3.036173445s ago: executing program 4 (id=2827):
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x3, 0x4)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0xfffc, @broadcast}, 0x2}}, 0x2e)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@host, 0x1})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e})
r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000100)={@hyper})
r5 = fanotify_init(0x200, 0x0)
r6 = epoll_create(0x2)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000000c0)={0x30000015})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @host, 0xc, 0x0, 0x5e, 0x2000001, 0x4, 0x1c, 0x4})
userfaultfd(0x1)

2.112733662s ago: executing program 2 (id=2828):
r0 = socket$inet(0xa, 0x801, 0x84)
listen(r0, 0x8)
socket$inet(0xa, 0x801, 0x84)
socket$inet(0xa, 0x801, 0x84)
r1 = socket$inet(0xa, 0x801, 0x84)
listen(r1, 0x8)
listen(0xffffffffffffffff, 0x7)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
listen(r2, 0x100)
r3 = socket$netlink(0x10, 0x3, 0x4)
writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r3)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={<r4=>0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={r4, @in6={{0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00', 0xfffffffc}}, 0x6, 0x0, 0x8, 0x1000, 0x6, 0x8, 0x5}, 0x9c)

1.90129448s ago: executing program 4 (id=2829):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000200)=[{0x48, 0x83, 0x0, 0x80000001}, {0x6, 0x9, 0x0, 0x4}, {0x9, 0x5, 0x2, 0x1000}]}, 0x10)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
semget$private(0x0, 0x4000, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket(0xa, 0x3, 0x3a)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r5, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0)
sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x810)
r6 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x20000)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r4, 0x40049366, &(0x7f0000000240))
ioctl$BLKCLOSEZONE(r6, 0x40101287, &(0x7f0000000140)={0x2, 0xfffffffffffffff7})
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f00000003c0)={0x48})
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000006c0)=ANY=[], 0x42)

1.875188933s ago: executing program 2 (id=2830):
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r0 = syz_io_uring_setup(0x239, &(0x7f0000000480)={0x0, 0xfbc6, 0x1000, 0x8000003}, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}})
io_uring_enter(r0, 0x2ded, 0x4000, 0x6, 0x0, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x4, 0x8000000000, 0x1, 0x1, 0x8, 0x38f, 0x1000, 0x1, 0x0, 0x7, 0xe, 0x0, 0x6, 0x4, 0x49], 0x8000000, 0x1c7056})
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000140)={0x5, 0x0, 0x4, 0xb, 0x0, "6ae23ae184097cd58000000009bad88f00", 0x10, 0x7f2})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000180)={0x1})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f7410262e66f36d0f330f09660f3a0cb90000a6752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x31}], 0x1, 0x4498bda7e2139f37, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x8000000000000000, 0x40, 0x40, 0x0, 0x3, 0x2004cc, 0x4000000000000000, 0xfffffffffffffffe, 0x3, 0x0, 0x2, 0x0, 0x2, 0xfffffffffffffffc, 0x1], 0x80a0000, 0x450})
ioctl$KVM_RUN(r5, 0xae80, 0x0)

1.865979295s ago: executing program 0 (id=2831):
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc34000000000010902"], 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x2301, 0x400000000000001})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000580)=[@increfs], 0x0, 0x0, 0x0})
socket$nl_route(0x10, 0x3, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240))
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x18800000000000, 0x4, 0xfffffffffffffffd, 0x0, 0x0, 0x7, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x4, 0x2800000000000, 0x9, 0x3, 0x0, 0x7fffffff}, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)

1.294247542s ago: executing program 2 (id=2832):
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000ec0)={0x80, 0xfffffffd, 0x2, 0x1d9, 0x81, 0x5})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000002480), 0xce4, r0}, 0x38)
bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x3ff, r0, 0x0, 0x100000000000000}, 0x38)

1.199722855s ago: executing program 2 (id=2833):
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0xfffc, @broadcast}, 0x2}}, 0x2e)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$evdev(0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r2, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800)
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e})
r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r4 = epoll_create(0x2)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x30000015})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @host, 0xc, 0x0, 0x5e, 0x2000001, 0x4, 0x1c, 0x4})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)})
r5 = userfaultfd(0x1)
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, 0x0)

1.150137141s ago: executing program 1 (id=2834):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000080)={'wg2\x00', {0x2, 0x0, @private=0xfffffffc}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = fsopen(&(0x7f0000001240)='nfsd\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
fsmount(r6, 0x0, 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x8880, 0x10)
r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x5, 0xff, 0x2})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

644.997514ms ago: executing program 3 (id=2835):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3a)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000004800090329bd7000fddbdf250a000000", @ANYRES32=0x0, @ANYBLOB="f9ffffff0800020002000000140001"], 0x38}, 0x1, 0x0, 0x0, 0x4008840}, 0x0)
ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000780)={0x1, 0x0, [{0xc0000102, 0x0, 0x5284}]})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_emit_ethernet(0x39, &(0x7f0000000040)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @remote, @val={@val={0x88a8, 0x0, 0x0, 0x1}}, {@arp={0x806, @generic={0x12c, 0x886c, 0x6, 0x1, 0x9, @multicast, 'j', @random="d4b61d018383", "ba62815dde6b2d2b042e8e0ace88"}}}}, 0x0)
pipe2(&(0x7f0000000080)={0x0, <r4=>0x0}, 0x88880)
pipe2(&(0x7f0000000000)={<r5=>0x0, 0x0}, 0x0)
tee(r5, r4, 0xff, 0x0)
fanotify_init(0x0, 0x0)
fsopen(&(0x7f0000000180)='proc\x00', 0x1)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00')
r7 = socket$netlink(0x10, 0x3, 0x8000000004)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7)
r8 = getpid()
sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
writev(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2)
preadv(r6, &(0x7f00000007c0)=[{&(0x7f0000000240)=""/190, 0xbe}], 0x1, 0x8e, 0x80)

600.876464ms ago: executing program 2 (id=2836):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
sendmmsg$inet6(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)="82", 0x1}, {&(0x7f0000000240)="11", 0x1}], 0x2}}], 0x1, 0x4404c880)
sendto$inet6(r0, &(0x7f0000000000), 0x68, 0x44008, 0x0, 0xfffffffffffffdfd)

0s ago: executing program 2 (id=2837):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000100)="7a04", 0x0, 0x91eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x82}, 0x50)
unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00')
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x200a00, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCXONC(r0, 0x540a, 0x0)
ioctl$TCFLSH(r0, 0x400455c8, 0x1)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)

kernel console output (not intermixed with test programs):

link: 132 bytes leftover after parsing attributes in process `syz.0.1871'.
[  516.471564][T12131] Bluetooth: hci0: unsupported parameter 28
[  516.489245][T12131] Bluetooth: hci0: unsupported parameter 28
[  516.534333][T12134] fuse: Unknown parameter '0x0000000000000004'
[  516.699137][T12140] overlayfs: failed to resolve './bus': -2
[  516.795805][   T30] audit: type=1804 audit(1768285869.685:439): pid=12145 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.1878" name="/newroot/378/bus/bus" dev="overlay" ino=2036 res=1 errno=0
[  517.091114][ T6054] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  517.121763][   T30] audit: type=1804 audit(1768285869.945:440): pid=12149 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.1878" name="/newroot/378/bus/bus" dev="overlay" ino=2036 res=1 errno=0
[  517.199746][   T30] audit: type=1800 audit(1768285869.945:441): pid=12149 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1878" name="bus" dev="overlay" ino=2036 res=0 errno=0
[  517.274496][ T6054] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  517.292590][ T6054] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  517.345555][ T6054] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  517.380421][ T6054] usb 3-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16
[  517.409694][ T6054] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  517.515653][ T6054] usb 3-1: Product: syz
[  517.526121][ T6054] usb 3-1: Manufacturer: syz
[  517.542673][ T6054] usb 3-1: SerialNumber: syz
[  517.963513][ T6054] usb 3-1: config 0 descriptor??
[  517.984399][ T6054] kvaser_usb 3-1:0.0: error -ENODEV: Cannot get usb endpoint(s)
[  518.874754][T12166] syz0: rxe_newlink: already configured on lo
[  519.924305][ T5932] usb 3-1: USB disconnect, device number 29
[  520.179204][T12189] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1893'.
[  520.236942][T12189] syzkaller1: entered promiscuous mode
[  520.293711][T12189] syzkaller1: entered allmulticast mode
[  520.540961][ T6054] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  520.727948][ T6054] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  520.746894][ T6054] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  520.768741][ T6054] usb 3-1: Product: syz
[  520.792828][ T6054] usb 3-1: Manufacturer: syz
[  520.810201][ T6054] usb 3-1: SerialNumber: syz
[  521.394338][ T6054] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[  521.424336][ T6054] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO
[  521.436835][ T6054] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[  521.461147][ T5932] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  521.471094][ T6054] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  521.481393][ T6054] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  521.527547][ T6054] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71
[  521.540631][ T6054] usb 3-1: USB disconnect, device number 30
[  521.540682][T12225] overlayfs: failed to resolve './bus': -2
[  521.770094][ T5932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  521.779893][ T5932] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  521.790912][ T5932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  522.896162][ T5932] usb 5-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16
[  522.928525][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  522.942221][ T5932] usb 5-1: Product: syz
[  522.946440][ T5932] usb 5-1: Manufacturer: syz
[  522.951447][ T5932] usb 5-1: SerialNumber: syz
[  522.962607][ T5932] usb 5-1: config 0 descriptor??
[  522.978946][ T5932] kvaser_usb 5-1:0.0: error -ENODEV: Cannot get usb endpoint(s)
[  523.223104][T12251] ntfs3(nullb0): Primary boot signature is not NTFS.
[  523.232761][T12251] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[  524.897662][ T5923] usb 5-1: USB disconnect, device number 20
[  525.867303][T12282] fuse: Unknown parameter 'fd0x0000000000000003'
[  526.754578][T12289] fuse: Unknown parameter '0x0000000000000003'
úÿÿÿÿ[  527.158336][   T30] audit: type=1804 audit(1768285880.045:442): pid=12304 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.1928" name="/newroot/390/bus/bus" dev="overlay" ino=2108 res=1 errno=0
[  527.249661][   T30] audit: type=1804 audit(1768285880.125:443): pid=12306 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.1928" name="/newroot/390/bus/bus" dev="overlay" ino=2108 res=1 errno=0
[  527.344125][   T30] audit: type=1800 audit(1768285880.125:444): pid=12306 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1928" name="bus" dev="overlay" ino=2108 res=0 errno=0
[  527.549342][T12311] blktrace: Concurrent blktraces are not allowed on loop8
[  527.955225][T12315] fuse: Unknown parameter 'fd0x0000000000000003'
[  528.335853][T12322] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1935'.
[  528.344896][T12322] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1935'.
[  528.606382][T12326] fuse: Unknown parameter '0x0000000000000003'
úÿÿÿÿ[  528.963835][T12336] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  528.971108][T12336] IPv6: NLM_F_CREATE should be set when creating new route
[  528.978307][T12336] IPv6: NLM_F_CREATE should be set when creating new route
[  529.752579][T12349] fuse: Unknown parameter 'fd0x0000000000000003'
[  530.188065][T12358] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1948'.
[  530.197091][T12358] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1948'.
[  530.337411][T12362] fuse: Unknown parameter 'fd0x0000000000000003'
[  530.981838][ T5879] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  531.090258][   T30] audit: type=1400 audit(1768285883.965:445): avc:  denied  { create } for  pid=12360 comm="syz.0.1950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  531.141228][   T30] audit: type=1400 audit(1768285883.965:446): avc:  denied  { bind } for  pid=12360 comm="syz.0.1950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  531.164513][ T5879] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  531.177951][ T5879] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  531.197437][ T5879] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  531.285427][ T5879] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  531.304993][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  531.326854][ T5879] usb 5-1: Product: syz
úÿÿÿÿ[  531.343594][ T5879] usb 5-1: Manufacturer: syz
[  531.388928][ T5879] cdc_wdm 5-1:1.0: skipping garbage
[  531.411495][ T5879] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22
[  531.576600][ T5879] usb 5-1: USB disconnect, device number 21
[  531.859725][   T30] audit: type=1804 audit(1768285884.745:447): pid=12384 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.1956" name="/newroot/405/bus/bus" dev="overlay" ino=2232 res=1 errno=0
[  531.935938][   T30] audit: type=1804 audit(1768285884.825:448): pid=12385 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.1956" name="/newroot/405/bus/bus" dev="overlay" ino=2232 res=1 errno=0
[  532.020920][   T30] audit: type=1800 audit(1768285884.825:449): pid=12385 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1956" name="bus" dev="overlay" ino=2232 res=0 errno=0
[  533.067623][   T30] audit: type=1400 audit(1768285885.955:450): avc:  denied  { create } for  pid=12392 comm="syz.0.1959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[  533.120881][   T30] audit: type=1400 audit(1768285886.005:451): avc:  denied  { sys_admin } for  pid=12392 comm="syz.0.1959" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[  533.541031][ T5879] usb 4-1: new low-speed USB device number 33 using dummy_hcd
[  534.518435][T12407] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1962'.
[  534.562557][ T5879] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  534.576624][ T5879] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  534.587716][ T5879] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  534.599580][ T5879] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  534.610929][ T5879] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  534.701420][ T5879] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  534.708954][ T5879] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  535.129409][T12411] syzkaller0: entered promiscuous mode
[  535.150565][T12411] syzkaller0: entered allmulticast mode
[  535.161449][ T5879] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  535.180996][ T5923] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  535.181101][ T5879] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  535.216349][ T5879] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  535.239543][ T5879] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  535.256685][ T5879] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  535.278775][ T5879] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  535.300848][ T5879] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  535.314249][ T5879] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  535.329663][ T5879] usb 4-1: string descriptor 0 read error: -22
[  535.336226][ T5879] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  535.345693][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  535.366688][ T5879] adutux 4-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  535.470936][ T5923] usb 5-1: Using ep0 maxpacket: 8
[  535.471446][T12416] fuse: Unknown parameter 'fd0x0000000000000004'
[  535.477504][ T5923] usb 5-1: config 0 interface 0 has no altsetting 0
[  535.517474][ T5923] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b
[  535.573683][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  535.598880][ T5923] usb 5-1: Product: syz
[  535.608811][ T5923] usb 5-1: Manufacturer: syz
[  535.625823][ T5923] usb 5-1: SerialNumber: syz
[  535.661927][ T5879] usb 4-1: USB disconnect, device number 33
[  535.663065][ T5923] usb 5-1: config 0 descriptor??
[  535.715178][ T5923] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state.
[  535.750895][ T5923] dvb-usb: bulk message failed: -22 (2/0)
[  535.783130][ T5923] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  535.881274][ T5923] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201))
[  535.920889][ T5923] usb 5-1: media controller created
[  535.967224][ T5923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  535.994694][ T5923] usb 5-1: selecting invalid altsetting 0
[  536.429954][T12426] hfs: can't find a HFS filesystem on dev nullb0
[  536.750824][ T5923] cxusb: set interface failed
[  536.802777][ T5923] dvb-usb: bulk message failed: -22 (1/0)
[  537.008150][ T5923] DVB: Unable to find symbol mt352_attach()
[  537.014411][ T5923] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)'
[  537.045536][T12434] rdma_rxe: rxe_newlink: failed to add lo
[  537.100868][ T5923] rc_core: IR keymap rc-dvico-portable not found
[  537.112015][ T5923] Registered IR keymap rc-empty
[  537.121633][ T5923] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0
[  537.133609][ T5879] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  537.172714][ T5923] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input52
[  537.213861][ T5923] dvb-usb: schedule remote query interval to 100 msecs.
[  537.234426][ T5923] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected.
[  537.271112][ T5923] usb 5-1: USB disconnect, device number 22
[  537.300869][ T5879] usb 2-1: device descriptor read/64, error -71
[  537.383215][ T5923] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected.
[  537.620986][ T5879] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  538.281132][ T5879] usb 2-1: device descriptor read/64, error -71
[  538.471532][ T5879] usb usb2-port1: attempt power cycle
[  539.382424][ T5879] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  539.445716][ T5879] usb 2-1: device descriptor read/8, error -71
[  539.851447][ T5879] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  540.158666][ T5879] usb 2-1: device descriptor read/8, error -71
[  540.251458][T12482] Bluetooth: hci0: unsupported parameter 28
[  540.257393][T12482] Bluetooth: hci0: unsupported parameter 28
[  540.281138][ T5879] usb usb2-port1: unable to enumerate USB device
[  541.690999][ T5923] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  541.940960][ T5923] usb 5-1: Using ep0 maxpacket: 32
[  541.996873][ T5923] usb 5-1: unable to get BOS descriptor or descriptor too short
[  542.031360][ T5923] usb 5-1: config 4 has an invalid interface number: 136 but max is 0
[  542.039572][ T5923] usb 5-1: config 4 has no interface number 0
[  542.050559][ T5923] usb 5-1: config 4 interface 136 has no altsetting 0
[  542.073322][ T5923] usb 5-1: string descriptor 0 read error: -22
[  542.079685][ T5923] usb 5-1: New USB device found, idVendor=0b48, idProduct=300d, bcdDevice=16.c8
[  542.099404][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  542.118629][ T5923] dvb-usb: found a 'Technotrend TT-connect CT-3650' in warm state.
[  542.135662][ T5923] dvb-usb: bulk message failed: -22 (4/0)
[  542.217742][ T5923] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  542.250880][ T5923] dvb-usb: bulk message failed: -22 (5/0)
[  542.256693][ T5923] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  542.320522][ T5923] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  542.350394][ T5923] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  542.362661][ T5923] dvbdev: DVB: registering new adapter (Technotrend TT-connect CT-3650)
[  542.371635][ T5923] usb 5-1: media controller created
[  542.392217][ T5923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  542.419668][ T5923] ttusb2: set interface to alts=3 failed
[  542.480305][ T5923] DVB: Unable to find symbol tda10023_attach()
[  542.489558][ T5923] dvb-usb: no frontend was attached by 'Technotrend TT-connect CT-3650'
[  542.636765][T12536] Bluetooth: hci0: unsupported parameter 28
[  542.650841][ T5923] rc_core: IR keymap rc-tt-1500 not found
[  542.652933][T12536] Bluetooth: hci0: unsupported parameter 28
[  542.656687][ T5923] Registered IR keymap rc-empty
[  542.669348][ T5923] rc rc0: Technotrend TT-connect CT-3650 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0
[  542.680859][ T5932] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  542.703339][ T5923] input: Technotrend TT-connect CT-3650 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input55
[  542.732962][ T5923] dvb-usb: schedule remote query interval to 150 msecs.
[  542.753384][ T5923] dvb-usb: bulk message failed: -22 (4/0)
[  542.759152][ T5923] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  542.790190][ T5923] dvb-usb: bulk message failed: -22 (5/0)
[  542.798804][ T5923] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  542.822779][ T5923] dvb-usb: Technotrend TT-connect CT-3650 successfully initialized and connected.
[  542.832811][ T5932] usb 1-1: device descriptor read/64, error -71
[  542.835686][T12540] overlayfs: failed to resolve './file0': -2
[  542.911026][ T6054] dvb-usb: bulk message failed: -22 (4/0)
[  542.951881][ T6054] ttusb2: there might have been an error during control message transfer. (rlen = 9, was 0)
[  542.966308][ T5923] usb 5-1: USB disconnect, device number 23
[  542.985614][ T6054] dvb-usb: error -5 while querying for an remote control event.
[  543.511018][ T5932] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  543.523142][ T5923] dvb-usb: Technotrend TT-connect CT-3650 successfully deinitialized and disconnected.
[  543.560749][T12551] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12551 comm=syz.2.1999
[  543.660876][ T5932] usb 1-1: device descriptor read/64, error -71
[  543.738736][T12555] fuse: Unknown parameter '0x0000000000000005'
[  543.878670][ T5932] usb usb1-port1: attempt power cycle
[  544.365845][T12561] ntfs3(nullb0): Primary boot signature is not NTFS.
[  544.372754][T12561] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[  544.421233][ T5932] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  544.461835][ T5932] usb 1-1: device descriptor read/8, error -71
[  544.474248][T12565] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  544.491416][T12565] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 1th superblock
[  544.500386][T12565] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  544.508737][T12565] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 2th superblock
[  544.730864][ T5932] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  544.755970][ T5932] usb 1-1: device descriptor read/8, error -71
[  544.797393][T12573] Bluetooth: hci0: unsupported parameter 28
[  544.852210][T12573] Bluetooth: hci0: unsupported parameter 28
[  544.918078][ T5932] usb usb1-port1: unable to enumerate USB device
[  545.781544][T12592] fuse: Unknown parameter '0x0000000000000005'
[  546.129974][ T5879] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  546.436464][ T5879] usb 3-1: Using ep0 maxpacket: 32
[  546.641355][ T5879] usb 3-1: unable to get BOS descriptor or descriptor too short
[  546.700296][ T5879] usb 3-1: config 4 has an invalid interface number: 136 but max is 0
[  546.708530][ T5879] usb 3-1: config 4 has no interface number 0
[  546.714991][ T5879] usb 3-1: config 4 interface 136 has no altsetting 0
[  546.803026][ T5879] usb 3-1: string descriptor 0 read error: -22
[  546.823148][ T5879] usb 3-1: New USB device found, idVendor=0b48, idProduct=300d, bcdDevice=16.c8
[  546.849505][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  546.907359][ T5879] dvb-usb: found a 'Technotrend TT-connect CT-3650' in warm state.
[  546.924711][ T5879] dvb-usb: bulk message failed: -22 (4/0)
[  546.953839][ T5879] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  546.966066][ T5879] dvb-usb: bulk message failed: -22 (5/0)
[  546.972088][ T5879] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  547.063590][ T5879] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  547.075033][ T5879] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  547.091989][ T5879] dvbdev: DVB: registering new adapter (Technotrend TT-connect CT-3650)
[  547.100443][ T5879] usb 3-1: media controller created
[  547.133667][ T5879] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  547.153080][ T5879] ttusb2: set interface to alts=3 failed
[  547.183266][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  547.227061][ T5879] DVB: Unable to find symbol tda10023_attach()
[  547.234544][ T5879] dvb-usb: no frontend was attached by 'Technotrend TT-connect CT-3650'
[  547.317759][ T5879] rc_core: IR keymap rc-tt-1500 not found
[  547.332052][ T5879] Registered IR keymap rc-empty
[  547.349096][ T5879] rc rc0: Technotrend TT-connect CT-3650 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0
[  547.507982][ T5879] input: Technotrend TT-connect CT-3650 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input56
[  547.520964][ T5879] dvb-usb: schedule remote query interval to 150 msecs.
[  547.527972][ T5879] dvb-usb: bulk message failed: -22 (4/0)
[  547.533774][ T5879] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  547.544044][ T5879] dvb-usb: bulk message failed: -22 (5/0)
[  547.550179][ T5879] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  547.560430][ T5879] dvb-usb: Technotrend TT-connect CT-3650 successfully initialized and connected.
[  547.596936][ T5879] usb 3-1: USB disconnect, device number 31
[  548.850364][T12638] fuse: Unknown parameter '0x0000000000000005'
[  549.074964][ T5879] dvb-usb: Technotrend TT-connect CT-3650 successfully deinitialized and disconnected.
[  549.370886][ T6176] usb 5-1: new low-speed USB device number 24 using dummy_hcd
[  549.546865][T12660] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2030'.
[  549.578802][ T6176] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config
[  549.766127][ T6176] usb 5-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  549.795545][ T6176] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config
[  549.838843][ T6176] usb 5-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  549.874100][ T6176] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config
[  549.908449][ T6176] usb 5-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  550.365995][T12669] loop2: detected capacity change from 0 to 7
[  550.383139][T12669] Dev loop2: unable to read RDB block 7
[  550.388727][T12669]  loop2: unable to read partition table
[  550.410056][T12669] loop2: partition table beyond EOD, truncated
[  550.420068][T12669] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  550.513682][ T6176] usb 5-1: string descriptor 0 read error: -22
[  550.547740][T12673] syzkaller0: entered promiscuous mode
[  550.560834][T12673] syzkaller0: entered allmulticast mode
[  550.614203][ T6176] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  550.809548][ T6176] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  550.951336][ T6176] adutux 5-1:168.0: interrupt endpoints not found
[  551.159180][ T5932] usb 5-1: USB disconnect, device number 24
[  553.070329][T12728] ntfs3(nullb0): Primary boot signature is not NTFS.
[  553.077212][T12728] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[  553.741047][ T5879] usb 1-1: new low-speed USB device number 30 using dummy_hcd
[  553.902821][ T5879] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config
[  553.913622][ T5879] usb 1-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  553.928222][ T5879] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config
[  553.939501][ T5879] usb 1-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  553.953870][ T5879] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config
[  553.964903][ T5879] usb 1-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  553.990955][ T5879] usb 1-1: string descriptor 0 read error: -22
[  554.003686][ T5879] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  554.012789][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  554.029827][ T5879] adutux 1-1:168.0: interrupt endpoints not found
[  554.232950][ T5879] usb 1-1: USB disconnect, device number 30
[  557.820968][ T5879] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  557.990868][ T5879] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  558.189416][ T5879] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  558.210021][ T5879] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  558.254428][ T5879] usb 5-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16
[  558.263844][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  558.274757][ T5879] usb 5-1: Product: syz
[  558.278983][ T5879] usb 5-1: Manufacturer: syz
[  558.284043][ T5879] usb 5-1: SerialNumber: syz
[  558.295391][ T5879] usb 5-1: config 0 descriptor??
[  558.304286][ T5879] kvaser_usb 5-1:0.0: error -ENODEV: Cannot get usb endpoint(s)
[  559.182363][T12811] netlink: 'syz.2.2071': attribute type 1 has an invalid length.
[  559.190218][T12811] netlink: 760 bytes leftover after parsing attributes in process `syz.2.2071'.
[  559.455782][T12814] ntfs3(nullb0): Primary boot signature is not NTFS.
[  559.462631][T12814] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[  560.080913][    T9] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  560.515114][ T5932] usb 5-1: USB disconnect, device number 25
[  560.547860][    T9] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  560.594273][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  560.763600][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  560.773426][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  560.787637][    T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  560.962509][    T9] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  560.970977][    T9] usb 1-1: Manufacturer: syz
[  561.002701][    T9] usb 1-1: config 0 descriptor??
[  561.517718][    T9] appleir 0003:05AC:8243.0003: unknown main item tag 0x0
[  561.984690][    T9] appleir 0003:05AC:8243.0003: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0
[  562.621488][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  562.633621][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  563.190823][T12866] netlink: 'syz.3.2087': attribute type 1 has an invalid length.
[  563.198798][T12866] netlink: 760 bytes leftover after parsing attributes in process `syz.3.2087'.
[  563.229557][    T9] usb 2-1: new low-speed USB device number 32 using dummy_hcd
[  563.300969][ T6176] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  563.463904][    T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  563.471765][ T6176] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  563.471863][    T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  563.493870][ T6176] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  563.507802][    T9] usb 2-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  563.520424][    T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  563.523406][ T6176] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  563.528205][    T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  563.550099][T12868] overlayfs: failed to resolve './file0': -2
[  563.556602][    T9] usb 2-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  563.557818][ T6176] usb 3-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16
[  563.578567][ T6176] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  563.587338][ T6176] usb 3-1: Product: syz
[  563.591995][ T6176] usb 3-1: Manufacturer: syz
[  563.596590][ T6176] usb 3-1: SerialNumber: syz
[  563.604445][ T6176] usb 3-1: config 0 descriptor??
[  563.628796][ T6176] kvaser_usb 3-1:0.0: error -ENODEV: Cannot get usb endpoint(s)
[  563.727363][    T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  563.740883][    T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  563.752864][    T9] usb 2-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  563.768834][    T9] usb 2-1: string descriptor 0 read error: -22
[  564.734699][ T5932] usb 1-1: USB disconnect, device number 31
[  564.742586][    T9] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  564.751672][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  565.353218][    T9] adutux 2-1:168.0: interrupt endpoints not found
[  565.700558][ T6176] usb 2-1: USB disconnect, device number 32
[  566.134139][ T5932] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  566.441368][ T5932] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  566.453278][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  566.470481][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  566.486553][ T5932] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  566.521772][ T5932] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  566.532348][ T5932] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  566.540545][ T5932] usb 1-1: Manufacturer: syz
[  566.548081][ T5932] usb 1-1: config 0 descriptor??
[  567.010056][ T5932] appleir 0003:05AC:8243.0004: unknown main item tag 0x0
[  567.091095][ T6176] usb 3-1: USB disconnect, device number 32
[  567.362796][T12900] netlink: 'syz.2.2100': attribute type 1 has an invalid length.
[  567.370531][T12900] netlink: 760 bytes leftover after parsing attributes in process `syz.2.2100'.
[  567.408799][ T5932] appleir 0003:05AC:8243.0004: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0
[  567.830933][ T6176] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  567.839782][T12913] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2104'.
[  568.093337][ T6176] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  568.104734][ T6176] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  568.115953][ T6176] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  568.126202][ T6176] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  568.140042][T12920] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12920 comm=syz.1.2105
[  568.431934][ T6176] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  568.446647][ T6176] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  568.458180][ T6176] usb 3-1: Manufacturer: syz
[  568.493013][ T6176] usb 3-1: config 0 descriptor??
[  569.040399][ T6176] appleir 0003:05AC:8243.0005: unknown main item tag 0x0
[  569.121232][ T6176] appleir 0003:05AC:8243.0005: hiddev1,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0
[  569.231912][    T9] usb 1-1: reset high-speed USB device number 32 using dummy_hcd
[  569.470873][    T9] usb 1-1: device descriptor read/64, error -32
[  570.612758][ T6054] usb 3-1: USB disconnect, device number 33
[  570.644996][T12938] netlink: 'syz.3.2112': attribute type 1 has an invalid length.
[  570.655061][T12938] netlink: 760 bytes leftover after parsing attributes in process `syz.3.2112'.
[  570.901015][    T9] usb 1-1: reset high-speed USB device number 32 using dummy_hcd
[  571.421279][T12956] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  571.428527][T12956] IPv6: NLM_F_CREATE should be set when creating new route
[  571.435782][T12956] IPv6: NLM_F_CREATE should be set when creating new route
[  571.701577][    T9] usb 1-1: device firmware changed
[  571.715316][ T5932] usb 1-1: USB disconnect, device number 32
[  571.901213][ T5932] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  572.285719][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  572.295574][ T5932] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  572.305519][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  572.318256][ T5932] usb 1-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16
[  572.337736][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  572.346307][T12964] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12964 comm=syz.4.2118
[  572.368236][ T5932] usb 1-1: Product: syz
[  572.376662][ T5932] usb 1-1: Manufacturer: syz
[  572.385558][ T5932] usb 1-1: SerialNumber: syz
[  572.400862][ T5932] usb 1-1: config 0 descriptor??
[  572.421972][ T5932] kvaser_usb 1-1:0.0: error -ENODEV: Cannot get usb endpoint(s)
[  572.493213][T12966] Bluetooth: hci0: unsupported parameter 28
[  572.499364][T12966] Bluetooth: hci0: unsupported parameter 28
[  574.230887][ T5879] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  574.784902][ T5932] usb 1-1: USB disconnect, device number 33
[  574.823411][T12997] rdma_rxe: rxe_newlink: failed to add lo
[  574.972249][ T5879] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  574.994209][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  575.007882][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  575.018729][ T5879] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  575.035105][ T5879] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  575.049580][ T5879] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  575.085656][ T5879] usb 4-1: Manufacturer: syz
[  575.106089][ T5879] usb 4-1: config 0 descriptor??
[  575.545607][ T5879] appleir 0003:05AC:8243.0006: unknown main item tag 0x0
[  575.564565][T13008] Bluetooth: hci0: unsupported parameter 28
[  575.580910][T13008] Bluetooth: hci0: unsupported parameter 28
[  575.591191][ T5879] appleir 0003:05AC:8243.0006: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0
[  576.841327][ T5932] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  577.061881][ T5932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  577.116666][ T5932] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  577.193111][ T5932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  577.273168][ T5932] usb 5-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16
[  577.335325][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  577.403463][ T5932] usb 5-1: Product: syz
[  577.445760][ T5932] usb 5-1: Manufacturer: syz
[  577.482172][ T5932] usb 5-1: SerialNumber: syz
[  577.617258][ T5932] usb 5-1: config 0 descriptor??
[  577.645217][ T5932] kvaser_usb 5-1:0.0: error -ENODEV: Cannot get usb endpoint(s)
[  578.267083][    T9] usb 4-1: USB disconnect, device number 34
[  579.539271][T13054] rdma_rxe: rxe_newlink: failed to add lo
[  579.836959][    T9] usb 5-1: USB disconnect, device number 26
[  581.019395][T13060] Bluetooth: hci0: unsupported parameter 28
[  581.039655][T13060] Bluetooth: hci0: unsupported parameter 28
[  581.358855][T13064] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[  581.376638][T13064] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[  581.393687][T13064] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found
[  581.401655][T13064] UDF-fs: Scanning with blocksize 512 failed
[  581.408541][T13064] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[  581.418615][T13064] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[  581.442033][T13064] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found
[  581.449636][T13064] UDF-fs: Scanning with blocksize 1024 failed
[  581.472468][T13064] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[  581.510236][T13064] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[  581.520625][T13064] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found
[  581.528501][T13064] UDF-fs: Scanning with blocksize 2048 failed
[  581.535184][T13064] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[  581.545097][T13064] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[  581.556184][T13064] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found
[  581.590858][T13064] UDF-fs: Scanning with blocksize 4096 failed
[  581.607183][T13064] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1)
[  581.620827][T13072] block nbd3: NBD_DISCONNECT
[  581.927714][   T30] audit: type=1804 audit(1768285934.765:452): pid=13083 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.2152" name="/newroot/452/bus/bus" dev="overlay" ino=2500 res=1 errno=0
[  582.175166][   T30] audit: type=1804 audit(1768285935.065:453): pid=13088 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.2152" name="/newroot/452/bus/bus" dev="overlay" ino=2500 res=1 errno=0
[  582.846927][   T30] audit: type=1800 audit(1768285935.065:454): pid=13088 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.2152" name="bus" dev="overlay" ino=2500 res=0 errno=0
[  584.121406][    T9] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  584.322432][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  584.332224][    T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  584.345062][T13108] rdma_rxe: rxe_newlink: failed to add lo
[  584.351458][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  584.419760][    T9] usb 4-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16
[  584.429090][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  584.439059][    T9] usb 4-1: Product: syz
[  584.456714][    T9] usb 4-1: Manufacturer: syz
[  584.478683][    T9] usb 4-1: SerialNumber: syz
[  584.499748][    T9] usb 4-1: config 0 descriptor??
[  584.584554][    T9] kvaser_usb 4-1:0.0: error -ENODEV: Cannot get usb endpoint(s)
[  585.619147][T13115] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2161'.
[  586.237265][ T5932] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  586.640319][ T5932] usb 3-1: Using ep0 maxpacket: 8
[  586.687825][ T5932] usb 3-1: config 0 interface 0 has no altsetting 0
[  586.865439][T13133] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2166'.
[  587.556818][ T6176] usb 4-1: USB disconnect, device number 35
[  587.583558][ T5932] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b
[  587.614627][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  587.631020][ T5932] usb 3-1: Product: syz
[  587.970840][ T5932] usb 3-1: Manufacturer: syz
[  588.012188][ T5932] usb 3-1: SerialNumber: syz
[  588.112633][ T5932] usb 3-1: config 0 descriptor??
[  588.255418][T13141] netlink: 'syz.0.2168': attribute type 1 has an invalid length.
[  588.312197][ T5932] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state.
[  588.384979][T13141] netlink: 760 bytes leftover after parsing attributes in process `syz.0.2168'.
[  588.408247][ T5932] dvb-usb: bulk message failed: -22 (2/0)
[  588.422470][ T5932] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  588.456647][ T5932] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201))
[  588.536360][ T5932] usb 3-1: media controller created
[  588.549403][ T5932] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  588.574631][ T5932] usb 3-1: selecting invalid altsetting 0
[  588.581495][ T5932] cxusb: set interface failed
[  588.587286][ T5932] dvb-usb: bulk message failed: -22 (1/0)
[  589.253727][ T5932] DVB: Unable to find symbol mt352_attach()
[  589.265547][ T5932] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)'
[  589.388990][ T5932] rc_core: IR keymap rc-dvico-portable not found
[  589.407137][ T5932] Registered IR keymap rc-empty
[  589.474027][ T5932] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0
[  589.479921][T13162] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2173'.
[  589.541152][T13162] syzkaller1: entered promiscuous mode
[  590.283844][ T5932] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input65
[  590.296640][ T5932] dvb-usb: schedule remote query interval to 100 msecs.
[  590.305757][T13162] syzkaller1: entered allmulticast mode
[  590.590843][ T5932] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected.
[  590.653875][ T5932] usb 3-1: USB disconnect, device number 34
[  590.821868][   T30] audit: type=1804 audit(1768285943.695:455): pid=13170 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.2175" name="/newroot/444/bus/bus" dev="overlay" ino=2390 res=1 errno=0
[  591.070535][   T30] audit: type=1804 audit(1768285943.955:456): pid=13172 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.2175" name="/newroot/444/bus/bus" dev="overlay" ino=2390 res=1 errno=0
[  591.141334][   T30] audit: type=1800 audit(1768285943.955:457): pid=13172 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.2175" name="bus" dev="overlay" ino=2390 res=0 errno=0
[  591.420014][ T5932] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected.
[  592.450898][ T6176] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  592.618991][ T6176] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  592.691217][ T6176] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  592.719717][ T6176] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  592.733548][ T6176] usb 2-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16
[  592.749066][ T6176] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  592.757292][ T6176] usb 2-1: Product: syz
[  592.761682][ T6176] usb 2-1: Manufacturer: syz
[  592.766805][ T6176] usb 2-1: SerialNumber: syz
[  592.773978][ T6176] usb 2-1: config 0 descriptor??
[  592.783244][ T6176] kvaser_usb 2-1:0.0: error -ENODEV: Cannot get usb endpoint(s)
[  592.936175][T13196] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2183'.
[  593.204499][T13146] syz.3.2167 (13146): drop_caches: 1
[  595.057362][T13216] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2187'.
[  595.073300][T13216] syzkaller1: entered promiscuous mode
[  595.085119][T13216] syzkaller1: entered allmulticast mode
[  595.281469][ T6176] usb 2-1: USB disconnect, device number 33
[  596.382608][T13223] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  596.394746][T13242] netlink: 'syz.3.2193': attribute type 1 has an invalid length.
[  596.433376][T13242] netlink: 760 bytes leftover after parsing attributes in process `syz.3.2193'.
[  598.005357][T13268] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2200'.
[  598.020059][T13268] syzkaller1: entered promiscuous mode
[  598.025640][T13268] syzkaller1: entered allmulticast mode
[  601.137701][T13297] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2209'.
[  601.836997][T13305] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  601.847142][T13305] syzkaller0: entered promiscuous mode
[  601.855087][T13305] syzkaller0: entered allmulticast mode
[  601.889254][T13305] tipc: Resetting bearer <eth:syzkaller0>
[  601.911297][T13303] tipc: Resetting bearer <eth:syzkaller0>
[  601.941388][T13303] tipc: Disabling bearer <eth:syzkaller0>
[  602.035955][T13307] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2212'.
[  602.179395][T13311] syzkaller1: entered promiscuous mode
[  602.278467][T13311] syzkaller1: entered allmulticast mode
[  603.912207][T13321] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[  603.971769][T13321] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[  604.001295][T13321] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found
[  604.046366][T13321] UDF-fs: Scanning with blocksize 512 failed
[  604.276683][T13328] Bluetooth: hci0: unsupported parameter 28
[  604.282673][T13328] Bluetooth: hci0: unsupported parameter 28
[  604.294165][T13321] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[  604.304145][T13321] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[  604.313831][T13321] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found
[  604.321862][T13321] UDF-fs: Scanning with blocksize 1024 failed
[  604.328519][T13321] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[  604.341520][T13321] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[  604.351802][T13321] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found
[  604.359369][T13321] UDF-fs: Scanning with blocksize 2048 failed
[  604.368095][T13321] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[  604.376463][T13335] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[  604.379716][T13321] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[  604.410973][T13335] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[  604.423223][T13335] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found
[  604.431650][T13335] UDF-fs: Scanning with blocksize 512 failed
[  604.440148][T13335] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[  604.451208][T13335] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[  604.549967][T13321] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found
[  604.550492][T13335] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found
[  604.566955][T13335] UDF-fs: Scanning with blocksize 1024 failed
[  604.573683][T13335] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[  604.578969][T13321] UDF-fs: Scanning with blocksize 4096 failed
[  604.589475][T13335] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[  605.697481][T13335] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found
[  605.705101][T13335] UDF-fs: Scanning with blocksize 2048 failed
[  605.714465][T13335] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[  605.720847][T13321] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1)
[  605.724466][T13335] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[  605.749108][T13335] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found
[  605.757766][T13335] UDF-fs: Scanning with blocksize 4096 failed
[  605.767114][T13335] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1)
[  607.556542][   T30] audit: type=1804 audit(1768285960.445:458): pid=13363 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.2226" name="/newroot/436/bus/bus" dev="overlay" ino=2346 res=1 errno=0
[  607.609166][   T30] audit: type=1804 audit(1768285960.475:459): pid=13363 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.2226" name="/newroot/436/bus/bus" dev="overlay" ino=2346 res=1 errno=0
[  607.647536][   T30] audit: type=1800 audit(1768285960.475:460): pid=13363 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.2226" name="bus" dev="overlay" ino=2346 res=0 errno=0
[  613.742091][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  618.862176][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  622.357821][T13478] syz.2.2254 (13478): drop_caches: 1
[  624.017294][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  624.023839][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  624.040537][T13478] syz.2.2254 (13478): drop_caches: 1
[  624.069001][T13502] netlink: 83 bytes leftover after parsing attributes in process `syz.3.2259'.
[  624.294226][T13501] rdma_rxe: rxe_newlink: failed to add vxcan1
[  624.302645][T13501] vxfs: WRONG superblock magic 00000000 at 1
[  624.308830][T13501] vxfs: WRONG superblock magic 00000000 at 8
[  624.314888][T13501] vxfs: can't find superblock.
[  628.969216][T13558] syz2: rxe_newlink: already configured on vxcan1
[  628.983942][T13558] vxfs: WRONG superblock magic 00000000 at 1
[  628.990687][T13558] vxfs: WRONG superblock magic 00000000 at 8
[  628.996880][T13558] vxfs: can't find superblock.
[  629.574111][T13561] netlink: 83 bytes leftover after parsing attributes in process `syz.3.2274'.
[  630.230913][ T5829] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  631.652217][T13572] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2277'.
[  632.222818][ T5932] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  632.230462][    T9] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  632.525151][    T9] usb 1-1: Using ep0 maxpacket: 8
[  632.564163][T13550] orangefs_mount: mount request failed with -4
[  633.276837][ T5932] usb 3-1: Using ep0 maxpacket: 32
[  633.361673][ T5932] usb 3-1: config 0 has no interfaces?
[  633.374985][ T5932] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  633.388086][ T5932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  633.434284][    T9] usb 1-1: unable to read config index 0 descriptor/start: -71
[  633.857657][ T5932] usb 3-1: config 0 descriptor??
[  633.962533][    T9] usb 1-1: can't read configurations, error -71
[  634.197008][T13579] binder: 13578:13579 ioctl c0306201 200000000540 returned -22
[  634.213658][ T6176] usb 3-1: USB disconnect, device number 35
[  635.620241][T13615] netlink: 83 bytes leftover after parsing attributes in process `syz.4.2289'.
[  636.114533][T13601] syz.1.2285 (13601): drop_caches: 1
[  636.670848][    T9] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  636.843392][    T9] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  636.884098][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  636.923617][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  636.970536][    T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  637.021128][T13632] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  637.022424][    T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  637.039788][T13598] orangefs_mount: mount request failed with -4
[  637.064090][T13630] syzkaller0: entered promiscuous mode
[  637.169874][    T9] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  637.180093][T13630] syzkaller0: entered allmulticast mode
[  637.328897][T13631] tipc: Resetting bearer <eth:syzkaller0>
[  637.605104][    T9] usb 5-1: Manufacturer: syz
[  637.616307][    T9] usb 5-1: config 0 descriptor??
[  637.622958][T13629] tipc: Resetting bearer <eth:syzkaller0>
[  637.653807][T13629] tipc: Disabling bearer <eth:syzkaller0>
[  638.007484][T13640] rdma_rxe: rxe_newlink: failed to add vxcan1
[  638.019967][T13640] vxfs: WRONG superblock magic 00000000 at 1
[  638.026755][T13640] vxfs: WRONG superblock magic 00000000 at 8
[  638.032829][T13640] vxfs: can't find superblock.
[  638.438635][T13642] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256
[  638.448945][T13642] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512
[  638.458966][T13642] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found
[  638.468392][T13642] UDF-fs: Scanning with blocksize 512 failed
[  638.480928][T13642] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256
[  638.500581][T13642] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512
[  638.530894][T13642] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found
[  638.551444][T13642] UDF-fs: Scanning with blocksize 1024 failed
[  638.558404][T13642] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256
[  638.577536][T13642] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512
[  638.593928][T13642] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found
[  638.601860][T13642] UDF-fs: Scanning with blocksize 2048 failed
[  638.609255][T13642] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256
[  638.620020][T13642] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512
[  638.622044][    T9] appleir 0003:05AC:8243.0007: unknown main item tag 0x0
[  638.634783][T13642] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found
[  638.665577][    T9] appleir 0003:05AC:8243.0007: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0
[  638.690965][T13642] UDF-fs: Scanning with blocksize 4096 failed
[  638.720944][T13642] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1)
[  639.887201][    T9] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  640.269535][ T5932] usb 5-1: reset high-speed USB device number 27 using dummy_hcd
[  640.277412][    T9] usb 2-1: Using ep0 maxpacket: 32
[  640.297526][    T9] usb 2-1: config 0 has no interfaces?
[  640.309797][    T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  640.319180][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  640.410270][    T9] usb 2-1: config 0 descriptor??
[  640.787097][T13648] binder: 13646:13648 ioctl c0306201 200000000540 returned -22
[  640.887403][    T9] usb 2-1: USB disconnect, device number 34
[  641.118290][T13649] syz.0.2297 (13649): drop_caches: 1
[  641.271720][    T9] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  641.410974][ T6054] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  641.424096][    T9] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  641.434956][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  641.445875][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  641.460290][    T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  641.474979][    T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  641.505404][    T9] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  641.518614][    T9] usb 3-1: Manufacturer: syz
[  641.531228][    T9] usb 3-1: config 0 descriptor??
[  641.572467][ T6054] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  641.582198][ T6054] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  641.592023][ T6054] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  641.606957][ T6054] usb 4-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16
[  641.623649][ T6054] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  641.750636][ T6054] usb 4-1: Product: syz
[  641.757436][ T6054] usb 4-1: Manufacturer: syz
[  641.766191][ T6054] usb 4-1: SerialNumber: syz
[  641.778032][ T6054] usb 4-1: config 0 descriptor??
[  641.793888][ T6054] kvaser_usb 4-1:0.0: error -ENODEV: Cannot get usb endpoint(s)
[  642.946329][T13683] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[  642.961172][T13683] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[  642.971125][T13683] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found
[  642.979683][T13683] UDF-fs: Scanning with blocksize 512 failed
[  642.992285][T13683] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[  643.005084][T13683] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[  643.020511][T13683] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found
[  643.047784][T13683] UDF-fs: Scanning with blocksize 1024 failed
[  643.063591][T13683] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[  643.089998][T13683] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[  643.100867][T13683] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found
[  643.108493][T13683] UDF-fs: Scanning with blocksize 2048 failed
[  643.116017][T13683] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[  643.126766][T13683] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[  643.136464][T13683] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found
[  643.144175][T13683] UDF-fs: Scanning with blocksize 4096 failed
[  643.150868][T13683] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1)
[  644.200349][ T6054] usb 4-1: USB disconnect, device number 36
[  644.295845][   T30] audit: type=1400 audit(1768285997.185:461): avc:  denied  { append } for  pid=13699 comm="syz.3.2311" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  644.384654][T13701] syz2: rxe_newlink: already configured on vxcan1
[  644.400680][T13701] vxfs: WRONG superblock magic 00000000 at 1
[  644.407561][T13701] vxfs: WRONG superblock magic 00000000 at 8
[  644.413646][T13701] vxfs: can't find superblock.
[  644.745120][T13705] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13705 comm=syz.3.2313
[  645.284349][    T9] usbhid 3-1:0.0: can't add hid device: -71
[  645.290312][    T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  645.323149][    T9] usb 3-1: USB disconnect, device number 36
[  645.411523][T13714] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  645.556598][T13716] syzkaller0: entered promiscuous mode
[  645.725189][T13716] syzkaller0: entered allmulticast mode
[  645.831723][T13714] tipc: Resetting bearer <eth:syzkaller0>
[  645.940217][T13713] tipc: Resetting bearer <eth:syzkaller0>
[  646.191016][   T10] usb 5-1: USB disconnect, device number 27
[  646.233988][T13713] tipc: Disabling bearer <eth:syzkaller0>
[  646.490980][ T6176] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  646.520836][ T5879] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  647.552945][ T6176] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  647.571277][ T6176] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  647.580967][ T6176] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  647.667557][ T6176] usb 1-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16
[  647.677926][ T6176] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  647.688057][ T5879] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  647.709196][ T6176] usb 1-1: Product: syz
[  647.713519][ T5879] usb 3-1: config 0 has no interfaces?
[  647.721748][ T6176] usb 1-1: Manufacturer: syz
[  647.869084][ T6176] usb 1-1: SerialNumber: syz
[  647.874583][ T5879] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  647.886236][ T6176] usb 1-1: config 0 descriptor??
[  647.893991][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  647.903444][ T6176] kvaser_usb 1-1:0.0: error -ENODEV: Cannot get usb endpoint(s)
[  647.934633][ T5879] usb 3-1: config 0 descriptor??
[  649.004544][ T5879] usb 3-1: USB disconnect, device number 37
[  649.271347][T13761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2329'.
[  649.385363][T13765] netlink: 'syz.4.2328': attribute type 1 has an invalid length.
[  649.393237][T13765] netlink: 1840 bytes leftover after parsing attributes in process `syz.4.2328'.
[  650.123174][ T5879] usb 1-1: USB disconnect, device number 36
[  651.228265][T13782] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  651.251487][T13782] syzkaller0: entered promiscuous mode
[  651.257049][T13782] syzkaller0: entered allmulticast mode
[  651.592364][T13782] tipc: Resetting bearer <eth:syzkaller0>
[  651.694753][T13781] tipc: Resetting bearer <eth:syzkaller0>
[  651.708629][T13781] tipc: Disabling bearer <eth:syzkaller0>
[  654.685536][T13810] netlink: 'syz.2.2341': attribute type 1 has an invalid length.
[  654.693393][T13810] netlink: 1840 bytes leftover after parsing attributes in process `syz.2.2341'.
[  655.031576][T13802] 9pnet_virtio: no channels available for device syz
[  655.042213][T13802] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  655.050388][T13802] overlayfs: overlapping lowerdir path
[  655.156204][T13817] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2340'.
[  655.204473][T13819] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2344'.
[  655.210891][ T5879] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  655.439464][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  655.480812][ T5879] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  655.518546][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  655.610598][ T5879] usb 3-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16
[  655.650928][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  655.800654][ T5879] usb 3-1: Product: syz
[  655.953751][ T5879] usb 3-1: Manufacturer: syz
[  655.958442][ T5879] usb 3-1: SerialNumber: syz
[  655.962269][T13830] loop2: detected capacity change from 0 to 7
[  655.976248][T10751] Dev loop2: unable to read RDB block 7
[  655.981436][ T5879] usb 3-1: config 0 descriptor??
[  655.982210][T10751]  loop2: AHDI p2 p3
[  656.000672][T10751] loop2: partition table partially beyond EOD, truncated
[  656.008194][T10751] loop2: p3 start 335544320 is beyond EOD, truncated
[  656.017814][T13830] Dev loop2: unable to read RDB block 7
[  656.027732][T13830]  loop2: AHDI p2 p3
[  656.032688][T13830] loop2: partition table partially beyond EOD, truncated
[  656.049970][T13830] loop2: p3 start 335544320 is beyond EOD, truncated
[  656.060649][ T5879] kvaser_usb 3-1:0.0: error -ENODEV: Cannot get usb endpoint(s)
[  657.511568][T13847] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  657.525887][T13847] syzkaller0: entered promiscuous mode
[  657.531855][T13847] syzkaller0: entered allmulticast mode
[  657.555138][T13847] tipc: Resetting bearer <eth:syzkaller0>
[  657.576798][T13846] tipc: Resetting bearer <eth:syzkaller0>
[  657.604406][T13846] tipc: Disabling bearer <eth:syzkaller0>
[  657.821453][T13850] netlink: 'syz.3.2353': attribute type 1 has an invalid length.
[  657.829360][T13850] netlink: 1840 bytes leftover after parsing attributes in process `syz.3.2353'.
[  658.031629][T13858] loop2: detected capacity change from 0 to 7
[  658.038542][ T5879] usb 3-1: USB disconnect, device number 38
[  658.042819][ T5814] Dev loop2: unable to read RDB block 7
[  658.044831][T13856] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2355'.
[  658.050136][ T5814]  loop2: AHDI p2 p3
[  658.084760][ T5814] loop2: partition table partially beyond EOD, truncated
[  658.093445][ T5814] loop2: p3 start 335544320 is beyond EOD, truncated
[  658.105604][T13858] Dev loop2: unable to read RDB block 7
[  658.114182][T13858]  loop2: AHDI p2 p3
[  658.118115][T13858] loop2: partition table partially beyond EOD, truncated
[  658.125775][T13858] loop2: p3 start 335544320 is beyond EOD, truncated
[  659.263760][T13881] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  659.272777][T13881] syzkaller0: entered promiscuous mode
[  659.278348][T13881] syzkaller0: entered allmulticast mode
[  659.298174][T13881] tipc: Resetting bearer <eth:syzkaller0>
[  659.306372][T13880] tipc: Resetting bearer <eth:syzkaller0>
[  659.320455][T13880] tipc: Disabling bearer <eth:syzkaller0>
[  659.430865][ T6176] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  659.446543][T13886] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13886 comm=syz.1.2367
[  659.480956][ T5932] usb 1-1: new low-speed USB device number 37 using dummy_hcd
[  659.489727][T13888] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2368'.
[  659.622509][ T6176] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  659.634440][ T6176] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  659.648189][ T6176] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  659.658218][ T6176] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  659.672100][ T6176] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  659.681225][ T6176] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  659.689386][ T6176] usb 3-1: Manufacturer: syz
[  659.697952][ T6176] usb 3-1: config 0 descriptor??
[  659.705037][ T5932] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config
[  659.725854][ T5932] usb 1-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  659.757750][ T5932] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config
[  659.824380][ T5932] usb 1-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  659.845957][ T5932] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config
[  659.861453][ T5932] usb 1-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  659.887205][ T5932] usb 1-1: string descriptor 0 read error: -22
[  659.906285][ T5932] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  659.932950][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  659.954077][ T5932] adutux 1-1:168.0: interrupt endpoints not found
[  659.992060][T13892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2369'.
[  660.128827][ T6176] appleir 0003:05AC:8243.0008: unknown main item tag 0x0
[  661.124511][ T5932] usb 1-1: USB disconnect, device number 37
[  661.245048][ T6176] appleir 0003:05AC:8243.0008: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0
[  661.493676][T13892] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  661.568044][T13902] lo speed is unknown, defaulting to 1000
[  663.011034][ T5932] usb 3-1: USB disconnect, device number 39
[  664.830185][T13902] vxcan1 speed is unknown, defaulting to 1000
[  665.817014][T13940] orangefs_mount: mount request failed with -4
[  665.870926][ T5879] usb 5-1: new low-speed USB device number 28 using dummy_hcd
[  666.042276][ T5879] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config
[  666.068083][ T5879] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  666.097926][ T5879] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  666.118299][ T5879] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config
[  666.128877][ T5879] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  666.139635][ T5879] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  666.154669][ T5879] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config
[  666.165838][ T5879] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  666.176613][ T5879] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  666.195864][ T5879] usb 5-1: string descriptor 0 read error: -22
[  666.202246][ T5879] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  666.211563][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  666.231777][ T5879] adutux 5-1:168.0: interrupt endpoints not found
[  666.432546][ T5932] usb 5-1: USB disconnect, device number 28
[  682.292226][T13956] block nbd0: NBD_DISCONNECT
[  683.974576][T13970] loop2: detected capacity change from 0 to 7
[  683.990359][T13966] Dev loop2: unable to read RDB block 7
[  684.006274][T13966]  loop2: AHDI p2 p3
[  685.077600][T13966] loop2: partition table partially beyond EOD, truncated
[  685.097750][T13966] loop2: p3 start 335544320 is beyond EOD, truncated
[  685.123734][T13970] Dev loop2: unable to read RDB block 7
[  685.145928][T13970]  loop2: AHDI p2 p3
[  685.149891][T13970] loop2: partition table partially beyond EOD, truncated
[  685.160648][T13976] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13976 comm=syz.4.2393
[  685.191560][T13970] loop2: p3 start 335544320 is beyond EOD, truncated
[  685.381122][   T30] audit: type=1400 audit(1768286038.265:462): avc:  denied  { getopt } for  pid=13978 comm="syz.4.2394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  685.404763][T13991] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2395'.
[  685.424585][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  685.437968][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  685.570828][ T5879] usb 3-1: new low-speed USB device number 40 using dummy_hcd
[  685.739800][ T5879] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config
[  685.890994][ T5879] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  685.902452][ T5879] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  685.921322][ T5879] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config
[  685.933310][ T5879] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  685.944223][ T5879] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  685.959348][ T5879] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config
[  685.970209][ T5879] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  685.982996][ T5879] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  686.005831][ T5879] usb 3-1: string descriptor 0 read error: -22
[  686.012167][ T5879] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  686.022334][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  686.057696][ T5879] adutux 3-1:168.0: interrupt endpoints not found
[  686.284604][    T9] usb 3-1: USB disconnect, device number 40
[  687.686691][T14014] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14014 comm=syz.2.2405
[  688.992963][T14025] netlink: 'syz.2.2407': attribute type 1 has an invalid length.
[  689.001368][T14025] netlink: 2108 bytes leftover after parsing attributes in process `syz.2.2407'.
[  692.132349][T14044] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2413'.
[  692.244774][T14043] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2412'.
[  692.597375][    T9] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  692.765370][    T9] usb 1-1: Using ep0 maxpacket: 8
[  692.841052][    T9] usb 1-1: config 0 interface 0 has no altsetting 0
[  692.909161][    T9] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b
[  692.986776][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  693.083491][    T9] usb 1-1: Product: syz
[  693.117005][    T9] usb 1-1: Manufacturer: syz
[  693.140027][    T9] usb 1-1: SerialNumber: syz
[  693.225820][    T9] usb 1-1: config 0 descriptor??
[  693.274992][    T9] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state.
[  693.305085][    T9] dvb-usb: bulk message failed: -22 (2/0)
[  693.327280][    T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  693.355352][    T9] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201))
[  693.415359][T14065] blktrace: Concurrent blktraces are not allowed on loop2
[  693.615397][    T9] usb 1-1: media controller created
[  693.625685][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  693.648293][    T9] usb 1-1: selecting invalid altsetting 0
[  693.678145][    T9] cxusb: set interface failed
[  693.704847][T14073] loop2: detected capacity change from 0 to 7
[  693.729246][T14073] Dev loop2: unable to read RDB block 7
[  693.744494][    T9] dvb-usb: bulk message failed: -22 (1/0)
[  693.754553][T14073]  loop2: AHDI p2 p3
[  693.769315][T14073] loop2: partition table partially beyond EOD, truncated
[  693.813504][T14073] loop2: p3 start 335544320 is beyond EOD, truncated
[  693.822545][    T9] DVB: Unable to find symbol mt352_attach()
[  693.828437][    T9] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)'
[  694.822175][    T9] rc_core: IR keymap rc-dvico-portable not found
[  694.923071][    T9] Registered IR keymap rc-empty
[  694.929687][    T9] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0
[  694.946598][    T9] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input70
[  694.961030][    T9] dvb-usb: schedule remote query interval to 100 msecs.
[  695.053712][    T9] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected.
[  695.515145][ T5932] dvb-usb: bulk message failed: -22 (1/0)
[  695.591280][    T9] usb 1-1: USB disconnect, device number 38
[  695.697800][    T9] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected.
[  700.375137][T14126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2431'.
[  700.779522][T14126] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  700.894299][T14131] syz0: rxe_newlink: already configured on lo
[  702.293399][T14142] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  702.347325][T14123] syz.2.2432 (14123): drop_caches: 1
[  703.476573][T14159] block nbd2: NBD_DISCONNECT
[  704.022097][T14173] overlayfs: missing 'lowerdir'
[  704.057725][    T9] usb 4-1: new low-speed USB device number 37 using dummy_hcd
[  704.409242][T14176] fuse: Bad value for 'fd'
[  704.444962][    T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  704.462741][    T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  704.479392][    T9] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  704.506627][    T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  704.514198][    T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  704.533863][    T9] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  704.593342][    T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  704.601124][    T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  704.617781][    T9] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  704.636119][    T9] usb 4-1: string descriptor 0 read error: -22
[  704.642614][    T9] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  704.651772][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  704.664447][    T9] adutux 4-1:168.0: interrupt endpoints not found
[  704.887518][T14188] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  704.894781][T14188] IPv6: NLM_F_CREATE should be set when creating new route
[  704.902018][T14188] IPv6: NLM_F_CREATE should be set when creating new route
[  704.931241][    T9] usb 4-1: USB disconnect, device number 37
[  705.062842][T14191] lo speed is unknown, defaulting to 1000
[  705.395058][T14191] vxcan1 speed is unknown, defaulting to 1000
[  705.402019][T14195] binder: 14192:14195 ioctl c0306201 200000000600 returned -14
[  706.021495][T14212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2460'.
[  706.338614][T14215] syz0: rxe_newlink: already configured on lo
[  706.722080][ T5820] usb 5-1: new low-speed USB device number 29 using dummy_hcd
[  706.979513][ T5820] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config
[  707.135609][ T5820] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  707.300147][ T5820] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  707.456365][ T5820] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config
[  707.553365][ T5820] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  707.570814][ T5820] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  707.709078][ T5820] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config
[  708.173065][ T5820] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  708.183980][ T5820] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  708.271161][ T5820] usb 5-1: string descriptor 0 read error: -22
[  708.298507][ T5820] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  708.310564][ T5820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  708.602069][ T5820] adutux 5-1:168.0: interrupt endpoints not found
[  708.832844][ T6176] usb 5-1: USB disconnect, device number 29
[  708.860899][ T5820] usb 3-1: new low-speed USB device number 41 using dummy_hcd
[  709.031887][ T5820] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  709.039343][ T5820] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  709.237931][ T5820] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  709.274954][ T5820] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  709.351005][ T5820] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  709.374887][ T5820] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  709.449192][ T5820] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  709.470991][ T5820] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  709.489260][ T5820] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  709.545757][ T5820] usb 3-1: string descriptor 0 read error: -22
[  709.552585][ T5820] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  709.561874][ T5820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  709.692370][ T5820] adutux 3-1:168.0: interrupt endpoints not found
[  709.939211][T14257] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  709.946470][T14257] IPv6: NLM_F_CREATE should be set when creating new route
[  710.043697][T14231] syz.0.2465 (14231): drop_caches: 1
[  710.056979][ T5932] usb 3-1: USB disconnect, device number 41
[  710.435510][T14264] binder: 14261:14264 ioctl c0306201 200000000600 returned -14
[  712.690822][    T9] usb 4-1: new low-speed USB device number 38 using dummy_hcd
[  712.935025][    T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  713.008847][    T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  713.122129][    T9] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  713.239560][    T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  713.302019][    T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  713.390917][    T9] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  713.406985][    T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  713.414887][    T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  713.426046][    T9] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  713.442664][    T9] usb 4-1: string descriptor 0 read error: -22
[  713.448922][    T9] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  713.460020][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  713.501288][    T9] adutux 4-1:168.0: interrupt endpoints not found
[  713.829601][ T5820] usb 4-1: USB disconnect, device number 38
[  714.683066][T14307] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  715.398286][T14311] syz.2.2486 (14311): drop_caches: 1
[  716.092438][T14299] orangefs_mount: mount request failed with -4
[  717.161023][T14311] syz.2.2486 (14311): drop_caches: 1
[  718.984729][T14347] overlayfs: missing 'lowerdir'
[  719.093644][T14350] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2497'.
[  719.160189][T14352] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14352 comm=syz.1.2498
[  719.673117][T14356] block nbd1: NBD_DISCONNECT
[  719.830893][ T5829] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  719.960025][ T5820] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  721.058348][ T5820] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  721.092734][ T5820] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  721.120801][ T5820] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  721.144422][ T5820] usb 5-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16
[  721.158636][ T5820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  721.172684][ T5820] usb 5-1: Product: syz
[  721.176936][ T5820] usb 5-1: Manufacturer: syz
[  721.385571][ T5820] usb 5-1: SerialNumber: syz
[  721.466428][ T5820] usb 5-1: config 0 descriptor??
[  721.480534][ T5820] kvaser_usb 5-1:0.0: error -ENODEV: Cannot get usb endpoint(s)
[  721.666727][T14384] netlink: 'syz.0.2508': attribute type 1 has an invalid length.
[  721.674659][T14384] netlink: 1828 bytes leftover after parsing attributes in process `syz.0.2508'.
[  723.714987][ T5820] usb 5-1: USB disconnect, device number 30
[  723.851609][T14404] overlayfs: failed to resolve './file0': -2
[  725.740925][T13542] Bluetooth: hci5: command 0x1003 tx timeout
[  725.741651][ T5829] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  727.006596][   T30] audit: type=1804 audit(1768286079.795:463): pid=14441 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.2521" name="/newroot/490/bus/bus" dev="overlay" ino=2658 res=1 errno=0
[  727.699270][   T30] audit: type=1804 audit(1768286079.875:464): pid=14442 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.2521" name="/newroot/490/bus/bus" dev="overlay" ino=2658 res=1 errno=0
[  728.514593][T14458] rdma_rxe: rxe_newlink: failed to add vxcan1
[  728.529722][T14458] vxfs: WRONG superblock magic 00000000 at 1
[  728.536676][T14458] vxfs: WRONG superblock magic 00000000 at 8
[  728.542927][T14458] vxfs: can't find superblock.
[  728.555675][ T5820] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  728.744105][ T5820] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  728.825572][ T5820] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  728.855115][ T5820] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  728.871964][ T5820] usb 3-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16
[  728.884234][ T5820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  728.893096][ T5820] usb 3-1: Product: syz
[  728.981461][ T5820] usb 3-1: Manufacturer: syz
[  728.986188][ T5820] usb 3-1: SerialNumber: syz
[  729.007267][ T5820] usb 3-1: config 0 descriptor??
[  729.015311][ T5820] kvaser_usb 3-1:0.0: error -ENODEV: Cannot get usb endpoint(s)
[  730.957150][T14469] netlink: 'syz.3.2530': attribute type 1 has an invalid length.
[  730.965079][T14469] netlink: 1828 bytes leftover after parsing attributes in process `syz.3.2530'.
[  731.217630][T14472] overlayfs: failed to resolve './file0': -2
[  731.362580][   T30] audit: type=1400 audit(1768286084.255:465): avc:  denied  { connect } for  pid=14474 comm="syz.3.2532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  732.041112][    T9] usb 3-1: USB disconnect, device number 42
[  735.496549][    T9] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  736.045452][T14533] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2550'.
[  736.421457][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  736.431267][    T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  736.441587][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  736.455421][    T9] usb 5-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16
[  736.466682][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  736.482983][    T9] usb 5-1: Product: syz
[  736.487552][    T9] usb 5-1: Manufacturer: syz
[  736.495601][    T9] usb 5-1: SerialNumber: syz
[  736.578184][    T9] usb 5-1: config 0 descriptor??
[  736.646862][    T9] kvaser_usb 5-1:0.0: error -ENODEV: Cannot get usb endpoint(s)
[  738.227069][T14543] overlayfs: failed to resolve './file0': -2
[  739.325995][ T5820] usb 5-1: USB disconnect, device number 31
[  741.390965][T14575] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2561'.
[  741.728068][T14568] block device autoloading is deprecated and will be removed.
[  743.521126][T14591] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  743.614819][T14591] tipc: Resetting bearer <eth:syzkaller0>
[  743.663646][T14590] tipc: Disabling bearer <eth:syzkaller0>
[  743.684773][T14562] syz.1.2558 (14562): drop_caches: 1
[  744.920074][T14622] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2575'.
[  745.462939][T14619] qrtr: Invalid version 255
[  745.708464][T14633] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2579'.
[  746.259497][T14653] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2585'.
[  746.270130][T14647] netlink: 'syz.4.2583': attribute type 1 has an invalid length.
[  746.277983][T14647] netlink: 1828 bytes leftover after parsing attributes in process `syz.4.2583'.
[  746.933705][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  746.940078][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  747.360817][ T5829] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  747.367185][T13542] Bluetooth: hci5: command 0x1003 tx timeout
[  751.454202][T14685] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  753.351431][ T6176] usb 2-1: new low-speed USB device number 35 using dummy_hcd
[  753.713882][   T30] audit: type=1804 audit(1768286106.495:466): pid=14714 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.2604" name="/newroot/534/bus/bus" dev="overlay" ino=2872 res=1 errno=0
[  753.756892][   T30] audit: type=1804 audit(1768286106.595:467): pid=14715 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.2604" name="/newroot/534/bus/bus" dev="overlay" ino=2872 res=1 errno=0
[  753.779704][   T30] audit: type=1800 audit(1768286106.595:468): pid=14715 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.2604" name="bus" dev="overlay" ino=2872 res=0 errno=0
[  753.820813][ T6176] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  754.161301][ T6176] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  754.176151][ T6176] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  754.190887][ T6176] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  754.204853][ T6176] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  754.268556][ T6176] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  754.276797][ T6176] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  754.297393][ T6176] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  754.358114][ T6176] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  754.380969][ T5829] Bluetooth: hci5: command 0x1003 tx timeout
[  754.381158][T13542] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  754.446039][ T6176] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  754.466066][T14725] loop2: detected capacity change from 0 to 7
[  754.473255][ T6176] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  754.482847][T14006] Dev loop2: unable to read RDB block 7
[  754.483267][ T6176] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  754.488545][T14006]  loop2: AHDI p2 p3
[  754.503096][ T6176] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  754.516142][ T6176] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  754.533191][ T6176] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  754.546654][T14006] loop2: partition table partially beyond EOD, truncated
[  755.463750][T14006] loop2: p3 start 335544320 is beyond EOD, truncated
[  755.474951][T14725] Dev loop2: unable to read RDB block 7
[  755.480628][T14725]  loop2: AHDI p2 p3
[  755.497833][T14725] loop2: partition table partially beyond EOD, truncated
[  755.527410][T14725] loop2: p3 start 335544320 is beyond EOD, truncated
[  755.598650][ T6176] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  755.606940][T14730] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2610'.
[  755.680650][ T6176] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  755.877540][ T6176] usb 2-1: can't set config #168, error -71
[  755.886729][ T6176] usb 2-1: USB disconnect, device number 35
[  756.125961][T14738] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  756.133243][T14738] IPv6: NLM_F_CREATE should be set when creating new route
[  756.140449][T14738] IPv6: NLM_F_CREATE should be set when creating new route
[  757.271013][    T9] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  757.440782][    T9] usb 4-1: Using ep0 maxpacket: 32
[  757.469431][    T9] usb 4-1: config 0 has no interfaces?
[  757.530424][    T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  757.573580][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  757.607066][    T9] usb 4-1: config 0 descriptor??
[  757.846407][    T9] usb 4-1: USB disconnect, device number 39
[  758.552070][T14766] syz.1.2620 (14766): drop_caches: 1
[  759.170811][ T6176] usb 5-1: new low-speed USB device number 32 using dummy_hcd
[  759.422288][ T6176] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  759.446533][ T6176] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  759.565792][T14766] syz.1.2620 (14766): drop_caches: 1
[  759.591707][ T6176] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  759.637379][ T6176] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  759.803712][ T6176] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  759.825571][ T6176] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  759.835155][ T6176] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  759.851006][ T6176] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  760.836781][ T6176] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  760.869191][ T6176] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  761.852507][ T6176] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  761.859951][ T6176] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  762.795510][ T6176] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  762.823762][ T6176] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  762.859992][ T6176] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  763.020025][ T6176] usb 5-1: string descriptor 0 read error: -71
[  763.199102][ T6176] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  763.228411][T14794] binder: 14793:14794 ioctl c0306201 200000000540 returned -22
[  763.236208][ T6176] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  763.275646][ T6176] usb 5-1: can't set config #168, error -71
[  763.327108][ T6176] usb 5-1: USB disconnect, device number 32
[  763.355186][T14796] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  763.374526][T14798] loop2: detected capacity change from 0 to 7
[  763.382343][T14798] Dev loop2: unable to read RDB block 7
[  763.388175][T14798]  loop2: AHDI p2
[  763.394016][T14798] loop2: partition table partially beyond EOD, truncated
[  764.296846][T14805] fuse: Bad value for 'fd'
[  767.316177][ T5932] usb 3-1: new low-speed USB device number 43 using dummy_hcd
[  767.827345][ T5932] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  767.840808][ T5932] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  767.894431][ T5932] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  767.936152][ T5932] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  767.950818][ T5932] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  767.992019][ T5932] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  767.999554][ T5932] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  768.030625][ T5932] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  768.060802][ T5932] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  768.090781][ T5932] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  768.111735][ T5932] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  768.121010][ T5932] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  768.161865][ T5932] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  768.183881][ T5932] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  768.211368][ T5932] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  768.235501][ T5932] usb 3-1: string descriptor 0 read error: -22
[  768.242099][ T5932] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  768.253489][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  768.287474][ T5932] adutux 3-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  768.446709][T14846] loop2: detected capacity change from 0 to 7
[  768.470906][T14846] Dev loop2: unable to read RDB block 7
[  768.486474][T14846]  loop2: AHDI p2 p3
[  768.490502][T14846] loop2: partition table partially beyond EOD, truncated
[  768.495956][ T6176] usb 3-1: USB disconnect, device number 43
[  768.506111][T14848] fuse: Bad value for 'fd'
[  768.506394][T14846] loop2: p3 start 335544320 is beyond EOD, truncated
[  768.709199][T14857] blktrace: Concurrent blktraces are not allowed on loop2
[  768.756771][T14859] loop2: detected capacity change from 0 to 7
[  768.765228][T14006] Dev loop2: unable to read RDB block 7
[  768.774286][T14006]  loop2: AHDI p2 p3
[  768.780021][T14006] loop2: partition table partially beyond EOD, truncated
[  768.794909][T14006] loop2: p3 start 335544320 is beyond EOD, truncated
[  768.810477][T14859] Dev loop2: unable to read RDB block 7
[  768.817502][T14859]  loop2: AHDI p2 p3
[  768.925070][T14859] loop2: partition table partially beyond EOD, truncated
[  768.935317][T14859] loop2: p3 start 335544320 is beyond EOD, truncated
[  771.707356][T14885] ntfs3(nullb0): Primary boot signature is not NTFS.
[  771.716863][T14885] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[  772.446463][T14901] syzkaller1: entered promiscuous mode
[  772.463234][T14901] syzkaller1: entered allmulticast mode
[  779.622422][T14986] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2688'.
[  779.920983][ T6176] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  780.770785][ T6176] usb 5-1: Using ep0 maxpacket: 8
[  780.823901][ T6176] usb 5-1: config 0 interface 0 has no altsetting 0
[  780.850340][ T6176] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b
[  781.006828][ T6176] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  781.078271][ T6176] usb 5-1: Product: syz
[  781.096850][ T6176] usb 5-1: Manufacturer: syz
[  781.228789][ T6176] usb 5-1: SerialNumber: syz
[  781.236647][ T6176] usb 5-1: config 0 descriptor??
[  781.275838][ T6176] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state.
[  781.296810][ T6176] dvb-usb: bulk message failed: -22 (2/0)
[  781.776275][ T6176] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  781.807477][ T6176] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201))
[  781.830396][ T6176] usb 5-1: media controller created
[  781.848172][ T6176] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  781.898440][ T6176] usb 5-1: selecting invalid altsetting 0
[  781.912643][ T6176] cxusb: set interface failed
[  781.921937][ T6176] dvb-usb: bulk message failed: -22 (1/0)
[  782.371965][T15010] fuse: Bad value for 'fd'
[  783.160063][ T6176] DVB: Unable to find symbol mt352_attach()
[  785.388601][ T6176] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)'
[  785.771795][ T6176] rc_core: IR keymap rc-dvico-portable not found
[  785.779380][ T6176] Registered IR keymap rc-empty
[  785.786425][ T6176] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0
[  785.827524][ T6176] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input73
[  785.849219][ T6176] dvb-usb: schedule remote query interval to 100 msecs.
[  785.863890][ T6176] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected.
[  785.873722][   T24] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  785.902595][ T6176] usb 5-1: USB disconnect, device number 33
[  785.989974][T15039] Bluetooth: hci0: unsupported parameter 28
[  786.003792][T15039] Bluetooth: hci0: unsupported parameter 28
[  786.009198][ T6176] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected.
[  786.030772][   T24] usb 2-1: Using ep0 maxpacket: 8
[  786.040448][   T24] usb 2-1: unable to get BOS descriptor or descriptor too short
[  786.062032][   T24] usb 2-1: unable to read config index 0 descriptor/start: -71
[  786.079256][   T24] usb 2-1: can't read configurations, error -71
[  788.281652][T15059] syzkaller1: entered promiscuous mode
[  788.301771][T15059] syzkaller1: entered allmulticast mode
[  788.635646][ T5923] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  788.690423][T15076] ntfs3(nullb0): Primary boot signature is not NTFS.
[  788.698097][T15076] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[  789.064959][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  789.075245][ T5923] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  789.085434][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  789.103656][ T5923] usb 4-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16
[  789.113179][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  789.123635][ T5923] usb 4-1: Product: syz
[  789.129240][ T5923] usb 4-1: Manufacturer: syz
[  789.134575][ T5923] usb 4-1: SerialNumber: syz
[  789.146459][ T5923] usb 4-1: config 0 descriptor??
[  789.165935][ T5923] kvaser_usb 4-1:0.0: error -ENODEV: Cannot get usb endpoint(s)
[  789.407032][T15088] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  790.738218][T15101] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2725'.
[  790.941019][T15104] ntfs3(nullb0): Primary boot signature is not NTFS.
[  790.950109][T15104] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[  791.387568][T15117] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  791.463914][   T24] usb 4-1: USB disconnect, device number 40
[  791.467460][T15119] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15119 comm=syz.0.2732
[  791.597277][T15123] tipc: Resetting bearer <eth:syzkaller0>
[  791.614779][T15116] tipc: Disabling bearer <eth:syzkaller0>
[  792.201209][T15137] fuse: Bad value for 'fd'
[  792.659469][   T24] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  792.935901][   T24] usb 4-1: Using ep0 maxpacket: 32
[  792.950116][   T24] usb 4-1: config 0 has no interfaces?
[  793.111391][   T24] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  793.120440][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  793.177692][   T24] usb 4-1: config 0 descriptor??
[  793.231355][T15152] fuse: Bad value for 'fd'
[  793.364229][T15158] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2740'.
[  794.685806][ T6176] usb 4-1: USB disconnect, device number 41
[  794.908820][T15168] loop2: detected capacity change from 0 to 7
[  794.916784][T14006] Dev loop2: unable to read RDB block 7
[  795.149771][T14006]  loop2: AHDI p2 p3
[  795.175960][T14006] loop2: partition table partially beyond EOD, truncated
[  795.221299][T14006] loop2: p3 start 335544320 is beyond EOD, truncated
[  795.238348][T15168] Dev loop2: unable to read RDB block 7
[  795.258554][T15168]  loop2: AHDI p2 p3
[  795.262966][T15173] fuse: Bad value for 'user_id'
[  795.267834][T15173] fuse: Bad value for 'user_id'
[  795.275974][T15168] loop2: partition table partially beyond EOD, truncated
[  795.301078][T15168] loop2: p3 start 335544320 is beyond EOD, truncated
[  797.010853][ T5932] usb 4-1: new low-speed USB device number 42 using dummy_hcd
[  797.351460][ T5932] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  797.411484][ T5932] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  797.506481][ T5932] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  800.029225][ T5932] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  800.043315][ T5932] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  800.080616][ T5932] usb 4-1: unable to read config index 1 descriptor/start: -71
[  800.091049][ T5932] usb 4-1: can't read configurations, error -71
[  802.415809][T15225] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2764'.
[  802.574770][T15235] loop2: detected capacity change from 0 to 7
[  802.599202][ T5814] Dev loop2: unable to read RDB block 7
[  802.661413][ T6176] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  802.707100][ T5814]  loop2: AHDI p2 p3
[  802.883498][ T5814] loop2: partition table partially beyond EOD, truncated
[  803.017001][ T5814] loop2: p3 start 335544320 is beyond EOD, truncated
[  803.040867][ T6176] usb 4-1: Using ep0 maxpacket: 8
[  803.336132][ T6176] usb 4-1: config 0 interface 0 has no altsetting 0
[  803.374016][T15235] Dev loop2: unable to read RDB block 7
[  803.484705][ T6176] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b
[  803.501996][T15235]  loop2: AHDI p2 p3
[  803.522351][T15235] loop2: partition table partially beyond EOD, truncated
[  803.529468][T15235] loop2: p3 start 335544320 is beyond EOD, truncated
[  803.538470][ T6176] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  803.562211][ T6176] usb 4-1: Product: syz
[  803.566392][ T6176] usb 4-1: Manufacturer: syz
[  803.583374][ T5189] Dev loop2: unable to read RDB block 7
[  803.588935][ T5189]  loop2: AHDI p2 p3
[  803.623966][ T6176] usb 4-1: SerialNumber: syz
[  803.635430][ T5189] loop2: partition table partially beyond EOD, truncated
[  803.650021][ T5189] loop2: p3 start 335544320 is beyond EOD, truncated
[  804.286282][ T6176] usb 4-1: config 0 descriptor??
[  804.316116][ T6176] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state.
[  804.326870][ T6176] dvb-usb: bulk message failed: -22 (2/0)
[  804.342540][ T6176] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  804.352358][ T6176] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201))
[  804.361186][ T6176] usb 4-1: media controller created
[  804.379602][ T6176] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  804.540032][ T6176] usb 4-1: selecting invalid altsetting 0
[  804.557650][T15254] rdma_rxe: rxe_newlink: failed to add vxcan1
[  804.565707][T15254] vxfs: WRONG superblock magic 00000000 at 1
[  804.574013][T15254] vxfs: WRONG superblock magic 00000000 at 8
[  804.580014][T15254] vxfs: can't find superblock.
[  804.614531][ T6176] cxusb: set interface failed
[  804.628614][ T6176] dvb-usb: bulk message failed: -22 (1/0)
[  804.640776][ T5923] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  804.706119][ T6176] DVB: Unable to find symbol mt352_attach()
[  804.720965][ T6176] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)'
[  804.804226][ T5923] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  804.813671][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  804.821916][ T5923] usb 5-1: Product: syz
[  804.826308][ T5923] usb 5-1: Manufacturer: syz
[  804.832525][ T5923] usb 5-1: SerialNumber: syz
[  804.901901][ T6176] rc_core: IR keymap rc-dvico-portable not found
[  804.908266][ T6176] Registered IR keymap rc-empty
[  804.917104][ T6176] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0
[  804.941384][ T6176] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input74
[  804.955568][ T6176] dvb-usb: schedule remote query interval to 100 msecs.
[  804.962620][ T6176] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected.
[  804.981085][ T6176] usb 4-1: USB disconnect, device number 44
[  805.159909][ T6176] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected.
[  805.267243][ T5923] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[  805.345528][ T5923] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO
[  805.401034][ T5923] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[  805.422351][ T5923] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  805.464782][ T5923] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  805.504404][T15272] rdma_rxe: rxe_newlink: failed to add lo
[  805.514511][ T5923] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71
[  805.544039][ T5923] usb 5-1: USB disconnect, device number 34
[  805.720959][T15279] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15279 comm=syz.3.2780
[  805.824003][T15283] loop2: detected capacity change from 0 to 7
[  805.834002][T15283] Dev loop2: unable to read RDB block 7
[  805.839656][T15283]  loop2: AHDI p2 p3
[  805.843787][T15283] loop2: partition table partially beyond EOD, truncated
[  805.851662][T15283] loop2: p3 start 335544320 is beyond EOD, truncated
[  806.090825][ T5923] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  806.250774][ T5923] usb 2-1: Using ep0 maxpacket: 8
[  806.257050][ T5923] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  806.267174][ T5923] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  806.276980][ T5923] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  806.286771][ T5923] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  806.296724][ T5923] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  806.310004][ T5923] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  806.319137][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  806.577226][ T5923] usb 2-1: usb_control_msg returned -32
[  806.594983][ T5923] usbtmc 2-1:16.0: can't read capabilities
[  806.654292][ T5923] usb 2-1: USB disconnect, device number 38
[  807.021777][ T5923] usb 4-1: new low-speed USB device number 45 using dummy_hcd
[  807.192159][ T5923] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  807.203577][ T5923] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  807.214589][ T5923] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  807.226520][ T5923] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  807.237919][ T5923] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  807.250371][ T5923] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  807.258152][ T5923] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  807.269126][ T5923] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  807.290785][ T5923] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  807.327495][ T5923] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  807.387097][ T5923] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  807.433176][ T5923] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  807.462359][ T5923] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  807.474311][ T5923] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  807.485634][ T5923] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  807.526676][ T5923] usb 4-1: string descriptor 0 read error: -22
[  807.555522][ T5923] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  807.570456][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  807.606500][ T5923] adutux 4-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  807.858980][T15311] rdma_rxe: rxe_newlink: failed to add syz_tun
[  807.885115][T15312] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15312 comm=syz.4.2791
[  808.371786][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  808.378685][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  808.706930][T15325] loop2: detected capacity change from 0 to 7
[  808.742378][T15261] Dev loop2: unable to read RDB block 7
[  808.747965][T15261]  loop2: AHDI p2 p3
[  808.765813][T15261] loop2: partition table partially beyond EOD, truncated
[  808.786213][T15261] loop2: p3 start 335544320 is beyond EOD, truncated
[  808.799822][T15325] Dev loop2: unable to read RDB block 7
[  808.820982][T15325]  loop2: AHDI p2 p3
[  808.840869][T15325] loop2: partition table partially beyond EOD, truncated
[  808.848459][T15325] loop2: p3 start 335544320 is beyond EOD, truncated
[  809.747065][T15345] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2802'.
[  810.409461][   T24] usb 4-1: USB disconnect, device number 45
[  811.391066][T15362] vxfs: WRONG superblock magic 00000000 at 1
[  811.397846][T15362] vxfs: WRONG superblock magic 00000000 at 8
[  811.403964][T15362] vxfs: can't find superblock.
[  811.960799][   T24] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  812.143077][   T24] usb 2-1: Using ep0 maxpacket: 8
[  812.150281][   T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x73, changing to 0x3
[  812.172461][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  812.189591][   T24] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  812.200057][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  812.208456][   T24] usb 2-1: Product: syz
[  812.344730][   T24] usb 2-1: Manufacturer: syz
[  812.402224][   T24] usb 2-1: SerialNumber: syz
[  812.570683][   T24] usb 2-1: config 0 descriptor??
[  812.784169][T15380] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2813'.
[  812.799656][   T24] streamzap 2-1:0.0: streamzap_probe: endpoint doesn't match input device 0203
[  812.924187][T15384] ntfs3(nullb0): Primary boot signature is not NTFS.
[  812.931492][T15384] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[  813.181464][ T5923] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  813.431375][ T5923] usb 4-1: Using ep0 maxpacket: 8
[  813.441107][ T5923] usb 4-1: config 0 interface 0 has no altsetting 0
[  813.457920][ T5923] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b
[  813.475468][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  813.497212][ T5923] usb 4-1: Product: syz
[  813.507700][ T5923] usb 4-1: Manufacturer: syz
[  813.520568][ T5923] usb 4-1: SerialNumber: syz
[  813.530858][   T24] usb 3-1: new low-speed USB device number 44 using dummy_hcd
[  813.540037][ T5923] usb 4-1: config 0 descriptor??
[  813.548615][ T5923] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state.
[  813.564372][ T5923] dvb-usb: bulk message failed: -22 (2/0)
[  813.587204][ T5923] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  813.625939][ T5923] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201))
[  813.639800][T15390] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2816'.
[  813.653200][ T5923] usb 4-1: media controller created
[  813.692565][ T5923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  813.702375][   T24] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  813.725029][   T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  813.725433][ T5923] usb 4-1: selecting invalid altsetting 0
[  813.793742][   T24] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  813.797562][ T5923] cxusb: set interface failed
[  813.820003][   T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  813.851430][ T5923] dvb-usb: bulk message failed: -22 (1/0)
[  813.859295][   T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  813.890373][   T24] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  813.909370][ T5923] DVB: Unable to find symbol mt352_attach()
[  813.916147][ T5923] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)'
[  813.980772][ T5923] rc_core: IR keymap rc-dvico-portable not found
[  814.037091][   T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  814.048447][   T24] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  814.060332][   T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  814.071765][   T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  814.084617][   T24] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  814.092241][ T5923] Registered IR keymap rc-empty
[  814.093398][ T5923] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0
[  814.112640][ T5923] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input75
[  814.125959][ T5923] dvb-usb: schedule remote query interval to 100 msecs.
[  814.437264][ T5932] usb 2-1: USB disconnect, device number 39
[  814.545160][ T5923] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected.
[  814.585017][   T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  814.596017][   T24] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  814.607850][   T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  814.619086][   T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  814.635655][   T24] usb 3-1: string descriptor 0 read error: -22
[  814.644095][   T24] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  814.655368][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  814.664340][ T5923] usb 4-1: USB disconnect, device number 46
[  814.678346][   T24] adutux 3-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  814.744846][T15398] loop2: detected capacity change from 0 to 7
[  814.803405][T15398] Dev loop2: unable to read RDB block 7
[  814.809007][T15398]  loop2: AHDI p2 p3
[  814.851334][T15398] loop2: partition table partially beyond EOD, truncated
[  814.860291][T15398] loop2: p3 start 335544320 is beyond EOD, truncated
[  814.898401][ T5923] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected.
[  815.270768][T15409] ntfs3(nullb0): Primary boot signature is not NTFS.
[  815.279769][T15409] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[  817.083059][    T9] usb 3-1: USB disconnect, device number 44
[  817.711042][    T9] usb 4-1: new low-speed USB device number 47 using dummy_hcd
[  817.945267][    T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  817.972076][    T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  818.067861][    T9] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  818.238919][    T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  818.271429][    T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  818.324444][    T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  818.332513][    T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  818.536751][    T9] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  818.569120][    T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  818.641899][T15432] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15432 comm=syz.2.2828
[  818.662093][    T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  818.698924][    T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  818.715476][    T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  818.762633][    T9] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  818.809382][    T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  818.834235][    T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  818.873492][    T9] usb 4-1: string descriptor 0 read error: -22
[  818.880010][    T9] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  818.899426][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  818.943669][    T9] adutux 4-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  819.247214][    T9] usb 4-1: USB disconnect, device number 47
[  819.390794][ T6176] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  819.540865][ T6176] usb 1-1: Using ep0 maxpacket: 32
[  819.799960][ T6176] usb 1-1: config 0 has no interfaces?
[  819.808479][ T6176] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  820.000963][ T6176] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  820.069969][ T6176] usb 1-1: config 0 descriptor??
[  820.627647][T15461] binder: 15435:15461 ioctl c0306201 0 returned -14
[  820.699260][ T6176] ==================================================================
[  820.707351][ T6176] BUG: KASAN: slab-use-after-free in hci_uart_write_work+0x82d/0x960
[  820.715423][ T6176] Read of size 4 at addr ffff88803234c1b0 by task kworker/1:10/6176
[  820.723389][ T6176] 
[  820.725720][ T6176] CPU: 1 UID: 0 PID: 6176 Comm: kworker/1:10 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  820.725745][ T6176] Tainted: [L]=SOFTLOCKUP
[  820.725752][ T6176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  820.725764][ T6176] Workqueue: events hci_uart_write_work
[  820.725794][ T6176] Call Trace:
[  820.725802][ T6176]  <TASK>
[  820.725810][ T6176]  dump_stack_lvl+0x116/0x1f0
[  820.725834][ T6176]  print_report+0xcd/0x630
[  820.725855][ T6176]  ? __virt_addr_valid+0x81/0x610
[  820.725871][ T6176]  ? __phys_addr+0xe8/0x180
[  820.725888][ T6176]  ? hci_uart_write_work+0x82d/0x960
[  820.725909][ T6176]  kasan_report+0xe0/0x110
[  820.725931][ T6176]  ? hci_uart_write_work+0x82d/0x960
[  820.725956][ T6176]  hci_uart_write_work+0x82d/0x960
[  820.725978][ T6176]  ? __pfx_pty_write+0x10/0x10
[  820.726008][ T6176]  process_one_work+0x9ba/0x1b20
[  820.726035][ T6176]  ? __pfx_process_one_work+0x10/0x10
[  820.726059][ T6176]  ? assign_work+0x1a0/0x250
[  820.726080][ T6176]  worker_thread+0x6c8/0xf10
[  820.726105][ T6176]  ? __kthread_parkme+0x19e/0x250
[  820.726122][ T6176]  ? __pfx_worker_thread+0x10/0x10
[  820.726143][ T6176]  kthread+0x3c5/0x780
[  820.726162][ T6176]  ? __pfx_kthread+0x10/0x10
[  820.726181][ T6176]  ? rcu_is_watching+0x12/0xc0
[  820.726196][ T6176]  ? __pfx_kthread+0x10/0x10
[  820.726216][ T6176]  ret_from_fork+0x983/0xb10
[  820.726235][ T6176]  ? __pfx_ret_from_fork+0x10/0x10
[  820.726254][ T6176]  ? __switch_to+0x7af/0x10d0
[  820.726276][ T6176]  ? __pfx_kthread+0x10/0x10
[  820.726295][ T6176]  ret_from_fork_asm+0x1a/0x30
[  820.726324][ T6176]  </TASK>
[  820.726330][ T6176] 
[  820.882532][ T6176] Allocated by task 9:
[  820.886603][ T6176]  kasan_save_stack+0x33/0x60
[  820.891266][ T6176]  kasan_save_track+0x14/0x30
[  820.895919][ T6176]  __kasan_slab_alloc+0x89/0x90
[  820.900772][ T6176]  kmem_cache_alloc_node_noprof+0x298/0x800
[  820.906640][ T6176]  __alloc_skb+0x156/0x410
[  820.911116][ T6176]  bcsp_prepare_pkt+0xe0/0xae0
[  820.915856][ T6176]  bcsp_dequeue+0x237/0x4b0
[  820.920333][ T6176]  hci_uart_write_work+0x4e3/0x960
[  820.925435][ T6176]  process_one_work+0x9ba/0x1b20
[  820.930351][ T6176]  worker_thread+0x6c8/0xf10
[  820.934921][ T6176]  kthread+0x3c5/0x780
[  820.938966][ T6176]  ret_from_fork+0x983/0xb10
[  820.943531][ T6176]  ret_from_fork_asm+0x1a/0x30
[  820.948283][ T6176] 
[  820.950584][ T6176] The buggy address belongs to the object at ffff88803234c140
[  820.950584][ T6176]  which belongs to the cache skbuff_head_cache of size 240
[  820.965130][ T6176] The buggy address is located 112 bytes inside of
[  820.965130][ T6176]  freed 240-byte region [ffff88803234c140, ffff88803234c230)
[  820.978898][ T6176] 
[  820.981198][ T6176] The buggy address belongs to the physical page:
[  820.987579][ T6176] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3234c
[  820.996312][ T6176] memcg:ffff888056e60181
[  821.000525][ T6176] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  821.007609][ T6176] page_type: f5(slab)
[  821.011569][ T6176] raw: 00fff00000000000 ffff88801d29d8c0 ffffea0001dd1a00 dead000000000004
[  821.020128][ T6176] raw: 0000000000000000 00000000000c000c 00000000f5000000 ffff888056e60181
[  821.028682][ T6176] page dumped because: kasan: bad access detected
[  821.035066][ T6176] page_owner tracks the page as allocated
[  821.040755][ T6176] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1107, tgid 1107 (kworker/u8:7), ts 106871528534, free_ts 101836845915
[  821.060179][ T6176]  post_alloc_hook+0x1af/0x220
[  821.064925][ T6176]  get_page_from_freelist+0xd0b/0x31a0
[  821.070357][ T6176]  __alloc_frozen_pages_noprof+0x25f/0x2430
[  821.076225][ T6176]  alloc_pages_mpol+0x1fb/0x550
[  821.081053][ T6176]  new_slab+0x2c3/0x430
[  821.085191][ T6176]  ___slab_alloc+0xe18/0x1c90
[  821.089848][ T6176]  __slab_alloc.constprop.0+0x63/0x110
[  821.095289][ T6176]  kmem_cache_alloc_node_noprof+0x44a/0x800
[  821.101157][ T6176]  __alloc_skb+0x156/0x410
[  821.105549][ T6176]  nsim_dev_trap_report_work+0x2b1/0xcf0
[  821.111168][ T6176]  process_one_work+0x9ba/0x1b20
[  821.116083][ T6176]  worker_thread+0x6c8/0xf10
[  821.120649][ T6176]  kthread+0x3c5/0x780
[  821.124694][ T6176]  ret_from_fork+0x983/0xb10
[  821.129263][ T6176]  ret_from_fork_asm+0x1a/0x30
[  821.134007][ T6176] page last free pid 6258 tgid 6258 stack trace:
[  821.140397][ T6176]  __free_frozen_pages+0x7df/0x1170
[  821.145577][ T6176]  kvm_mmu_free_memory_cache+0x189/0x2d0
[  821.151186][ T6176]  kvm_mmu_destroy+0x64/0x150
[  821.155840][ T6176]  kvm_arch_vcpu_destroy+0x2d0/0x440
[  821.161108][ T6176]  kvm_destroy_vcpus+0x24e/0x3c0
[  821.166024][ T6176]  kvm_arch_destroy_vm+0x87/0x2f0
[  821.171021][ T6176]  kvm_put_kvm+0x4fe/0xb00
[  821.175415][ T6176]  kvm_vm_release+0x3c/0x50
[  821.179894][ T6176]  __fput+0x402/0xb70
[  821.183848][ T6176]  task_work_run+0x150/0x240
[  821.188417][ T6176]  exit_to_user_mode_loop+0xfb/0x540
[  821.193683][ T6176]  do_syscall_64+0x4ee/0xf80
[  821.198253][ T6176]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  821.204119][ T6176] 
[  821.206420][ T6176] Memory state around the buggy address:
[  821.212023][ T6176]  ffff88803234c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc
[  821.220058][ T6176]  ffff88803234c100: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb
[  821.228094][ T6176] >ffff88803234c180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  821.236127][ T6176]                                      ^
[  821.241731][ T6176]  ffff88803234c200: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc
[  821.249766][ T6176]  ffff88803234c280: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  821.257796][ T6176] ==================================================================
[  821.303422][   T30] audit: type=1400 audit(1768286174.195:469): avc:  denied  { read } for  pid=5171 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  821.328549][   T30] audit: type=1400 audit(1768286174.215:470): avc:  denied  { search } for  pid=5171 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  821.353619][   T30] audit: type=1400 audit(1768286174.215:471): avc:  denied  { search } for  pid=5171 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  821.375600][   T30] audit: type=1400 audit(1768286174.215:472): avc:  denied  { add_name } for  pid=5171 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  821.396508][   T30] audit: type=1400 audit(1768286174.215:473): avc:  denied  { create } for  pid=5171 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  821.425510][ T6176] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  821.432736][ T6176] CPU: 1 UID: 0 PID: 6176 Comm: kworker/1:10 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  821.443759][ T6176] Tainted: [L]=SOFTLOCKUP
[  821.448072][ T6176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  821.458119][ T6176] Workqueue: events hci_uart_write_work
[  821.463671][ T6176] Call Trace:
[  821.466941][ T6176]  <TASK>
[  821.469877][ T6176]  dump_stack_lvl+0x3d/0x1f0
[  821.474472][ T6176]  vpanic+0x640/0x6f0
[  821.478452][ T6176]  panic+0xca/0xd0
[  821.482169][ T6176]  ? __pfx_panic+0x10/0x10
[  821.486572][ T6176]  ? hci_uart_write_work+0x82d/0x960
[  821.491846][ T6176]  ? preempt_schedule_common+0x44/0xc0
[  821.497285][ T6176]  ? preempt_schedule_thunk+0x16/0x30
[  821.502638][ T6176]  ? check_panic_on_warn+0x1f/0xb0
[  821.507728][ T6176]  check_panic_on_warn+0xab/0xb0
[  821.512645][ T6176]  end_report+0x107/0x160
[  821.516956][ T6176]  kasan_report+0xee/0x110
[  821.521353][ T6176]  ? hci_uart_write_work+0x82d/0x960
[  821.526623][ T6176]  hci_uart_write_work+0x82d/0x960
[  821.531716][ T6176]  ? __pfx_pty_write+0x10/0x10
[  821.536468][ T6176]  process_one_work+0x9ba/0x1b20
[  821.541392][ T6176]  ? __pfx_process_one_work+0x10/0x10
[  821.546746][ T6176]  ? assign_work+0x1a0/0x250
[  821.551318][ T6176]  worker_thread+0x6c8/0xf10
[  821.555893][ T6176]  ? __kthread_parkme+0x19e/0x250
[  821.560894][ T6176]  ? __pfx_worker_thread+0x10/0x10
[  821.565987][ T6176]  kthread+0x3c5/0x780
[  821.570034][ T6176]  ? __pfx_kthread+0x10/0x10
[  821.574603][ T6176]  ? rcu_is_watching+0x12/0xc0
[  821.579343][ T6176]  ? __pfx_kthread+0x10/0x10
[  821.583911][ T6176]  ret_from_fork+0x983/0xb10
[  821.588481][ T6176]  ? __pfx_ret_from_fork+0x10/0x10
[  821.593571][ T6176]  ? __switch_to+0x7af/0x10d0
[  821.598230][ T6176]  ? __pfx_kthread+0x10/0x10
[  821.602800][ T6176]  ret_from_fork_asm+0x1a/0x30
[  821.607550][ T6176]  </TASK>
[  821.610832][ T6176] Kernel Offset: disabled
[  821.615128][ T6176] Rebooting in 86400 seconds..