last executing test programs:

8m0.464781364s ago: executing program 3 (id=2512):
r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000fc0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001540)={0x34, &(0x7f0000001380)={0x40, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000003880)={0x34, &(0x7f0000003640)={0x20, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000004300)={0x34, &(0x7f00000040c0)={0x40, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000280)={0x34, &(0x7f0000000100)={0x20, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000004740)={0x34, &(0x7f0000000a00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000300)={0x40, 0xf, 0x4, "ac32a2f1"}, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

7m59.373680023s ago: executing program 32 (id=2497):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
pipe(0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0xc00e}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x4000000, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x78, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4c, 0x3, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0xb}, @NFTA_SET_ELEM_EXPRESSIONS={0x3c, 0xb, 0x0, 0x1, [{0x20, 0x7, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @connlimit={{0x4, 0x2}, @val={0x4}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xfc}}, 0x0)
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x0)

7m59.141147935s ago: executing program 4 (id=2517):
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40000102)
setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8)

7m57.845732298s ago: executing program 0 (id=2518):
r0 = syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x3, 0xb5}, &(0x7f0000ffe000), &(0x7f0000ffe000))
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x2, &(0x7f0000000180), 0xfe)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00')
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x4, 0x0, 0xfffffff7ffffeffe, 0xfffffffc}, 0x0)
getpgid(0x0)
read$FUSE(r1, &(0x7f00000020c0)={0x2020}, 0x2020)

7m55.810081862s ago: executing program 4 (id=2519):
write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0)
ftruncate(r1, 0x8800000)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000063c0)=[{{0x0, 0x0, 0x0}, 0x1153}, {{0x0, 0x0, &(0x7f0000001840), 0x0, &(0x7f00000018c0)=""/250, 0xfa}, 0xeef}, {{0x0, 0x0, &(0x7f0000001ac0)=[{0x0}], 0x1}, 0x6}, {{&(0x7f0000001b00)=@rc={0x1f, @none}, 0x80, 0x0}, 0x1}, {{0x0, 0x0, 0x0}}], 0x5, 0x700, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0xbf2d)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="010000020c00fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0)

7m55.295934723s ago: executing program 3 (id=2520):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfd}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0)

7m54.112910294s ago: executing program 4 (id=2521):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="94000000100001002abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="802100000000000014000300776c616e300000000000000000000000080004000e0400005800168054000180280001"], 0x94}, 0x1, 0x0, 0x0, 0x4004010}, 0x0)

7m53.978091511s ago: executing program 3 (id=2522):
r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000300)={'fscrypt:', @desc1}, &(0x7f0000000340)={0x0, "186363cf379caf54bf000000c0de7af30e90937920fcba13d90a86cfeaa44d66a6535daf1bc31018407ad88f8d250600", 0x15}, 0x48, 0xffffffffffffffff)
keyctl$chown(0x4, r0, 0xffffffffffffffff, 0x0)

7m53.626634437s ago: executing program 3 (id=2524):
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800020d8}, 0x94)
r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$6lowpan_control(r0, &(0x7f0000000500)='connect aa:aa:aa:aa:aa:11 0', 0x1b)
write$6lowpan_control(r0, &(0x7f0000000540)='connect aa:aa:aa:aa:aa:10 0', 0x1b)
r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0)
socket(0x10, 0x803, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket(0x400000000010, 0x3, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket(0x2, 0x1, 0x0)
setsockopt$inet_opts(r4, 0x0, 0xd, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
write$6lowpan_control(r1, &(0x7f00000006c0)='connect aa:aa:aa:aa:aa:10 0', 0x1b)

7m53.532958908s ago: executing program 0 (id=2525):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x2c}}, 0x0)

7m53.108664689s ago: executing program 4 (id=2527):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}], 0x1}], 0x1, 0x40800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

7m52.756345862s ago: executing program 0 (id=2528):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081)
setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000580)=[{0x3, 0x3, {}, {0x1, 0xf0, 0x2}, 0xfe, 0xfe}], 0x20)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x74, r2, {0xb, 0xffeb}, {0xfff1, 0xfff2}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050)

7m52.741000817s ago: executing program 3 (id=2529):
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
msgsnd(0x0, 0x0, 0x0, 0x0)
msgsnd(0x0, 0x0, 0x8, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, 0x0)
r3 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0)

7m50.639239697s ago: executing program 0 (id=2532):
socket(0x80000000000000a, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_emit_ethernet(0x52, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaa73238bc0aaaaaa0045000044000000000021907800000000ffffffff050090780a2101024afcffffffffffffff000020c58619826200ac1e0001ac141401291a"], 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)

7m47.001502686s ago: executing program 4 (id=2533):
r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000300)={'fscrypt:', @desc1}, &(0x7f0000000340)={0x0, "186363cf379caf54bf000000c0de7af30e90937920fcba13d90a86cfeaa44d66a6535daf1bc31018407ad88f8d250600", 0x15}, 0x48, 0xffffffffffffffff)
keyctl$chown(0x4, r0, 0xffffffffffffffff, 0x0)

7m46.99823926s ago: executing program 3 (id=2542):
syz_open_dev$vim2m(&(0x7f0000000080), 0x9, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040), 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}})
io_uring_enter(r2, 0x7323, 0x0, 0x5, 0x0, 0x0)

7m46.304717612s ago: executing program 4 (id=2534):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$inet6(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10)
sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0)

7m45.950238241s ago: executing program 0 (id=2535):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000001400038008000240f4ff0000080001400000000014000000110001"], 0x68}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14}}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x24040880)

7m45.142675808s ago: executing program 0 (id=2536):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00')
preadv(r3, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0)

7m30.186638879s ago: executing program 33 (id=2531):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss, @window, @window], 0x20000000000000e4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000700), 0x4)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25)

7m28.581790805s ago: executing program 34 (id=2542):
syz_open_dev$vim2m(&(0x7f0000000080), 0x9, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040), 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}})
io_uring_enter(r2, 0x7323, 0x0, 0x5, 0x0, 0x0)

7m28.421461355s ago: executing program 35 (id=2534):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$inet6(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10)
sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0)

7m28.308182905s ago: executing program 36 (id=2536):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00')
preadv(r3, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0)

4m18.520159665s ago: executing program 5 (id=3145):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f00000001c0)={0x2, {0xffffff00, 0x1f740, 0x1, 0x6}})

4m18.266042571s ago: executing program 5 (id=3147):
mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xfffffffd)
r0 = landlock_create_ruleset(&(0x7f0000000440)={0x6621}, 0x18, 0x0)
landlock_restrict_self(r0, 0x1)
r1 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r2, &(0x7f0000000400)={&(0x7f00000008c0), 0x10, 0x0, 0x0, 0x0, 0x0, 0x41}, 0x20)
ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$nl_route(0x10, 0x3, 0x0)
pipe2(&(0x7f00000000c0), 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x7fc, 0x6, 0x9, 0x8, 0x0, 0x3}, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200080, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r6 = socket$inet6(0xa, 0x1, 0x0)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
socket$key(0xf, 0x3, 0x2)

4m16.978869419s ago: executing program 5 (id=3149):
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r2, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10)
connect$vsock_stream(r2, &(0x7f0000000400)={0x28, 0x0, 0x2710, @my=0x1}, 0x10)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58)
r3 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='name', &(0x7f00000000c0)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000003c0)='name', &(0x7f0000000400)='})\x00', 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280), 0x0)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x22c881, 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x48, 0xd7, 0xa9, 0x8, 0x7b0, 0x6, 0x9ed4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0xdb, 0x4, 0xc0, 0xe6, [{{0x9, 0x4, 0x93, 0x4, 0x0, 0x87, 0xce, 0xbf, 0x5}}, {{0x9, 0x4, 0x93, 0x2, 0x0, 0xff, 0x4, 0xb, 0xa}}]}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x2, 0x5a, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xf, 0xb3, 0xb0, 0x40, 0x110a, 0x1150, 0x8f77, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x93, 0x5, 0x10, 0x5, [{{0x9, 0x4, 0x56, 0x57, 0x1, 0x92, 0xaf, 0x63, 0x2, [@uac_control={{0xa, 0x24, 0x1, 0x55a, 0x5b}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x204, 0x3, 0x7, 0xffff, 0x0, 0x9}, @extension_unit={0xa, 0x24, 0x8, 0x4, 0x7, 0x7c, "9a313b"}, @mixer_unit={0x7, 0x24, 0x4, 0x1, 0xa0, "9592"}]}], [{{0x9, 0x5, 0xc, 0x0, 0x20, 0x2, 0x6, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x10, 0xd}]}}]}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x201, 0x9, 0x1, 0x35, 0x20, 0x8}, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="050f2400020b100143725c0900800914f903cdd2cc613378000000000000000000000000374726bc42be2f063a923509fbfd6dc84136dc86cb904113bcef7b6ce3612930e87c0693c3e4e38680e3ec0030988505b52ce4c703a050ca7c983d6acaff6784d680747c39e195ddb2e7ef92c730a19149896953e0261a08c5c7c6b0eea06861c9c7a1d6f769d3ee76995623829d"], 0x5, [{0x89, &(0x7f0000000480)=@string={0x89, 0x3, "991d3adce1a4c4ba1e439d3913c5bddf897334f4f111be8a2e036a1edf01573f6ed71e1e31d4573d9e3daf9defd39940d43949d5e811bc96e2837b60a8d9f9b50b384260cacdb985a39a3976247cae32bf0abc358f85cafc98381eeaae27bd8594a3a36646dd04dd30bb9c1c724a182fbea0ef7285b2fabcd2a676cd2e2b68374d41f4998bebf6"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x444}}, {0xe5, &(0x7f0000000580)=ANY=[@ANYBLOB="e5032d4836a60097cebbf97beaaf98746775ba4250deb7cae232ddcb41580a5fd1a9ff00946cce5264aae4618c0dade5062d42e9e7f334b1a63abf5ba9c757403cc1dbd8939f328648444206b99932bb291338fa084933ed41a7ac6b94d7bcca601def0d8fcfe8c98772d0d611106ee8bbdecd93b7e71e612c47dc5e873403c31d47e494972b8b57e4a3e6109942be04c4bfe97503a5c1503a9259e2262572431f1659cf2ece9cf5f3be2c44623d9f99d69a8d418d15c1d34630f0dbf5a69eee1d7e381328b00aecede3c9c2a4ad83ea57637d3170aa76d75657382db20b4ba2847919bfa4"]}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x447}}, {0x0, 0x0}]})
ioctl$RTC_ALM_SET(r4, 0x40247007, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6800000002060101000000000000000000000000120003006269746dffffff7f000000006300000005000400020000000900020073797a30000000001c000780180001801400024000000000000000000000ffffffffffff05000500020000000500010006000000"], 0x68}}, 0x0)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000440)='reno\x00', 0x5)
bind$inet6(r6, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r6, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r6, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}], 0x1, 0x10)
syz_usb_disconnect(0xffffffffffffffff)
socket(0x400000000010, 0x3, 0x0)

4m13.110193811s ago: executing program 5 (id=3158):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x2)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x80101)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10)
chroot(&(0x7f0000000780)='./file0\x00')
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
r4 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='mand\x00', &(0x7f0000000040)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
fsmount(r4, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="05000000000000deffff0500000008000300", @ANYRES32=r6], 0x24}}, 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
socket(0x1d, 0x2, 0x6)
openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)
move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00')
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000020601080000000000000000000000000500010006000000050005000a000000ea80e113000000000900020073797a31000000000c000300686173683a697000aae8aad4fdc8c3e19918b227aa0735c3f805b5be835231ca391bb0be3115ef215e7cec16f663587df08ec3045a24c902bb8d7c265254910e6d02fc1e276615f48f3576405c35746316c40de37c1984c5d55912900ce217ea05c64cb5b1b029"], 0x44}}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c0007801800018014000240"], 0x8c}, 0x1, 0x0, 0x0, 0x10000182}, 0x4000080)

4m12.606318478s ago: executing program 5 (id=3161):
r0 = io_uring_setup(0x6780, &(0x7f0000000300)={0x0, 0xf843, 0x2, 0x3, 0x1a})
r1 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000000380)=<r2=>0x0, &(0x7f0000000280))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
userfaultfd(0x80001)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x400, 0x3, 0x4, 0x9325, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7dc48146, 0x7fffffff, 0x5539e0cf}, 0x0, 0x0)
io_uring_enter(r1, 0xdb5, 0x0, 0x0, 0x0, 0x0)

4m11.901699749s ago: executing program 5 (id=3165):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
lsetxattr$security_capability(&(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, 0x0, 0x3)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x8000)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r3 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYRES8=r2, @ANYRESHEX=r2, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303096ca70ea88c393e32c757365725f6964bd", @ANYRES8=r0, @ANYBLOB=',group_id=', @ANYRES16=r1], 0x0, 0x0, 0x0)
read$FUSE(r2, &(0x7f0000007100)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000002140)={0x50, 0x0, r4, {0x7, 0x2b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50)
read$FUSE(r2, &(0x7f0000002900)={0x2020}, 0x2020)
write$FUSE_INTERRUPT(r2, &(0x7f00000002c0)={0xffffffffffffff10, 0xfffffffffffffffe}, 0x10)
syz_fuse_handle_req(r2, &(0x7f0000004940)="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", 0x2000, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x3c}})
ioctl$FS_IOC_RESVSP(r3, 0x40086602, &(0x7f0000002740)={0x0, 0xdaff})
syz_fuse_handle_req(r2, &(0x7f0000010240)="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", 0x2000, &(0x7f0000022f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000022e00)={0x20, 0x0, 0x7, {0xffff0001, 0x4, 0x0, 0x3}}, 0x0})
r5 = socket(0x400000000010, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
connect$pppoe(r5, &(0x7f0000000080)={0x18, 0x0, {0x0, @remote, 'bridge_slave_1\x00'}}, 0x1e)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', <r9=>0x0})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@ipv6_newaddr={0x48, 0x14, 0x101, 0x70bd26, 0x25dffbf8, {0xa, 0x38, 0x19, 0xff, r9}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_RT_PRIORITY={0x8, 0x9, 0x21ce0}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x8004)
r11 = socket(0x10, 0x3, 0x0)
sendmsg$TCPDIAG_GETSOCK(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x40850}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x220080c8}, 0x20008850)
sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xffffeffe, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x2}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x10, 0x6}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
socket(0x400000000010, 0x3, 0x0)
r12 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})

4m11.355478706s ago: executing program 37 (id=3165):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
lsetxattr$security_capability(&(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, 0x0, 0x3)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x8000)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r3 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYRES8=r2, @ANYRESHEX=r2, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303096ca70ea88c393e32c757365725f6964bd", @ANYRES8=r0, @ANYBLOB=',group_id=', @ANYRES16=r1], 0x0, 0x0, 0x0)
read$FUSE(r2, &(0x7f0000007100)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000002140)={0x50, 0x0, r4, {0x7, 0x2b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50)
read$FUSE(r2, &(0x7f0000002900)={0x2020}, 0x2020)
write$FUSE_INTERRUPT(r2, &(0x7f00000002c0)={0xffffffffffffff10, 0xfffffffffffffffe}, 0x10)
syz_fuse_handle_req(r2, &(0x7f0000004940)="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", 0x2000, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x3c}})
ioctl$FS_IOC_RESVSP(r3, 0x40086602, &(0x7f0000002740)={0x0, 0xdaff})
syz_fuse_handle_req(r2, &(0x7f0000010240)="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", 0x2000, &(0x7f0000022f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000022e00)={0x20, 0x0, 0x7, {0xffff0001, 0x4, 0x0, 0x3}}, 0x0})
r5 = socket(0x400000000010, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
connect$pppoe(r5, &(0x7f0000000080)={0x18, 0x0, {0x0, @remote, 'bridge_slave_1\x00'}}, 0x1e)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', <r9=>0x0})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@ipv6_newaddr={0x48, 0x14, 0x101, 0x70bd26, 0x25dffbf8, {0xa, 0x38, 0x19, 0xff, r9}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_RT_PRIORITY={0x8, 0x9, 0x21ce0}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x8004)
r11 = socket(0x10, 0x3, 0x0)
sendmsg$TCPDIAG_GETSOCK(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x40850}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x220080c8}, 0x20008850)
sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xffffeffe, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x2}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x10, 0x6}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
socket(0x400000000010, 0x3, 0x0)
r12 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})

2m38.47819255s ago: executing program 8 (id=3475):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
r3 = open(0x0, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, 0x0, 0x0)
syz_genetlink_get_family_id$l2tp(0x0, r3)
fanotify_mark(0xffffffffffffffff, 0x201, 0x4000003e, 0xffffffffffffffff, 0x0)
r5 = socket$inet6(0xa, 0x3, 0x8)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e24, 0x2, @empty}, 0x1c)
ftruncate(0xffffffffffffffff, 0x5)
setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0xd8)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000000010003b152cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000015001001800128008000100677470000c00028008000100", @ANYRES32, @ANYBLOB="caf8618b00000080a19da74bacecb5", @ANYRES32=0x0, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x14000084}, 0x20004080)

2m36.457601262s ago: executing program 8 (id=3486):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000000)={0x0, &(0x7f0000000140)}, 0x10)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r4, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x60000000, 0x0, 0x91, &(0x7f0000000000), &(0x7f0000002c80)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc5d2d3fa40e054d38d49dfbebc2f137fc7110"}, 0x4c)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}})
write$FUSE_NOTIFY_STORE(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="2a0000000400000000000000000000000100000000000000ffffffff0000000002000000000000000000ec6f5e5644fdffbf7476d995725b672b82067c3675f9d0fd9b107888d2fd265749898c130ed9a2fbf2cc777809cc16bc071d0d89e0b13dce49487466b252c680febfca61d6f382648e256ef1"], 0x2a)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x11)
r7 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
ioctl$SG_IO(r7, 0x2285, 0x0)
writev(r7, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0fb0000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2)
write$tcp_mem(r6, &(0x7f0000000400)={0x6, 0x2d, 0x2, 0x3a, 0x0, 0x2c}, 0x48)
r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f00000001c0)={0x4, <r10=>0xffffffffffffffff})
ioctl$KVM_HAS_DEVICE_ATTR(r10, 0x4018aee3, &(0x7f0000000000)=@attr_arm64={0x0, 0x1, 0x1, 0x0})
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f00000000c0)={0xdddd1000, 0x8000, 0x1})

2m33.537784055s ago: executing program 8 (id=3495):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[], 0x118)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000000906010200000000000000000400000a05000100070000000a00094000000008100008800c00078008000940000000d40900020073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x10000001}, 0x0)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x5, 0x12, r0, 0x0)
ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000080)=""/4096)
syz_usb_connect(0x1, 0x4a, &(0x7f0000001080)=ANY=[@ANYRES32=r1, @ANYRES64=r0, @ANYRES64=r0, @ANYRESHEX=r0, @ANYBLOB="d0cce3e268d0cdb9ea44cd012a007293ef50a2976375d1ca4fcc3e361baf180d88ac2bd49f9db0df", @ANYBLOB="4e26e4b33713fa44e0e958762595f2f8f5fb27b045118d23bf66b56f0c1808eea96f2afb92c951e22bd05d3686d3e0be8959341b076b314ebcbb85a2553508328eef6041613bbe47984436058e50c117d89beb165d1626d9a46bfcde053841f3e0ad55cd60eb16220a15ed9f23c9aff70bd59d1c8a66c21301fe3925b3f336f4f55f5d0056144ec6df", @ANYRES16=r0, @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRES8=r0], 0x0)

2m30.357349342s ago: executing program 8 (id=3508):
socket$inet_sctp(0x2, 0x5, 0x84)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@ipv6_newaddr={0x34, 0x14, 0x101, 0x70bd26, 0x25dffbf8, {0xa, 0x38, 0x19, 0xff}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x21ce0}, @IFA_ADDRESS={0x14, 0x1, @empty}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x8004)

2m30.15574688s ago: executing program 8 (id=3509):
socket$can_j1939(0x1d, 0x2, 0x7)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x9, 0x14, 0xc2}, &(0x7f00000007c0), &(0x7f0000000200))
socket$alg(0x26, 0x5, 0x0)
socket$alg(0x26, 0x5, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@ipv6_newaddr={0x48, 0x14, 0x101, 0x70bd26, 0x25dffbf8, {0xa, 0x38, 0x19, 0xff, r3}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_RT_PRIORITY={0x8, 0x9, 0x21ce0}, @IFA_ADDRESS={0x14, 0x1, @empty}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x8004)

2m28.948932874s ago: executing program 8 (id=3513):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0))
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004b41460860163209ea80010203010902120001000000080904"], 0x0)
syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000200)={0x2, 0x3, 0x0, 0x1000, 0x0, 0xfffffffe, 0x0})
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0xffffffff}, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000180)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x88}}}}}}, 0x0)
syz_usb_connect(0x3, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010005000000401e0903003bd70102036f0902"], 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x4, 0x4)
r4 = socket$packet(0x11, 0x3, 0x300)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="020000f70ff30455074000010203010902240001010570060904000c01030102060921c6fd020122c10b09058103ff0306000ec20c54fa6d18e0f2d1b60e5cb23d319fad38b6b05fca113a4f05ac93b4041f64c04f2c8c486ab8"], 0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0xf)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000001780)={0x0, 0x9005}, 0x4)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', <r6=>0x0})
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0xe23, @remote}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000340)='_', 0x1}, {0x0}, {0x0}], 0x3}, 0x44864)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000300), 0x4)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @remote}})
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}})
sendto$packet(r4, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0x48, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14)

2m13.803470108s ago: executing program 38 (id=3513):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0))
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004b41460860163209ea80010203010902120001000000080904"], 0x0)
syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000200)={0x2, 0x3, 0x0, 0x1000, 0x0, 0xfffffffe, 0x0})
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0xffffffff}, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000180)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x88}}}}}}, 0x0)
syz_usb_connect(0x3, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010005000000401e0903003bd70102036f0902"], 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x4, 0x4)
r4 = socket$packet(0x11, 0x3, 0x300)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="020000f70ff30455074000010203010902240001010570060904000c01030102060921c6fd020122c10b09058103ff0306000ec20c54fa6d18e0f2d1b60e5cb23d319fad38b6b05fca113a4f05ac93b4041f64c04f2c8c486ab8"], 0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0xf)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000001780)={0x0, 0x9005}, 0x4)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', <r6=>0x0})
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0xe23, @remote}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000340)='_', 0x1}, {0x0}, {0x0}], 0x3}, 0x44864)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000300), 0x4)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @remote}})
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}})
sendto$packet(r4, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0x48, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14)

10.83842551s ago: executing program 1 (id=3924):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@ipv4_delroute={0x24, 0x18, 0x901, 0x0, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x8}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0)

10.812611086s ago: executing program 6 (id=3925):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, 0x0, 0x0)
sched_setattr(0x0, 0x0, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
r3 = open(0x0, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, 0x0, 0x0)
syz_genetlink_get_family_id$l2tp(0x0, r3)
fanotify_mark(0xffffffffffffffff, 0x201, 0x4000003e, 0xffffffffffffffff, 0x0)
r5 = socket$inet6(0xa, 0x3, 0x8)
connect$inet6(r5, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x5)
setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0xd8)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000000010003b152cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000015001001800128008000100677470000c00028008000100", @ANYRES32, @ANYBLOB="caf8618b00000080a19da74bacecb5", @ANYRES32=0x0, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x14000084}, 0x20004080)

10.737209358s ago: executing program 1 (id=3927):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x141002)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3}})
set_mempolicy(0x2, 0x0, 0xf5)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r3, 0x4b72, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x40)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000400)=@assoc_value={r6, 0x3d}, 0x8)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00')
pread64(r7, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
syz_open_dev$sndctrl(&(0x7f0000000580), 0x2, 0x141240)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
syz_usb_connect(0x5, 0x2d, &(0x7f00000190c0)=ANY=[@ANYBLOB="120100001b61e308d016a91052300102030109021b0001000000000904ac0001ff7f8800090503020000000000c95926a732671e9c61cce55af0748c2ea7d731602c2c02a0e3dc3b7b8cee247ad2f883d3a741ba9a30476b89fe5457d27f1f8c5f15fbdae2ea6cffe4b76c6eda9934e7cbf30e3033b5dbc20d19c5010cf565eedefd98d952e24075b228b96cce480b58b6ff8366a167eb66c5630ae5eba2199592deee5b8bf90ad9043e24b614afacbe9ff5212f7585ca61cfe5eb47245c6477ef9ebc038efbb960265fbde994b0f9e127696efc1c5f1d0a84392b9d70913a453560fb3836bc096734d4f3"], 0x0)
socket(0x2, 0x80805, 0x0)
r8 = io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xdf4, 0x80, 0x7, 0x2})
r9 = socket$kcm(0x10, 0x2, 0x0)
ioctl$PPPIOCSMAXCID(r7, 0x40047451, &(0x7f0000019080)=0x81)
sendmsg$kcm(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000e40)="d8000000180081064a81f782db44b904021d080400007c09e8fe55a10a0015c0050014a603600e1208000f0000000401a80016009a00014004000000036010fab94dcf5c0461c1d6900094007134cf6ee080000190d0a2ac922353a606487ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00320db70103000040fad95667dc06dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x48084)
io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, 0x0)

8.608563453s ago: executing program 6 (id=3935):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000000)={0x0, &(0x7f0000000140)}, 0x10)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r4, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xc0, &(0x7f0000000000), &(0x7f0000002c80)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc5d2d3fa40e054d38d49dfbebc2f137fc7110"}, 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}})
write$FUSE_NOTIFY_STORE(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="2a0000000400000000000000000000000100000000000000ffffffff0000000002000000000000000000ec6f5e5644fdffbf7476d995725b672b82067c3675f9d0fd9b107888d2fd265749898c130ed9a2fbf2cc777809cc16bc071d0d89e0b13dce49487466b252"], 0x2a)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x11)
r7 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
ioctl$SG_IO(r7, 0x2285, 0x0)
writev(r7, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0fb0000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2)
write$tcp_mem(r6, &(0x7f0000000400)={0x6, 0x2d, 0x2, 0x3a, 0x0, 0x2c}, 0x48)
r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f00000001c0)={0x4, <r10=>0xffffffffffffffff})
ioctl$KVM_HAS_DEVICE_ATTR(r10, 0x4018aee3, &(0x7f0000000000)=@attr_arm64={0x0, 0x1, 0x1, 0x0})
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f00000000c0)={0xdddd1000, 0x8000, 0x1})

8.061527205s ago: executing program 2 (id=3939):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603)
r3 = syz_usb_connect$cdc_ecm(0x1, 0x62, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x50, 0x1, 0x1, 0x2, 0x10, 0xa7, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x2, 0x6, 0x0, 0x62, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x200, 0x3d}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x6}, @dmm={0x7, 0x24, 0x14, 0x0, 0x7000}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0x7, 0xa}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x0, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x2, 0x7, 0x12}}}}}]}}]}}, &(0x7f00000009c0)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x200, 0x1, 0x9, 0x7b, 0x8, 0x9}, 0x3c, &(0x7f0000000140)={0x5, 0xf, 0x3c, 0x5, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0xf7, 0x3, 0xffff}, @ssp_cap={0x24, 0x10, 0xa, 0x0, 0x6, 0x6, 0x0, 0x6, [0x30, 0xc0, 0x30, 0xfff0, 0xc00f, 0xc000]}, @ptm_cap={0x3}, @ptm_cap={0x3}]}})
syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000780)={0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="4021eb000000eb0c103da7ca341ee2e1a8804dcd36817c9ce13b30f4185747cd805ccaf7700176e0d5198057688a536630af610f89ea2e758e279e33a3aa26dd033b39972978755c440774e20c6623462d556cd7e8dd999dba6dc3ef106922a6daf5c05fa62cd6a12997d4a2698f3c826c74710e88f723dc3a3a0aad17a5f69789863a9e8c4cdef11add97acf394864e960195576d47968499fd6a898f7769fc1eb154c521596a91100b43bc10d73536ad5e6736d6da8dbf5c8a917bf4d66c3984c4db64bd7cc9874bfd0117804792fe47eeab45aff7c6d1740bd537ed796b63900000000026d6c98c2a701411ad2c9c"], &(0x7f0000000740)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000900)={0x10, &(0x7f00000007c0)={0x40, 0x12, 0xb7, "af459d137cf053c572a781d067616905c07266cd09fb4399f0d784db7daccbe4b72125700176c35dec50a629597fd84b71c05616dc55663fd20fb4e3967e47bc50ac515af651a9896ebfb9d2e8bb57b98128ace51fbcc05614f3b10ea6c4319748434315ff63b1238ab37bb9e7de7e1d52bb8cb26b6df81cbed82c6e0e99c2612c7177c2c74fa8d83613bbb59dd834508de294d51413ab29c8133380d77cd1bf06ac2814707091b188b95c37cceee2db51cf1f0781fcf0"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x1}})
ioctl$I2C_RDWR(r2, 0x707, &(0x7f00000001c0)={&(0x7f0000000180)=[{0x1, 0x8000, 0x0, 0x0}, {0x1, 0xda01, 0x0, 0x0}], 0x2})

7.672833051s ago: executing program 7 (id=3942):
r0 = socket(0x2, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xc6da5938055fa6fd}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_cmd={0x1, 0x9, 0x8, 0x82e8, 0x2, 0x2, 0x4, 0x9, 0x8, 0x1, 0x5, 0x3, 0x5ef, 0x9, 0xbe, 0xd1, [0x3, 0xf2]}})

6.900973534s ago: executing program 7 (id=3943):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000058000000090a01040f000000000000000700000008000a40000000000900020000797a31000000000900010073797a300000000008000540000000041c000980100002800c2201800800014000000002080001"], 0xa0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)

6.582219293s ago: executing program 7 (id=3944):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0)

6.271993269s ago: executing program 7 (id=3945):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x264}, 0x1, 0x0, 0x0, 0x8002}, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x10}, 0xc)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)="1a", 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$sock(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)='h', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}}], 0x2, 0x40448c0)
shutdown(r0, 0x1)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0)
syz_usb_control_io(r1, &(0x7f0000000b00)={0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r2, 0x400c4808, &(0x7f0000000440)={0x2})

5.718560789s ago: executing program 9 (id=3946):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, 0x0, 0x0)
sched_setattr(0x0, 0x0, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
r3 = open(0x0, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, 0x0, 0x0)
syz_genetlink_get_family_id$l2tp(0x0, r3)
fanotify_mark(0xffffffffffffffff, 0x201, 0x4000003e, 0xffffffffffffffff, 0x0)
r5 = socket$inet6(0xa, 0x3, 0x8)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e24, 0x2, @empty}, 0x1c)
ftruncate(0xffffffffffffffff, 0x5)
setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, 0x0, 0xd8)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000000010003b152cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000015001001800128008000100677470000c00028008000100", @ANYRES32, @ANYBLOB="caf8618b00000080a19da74bacecb5", @ANYRES32=0x0, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x14000084}, 0x20004080)

5.58022781s ago: executing program 6 (id=3947):
openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
ioprio_set$uid(0x3, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
sendfile(r2, r1, 0x0, 0x7ffffffd)

5.388160244s ago: executing program 6 (id=3948):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000000)={0x0, &(0x7f0000000140)}, 0x10)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r4, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xc0, &(0x7f0000000000), &(0x7f0000002c80)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc5d2d3fa40e054d38d49dfbebc2f137fc7110"}, 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}})
write$FUSE_NOTIFY_STORE(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="2a0000000400000000000000000000000100000000000000ffffffff0000000002000000000000000000ec6f5e5644fdffbf7476d995725b672b82067c3675f9d0fd9b107888d2fd265749898c130ed9a2fbf2cc777809cc16bc071d0d89e0b13dce49487466b252c680febfca61d6"], 0x2a)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x11)
r7 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
ioctl$SG_IO(r7, 0x2285, 0x0)
writev(r7, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0fb0000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2)
write$tcp_mem(r6, &(0x7f0000000400)={0x6, 0x2d, 0x2, 0x3a, 0x0, 0x2c}, 0x48)
r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f00000001c0)={0x4, <r10=>0xffffffffffffffff})
ioctl$KVM_HAS_DEVICE_ATTR(r10, 0x4018aee3, &(0x7f0000000000)=@attr_arm64={0x0, 0x1, 0x1, 0x0})
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f00000000c0)={0xdddd1000, 0x8000, 0x1})

5.386768511s ago: executing program 1 (id=3949):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000000)={0x0, &(0x7f0000000140)}, 0x10)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r4, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xc0, &(0x7f0000000000), &(0x7f0000002c80)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc5d2d3fa40e054d38d49dfbebc2f137fc7110"}, 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}})
write$FUSE_NOTIFY_STORE(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="2a0000000400000000000000000000000100000000000000ffffffff0000000002000000000000000000ec6f5e5644fdffbf7476d995725b672b82067c3675f9d0fd9b107888d2fd265749898c130ed9a2fbf2cc777809cc16bc071d0d89e0b13dce49487466b252c680febfca61d6"], 0x2a)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x11)
r7 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
ioctl$SG_IO(r7, 0x2285, 0x0)
writev(r7, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0fb0000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2)
write$tcp_mem(r6, &(0x7f0000000400)={0x6, 0x2d, 0x2, 0x3a, 0x0, 0x2c}, 0x48)
r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f00000001c0)={0x4, <r10=>0xffffffffffffffff})
ioctl$KVM_HAS_DEVICE_ATTR(r10, 0x4018aee3, &(0x7f0000000000)=@attr_arm64={0x0, 0x1, 0x1, 0x0})
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f00000000c0)={0xdddd1000, 0x8000, 0x1})

4.690577358s ago: executing program 2 (id=3950):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=@getsadinfo={0x13c, 0x23, 0x1, 0x70bd27, 0x25dfdbfe, 0x0, [@algo_auth={0x48, 0x1, {{'blake2b-512-generic\x00'}}}, @sa={0xe0, 0x6, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e21, 0x60c8, 0x4e24, 0x924b, 0xa, 0xe0, 0x20, 0x3c}, {@in=@multicast2, 0x4d3, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x57bea7a8, 0xf, 0x0, 0x10, 0x6, 0x401, 0xfffffffffffffffb, 0x3}, {0x4, 0x7, 0x10, 0x6}, {0x32f4, 0x7f, 0x2}, 0x70bd26, 0x0, 0xa, 0x0, 0x9, 0x4}}]}, 0x13c}}, 0x20048050)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10)
connect$inet(r1, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r0], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40000)

4.593799326s ago: executing program 2 (id=3951):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@ipv4_delroute={0x24, 0x18, 0x901, 0x0, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x8}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0)

4.470013988s ago: executing program 2 (id=3952):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r2, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc)
r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x4663, 0x400, 0x3, 0x4000285}, &(0x7f00000004c0)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
r6 = openat$rfkill(0xffffff9c, &(0x7f0000000000), 0x8100, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004800}, 0x4000804)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800c0001007061796c6f6164002c0002800800024000000000080008400005000008000440000000ba080005400000000d080003400000005d0900010073797a30000000000900020073797a32"], 0x94}}, 0x4048010)
r8 = openat$full(0xffffff9c, &(0x7f00000000c0), 0x8000, 0x0)
ioctl$VIDIOC_S_AUDIO(r8, 0x40345622, &(0x7f0000000100)={0xd, "24559a13fb8442de00907591a55706d5d3ccb20c217edc3237aff51c4969558f", 0x1})
write$rfkill(r6, &(0x7f0000000040)={0x25, 0x4, 0x0, 0x1}, 0x8)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004040)={0x44, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x20, 0x2, 0x0, 0x1, [@nested={0x1c, 0x17, 0x0, 0x1, [@nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0xc0, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x404c0c0}, 0xc000)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0})
io_uring_enter(r3, 0x40f9, 0x217, 0xa5, 0x0, 0xf5)

3.542994614s ago: executing program 9 (id=3953):
syz_open_dev$tty1(0xc, 0x4, 0x2)
r0 = syz_open_dev$audion(&(0x7f0000000000), 0x248, 0x381140)
setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000040)='/)G)%$I\x00', 0x8)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8)
add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r4=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r4, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
openat$vcsu(0xffffffffffffff9c, 0x0, 0x42040, 0x0)
setresgid(0xee01, 0x0, 0xffffffffffffffff)
ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r3, 0x4068aea3, &(0x7f0000000140)={0xcc, 0x0, 0x8000005})
syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0)

3.064235408s ago: executing program 6 (id=3954):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r2=>0x0})
r3 = socket$alg(0x26, 0x5, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
flistxattr(r4, &(0x7f0000000340)=""/156, 0x9c)
bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r5 = accept4(r3, 0x0, 0x0, 0x80000)
r6 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f0000000400)='_', 0x1, 0xfffffffffffffffe)
r7 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
r8 = add_key$user(&(0x7f00000000c0), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000007c0)="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", 0x151, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r6, r7, r8}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}})
recvfrom(r5, 0x0, 0x0, 0x40010000, 0x0, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14)
syz_usb_connect(0x0, 0x34, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x92, 0xe5, 0x9e, 0x20, 0x108c, 0x169, 0x75b9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xdb, 0x0, 0x1, 0xd, 0xfa, 0x0, 0x3, [], [{{0x9, 0x5, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, [@generic={0x7, 0x5, "db224370bf"}]}}]}}]}}]}}, 0x0)
setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x7, r9, 0x8}, 0xc)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0xffea, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000071000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c00018008000100000001000c0002"], 0x30}}, 0x0)

2.973136913s ago: executing program 7 (id=3955):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff6ffc}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1f, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x800)
r2 = syz_io_uring_setup(0x2ddd, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000380)=<r3=>0x0)
syz_io_uring_setup(0x5e2, &(0x7f00000003c0), &(0x7f0000000040)=<r4=>0x0, &(0x7f0000000180))
syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4})
io_uring_enter(r2, 0xa3d, 0x0, 0x0, 0x0, 0x0)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x2001)
syz_open_dev$evdev(&(0x7f0000000140), 0x9, 0x80000)
r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r5, &(0x7f0000000080)="5cba91a4407d88542bb54469aee4167e533981ead196a2ff0300b151db37bc75e83ae25b9e790f0c000000000000009ff800"/63, 0x3f)
ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0)
ioctl$SNDCTL_DSP_SUBDIVIDE(r5, 0xc0045009, &(0x7f0000000600)=0x1)
ioctl$SNDCTL_DSP_RESET(r5, 0x5000, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff6ffc}]}) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1f, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async)
socket$alg(0x26, 0x5, 0x0) (async)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async)
accept4(r0, 0x0, 0x0, 0x800) (async)
syz_io_uring_setup(0x2ddd, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000380)) (async)
syz_io_uring_setup(0x5e2, &(0x7f00000003c0), &(0x7f0000000040), &(0x7f0000000180)) (async)
syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) (async)
io_uring_enter(r2, 0xa3d, 0x0, 0x0, 0x0, 0x0) (async)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x2001) (async)
syz_open_dev$evdev(&(0x7f0000000140), 0x9, 0x80000) (async)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) (async)
write$dsp(r5, &(0x7f0000000080)="5cba91a4407d88542bb54469aee4167e533981ead196a2ff0300b151db37bc75e83ae25b9e790f0c000000000000009ff800"/63, 0x3f) (async)
ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(r5, 0xc0045009, &(0x7f0000000600)=0x1) (async)
ioctl$SNDCTL_DSP_RESET(r5, 0x5000, 0x0) (async)

2.968452556s ago: executing program 2 (id=3956):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = getpgid(0xffffffffffffffff)
ioprio_get$pid(0x1, r5)
r6 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0xfffffffd}}, 0x2)
r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @ioapic={0xf000, 0x100, 0x1ff, 0x6, 0x0, [{0x4, 0xbd, 0x5, '\x00', 0x81}, {0x3, 0x71, 0x5, '\x00', 0xc7}, {0x95, 0xc4, 0x6, '\x00', 0x68}, {0x9, 0xf9, 0x4, '\x00', 0x8}, {0x9, 0xfc, 0x10, '\x00', 0x81}, {0xd, 0x8, 0x3, '\x00', 0x8}, {0x9, 0x20, 0x10, '\x00', 0xed}, {0x0, 0x4, 0x5, '\x00', 0xa0}, {0x3, 0x2, 0x7, '\x00', 0x8}, {0x8, 0xe1, 0x7f, '\x00', 0x8}, {0x1, 0xff, 0x2, '\x00', 0x2}, {0xfa, 0x6, 0x10, '\x00', 0xca}, {0x6, 0xe, 0xc, '\x00', 0x7}, {0x3, 0x5, 0x1, '\x00', 0xf0}, {0x7, 0x7, 0xfa, '\x00', 0x9}, {0xff, 0x8, 0x5, '\x00', 0x8f}, {0x80, 0x9, 0x2, '\x00', 0x8}, {0xdd, 0x7, 0x8, '\x00', 0x1}, {0x8, 0x3, 0x9, '\x00', 0x7}, {0x5, 0xd, 0xa2, '\x00', 0x3}, {0x1, 0x0, 0x8, '\x00', 0x2}, {0x2, 0x0, 0x7, '\x00', 0x10}, {0x10, 0xf7, 0x8, '\x00', 0x7f}, {0x5, 0x80, 0x8d, '\x00', 0x6}]}})
ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000100)={[0x35, 0x7, 0xfffffffffffffff9, 0x180, 0x4, 0x10, 0x2, 0x0, 0x7fffffffffffe, 0x5, 0x2, 0x9, 0x0, 0x9, 0x0, 0x200000000000bdb], 0x1, 0x3c4210})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

2.854660119s ago: executing program 1 (id=3957):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
dup3(r1, r0, 0x0)
poll(&(0x7f0000000000)=[{r0, 0x4008}], 0x1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000040)=[@request_death], 0x0, 0x0, 0x0}) (fail_nth: 3)

2.742224731s ago: executing program 9 (id=3958):
openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
ioprio_set$uid(0x3, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
sendfile(r1, r0, 0x0, 0x7ffffffd)

2.026217788s ago: executing program 1 (id=3959):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8)
sendmsg$inet_sctp(r0, &(0x7f0000000000)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='J', 0xff04}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) (fail_nth: 3)

1.975525103s ago: executing program 9 (id=3960):
r0 = socket(0x10, 0x3, 0x6)
clock_settime(0x3, &(0x7f0000000000))
r1 = socket(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000420040008002900787d040008001b0000000000080028"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x884)
sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newqdisc={0x90, 0x24, 0xf0b, 0x20, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x7, 0xf}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0xa0928cdb42e7ffb4, 0x2, {{0x2, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4]}, [@TCA_MQPRIO_SHAPER={0x6, 0x2, 0x1}]}}}]}, 0x90}}, 0x20000000)

1.359726551s ago: executing program 1 (id=3961):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603)
r3 = syz_usb_connect$cdc_ecm(0x1, 0x62, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x50, 0x1, 0x1, 0x2, 0x10, 0xa7, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x2, 0x6, 0x0, 0x62, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x200, 0x3d}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x6}, @dmm={0x7, 0x24, 0x14, 0x0, 0x7000}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0x7, 0xa}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x0, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x2, 0x7, 0x12}}}}}]}}]}}, &(0x7f00000009c0)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x200, 0x1, 0x9, 0x7b, 0x8, 0x9}, 0x3c, &(0x7f0000000140)={0x5, 0xf, 0x3c, 0x5, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0xf7, 0x3, 0xffff}, @ssp_cap={0x24, 0x10, 0xa, 0x0, 0x6, 0x6, 0x0, 0x6, [0x30, 0xc0, 0x30, 0xfff0, 0xc00f, 0xc000]}, @ptm_cap={0x3}, @ptm_cap={0x3}]}})
syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000780)={0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="4021eb000000eb0c103da7ca341ee2e1a8804dcd36817c9ce13b30f4185747cd805ccaf7700176e0d5198057688a536630af610f89ea2e758e279e33a3aa26dd033b39972978755c440774e20c6623462d556cd7e8dd999dba6dc3ef106922a6daf5c05fa62cd6a12997d4a2698f3c826c74710e88f723dc3a3a0aad17a5f69789863a9e8c4cdef11add97acf394864e960195576d47968499fd6a898f7769fc1eb154c521596a91100b43bc10d73536ad5e6736d6da8dbf5c8a917bf4d66c3984c4db64bd7cc9874bfd0117804792fe47eeab45aff7c6d1740bd537ed796b63900000000026d6c98c2a701411ad2c9c"], &(0x7f0000000740)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000900)={0x10, &(0x7f00000007c0)={0x40, 0x12, 0xb7, "af459d137cf053c572a781d067616905c07266cd09fb4399f0d784db7daccbe4b72125700176c35dec50a629597fd84b71c05616dc55663fd20fb4e3967e47bc50ac515af651a9896ebfb9d2e8bb57b98128ace51fbcc05614f3b10ea6c4319748434315ff63b1238ab37bb9e7de7e1d52bb8cb26b6df81cbed82c6e0e99c2612c7177c2c74fa8d83613bbb59dd834508de294d51413ab29c8133380d77cd1bf06ac2814707091b188b95c37cceee2db51cf1f0781fcf0"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x1}})
ioctl$I2C_RDWR(r2, 0x707, &(0x7f00000001c0)={&(0x7f0000000180)=[{0x1, 0x8000, 0x0, 0x0}, {0x1, 0xda01, 0x0, 0x0}], 0x2})

1.27826254s ago: executing program 9 (id=3962):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=@getsadinfo={0x13c, 0x23, 0x1, 0x70bd27, 0x25dfdbfe, 0x0, [@algo_auth={0x48, 0x1, {{'blake2b-512-generic\x00'}}}, @sa={0xe0, 0x6, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e21, 0x60c8, 0x4e24, 0x924b, 0xa, 0xe0, 0x20, 0x3c}, {@in=@multicast2, 0x4d3, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x57bea7a8, 0xf, 0x0, 0x10, 0x6, 0x401, 0xfffffffffffffffb, 0x3}, {0x4, 0x7, 0x10, 0x6}, {0x32f4, 0x7f, 0x2}, 0x70bd26, 0x0, 0xa, 0x0, 0x9, 0x4}}]}, 0x13c}}, 0x20048050)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10)
connect$inet(r1, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r0], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40000)

1.233305767s ago: executing program 2 (id=3963):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, 0x0, 0x0)
sched_setattr(0x0, 0x0, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
r3 = open(0x0, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, 0x0, 0x0)
syz_genetlink_get_family_id$l2tp(0x0, r3)
fanotify_mark(0xffffffffffffffff, 0x201, 0x4000003e, 0xffffffffffffffff, 0x0)
r5 = socket$inet6(0xa, 0x3, 0x8)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e24, 0x2, @empty}, 0x1c)
ftruncate(0xffffffffffffffff, 0x5)
setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, 0x0, 0xd8)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000000010003b152cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000015001001800128008000100677470000c00028008000100", @ANYRES32, @ANYBLOB="caf8618b00000080a19da74bacecb5", @ANYRES32=0x0, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x14000084}, 0x20004080)

1.182223354s ago: executing program 7 (id=3964):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004580), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_io_uring_setup(0x10d, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80, 0x23456})
r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f0000000040)={0x7, 0x7, 0x2}, &(0x7f00000000c0)=0x28)
r6 = fsmount(r5, 0x1, 0x0)
fchdir(r6)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x44)
io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf)

1.108150232s ago: executing program 9 (id=3965):
socket$can_j1939(0x1d, 0x2, 0x7)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x9, 0x14, 0xc2}, &(0x7f00000007c0), &(0x7f0000000200))
socket$alg(0x26, 0x5, 0x0)
socket$alg(0x26, 0x5, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, 0x0, 0x8004)

0s ago: executing program 6 (id=3966):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x264}, 0x1, 0x0, 0x0, 0x8002}, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x10}, 0xc)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)="1a", 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$sock(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)='h', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}}], 0x2, 0x40448c0)
shutdown(r0, 0x1)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0)
syz_usb_control_io(r1, &(0x7f0000000b00)={0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r2, 0x400c4808, &(0x7f0000000440)={0x2})

kernel console output (not intermixed with test programs):

ter): interface not active
[ 1127.883980][T22818] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1127.891117][T22818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1127.923239][T22818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1128.091873][T22818] hsr_slave_0: entered promiscuous mode
[ 1128.128748][T22818] hsr_slave_1: entered promiscuous mode
[ 1128.148590][T22818] debugfs: 'hsr0' already exists in 'hsr'
[ 1128.171104][T22818] Cannot create hsr debugfs directory
[ 1128.353915][ T5863] Bluetooth: hci4: command tx timeout
[ 1128.903651][ T9764] usb 10-1: new high-speed USB device number 21 using dummy_hcd
[ 1129.152807][ T9764] usb 10-1: Using ep0 maxpacket: 16
[ 1129.177980][ T9764] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1129.215078][ T9764] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1129.413031][ T9764] usb 10-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[ 1129.441517][ T9764] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1129.645547][ T9764] usb 10-1: Product: syz
[ 1129.836468][T22818] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1129.896535][ T9764] usb 10-1: Manufacturer: syz
[ 1129.910301][T22818] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1129.928149][ T9764] usb 10-1: SerialNumber: syz
[ 1129.935955][ T9764] usb 10-1: config 0 descriptor??
[ 1130.019569][T22818] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1130.119700][T23275] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1130.119700][T23275]    program syz.6.3592 not setting count and/or reply_len properly
[ 1130.146317][T22818] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1130.424870][ T5863] Bluetooth: hci4: command tx timeout
[ 1130.786194][T22818] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1130.869923][T22818] 8021q: adding VLAN 0 to HW filter on device team0
[ 1130.910121][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1130.917304][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1131.011491][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1131.018711][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1131.522725][T22818] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1131.916467][T22818] veth0_vlan: entered promiscuous mode
[ 1132.036212][T22818] veth1_vlan: entered promiscuous mode
[ 1132.140089][ T5977] usb 10-1: USB disconnect, device number 21
[ 1132.187332][T22818] veth0_macvtap: entered promiscuous mode
[ 1132.263319][T22818] veth1_macvtap: entered promiscuous mode
[ 1132.422764][T22818] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1132.489168][T22818] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1132.507497][ T5863] Bluetooth: hci4: command tx timeout
[ 1132.553180][ T3011] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1132.595221][ T3011] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1132.668721][ T3011] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1132.805418][ T3011] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1132.861402][T23350] FAULT_INJECTION: forcing a failure.
[ 1132.861402][T23350] name failslab, interval 1, probability 0, space 0, times 0
[ 1132.931843][T23350] CPU: 0 UID: 0 PID: 23350 Comm: syz.2.3602 Not tainted syzkaller #0 PREEMPT(full) 
[ 1132.931870][T23350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1132.931883][T23350] Call Trace:
[ 1132.931891][T23350]  <TASK>
[ 1132.931900][T23350]  dump_stack_lvl+0x189/0x250
[ 1132.931928][T23350]  ? __pfx____ratelimit+0x10/0x10
[ 1132.931958][T23350]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1132.931981][T23350]  ? __pfx__printk+0x10/0x10
[ 1132.932015][T23350]  ? __pfx___might_resched+0x10/0x10
[ 1132.932032][T23350]  ? fs_reclaim_acquire+0x7d/0x100
[ 1132.932069][T23350]  should_fail_ex+0x414/0x560
[ 1132.932108][T23350]  should_failslab+0xa8/0x100
[ 1132.932137][T23350]  __kmalloc_noprof+0xcb/0x4f0
[ 1132.932160][T23350]  ? kfree+0x4d/0x440
[ 1132.932180][T23350]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[ 1132.932204][T23350]  tomoyo_realpath_from_path+0xe3/0x5d0
[ 1132.932226][T23350]  ? tomoyo_domain+0xd9/0x130
[ 1132.932251][T23350]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1132.932278][T23350]  tomoyo_path_number_perm+0x1e8/0x5a0
[ 1132.932308][T23350]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1132.932354][T23350]  ? __lock_acquire+0xab9/0xd20
[ 1132.932402][T23350]  ? __fget_files+0x2a/0x420
[ 1132.932437][T23350]  ? __fget_files+0x3a0/0x420
[ 1132.932464][T23350]  ? __fget_files+0x2a/0x420
[ 1132.932495][T23350]  security_file_ioctl_compat+0xcb/0x2d0
[ 1132.932523][T23350]  __ia32_compat_sys_ioctl+0x128/0x840
[ 1132.932541][T23350]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[ 1132.932554][T23350]  ? __fget_files+0x3a0/0x420
[ 1132.932573][T23350]  ? fput+0xa0/0xd0
[ 1132.932584][T23350]  ? ksys_write+0x22a/0x250
[ 1132.932603][T23350]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1132.932619][T23350]  __do_fast_syscall_32+0xb6/0x2b0
[ 1132.932635][T23350]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1132.932651][T23350]  do_fast_syscall_32+0x34/0x80
[ 1132.932667][T23350]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1132.932680][T23350] RIP: 0023:0xf70de539
[ 1132.932690][T23350] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1132.932700][T23350] RSP: 002b:00000000f54ce55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[ 1132.932711][T23350] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000008010500c
[ 1132.932719][T23350] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000
[ 1132.932726][T23350] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1132.932732][T23350] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1132.932738][T23350] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1132.932753][T23350]  </TASK>
[ 1133.201401][T23350] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1133.393968][ T9764] usb 7-1: new full-speed USB device number 32 using dummy_hcd
[ 1133.478573][T13952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1133.478623][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1133.494668][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1133.535727][T13952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1133.590506][T23352] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3601'.
[ 1133.621561][T23351] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3601'.
[ 1133.716019][ T9764] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1133.759610][ T9764] usb 7-1: not running at top speed; connect to a high speed hub
[ 1133.832505][ T9764] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[ 1133.942507][ T9764] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1134.004057][T15258] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[ 1134.083073][T23391] fuse: Bad value for 'group_id'
[ 1134.088266][T23391] fuse: Bad value for 'group_id'
[ 1134.106269][ T9764] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1134.147284][ T9764] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1134.196409][T15258] usb 2-1: Using ep0 maxpacket: 16
[ 1134.208446][T15258] usb 2-1: config 0 has an invalid interface number: 251 but max is 0
[ 1134.222567][T15258] usb 2-1: config 0 has no interface number 0
[ 1134.230506][T15258] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[ 1134.248700][T15258] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[ 1134.326963][T15258] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[ 1134.354670][T15258] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1134.381021][T15258] usb 2-1: Product: syz
[ 1134.394527][T15258] usb 2-1: Manufacturer: syz
[ 1134.429623][ T9764] usb 7-1: Product: syz
[ 1134.444614][T15258] usb 2-1: SerialNumber: syz
[ 1134.471165][T15258] usb 2-1: config 0 descriptor??
[ 1134.490045][T23376] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22
[ 1134.499967][ T9764] usb 7-1: Manufacturer: syz
[ 1134.528889][ T9764] usb 7-1: SerialNumber: syz
[ 1134.553097][T23376] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22
[ 1134.810470][T23321] raw-gadget.4 gadget.6: fail, usb_ep_enable returned -22
[ 1135.092831][T23376] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22
[ 1135.109678][T23376] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22
[ 1135.400520][T23376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1135.472102][T23376] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1135.562965][T23376] netlink: 'syz.1.3572': attribute type 1 has an invalid length.
[ 1135.652607][T15258] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[ 1135.670662][T15258] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -61
[ 1135.680959][T15258] asix 2-1:0.251: probe with driver asix failed with error -5
[ 1136.755720][T23434] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3608'.
[ 1136.965243][ T5977] usb 2-1: USB disconnect, device number 64
[ 1138.004735][T23465] fuse: Bad value for 'group_id'
[ 1138.023208][T23465] fuse: Bad value for 'group_id'
[ 1138.706787][T23455] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[ 1138.713348][T23455] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1138.781795][T23455] vhci_hcd vhci_hcd.0: Device attached
[ 1139.034397][ T5952] usb 37-1: new low-speed USB device number 2 using vhci_hcd
[ 1139.704125][ T9764] usb 7-1: can't set config #1, error -110
[ 1140.522912][T23476] vhci_hcd: connection reset by peer
[ 1140.561307][T13949] vhci_hcd: stop threads
[ 1140.658962][T13949] vhci_hcd: release socket
[ 1140.693775][T13949] vhci_hcd: disconnect device
[ 1140.764736][T23510] fuse: Bad value for 'fd'
[ 1140.800403][T23518] IPv6: addrconf: prefix option has invalid lifetime
[ 1141.991426][T23547] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1141.991426][T23547]    program syz.2.3616 not setting count and/or reply_len properly
[ 1142.389534][T23569] usb usb8: usbfs: process 23569 (syz.1.3617) did not claim interface 0 before use
[ 1142.450774][T23570] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3618'.
[ 1143.991646][T23600] fuse: Bad value for 'group_id'
[ 1144.015980][T23600] fuse: Bad value for 'group_id'
[ 1144.173848][ T5952] vhci_hcd: vhci_device speed not set
[ 1144.867293][    T9] usb 7-1: USB disconnect, device number 32
[ 1144.952992][T23613] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1144.952992][T23613]    program syz.9.3620 not setting count and/or reply_len properly
[ 1146.056091][T23663] fuse: Bad value for 'group_id'
[ 1146.066569][T23663] fuse: Bad value for 'group_id'
[ 1146.133810][ T9764] usb 7-1: new high-speed USB device number 33 using dummy_hcd
[ 1146.350652][ T9764] usb 7-1: Using ep0 maxpacket: 16
[ 1146.404705][ T9764] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[ 1146.441461][ T9764] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[ 1146.473896][ T9764] usb 7-1: Product: syz
[ 1146.478136][ T9764] usb 7-1: Manufacturer: syz
[ 1146.482741][ T9764] usb 7-1: SerialNumber: syz
[ 1146.587534][ T9764] usb 7-1: config 0 descriptor??
[ 1147.364840][T23692] netlink: 72 bytes leftover after parsing attributes in process `syz.9.3626'.
[ 1147.398677][T23692] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3626'.
[ 1147.419878][T23693] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3626'.
[ 1147.443632][T23692] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3626'.
[ 1147.477083][T23692] bond0: entered promiscuous mode
[ 1147.486732][T23650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1147.527823][T23692] bond_slave_0: entered promiscuous mode
[ 1147.540258][T23650] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1147.557150][T23692] bond_slave_1: entered promiscuous mode
[ 1147.580631][T23692] bridge0: entered promiscuous mode
[ 1147.653191][T23692] batadv0: entered promiscuous mode
[ 1147.675977][T23692] 8021q: adding VLAN 0 to HW filter on device hsr1
[ 1147.709564][T23692] bond0: left promiscuous mode
[ 1147.730463][T23692] bond_slave_0: left promiscuous mode
[ 1147.813816][T23692] bond_slave_1: left promiscuous mode
[ 1147.827395][T23692] bridge0: left promiscuous mode
[ 1147.844822][T23692] batadv0: left promiscuous mode
[ 1148.374063][ T9764] usb 10-1: new high-speed USB device number 22 using dummy_hcd
[ 1148.565619][ T9764] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1148.602246][ T9764] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1148.642056][ T9764] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1148.703646][ T9764] usb 10-1: config 0 descriptor??
[ 1148.726786][ T9764] pwc: Askey VC010 type 2 USB webcam detected.
[ 1148.894375][T15364] usb 7-1: USB disconnect, device number 33
[ 1149.184442][ T9764] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1149.191768][ T9764] pwc: recv_control_msg error -32 req 02 val 2700
[ 1149.208718][ T9764] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1149.543612][ T9764] pwc: recv_control_msg error -32 req 04 val 1000
[ 1149.654636][ T9764] pwc: recv_control_msg error -32 req 04 val 1300
[ 1150.028576][ T9764] pwc: recv_control_msg error -71 req 02 val 2000
[ 1150.054855][ T9764] pwc: recv_control_msg error -71 req 02 val 2100
[ 1150.097461][ T9764] pwc: recv_control_msg error -71 req 04 val 1500
[ 1150.137046][ T9764] pwc: recv_control_msg error -71 req 02 val 2500
[ 1150.174562][ T9764] pwc: recv_control_msg error -71 req 02 val 2400
[ 1150.215276][ T9764] pwc: recv_control_msg error -71 req 02 val 2600
[ 1150.282071][ T9764] pwc: recv_control_msg error -71 req 02 val 2900
[ 1150.307308][ T9764] pwc: recv_control_msg error -71 req 02 val 2800
[ 1150.328575][ T9764] pwc: recv_control_msg error -71 req 04 val 1100
[ 1150.391199][ T9764] pwc: recv_control_msg error -71 req 04 val 1200
[ 1150.433664][T23773] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3631'.
[ 1150.514251][ T9764] pwc: Registered as video103.
[ 1150.543824][ T9764] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input25
[ 1150.571091][ T9764] usb 10-1: USB disconnect, device number 22
[ 1151.160169][T13288] Bluetooth: hci4: command 0x0405 tx timeout
[ 1152.200307][T23812] FAULT_INJECTION: forcing a failure.
[ 1152.200307][T23812] name failslab, interval 1, probability 0, space 0, times 0
[ 1152.214953][T23811] FAULT_INJECTION: forcing a failure.
[ 1152.214953][T23811] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1152.228368][T23812] CPU: 1 UID: 0 PID: 23812 Comm: syz.7.3635 Not tainted syzkaller #0 PREEMPT(full) 
[ 1152.228394][T23812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1152.228406][T23812] Call Trace:
[ 1152.228414][T23812]  <TASK>
[ 1152.228423][T23812]  dump_stack_lvl+0x189/0x250
[ 1152.228451][T23812]  ? __pfx____ratelimit+0x10/0x10
[ 1152.228479][T23812]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1152.228503][T23812]  ? __pfx__printk+0x10/0x10
[ 1152.228536][T23812]  ? __pfx___might_resched+0x10/0x10
[ 1152.228561][T23812]  should_fail_ex+0x414/0x560
[ 1152.228591][T23812]  should_failslab+0xa8/0x100
[ 1152.228622][T23812]  __kmalloc_cache_noprof+0x70/0x3d0
[ 1152.228648][T23812]  ? binder_get_thread+0x1c8/0x6d0
[ 1152.228672][T23812]  binder_get_thread+0x1c8/0x6d0
[ 1152.228697][T23812]  binder_ioctl+0x273/0x19c0
[ 1152.228718][T23812]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1152.228754][T23812]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1152.228784][T23812]  ? do_vfs_ioctl+0xbe8/0x1430
[ 1152.228808][T23812]  ? __pfx_binder_ioctl+0x10/0x10
[ 1152.228830][T23812]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1152.228865][T23812]  ? __lock_acquire+0xab9/0xd20
[ 1152.228913][T23812]  ? __fget_files+0x2a/0x420
[ 1152.228946][T23812]  ? __fget_files+0x3a0/0x420
[ 1152.228974][T23812]  ? __fget_files+0x2a/0x420
[ 1152.229007][T23812]  ? bpf_lsm_file_ioctl_compat+0x9/0x20
[ 1152.229033][T23812]  __ia32_compat_sys_ioctl+0x543/0x840
[ 1152.229061][T23812]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[ 1152.229086][T23812]  ? __fget_files+0x3a0/0x420
[ 1152.229121][T23812]  ? fput+0xa0/0xd0
[ 1152.229142][T23812]  ? ksys_write+0x22a/0x250
[ 1152.229177][T23812]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1152.229209][T23812]  __do_fast_syscall_32+0xb6/0x2b0
[ 1152.229239][T23812]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1152.229269][T23812]  do_fast_syscall_32+0x34/0x80
[ 1152.229298][T23812]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1152.229322][T23812] RIP: 0023:0xf711e539
[ 1152.229339][T23812] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1152.229358][T23812] RSP: 002b:00000000f550e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[ 1152.229380][T23812] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040046207
[ 1152.229394][T23812] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1152.229407][T23812] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1152.229419][T23812] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1152.229431][T23812] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1152.229459][T23812]  </TASK>
[ 1152.229469][T23812] binder: 23808:23812 ioctl 40046207 0 returned -12
[ 1152.507997][T23811] CPU: 1 UID: 0 PID: 23811 Comm: syz.6.3634 Not tainted syzkaller #0 PREEMPT(full) 
[ 1152.508025][T23811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1152.508035][T23811] Call Trace:
[ 1152.508043][T23811]  <TASK>
[ 1152.508052][T23811]  dump_stack_lvl+0x189/0x250
[ 1152.508081][T23811]  ? __pfx____ratelimit+0x10/0x10
[ 1152.508107][T23811]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1152.508125][T23811]  ? __pfx__printk+0x10/0x10
[ 1152.508146][T23811]  ? __might_fault+0xb0/0x130
[ 1152.508177][T23811]  should_fail_ex+0x414/0x560
[ 1152.508208][T23811]  _copy_from_user+0x2d/0xb0
[ 1152.508233][T23811]  video_usercopy+0x354/0x14f0
[ 1152.508265][T23811]  ? __pfx___video_do_ioctl+0x10/0x10
[ 1152.508285][T23811]  ? __pfx_video_usercopy+0x10/0x10
[ 1152.508324][T23811]  ? __fget_files+0x2a/0x420
[ 1152.508357][T23811]  v4l2_ioctl+0x18a/0x1e0
[ 1152.508392][T23811]  v4l2_compat_ioctl32+0x1d7/0x260
[ 1152.508422][T23811]  __ia32_compat_sys_ioctl+0x543/0x840
[ 1152.508451][T23811]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[ 1152.508477][T23811]  ? __fget_files+0x3a0/0x420
[ 1152.508513][T23811]  ? fput+0xa0/0xd0
[ 1152.508535][T23811]  ? ksys_write+0x22a/0x250
[ 1152.508580][T23811]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1152.508611][T23811]  __do_fast_syscall_32+0xb6/0x2b0
[ 1152.508642][T23811]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1152.508674][T23811]  do_fast_syscall_32+0x34/0x80
[ 1152.508704][T23811]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1152.508728][T23811] RIP: 0023:0xf7fa8539
[ 1152.508746][T23811] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1152.508764][T23811] RSP: 002b:00000000f54c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[ 1152.508786][T23811] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c054561d
[ 1152.508800][T23811] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000
[ 1152.508813][T23811] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1152.508826][T23811] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1152.508838][T23811] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1152.508867][T23811]  </TASK>
[ 1152.533656][T23813] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1152.533656][T23813]    program syz.2.3633 not setting count and/or reply_len properly
[ 1153.928916][T23850] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1153.928916][T23850]    program syz.6.3636 not setting count and/or reply_len properly
[ 1154.061702][T15364] usb 10-1: new high-speed USB device number 23 using dummy_hcd
[ 1154.430047][T15364] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1154.463644][T15364] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[ 1154.482704][T23867] block nbd0: Attempted send on invalid socket
[ 1154.490839][T23867] blk_print_req_error: 4 callbacks suppressed
[ 1154.490857][T23867] I/O error, dev nbd0, sector 18446744073709551608 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[ 1154.543721][T15364] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1154.564060][T15364] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1154.670791][T15364] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1154.813680][T15364] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1154.959650][T15364] usb 10-1: config 0 descriptor??
[ 1155.104501][T23841] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22
[ 1155.533233][T15364] plantronics 0003:047F:FFFF.0042: reserved main item tag 0xd
[ 1155.542062][T15364] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0
[ 1155.586650][T15364] plantronics 0003:047F:FFFF.0042: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0
[ 1155.794981][T23888] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1155.794981][T23888]    program syz.6.3645 not setting count and/or reply_len properly
[ 1156.017890][ T9764] usb 10-1: USB disconnect, device number 23
[ 1156.310102][T23916] fuse: Bad value for 'user_id'
[ 1156.317374][T23916] fuse: Bad value for 'user_id'
[ 1157.627459][T23939] tipc: Started in network mode
[ 1157.643265][T23939] tipc: Node identity 4, cluster identity 4711
[ 1157.658034][T23939] tipc: Node number set to 4
[ 1158.110135][T23965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3657'.
[ 1158.223656][ T5952] usb 7-1: new high-speed USB device number 34 using dummy_hcd
[ 1158.460066][ T5952] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1158.548707][ T5952] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[ 1158.636284][ T5952] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1158.733761][ T5952] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1158.839461][ T5952] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1158.857696][T23967] ucma_write: process 31 (syz.1.3658) changed security contexts after opening file descriptor, this is not allowed.
[ 1158.933875][ T5952] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1159.015586][ T5952] usb 7-1: config 0 descriptor??
[ 1159.060681][T23958] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[ 1159.638291][ T5952] plantronics 0003:047F:FFFF.0043: reserved main item tag 0xd
[ 1159.698398][ T5952] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0
[ 1159.776083][ T5952] plantronics 0003:047F:FFFF.0043: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[ 1160.007660][T23994] fuse: Bad value for 'fd'
[ 1160.030750][T15123] usb 7-1: USB disconnect, device number 34
[ 1160.179985][T23990] fido_id[23990]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[ 1160.543664][ T5977] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[ 1160.743605][ T5977] usb 2-1: Using ep0 maxpacket: 16
[ 1161.289437][ T5977] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1161.322061][ T5977] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1161.404097][ T5977] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 1161.486576][ T5977] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576
[ 1161.580519][T24026] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3672'.
[ 1161.593630][ T5977] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[ 1161.783853][ T5952] usb 7-1: new high-speed USB device number 35 using dummy_hcd
[ 1161.969199][ T5952] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 10601, setting to 1024
[ 1162.013893][ T5977] usb 2-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40
[ 1162.022977][ T5977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1162.043332][ T5952] usb 7-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 1024
[ 1162.080116][ T5952] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1162.124599][ T5952] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1162.148152][ T5952] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1162.181408][ T5952] usb 7-1: Product: syz
[ 1162.192877][ T5952] usb 7-1: Manufacturer: syz
[ 1162.261821][ T5952] usb 7-1: SerialNumber: syz
[ 1162.294928][ T5977] usb 2-1: SerialNumber: syz
[ 1162.341160][ T5952] usb 7-1: config 0 descriptor??
[ 1162.388585][T24031] raw-gadget.4 gadget.6: fail, usb_ep_enable returned -22
[ 1162.445506][ T5952] usb 7-1: selecting invalid altsetting 0
[ 1162.502293][T24042] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1162.502293][T24042]    program syz.7.3663 not setting count and/or reply_len properly
[ 1163.126677][T24064] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3665'.
[ 1163.910787][T24078] FAULT_INJECTION: forcing a failure.
[ 1163.910787][T24078] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1163.929858][T24078] CPU: 0 UID: 0 PID: 24078 Comm: syz.2.3668 Not tainted syzkaller #0 PREEMPT(full) 
[ 1163.929886][T24078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1163.929900][T24078] Call Trace:
[ 1163.929920][T24078]  <TASK>
[ 1163.929929][T24078]  dump_stack_lvl+0x189/0x250
[ 1163.929959][T24078]  ? __pfx____ratelimit+0x10/0x10
[ 1163.929988][T24078]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1163.930012][T24078]  ? __pfx__printk+0x10/0x10
[ 1163.930053][T24078]  should_fail_ex+0x414/0x560
[ 1163.930086][T24078]  _copy_to_user+0x31/0xb0
[ 1163.930112][T24078]  simple_read_from_buffer+0xe1/0x170
[ 1163.930146][T24078]  proc_fail_nth_read+0x1b3/0x220
[ 1163.930172][T24078]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1163.930199][T24078]  ? rw_verify_area+0x2a6/0x4d0
[ 1163.930223][T24078]  ? __lock_acquire+0xab9/0xd20
[ 1163.930250][T24078]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1163.930275][T24078]  vfs_read+0x200/0xa30
[ 1163.930300][T24078]  ? fdget_pos+0x247/0x320
[ 1163.930323][T24078]  ? __pfx___mutex_lock+0x10/0x10
[ 1163.930353][T24078]  ? __pfx_vfs_read+0x10/0x10
[ 1163.930380][T24078]  ? __fget_files+0x2a/0x420
[ 1163.930414][T24078]  ? __fget_files+0x3a0/0x420
[ 1163.930443][T24078]  ? __fget_files+0x2a/0x420
[ 1163.930481][T24078]  ksys_read+0x145/0x250
[ 1163.930511][T24078]  ? __pfx_ksys_read+0x10/0x10
[ 1163.930542][T24078]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1163.930574][T24078]  __do_fast_syscall_32+0xb6/0x2b0
[ 1163.930612][T24078]  do_fast_syscall_32+0x34/0x80
[ 1163.930643][T24078]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1163.930665][T24078] RIP: 0023:0xf70de539
[ 1163.930683][T24078] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1163.930700][T24078] RSP: 002b:00000000f54ce590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003
[ 1163.930720][T24078] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54ce620
[ 1163.930733][T24078] RDX: 000000000000000f RSI: 00000000f7444ff4 RDI: 0000000000000000
[ 1163.930745][T24078] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[ 1163.930756][T24078] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1163.930766][T24078] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1163.930796][T24078]  </TASK>
[ 1164.683289][    T9] usb 7-1: USB disconnect, device number 35
[ 1164.917273][ T5977] usb 2-1: can't set config #1, error -71
[ 1164.937407][ T5977] usb 2-1: USB disconnect, device number 65
[ 1164.956753][T24085] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3673'.
[ 1165.335050][T24126] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1165.335050][T24126]    program syz.2.3671 not setting count and/or reply_len properly
[ 1166.693803][T24150] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3676'.
[ 1166.943381][ T5977] usb 10-1: new high-speed USB device number 24 using dummy_hcd
[ 1167.105410][ T5977] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1167.132047][ T5977] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[ 1167.191326][ T5977] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1167.239438][ T5977] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1167.285736][ T5977] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1167.310488][ T5977] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1167.334446][ T5977] usb 10-1: config 0 descriptor??
[ 1167.342613][T24139] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22
[ 1167.913400][ T5977] plantronics 0003:047F:FFFF.0044: reserved main item tag 0xd
[ 1167.942848][ T5977] plantronics 0003:047F:FFFF.0044: unknown main item tag 0x0
[ 1167.960540][ T5977] plantronics 0003:047F:FFFF.0044: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0
[ 1168.190066][T15364] usb 10-1: USB disconnect, device number 24
[ 1168.863635][ T5952] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[ 1168.943699][T15364] usb 7-1: new high-speed USB device number 36 using dummy_hcd
[ 1169.056375][ T5952] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1169.090960][ T5952] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[ 1169.123425][ T5952] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1169.135057][T15364] usb 7-1: Using ep0 maxpacket: 8
[ 1169.164047][T15364] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[ 1169.176289][ T5952] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1169.193595][T15364] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1169.242497][ T5944] usb 10-1: new high-speed USB device number 25 using dummy_hcd
[ 1169.265711][ T5952] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1169.296411][T15364] pvrusb2: Hardware description: Terratec Grabster AV400
[ 1169.303905][ T5952] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1169.312990][T15364] pvrusb2: **********
[ 1169.317147][T15364] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[ 1169.336528][ T5952] usb 2-1: config 0 descriptor??
[ 1169.347950][T24198] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[ 1169.357647][T15364] pvrusb2: Important functionality might not be entirely working.
[ 1169.376606][T15364] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[ 1169.422742][T15364] pvrusb2: **********
[ 1169.456682][ T5944] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1169.468936][ T5944] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[ 1169.511367][ T2344] pvrusb2: Invalid write control endpoint
[ 1169.565877][ T5944] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1169.666497][ T5944] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1169.740083][ T5944] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1169.741437][T24209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1169.771276][ T5944] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1169.791775][ T2344] pvrusb2: Invalid write control endpoint
[ 1169.803922][T24209] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1169.822133][ T5952] plantronics 0003:047F:FFFF.0045: reserved main item tag 0xd
[ 1169.842405][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[ 1169.843129][T15123] usb 7-1: USB disconnect, device number 36
[ 1169.883827][ T5952] plantronics 0003:047F:FFFF.0045: unknown main item tag 0x0
[ 1169.891631][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[ 1169.900585][ T5944] usb 10-1: config 0 descriptor??
[ 1169.924417][T24222] raw-gadget.5 gadget.9: fail, usb_ep_enable returned -22
[ 1169.935543][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[ 1169.954191][ T5952] plantronics 0003:047F:FFFF.0045: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[ 1169.986681][ T2344] pvrusb2: Device being rendered inoperable
[ 1170.005556][ T2344] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[ 1170.012684][ T2344] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_g)
[ 1170.054030][ T2344] pvrusb2: Attached sub-driver cx25840
[ 1170.059566][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[ 1170.111799][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[ 1170.157208][  T979] usb 2-1: USB disconnect, device number 66
[ 1170.422906][ T5944] plantronics 0003:047F:FFFF.0046: reserved main item tag 0xd
[ 1170.467940][ T5944] plantronics 0003:047F:FFFF.0046: unknown main item tag 0x0
[ 1170.604869][ T5944] plantronics 0003:047F:FFFF.0046: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0
[ 1170.619182][T24281] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 1170.704456][T24287] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3691'.
[ 1170.735599][T24293] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3692'.
[ 1170.795830][T24281] netlink: 80 bytes leftover after parsing attributes in process `syz.7.3691'.
[ 1170.836789][T24281] netlink: 80 bytes leftover after parsing attributes in process `syz.7.3691'.
[ 1170.855823][ T5944] usb 10-1: USB disconnect, device number 25
[ 1171.072662][T24311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3693'.
[ 1171.601025][T24321] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3695'.
[ 1172.643629][ T5944] usb 7-1: new high-speed USB device number 37 using dummy_hcd
[ 1172.676244][T24345] netlink: 'syz.9.3699': attribute type 10 has an invalid length.
[ 1172.695774][T24345] veth1_macvtap: left promiscuous mode
[ 1172.729948][T24345] bridge0: port 3(macsec0) entered blocking state
[ 1172.759699][T24345] bridge0: port 3(macsec0) entered disabled state
[ 1172.782050][T24345] macsec0: entered allmulticast mode
[ 1172.791472][T24345] macsec0: entered promiscuous mode
[ 1172.840357][ T5944] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1172.852422][ T5944] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[ 1172.930125][ T5944] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1173.039134][ T5944] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1173.053853][T15123] usb 10-1: new high-speed USB device number 26 using dummy_hcd
[ 1173.082947][ T5944] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1173.153236][T24361] fuse: Unknown parameter 'grou00000000000000000000'
[ 1173.199418][ T5944] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1173.225924][T15123] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1173.240776][ T5944] usb 7-1: config 0 descriptor??
[ 1173.252733][T24334] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[ 1173.341203][T15123] usb 10-1: config 0 has no interfaces?
[ 1173.377271][T15123] usb 10-1: New USB device found, idVendor=0af0, idProduct=d357, bcdDevice= 0.00
[ 1173.402095][T15123] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1173.426055][T15123] usb 10-1: Product: syz
[ 1173.433038][T15123] usb 10-1: Manufacturer: syz
[ 1173.458008][T15123] usb 10-1: SerialNumber: syz
[ 1173.622358][T15123] usb 10-1: config 0 descriptor??
[ 1173.971390][ T5944] plantronics 0003:047F:FFFF.0047: reserved main item tag 0xd
[ 1174.027920][ T5944] plantronics 0003:047F:FFFF.0047: unknown main item tag 0x0
[ 1174.075480][ T5944] plantronics 0003:047F:FFFF.0047: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[ 1174.137996][ T5944] usb 7-1: USB disconnect, device number 37
[ 1174.222015][T24388] fido_id[24388]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[ 1175.484935][T24422] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1175.484935][T24422]    program syz.6.3708 not setting count and/or reply_len properly
[ 1175.635243][T15364] usb 10-1: USB disconnect, device number 26
[ 1175.715932][T24428] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1175.715932][T24428]    program syz.7.3709 not setting count and/or reply_len properly
[ 1176.074444][T24440] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3711'.
[ 1177.160225][T24458] syzkaller1: entered promiscuous mode
[ 1177.199130][T24458] syzkaller1: entered allmulticast mode
[ 1177.231628][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.238485][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 1177.646922][T24479] FAULT_INJECTION: forcing a failure.
[ 1177.646922][T24479] name failslab, interval 1, probability 0, space 0, times 0
[ 1177.668256][T24479] CPU: 1 UID: 0 PID: 24479 Comm: syz.7.3717 Not tainted syzkaller #0 PREEMPT(full) 
[ 1177.668276][T24479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1177.668284][T24479] Call Trace:
[ 1177.668289][T24479]  <TASK>
[ 1177.668294][T24479]  dump_stack_lvl+0x189/0x250
[ 1177.668311][T24479]  ? __pfx____ratelimit+0x10/0x10
[ 1177.668326][T24479]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1177.668339][T24479]  ? __pfx__printk+0x10/0x10
[ 1177.668356][T24479]  ? __pfx___might_resched+0x10/0x10
[ 1177.668366][T24479]  ? fs_reclaim_acquire+0x7d/0x100
[ 1177.668385][T24479]  should_fail_ex+0x414/0x560
[ 1177.668402][T24479]  should_failslab+0xa8/0x100
[ 1177.668418][T24479]  __kmalloc_noprof+0xcb/0x4f0
[ 1177.668431][T24479]  ? video_usercopy+0x18f/0x14f0
[ 1177.668447][T24479]  video_usercopy+0x18f/0x14f0
[ 1177.668463][T24479]  ? __pfx___video_do_ioctl+0x10/0x10
[ 1177.668473][T24479]  ? __pfx_video_usercopy+0x10/0x10
[ 1177.668492][T24479]  ? __fget_files+0x2a/0x420
[ 1177.668509][T24479]  v4l2_ioctl+0x18a/0x1e0
[ 1177.668527][T24479]  v4l2_compat_ioctl32+0x1d7/0x260
[ 1177.668543][T24479]  __ia32_compat_sys_ioctl+0x543/0x840
[ 1177.668557][T24479]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[ 1177.668570][T24479]  ? __fget_files+0x3a0/0x420
[ 1177.668589][T24479]  ? fput+0xa0/0xd0
[ 1177.668600][T24479]  ? ksys_write+0x22a/0x250
[ 1177.668617][T24479]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1177.668634][T24479]  __do_fast_syscall_32+0xb6/0x2b0
[ 1177.668649][T24479]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1177.668665][T24479]  do_fast_syscall_32+0x34/0x80
[ 1177.668680][T24479]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1177.668693][T24479] RIP: 0023:0xf711e539
[ 1177.668703][T24479] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1177.668712][T24479] RSP: 002b:00000000f550e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[ 1177.668725][T24479] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0845657
[ 1177.668732][T24479] RDX: 00000000800007c0 RSI: 0000000000000000 RDI: 0000000000000000
[ 1177.668739][T24479] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1177.668746][T24479] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1177.668752][T24479] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1177.668766][T24479]  </TASK>
[ 1178.173604][ T5944] usb 10-1: new high-speed USB device number 27 using dummy_hcd
[ 1178.330439][ T5944] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1178.366239][ T5944] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[ 1178.422614][ T5944] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1178.502191][ T5944] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1178.518354][ T5944] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1178.570580][ T5944] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1178.611627][ T5944] usb 10-1: config 0 descriptor??
[ 1178.634868][T24481] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22
[ 1178.788298][T24503] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3723'.
[ 1179.048558][ T5944] plantronics 0003:047F:FFFF.0048: reserved main item tag 0xd
[ 1179.074453][ T5944] plantronics 0003:047F:FFFF.0048: unknown main item tag 0x0
[ 1179.152809][ T5944] plantronics 0003:047F:FFFF.0048: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0
[ 1179.268919][ T5944] usb 10-1: USB disconnect, device number 27
[ 1179.649459][T24529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3725'.
[ 1180.523809][ T5944] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[ 1180.544077][T15364] usb 10-1: new high-speed USB device number 28 using dummy_hcd
[ 1180.683663][T15364] usb 10-1: device descriptor read/64, error -71
[ 1180.704281][ T5944] usb 2-1: Using ep0 maxpacket: 16
[ 1180.713706][ T5944] usb 2-1: too many configurations: 234, using maximum allowed: 8
[ 1180.723247][ T5944] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 8
[ 1180.731864][ T5944] usb 2-1: can't read configurations, error -22
[ 1180.863665][ T5944] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[ 1180.893719][T15123] usb 7-1: new high-speed USB device number 38 using dummy_hcd
[ 1180.942031][T15364] usb 10-1: new high-speed USB device number 29 using dummy_hcd
[ 1181.056111][ T5944] usb 2-1: Using ep0 maxpacket: 16
[ 1181.066893][ T5944] usb 2-1: too many configurations: 234, using maximum allowed: 8
[ 1181.073749][T15123] usb 7-1: Using ep0 maxpacket: 8
[ 1181.079211][ T5944] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 8
[ 1181.086074][T15123] usb 7-1: descriptor type invalid, skip
[ 1181.090749][T15364] usb 10-1: device descriptor read/64, error -71
[ 1181.101300][ T5944] usb 2-1: can't read configurations, error -22
[ 1181.109436][ T5944] usb usb2-port1: attempt power cycle
[ 1181.109484][T15123] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 143, changing to 11
[ 1181.138189][T15123] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16
[ 1181.148225][T15123] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023
[ 1181.167884][T15123] usb 7-1: language id specifier not provided by device, defaulting to English
[ 1181.189031][T15123] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1181.198796][T15123] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1181.208113][T15123] usb 7-1: Product: syz
[ 1181.212414][T15123] usb 7-1: Manufacturer: syz
[ 1181.217438][T15123] usb 7-1: SerialNumber: syz
[ 1181.218461][T15364] usb usb10-port1: attempt power cycle
[ 1181.463770][ T5944] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[ 1181.494802][ T5944] usb 2-1: Using ep0 maxpacket: 16
[ 1181.519313][ T5944] usb 2-1: too many configurations: 234, using maximum allowed: 8
[ 1181.568735][ T5944] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 8
[ 1181.586307][T15364] usb 10-1: new high-speed USB device number 30 using dummy_hcd
[ 1181.610487][T24564] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1181.610487][T24564]    program syz.2.3729 not setting count and/or reply_len properly
[ 1181.649018][ T5944] usb 2-1: can't read configurations, error -22
[ 1181.694418][T15364] usb 10-1: device descriptor read/8, error -71
[ 1181.893655][ T5944] usb 2-1: new high-speed USB device number 70 using dummy_hcd
[ 1182.003677][T15364] usb 10-1: new high-speed USB device number 31 using dummy_hcd
[ 1182.033160][T15364] usb 10-1: device descriptor read/8, error -71
[ 1182.107133][ T5944] usb 2-1: device descriptor read/8, error -71
[ 1182.158714][T15364] usb usb10-port1: unable to enumerate USB device
[ 1182.254122][ T5944] usb usb2-port1: unable to enumerate USB device
[ 1183.222916][T24610] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1183.222916][T24610]    program syz.1.3735 not setting count and/or reply_len properly
[ 1183.417989][T24620] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1183.659356][T15123] cdc_ncm 7-1:1.0: bind() failure
[ 1183.709197][T15123] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found
[ 1183.758918][T15123] cdc_ncm 7-1:1.1: bind() failure
[ 1183.815898][T15123] usb 7-1: USB disconnect, device number 38
[ 1184.138952][T24642] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3739'.
[ 1185.534015][ T5944] usb 10-1: new high-speed USB device number 32 using dummy_hcd
[ 1185.702200][ T5944] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1185.813740][ T5977] usb 7-1: new high-speed USB device number 39 using dummy_hcd
[ 1185.927464][ T5944] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[ 1185.954663][ T5944] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1185.969362][ T5944] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1186.000652][ T5944] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1186.021446][ T5944] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1186.024349][ T5977] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1186.081110][ T5977] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1186.092860][ T5977] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1186.112181][ T5944] usb 10-1: config 0 descriptor??
[ 1186.119848][ T5977] usb 7-1: config 0 descriptor??
[ 1186.135565][T24669] raw-gadget.4 gadget.9: fail, usb_ep_enable returned -22
[ 1186.364078][ T5977] usbhid 7-1:0.0: can't add hid device: -71
[ 1186.390566][ T5977] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 1186.448938][ T5977] usb 7-1: USB disconnect, device number 39
[ 1186.498112][T24705] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1186.498112][T24705]    program syz.1.3743 not setting count and/or reply_len properly
[ 1186.529662][T24738] input: syz0 as /devices/virtual/input/input26
[ 1186.596849][ T5944] plantronics 0003:047F:FFFF.0049: reserved main item tag 0xd
[ 1186.657042][ T5944] plantronics 0003:047F:FFFF.0049: unknown main item tag 0x0
[ 1186.733817][ T5944] plantronics 0003:047F:FFFF.0049: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0
[ 1186.887512][    T9] usb 10-1: USB disconnect, device number 32
[ 1186.923961][ T5977] usb 7-1: new high-speed USB device number 40 using dummy_hcd
[ 1187.071064][T24766] fido_id[24766]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory
[ 1187.089390][ T5977] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1187.123234][ T5977] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1187.150927][ T5977] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1187.189505][ T5977] usb 7-1: config 0 descriptor??
[ 1187.248020][T24790] fuse: Unknown parameter 'group_i00000000000000000000'
[ 1187.748624][T24802] fuse: Unknown parameter 'grou00000000000000000000'
[ 1188.120723][T24806] netlink: 'syz.6.3742': attribute type 1 has an invalid length.
[ 1188.152279][T24806] netlink: 168864 bytes leftover after parsing attributes in process `syz.6.3742'.
[ 1188.594057][ T5863] Bluetooth: hci4: command 0x0405 tx timeout
[ 1188.605463][T15123] Bluetooth: hci4: Opcode 0x0c1a failed: -110
[ 1188.618734][T15123] Bluetooth: hci4: Error when powering off device on rfkill (-110)
[ 1189.340047][ T5977] usbhid 7-1:0.0: can't add hid device: -71
[ 1189.378398][ T5977] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 1189.427221][ T5977] usb 7-1: USB disconnect, device number 40
[ 1189.913913][    T9] usb 10-1: new high-speed USB device number 33 using dummy_hcd
[ 1190.028759][T24869] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3752'.
[ 1190.083761][    T9] usb 10-1: Using ep0 maxpacket: 16
[ 1190.095731][    T9] usb 10-1: config 10 has an invalid interface number: 72 but max is 0
[ 1190.109000][    T9] usb 10-1: config 10 has an invalid interface number: 110 but max is 0
[ 1190.129971][    T9] usb 10-1: config 10 has 2 interfaces, different from the descriptor's value: 1
[ 1190.159869][    T9] usb 10-1: config 10 has no interface number 0
[ 1190.176207][    T9] usb 10-1: config 10 has no interface number 1
[ 1190.192910][    T9] usb 10-1: config 10 interface 72 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[ 1190.213565][    T9] usb 10-1: config 10 interface 72 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[ 1190.270647][T24876] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1190.270647][T24876]    program syz.7.3749 not setting count and/or reply_len properly
[ 1190.342776][    T9] usb 10-1: config 10 interface 72 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 14
[ 1190.380405][    T9] usb 10-1: too many endpoints for config 10 interface 110 altsetting 45: 159, using maximum allowed: 30
[ 1190.467729][    T9] usb 10-1: config 10 interface 110 altsetting 45 endpoint 0xB has invalid maxpacket 1024, setting to 64
[ 1190.555369][    T9] usb 10-1: config 10 interface 110 altsetting 45 has a duplicate endpoint with address 0xB, skipping
[ 1190.659097][    T9] usb 10-1: config 10 interface 110 altsetting 45 bulk endpoint 0x8 has invalid maxpacket 1023
[ 1190.698340][    T9] usb 10-1: config 10 interface 110 altsetting 45 bulk endpoint 0x1 has invalid maxpacket 64
[ 1190.720781][    T9] usb 10-1: config 10 interface 110 altsetting 45 has a duplicate endpoint with address 0x8, skipping
[ 1190.742153][    T9] usb 10-1: config 10 interface 110 altsetting 45 bulk endpoint 0x9 has invalid maxpacket 16
[ 1190.786557][    T9] usb 10-1: config 10 interface 110 altsetting 45 endpoint 0x6 has an invalid bInterval 0, changing to 7
[ 1190.800026][    T9] usb 10-1: config 10 interface 110 altsetting 45 has an invalid descriptor for endpoint zero, skipping
[ 1190.821495][    T9] usb 10-1: config 10 interface 110 altsetting 45 has a duplicate endpoint with address 0x1, skipping
[ 1190.877016][    T9] usb 10-1: config 10 interface 110 altsetting 45 has a duplicate endpoint with address 0x6, skipping
[ 1190.902935][    T9] usb 10-1: config 10 interface 110 altsetting 45 has an invalid descriptor for endpoint zero, skipping
[ 1190.923161][    T9] usb 10-1: config 10 interface 110 altsetting 45 has 12 endpoint descriptors, different from the interface descriptor's value: 159
[ 1190.942766][    T9] usb 10-1: config 10 interface 72 has no altsetting 0
[ 1190.956182][    T9] usb 10-1: config 10 interface 110 has no altsetting 0
[ 1191.001855][    T9] usb 10-1: New USB device found, idVendor=413c, idProduct=8195, bcdDevice=1a.9e
[ 1191.034586][    T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1191.042686][    T9] usb 10-1: Product: syz
[ 1191.065482][    T9] usb 10-1: Manufacturer: syz
[ 1191.075061][    T9] usb 10-1: SerialNumber: syz
[ 1191.380563][    T9] option 10-1:10.72: GSM modem (1-port) converter detected
[ 1191.499781][    T9] usb 10-1: USB disconnect, device number 33
[ 1191.593717][    T9] option 10-1:10.72: device disconnected
[ 1194.010078][T24979] fuse: Unknown parameter 'group_i00000000000000000000'
[ 1194.349710][T24982] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1194.349710][T24982]    program syz.9.3759 not setting count and/or reply_len properly
[ 1195.890547][T25017] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1195.890547][T25017]    program syz.6.3763 not setting count and/or reply_len properly
[ 1195.926249][T25013] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3764'.
[ 1197.027629][T25030] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1197.027629][T25030]    program syz.1.3768 not setting count and/or reply_len properly
[ 1197.130894][T25046] FAULT_INJECTION: forcing a failure.
[ 1197.130894][T25046] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1197.151944][T25046] CPU: 0 UID: 0 PID: 25046 Comm: syz.6.3771 Not tainted syzkaller #0 PREEMPT(full) 
[ 1197.151970][T25046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1197.151982][T25046] Call Trace:
[ 1197.151991][T25046]  <TASK>
[ 1197.152000][T25046]  dump_stack_lvl+0x189/0x250
[ 1197.152029][T25046]  ? __pfx____ratelimit+0x10/0x10
[ 1197.152056][T25046]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1197.152079][T25046]  ? __pfx__printk+0x10/0x10
[ 1197.152106][T25046]  ? __might_fault+0xb0/0x130
[ 1197.152146][T25046]  should_fail_ex+0x414/0x560
[ 1197.152178][T25046]  _copy_from_user+0x2d/0xb0
[ 1197.152203][T25046]  csum_and_copy_from_iter_full+0x1e1/0x1ed0
[ 1197.152225][T25046]  ? rcu_is_watching+0x15/0xb0
[ 1197.152252][T25046]  ? __alloc_frozen_pages_noprof+0x1d6/0x370
[ 1197.152276][T25046]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1197.152301][T25046]  ? __pfx_csum_and_copy_from_iter_full+0x10/0x10
[ 1197.152323][T25046]  ? ip6_pol_route+0x162/0x1180
[ 1197.152346][T25046]  ? policy_nodemask+0x27c/0x720
[ 1197.152393][T25046]  ip_generic_getfrag+0x12f/0x2b0
[ 1197.152421][T25046]  ? __pfx_ip_generic_getfrag+0x10/0x10
[ 1197.152457][T25046]  __ip6_append_data+0x2230/0x3f30
[ 1197.152482][T25046]  ? __lock_acquire+0xab9/0xd20
[ 1197.152534][T25046]  ? __pfx_raw6_getfrag+0x10/0x10
[ 1197.152584][T25046]  ? __pfx___ip6_append_data+0x10/0x10
[ 1197.152613][T25046]  ? __local_bh_enable_ip+0x12d/0x1c0
[ 1197.152637][T25046]  ip6_append_data+0x1c4/0x380
[ 1197.152666][T25046]  ? __pfx_raw6_getfrag+0x10/0x10
[ 1197.152698][T25046]  rawv6_sendmsg+0x127a/0x1820
[ 1197.152746][T25046]  ? __pfx_rawv6_sendmsg+0x10/0x10
[ 1197.152802][T25046]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1197.152835][T25046]  ? sock_rps_record_flow+0x19/0x410
[ 1197.152863][T25046]  ? inet_sendmsg+0x2f4/0x370
[ 1197.152887][T25046]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1197.152912][T25046]  __sock_sendmsg+0x19c/0x270
[ 1197.152942][T25046]  __sys_sendto+0x3bd/0x520
[ 1197.152975][T25046]  ? __pfx___sys_sendto+0x10/0x10
[ 1197.153002][T25046]  ? __mutex_unlock_slowpath+0x1a1/0x740
[ 1197.153046][T25046]  ? __fget_files+0x3a0/0x420
[ 1197.153088][T25046]  ? ksys_write+0x22a/0x250
[ 1197.153121][T25046]  __ia32_sys_sendto+0xdd/0x100
[ 1197.153143][T25046]  __do_fast_syscall_32+0xb6/0x2b0
[ 1197.153174][T25046]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1197.153211][T25046]  do_fast_syscall_32+0x34/0x80
[ 1197.153241][T25046]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1197.153266][T25046] RIP: 0023:0xf7fa8539
[ 1197.153283][T25046] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1197.153301][T25046] RSP: 002b:00000000f54c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000171
[ 1197.153322][T25046] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000340
[ 1197.153337][T25046] RDX: 0000000000000018 RSI: 0000000000003b00 RDI: 0000000000000000
[ 1197.153350][T25046] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1197.153363][T25046] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1197.153380][T25046] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1197.153411][T25046]  </TASK>
[ 1198.866992][T25071] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1198.866992][T25071]    program syz.7.3773 not setting count and/or reply_len properly
[ 1199.249908][ T9764] usb 10-1: new high-speed USB device number 34 using dummy_hcd
[ 1199.423614][ T9764] usb 10-1: Using ep0 maxpacket: 8
[ 1199.454587][ T9764] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 1199.466586][ T9764] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1199.477965][ T9764] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1199.488454][T25091] FAULT_INJECTION: forcing a failure.
[ 1199.488454][T25091] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1199.488639][ T9764] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1199.522406][T25091] CPU: 0 UID: 0 PID: 25091 Comm: syz.6.3778 Not tainted syzkaller #0 PREEMPT(full) 
[ 1199.522433][T25091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1199.522444][T25091] Call Trace:
[ 1199.522452][T25091]  <TASK>
[ 1199.522469][T25091]  dump_stack_lvl+0x189/0x250
[ 1199.522497][T25091]  ? __pfx____ratelimit+0x10/0x10
[ 1199.522525][T25091]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1199.522549][T25091]  ? __pfx__printk+0x10/0x10
[ 1199.522590][T25091]  should_fail_ex+0x414/0x560
[ 1199.522623][T25091]  _copy_to_user+0x31/0xb0
[ 1199.522648][T25091]  simple_read_from_buffer+0xe1/0x170
[ 1199.522682][T25091]  proc_fail_nth_read+0x1b3/0x220
[ 1199.522708][T25091]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1199.522734][T25091]  ? rw_verify_area+0x2a6/0x4d0
[ 1199.522758][T25091]  ? __lock_acquire+0xab9/0xd20
[ 1199.522785][T25091]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1199.522809][T25091]  vfs_read+0x200/0xa30
[ 1199.522833][T25091]  ? fdget_pos+0x247/0x320
[ 1199.522855][T25091]  ? __pfx___mutex_lock+0x10/0x10
[ 1199.522885][T25091]  ? __pfx_vfs_read+0x10/0x10
[ 1199.522912][T25091]  ? __fget_files+0x2a/0x420
[ 1199.522945][T25091]  ? __fget_files+0x3a0/0x420
[ 1199.522973][T25091]  ? __fget_files+0x2a/0x420
[ 1199.523011][T25091]  ksys_read+0x145/0x250
[ 1199.523039][T25091]  ? __pfx_ksys_read+0x10/0x10
[ 1199.523069][T25091]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1199.523101][T25091]  __do_fast_syscall_32+0xb6/0x2b0
[ 1199.523131][T25091]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1199.523163][T25091]  do_fast_syscall_32+0x34/0x80
[ 1199.523192][T25091]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1199.523215][T25091] RIP: 0023:0xf7fa8539
[ 1199.523232][T25091] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1199.523249][T25091] RSP: 002b:00000000f54c6590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003
[ 1199.523270][T25091] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54c6620
[ 1199.523284][T25091] RDX: 000000000000000f RSI: 00000000f7434ff4 RDI: 0000000000000000
[ 1199.523296][T25091] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[ 1199.523308][T25091] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1199.523320][T25091] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1199.523349][T25091]  </TASK>
[ 1199.754348][ T9764] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1199.763556][ T9764] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1200.040929][T25101] FAULT_INJECTION: forcing a failure.
[ 1200.040929][T25101] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1200.089124][T25101] CPU: 1 UID: 0 PID: 25101 Comm: syz.6.3779 Not tainted syzkaller #0 PREEMPT(full) 
[ 1200.089151][T25101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1200.089164][T25101] Call Trace:
[ 1200.089173][T25101]  <TASK>
[ 1200.089182][T25101]  dump_stack_lvl+0x189/0x250
[ 1200.089211][T25101]  ? __pfx____ratelimit+0x10/0x10
[ 1200.089238][T25101]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1200.089279][T25101]  ? __pfx__printk+0x10/0x10
[ 1200.089319][T25101]  should_fail_ex+0x414/0x560
[ 1200.089351][T25101]  _copy_to_user+0x31/0xb0
[ 1200.089376][T25101]  inotify_read+0x340/0xab0
[ 1200.089407][T25101]  ? task_work_run+0x21a/0x260
[ 1200.089433][T25101]  ? __pfx_inotify_read+0x10/0x10
[ 1200.089458][T25101]  ? common_file_perm+0x1b5/0x230
[ 1200.089487][T25101]  ? __pfx_woken_wake_function+0x10/0x10
[ 1200.089514][T25101]  ? bpf_lsm_file_permission+0x9/0x20
[ 1200.089538][T25101]  ? security_file_permission+0x75/0x290
[ 1200.089564][T25101]  ? rw_verify_area+0x2a6/0x4d0
[ 1200.089588][T25101]  ? __lock_acquire+0xab9/0xd20
[ 1200.089615][T25101]  ? __pfx_inotify_read+0x10/0x10
[ 1200.089639][T25101]  vfs_read+0x200/0xa30
[ 1200.089673][T25101]  ? __pfx_vfs_read+0x10/0x10
[ 1200.089700][T25101]  ? __fget_files+0x2a/0x420
[ 1200.089732][T25101]  ? __fget_files+0x2a/0x420
[ 1200.089760][T25101]  ? __fget_files+0x3a0/0x420
[ 1200.089787][T25101]  ? __fget_files+0x2a/0x420
[ 1200.089825][T25101]  ksys_read+0x145/0x250
[ 1200.089849][T25101]  ? rcu_is_watching+0x15/0xb0
[ 1200.089871][T25101]  ? __pfx_ksys_read+0x10/0x10
[ 1200.089901][T25101]  ? do_int80_emulation+0xec/0x390
[ 1200.089932][T25101]  ? asm_int80_emulation+0x1a/0x20
[ 1200.089952][T25101]  do_int80_emulation+0x126/0x390
[ 1200.089983][T25101]  ? clear_bhb_loop+0x60/0xb0
[ 1200.090002][T25101]  ? clear_bhb_loop+0x60/0xb0
[ 1200.090026][T25101]  asm_int80_emulation+0x1a/0x20
[ 1200.090044][T25101] RIP: 0023:0xf7fa8539
[ 1200.090061][T25101] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1200.090080][T25101] RSP: 002b:00000000f54c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000003
[ 1200.090101][T25101] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000140
[ 1200.090114][T25101] RDX: 0000000000000044 RSI: 0000000000000000 RDI: 0000000000000000
[ 1200.090127][T25101] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1200.090142][T25101] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1200.090154][T25101] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1200.090182][T25101]  </TASK>
[ 1200.173707][ T9764] usb 10-1: GET_CAPABILITIES returned 0
[ 1200.404478][T25096] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1200.404478][T25096]    program syz.7.3777 not setting count and/or reply_len properly
[ 1200.605744][T25115] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1200.605744][T25115]    program syz.1.3776 not setting count and/or reply_len properly
[ 1200.780656][ T9764] usbtmc 10-1:16.0: can't read capabilities
[ 1200.809839][T25135] fuse: Unknown parameter 'group_i00000000000000000000'
[ 1200.849260][ T9764] usb 10-1: USB disconnect, device number 34
[ 1202.008314][T25168] input: syz0 as /devices/virtual/input/input27
[ 1202.565950][T25188] bond3: entered allmulticast mode
[ 1202.586375][T25188] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1202.594195][T25188] bridge0: port 3(bond3) entered blocking state
[ 1202.600677][T25188] bridge0: port 3(bond3) entered disabled state
[ 1202.621738][T25188] bond3: entered promiscuous mode
[ 1202.636425][T25188] bridge0: port 3(bond3) entered blocking state
[ 1202.643110][T25188] bridge0: port 3(bond3) entered forwarding state
[ 1202.749924][T13951] bridge0: port 3(bond3) entered disabled state
[ 1203.060802][T25247] fuse: Unknown parameter 'group_id00000000000000000000'
[ 1203.267257][T25256] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1203.267257][T25256]    program syz.1.3788 not setting count and/or reply_len properly
[ 1203.484098][T25259] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1203.484098][T25259]    program syz.2.3796 not setting count and/or reply_len properly
[ 1205.283763][T15123] usb 2-1: new high-speed USB device number 71 using dummy_hcd
[ 1205.393376][T25295] FAULT_INJECTION: forcing a failure.
[ 1205.393376][T25295] name failslab, interval 1, probability 0, space 0, times 0
[ 1205.448919][T15123] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1205.470825][T25295] CPU: 0 UID: 0 PID: 25295 Comm: syz.7.3798 Not tainted syzkaller #0 PREEMPT(full) 
[ 1205.470854][T25295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1205.470867][T25295] Call Trace:
[ 1205.470876][T25295]  <TASK>
[ 1205.470885][T25295]  dump_stack_lvl+0x189/0x250
[ 1205.470914][T25295]  ? __pfx____ratelimit+0x10/0x10
[ 1205.470942][T25295]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1205.470967][T25295]  ? __pfx__printk+0x10/0x10
[ 1205.471000][T25295]  ? __pfx___might_resched+0x10/0x10
[ 1205.471020][T25295]  ? fs_reclaim_acquire+0x7d/0x100
[ 1205.471054][T25295]  should_fail_ex+0x414/0x560
[ 1205.471085][T25295]  should_failslab+0xa8/0x100
[ 1205.471117][T25295]  __kmalloc_noprof+0xcb/0x4f0
[ 1205.471142][T25295]  ? copy_splice_read+0x143/0xa50
[ 1205.471173][T25295]  copy_splice_read+0x143/0xa50
[ 1205.471212][T25295]  ? __pfx_copy_splice_read+0x10/0x10
[ 1205.471237][T25295]  ? look_up_lock_class+0x74/0x170
[ 1205.471267][T25295]  ? register_lock_class+0x51/0x320
[ 1205.471299][T25295]  ? __pfx_pipe_lock_cmp_fn+0x10/0x10
[ 1205.471333][T25295]  ? alloc_pipe_info+0x374/0x4d0
[ 1205.471361][T25295]  ? __pfx_shmem_file_splice_read+0x10/0x10
[ 1205.471389][T25295]  splice_direct_to_actor+0x4d0/0xcc0
[ 1205.471453][T25295]  ? __pfx_direct_splice_actor+0x10/0x10
[ 1205.471481][T25295]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 1205.471520][T25295]  do_splice_direct+0x181/0x270
[ 1205.471551][T25295]  ? __pfx_do_splice_direct+0x10/0x10
[ 1205.471576][T25295]  ? common_file_perm+0x1b5/0x230
[ 1205.471608][T25295]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 1205.471640][T25295]  ? bpf_lsm_file_permission+0x9/0x20
[ 1205.471664][T25295]  ? security_file_permission+0x75/0x290
[ 1205.471691][T25295]  ? rw_verify_area+0x255/0x4d0
[ 1205.471720][T25295]  do_sendfile+0x4da/0x7e0
[ 1205.471748][T25295]  ? __pfx_do_sendfile+0x10/0x10
[ 1205.471774][T25295]  ? __ia32_compat_sys_sendfile+0x180/0x1d0
[ 1205.471809][T25295]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1205.471839][T25295]  __do_fast_syscall_32+0xb6/0x2b0
[ 1205.471872][T25295]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1205.471903][T25295]  do_fast_syscall_32+0x34/0x80
[ 1205.471933][T25295]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1205.471956][T25295] RIP: 0023:0xf711e539
[ 1205.471973][T25295] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1205.471991][T25295] RSP: 002b:00000000f550e55c EFLAGS: 00000206 ORIG_RAX: 00000000000000bb
[ 1205.472012][T25295] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000005
[ 1205.472026][T25295] RDX: 0000000000000000 RSI: 000000001d00c0d1 RDI: 0000000000000000
[ 1205.472038][T25295] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1205.472049][T25295] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1205.472061][T25295] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1205.472090][T25295]  </TASK>
[ 1205.765262][T15123] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[ 1205.776475][T15123] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1205.787760][T15123] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1205.800713][T15123] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1205.809803][T15123] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1205.920512][T15123] usb 2-1: config 0 descriptor??
[ 1205.926532][T25280] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[ 1206.379102][T15123] plantronics 0003:047F:FFFF.004A: reserved main item tag 0xd
[ 1206.415955][T15123] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0
[ 1206.456838][T15123] plantronics 0003:047F:FFFF.004A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[ 1206.551364][T25326] fuse: Unknown parameter 'group_i00000000000000000000'
[ 1206.806311][ T9764] usb 7-1: new high-speed USB device number 41 using dummy_hcd
[ 1206.869007][T15364] usb 2-1: USB disconnect, device number 71
[ 1207.098542][ T9764] usb 7-1: config 237 has an invalid interface number: 127 but max is 0
[ 1207.107148][ T9764] usb 7-1: config 237 has no interface number 0
[ 1207.131793][ T9764] usb 7-1: config 237 interface 127 has no altsetting 0
[ 1207.154337][ T9764] usb 7-1: New USB device found, idVendor=0e8d, idProduct=760a, bcdDevice=40.0c
[ 1207.179926][ T9764] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1207.205436][ T9764] usb 7-1: Product: syz
[ 1207.218600][ T9764] usb 7-1: Manufacturer: syz
[ 1207.234270][ T9764] usb 7-1: SerialNumber: syz
[ 1207.957496][T25353] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1207.957496][T25353]    program syz.1.3804 not setting count and/or reply_len properly
[ 1209.123801][ T5977] usb 10-1: new high-speed USB device number 35 using dummy_hcd
[ 1209.313993][ T5977] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1209.344609][ T5977] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[ 1209.357216][ T5977] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1209.371157][ T5977] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1209.420347][ T5977] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1209.480627][ T5977] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1209.542592][ T5977] usb 10-1: config 0 descriptor??
[ 1209.560831][T25361] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22
[ 1209.682004][ T9764] usb 7-1: USB disconnect, device number 41
[ 1210.004934][ T5977] plantronics 0003:047F:FFFF.004B: reserved main item tag 0xd
[ 1210.022023][ T5977] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0
[ 1210.069733][ T5977] plantronics 0003:047F:FFFF.004B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0
[ 1210.233905][ T9764] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[ 1210.262703][T25413] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1210.262703][T25413]    program syz.2.3807 not setting count and/or reply_len properly
[ 1210.306943][ T5977] usb 10-1: USB disconnect, device number 35
[ 1210.394418][ T9764] usb 2-1: Using ep0 maxpacket: 8
[ 1210.443788][ T9764] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[ 1210.544703][ T9764] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1210.602104][ T9764] pvrusb2: Hardware description: Terratec Grabster AV400
[ 1210.616832][ T9764] pvrusb2: **********
[ 1210.639451][ T9764] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[ 1210.663697][ T9764] pvrusb2: Important functionality might not be entirely working.
[ 1210.698731][ T9764] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[ 1210.739380][ T9764] pvrusb2: **********
[ 1210.833749][ T2344] pvrusb2: Invalid write control endpoint
[ 1211.041479][ T2344] pvrusb2: Invalid write control endpoint
[ 1211.070017][T25399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1211.103585][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[ 1211.123625][T25399] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1211.142624][  T979] usb 2-1: USB disconnect, device number 72
[ 1211.156413][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[ 1211.177056][T25443] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3812'.
[ 1211.187058][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[ 1211.233589][ T2344] pvrusb2: Device being rendered inoperable
[ 1211.258958][ T2344] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[ 1211.275967][ T2344] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_g)
[ 1211.296135][ T2344] pvrusb2: Attached sub-driver cx25840
[ 1211.330287][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[ 1211.362904][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[ 1212.474030][T25503] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3820'.
[ 1212.992007][T25523] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1212.992007][T25523]    program syz.1.3819 not setting count and/or reply_len properly
[ 1213.213678][ T5977] usb 10-1: new high-speed USB device number 36 using dummy_hcd
[ 1213.417162][ T5977] usb 10-1: Using ep0 maxpacket: 16
[ 1213.478566][ T5977] usb 10-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 1213.493830][T25536] fuse: Unknown parameter 'group_id00000000000000000000'
[ 1213.540834][ T5977] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1213.575299][ T5977] usb 10-1: Product: syz
[ 1213.590199][ T5977] usb 10-1: Manufacturer: syz
[ 1213.633929][ T5977] usb 10-1: SerialNumber: syz
[ 1213.666922][ T5977] r8152-cfgselector 10-1: Unknown version 0x0000
[ 1213.690230][ T5977] r8152-cfgselector 10-1: config 0 descriptor??
[ 1214.853810][ T9764] usb 7-1: new high-speed USB device number 42 using dummy_hcd
[ 1215.033690][ T9764] usb 7-1: Using ep0 maxpacket: 8
[ 1215.079221][ T9764] usb 7-1: config 162 has an invalid interface number: 84 but max is 2
[ 1215.108191][ T9764] usb 7-1: config 162 has an invalid interface number: 3 but max is 2
[ 1215.137089][ T9764] usb 7-1: config 162 has no interface number 0
[ 1215.186785][ T9764] usb 7-1: config 162 has no interface number 1
[ 1215.247180][ T9764] usb 7-1: config 162 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1215.279889][ T9764] usb 7-1: config 162 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping
[ 1215.299832][ T9764] usb 7-1: config 162 interface 2 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86
[ 1215.346218][ T9764] usb 7-1: config 162 interface 2 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024
[ 1215.388367][ T9764] usb 7-1: config 162 interface 2 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024
[ 1215.423813][  T979] r8152-cfgselector 10-1: USB disconnect, device number 36
[ 1215.490026][ T9764] usb 7-1: config 162 interface 2 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4
[ 1215.563603][ T9764] usb 7-1: config 162 interface 84 has no altsetting 0
[ 1215.573680][ T9764] usb 7-1: config 162 interface 2 has no altsetting 0
[ 1215.580478][ T9764] usb 7-1: config 162 interface 3 has no altsetting 0
[ 1215.671222][ T9764] usb 7-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23
[ 1215.694149][ T9764] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1215.742985][ T9764] usb 7-1: Product: syz
[ 1215.759705][ T9764] usb 7-1: Manufacturer: syz
[ 1215.773952][ T9764] usb 7-1: SerialNumber: syz
[ 1216.071370][T25594] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1216.071370][T25594]    program syz.2.3827 not setting count and/or reply_len properly
[ 1217.152022][T13288] Bluetooth: hci6: Opcode 0x0c03 failed: -71
[ 1217.188485][ T9764] usb 7-1: USB disconnect, device number 42
[ 1217.576922][T25632] fuse: Bad value for 'fd'
[ 1217.635822][T25625] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1217.635822][T25625]    program syz.1.3829 not setting count and/or reply_len properly
[ 1218.189529][T25651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1218.248167][T25651] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1218.813955][T25657] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1218.813955][T25657]    program syz.6.3832 not setting count and/or reply_len properly
[ 1219.577692][T25662] TCP: TCP_TX_DELAY enabled
[ 1219.667995][T25674] fuse: Bad value for 'user_id'
[ 1219.672911][T25674] fuse: Bad value for 'user_id'
[ 1220.718816][T25698] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1220.718816][T25698]    program syz.7.3834 not setting count and/or reply_len properly
[ 1220.862390][T25704] lo: entered promiscuous mode
[ 1220.882693][T25704] tunl0: entered promiscuous mode
[ 1220.891013][T25704] gre0: entered promiscuous mode
[ 1220.925134][T25704] gretap0: entered promiscuous mode
[ 1220.957798][T25704] erspan0: entered promiscuous mode
[ 1220.969082][T25707] netlink: 100 bytes leftover after parsing attributes in process `syz.6.3839'.
[ 1220.996910][T25707] netlink: 100 bytes leftover after parsing attributes in process `syz.6.3839'.
[ 1221.008173][T25704] ip_vti0: entered promiscuous mode
[ 1221.029145][T25704] ip6_vti0: entered promiscuous mode
[ 1221.052911][T25704] sit0: entered promiscuous mode
[ 1221.080881][T25704] ip6tnl0: entered promiscuous mode
[ 1221.095083][T25704] ip6gre0: entered promiscuous mode
[ 1221.122258][T25704] syz_tun: entered promiscuous mode
[ 1221.149198][T25704] ip6gretap0: entered promiscuous mode
[ 1221.153626][  T979] usb 2-1: new full-speed USB device number 73 using dummy_hcd
[ 1221.210463][T25704] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1221.226140][T25704] bridge0: entered promiscuous mode
[ 1221.267288][T25704] bond0: entered promiscuous mode
[ 1221.272578][T25704] bond_slave_0: entered promiscuous mode
[ 1221.280835][T25704] bond_slave_1: entered promiscuous mode
[ 1221.297283][T25704] mac80211_hwsim hwsim22 wlan1: entered promiscuous mode
[ 1221.336248][  T979] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[ 1221.337040][T25704] team0: entered promiscuous mode
[ 1221.361435][T25704] team_slave_0: entered promiscuous mode
[ 1221.368076][T25704] team_slave_1: entered promiscuous mode
[ 1221.381641][  T979] usb 2-1: config 0 has no interface number 0
[ 1221.382714][T25704] dummy0: entered promiscuous mode
[ 1221.402741][T25704] nlmon0: entered promiscuous mode
[ 1221.408383][  T979] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[ 1221.419978][T25704] caif0: entered promiscuous mode
[ 1221.432374][  T979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1221.439243][T25704] batadv0: entered promiscuous mode
[ 1221.471096][  T979] usb 2-1: config 0 descriptor??
[ 1221.491985][T25704] veth0: entered promiscuous mode
[ 1221.508802][T25704] veth1: entered promiscuous mode
[ 1221.519923][  T979] usb 2-1: selecting invalid altsetting 1
[ 1221.527186][  T979] dvb_ttusb_budget: ttusb_init_controller: error
[ 1221.537386][T25704] wg0: entered promiscuous mode
[ 1221.550455][  T979] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[ 1221.559603][T25704] wg1: entered promiscuous mode
[ 1221.605317][T25704] wg2: entered promiscuous mode
[ 1221.623263][T25704] veth0_to_bridge: entered promiscuous mode
[ 1221.757781][T25704] veth1_to_bridge: entered promiscuous mode
[ 1221.779557][T25704] veth0_to_bond: entered promiscuous mode
[ 1221.820242][T25704] veth1_to_bond: entered promiscuous mode
[ 1221.839450][  T979] DVB: Unable to find symbol cx22700_attach()
[ 1221.846219][T25704] veth0_to_team: entered promiscuous mode
[ 1221.858732][T25704] veth1_to_team: entered promiscuous mode
[ 1221.874335][T25704] veth0_to_batadv: entered promiscuous mode
[ 1221.891896][T25704] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1221.912117][T25704] batadv_slave_0: entered promiscuous mode
[ 1221.976928][T25735] input: syz0 as /devices/virtual/input/input28
[ 1221.986213][T25704] veth1_to_batadv: entered promiscuous mode
[ 1222.003406][T25736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1222.023299][T25704] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1222.059237][  T979] DVB: Unable to find symbol tda10046_attach()
[ 1222.069461][T25704] batadv_slave_1: entered promiscuous mode
[ 1222.081978][  T979] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[ 1222.099004][T25736] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1222.117109][T25704] xfrm0: entered promiscuous mode
[ 1222.190303][T25704] veth0_to_hsr: entered promiscuous mode
[ 1222.232737][T25704] veth1_to_hsr: entered promiscuous mode
[ 1222.255052][T25704] hsr0: entered promiscuous mode
[ 1222.272274][T25704] veth1_virt_wifi: entered promiscuous mode
[ 1222.300900][T25704] veth0_virt_wifi: entered promiscuous mode
[ 1222.315706][T25704] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[ 1222.381554][T25704] @: entered promiscuous mode
[ 1222.387100][T25704] vlan1: entered promiscuous mode
[ 1222.395283][T25704] macvlan0: entered promiscuous mode
[ 1222.417707][T25704] macvlan1: entered promiscuous mode
[ 1222.435850][T25704] ipvlan0: entered promiscuous mode
[ 1222.442767][T25704] ipvlan1: entered promiscuous mode
[ 1222.471267][T25704] macvtap0: entered promiscuous mode
[ 1222.492580][T25704] macsec0: entered promiscuous mode
[ 1222.508574][T25704] geneve0: entered promiscuous mode
[ 1222.523377][T25704] geneve1: entered promiscuous mode
[ 1222.574927][T25704] netdevsim netdevsim6 netdevsim0: entered promiscuous mode
[ 1222.594326][T25704] netdevsim netdevsim6 netdevsim1: entered promiscuous mode
[ 1222.609961][T25704] netdevsim netdevsim6 netdevsim2: entered promiscuous mode
[ 1222.641765][T25704] netdevsim netdevsim6 netdevsim3: entered promiscuous mode
[ 1222.659004][T25704] mac80211_hwsim hwsim21 wlan0: entered promiscuous mode
[ 1222.730585][T25704] veth2: entered promiscuous mode
[ 1222.751456][T25704] veth3: entered promiscuous mode
[ 1222.771450][T25704] syztnl2: entered promiscuous mode
[ 1222.799825][T25704] gtp0: entered promiscuous mode
[ 1222.811686][T25704] gtp1: entered promiscuous mode
[ 1222.827917][T25704] gtp2: entered promiscuous mode
[ 1222.841104][T25704] gtp3: entered promiscuous mode
[ 1222.854502][T25704] gtp4: entered promiscuous mode
[ 1222.871830][T25704] vxlan0: entered promiscuous mode
[ 1222.881313][T25704] dvmrp1: entered promiscuous mode
[ 1222.901247][T25704] bond1: entered promiscuous mode
[ 1222.909740][T25704] gtp5: entered promiscuous mode
[ 1222.923330][T25704] mac80211_hwsim hwsim36 wlan2: entered promiscuous mode
[ 1222.946298][T25704] gtp6: entered promiscuous mode
[ 1222.963202][T25704] gtp7: entered promiscuous mode
[ 1222.969636][T25704] gtp8: entered promiscuous mode
[ 1222.977366][T25704] gtp9: entered promiscuous mode
[ 1222.986309][T13953] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1222.995553][T13953] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1223.015770][T13953] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1223.075994][T13953] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1223.931881][ T9764] usb 2-1: USB disconnect, device number 73
[ 1224.781326][T25795] fuse: Bad value for 'user_id'
[ 1224.788944][T25795] fuse: Bad value for 'user_id'
[ 1226.441002][T25825] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1226.441002][T25825]    program syz.9.3853 not setting count and/or reply_len properly
[ 1226.926832][ T9764] usb 7-1: new high-speed USB device number 43 using dummy_hcd
[ 1227.105126][ T9764] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1227.170854][ T9764] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[ 1227.262537][ T9764] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1227.280607][T25853] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1227.280607][T25853]    program syz.2.3857 not setting count and/or reply_len properly
[ 1227.302297][ T9764] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1227.323366][ T9764] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1227.346146][ T9764] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1227.369907][ T9764] usb 7-1: config 0 descriptor??
[ 1227.401753][T25843] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[ 1227.823888][ T9764] plantronics 0003:047F:FFFF.004C: reserved main item tag 0xd
[ 1227.831427][ T9764] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0
[ 1227.863664][T15123] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[ 1227.924103][ T9764] plantronics 0003:047F:FFFF.004C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[ 1228.033636][T15123] usb 2-1: Using ep0 maxpacket: 32
[ 1228.041068][T15123] usb 2-1: config 0 has an invalid interface number: 219 but max is 0
[ 1228.075500][T15123] usb 2-1: config 0 has no interface number 0
[ 1228.096207][T15123] usb 2-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1228.126349][T15123] usb 2-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[ 1228.164558][T15123] usb 2-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024
[ 1228.207132][  T979] usb 7-1: USB disconnect, device number 43
[ 1228.256696][T15123] usb 2-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[ 1228.286891][T15123] usb 2-1: config 0 interface 219 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1228.308979][T15123] usb 2-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9
[ 1228.321894][T25896] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1228.321894][T25896]    program syz.9.3859 not setting count and/or reply_len properly
[ 1228.328479][T15123] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1228.447759][T15123] usb 2-1: Product: syz
[ 1228.468748][T15123] usb 2-1: Manufacturer: syz
[ 1228.497624][T15123] usb 2-1: SerialNumber: syz
[ 1228.529603][T15123] usb 2-1: config 0 descriptor??
[ 1228.539105][T25861] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22
[ 1228.700087][T25905] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3861'.
[ 1228.788534][T15123] etas_es58x 2-1:0.219: Starting syz syz (Serial Number syz)
[ 1228.841389][T15123] usb 2-1: USB disconnect, device number 74
[ 1230.044809][T25956] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1230.044809][T25956]    program syz.7.3863 not setting count and/or reply_len properly
[ 1230.185259][T25962] FAULT_INJECTION: forcing a failure.
[ 1230.185259][T25962] name failslab, interval 1, probability 0, space 0, times 0
[ 1230.216098][T25962] CPU: 0 UID: 0 PID: 25962 Comm: syz.1.3866 Not tainted syzkaller #0 PREEMPT(full) 
[ 1230.216122][T25962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1230.216130][T25962] Call Trace:
[ 1230.216136][T25962]  <TASK>
[ 1230.216141][T25962]  dump_stack_lvl+0x189/0x250
[ 1230.216161][T25962]  ? __pfx____ratelimit+0x10/0x10
[ 1230.216177][T25962]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1230.216189][T25962]  ? __pfx__printk+0x10/0x10
[ 1230.216207][T25962]  ? __pfx___might_resched+0x10/0x10
[ 1230.216217][T25962]  ? fs_reclaim_acquire+0x7d/0x100
[ 1230.216248][T25962]  should_fail_ex+0x414/0x560
[ 1230.216278][T25962]  should_failslab+0xa8/0x100
[ 1230.216306][T25962]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[ 1230.216332][T25962]  ? __alloc_skb+0x112/0x2d0
[ 1230.216360][T25962]  __alloc_skb+0x112/0x2d0
[ 1230.216378][T25962]  sock_wmalloc+0xb2/0x130
[ 1230.216391][T25962]  packet_sendmsg_spkt+0x538/0x11c0
[ 1230.216413][T25962]  ? packet_sendmsg_spkt+0x20d/0x11c0
[ 1230.216433][T25962]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1230.216449][T25962]  ? __pfx_packet_sendmsg_spkt+0x10/0x10
[ 1230.216464][T25962]  ? __import_iovec+0x40e/0x7f0
[ 1230.216476][T25962]  ? aa_sock_msg_perm+0xf1/0x1d0
[ 1230.216486][T25962]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1230.216497][T25962]  ? __pfx_packet_sendmsg_spkt+0x10/0x10
[ 1230.216512][T25962]  __sock_sendmsg+0x21c/0x270
[ 1230.216527][T25962]  ____sys_sendmsg+0x505/0x830
[ 1230.216542][T25962]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1230.216561][T25962]  ___sys_sendmsg+0x21f/0x2a0
[ 1230.216573][T25962]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1230.216602][T25962]  ? __fget_files+0x2a/0x420
[ 1230.216617][T25962]  ? __fget_files+0x3a0/0x420
[ 1230.216637][T25962]  __sys_sendmsg+0x164/0x220
[ 1230.216648][T25962]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1230.216667][T25962]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1230.216684][T25962]  __do_fast_syscall_32+0xb6/0x2b0
[ 1230.216700][T25962]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1230.216716][T25962]  do_fast_syscall_32+0x34/0x80
[ 1230.216731][T25962]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1230.216744][T25962] RIP: 0023:0xf7fc2539
[ 1230.216755][T25962] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1230.216765][T25962] RSP: 002b:00000000f54e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 1230.216778][T25962] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140
[ 1230.216785][T25962] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1230.216791][T25962] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1230.216798][T25962] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1230.216804][T25962] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1230.216818][T25962]  </TASK>
[ 1230.993602][  T979] usb 2-1: new high-speed USB device number 75 using dummy_hcd
[ 1231.121250][T25976] fuse: Bad value for 'user_id'
[ 1231.131961][T25976] fuse: Bad value for 'user_id'
[ 1231.166829][  T979] usb 2-1: Using ep0 maxpacket: 8
[ 1231.217544][  T979] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[ 1231.227653][T25979] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3869'.
[ 1231.246109][  T979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1231.350080][  T979] pvrusb2: Hardware description: Terratec Grabster AV400
[ 1231.361380][  T979] pvrusb2: **********
[ 1231.385713][  T979] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[ 1231.416797][  T979] pvrusb2: Important functionality might not be entirely working.
[ 1231.458086][  T979] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[ 1231.515147][  T979] pvrusb2: **********
[ 1231.570288][ T2344] pvrusb2: Invalid write control endpoint
[ 1231.597961][T25991] FAULT_INJECTION: forcing a failure.
[ 1231.597961][T25991] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1231.701164][T25991] CPU: 0 UID: 0 PID: 25991 Comm: syz.7.3870 Not tainted syzkaller #0 PREEMPT(full) 
[ 1231.701192][T25991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1231.701204][T25991] Call Trace:
[ 1231.701212][T25991]  <TASK>
[ 1231.701228][T25991]  dump_stack_lvl+0x189/0x250
[ 1231.701256][T25991]  ? __pfx____ratelimit+0x10/0x10
[ 1231.701286][T25991]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1231.701311][T25991]  ? __pfx__printk+0x10/0x10
[ 1231.701348][T25991]  should_fail_ex+0x414/0x560
[ 1231.701379][T25991]  _copy_from_user+0x2d/0xb0
[ 1231.701404][T25991]  get_user_ifreq+0xa4/0x180
[ 1231.701432][T25991]  sock_ioctl+0x6dd/0x790
[ 1231.701459][T25991]  ? __pfx_sock_ioctl+0x10/0x10
[ 1231.701501][T25991]  compat_sock_ioctl+0x285/0xc80
[ 1231.701529][T25991]  ? __pfx_compat_sock_ioctl+0x10/0x10
[ 1231.701556][T25991]  ? __fget_files+0x3a0/0x420
[ 1231.701585][T25991]  ? __fget_files+0x2a/0x420
[ 1231.701619][T25991]  ? bpf_lsm_file_ioctl_compat+0x9/0x20
[ 1231.701648][T25991]  __ia32_compat_sys_ioctl+0x543/0x840
[ 1231.701677][T25991]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[ 1231.701702][T25991]  ? __fget_files+0x3a0/0x420
[ 1231.701739][T25991]  ? fput+0xa0/0xd0
[ 1231.701761][T25991]  ? ksys_write+0x22a/0x250
[ 1231.701797][T25991]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1231.701829][T25991]  __do_fast_syscall_32+0xb6/0x2b0
[ 1231.701859][T25991]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1231.701890][T25991]  do_fast_syscall_32+0x34/0x80
[ 1231.701921][T25991]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1231.701945][T25991] RIP: 0023:0xf711e539
[ 1231.701962][T25991] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1231.701980][T25991] RSP: 002b:00000000f550e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[ 1231.702001][T25991] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000089f0
[ 1231.702016][T25991] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000
[ 1231.702030][T25991] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1231.702042][T25991] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1231.702054][T25991] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1231.702084][T25991]  </TASK>
[ 1232.166472][T25966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1232.231789][T25966] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1232.278137][ T2344] pvrusb2: Invalid write control endpoint
[ 1232.312360][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[ 1232.353446][  T979] usb 2-1: USB disconnect, device number 75
[ 1232.386179][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[ 1232.403545][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[ 1232.434333][ T2344] pvrusb2: Device being rendered inoperable
[ 1232.443887][ T2344] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[ 1232.471461][ T2344] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_g)
[ 1232.504763][ T2344] pvrusb2: Attached sub-driver cx25840
[ 1232.542395][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[ 1232.599637][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[ 1233.243985][T26041] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1233.243985][T26041]    program syz.9.3874 not setting count and/or reply_len properly
[ 1233.539973][T26040] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1233.539973][T26040]    program syz.1.3877 not setting count and/or reply_len properly
[ 1233.584153][T26046] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1233.584153][T26046]    program syz.6.3875 not setting count and/or reply_len properly
[ 1234.851186][T26077] FAULT_INJECTION: forcing a failure.
[ 1234.851186][T26077] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1234.878208][T26077] CPU: 1 UID: 0 PID: 26077 Comm: syz.2.3883 Not tainted syzkaller #0 PREEMPT(full) 
[ 1234.878241][T26077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1234.878254][T26077] Call Trace:
[ 1234.878262][T26077]  <TASK>
[ 1234.878272][T26077]  dump_stack_lvl+0x189/0x250
[ 1234.878302][T26077]  ? __pfx____ratelimit+0x10/0x10
[ 1234.878330][T26077]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1234.878354][T26077]  ? __pfx__printk+0x10/0x10
[ 1234.878380][T26077]  ? __might_fault+0xb0/0x130
[ 1234.878419][T26077]  should_fail_ex+0x414/0x560
[ 1234.878451][T26077]  _copy_from_user+0x2d/0xb0
[ 1234.878476][T26077]  cec_ioctl+0x983/0x2f20
[ 1234.878512][T26077]  ? __pfx_cec_ioctl+0x10/0x10
[ 1234.878553][T26077]  ? kasan_quarantine_put+0xdd/0x220
[ 1234.878587][T26077]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1234.878615][T26077]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1234.878645][T26077]  ? do_vfs_ioctl+0xbe8/0x1430
[ 1234.878669][T26077]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1234.878728][T26077]  ? __fget_files+0x2a/0x420
[ 1234.878768][T26077]  ? __fget_files+0x3a0/0x420
[ 1234.878793][T26077]  ? __fget_files+0x2a/0x420
[ 1234.878824][T26077]  ? bpf_lsm_file_ioctl_compat+0x9/0x20
[ 1234.878851][T26077]  __ia32_compat_sys_ioctl+0x543/0x840
[ 1234.878877][T26077]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[ 1234.878901][T26077]  ? __fget_files+0x3a0/0x420
[ 1234.878933][T26077]  ? fput+0xa0/0xd0
[ 1234.878952][T26077]  ? ksys_write+0x22a/0x250
[ 1234.878986][T26077]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1234.879016][T26077]  __do_fast_syscall_32+0xb6/0x2b0
[ 1234.879045][T26077]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1234.879073][T26077]  do_fast_syscall_32+0x34/0x80
[ 1234.879100][T26077]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1234.879123][T26077] RIP: 0023:0xf70de539
[ 1234.879140][T26077] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1234.879156][T26077] RSP: 002b:00000000f54ce55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[ 1234.879178][T26077] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c05c6104
[ 1234.879192][T26077] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000
[ 1234.879205][T26077] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1234.879217][T26077] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1234.879229][T26077] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1234.879256][T26077]  </TASK>
[ 1235.199490][   T30] kauditd_printk_skb: 18 callbacks suppressed
[ 1235.199507][   T30] audit: type=1326 audit(1755901225.157:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26078 comm="syz.6.3882" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8539 code=0x7ffc0000
[ 1235.263770][T15364] usb 10-1: new high-speed USB device number 37 using dummy_hcd
[ 1235.296537][   T30] audit: type=1326 audit(1755901225.167:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26078 comm="syz.6.3882" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf7fa8539 code=0x7ffc0000
[ 1235.319415][   T30] audit: type=1326 audit(1755901225.167:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26078 comm="syz.6.3882" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8539 code=0x7ffc0000
[ 1235.371944][   T30] audit: type=1326 audit(1755901225.167:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26078 comm="syz.6.3882" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8539 code=0x7ffc0000
[ 1235.401686][   T30] audit: type=1326 audit(1755901225.217:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26078 comm="syz.6.3882" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fa8539 code=0x7ffc0000
[ 1235.443572][T15364] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1235.468756][T15364] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[ 1235.493551][   T30] audit: type=1326 audit(1755901225.217:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26078 comm="syz.6.3882" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8539 code=0x7ffc0000
[ 1235.515751][T15364] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1235.527481][T15364] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1235.550989][T26098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3884'.
[ 1235.560269][   T30] audit: type=1326 audit(1755901225.217:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26078 comm="syz.6.3882" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8539 code=0x7ffc0000
[ 1235.582633][T15364] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1235.629942][T15364] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1235.689015][   T30] audit: type=1326 audit(1755901225.217:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26078 comm="syz.6.3882" exe="/root/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf7fa8539 code=0x7ffc0000
[ 1235.715894][T26100] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1235.715894][T26100]    program syz.1.3878 not setting count and/or reply_len properly
[ 1235.739730][T15364] usb 10-1: config 0 descriptor??
[ 1235.807141][T26081] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22
[ 1235.882773][   T30] audit: type=1326 audit(1755901225.217:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26078 comm="syz.6.3882" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8539 code=0x7ffc0000
[ 1236.010427][   T30] audit: type=1326 audit(1755901225.217:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26078 comm="syz.6.3882" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8539 code=0x7ffc0000
[ 1236.272978][T15364] plantronics 0003:047F:FFFF.004D: reserved main item tag 0xd
[ 1236.280679][T15364] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0
[ 1236.363471][T15364] plantronics 0003:047F:FFFF.004D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0
[ 1236.543035][T15364] usb 10-1: USB disconnect, device number 37
[ 1236.676289][T26118] fido_id[26118]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory
[ 1237.611463][T26160] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1237.611463][T26160]    program syz.9.3890 not setting count and/or reply_len properly
[ 1238.676804][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 1238.683144][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 1238.809474][T26191] FAULT_INJECTION: forcing a failure.
[ 1238.809474][T26191] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1238.840768][T26191] CPU: 1 UID: 0 PID: 26191 Comm: syz.9.3895 Not tainted syzkaller #0 PREEMPT(full) 
[ 1238.840786][T26191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1238.840793][T26191] Call Trace:
[ 1238.840798][T26191]  <TASK>
[ 1238.840804][T26191]  dump_stack_lvl+0x189/0x250
[ 1238.840821][T26191]  ? __pfx____ratelimit+0x10/0x10
[ 1238.840837][T26191]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1238.840849][T26191]  ? __pfx__printk+0x10/0x10
[ 1238.840864][T26191]  ? __might_fault+0xb0/0x130
[ 1238.840885][T26191]  should_fail_ex+0x414/0x560
[ 1238.840902][T26191]  _copy_from_user+0x2d/0xb0
[ 1238.840915][T26191]  sk_setsockopt+0x24b/0x2dc0
[ 1238.840936][T26191]  ? __pfx_sk_setsockopt+0x10/0x10
[ 1238.840952][T26191]  ? __lock_acquire+0xab9/0xd20
[ 1238.840970][T26191]  ? aa_sk_perm+0x81e/0x950
[ 1238.840988][T26191]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1238.841003][T26191]  ? aa_sock_opt_perm+0xff/0x1b0
[ 1238.841015][T26191]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[ 1238.841029][T26191]  do_sock_setsockopt+0x11b/0x1b0
[ 1238.841042][T26191]  __ia32_sys_setsockopt+0x13f/0x1b0
[ 1238.841056][T26191]  __do_fast_syscall_32+0xb6/0x2b0
[ 1238.841072][T26191]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1238.841088][T26191]  do_fast_syscall_32+0x34/0x80
[ 1238.841103][T26191]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1238.841116][T26191] RIP: 0023:0xf710e539
[ 1238.841127][T26191] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1238.841137][T26191] RSP: 002b:00000000f54fe55c EFLAGS: 00000206 ORIG_RAX: 000000000000016e
[ 1238.841149][T26191] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000001
[ 1238.841156][T26191] RDX: 0000000000000019 RSI: 0000000080000000 RDI: 0000000000000010
[ 1238.841163][T26191] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1238.841169][T26191] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1238.841175][T26191] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1238.841190][T26191]  </TASK>
[ 1239.315906][T26197] fuse: Bad value for 'fd'
[ 1239.583640][T15364] usb 10-1: new low-speed USB device number 38 using dummy_hcd
[ 1239.647054][T26205] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1239.647054][T26205]    program syz.6.3894 not setting count and/or reply_len properly
[ 1239.835137][T15364] usb 10-1: config 0 has an invalid interface number: 1 but max is 0
[ 1239.853890][T15364] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1239.973627][T15364] usb 10-1: config 0 has no interface number 0
[ 1239.999728][T15364] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1240.020077][T15364] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1240.032033][T15364] usb 10-1: config 0 descriptor??
[ 1240.043552][T15364] iowarrior 10-1:0.1: no interrupt-in endpoint found
[ 1240.251826][T26201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1240.283081][T26201] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1240.318645][ T9764] usb 10-1: USB disconnect, device number 38
[ 1241.699602][T26245] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1241.699602][T26245]    program syz.9.3902 not setting count and/or reply_len properly
[ 1241.900990][T26270] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3908'.
[ 1242.281080][T26291] fuse: Bad value for 'user_id'
[ 1242.296878][T26291] fuse: Bad value for 'user_id'
[ 1243.021139][T26295] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1243.021139][T26295]    program syz.2.3911 not setting count and/or reply_len properly
[ 1243.773588][T15364] usb 10-1: new high-speed USB device number 39 using dummy_hcd
[ 1243.923761][T15364] usb 10-1: Using ep0 maxpacket: 8
[ 1243.940678][T15364] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1243.959626][T15364] usb 10-1: config 248 has an invalid interface number: 51 but max is 0
[ 1244.078128][T15364] usb 10-1: config 248 has no interface number 0
[ 1244.099833][T15364] usb 10-1: New USB device found, idVendor=05ac, idProduct=0249, bcdDevice=39.f0
[ 1244.113349][T15364] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1244.147064][T15364] usb 10-1: Product: syz
[ 1244.167456][T15364] usb 10-1: Manufacturer: syz
[ 1244.253631][T15364] usb 10-1: SerialNumber: syz
[ 1244.575972][T15364] input: bcm5974 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:248.51/input/input29
[ 1244.605952][ T5219] bcm5974 10-1:248.51: could not read from device
[ 1244.623847][ T5219] bcm5974 10-1:248.51: could not read from device
[ 1244.662242][T15364] usb 10-1: USB disconnect, device number 39
[ 1245.702765][T26370] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3923'.
[ 1246.482117][T26390] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3925'.
[ 1246.510077][T26383] bond1: entered allmulticast mode
[ 1246.525766][T26383] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1246.545366][T26383] bridge0: port 3(bond1) entered blocking state
[ 1246.554132][T26383] bridge0: port 3(bond1) entered disabled state
[ 1246.577880][T26383] bond1: entered promiscuous mode
[ 1246.596799][T26383] bridge0: port 3(bond1) entered blocking state
[ 1246.603146][T26383] bridge0: port 3(bond1) entered forwarding state
[ 1246.685122][   T36] bridge0: port 3(bond1) entered disabled state
[ 1247.305297][T26446] netlink: 'syz.7.3932': attribute type 6 has an invalid length.
[ 1247.350364][T26447] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1247.350364][T26447]    program syz.9.3928 not setting count and/or reply_len properly
[ 1247.823922][T15364] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[ 1248.309463][T15364] usb 2-1: Using ep0 maxpacket: 8
[ 1248.326649][T15364] usb 2-1: config 0 has an invalid interface number: 172 but max is 0
[ 1248.334974][T15364] usb 2-1: config 0 has no interface number 0
[ 1248.613330][T15364] usb 2-1: config 0 interface 172 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1248.649558][T15364] usb 2-1: config 0 interface 172 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[ 1248.733728][T15364] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52
[ 1248.752374][T15364] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1248.834013][T15364] usb 2-1: Product: syz
[ 1248.838224][T15364] usb 2-1: Manufacturer: syz
[ 1248.921969][T15364] usb 2-1: SerialNumber: syz
[ 1248.995640][T15364] usb 2-1: config 0 descriptor??
[ 1249.408955][T26439] netlink: 'syz.1.3927': attribute type 21 has an invalid length.
[ 1249.453886][T26439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3927'.
[ 1249.962762][T26757] bond4: entered allmulticast mode
[ 1250.030788][T26757] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1250.174051][T26797] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1250.174051][T26797]    program syz.6.3935 not setting count and/or reply_len properly
[ 1251.601703][T26820] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3946'.
[ 1251.668211][T15364] usb 2-1: USB disconnect, device number 76
[ 1252.340331][T26844] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1252.340331][T26844]    program syz.6.3948 not setting count and/or reply_len properly
[ 1252.476225][T26846] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1252.476225][T26846]    program syz.1.3949 not setting count and/or reply_len properly
[ 1252.922314][T26865] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1254.266613][   T30] kauditd_printk_skb: 30 callbacks suppressed
[ 1254.266631][   T30] audit: type=1326 audit(1755901244.237:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26884 comm="syz.7.3955" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000
[ 1254.364343][   T30] audit: type=1326 audit(1755901244.237:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26884 comm="syz.7.3955" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000
[ 1254.429737][   T30] audit: type=1326 audit(1755901244.237:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26884 comm="syz.7.3955" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf711e539 code=0x7ffc0000
[ 1254.473467][T26897] FAULT_INJECTION: forcing a failure.
[ 1254.473467][T26897] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1254.495442][T26897] CPU: 1 UID: 0 PID: 26897 Comm: syz.1.3957 Not tainted syzkaller #0 PREEMPT(full) 
[ 1254.495464][T26897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1254.495475][T26897] Call Trace:
[ 1254.495482][T26897]  <TASK>
[ 1254.495490][T26897]  dump_stack_lvl+0x189/0x250
[ 1254.495518][T26897]  ? __pfx____ratelimit+0x10/0x10
[ 1254.495544][T26897]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1254.495567][T26897]  ? __pfx__printk+0x10/0x10
[ 1254.495594][T26897]  ? __might_fault+0xb0/0x130
[ 1254.495639][T26897]  should_fail_ex+0x414/0x560
[ 1254.495671][T26897]  _copy_from_user+0x2d/0xb0
[ 1254.495695][T26897]  binder_ioctl_write_read+0x124/0xa040
[ 1254.495729][T26897]  ? is_bpf_text_address+0x292/0x2b0
[ 1254.495758][T26897]  ? is_bpf_text_address+0x26/0x2b0
[ 1254.495789][T26897]  ? kernel_text_address+0xa5/0xe0
[ 1254.495818][T26897]  ? __kernel_text_address+0xd/0x40
[ 1254.495845][T26897]  ? unwind_get_return_address+0x4d/0x90
[ 1254.495868][T26897]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1254.495892][T26897]  ? arch_stack_walk+0xfc/0x150
[ 1254.495928][T26897]  ? __pfx_binder_ioctl_write_read+0x10/0x10
[ 1254.495947][T26897]  ? stack_trace_save+0x9c/0xe0
[ 1254.495970][T26897]  ? __pfx_stack_trace_save+0x10/0x10
[ 1254.495995][T26897]  ? stack_depot_save_flags+0x40/0x860
[ 1254.496030][T26897]  ? kasan_save_track+0x4f/0x80
[ 1254.496051][T26897]  ? kasan_save_track+0x3e/0x80
[ 1254.496073][T26897]  ? kasan_save_free_info+0x46/0x50
[ 1254.496092][T26897]  ? __kasan_slab_free+0x5b/0x80
[ 1254.496115][T26897]  ? kfree+0x18e/0x440
[ 1254.496136][T26897]  ? tomoyo_path_number_perm+0x47a/0x5a0
[ 1254.496162][T26897]  ? security_file_ioctl_compat+0xcb/0x2d0
[ 1254.496187][T26897]  ? __ia32_compat_sys_ioctl+0x128/0x840
[ 1254.496210][T26897]  ? __do_fast_syscall_32+0xb6/0x2b0
[ 1254.496239][T26897]  ? do_fast_syscall_32+0x34/0x80
[ 1254.496266][T26897]  ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1254.496300][T26897]  ? __lock_acquire+0xab9/0xd20
[ 1254.496328][T26897]  ? binder_debug+0x13f/0x1b0
[ 1254.496353][T26897]  ? __pfx_binder_debug+0x10/0x10
[ 1254.496369][T26897]  ? do_raw_spin_lock+0x121/0x290
[ 1254.496410][T26897]  ? _raw_spin_unlock+0x28/0x50
[ 1254.496434][T26897]  ? binder_get_thread+0x178/0x6d0
[ 1254.496459][T26897]  binder_ioctl+0x3e0/0x19c0
[ 1254.496480][T26897]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1254.496509][T26897]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1254.496540][T26897]  ? do_vfs_ioctl+0xbe8/0x1430
[ 1254.496563][T26897]  ? __pfx_binder_ioctl+0x10/0x10
[ 1254.496584][T26897]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1254.496630][T26897]  ? __lock_acquire+0xab9/0xd20
[ 1254.496678][T26897]  ? __fget_files+0x2a/0x420
[ 1254.496712][T26897]  ? __fget_files+0x3a0/0x420
[ 1254.496740][T26897]  ? __fget_files+0x2a/0x420
[ 1254.496772][T26897]  ? bpf_lsm_file_ioctl_compat+0x9/0x20
[ 1254.496802][T26897]  __ia32_compat_sys_ioctl+0x543/0x840
[ 1254.496830][T26897]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[ 1254.496856][T26897]  ? __fget_files+0x3a0/0x420
[ 1254.496891][T26897]  ? fput+0xa0/0xd0
[ 1254.496912][T26897]  ? ksys_write+0x22a/0x250
[ 1254.496947][T26897]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1254.496978][T26897]  __do_fast_syscall_32+0xb6/0x2b0
[ 1254.497012][T26897]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1254.497043][T26897]  do_fast_syscall_32+0x34/0x80
[ 1254.497073][T26897]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1254.497097][T26897] RIP: 0023:0xf7fc2539
[ 1254.497115][T26897] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1254.497135][T26897] RSP: 002b:00000000f54e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[ 1254.497156][T26897] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0306201
[ 1254.497171][T26897] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000
[ 1254.497184][T26897] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1254.497196][T26897] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1254.497209][T26897] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1254.497238][T26897]  </TASK>
[ 1254.906486][T26897] binder: 26896:26897 ioctl c0306201 800001c0 returned -14
[ 1254.913732][   T30] audit: type=1326 audit(1755901244.237:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26884 comm="syz.7.3955" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000
[ 1254.913782][   T30] audit: type=1326 audit(1755901244.237:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26884 comm="syz.7.3955" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000
[ 1255.062086][   T30] audit: type=1326 audit(1755901244.277:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26884 comm="syz.7.3955" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf711e539 code=0x7ffc0000
[ 1255.084654][T15364] usb 7-1: new high-speed USB device number 44 using dummy_hcd
[ 1255.102506][   T30] audit: type=1326 audit(1755901244.277:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26884 comm="syz.7.3955" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000
[ 1255.131420][T26903] FAULT_INJECTION: forcing a failure.
[ 1255.131420][T26903] name failslab, interval 1, probability 0, space 0, times 0
[ 1255.144245][T26903] CPU: 1 UID: 0 PID: 26903 Comm: syz.1.3959 Not tainted syzkaller #0 PREEMPT(full) 
[ 1255.144270][T26903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1255.144282][T26903] Call Trace:
[ 1255.144290][T26903]  <TASK>
[ 1255.144298][T26903]  dump_stack_lvl+0x189/0x250
[ 1255.144328][T26903]  ? __pfx____ratelimit+0x10/0x10
[ 1255.144356][T26903]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1255.144380][T26903]  ? __pfx__printk+0x10/0x10
[ 1255.144420][T26903]  ? __pfx___might_resched+0x10/0x10
[ 1255.144444][T26903]  should_fail_ex+0x414/0x560
[ 1255.144475][T26903]  should_failslab+0xa8/0x100
[ 1255.144505][T26903]  __kmalloc_cache_noprof+0x70/0x3d0
[ 1255.144531][T26903]  ? sctp_association_new+0x89/0x25f0
[ 1255.144556][T26903]  sctp_association_new+0x89/0x25f0
[ 1255.144578][T26903]  ? sctp_has_association+0x1cd/0x1f0
[ 1255.144600][T26903]  ? sctp_has_association+0x2f/0x1f0
[ 1255.144632][T26903]  sctp_connect_new_asoc+0x2c5/0x690
[ 1255.144654][T26903]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[ 1255.144675][T26903]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[ 1255.144695][T26903]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[ 1255.144713][T26903]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[ 1255.144734][T26903]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[ 1255.144758][T26903]  ? security_sctp_bind_connect+0x7e/0x2e0
[ 1255.144787][T26903]  sctp_sendmsg+0x155c/0x2810
[ 1255.144828][T26903]  ? __pfx_sctp_sendmsg+0x10/0x10
[ 1255.144862][T26903]  ? aa_sk_perm+0x81e/0x950
[ 1255.144895][T26903]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1255.144927][T26903]  ? sock_rps_record_flow+0x19/0x410
[ 1255.144956][T26903]  ? inet_sendmsg+0x2f4/0x370
[ 1255.144979][T26903]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1255.145005][T26903]  __sock_sendmsg+0x19c/0x270
[ 1255.145035][T26903]  ____sys_sendmsg+0x505/0x830
[ 1255.145062][T26903]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1255.145101][T26903]  ___sys_sendmsg+0x21f/0x2a0
[ 1255.145126][T26903]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1255.145184][T26903]  ? __fget_files+0x2a/0x420
[ 1255.145213][T26903]  ? __fget_files+0x3a0/0x420
[ 1255.145253][T26903]  __sys_sendmsg+0x164/0x220
[ 1255.145278][T26903]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1255.145316][T26903]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1255.145348][T26903]  __do_fast_syscall_32+0xb6/0x2b0
[ 1255.145379][T26903]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1255.145417][T26903]  do_fast_syscall_32+0x34/0x80
[ 1255.145446][T26903]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1255.145468][T26903] RIP: 0023:0xf7fc2539
[ 1255.145485][T26903] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1255.145504][T26903] RSP: 002b:00000000f54e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 1255.145525][T26903] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000
[ 1255.145540][T26903] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1255.145552][T26903] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1255.145564][T26903] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1255.145576][T26903] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1255.145605][T26903]  </TASK>
[ 1255.459075][   T30] audit: type=1326 audit(1755901244.277:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26884 comm="syz.7.3955" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000
[ 1255.481707][   T30] audit: type=1326 audit(1755901244.277:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26884 comm="syz.7.3955" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000
[ 1255.553766][   T30] audit: type=1326 audit(1755901244.277:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26884 comm="syz.7.3955" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000
[ 1255.737352][T26907] netlink: 96 bytes leftover after parsing attributes in process `syz.9.3960'.
[ 1255.793574][T15364] usb 7-1: Using ep0 maxpacket: 32
[ 1255.809618][T15364] usb 7-1: config 0 has an invalid interface number: 219 but max is 0
[ 1255.822924][T15364] usb 7-1: config 0 has no interface number 0
[ 1255.830362][T15364] usb 7-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1255.842384][T15364] usb 7-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[ 1255.864490][T15364] usb 7-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024
[ 1255.910810][T15364] usb 7-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[ 1255.922957][T15364] usb 7-1: config 0 interface 219 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1255.964931][T15364] usb 7-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9
[ 1256.001838][T15364] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1256.011985][T15364] usb 7-1: Product: syz
[ 1256.030458][T15364] usb 7-1: Manufacturer: syz
[ 1256.043843][    T9] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[ 1256.052499][T15364] usb 7-1: SerialNumber: syz
[ 1256.090470][T15364] usb 7-1: config 0 descriptor??
[ 1256.122547][T26888] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[ 1256.193634][    T9] usb 2-1: Using ep0 maxpacket: 8
[ 1256.214067][    T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[ 1256.235008][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1256.251088][T26936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3963'.
[ 1256.315764][    T9] pvrusb2: Hardware description: Terratec Grabster AV400
[ 1256.358795][T15364] etas_es58x 7-1:0.219: Starting syz syz (Serial Number syz)
[ 1256.375900][    T9] pvrusb2: **********
[ 1256.402569][    T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[ 1256.452493][T15364] usb 7-1: USB disconnect, device number 44
[ 1256.483776][    T9] pvrusb2: Important functionality might not be entirely working.
[ 1256.506940][    T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[ 1256.552057][    T9] pvrusb2: **********
[ 1256.591177][ T2344] pvrusb2: Invalid write control endpoint
[ 1256.772509][ T2344] pvrusb2: Invalid write control endpoint
[ 1256.790114][T26913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1256.815983][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[ 1256.844026][T26913] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1256.903714][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[ 1256.961423][    T9] usb 2-1: USB disconnect, device number 77
[ 1256.969495][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[ 1257.010399][ T2344] pvrusb2: Device being rendered inoperable
[ 1257.040491][ T2344] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[ 1257.067880][ T2344] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_g)
[ 1257.114608][ T2344] pvrusb2: Attached sub-driver cx25840
[ 1257.130420][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[ 1257.208125][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[ 1257.223921][   T31] INFO: task kworker/1:3:15344 blocked for more than 143 seconds.
[ 1257.264990][   T31]       Not tainted syzkaller #0
[ 1257.270183][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1257.327656][   T31] task:kworker/1:3     state:D stack:21384 pid:15344 tgid:15344 ppid:2      task_flags:0x4208060 flags:0x00004000
[ 1257.355689][   T31] Workqueue: usb_hub_wq hub_event
[ 1257.393207][   T31] Call Trace:
[ 1257.403608][   T31]  <TASK>
[ 1257.406575][   T31]  __schedule+0x1798/0x4cc0
[ 1257.423106][   T31]  ? __pfx___schedule+0x10/0x10
[ 1257.442181][   T31]  ? schedule+0x91/0x360
[ 1257.457479][   T31]  schedule+0x165/0x360
[ 1257.495084][   T31]  schedule_timeout+0x9a/0x270
[ 1257.520441][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[ 1257.633552][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1257.633666][ T5977] usb 7-1: new high-speed USB device number 45 using dummy_hcd
[ 1257.659125][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1257.671650][   T31]  ? wait_for_completion+0x267/0x5d0
[ 1257.687974][   T31]  wait_for_completion+0x2bf/0x5d0
[ 1257.702641][   T31]  ? __pfx_wait_for_completion+0x10/0x10
[ 1257.770435][   T31]  i2c_del_adapter+0x581/0x6e0
[ 1257.798538][   T31]  ? __pfx_i2c_del_adapter+0x10/0x10
[ 1257.820144][   T31]  ? rcu_is_watching+0x15/0xb0
[ 1257.826416][   T31]  ? dvb_usb_adapter_exit+0xd7/0x240
[ 1257.832825][   T31]  dvb_usb_i2c_exit+0x64/0xb0
[ 1257.839516][   T31]  dvb_usb_device_exit+0x1be/0x350
[ 1257.845282][   T31]  ? __pfx_dvb_usb_device_exit+0x10/0x10
[ 1257.850987][   T31]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[ 1257.857504][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1257.863048][   T31]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1257.875911][ T5977] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1257.876857][   T31]  cxusb_probe+0x603/0x700
[ 1257.898752][   T31]  ? __pfx_cxusb_probe+0x10/0x10
[ 1257.905580][   T31]  ? __pm_runtime_set_status+0x785/0xa50
[ 1257.912021][   T31]  usb_probe_interface+0x668/0xc30
[ 1257.920928][   T31]  ? __pfx_usb_probe_interface+0x10/0x10
[ 1257.929498][   T31]  really_probe+0x26a/0x9e0
[ 1257.931007][ T5977] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[ 1257.939036][   T31]  __driver_probe_device+0x18c/0x2f0
[ 1257.955841][   T31]  driver_probe_device+0x4f/0x430
[ 1257.960981][   T31]  __device_attach_driver+0x2ce/0x530
[ 1257.968715][   T31]  bus_for_each_drv+0x251/0x2e0
[ 1257.970926][ T5977] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1257.981072][   T31]  ? __pfx___device_attach_driver+0x10/0x10
[ 1257.995573][   T31]  ? __pfx_bus_for_each_drv+0x10/0x10
[ 1258.000995][   T31]  __device_attach+0x2b8/0x400
[ 1258.008954][   T31]  ? __pfx___device_attach+0x10/0x10
[ 1258.013417][ T5977] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1258.020043][   T31]  ? do_raw_spin_unlock+0x122/0x240
[ 1258.063965][   T31]  bus_probe_device+0x185/0x260
[ 1258.065624][ T5977] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1258.078868][ T5977] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1258.087373][   T31]  device_add+0x7b6/0xb50
[ 1258.092582][   T31]  usb_set_configuration+0x1a87/0x20e0
[ 1258.098254][   T31]  usb_generic_driver_probe+0x8d/0x150
[ 1258.105432][ T5977] usb 7-1: config 0 descriptor??
[ 1258.111764][T26963] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[ 1258.120242][   T31]  usb_probe_device+0x1c4/0x390
[ 1258.125420][   T31]  ? __pfx_usb_probe_device+0x10/0x10
[ 1258.134816][   T31]  really_probe+0x26a/0x9e0
[ 1258.139444][   T31]  __driver_probe_device+0x18c/0x2f0
[ 1258.144937][   T31]  driver_probe_device+0x4f/0x430
[ 1258.150030][   T31]  __device_attach_driver+0x2ce/0x530
[ 1258.155492][   T31]  bus_for_each_drv+0x251/0x2e0
[ 1258.160371][   T31]  ? __pfx___device_attach_driver+0x10/0x10
[ 1258.166348][   T31]  ? __pfx_bus_for_each_drv+0x10/0x10
[ 1258.171776][   T31]  __device_attach+0x2b8/0x400
[ 1258.176611][   T31]  ? __pfx___device_attach+0x10/0x10
[ 1258.181941][   T31]  ? do_raw_spin_unlock+0x122/0x240
[ 1258.187416][   T31]  bus_probe_device+0x185/0x260
[ 1258.192334][   T31]  device_add+0x7b6/0xb50
[ 1258.198139][   T31]  usb_new_device+0xa39/0x16f0
[ 1258.202969][   T31]  ? __pfx_usb_new_device+0x10/0x10
[ 1258.208497][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1258.213766][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1258.218997][   T31]  hub_event+0x2958/0x4a20
[ 1258.223445][   T31]  ? __pfx_hub_event+0x10/0x10
[ 1258.228320][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[ 1258.234115][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1258.239344][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[ 1258.245152][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[ 1258.250918][   T31]  process_scheduled_works+0xae1/0x17b0
[ 1258.256564][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1258.262604][   T31]  worker_thread+0x8a0/0xda0
[ 1258.267294][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1258.273757][   T31]  ? __kthread_parkme+0x7b/0x200
[ 1258.278749][   T31]  kthread+0x70e/0x8a0
[ 1258.282926][   T31]  ? __pfx_worker_thread+0x10/0x10
[ 1258.288095][   T31]  ? __pfx_kthread+0x10/0x10
[ 1258.292730][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1258.298022][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1258.303257][   T31]  ? __pfx_kthread+0x10/0x10
[ 1258.307923][   T31]  ret_from_fork+0x3f9/0x770
[ 1258.312537][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1258.317744][   T31]  ? __switch_to_asm+0x39/0x70
[ 1258.322539][   T31]  ? __switch_to_asm+0x33/0x70
[ 1258.327350][   T31]  ? __pfx_kthread+0x10/0x10
[ 1258.331982][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1258.336885][   T31]  </TASK>
[ 1258.340068][   T31] INFO: task syz.8.3513:22366 blocked for more than 144 seconds.
[ 1258.348205][   T31]       Not tainted syzkaller #0
[ 1258.353239][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1258.362173][   T31] task:syz.8.3513      state:D stack:28296 pid:22366 tgid:22317 ppid:15136  task_flags:0x400040 flags:0x20004004
[ 1258.376215][   T31] Call Trace:
[ 1258.379545][   T31]  <TASK>
[ 1258.382486][   T31]  __schedule+0x1798/0x4cc0
[ 1258.387188][   T31]  ? __pfx___schedule+0x10/0x10
[ 1258.392082][   T31]  ? schedule+0x91/0x360
[ 1258.397210][   T31]  schedule+0x165/0x360
[ 1258.401399][   T31]  schedule_preempt_disabled+0x13/0x30
[ 1258.406938][   T31]  __mutex_lock+0x7e6/0x1350
[ 1258.411550][   T31]  ? __mutex_lock+0x5bb/0x1350
[ 1258.416461][   T31]  ? usbdev_open+0x16e/0x760
[ 1258.421084][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 1258.426320][   T31]  ? bus_find_device+0x273/0x2b0
[ 1258.431308][   T31]  ? __pfx_bus_find_device+0x10/0x10
[ 1258.436725][   T31]  ? __kasan_kmalloc+0x93/0xb0
[ 1258.441511][   T31]  ? usbdev_open+0xa7/0x760
[ 1258.446215][   T31]  usbdev_open+0x16e/0x760
[ 1258.450660][   T31]  ? __pfx_usbdev_open+0x10/0x10
[ 1258.455722][   T31]  ? do_raw_spin_unlock+0x122/0x240
[ 1258.460967][   T31]  chrdev_open+0x4cc/0x5e0
[ 1258.465486][   T31]  ? __pfx_chrdev_open+0x10/0x10
[ 1258.470456][   T31]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[ 1258.476937][   T31]  ? __pfx_chrdev_open+0x10/0x10
[ 1258.481896][   T31]  do_dentry_open+0x953/0x13f0
[ 1258.486830][   T31]  vfs_open+0x3b/0x340
[ 1258.490914][   T31]  ? path_openat+0x2ecd/0x3830
[ 1258.495831][   T31]  path_openat+0x2ee5/0x3830
[ 1258.500442][   T31]  ? arch_stack_walk+0xfc/0x150
[ 1258.505779][   T31]  ? stack_depot_save_flags+0x40/0x860
[ 1258.511280][   T31]  ? __pfx_path_openat+0x10/0x10
[ 1258.516286][   T31]  ? do_fast_syscall_32+0x34/0x80
[ 1258.521329][   T31]  ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1258.527937][   T31]  do_filp_open+0x1fa/0x410
[ 1258.532447][   T31]  ? __lock_acquire+0xab9/0xd20
[ 1258.537428][   T31]  ? __pfx_do_filp_open+0x10/0x10
[ 1258.542513][   T31]  ? _raw_spin_unlock+0x28/0x50
[ 1258.553187][   T31]  ? alloc_fd+0x64c/0x6c0
[ 1258.554992][ T5977] usbhid 7-1:0.0: can't add hid device: -71
[ 1258.557697][   T31]  do_sys_openat2+0x121/0x1c0
[ 1258.568224][ T5977] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 1258.568553][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1258.581398][ T5977] usb 7-1: USB disconnect, device number 45
[ 1258.589833][   T31]  __ia32_compat_sys_openat+0x131/0x160
[ 1258.598897][   T31]  __do_fast_syscall_32+0xb6/0x2b0
[ 1258.607055][   T31]  do_fast_syscall_32+0x34/0x80
[ 1258.611972][   T31]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1258.618712][   T31] RIP: 0023:0xf710e539
[ 1258.622796][   T31] RSP: 002b:00000000f54bc100 EFLAGS: 00000206 ORIG_RAX: 0000000000000127
[ 1258.631304][   T31] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f54bc150
[ 1258.639380][   T31] RDX: 0000000000101301 RSI: 0000000000000000 RDI: 00000000f7474ff4
[ 1258.647597][   T31] RBP: 0000000000101301 R08: 0000000000000000 R09: 0000000000000000
[ 1258.657001][   T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1258.665312][   T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1258.673359][   T31]  </TASK>
[ 1258.679674][   T31] 
[ 1258.679674][   T31] Showing all locks held in the system:
[ 1258.687781][   T31] 2 locks held by ksoftirqd/0/15:
[ 1258.692904][   T31] 1 lock held by khungtaskd/31:
[ 1258.698248][   T31]  #0: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 1258.708581][   T31] 2 locks held by getty/5624:
[ 1258.713263][   T31]  #0: ffff88814cf8b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1258.723448][   T31]  #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[ 1258.736122][   T31] 3 locks held by kworker/0:7/5977:
[ 1258.741325][   T31]  #0: ffff888021e9ad48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 1258.753190][   T31]  #1: ffffc9000516fbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 1258.765500][   T31]  #2: ffff888028306198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20
[ 1258.775026][   T31] 2 locks held by kworker/u8:9/13949:
[ 1258.786078][   T31]  #0: ffff8880203b1948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 1258.797734][   T31]  #1: ffffc90003dafbc0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 1258.809983][   T31] 4 locks held by udevd/15215:
[ 1258.814822][   T31]  #0: ffff888077b0dd58 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10
[ 1258.824142][   T31]  #1: ffff888055963888 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x55/0x3c0
[ 1258.833692][   T31]  #2: ffff8880585b3968 (kn->active#31){++++}-{0:0}, at: kernfs_seq_start+0x75/0x3c0
[ 1258.843229][   T31]  #3: ffff888033443198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0
[ 1258.852669][   T31] 5 locks held by kworker/1:3/15344:
[ 1258.858005][   T31]  #0: ffff888021e9ad48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 1258.869416][   T31]  #1: ffffc900045afbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 1258.881381][   T31]  #2: ffff8880283d6198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20
[ 1258.890472][   T31]  #3: ffff888033443198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400
[ 1258.899767][   T31]  #4: ffff88807a72f160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400
[ 1258.909422][   T31] 1 lock held by syz.8.3513/22366:
[ 1258.914753][   T31]  #0: ffff8880283d6198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760
[ 1258.924070][   T31] 
[ 1258.926413][   T31] =============================================
[ 1258.926413][   T31] 
[ 1258.937584][   T31] NMI backtrace for cpu 0
[ 1258.937600][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[ 1258.937622][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1258.937635][   T31] Call Trace:
[ 1258.937644][   T31]  <TASK>
[ 1258.937653][   T31]  dump_stack_lvl+0x189/0x250
[ 1258.937682][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1258.937707][   T31]  ? __pfx__printk+0x10/0x10
[ 1258.937747][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[ 1258.937775][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[ 1258.937801][   T31]  ? __pfx__printk+0x10/0x10
[ 1258.937831][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1258.937862][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[ 1258.937889][   T31]  watchdog+0xf93/0xfe0
[ 1258.937921][   T31]  ? watchdog+0x1de/0xfe0
[ 1258.937954][   T31]  kthread+0x70e/0x8a0
[ 1258.937981][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1258.938007][   T31]  ? __pfx_kthread+0x10/0x10
[ 1258.938033][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1258.938059][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1258.938090][   T31]  ? __pfx_kthread+0x10/0x10
[ 1258.938116][   T31]  ret_from_fork+0x3f9/0x770
[ 1258.938139][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1258.938166][   T31]  ? __switch_to_asm+0x39/0x70
[ 1258.938190][   T31]  ? __switch_to_asm+0x33/0x70
[ 1258.938214][   T31]  ? __pfx_kthread+0x10/0x10
[ 1258.938239][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1258.938279][   T31]  </TASK>
[ 1258.938286][   T31] Sending NMI from CPU 0 to CPUs 1:
[ 1259.083886][    C1] NMI backtrace for cpu 1
[ 1259.083903][    C1] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) 
[ 1259.083923][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1259.083936][    C1] Workqueue: bat_events batadv_nc_worker
[ 1259.083962][    C1] RIP: 0010:debug_smp_processor_id+0x0/0x20
[ 1259.083991][    C1] Code: c7 40 36 1f 8e 4c 89 f6 e8 2d 94 85 f9 e9 66 ff ff ff cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 48 c7 c7 20 36 e3 8b 48 c7 c6 60 36 e3 8b eb 1c 66 66
[ 1259.084007][    C1] RSP: 0018:ffffc90000127958 EFLAGS: 00000283
[ 1259.084022][    C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000002
[ 1259.084034][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e139ee0
[ 1259.084046][    C1] RBP: ffffffff8b473422 R08: 0000000000000000 R09: 0000000000000000
[ 1259.084058][    C1] R10: dffffc0000000000 R11: ffffffff8b473350 R12: 0000000000000002
[ 1259.084071][    C1] R13: ffffffff8e139ee0 R14: 0000000000000000 R15: 0000000000000000
[ 1259.084083][    C1] FS:  0000000000000000(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000
[ 1259.084098][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1259.084110][    C1] CR2: 000000002db24224 CR3: 0000000064444000 CR4: 00000000003526f0
[ 1259.084127][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1259.084138][    C1] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1259.084150][    C1] Call Trace:
[ 1259.084157][    C1]  <TASK>
[ 1259.084164][    C1]  rcu_is_watching+0x15/0xb0
[ 1259.084185][    C1]  lock_acquire+0x5f/0x360
[ 1259.084213][    C1]  ? batadv_nc_worker+0xd2/0x610
[ 1259.084234][    C1]  ? batadv_nc_worker+0xd2/0x610
[ 1259.084255][    C1]  batadv_nc_worker+0xef/0x610
[ 1259.084276][    C1]  ? batadv_nc_worker+0xd2/0x610
[ 1259.084298][    C1]  ? process_scheduled_works+0x9ef/0x17b0
[ 1259.084317][    C1]  process_scheduled_works+0xae1/0x17b0
[ 1259.084357][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1259.084383][    C1]  worker_thread+0x8a0/0xda0
[ 1259.084414][    C1]  kthread+0x70e/0x8a0
[ 1259.084437][    C1]  ? __pfx_worker_thread+0x10/0x10
[ 1259.084454][    C1]  ? __pfx_kthread+0x10/0x10
[ 1259.084475][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1259.084497][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1259.084524][    C1]  ? __pfx_kthread+0x10/0x10
[ 1259.084545][    C1]  ret_from_fork+0x3f9/0x770
[ 1259.084565][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[ 1259.084586][    C1]  ? __switch_to_asm+0x39/0x70
[ 1259.084608][    C1]  ? __switch_to_asm+0x33/0x70
[ 1259.084629][    C1]  ? __pfx_kthread+0x10/0x10
[ 1259.084651][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1259.084681][    C1]  </TASK>
[ 1259.090548][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[ 1259.090567][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[ 1259.090589][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1259.090603][   T31] Call Trace:
[ 1259.090613][   T31]  <TASK>
[ 1259.090624][   T31]  dump_stack_lvl+0x99/0x250
[ 1259.090650][   T31]  ? __asan_memcpy+0x40/0x70
[ 1259.090674][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1259.090698][   T31]  ? __pfx__printk+0x10/0x10
[ 1259.090737][   T31]  vpanic+0x281/0x750
[ 1259.090763][   T31]  ? __pfx_vpanic+0x10/0x10
[ 1259.090783][   T31]  ? __x2apic_send_IPI_mask+0x1e4/0x260
[ 1259.090810][   T31]  ? preempt_schedule+0xae/0xc0
[ 1259.090838][   T31]  ? preempt_schedule_common+0x83/0xd0
[ 1259.090870][   T31]  panic+0xb9/0xc0
[ 1259.090892][   T31]  ? __pfx_panic+0x10/0x10
[ 1259.090917][   T31]  ? preempt_schedule_thunk+0x16/0x30
[ 1259.090953][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[ 1259.090979][   T31]  watchdog+0xfd2/0xfe0
[ 1259.091012][   T31]  ? watchdog+0x1de/0xfe0
[ 1259.091044][   T31]  kthread+0x70e/0x8a0
[ 1259.091077][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1259.091104][   T31]  ? __pfx_kthread+0x10/0x10
[ 1259.091130][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1259.091155][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1259.091181][   T31]  ? __pfx_kthread+0x10/0x10
[ 1259.091207][   T31]  ret_from_fork+0x3f9/0x770
[ 1259.091231][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1259.091256][   T31]  ? __switch_to_asm+0x39/0x70
[ 1259.091281][   T31]  ? __switch_to_asm+0x33/0x70
[ 1259.091306][   T31]  ? __pfx_kthread+0x10/0x10
[ 1259.091331][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1259.091370][   T31]  </TASK>
[ 1259.506548][   T31] Kernel Offset: disabled
[ 1259.510855][   T31] Rebooting in 86400 seconds..