last executing test programs:

18.220799155s ago: executing program 3 (id=3506):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x0, 0xf2, 0x6c, 0x44, 0x20, 0x84f, 0x1, 0xe0b8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb2, 0x84, 0xbb}}]}}]}}, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a1", 0x1c}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
syz_emit_ethernet(0x3d, &(0x7f0000000440)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2f, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x67, 0x5, "5c1bda64d9bbb795506667f359c477398e7a5e"}}}}}, 0x0)

13.235826354s ago: executing program 3 (id=3511):
socket$netlink(0x10, 0x3, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_VDPA_GET_CONFIG(r0, 0x8008af73, &(0x7f0000000000)={0x0, 0x95, ""/149})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f00000001c0)=0x3)
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000880)={"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"})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0xffff010d, 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xddccb000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, {0x5002, 0x0, 0x0, 0x8, 0x0, 0x0, 0x81, 0x0, 0x44, 0xe, 0x0, 0x3}, {0x8080000}, {0x11000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1a}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x84}, {0xeeee8000, 0x80a0000, 0x9}, {0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0xe}, {0x6000}, {0x1, 0xfffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900, [0x0, 0x0, 0x10000, 0x3]})
r4 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600))
socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x11, 0x800000003, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x2000005, 0x11, 0xffffffffffffffff, 0x0)
r5 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x111})
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000fee000/0x12000)=nil, 0x12000}, 0x1})
ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f00000003c0)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x4000, 0x1})

12.704100043s ago: executing program 3 (id=3513):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x91}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x4)
add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000080)={0x0, "cd8b70368060760e399eaea4d991815cf881cd9dc0982abc2138ecdd8d52731a8dd4f069548593cd2879abade4f3408a3a5fde25581da844e37a10f8318fa721", 0x1c}, 0x48, 0xfffffffffffffffb)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0)
fcntl$lock(r3, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x3, 0x8001fd})
fcntl$lock(r3, 0x6, &(0x7f0000000140)={0x2, 0x0, 0x3, 0x7})
openat(r3, &(0x7f0000000240)='./file0\x00', 0x40000, 0x100)
timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = fsopen(&(0x7f0000000000)='configfs\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f0"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_usb_connect$uac1(0x0, 0xaa, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902980003010000000904000000010100000a2401000000020102132406040006030000000000000000000000000924030000010000ff0924050000f8431cfd0924030604030204001b240404020904", @ANYRES64=r4], 0x0)

9.546579942s ago: executing program 3 (id=3526):
r0 = syz_open_dev$I2C(&(0x7f00000001c0), 0x43ec, 0x509082)
syz_io_uring_setup(0x1d0, &(0x7f0000000080)={0x0, 0x0, 0x8000, 0x800000}, &(0x7f0000000000), &(0x7f00000006c0))
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000810087406d040e0a759400000001090212000100000000090400200003"], 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
openat$audio(0xffffff9c, 0x0, 0x402, 0x0)
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = socket$inet6(0x10, 0x80000, 0x3)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002b0009ef"], 0x14}}, 0x84)
open_tree(0xffffffffffffff9c, 0x0, 0x89901)
r7 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r5, 0x0, 0x0, 0x20048950, &(0x7f0000000140)={0xa, 0x4e24, 0x8002, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c)
ioctl$TUNSETIFF(r2, 0x400454ca, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newtclass={0x64, 0x28, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x10, 0xffe0}, {0xffff, 0xfff3}, {0xa, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x9}}, @TCA_RATE={0x6, 0x5, {0x54, 0xf}}, @TCA_RATE={0x6, 0x5, {0x5, 0x7}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x7}}}, @TCA_RATE={0x6, 0x5, {0x8, 0x4}}, @tclass_kind_options=@c_cake={0x9}]}, 0x64}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x893}, 0x24040084)
r9 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2)
membarrier(0x10, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
membarrier(0x8, 0x0)
poll(&(0x7f0000000200)=[{r9, 0x2201}, {r9}, {r7, 0x4412}, {r0, 0x2000}], 0x4, 0x1)
ioctl$vim2m_VIDIOC_S_CTRL(r9, 0xc008561c, &(0x7f0000000400)={0xf0f021})

8.487999722s ago: executing program 1 (id=3527):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, 0x0, 0x0)
r2 = syz_open_dev$vbi(0x0, 0x3, 0x2)
ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f0000000040)={0x1, "60499b881e2835f8c764c758d6e60d81f4d541170d0664ff0afa791943c67af1", 0x3, 0x8, 0x5ff32f2f, 0xb000, 0x8})
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$rds(0x15, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'wlan0\x00', &(0x7f0000000000)=@ethtool_sset_info={0x4a}})
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000058000000090a010400000000000000000100000008000a40000000010900020073797a32000000000900010073797a300000000008000540000000020c00098008000140000020800800084000000001"], 0xa0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='scalable\x00', 0x9)
r5 = syz_open_procfs(0x0, &(0x7f0000000280)='stack\x00')
preadv(r5, &(0x7f0000000440)=[{&(0x7f00000041c0)=""/4096, 0x1000}], 0x1, 0x1e, 0x20704513)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x0, 0x0, 0x7, 0x7fffffff}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x401, 0x7aea}}, @TCA_NETEM_RATE64={0xc, 0x8, 0xe9128d351856eed6}]}}}]}, 0x6c}}, 0x0)
r9 = openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r10, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r10, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r10, &(0x7f0000000240)=':', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x4)
shutdown(r10, 0x1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r9, 0xc0a45320, 0x0)
openat$sequencer(0xffffff9c, &(0x7f0000000000), 0x20000, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000004380)={0x2020}, 0x2020)
shutdown(r0, 0x2)

8.194311431s ago: executing program 1 (id=3530):
r0 = socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x24, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0xac, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x7c, 0x2, [@TCA_BASIC_EMATCHES={0x78, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x6c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x58, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x0, 0x7b}}}, @TCA_EM_META_LVALUE={0x1e, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="178278290c66d19b", @TCF_META_TYPE_VAR="be4dde79989d50b6", @TCF_META_TYPE_VAR="ab7afdef4c49"]}, @TCA_EM_META_LVALUE={0x20, 0x2, [@TCF_META_TYPE_VAR="ada67621e6f7ca", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="041bf50031ff69c5f5f9", @TCF_META_TYPE_VAR="50f169e26ddd3e"]}]}}]}]}]}}]}, 0xac}}, 0x0)

7.970169978s ago: executing program 1 (id=3532):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
io_setup(0x222, &(0x7f0000000180)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000680)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0xffff, r0, &(0x7f00000001c0)="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", 0x274, 0x8, 0x0, 0x3}])

7.642410199s ago: executing program 1 (id=3533):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0x8, {"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", 0x1000}}, 0x1006)

7.49987557s ago: executing program 1 (id=3534):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x1000, 0x0, @mcast1}, 0x1c)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r4 = dup(r3)
write$UHID_INPUT(r4, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r4, 0x40045542, &(0x7f0000000180)=0x7)
r5 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r5)
readv(r6, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/222, 0xdd}], 0x100000000000001e)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
ioctl$int_in(r2, 0x5421, &(0x7f0000000140)=0x1)
writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a181004000000003a1ffffff0000000e000a000d00000002800000121f", 0x2e}], 0x1}, 0x0)
close(r2)

6.897967759s ago: executing program 2 (id=3537):
r0 = socket$inet6(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2)
clock_gettime(0x0, &(0x7f0000001000)={<r3=>0x0, <r4=>0x0})
ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000180)=@userptr={0x145, 0x8, 0x4, 0x100, 0xfffffff8, {r3, r4/1000+60000}, {0x4, 0xc, 0x3, 0x2, 0xf, 0x2, "78842a6e"}, 0x7dd9, 0x2, {&(0x7f0000001080)}, 0x0, 0x0, r0})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x455124ba43232ced, 0x0, 0xffff}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}]}}}, {0x24, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf0}}, 0x4040000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0)
r5 = socket(0x840000000002, 0x3, 0xff)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r9, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)={0x20, 0x11, 0x1, "ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r10 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
r11 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1400000035000b63717a3c4a01d8985b0808aa78", 0x14}], 0x1}, 0x0)
open(&(0x7f0000000180)='./file0\x00', 0x80, 0x42)
ioctl$I2C_RDWR(r10, 0x707, &(0x7f0000000040)={&(0x7f0000000380)=[{0xd0, 0x1200, 0x0, 0x0}], 0x1})
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=@newlink={0x5c, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x201a0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_ADDRESS={0xa, 0x1, @local}, @IFLA_BROADCAST={0xa, 0x2, @remote}]}, 0x5c}}, 0x800)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000b00)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a4, 0x274, 0x350, 0x0, 0x350, 0x350, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, 0x0, {[{{@ip={@broadcast, @dev, 0x0, 0x0, 'wg0\x00', 'ip6gre0\x00'}, 0x5e02, 0xd4, 0xf8, 0x0, {0xa803, 0xd003000000000000}, [@common=@unspec=@physdev={{0x64}, {'bond_slave_1\x00', {0xff}, 'nicvf0\x00', {}, 0x11, 0x4}}]}, @common=@unspec=@CONNSECMARK={0x24}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x3a}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'vlan1\x00', 'wg1\x00'}, 0x0, 0x94, 0xc4, 0x0, {0x0, 0x6000}, [@inet=@rpfilter={{0x24}, {0x4}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @broadcast}}}, {{@uncond, 0x0, 0x94, 0xb8, 0x0, {}, [@common=@ttl={{0x24}}]}, @ECN={0x24, 'ECN\x00', 0x0, {0x0, 0x0, 0x3}}}, {{@ip={@rand_addr, @loopback, 0x0, 0x0, 'veth0_macvtap\x00', 'bond0\x00', {0xff}, {}, 0x88}, 0x0, 0xb8, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24}}, @common=@ttl={{0x24}}]}, @ECN={0x24}}, {{@uncond, 0x0, 0x9c, 0xc0, 0x0, {}, [@common=@ah={{0x2c}}]}, @common=@unspec=@NFQUEUE1={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x500)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)

6.783911607s ago: executing program 0 (id=3538):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000080)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001a0001002dbd7004000800000a000000", @ANYRES32=0x0, @ANYBLOB="0100e8081400030007000000026afe7e53001d32000000001400010000000000000000000000ff"], 0x44}}, 0x71d0b8801b5f1c98)
write$FUSE_INIT(r6, &(0x7f0000002340)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x29, 0x0, 0x20582a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x108, 0xfffffffd}}, 0x50)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_setup(0x233, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000000080)=<r8=>0x0, &(0x7f0000000140)=<r9=>0x0)
syz_io_uring_submit(r8, r9, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x2})
r10 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r10, 0xc01064bd, &(0x7f00000002c0)={0x0, 0x4298})
syz_io_uring_submit(r3, r9, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0xbfb79fdad491d679})
syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x81})
io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf)

5.557979269s ago: executing program 3 (id=3539):
r0 = openat$mixer(0xffffffffffffff9c, 0x0, 0x20883, 0x0)
ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f0000000040))
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
r2 = gettid()
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]})
sync_file_range(r3, 0xd9, 0x3, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x0)
read(r4, &(0x7f0000000b80)=""/215, 0xd7)
tkill(r2, 0x7)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffb}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000380)={0x10, &(0x7f0000000140)={0x0, 0x8, 0x1, '3'}, 0x0, 0x0})
syz_usb_control_io$printer(r1, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r5, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x2, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFACCT_PKTS={0xc}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x8800}, 0x4)
syz_usb_control_io(r1, 0x0, &(0x7f0000000600)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="400fd20000008a20ba78bdb2e571c636649d0f5a702b568db292a110ef75b7798a387b4c3aca8cd2e4feb7a12e3590788715bf8e5ce803fa7a978bf569f362d64539b285e901000000ace258bfcd7dc69e2dd40e5f0c13c8219415967b1f7e9504482d3155b504c071a2e24c9e3a64eae52c3d2eae40410bc15e8bff2dba88ff054cbee079ab9fca685e2e1b93b2a6c2438ecde02a53d6c9c0862f5cd0e684e2c1735134dceee2e9e718acf2060b3bb073424b4f5e601357f3f039d7a41c2de0e76ffde37baf571957cbed4e07ded5a7d546644eb2df4a7a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)

5.115281727s ago: executing program 0 (id=3540):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x5, 0xe4}]}, 0x8)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000025c0)="bb2d839f3bf337ccd0d8f3513ab30aba4b00b6f0ef506a60f4082ace5a8a10d80d8d595071f2ff529ff6996481ffc7e4de448343b85079722c4f1a1ce360836392283201a1a5ac0b6e24ccf9f075c64fe58b7a37d37019a49908876bc37c9f304eeefed8a6d8cae3ca0f81e900c8735b8b3063967b68a1567e30726f2c0edb6c85e78619700b0645b728a0c88b22d18366a6db2e391401feb630396bf42b987b102eb2d0a804e188648df6c8ddd79e0fde3893930e06e91c39cc01d239a1c20cb0cee84da91fa573dbaf9a5e5fafb4153f94de25186b85c8bbee4b5a4ba284d58c69dc17241d6a190ecf772448be18e47ffbec9de8ddb6e98c", 0xf9}], 0x1}}, {{&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f00000002c0)=[{&(0x7f00000000c0)="1f733792577f4277e78dcdd0d540843adc532b922321ad7a5088338a6ad18269b09e65c6bf58ef487ff5dcee858ce8286763300424279a0cab5af3a868e19bf0f093ce294a1709bc1cf569285b5a9e61b6a619a996cf8f65562fad9205c772ae76", 0x61}, {&(0x7f0000000040)="f3f8f89323cca10ea76c52c70fd0f86a16b1a6f03d572cd67b987179dddac6bb92110888088994", 0x27}, {&(0x7f0000000200)="701d11c7db9714150f84b46146a6ec7d4f008d01a8df28daa46bf8edf68d83b23ee14ca88a7a174892571bd8cbf6634805feaea1530ea3dbc72880fcf3c33a36e7846b96c60e54", 0x47}, {&(0x7f0000000340)="5094f5cc86aa1e7682d8cb14905f418a62289d7e40ead200cd76df7a09c026ff6b3acad458040345073b901d693ac7b1c96b10c1991174dd8e4e6aff3e308482592dd46c8c553b92a52e471e7163376d56b632797521fbb1bf9640f4", 0x5c}, {&(0x7f00000003c0)="0920648c55bad2d912fcbaf3343f70ed4c17a47b4eeb58de6f2f76f86db38ffda6d2ccfb07d9278f111e292a4cecdbe6081a93e60178d9fb932935cedb44b264dee09fec8645769230152afce9e234f676e2418417c1b045043ecabeb4fd57488d952b3b66f8dd430b52f9aee836ae5ea5ad52ea244041af9aeb7797181a438b3aa86d78595ca2", 0x87}, {&(0x7f0000000480)="b2fbb619f1ab93a1209f88820b7ac7a80387f2827600ccb7609e880d5dae75a7af3f15dce1fa924dd5da6c383a481755eafcfc5a0f09df42a2df8f74a6a52c7dfe9cf60e6a571a392d5fdef3361af1b420dc3b0a77062c684a9ceff6c20a067129a51d765812b3aeaa90bc88ef2ca2b51f708a912d682690e4", 0x79}, {&(0x7f0000000500)="b4405982c6d31c4737dbc1714c132e557bb966aabd167104d3544e6b8adb0ea56b9b5656bc43c943f414388225f88d2afad50961a65cb5b6bd5d4fb9b8f8adc1d1c844121f11bd60d19a8d4544cff0ab6d119fdb701ea551c4d0e76676", 0x5d}], 0x7, &(0x7f00000006c0)=[@ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @empty, @multicast1}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @private=0xa010102, @rand_addr=0x64010101}}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x6}}], 0x40}}], 0x2, 0x40000d0)

4.656182717s ago: executing program 0 (id=3541):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}}], {0x14, 0x10}}, 0xb4}}, 0x0)

4.523245964s ago: executing program 2 (id=3542):
sched_setattr(0xffffffffffffffff, &(0x7f0000000000)={0x38, 0x0, 0x2, 0xd, 0x4, 0x8, 0xfffffffffffffffc, 0x7, 0x9, 0x1}, 0x0)
syz_open_dev$sndctrl(&(0x7f00000012c0), 0x1, 0x0) (async)
r0 = syz_open_dev$sndctrl(&(0x7f00000012c0), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc2c45512, &(0x7f0000000a00)={{0x6, 0x6, 0x1, 0x0, '\x00', 0xffff}, 0x0, [0x0, 0x0, 0x0, 0xfffffffc, 0x10000, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x0, 0x429a3bbf, 0xffffffff, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000000, 0x355e, 0x204, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10000, 0x0, 0x0, 0x200, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x48, 0xfffffffd, 0x0, 0x0, 0x0, 0x1, 0x3, 0x390, 0x0, 0x0, 0x0, 0x3, 0x8, 0xffffffff, 0xfffffffc, 0x0, 0x0, 0xeec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7, 0x400, 0x0, 0x3, 0x0, 0x0, 0x5, 0x3, 0x40000000, 0x0, 0x0, 0xff, 0x0, 0x79d6, 0x0, 0x0, 0x1, 0x4, 0x400]})
syz_open_dev$vbi(&(0x7f0000002c00), 0x0, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) (async)
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0)
socket$inet6(0x10, 0x80000, 0x3)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) (async)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) (async)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x4000000, @ipv4={'\x00', '\xff\xff', @remote}, 0x401}, 0x1c)
ioctl$int_in(r5, 0x5452, &(0x7f0000000c00)=0xf6c) (async)
ioctl$int_in(r5, 0x5452, &(0x7f0000000c00)=0xf6c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000300)=0x2, 0x54)
sendmmsg$inet6(r5, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000029000000390000005b00007adb000000"], 0x18}}], 0x1, 0x20008001) (async)
sendmmsg$inet6(r5, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000029000000390000005b00007adb000000"], 0x18}}], 0x1, 0x20008001)
sendmmsg$inet6(r4, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x1, @local, 0x1}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000040)="a4e819c9", 0x4}], 0x1}}], 0x1, 0x0)
shutdown(r4, 0x1) (async)
shutdown(r4, 0x1)
setsockopt(r4, 0x84, 0x83, &(0x7f00000002c0)="1a00000002000000", 0x8)
getdents(r3, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10)

4.38458621s ago: executing program 0 (id=3544):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0x8, {"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", 0x1000}}, 0x1006)

4.090268583s ago: executing program 2 (id=3545):
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x8000)
fcntl$notify(0xffffffffffffffff, 0x402, 0x69)
syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
syz_open_dev$vbi(0x0, 0x0, 0x2)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xb9, &(0x7f000000cf3d)=""/185, 0x0, 0x18, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x1}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2)
r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0cc5605, &(0x7f00000001c0)={0x1, @pix={0x410001, 0x2, 0x31424752, 0x7, 0x6, 0x8ea, 0x6, 0x7, 0x1, 0x3, 0x0, 0x4}})
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000000c0)={0x5, 0x2, 0x1, "f7b817716daef7e53fa4f998da1907309f97630a33ea3b6bd13c74c37001fd36", 0x35315241})
renameat2(0xffffffffffffffff, &(0x7f0000000300)='./mnt\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
mount$fuse(0xe000000, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0)

4.027684798s ago: executing program 0 (id=3546):
socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$sndmidi(&(0x7f00000000c0), 0x4, 0x4600)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0)
move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0)
r7 = syz_io_uring_setup(0x78a9, &(0x7f0000000200)={0x0, 0x0, 0x40, 0x0, 0x3}, &(0x7f0000002480), &(0x7f00000024c0))
io_uring_register$IORING_REGISTER_BUFFERS2(r7, 0xf, &(0x7f0000002380)={0x1, 0x0, 0x0, &(0x7f00000022c0)=[{0x0}], 0x0}, 0x20)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x10, &(0x7f0000004f40)={0x0, 0x0, &(0x7f0000004f00)=[{0x0}], 0xfffffffffffffffe, 0x1}, 0x20)
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@gettfilter={0x3c, 0x2e, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x10, 0xfff3}, {0x0, 0xfff1}, {0x0, 0x7}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x3d7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000094}, 0x4044040)
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)={[&(0x7f00000003c0)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y<yN\xfbXh[\xe9\xa9\x1702\x7f\x9e\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab7P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xd9!\x89%\xb80\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x15\xb9\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7\x87C\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f00000001c0)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y<yN\xfbXh[\xe9\xa9\x1702\x7f\x9e\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab7P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xd9!\x89%\xb80\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x15\xb9\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7\x87C\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}, &(0x7f0000000d00)={[&(0x7f00000002c0)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y<yN\xfbXh[\xe9\xa9\x1702\x7f\x9e\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab7P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xd9!\x89%\xb80\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x15\xb9\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7\x87C\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']})
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, <r8=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x10400}}, 0x50)
syz_fuse_handle_req(r2, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r2, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ccc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6b3f0000f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784753f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a748cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d9f95e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0xfffffffd, 0x0, {0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
syz_fuse_handle_req(r2, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
writev(r9, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1)

3.806871679s ago: executing program 1 (id=3547):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000200)={'syztnl1\x00', <r1=>0x0, 0x20, 0x8000, 0x0, 0x1, {{0xf, 0x4, 0x1, 0x0, 0x3c, 0x64, 0x0, 0x7, 0x4, 0x0, @local, @broadcast, {[@lsrr={0x83, 0x13, 0x8e, [@local, @rand_addr=0x64010102, @multicast1, @loopback]}, @noop, @lsrr={0x83, 0xb, 0x5d, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0x7, 0xfc, [@rand_addr=0x64010101]}]}}}}})
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80008101}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@delqdisc={0x80, 0x25, 0x10, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r1, {0xa, 0xb}, {0x10}, {0xffff, 0x5}}, [@qdisc_kind_options=@q_blackhole={0xe}, @qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0x9, "acc1c76493be68d3ef9e41e0310e7854"}}}, @TCA_EGRESS_BLOCK={0x8}, @qdisc_kind_options=@q_clsact={0xb}, @qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x80}}, 0x4000000)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x800)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x4c000)
recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)=""/215, 0xd7}], 0x1}, 0x4}], 0x2, 0x60, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = syz_io_uring_setup(0x497, &(0x7f0000000000)={0x0, 0xf62c, 0x800, 0x3, 0x37d, 0x0, r3}, &(0x7f0000000340)=<r8=>0x0, &(0x7f0000000280)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0x0)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x29c0ccea52cb6bf8, 0x5ac, 0x29c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x90, 0x58, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x2, 0x1, {0x9, 0x21, 0x80, 0x7d, 0x1, {0x22, 0x96b}}, {{{0x9, 0x5, 0x81, 0x3, 0x87f19b4c8203fc3b, 0x5, 0xda, 0x9}}}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x310, 0x4, 0x3, 0x8, 0x8, 0x2}, 0xac, &(0x7f0000000480)={0x5, 0xf, 0xac, 0x1, [@generic={0xa7, 0x10, 0xb, "b20ca4e34fdf69428d276072074765d11fd8eda2531eaae8967d5ca6af70cc62b3060a4b28745bfb8f084917706a1e998e69b28e4b8b0e41bd2a9cdd8d9e3407ee6ed536e4ea6243e0fd0f2ad9b0cf46fa9c2822b3559e11285a84d20f4a905c24b477a20cb4336a446de82676a2af73297db7c40c8a8c49c301c49d5cfd0d56d8a9452898c55f4a6972bae5ee154619c96eb2a5d1c1060de54e17afdcf66e4839bc8bee"}]}, 0x1, [{0x1c, &(0x7f0000000540)=@string={0x1c, 0x3, "e93e7ce6237e49cc8eb8ade9ce470567091de3d87c9c99ffd065"}}]})
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x6)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r2, 0x0, 0x0, 0x4044000, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

2.161814009s ago: executing program 2 (id=3548):
timer_create(0x6, &(0x7f00000000c0)={0x0, 0x22, 0x1, @thr={&(0x7f0000000000)="ebd959279ec6635172fdc112fa93ef095555849a9676a11fbd08142a1ac3c3872d8fbbfacbf2b251fd", &(0x7f0000000040)="d195ef946d98811c00b1ca5b589810f1990fa6eb057c0b5db9cedac3a264ab57a71a5bd04737bd2553247c1ff42e2f6b1c2de5119b7cef89eb21c56bcb55396f4c721b0244702853e90f8460188794ad526c59d1a832cbb6799cf66dd63403dc33751db5b9462e1d76fdd5c12cfc443024"}}, &(0x7f0000000100)) (async)
ptrace$cont(0x1f, 0x0, 0x6, 0x8)
r0 = openat$hwrng(0xffffff9c, &(0x7f0000000140), 0x40, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x110, r0, 0x0) (async)
timer_create(0x1, &(0x7f0000000280)={0x0, 0x1e, 0x4, @thr={&(0x7f0000000180)="b95ff5439baac6852932dd89b504e25a59580b04b8664a9c2496b6e57198bcbf4824a5b4c79dd7673222674db9a368e96aa3a54910059b9cb1ecc19cee9ae9ec47bec76e3462f2add70990ba0eb00c14af92ea32b6e619d74b52d826d3d0213d52ef067581b51498129c9bd5148c", &(0x7f0000000200)="42d9ca84e1294ab0f04e84e722a92205422899fab4d18d28dab400491ff9581214819a87268115c5ded7fee73e4976f52bb74f073f0382e4e1c4a1829c8655a45bca860f0222d156035cf6afe3dda6048a367f05409e93a2f54dfd0d3884f87c4031e8950c27917be520f05ab0dc69489941e9e0c7"}}, &(0x7f00000002c0))
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r0) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', <r2=>0x0}) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0], 0x0, 0x31, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x20, 0x8, 0x8, &(0x7f0000000580)}}, 0x10)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xac, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x30da}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}]}, 0xac}}, 0x40000)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000840)={'syztnl2\x00', <r4=>r3, 0x10, 0x40, 0x5, 0x4, {{0x1e, 0x4, 0x1, 0x2, 0x78, 0x66, 0x0, 0x5, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x43}, {[@ssrr={0x89, 0x7, 0x4b, [@loopback]}, @timestamp_addr={0x44, 0xc, 0xf4, 0x1, 0x0, [{@multicast1, 0x9}]}, @timestamp_addr={0x44, 0x44, 0xe9, 0x1, 0x0, [{@local, 0x7f}, {@loopback, 0x5}, {@multicast2, 0x3}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x6}, {@empty, 0x7}, {@multicast2, 0x1}, {@rand_addr=0x64010102, 0xfd7}, {@private=0xa010102, 0x2}]}, @noop, @timestamp_prespec={0x44, 0xc, 0x49, 0x3, 0x0, [{@private=0xa010102, 0x5}]}]}}}}})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@bloom_filter={0x1e, 0xa000, 0x6, 0x0, 0x10000, 0xffffffffffffffff, 0x2, '\x00', r4, r0, 0x5, 0x2, 0x4, 0xb, @void, @value, @value=r0}, 0x50)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r0)
sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0x8c, r6, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x57}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x8c}}, 0x40019) (async)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000b80)={'bond_slave_0\x00', 0x600})
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000c00), r0)
sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000dc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c40)={0x140, r7, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xd6, 0xa8, @random="b0f1df47f2ad2715f9007b7990f48fd5164686320293f1e4eb9a328748dceeac7e0b4b4aa9448b7b25482fd6d37cf8945e55dde8d051a8b76824236906a4db83054e85d97d4b833f8f3ac4aa4674ad400e1bdcc1681897bbf1d5688f20cf40c340516880042b942501d2eb19f1d59b07c893feac8bde079885d8ec5572f789366d218e9a859d30c4fdfa3882ca1c6df2a1d7d8eeb940e4ca3e7f1f51d892271416e7499e0d3cdfea5a7da4a62f06946c599f553385165135490e71e8ed291533c49e3effc6e95402162bd826cdc8a59e8927"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x140}}, 0x8010) (async, rerun: 32)
close_range(r5, r5, 0x0) (async, rerun: 32)
openat$ttyS3(0xffffff9c, &(0x7f0000000e00), 0x220000, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
read$FUSE(r0, &(0x7f0000000e40)={0x2020, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}, 0x2020) (async)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002ec0), r0)
sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000003140)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000003100)={&(0x7f0000002f00)={0x1e0, r9, 0x6e2342b2c93383d5, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xe4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, '\x00', 0x16}, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x3c35}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xd, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e23, @private=0xa010102}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}, 0x8000}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7621}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x20000040}, 0x1) (async, rerun: 32)
r10 = syz_open_procfs(r8, &(0x7f0000003180)='net/if_inet6\x00') (rerun: 32)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003200), r0)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000003380)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003340)={&(0x7f0000003240)={0xcc, r11, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x2e}, @val={0x8}, @val={0xc, 0x99, {0xee6, 0x29}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "62f3244b560b989b0fdfd9bcbf25238261013674b657ccc1"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e533b6c50954957c91bb5bcd40a13ec5244dcff596e6f66e"}]]}, 0xcc}, 0x1, 0x0, 0x0, 0x20008000}, 0x40018) (async, rerun: 64)
syz_open_dev$evdev(&(0x7f00000033c0), 0x400, 0x4000) (async, rerun: 64)
io_setup(0x8c0, &(0x7f0000003400))
r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000003480), r10)
sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000003540)={&(0x7f0000003440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003500)={&(0x7f00000034c0)={0x2c, r12, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xcd9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) (async)
ioctl$SYNC_IOC_FILE_INFO(r10, 0xc0383e04, &(0x7f0000003680)={""/32, 0x0, 0x0, 0x3, 0x0, &(0x7f0000003580)=[{}, {}, {}]})

1.954059447s ago: executing program 2 (id=3550):
r0 = socket$inet6(0xa, 0x3, 0x1)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000740)={0x0, 0xfff, "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"}, &(0x7f0000001780)=0x1007)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f023})
ioctl$VIDIOC_CROPCAP(r4, 0xc02c563a, 0x0)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = fcntl$dupfd(r1, 0x0, r1)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010004b040000000000005f007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010062726964676500001800028005002600020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0xc001}, 0x800)
fsopen(&(0x7f00000006c0)='nfsd\x00', 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
ioperm(0x6, 0x3, 0xb017)
sysinfo(0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x8000000, 0x65c, 0xec, 0xec, 0x424, 0x0, 0x1cc, 0x594, 0x594, 0x594, 0x594, 0x594, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@unspec=@connmark={{0x2c}}, @common=@inet=@socket1={{0x24}}]}, @HL={0x24, 'HL\x00', 0x0, {0x2, 0x8}}}, {{@uncond, 0x0, 0x11c, 0x140, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x80]}}]}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0xff}}}, {{@uncond, 0x0, 0x134, 0x170, 0x0, {}, [@common=@hbh={{0x48}, {0x8, 0x2, 0x0, [0x905, 0xfffe, 0x4, 0x4, 0x68e, 0xffff, 0x6, 0x7, 0x6, 0x7, 0xfff7, 0x9, 0xffff, 0x8, 0x2, 0x9], 0xa}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x6b8)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000700)=0xffffffff, 0x4)
sendmmsg$inet6(r7, &(0x7f0000001940)=[{{&(0x7f0000000380)={0xa, 0x4e23, 0x2, @mcast2={0xff, 0x5, '\x00', 0x0}, 0xffffff7f}, 0x1c, 0x0}}], 0x1, 0x4004)

1.755806372s ago: executing program 3 (id=3553):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x1fffff, 0x10}, 0xc)
r1 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r1, &(0x7f0000000280)={0x28, 0x0, 0x0, @local}, 0x10)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710, @hyper}, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpgid(0xffffffffffffffff)
syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0)
openat$loop_ctrl(0xffffff9c, &(0x7f0000000280), 0x40a00, 0x0)
sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='h', 0x34000}], 0x1}, 0x0)

1.182489793s ago: executing program 4 (id=3555):
ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000100)={0x98f907, 0x9})
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newlink={0x50, 0x10, 0x401, 0xff7f, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r2, 0x4890, 0x34b00}}}}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x50}}, 0x0)

1.000292063s ago: executing program 4 (id=3556):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0x8, {"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", 0x1000}}, 0x1006)

898.728965ms ago: executing program 4 (id=3557):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace(0x4207, r0) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0904000000000000000002000000580004803c0001800e000100696d6d656469617465000000280002801c000280180002800900020073797a320000000008000180fffffffc0800014000000000180001800d00010073796e70726f789600000000040002800900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000ad5dbd4befc11ccf92a8b5526e474de0e8c7b3d7f3bf2465a14bbf6f3e0f10ee5da8e16bfcdfdef172291010a"], 0xac}}, 0x0) (async)
close_range(r1, 0xffffffffffffffff, 0x10000000000000)

581.965664ms ago: executing program 0 (id=3558):
socket$inet6_sctp(0xa, 0x5, 0x84)
syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x100, 0x8, 0x1d}, &(0x7f0000000340), &(0x7f0000000600))
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={0x1c, 0x52, 0x1, 0x70b930, 0x25dfdbff, {0x1c}, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0xfffffffe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x20044884)
socket$nl_route(0x10, 0x3, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$packet(0x11, 0x2, 0x300)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fspick(0xffffffffffffffff, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = getpgid(0x0)
fcntl$setownex(r5, 0xf, &(0x7f0000000140)={0x2, r6})
sendmmsg$unix(r4, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="11", 0x1}], 0x1}}], 0x1, 0x40015)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x24040010}, 0x0)
close(r7)
socket$netlink(0x10, 0x3, 0xa)

344.328952ms ago: executing program 4 (id=3559):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f0000000080)=ANY=[@ANYBLOB="00cf"])
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
renameat(r2, &(0x7f00000004c0)='./cgroup.net/devices.allow\x00', r2, &(0x7f0000000500)='./cgroup.net/cgroup.procs\x00')
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000034000000030a01020000000000000000010000000900030073797a320000000008000a40000000040900010073797a310000000030000000050a01020000000000000000010020000c00024000000000000000010900010073797a31"], 0xac}}, 0x0)

196.080014ms ago: executing program 4 (id=3560):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r0, 0x84, 0x83, &(0x7f00000002c0)="8a00000000000200", 0x8)

96.975296ms ago: executing program 2 (id=3561):
socket$inet6(0xa, 0x1, 0x0) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1000, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
r1 = epoll_create(0x9660)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x10000002}) (async)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000040)={0x320, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {}, {}, {}, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9})
socket$nl_route(0x10, 0x3, 0x0) (async)
openat$binfmt_register(0xffffff9c, &(0x7f0000000100), 0x1, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x9, 0x2, 0x800000)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
r6 = socket$inet6(0xa, 0x6, 0x3)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x50, &(0x7f0000000000)={0x0, 0x0}, 0x10) (async)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async)
r8 = add_key$user(&(0x7f0000000400), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000480)='\n', 0x1, 0xffffffffffffffff) (async)
add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)="f40fc24077021c9b084c60ffc26f26db12b9e78d629870bb26edb4a5e1cc0942ed8c58ca4fe84b94a0e31ea64089ee9ca1efb52945ffebbfea11dd3d0df936a10285eccab940ab5c96cb5d81dac1ad2243d878dde6cfd6ea08d5abcb00bb35436929ddabce530b63fab525337057438cf64a506d54d5c83e3e593d1d53ad0e6a44168fe8cfc6ad98b653d80636e4ddc1f2ab58762b3494250b9557f5b606a43e50874c90143034142cd5f7bd9b4dd876b97b7feb75b9138dde818a3c6b96dd80", 0xc0, 0xfffffffffffffffb) (async)
r9 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x40, 0x0, 0x0)
open_by_handle_at(r9, &(0x7f0000000680)=ANY=[@ANYBLOB="1000"], 0xaa50b2488a313897)
keyctl$dh_compute(0x17, &(0x7f0000000280)={r8, 0x0, r8}, &(0x7f0000002380)=""/4102, 0x1006, 0x0)
setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', <r10=>0x0})
bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x1, r10, 0x3e}, 0x10) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'macvlan0\x00'})
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001500)=ANY=[@ANYRES32=0x0, @ANYRES64=r11, @ANYRESOCT=r3, @ANYRESOCT=r4, @ANYBLOB="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"], 0x38}}, 0x20044050)

0s ago: executing program 4 (id=3562):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x5, 0xe4}]}, 0x8)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000025c0)="bb2d839f3bf337ccd0d8f3513ab30aba4b00b6f0ef506a60f4082ace5a8a10d80d8d595071f2ff529ff6996481ffc7e4de448343b85079722c4f1a1ce360836392283201a1a5ac0b6e24ccf9f075c64fe58b7a37d37019a49908876bc37c9f304eeefed8a6d8cae3ca0f81e900c8735b8b3063967b68a1567e30726f2c0edb6c85e78619700b0645b728a0c88b22d18366a6db2e391401feb630396bf42b987b102eb2d0a804e188648df6c8ddd79e0fde3893930e06e91c39cc01d239a1c20cb0cee84da91fa573dbaf9a5e5fafb4153f94de25186b85c8bbee4b5a4ba284d58c69dc17241d6a190ecf772448be18e47ffbec9de8ddb6e98c", 0xf9}], 0x1}}, {{&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f00000002c0)=[{&(0x7f00000000c0)="1f733792577f4277e78dcdd0d540843adc532b922321ad7a5088338a6ad18269b09e65c6bf58ef487ff5dcee858ce8286763300424279a0cab5af3a868e19bf0f093ce294a1709bc1cf569285b5a9e61b6a619a996cf8f65562fad9205c772ae76", 0x61}, {&(0x7f0000000040)="f3f8f89323cca10ea76c52c70fd0f86a16b1a6f03d572cd67b987179dddac6bb92110888088994", 0x27}, {&(0x7f0000000200)="701d11c7db9714150f84b46146a6ec7d4f008d01a8df28daa46bf8edf68d83b23ee14ca88a7a174892571bd8cbf6634805feaea1530ea3dbc72880fcf3c33a36e7846b96c60e54", 0x47}, {&(0x7f0000000340)="5094f5cc86aa1e7682d8cb14905f418a62289d7e40ead200cd76df7a09c026ff6b3acad458040345073b901d693ac7b1c96b10c1991174dd8e4e6aff3e308482592dd46c8c553b92a52e471e7163376d56b632797521fbb1bf9640f4", 0x5c}, {&(0x7f00000003c0)="0920648c55bad2d912fcbaf3343f70ed4c17a47b4eeb58de6f2f76f86db38ffda6d2ccfb07d9278f111e292a4cecdbe6081a93e60178d9fb932935cedb44b264dee09fec8645769230152afce9e234f676e2418417c1b045043ecabeb4fd57488d952b3b66f8dd430b52f9aee836ae5ea5ad52ea244041af9aeb7797181a438b3aa86d78595ca2", 0x87}, {&(0x7f0000000480)="b2fbb619f1ab93a1209f88820b7ac7a80387f2827600ccb7609e880d5dae75a7af3f15dce1fa924dd5da6c383a481755eafcfc5a0f09df42a2df8f74a6a52c7dfe9cf60e6a571a392d5fdef3361af1b420dc3b0a77062c684a9ceff6c20a067129a51d765812b3aeaa90bc88ef2ca2b51f708a912d682690e4", 0x79}, {&(0x7f0000000500)="b4405982c6d31c4737dbc1714c132e557bb966aabd167104d3544e6b8adb0ea56b9b5656bc43c943f414388225f88d2afad50961a65cb5b6bd5d4fb9b8f8adc1d1c844121f11bd60d19a8d4544cff0ab6d119fdb701ea551c4d0e766760fae62d9ba01213433e60f57f5a9443c44e5fcc76da96282", 0x75}], 0x7, &(0x7f00000006c0)=[@ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @empty, @multicast1}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @private=0xa010102, @rand_addr=0x64010101}}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x6}}], 0x40}}], 0x2, 0x40000d0)

kernel console output (not intermixed with test programs):

s?
[  672.906290][T13278] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  672.985185][T13278] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  672.993268][T13278] usb 4-1: Product: syz
[  673.043795][T13278] usb 4-1: Manufacturer: syz
[  673.065196][T13278] usb 4-1: SerialNumber: syz
[  673.112063][T13278] usb 4-1: config 0 descriptor??
[  673.543174][T15910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3217'.
[  673.722279][T15915] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3219'.
[  673.952502][T15855] veth1_macvtap: left allmulticast mode
[  673.971905][T15855] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  673.989587][T15855] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  674.000865][T15855] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  674.017246][T15855] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  674.125177][ T2152] usb 5-1: new high-speed USB device number 73 using dummy_hcd
[  674.286358][ T2152] usb 5-1: Using ep0 maxpacket: 32
[  674.310397][ T2152] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  674.312739][ T1217] usb 4-1: USB disconnect, device number 93
[  674.335072][ T2152] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  674.376674][ T2152] usb 5-1: config 0 descriptor??
[  674.609163][ T2152] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  674.645000][ T5150] Bluetooth: hci1: command tx timeout
[  674.674444][ T2152] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  674.739772][ T2152] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  674.776575][ T2152] usb 5-1: media controller created
[  674.840749][T15921] xt_CONNSECMARK: invalid mode: 0
[  675.071789][T15870] chnl_net:caif_netlink_parms(): no params data found
[  675.081884][ T2152] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  675.274960][T13278] usb 1-1: new high-speed USB device number 75 using dummy_hcd
[  675.291174][ T2152] az6027: usb out operation failed. (-71)
[  675.298269][   T36] macsec0: left allmulticast mode
[  675.303442][   T36] veth1_macvtap: left allmulticast mode
[  675.333796][ T2152] az6027: usb out operation failed. (-71)
[  675.407222][   T36] macsec0: left promiscuous mode
[  675.429796][ T2152] stb0899_attach: Driver disabled by Kconfig
[  675.447718][   T36] bridge0: port 3(macsec0) entered disabled state
[  675.474979][ T2152] az6027: no front-end attached
[  675.474979][ T2152] 
[  675.505547][T13278] usb 1-1: config 0 has no interfaces?
[  675.533000][   T36] bridge_slave_1: left allmulticast mode
[  675.541811][T13278] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  675.545172][    T9] usb 4-1: new high-speed USB device number 94 using dummy_hcd
[  675.551331][ T2152] az6027: usb out operation failed. (-71)
[  675.551352][ T2152] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  675.565350][ T2152] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input26
[  675.593171][   T36] bridge_slave_1: left promiscuous mode
[  675.630315][T13278] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  675.645515][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  675.695325][T13278] usb 1-1: Product: syz
[  675.708231][T13278] usb 1-1: Manufacturer: syz
[  675.728457][   T36] bridge_slave_0: left allmulticast mode
[  675.735873][T13278] usb 1-1: SerialNumber: syz
[  675.775982][ T2152] dvb-usb: schedule remote query interval to 400 msecs.
[  675.782981][ T2152] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  675.804855][   T36] bridge_slave_0: left promiscuous mode
[  675.810678][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  675.819027][T13278] usb 1-1: config 0 descriptor??
[  675.825062][    T9] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  675.906040][ T2152] usb 5-1: USB disconnect, device number 73
[  675.918585][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  675.985834][    T9] usb 4-1: config 0 descriptor??
[  676.057550][    T9] cp210x 4-1:0.0: cp210x converter detected
[  676.134751][T15942] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3222'.
[  676.197211][T15942] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3222'.
[  676.256312][ T2152] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  676.263935][    T9] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32
[  676.335559][    T9] cp210x 4-1:0.0: failed to get vendor val 0x370c size 73: -121
[  676.379696][    T9] cp210x 4-1:0.0: GPIO initialisation failed: -121
[  676.383254][T15962] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  676.420692][T15963] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  676.439172][   T36] bond13 (unregistering): (slave ip6gretap1): Removing an active aggregator
[  676.458994][    T9] usb 4-1: cp210x converter now attached to ttyUSB0
[  676.472730][   T36] bond13 (unregistering): (slave ip6gretap1): Releasing backup interface
[  676.621043][    T9] usb 4-1: USB disconnect, device number 94
[  676.695817][    T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  676.705449][    T9] cp210x 4-1:0.0: device disconnected
[  676.725266][ T5150] Bluetooth: hci1: command tx timeout
[  677.048081][T15972] FAULT_INJECTION: forcing a failure.
[  677.048081][T15972] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  677.149627][T15972] CPU: 1 UID: 0 PID: 15972 Comm: syz.4.3228 Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) 
[  677.149661][T15972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  677.149677][T15972] Call Trace:
[  677.149686][T15972]  <TASK>
[  677.149696][T15972]  dump_stack_lvl+0x189/0x250
[  677.149737][T15972]  ? __pfx____ratelimit+0x10/0x10
[  677.149760][T15972]  ? __pfx_dump_stack_lvl+0x10/0x10
[  677.149796][T15972]  ? __pfx__printk+0x10/0x10
[  677.149822][T15972]  ? __might_fault+0xb0/0x130
[  677.149865][T15972]  should_fail_ex+0x414/0x560
[  677.149896][T15972]  _copy_from_user+0x2d/0xb0
[  677.149932][T15972]  get_compat_msghdr+0xad/0x4a0
[  677.149971][T15972]  ? __pfx_get_compat_msghdr+0x10/0x10
[  677.150019][T15972]  ___sys_sendmsg+0x193/0x2a0
[  677.150055][T15972]  ? __pfx____sys_sendmsg+0x10/0x10
[  677.150133][T15972]  ? __fget_files+0x2a/0x420
[  677.150164][T15972]  ? __fget_files+0x3a0/0x420
[  677.150207][T15972]  __sys_sendmsg+0x164/0x220
[  677.150242][T15972]  ? __pfx___sys_sendmsg+0x10/0x10
[  677.150290][T15972]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  677.150316][T15972]  ? lockdep_hardirqs_on+0x9c/0x150
[  677.150341][T15972]  __do_fast_syscall_32+0xb6/0x2b0
[  677.150367][T15972]  ? lockdep_hardirqs_on+0x9c/0x150
[  677.150394][T15972]  do_fast_syscall_32+0x34/0x80
[  677.150433][T15972]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  677.150460][T15972] RIP: 0023:0xf7f07539
[  677.150489][T15972] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  677.150507][T15972] RSP: 002b:00000000f502655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  677.150529][T15972] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000100
[  677.150544][T15972] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  677.150557][T15972] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  677.150569][T15972] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  677.150582][T15972] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  677.150610][T15972]  </TASK>
[  677.401565][   T30] audit: type=1800 audit(1748665770.725:1335): pid=15969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3227" name="file1" dev="tmpfs" ino=765 res=0 errno=0
[  678.145564][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  678.182196][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  678.198582][   T36] bond0 (unregistering): Released all slaves
[  678.213443][T15987] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3231'.
[  678.427176][   T36] bond1 (unregistering): Released all slaves
[  678.643748][   T36] bond2 (unregistering): Released all slaves
[  678.810885][ T5150] Bluetooth: hci1: command tx timeout
[  678.849784][   T36] bond3 (unregistering): Released all slaves
[  679.091012][   T36] bond4 (unregistering): Released all slaves
[  679.303933][   T36] bond5 (unregistering): Released all slaves
[  679.490619][   T36] bond6 (unregistering): Released all slaves
[  679.680898][   T36] bond7 (unregistering): Released all slaves
[  679.813222][   T36] bond8 (unregistering): Released all slaves
[  679.955305][   T36] bond9 (unregistering): Released all slaves
[  680.088168][   T36] bond10 (unregistering): Released all slaves
[  680.222238][   T36] bond11 (unregistering): Released all slaves
[  680.363327][   T36] bond12 (unregistering): Released all slaves
[  680.493992][   T36] bond13 (unregistering): Released all slaves
[  680.685681][ T5882] usb 1-1: USB disconnect, device number 75
[  680.854889][   T36] tipc: Left network mode
[  681.544929][T13278] usb 4-1: new high-speed USB device number 95 using dummy_hcd
[  681.544987][T15870] bridge0: port 1(bridge_slave_0) entered blocking state
[  681.612772][T15870] bridge0: port 1(bridge_slave_0) entered disabled state
[  681.621764][T15870] bridge_slave_0: entered allmulticast mode
[  681.633292][T15870] bridge_slave_0: entered promiscuous mode
[  681.665500][T15870] bridge0: port 2(bridge_slave_1) entered blocking state
[  681.674744][T15870] bridge0: port 2(bridge_slave_1) entered disabled state
[  681.686306][T15870] bridge_slave_1: entered allmulticast mode
[  681.702439][T15870] bridge_slave_1: entered promiscuous mode
[  681.786013][T13278] usb 4-1: Using ep0 maxpacket: 32
[  681.804114][T13278] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  681.832536][T13278] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  681.877615][T13278] usb 4-1: config 0 descriptor??
[  682.015080][ T5150] Bluetooth: hci2: Ignoring connect complete event for invalid link type
[  682.111354][T13278] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  682.133665][T13278] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  682.158875][T13278] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  682.171232][T13278] usb 4-1: media controller created
[  682.208178][T16025] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3236'.
[  682.213133][T13278] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  682.291202][T15870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  682.380926][T16030] xt_CONNSECMARK: invalid mode: 0
[  682.508542][T13278] az6027: usb out operation failed. (-71)
[  682.524256][T15870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  682.533295][T13278] az6027: usb out operation failed. (-71)
[  682.552358][T13278] stb0899_attach: Driver disabled by Kconfig
[  682.570386][T13278] az6027: no front-end attached
[  682.570386][T13278] 
[  682.592813][T13278] az6027: usb out operation failed. (-71)
[  682.600091][ T2152] usb 5-1: new high-speed USB device number 74 using dummy_hcd
[  682.619653][T13278] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  682.654026][T13278] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input27
[  682.692803][T13278] dvb-usb: schedule remote query interval to 400 msecs.
[  682.713080][T13278] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  682.814904][ T2152] usb 5-1: Using ep0 maxpacket: 8
[  682.831020][T13278] usb 4-1: USB disconnect, device number 95
[  682.851622][ T2152] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  682.900051][ T2152] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  682.968117][ T2152] usb 5-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b
[  683.029974][ T2152] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  683.133165][ T2152] usb 5-1: config 0 descriptor??
[  683.214572][T13278] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  683.629222][   T36] hsr_slave_0: left promiscuous mode
[  683.657702][   T36] hsr_slave_1: left promiscuous mode
[  683.670610][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  683.704301][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  683.743155][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  683.822903][   T36] veth1_macvtap: left promiscuous mode
[  683.834727][   T36] veth0_macvtap: left promiscuous mode
[  683.866546][   T36] veth1_vlan: left promiscuous mode
[  683.871970][   T36] veth0_vlan: left promiscuous mode
[  683.988178][T16050] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3240'.
[  685.184962][ T1217] usb 4-1: new high-speed USB device number 96 using dummy_hcd
[  685.203790][    C0] raw-gadget.0 gadget.3: ignoring, device is not running
[  685.354911][ T1217] usb 4-1: device descriptor read/64, error -32
[  685.675237][ T1217] usb 4-1: new high-speed USB device number 97 using dummy_hcd
[  685.770009][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  685.783009][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  685.916800][ T1217] usb 4-1: config 0 has no interfaces?
[  685.933401][ T1217] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  685.942679][ T1217] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  685.967613][ T5882] usb 5-1: USB disconnect, device number 74
[  685.988872][ T1217] usb 4-1: Product: syz
[  686.034946][ T1217] usb 4-1: Manufacturer: syz
[  686.057964][ T1217] usb 4-1: SerialNumber: syz
[  686.125316][ T1217] usb 4-1: config 0 descriptor??
[  686.403620][T16061] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3241'.
[  686.414990][T16061] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3241'.
[  686.969078][   T36] team0 (unregistering): Port device team_slave_1 removed
[  687.145030][   T36] team0 (unregistering): Port device team_slave_0 removed
[  687.244745][T16072] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3244'.
[  687.955106][T15870] team0: Port device team_slave_0 added
[  688.003381][T15870] team0: Port device team_slave_1 added
[  688.120540][T16078] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3246'.
[  688.159153][T16077] Cannot find del_set index 1 as target
[  688.198480][T15870] batman_adv: batadv0: Adding interface: batadv_slave_0
[  688.220435][T15870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  688.293485][T16080] FAULT_INJECTION: forcing a failure.
[  688.293485][T16080] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  688.307070][T16080] CPU: 0 UID: 0 PID: 16080 Comm: syz.1.3247 Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) 
[  688.307101][T16080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  688.307114][T16080] Call Trace:
[  688.307123][T16080]  <TASK>
[  688.307133][T16080]  dump_stack_lvl+0x189/0x250
[  688.307171][T16080]  ? __pfx____ratelimit+0x10/0x10
[  688.307193][T16080]  ? __pfx_dump_stack_lvl+0x10/0x10
[  688.307226][T16080]  ? __pfx__printk+0x10/0x10
[  688.307263][T16080]  should_fail_ex+0x414/0x560
[  688.307293][T16080]  _copy_to_user+0x31/0xb0
[  688.307326][T16080]  video_usercopy+0xeb2/0x14f0
[  688.307366][T16080]  ? __pfx___video_do_ioctl+0x10/0x10
[  688.307395][T16080]  ? __pfx_video_usercopy+0x10/0x10
[  688.307444][T16080]  ? __fget_files+0x2a/0x420
[  688.307477][T16080]  v4l2_ioctl+0x18d/0x1e0
[  688.307509][T16080]  v4l2_compat_ioctl32+0x1d7/0x260
[  688.307549][T16080]  __ia32_compat_sys_ioctl+0x543/0x840
[  688.307578][T16080]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[  688.307613][T16080]  ? __fget_files+0x3a0/0x420
[  688.307676][T16080]  ? fput+0xa0/0xd0
[  688.307710][T16080]  ? ksys_write+0x22a/0x250
[  688.307744][T16080]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  688.307769][T16080]  ? lockdep_hardirqs_on+0x9c/0x150
[  688.307794][T16080]  __do_fast_syscall_32+0xb6/0x2b0
[  688.307819][T16080]  ? lockdep_hardirqs_on+0x9c/0x150
[  688.307846][T16080]  do_fast_syscall_32+0x34/0x80
[  688.307870][T16080]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  688.307897][T16080] RIP: 0023:0xf7f84539
[  688.307916][T16080] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  688.307935][T16080] RSP: 002b:00000000f50a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  688.307959][T16080] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0d05605
[  688.307975][T16080] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000
[  688.307990][T16080] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  688.308003][T16080] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  688.308017][T16080] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  688.308050][T16080]  </TASK>
[  688.310471][T15870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  688.434974][    T9] usb 5-1: new full-speed USB device number 75 using dummy_hcd
[  688.452067][T15870] batman_adv: batadv0: Adding interface: batadv_slave_1
[  688.592465][T15870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  688.618601][    C0] vkms_vblank_simulate: vblank timer overrun
[  688.642657][T15870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  688.656821][    T9] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  688.667777][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  688.681997][T13278] usb 4-1: USB disconnect, device number 97
[  688.701149][    T9] usb 5-1: config 0 descriptor??
[  688.888131][T15870] hsr_slave_0: entered promiscuous mode
[  688.894494][   T36] IPVS: stop unused estimator thread 0...
[  688.915885][T15870] hsr_slave_1: entered promiscuous mode
[  688.922548][T15870] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  688.953152][T15870] Cannot create hsr debugfs directory
[  689.025372][ T5884] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[  689.185935][ T5884] usb 2-1: Using ep0 maxpacket: 32
[  689.208176][ T5884] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  689.220839][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  689.252367][ T5884] usb 2-1: config 0 descriptor??
[  689.481833][ T5884] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  689.532516][ T5884] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  689.573399][ T5884] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  689.593428][ T5884] usb 2-1: media controller created
[  689.756085][T16105] xt_CONNSECMARK: invalid mode: 0
[  689.791664][ T5884] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  689.886348][T16104] fuse: Bad value for 'source'
[  690.121184][ T5884] az6027: usb out operation failed. (-71)
[  690.143589][ T5884] az6027: usb out operation failed. (-71)
[  690.159901][ T5884] stb0899_attach: Driver disabled by Kconfig
[  690.177259][ T5884] az6027: no front-end attached
[  690.177259][ T5884] 
[  690.234974][ T5884] az6027: usb out operation failed. (-71)
[  690.463716][ T5884] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  690.494963][ T5884] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input28
[  690.526356][ T5884] dvb-usb: schedule remote query interval to 400 msecs.
[  690.544900][ T5884] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  690.629967][ T5884] usb 2-1: USB disconnect, device number 63
[  690.815688][    T9] pegasus 5-1:0.0: can't reset MAC
[  690.821143][    T9] pegasus 5-1:0.0: probe with driver pegasus failed with error -5
[  690.822424][ T5884] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  691.412536][ T5884] usb 5-1: USB disconnect, device number 75
[  691.798309][T16125] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3255'.
[  691.834993][    T9] usb 4-1: new high-speed USB device number 98 using dummy_hcd
[  692.033781][    T9] usb 4-1: config 0 has no interfaces?
[  692.076892][    T9] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  692.086316][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  692.094521][    T9] usb 4-1: Product: syz
[  692.108299][    T9] usb 4-1: Manufacturer: syz
[  692.123331][    T9] usb 4-1: SerialNumber: syz
[  692.157429][T15870] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  692.173507][    T9] usb 4-1: config 0 descriptor??
[  692.252893][T15870] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  692.298586][T15870] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  692.334506][T15870] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  693.003940][T16136] FAULT_INJECTION: forcing a failure.
[  693.003940][T16136] name failslab, interval 1, probability 0, space 0, times 0
[  693.024949][T16136] CPU: 0 UID: 0 PID: 16136 Comm: syz.0.3258 Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) 
[  693.024980][T16136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  693.024994][T16136] Call Trace:
[  693.025003][T16136]  <TASK>
[  693.025013][T16136]  dump_stack_lvl+0x189/0x250
[  693.025066][T16136]  ? __pfx____ratelimit+0x10/0x10
[  693.025085][T16136]  ? __pfx_dump_stack_lvl+0x10/0x10
[  693.025114][T16136]  ? __pfx__printk+0x10/0x10
[  693.025140][T16136]  ? __pfx___might_resched+0x10/0x10
[  693.025165][T16136]  ? fs_reclaim_acquire+0x7d/0x100
[  693.025198][T16136]  should_fail_ex+0x414/0x560
[  693.025222][T16136]  should_failslab+0xa8/0x100
[  693.025251][T16136]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  693.025277][T16136]  ? __alloc_skb+0x112/0x2d0
[  693.025307][T16136]  __alloc_skb+0x112/0x2d0
[  693.025335][T16136]  netlink_ack+0x146/0xa50
[  693.025356][T16136]  ? __pfx_genl_rcv_msg+0x10/0x10
[  693.025373][T16136]  ? ref_tracker_free+0x63a/0x7d0
[  693.025392][T16136]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  693.025420][T16136]  ? __pfx_nl80211_post_doit+0x10/0x10
[  693.025449][T16136]  ? __pfx_ref_tracker_free+0x10/0x10
[  693.025481][T16136]  netlink_rcv_skb+0x28c/0x470
[  693.025507][T16136]  ? __pfx_genl_rcv_msg+0x10/0x10
[  693.025529][T16136]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  693.025566][T16136]  ? down_read+0x1ad/0x2e0
[  693.025589][T16136]  genl_rcv+0x28/0x40
[  693.025604][T16136]  netlink_unicast+0x75b/0x8d0
[  693.025631][T16136]  netlink_sendmsg+0x805/0xb30
[  693.025659][T16136]  ? __pfx_netlink_sendmsg+0x10/0x10
[  693.025683][T16136]  ? __import_iovec+0x5d4/0x7f0
[  693.025705][T16136]  ? aa_sock_msg_perm+0x94/0x160
[  693.025724][T16136]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  693.025741][T16136]  ? __pfx_netlink_sendmsg+0x10/0x10
[  693.025763][T16136]  __sock_sendmsg+0x21c/0x270
[  693.025783][T16136]  ____sys_sendmsg+0x505/0x830
[  693.025812][T16136]  ? __pfx_____sys_sendmsg+0x10/0x10
[  693.025849][T16136]  ___sys_sendmsg+0x21f/0x2a0
[  693.025876][T16136]  ? __pfx____sys_sendmsg+0x10/0x10
[  693.025931][T16136]  ? __fget_files+0x2a/0x420
[  693.025955][T16136]  ? __fget_files+0x3a0/0x420
[  693.025985][T16136]  __sys_sendmsg+0x164/0x220
[  693.026009][T16136]  ? __pfx___sys_sendmsg+0x10/0x10
[  693.026076][T16136]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  693.026096][T16136]  ? lockdep_hardirqs_on+0x9c/0x150
[  693.026116][T16136]  __do_fast_syscall_32+0xb6/0x2b0
[  693.026136][T16136]  ? lockdep_hardirqs_on+0x9c/0x150
[  693.026156][T16136]  do_fast_syscall_32+0x34/0x80
[  693.026176][T16136]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  693.026198][T16136] RIP: 0023:0xf7fd8539
[  693.026214][T16136] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  693.026230][T16136] RSP: 002b:00000000f50f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  693.026250][T16136] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800003c0
[  693.026263][T16136] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000
[  693.026273][T16136] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  693.026285][T16136] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  693.026297][T16136] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  693.026321][T16136]  </TASK>
[  693.527541][T16146] FAULT_INJECTION: forcing a failure.
[  693.527541][T16146] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  693.620712][T16146] CPU: 1 UID: 0 PID: 16146 Comm: syz.0.3260 Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) 
[  693.620744][T16146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  693.620758][T16146] Call Trace:
[  693.620767][T16146]  <TASK>
[  693.620776][T16146]  dump_stack_lvl+0x189/0x250
[  693.620815][T16146]  ? __pfx____ratelimit+0x10/0x10
[  693.620837][T16146]  ? __pfx_dump_stack_lvl+0x10/0x10
[  693.620871][T16146]  ? __pfx__printk+0x10/0x10
[  693.620894][T16146]  ? __might_fault+0xb0/0x130
[  693.620934][T16146]  should_fail_ex+0x414/0x560
[  693.620963][T16146]  _copy_from_user+0x2d/0xb0
[  693.620996][T16146]  get_compat_msghdr+0xad/0x4a0
[  693.621034][T16146]  ? __pfx_get_compat_msghdr+0x10/0x10
[  693.621079][T16146]  ___sys_sendmsg+0x193/0x2a0
[  693.621114][T16146]  ? __pfx____sys_sendmsg+0x10/0x10
[  693.621180][T16146]  ? __fget_files+0x2a/0x420
[  693.621209][T16146]  ? __fget_files+0x3a0/0x420
[  693.621257][T16146]  __sys_sendmmsg+0x28e/0x430
[  693.621295][T16146]  ? __pfx___sys_sendmmsg+0x10/0x10
[  693.621335][T16146]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  693.621378][T16146]  ? ksys_write+0x22a/0x250
[  693.621415][T16146]  __ia32_compat_sys_sendmmsg+0xa2/0xc0
[  693.621451][T16146]  __do_fast_syscall_32+0xb6/0x2b0
[  693.621475][T16146]  ? lockdep_hardirqs_on+0x9c/0x150
[  693.621501][T16146]  do_fast_syscall_32+0x34/0x80
[  693.621524][T16146]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  693.621551][T16146] RIP: 0023:0xf7fd8539
[  693.621569][T16146] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  693.621588][T16146] RSP: 002b:00000000f50f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000159
[  693.621611][T16146] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000cc0
[  693.621626][T16146] RDX: 0000000000000001 RSI: 000000002000c000 RDI: 0000000000000000
[  693.621639][T16146] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  693.621652][T16146] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  693.621665][T16146] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  693.621715][T16146]  </TASK>
[  694.046880][T15870] 8021q: adding VLAN 0 to HW filter on device bond0
[  694.161668][T15870] 8021q: adding VLAN 0 to HW filter on device team0
[  694.212089][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state
[  694.219371][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state
[  694.271520][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state
[  694.278772][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state
[  694.494941][ T2152] usb 1-1: new high-speed USB device number 76 using dummy_hcd
[  694.669782][ T2152] usb 1-1: config 0 interface 0 has no altsetting 0
[  694.710956][ T2152] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[  694.756271][ T2152] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  694.786604][ T1217] usb 4-1: USB disconnect, device number 98
[  694.787301][ T2152] usb 1-1: config 0 descriptor??
[  694.957240][T15870] 8021q: adding VLAN 0 to HW filter on device batadv0
[  695.067091][T16177] fuse: Bad value for 'source'
[  695.189972][T15870] veth0_vlan: entered promiscuous mode
[  695.271374][T15870] veth1_vlan: entered promiscuous mode
[  695.299958][T16183] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3266'.
[  695.543716][T15870] veth0_macvtap: entered promiscuous mode
[  695.555741][T15870] veth1_macvtap: entered promiscuous mode
[  695.601980][T15870] batman_adv: batadv0: Interface activated: batadv_slave_0
[  695.642271][T15870] batman_adv: batadv0: Interface activated: batadv_slave_1
[  695.685532][T15870] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  695.731701][T15870] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  695.753597][T15870] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  695.778147][T15870] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  695.806969][T16186] netlink: 'syz.4.3267': attribute type 2 has an invalid length.
[  695.995735][ T2152] video4linux radio48: keene_cmd_main failed (-110)
[  696.042729][ T2152] radio-keene 1-1:0.0: V4L2 device registered as radio48
[  696.212588][T16159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3262'.
[  696.239100][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  696.301024][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  696.362557][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  696.471952][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  696.985610][T16199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3204'.
[  697.463625][ T5881] usb 1-1: USB disconnect, device number 76
[  697.584894][ T5836] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[  697.811686][ T5836] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  697.859837][T16218] fuse: Bad value for 'source'
[  697.863505][ T5836] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  697.890347][ T5836] usb 3-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00
[  697.906685][ T5836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  697.931092][ T5836] usb 3-1: config 0 descriptor??
[  698.232769][T16220] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3276'.
[  698.368603][T16206] netlink: 'syz.2.3270': attribute type 21 has an invalid length.
[  698.410643][T16206] netlink: 'syz.2.3270': attribute type 1 has an invalid length.
[  698.425054][T16206] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3270'.
[  698.457688][T14929] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  698.481413][T14929] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  698.489740][T14929] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  698.502120][T14929] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  698.503370][T16206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  698.526000][T14929] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  698.566449][T16206] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  698.616697][T16226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  698.684032][ T5836] playstation 0003:054C:09CC.001D: item fetching failed at offset 5/7
[  698.704738][T16226] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  698.715935][ T5836] playstation 0003:054C:09CC.001D: Parse failed
[  698.729090][ T5836] playstation 0003:054C:09CC.001D: probe with driver playstation failed with error -22
[  698.815172][ T1217] usb 5-1: new full-speed USB device number 76 using dummy_hcd
[  698.834987][T16229] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3278'.
[  698.880605][T16229] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3278'.
[  698.928338][ T5881] usb 3-1: USB disconnect, device number 61
[  698.953312][ T1145] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  699.007432][ T1217] usb 5-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31
[  699.032747][ T1217] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  699.048199][ T1217] usb 5-1: config 0 descriptor??
[  699.147504][ T1145] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  699.169931][ T1217] usb 5-1: selecting invalid altsetting 3
[  699.201772][ T1217] comedi comedi0: could not set alternate setting 3 in high speed
[  699.219145][ T1217] usbduxsigma 5-1:0.0: driver 'usbduxsigma' failed to auto-configure device.
[  699.234249][ T1217] usbduxsigma 5-1:0.0: probe with driver usbduxsigma failed with error -22
[  699.268254][ T1217] usb 5-1: USB disconnect, device number 76
[  699.440773][ T1145] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  699.596857][ T1145] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  699.811129][T16235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3279'.
[  700.265722][T16227] chnl_net:caif_netlink_parms(): no params data found
[  700.614338][T16258] binder: 16256:16258 unknown command 6
[  700.629380][T16258] binder: 16256:16258 ioctl c0306201 80000180 returned -22
[  700.646194][ T5150] Bluetooth: hci5: command tx timeout
[  701.026370][T16265] fuse: Bad value for 'source'
[  701.355514][T16274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3288'.
[  701.482816][T16279] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3288'.
[  701.905243][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  701.916249][ T1145] bond0 (unregistering): Released all slaves
[  702.028772][ T1145] bond1 (unregistering): Released all slaves
[  702.184590][ T1145] bond2 (unregistering): Released all slaves
[  702.298456][ T1145] bond3 (unregistering): Released all slaves
[  702.408231][ T1145] bond4 (unregistering): Released all slaves
[  702.513295][ T1145] bond5 (unregistering): Released all slaves
[  702.616745][ T1145] bond6 (unregistering): Released all slaves
[  702.721739][ T1145] bond7 (unregistering): Released all slaves
[  702.724919][ T5150] Bluetooth: hci5: command tx timeout
[  702.839506][ T1145] bond8 (unregistering): Released all slaves
[  702.946518][ T1145] bond9 (unregistering): Released all slaves
[  703.052052][ T1145] bond10 (unregistering): Released all slaves
[  703.154010][ T1145] bond11 (unregistering): Released all slaves
[  703.270138][ T1145] bond12 (unregistering): Released all slaves
[  703.374631][ T1145] bond13 (unregistering): Released all slaves
[  703.474602][ T1145] bond14 (unregistering): Released all slaves
[  703.578560][ T1145] bond15 (unregistering): Released all slaves
[  703.682147][ T1145] bond16 (unregistering): Released all slaves
[  703.788770][ T1145] bond17 (unregistering): Released all slaves
[  703.901458][ T1145] bond18 (unregistering): Released all slaves
[  704.002797][ T1145] bond19 (unregistering): Released all slaves
[  704.033682][T16278] bridge: RTM_NEWNEIGH with invalid ether address
[  704.236262][T16294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  704.256238][T16294] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  704.278250][ T1145] tipc: Left network mode
[  704.432446][T16227] bridge0: port 1(bridge_slave_0) entered blocking state
[  704.438406][T16299] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received
[  704.450022][T16227] bridge0: port 1(bridge_slave_0) entered disabled state
[  704.465245][T16227] bridge_slave_0: entered allmulticast mode
[  704.474951][    T9] usb 5-1: new high-speed USB device number 77 using dummy_hcd
[  704.508799][T16227] bridge_slave_0: entered promiscuous mode
[  704.547439][T16227] bridge0: port 2(bridge_slave_1) entered blocking state
[  704.564350][T16227] bridge0: port 2(bridge_slave_1) entered disabled state
[  704.598472][T16227] bridge_slave_1: entered allmulticast mode
[  704.705146][   T30] audit: type=1326 audit(1748665798.205:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16298 comm="syz.1.3293" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000
[  704.725251][T16309] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3295'.
[  704.744264][T16227] bridge_slave_1: entered promiscuous mode
[  704.753559][    T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  704.780235][    T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  704.795546][   T30] audit: type=1326 audit(1748665798.205:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16298 comm="syz.1.3293" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000
[  704.818098][ T5150] Bluetooth: hci5: command tx timeout
[  704.825726][    T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  704.860249][    T9] usb 5-1: config 1 interface 0 has no altsetting 1
[  704.871258][    T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  704.899835][   T30] audit: type=1326 audit(1748665798.205:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16298 comm="syz.1.3293" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f84539 code=0x7ffc0000
[  704.906553][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  705.051915][T16227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  705.055592][    T9] usb 5-1: Product: syz
[  705.074649][   T30] audit: type=1326 audit(1748665798.205:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16298 comm="syz.1.3293" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000
[  705.736551][T16227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  705.753525][    T9] usb 5-1: Manufacturer: syz
[  705.936158][    T9] usb 5-1: SerialNumber: syz
[  705.979172][   T30] audit: type=1326 audit(1748665798.205:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16298 comm="syz.1.3293" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000
[  705.985218][    T9] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found
[  706.042155][   T30] audit: type=1326 audit(1748665798.205:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16298 comm="syz.1.3293" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f84539 code=0x7ffc0000
[  706.102365][    T9] cdc_ncm 5-1:1.0: bind() failure
[  706.137792][T16323] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3297'.
[  706.184867][   T30] audit: type=1326 audit(1748665798.205:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16298 comm="syz.1.3293" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000
[  706.191455][T16294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  706.309371][   T30] audit: type=1326 audit(1748665798.205:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16298 comm="syz.1.3293" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000
[  706.369207][T16294] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  706.452155][    T9] usb 5-1: USB disconnect, device number 77
[  706.472237][   T30] audit: type=1326 audit(1748665798.205:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16298 comm="syz.1.3293" exe="/root/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf7f84539 code=0x7ffc0000
[  706.582163][   T30] audit: type=1326 audit(1748665798.205:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16298 comm="syz.1.3293" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000
[  706.670577][T16227] team0: Port device team_slave_0 added
[  706.715301][T16227] team0: Port device team_slave_1 added
[  706.730641][T16331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3299'.
[  706.816266][T16336] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3299'.
[  706.874963][T16227] batman_adv: batadv0: Adding interface: batadv_slave_0
[  706.890211][ T5150] Bluetooth: hci5: command tx timeout
[  706.896932][T16227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  706.929226][T16227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  706.949435][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  706.957466][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0
[  706.974030][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  707.021118][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_1
[  707.091376][    T9] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[  707.108397][ T1145] veth1_macvtap: left promiscuous mode
[  707.150785][ T1145] veth0_macvtap: left promiscuous mode
[  707.233024][ T1145] veth1_vlan: left promiscuous mode
[  707.267472][ T1145] veth0_vlan: left promiscuous mode
[  707.274933][    T9] usb 3-1: Using ep0 maxpacket: 16
[  707.283025][    T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  707.304713][    T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  707.332355][    T9] usb 3-1: config 0 interface 0 has no altsetting 0
[  707.351959][    T9] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  707.361260][ T1217] usb 4-1: new high-speed USB device number 99 using dummy_hcd
[  707.389497][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  707.421620][    T9] usb 3-1: config 0 descriptor??
[  707.525523][ T1217] usb 4-1: Using ep0 maxpacket: 16
[  707.901980][    T9] hid (null): unknown global tag 0xd
[  707.911169][    T9] hid (null): global environment stack underflow
[  707.918330][    T9] hid (null): unknown global tag 0xd
[  707.923856][    T9] hid (null): invalid report_size 20669
[  708.079413][ T2152] usb 3-1: USB disconnect, device number 62
[  708.396910][T16353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3304'.
[  708.686856][ T1145] team0 (unregistering): Port device hsr_slave_0 removed
[  708.980423][ T1145] team0 (unregistering): Port device team_slave_1 removed
[  709.057221][ T1145] team0 (unregistering): Port device team_slave_0 removed
[  709.430929][T16227] batman_adv: batadv0: Adding interface: batadv_slave_1
[  709.442138][T16227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  709.475821][T16227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  709.736764][T16227] hsr_slave_0: entered promiscuous mode
[  709.744171][T16227] hsr_slave_1: entered promiscuous mode
[  709.751856][T16227] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  709.760048][T16227] Cannot create hsr debugfs directory
[  710.169101][ T1217] usb 4-1: unable to get BOS descriptor or descriptor too short
[  710.191456][ T1217] usb 4-1: too many configurations: 235, using maximum allowed: 8
[  710.200702][ T1217] usb 4-1: unable to read config index 0 descriptor/start: -71
[  710.238173][ T1217] usb 4-1: can't read configurations, error -71
[  711.104881][ T2152] usb 5-1: new full-speed USB device number 78 using dummy_hcd
[  711.127998][T16227] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  711.149241][T16227] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  711.173450][T16227] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  711.204223][T16227] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  711.287036][ T2152] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  711.314842][ T2152] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[  711.343005][ T2152] usb 5-1: config 0 interface 0 has no altsetting 0
[  711.377922][ T2152] usb 5-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00
[  711.401293][ T2152] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  711.427727][ T2152] usb 5-1: config 0 descriptor??
[  711.558655][T16227] 8021q: adding VLAN 0 to HW filter on device bond0
[  711.609026][T16227] 8021q: adding VLAN 0 to HW filter on device team0
[  711.638520][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  711.645847][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  711.773255][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state
[  711.780446][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state
[  712.183688][ T2152] usbhid 5-1:0.0: can't add hid device: -71
[  712.196840][ T2152] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  712.282770][ T2152] usb 5-1: USB disconnect, device number 78
[  712.299108][T16227] 8021q: adding VLAN 0 to HW filter on device batadv0
[  712.620770][T16227] veth0_vlan: entered promiscuous mode
[  712.684300][T16227] veth1_vlan: entered promiscuous mode
[  712.699398][T16409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3315'.
[  712.736594][T16411] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3315'.
[  712.802272][T16227] veth0_macvtap: entered promiscuous mode
[  712.878076][T16227] veth1_macvtap: entered promiscuous mode
[  712.983660][T16227] batman_adv: batadv0: Interface activated: batadv_slave_0
[  713.051190][T16227] batman_adv: batadv0: Interface activated: batadv_slave_1
[  713.122877][T16227] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  713.148667][T16227] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  713.180841][T16227] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  713.227267][T16227] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  714.336374][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  714.367472][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  714.500057][T16426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3319'.
[  714.663934][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  714.720959][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  715.201780][T16451] FAULT_INJECTION: forcing a failure.
[  715.201780][T16451] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  715.226562][T16451] CPU: 1 UID: 0 PID: 16451 Comm: syz.0.3273 Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) 
[  715.226596][T16451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  715.226608][T16451] Call Trace:
[  715.226616][T16451]  <TASK>
[  715.226623][T16451]  dump_stack_lvl+0x189/0x250
[  715.226652][T16451]  ? __pfx____ratelimit+0x10/0x10
[  715.226669][T16451]  ? __pfx_dump_stack_lvl+0x10/0x10
[  715.226694][T16451]  ? __pfx__printk+0x10/0x10
[  715.226712][T16451]  ? fs_reclaim_acquire+0x7d/0x100
[  715.226749][T16451]  should_fail_ex+0x414/0x560
[  715.226771][T16451]  prepare_alloc_pages+0x213/0x610
[  715.226801][T16451]  __alloc_frozen_pages_noprof+0x123/0x370
[  715.226829][T16451]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  715.226861][T16451]  ? policy_nodemask+0x27c/0x720
[  715.226886][T16451]  alloc_pages_mpol+0x232/0x4a0
[  715.226917][T16451]  folio_alloc_mpol_noprof+0x39/0x70
[  715.226940][T16451]  shmem_alloc_and_add_folio+0x447/0xf60
[  715.226964][T16451]  ? filemap_get_entry+0xad/0x2f0
[  715.226979][T16451]  ? filemap_get_entry+0xad/0x2f0
[  715.226991][T16451]  ? filemap_get_entry+0xad/0x2f0
[  715.227006][T16451]  ? filemap_get_entry+0x28f/0x2f0
[  715.227022][T16451]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[  715.227047][T16451]  ? shmem_allowable_huge_orders+0x1f8/0x420
[  715.227071][T16451]  shmem_get_folio_gfp+0x59d/0x1660
[  715.227098][T16451]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  715.227132][T16451]  shmem_write_begin+0xf7/0x2b0
[  715.227158][T16451]  generic_perform_write+0x2c4/0x910
[  715.227186][T16451]  ? __pfx_generic_perform_write+0x10/0x10
[  715.227202][T16451]  ? down_write+0x162/0x1f0
[  715.227226][T16451]  ? file_update_time+0x2da/0x490
[  715.227245][T16451]  shmem_file_write_iter+0xf8/0x120
[  715.227269][T16451]  do_iter_readv_writev+0x515/0x6e0
[  715.227292][T16451]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  715.227311][T16451]  ? rcu_read_lock_any_held+0xb3/0x120
[  715.227350][T16451]  vfs_writev+0x31a/0x960
[  715.227377][T16451]  ? __lock_acquire+0xab9/0xd20
[  715.227396][T16451]  ? __pfx_vfs_writev+0x10/0x10
[  715.227430][T16451]  ? __fget_files+0x2a/0x420
[  715.227455][T16451]  ? __fget_files+0x3a0/0x420
[  715.227475][T16451]  ? __fget_files+0x2a/0x420
[  715.227510][T16451]  __ia32_compat_sys_pwritev2+0x227/0x320
[  715.227535][T16451]  ? __pfx___ia32_compat_sys_pwritev2+0x10/0x10
[  715.227561][T16451]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  715.227578][T16451]  ? lockdep_hardirqs_on+0x9c/0x150
[  715.227595][T16451]  __do_fast_syscall_32+0xb6/0x2b0
[  715.227613][T16451]  ? lockdep_hardirqs_on+0x9c/0x150
[  715.227632][T16451]  do_fast_syscall_32+0x34/0x80
[  715.227649][T16451]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  715.227668][T16451] RIP: 0023:0xf70ce539
[  715.227682][T16451] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  715.227696][T16451] RSP: 002b:00000000f50be55c EFLAGS: 00000206 ORIG_RAX: 000000000000017b
[  715.227714][T16451] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000680
[  715.227725][T16451] RDX: 0000000000000001 RSI: 0000000006000000 RDI: 0000000000000000
[  715.227739][T16451] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  715.227749][T16451] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  715.227758][T16451] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  715.227780][T16451]  </TASK>
[  716.258670][T16461] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3320'.
[  716.268784][T16461] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3320'.
[  716.394889][ T5882] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[  717.116184][T16478] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3327'.
[  717.165363][ T5882] usb 2-1: Using ep0 maxpacket: 16
[  717.171868][T16480] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3327'.
[  717.195870][ T5882] usb 2-1: config 0 has an invalid interface number: 204 but max is 0
[  717.235040][ T5882] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  717.367828][ T5882] usb 2-1: config 0 has no interface number 0
[  717.374092][ T5882] usb 2-1: config 0 interface 204 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  717.448436][ T5882] usb 2-1: config 0 interface 204 altsetting 0 endpoint 0xC has an invalid bInterval 58, changing to 9
[  717.572299][ T5882] usb 2-1: config 0 interface 204 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  717.741903][ T5882] usb 2-1: config 0 interface 204 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 13
[  717.782622][ T5882] usb 2-1: New USB device found, idVendor=06f8, idProduct=a302, bcdDevice=1a.0e
[  717.791884][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  717.811074][ T5882] usb 2-1: Product: syz
[  717.831363][ T5882] usb 2-1: Manufacturer: syz
[  717.854911][ T5882] usb 2-1: SerialNumber: syz
[  717.895530][ T5882] usb 2-1: config 0 descriptor??
[  717.895562][ T5884] usb 5-1: new high-speed USB device number 79 using dummy_hcd
[  718.064887][ T5884] usb 5-1: Using ep0 maxpacket: 16
[  718.109117][ T5884] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88
[  718.133254][ T1217] usb 2-1: USB disconnect, device number 64
[  718.165303][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  718.208068][ T5884] usb 5-1: Product: syz
[  718.215039][ T5884] usb 5-1: Manufacturer: syz
[  718.245554][ T5884] usb 5-1: SerialNumber: syz
[  718.270167][ T5884] usb 5-1: config 0 descriptor??
[  720.191675][T16529] FAULT_INJECTION: forcing a failure.
[  720.191675][T16529] name failslab, interval 1, probability 0, space 0, times 0
[  720.262044][T16529] CPU: 1 UID: 0 PID: 16529 Comm: syz.2.3334 Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) 
[  720.262076][T16529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  720.262090][T16529] Call Trace:
[  720.262104][T16529]  <TASK>
[  720.262113][T16529]  dump_stack_lvl+0x189/0x250
[  720.262154][T16529]  ? __pfx____ratelimit+0x10/0x10
[  720.262176][T16529]  ? __pfx_dump_stack_lvl+0x10/0x10
[  720.262211][T16529]  ? __pfx__printk+0x10/0x10
[  720.262240][T16529]  ? __pfx___might_resched+0x10/0x10
[  720.262266][T16529]  ? fs_reclaim_acquire+0x7d/0x100
[  720.262303][T16529]  should_fail_ex+0x414/0x560
[  720.262334][T16529]  should_failslab+0xa8/0x100
[  720.262365][T16529]  __kmalloc_noprof+0xcb/0x4f0
[  720.262399][T16529]  ? kfree+0x4d/0x440
[  720.262421][T16529]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  720.262454][T16529]  tomoyo_realpath_from_path+0xe3/0x5d0
[  720.262484][T16529]  ? tomoyo_domain+0xd9/0x130
[  720.262517][T16529]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  720.262553][T16529]  tomoyo_path_number_perm+0x1e8/0x5a0
[  720.262592][T16529]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  720.262645][T16529]  ? __lock_acquire+0xab9/0xd20
[  720.262691][T16529]  ? __fget_files+0x2a/0x420
[  720.262728][T16529]  ? __fget_files+0x3a0/0x420
[  720.262756][T16529]  ? __fget_files+0x2a/0x420
[  720.262791][T16529]  security_file_ioctl_compat+0xcb/0x2d0
[  720.262828][T16529]  __ia32_compat_sys_ioctl+0x128/0x840
[  720.262858][T16529]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[  720.262884][T16529]  ? __fget_files+0x3a0/0x420
[  720.262923][T16529]  ? fput+0xa0/0xd0
[  720.262958][T16529]  ? ksys_write+0x22a/0x250
[  720.262988][T16529]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  720.263006][T16529]  ? lockdep_hardirqs_on+0x9c/0x150
[  720.263024][T16529]  __do_fast_syscall_32+0xb6/0x2b0
[  720.263042][T16529]  ? lockdep_hardirqs_on+0x9c/0x150
[  720.263061][T16529]  do_fast_syscall_32+0x34/0x80
[  720.263077][T16529]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  720.263096][T16529] RIP: 0023:0xf70fe539
[  720.263110][T16529] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  720.263124][T16529] RSP: 002b:00000000f50ee55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  720.263143][T16529] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000004008ae89
[  720.263154][T16529] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000
[  720.263163][T16529] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  720.263173][T16529] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  720.263182][T16529] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  720.263204][T16529]  </TASK>
[  720.536693][T16529] ERROR: Out of memory at tomoyo_realpath_from_path.
[  720.876921][ T5884] speedtch 5-1:0.0: speedtch_bind: data interface not found!
[  720.901368][ T5884] speedtch 5-1:0.0: usbatm_usb_probe: bind failed: -19!
[  720.960159][ T5884] usb 5-1: USB disconnect, device number 79
[  721.490682][T16540] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3336'.
[  722.015852][T16548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3338'.
[  722.206764][T16514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3332'.
[  722.555764][T16558] fuse: Bad value for 'source'
[  722.874439][T16562] bridge1: the hash_elasticity option has been deprecated and is always 16
[  722.888271][T16562] bridge1: entered promiscuous mode
[  722.914418][T16575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  722.961566][T16571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3342'.
[  723.209170][T16575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  723.608016][T16591] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3346'.
[  724.135115][ T1217] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[  724.242003][T16605] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3349'.
[  724.305310][ T1217] usb 3-1: config 0 has no interfaces?
[  724.326517][ T1217] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  724.338173][ T1217] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  724.376810][ T1217] usb 3-1: Product: syz
[  724.401908][ T1217] usb 3-1: Manufacturer: syz
[  724.421642][ T1217] usb 3-1: SerialNumber: syz
[  724.456482][ T1217] usb 3-1: config 0 descriptor??
[  724.514567][T16612] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3351'.
[  724.525351][ T5882] usb 4-1: new high-speed USB device number 101 using dummy_hcd
[  724.761048][ T5882] usb 4-1: Using ep0 maxpacket: 32
[  724.768188][ T5882] usb 4-1: config 0 interface 0 has no altsetting 0
[  724.775516][ T5882] usb 4-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e
[  724.790553][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  724.847343][T16599] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3347'.
[  724.889662][T16621] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3354'.
[  724.899913][ T5882] usb 4-1: config 0 descriptor??
[  725.078401][ T5882] usb 4-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state
[  725.152417][T16599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  725.161547][T16599] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  725.224352][ T5882] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  725.303785][T16609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  725.312962][ T5882] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+)
[  725.315375][T16609] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  725.424674][ T5882] usb 4-1: media controller created
[  725.476870][T16626] tipc: Failed to obtain node identity
[  725.483634][T16626] tipc: Enabling of bearer <ib:dummy0> rejected, failed to enable media
[  725.499748][T16630] binder: 16627:16630 ioctl c0306201 80000700 returned -14
[  725.618160][ T5882] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  725.695128][ T1217] usb 2-1: new low-speed USB device number 65 using dummy_hcd
[  725.889752][ T1217] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  725.969074][ T1217] usb 2-1: config 0 has no interface number 0
[  726.017074][ T1217] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  726.136487][ T1217] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  726.330984][ T1217] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  726.340726][ T1217] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  726.368032][ T1217] usb 2-1: config 0 descriptor??
[  726.443650][T16629] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22
[  726.457456][ T1217] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  726.591221][T16620] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3352'.
[  726.712640][T16632] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  726.721093][T16632] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  726.759599][T16632] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  726.770311][T16632] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  726.786243][T16632] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  726.863992][T16632] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  726.909900][T16632] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  726.941641][T16632] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  726.963091][T16632] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  726.991804][T16632] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  727.018114][T16632] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  727.034470][T16632] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  727.062306][T16632] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  727.095476][T16637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  727.115623][T16637] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  727.582040][ T5884] usb 3-1: USB disconnect, device number 63
[  727.695587][T14929] Bluetooth: hci3: command 0x0406 tx timeout
[  728.552753][ T5882] set interface failed
[  728.552790][ T5882] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  728.695326][ T5882] error writing reg: 0xff, val: 0x00
[  728.715332][ T2152] usb 1-1: new high-speed USB device number 77 using dummy_hcd
[  728.825843][T14929] Bluetooth: hci0: command 0x0c1a tx timeout
[  728.832010][T14929] Bluetooth: hci4: command 0x0406 tx timeout
[  728.895444][ T2152] usb 1-1: Using ep0 maxpacket: 16
[  728.909827][ T5882] dvb_usb_mxl111sf 4-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22
[  728.921625][ T2152] usb 1-1: unable to get BOS descriptor or descriptor too short
[  728.968869][ T5150] Bluetooth: hci1: command 0x0c1a tx timeout
[  728.983139][ T5882] usb 4-1: USB disconnect, device number 101
[  728.993786][ T2152] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  729.011230][T16661] fuse: Bad value for 'source'
[  729.037169][ T5881] usb 2-1: USB disconnect, device number 65
[  729.050379][ T5150] Bluetooth: hci5: command 0x0c1a tx timeout
[  729.060558][ T2152] usb 1-1: string descriptor 0 read error: -22
[  729.098108][ T2152] usb 1-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40
[  729.289521][ T2152] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  729.765059][ T5150] Bluetooth: hci3: command 0x0406 tx timeout
[  729.816863][T16669] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3364'.
[  730.088884][ T5836] usb 1-1: USB disconnect, device number 77
[  730.146205][T16678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3366'.
[  730.190257][T16684] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3368'.
[  730.725876][T16702] netlink: 'syz.0.3371': attribute type 5 has an invalid length.
[  730.742551][T16702] ip6erspan0: entered promiscuous mode
[  730.797757][T13278] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[  730.898493][ T5150] Bluetooth: hci4: command 0x0406 tx timeout
[  730.898711][T14929] Bluetooth: hci0: command 0x0c1a tx timeout
[  730.994862][T13278] usb 3-1: Using ep0 maxpacket: 32
[  731.006269][T13278] usb 3-1: config 0 interface 0 has no altsetting 0
[  731.025676][T13278] usb 3-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e
[  731.042472][T13278] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  731.050918][T14929] Bluetooth: hci1: command 0x0c1a tx timeout
[  731.074006][T13278] usb 3-1: config 0 descriptor??
[  731.079190][ T2152] usb 4-1: new high-speed USB device number 102 using dummy_hcd
[  731.102882][T13278] usb 3-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state
[  731.131842][T14929] Bluetooth: hci5: command 0x0c1a tx timeout
[  731.142383][T13278] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  731.161695][T13278] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+)
[  731.176525][T13278] usb 3-1: media controller created
[  731.210810][T13278] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  731.275308][ T2152] usb 4-1: Using ep0 maxpacket: 32
[  731.499781][ T2152] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  731.501068][T16694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  731.535139][ T2152] usb 4-1: config 0 has no interface number 0
[  731.551925][T16694] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  731.604910][ T2152] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  731.634546][ T2152] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  731.674877][ T2152] usb 4-1: Product: syz
[  731.719872][ T2152] usb 4-1: Manufacturer: syz
[  731.724571][ T2152] usb 4-1: SerialNumber: syz
[  731.782791][ T2152] usb 4-1: config 0 descriptor??
[  731.809289][T16708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  731.869540][T16708] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  731.907247][ T2152] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  731.979116][T16690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3369'.
[  732.135731][    C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71
[  732.213141][ T2152] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  732.328154][ T2152] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  732.430396][ T2152] usb 4-1: USB disconnect, device number 102
[  732.528990][ T2152] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  732.578632][T13278] set interface failed
[  732.578668][T13278] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  732.652244][T13278] error writing reg: 0xff, val: 0x00
[  732.652993][ T2152] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  732.741557][ T2152] quatech2 4-1:0.51: device disconnected
[  732.848392][T13278] dvb_usb_mxl111sf 3-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22
[  733.011919][T14929] Bluetooth: hci0: command 0x0c1a tx timeout
[  733.082307][T13278] usb 3-1: USB disconnect, device number 64
[  733.125341][T14929] Bluetooth: hci1: command 0x0c1a tx timeout
[  733.205128][T14929] Bluetooth: hci5: command 0x0c1a tx timeout
[  733.361924][T16729] netlink: 'syz.2.3378': attribute type 4 has an invalid length.
[  733.615008][ T2152] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[  733.633420][T16738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3380'.
[  733.686843][T13278] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[  733.766526][ T2152] usb 3-1: Using ep0 maxpacket: 32
[  733.776307][ T2152] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  733.784559][ T2152] usb 3-1: config 0 has no interface number 0
[  733.796838][ T2152] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  733.812746][ T2152] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  733.828460][ T2152] usb 3-1: Product: syz
[  733.843426][ T2152] usb 3-1: Manufacturer: syz
[  733.853462][ T2152] usb 3-1: SerialNumber: syz
[  733.858485][T13278] usb 2-1: Using ep0 maxpacket: 32
[  733.877168][T13278] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  733.894997][ T5836] usb 1-1: new high-speed USB device number 78 using dummy_hcd
[  733.906432][ T2152] usb 3-1: config 0 descriptor??
[  733.915409][T13278] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  733.934189][ T2152] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  733.943675][T13278] usb 2-1: config 0 descriptor??
[  733.960572][ T2152] usb 3-1: selecting invalid altsetting 1
[  733.982786][ T2152] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  734.017313][ T2152] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  734.045800][ T2152] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  734.064934][ T5836] usb 1-1: Using ep0 maxpacket: 8
[  734.081017][ T2152] usb 3-1: media controller created
[  734.089187][ T5836] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  734.110709][ T5836] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  734.136039][T16729] usb 3-1: dvb_usb_ce6230: I2C read not implemented
[  734.148635][ T2152] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  734.157273][ T5836] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  734.185052][T13278] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  734.215061][ T5836] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  734.437453][T13278] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  734.451121][T16732] xt_CONNSECMARK: invalid mode: 0
[  734.476160][T16731] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  734.483381][ T5836] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  734.496069][ T5836] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  734.507014][T13278] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  734.514177][T13278] usb 2-1: media controller created
[  734.532060][ T2152] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  734.826880][ T2152] zl10353_read_register: readreg error (reg=127, ret==-71)
[  734.846976][T16737] netlink: 'syz.0.3381': attribute type 1 has an invalid length.
[  734.854826][T16737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3381'.
[  734.877263][ T2152] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  734.976820][ T5836] usb 1-1: usb_control_msg returned -71
[  734.986194][T13278] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  735.009921][ T5836] usbtmc 1-1:16.0: can't read capabilities
[  735.070170][ T5836] usb 1-1: USB disconnect, device number 78
[  735.104925][T13278] az6027: usb out operation failed. (-71)
[  735.141185][T13278] az6027: usb out operation failed. (-71)
[  735.155458][T13278] stb0899_attach: Driver disabled by Kconfig
[  735.163196][T13278] az6027: no front-end attached
[  735.163196][T13278] 
[  735.174013][ T2152] usb 3-1: USB disconnect, device number 65
[  735.191486][T13278] az6027: usb out operation failed. (-71)
[  735.200121][T13278] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  735.229922][T13278] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input30
[  735.281004][T13278] dvb-usb: schedule remote query interval to 400 msecs.
[  735.306322][T13278] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  735.365831][T13278] usb 2-1: USB disconnect, device number 66
[  735.538079][T13278] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  736.055147][T13278] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[  736.133602][ T5836] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[  736.335005][   T10] usb 5-1: new high-speed USB device number 80 using dummy_hcd
[  736.355005][T13278] usb 2-1: Using ep0 maxpacket: 8
[  736.362261][T13278] usb 2-1: no configurations
[  736.369599][ T5836] usb 3-1: config 0 has no interfaces?
[  736.378748][T13278] usb 2-1: can't read configurations, error -22
[  736.399241][ T5836] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  736.440798][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  736.457569][ T5836] usb 3-1: Product: syz
[  736.461788][ T5836] usb 3-1: Manufacturer: syz
[  736.474424][ T5836] usb 3-1: SerialNumber: syz
[  736.500962][ T5836] usb 3-1: config 0 descriptor??
[  736.505155][   T10] usb 5-1: Using ep0 maxpacket: 32
[  736.517686][   T10] usb 5-1: config 0 interface 0 has no altsetting 0
[  736.524447][   T10] usb 5-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e
[  736.536318][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  736.553940][   T10] usb 5-1: config 0 descriptor??
[  736.562483][T16765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3389'.
[  736.564893][T13278] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[  736.577546][T16765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3389'.
[  736.599722][   T10] usb 5-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state
[  736.620629][   T10] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  736.639989][   T10] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+)
[  736.648644][   T10] usb 5-1: media controller created
[  736.677131][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  736.830756][T13278] usb 2-1: Using ep0 maxpacket: 8
[  736.835297][T16762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  736.850826][T13278] usb 2-1: no configurations
[  736.858093][T13278] usb 2-1: can't read configurations, error -22
[  736.868359][T16762] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  736.884468][T13278] usb usb2-port1: attempt power cycle
[  737.080269][T16762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  737.110488][T16762] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  737.264923][T13278] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[  737.285700][T13278] usb 2-1: Using ep0 maxpacket: 8
[  737.295165][T13278] usb 2-1: no configurations
[  737.320549][T13278] usb 2-1: can't read configurations, error -22
[  737.389697][   T10] set interface failed
[  737.389725][   T10] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  737.413060][   T10] error writing reg: 0xff, val: 0x00
[  737.492056][   T10] dvb_usb_mxl111sf 5-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22
[  737.515969][   T10] usb 5-1: USB disconnect, device number 80
[  737.604987][T13278] usb 2-1: new high-speed USB device number 70 using dummy_hcd
[  737.635577][T13278] usb 2-1: Using ep0 maxpacket: 8
[  737.641419][T13278] usb 2-1: no configurations
[  737.646254][T13278] usb 2-1: can't read configurations, error -22
[  737.660800][T13278] usb usb2-port1: unable to enumerate USB device
[  737.792828][T16779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3392'.
[  738.314360][T16786] FAULT_INJECTION: forcing a failure.
[  738.314360][T16786] name failslab, interval 1, probability 0, space 0, times 0
[  738.327819][T16786] CPU: 0 UID: 0 PID: 16786 Comm: syz.0.3395 Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) 
[  738.327851][T16786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  738.327865][T16786] Call Trace:
[  738.327875][T16786]  <TASK>
[  738.327885][T16786]  dump_stack_lvl+0x189/0x250
[  738.327932][T16786]  ? __pfx____ratelimit+0x10/0x10
[  738.327956][T16786]  ? __pfx_dump_stack_lvl+0x10/0x10
[  738.327991][T16786]  ? __pfx__printk+0x10/0x10
[  738.328023][T16786]  ? ref_tracker_alloc+0x318/0x460
[  738.328054][T16786]  should_fail_ex+0x414/0x560
[  738.328085][T16786]  should_failslab+0xa8/0x100
[  738.328117][T16786]  kmem_cache_alloc_noprof+0x73/0x3c0
[  738.328144][T16786]  ? skb_clone+0x212/0x3a0
[  738.328183][T16786]  skb_clone+0x212/0x3a0
[  738.328221][T16786]  __netlink_deliver_tap+0x404/0x850
[  738.328265][T16786]  ? netlink_deliver_tap+0x2e/0x1b0
[  738.328296][T16786]  netlink_deliver_tap+0x19c/0x1b0
[  738.328326][T16786]  netlink_unicast+0x72f/0x8d0
[  738.328364][T16786]  netlink_sendmsg+0x805/0xb30
[  738.328404][T16786]  ? __pfx_netlink_sendmsg+0x10/0x10
[  738.328437][T16786]  ? __import_iovec+0x5d4/0x7f0
[  738.328473][T16786]  ? aa_sock_msg_perm+0x94/0x160
[  738.328499][T16786]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  738.328523][T16786]  ? __pfx_netlink_sendmsg+0x10/0x10
[  738.328554][T16786]  __sock_sendmsg+0x21c/0x270
[  738.328581][T16786]  ____sys_sendmsg+0x505/0x830
[  738.328620][T16786]  ? __pfx_____sys_sendmsg+0x10/0x10
[  738.328670][T16786]  ___sys_sendmsg+0x21f/0x2a0
[  738.328704][T16786]  ? __pfx____sys_sendmsg+0x10/0x10
[  738.328777][T16786]  ? __fget_files+0x2a/0x420
[  738.328807][T16786]  ? __fget_files+0x3a0/0x420
[  738.328850][T16786]  __sys_sendmsg+0x164/0x220
[  738.328884][T16786]  ? __pfx___sys_sendmsg+0x10/0x10
[  738.328939][T16786]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  738.328964][T16786]  ? lockdep_hardirqs_on+0x9c/0x150
[  738.328989][T16786]  __do_fast_syscall_32+0xb6/0x2b0
[  738.329015][T16786]  ? lockdep_hardirqs_on+0x9c/0x150
[  738.329042][T16786]  do_fast_syscall_32+0x34/0x80
[  738.329067][T16786]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  738.329094][T16786] RIP: 0023:0xf70ce539
[  738.329113][T16786] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  738.329133][T16786] RSP: 002b:00000000f50be55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  738.329157][T16786] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300
[  738.329173][T16786] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  738.329187][T16786] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  738.329200][T16786] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  738.329214][T16786] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  738.329246][T16786]  </TASK>
[  738.894240][ T5836] usb 3-1: USB disconnect, device number 66
[  739.560211][T16805] syzkaller1: entered promiscuous mode
[  739.575399][T16805] syzkaller1: entered allmulticast mode
[  739.636771][   T30] kauditd_printk_skb: 16 callbacks suppressed
[  739.636790][   T30] audit: type=1326 audit(1748665833.155:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16806 comm="syz.1.3401" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x0
[  739.856954][T16813] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3402'.
[  739.959196][T16816] ptrace attach of "./syz-executor exec"[16227] was attempted by "./syz-executor exec"[16816]
[  740.284892][ T5881] usb 2-1: new high-speed USB device number 71 using dummy_hcd
[  740.454927][ T5881] usb 2-1: Using ep0 maxpacket: 32
[  740.470613][ T5881] usb 2-1: config 0 interface 0 has no altsetting 0
[  740.477868][ T5881] usb 2-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e
[  740.545012][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  740.606040][ T5881] usb 2-1: config 0 descriptor??
[  740.707916][ T5881] usb 2-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state
[  740.774564][ T5881] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  740.794177][ T5881] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+)
[  740.802651][ T5881] usb 2-1: media controller created
[  740.846818][ T5881] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  740.921641][T16819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  740.931952][T16830] fuse: Bad value for 'source'
[  740.947661][T16819] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  741.573718][T16819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  741.677938][T16819] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  742.034554][ T5881] set interface failed
[  742.034582][ T5881] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  742.059037][ T5881] error writing reg: 0xff, val: 0x00
[  742.150163][ T5881] dvb_usb_mxl111sf 2-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22
[  742.179202][ T5881] usb 2-1: USB disconnect, device number 71
[  742.238172][ T5836] usb 1-1: new high-speed USB device number 79 using dummy_hcd
[  742.278835][T16839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3408'.
[  742.438935][ T5836] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  742.449980][ T5836] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  742.469802][ T5836] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  742.483061][ T5836] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  742.511916][ T5836] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  742.546039][ T5836] usb 1-1: config 0 descriptor??
[  742.724377][T16845] bridge0: port 3(vlan3) entered blocking state
[  742.735980][T16845] bridge0: port 3(vlan3) entered disabled state
[  742.746030][T16845] vlan3: entered allmulticast mode
[  742.751555][T16845] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  742.790302][T16845] vlan3: entered promiscuous mode
[  742.844030][T16845] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  742.992668][ T5836] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0
[  743.011412][ T5836] plantronics 0003:047F:FFFF.001F: No inputs registered, leaving
[  743.038725][ T5836] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  743.245101][T13278] usb 4-1: new high-speed USB device number 103 using dummy_hcd
[  743.341125][   T24] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[  743.414934][T13278] usb 4-1: Using ep0 maxpacket: 32
[  743.422584][T13278] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  743.435804][T13278] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  743.446895][T13278] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  743.455445][T13278] usb 4-1: Product: syz
[  743.459644][T13278] usb 4-1: Manufacturer: syz
[  743.464263][T13278] usb 4-1: SerialNumber: syz
[  743.472245][T13278] usb 4-1: config 0 descriptor??
[  743.477822][   T24] usb 3-1: device descriptor read/64, error -71
[  743.485026][T16854] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  743.495746][T13278] hub 4-1:0.0: bad descriptor, ignoring hub
[  743.501750][T13278] hub 4-1:0.0: probe with driver hub failed with error -5
[  743.545078][ T5836] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[  743.705009][ T5836] usb 2-1: Using ep0 maxpacket: 16
[  743.712109][ T5836] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  743.722721][   T24] usb 3-1: new high-speed USB device number 68 using dummy_hcd
[  743.730384][ T5836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  743.741760][ T5836] usb 2-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping
[  743.753072][ T5836] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  743.767790][ T5836] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  743.777179][ T5836] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  743.785316][ T5836] usb 2-1: Manufacturer: syz
[  743.792732][ T5836] usb 2-1: config 0 descriptor??
[  743.895160][   T24] usb 3-1: device descriptor read/64, error -71
[  744.018417][   T24] usb usb3-port1: attempt power cycle
[  744.114410][   T10] usb 2-1: USB disconnect, device number 72
[  744.145062][ T5881] usb 5-1: new high-speed USB device number 81 using dummy_hcd
[  744.306312][ T5881] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  744.314511][ T5881] usb 5-1: config 0 has no interface number 0
[  744.323009][ T5881] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  744.332276][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  744.340383][ T5881] usb 5-1: Product: syz
[  744.344641][ T5881] usb 5-1: Manufacturer: syz
[  744.349335][ T5881] usb 5-1: SerialNumber: syz
[  744.360586][ T5881] usb 5-1: config 0 descriptor??
[  744.375020][ T5836] usb 1-1: reset high-speed USB device number 79 using dummy_hcd
[  744.383004][   T24] usb 3-1: new high-speed USB device number 69 using dummy_hcd
[  744.408928][   T24] usb 3-1: device descriptor read/8, error -71
[  744.514892][ T5836] usb 1-1: device descriptor read/64, error -32
[  744.570859][ T5881] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  744.582035][ T5881] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  744.593611][ T5881] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  744.602447][ T5881] usb 5-1: media controller created
[  744.622919][ T5881] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  744.654909][   T24] usb 3-1: new high-speed USB device number 70 using dummy_hcd
[  744.665121][ T2152] usb 4-1: USB disconnect, device number 103
[  744.677455][   T24] usb 3-1: device descriptor read/8, error -71
[  744.754902][ T5836] usb 1-1: reset high-speed USB device number 79 using dummy_hcd
[  744.776675][T16854] input: syz1 as /devices/virtual/input/input31
[  744.795270][   T24] usb usb3-port1: unable to enumerate USB device
[  744.883890][T16874] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3421'.
[  744.894959][ T5836] usb 1-1: device descriptor read/64, error -32
[  744.983767][T16872] bond1: entered promiscuous mode
[  745.011358][T16872] bond1: entered allmulticast mode
[  745.017664][T16872] 8021q: adding VLAN 0 to HW filter on device bond1
[  745.151519][T16872] bond1 (unregistering): Released all slaves
[  745.165647][ T5836] usb 1-1: reset high-speed USB device number 79 using dummy_hcd
[  745.207970][ T5836] usb 1-1: device descriptor read/8, error -32
[  745.225047][   T24] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[  745.386161][   T24] usb 2-1: Using ep0 maxpacket: 32
[  745.393717][   T24] usb 2-1: config 0 interface 0 has no altsetting 0
[  745.400818][   T24] usb 2-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e
[  745.410358][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  745.421905][   T24] usb 2-1: config 0 descriptor??
[  745.436736][   T24] usb 2-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state
[  745.455542][   T24] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  745.469275][   T24] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+)
[  745.478680][   T24] usb 2-1: media controller created
[  745.503284][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  745.635722][T16878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  745.645551][T16878] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  745.691443][ T5881] i2c i2c-1: ec100: i2c rd failed=-110 reg=33
[  745.766117][ T5881] usb 5-1: USB disconnect, device number 81
[  745.850008][T16878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  745.883083][T16878] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  746.098440][T13278] usb 1-1: USB disconnect, device number 79
[  746.102010][T16891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3426'.
[  746.241292][   T24] set interface failed
[  746.241327][   T24] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  746.265796][   T24] error writing reg: 0xff, val: 0x00
[  746.352511][   T24] dvb_usb_mxl111sf 2-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22
[  746.396587][   T24] usb 2-1: USB disconnect, device number 73
[  746.705250][T13278] usb 3-1: new high-speed USB device number 71 using dummy_hcd
[  746.796297][T16903] netlink: 'syz.4.3430': attribute type 1 has an invalid length.
[  746.857388][T13278] usb 3-1: config 0 interface 0 has no altsetting 0
[  746.864048][T13278] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[  746.914806][T13278] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  746.948859][T13278] usb 3-1: config 0 descriptor??
[  747.080770][T16888] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3425'.
[  747.285444][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  747.291837][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  747.514108][T16919] fuse: Bad value for 'source'
[  747.854892][T13278] video4linux radio48: keene_cmd_main failed (-110)
[  747.872342][T13278] radio-keene 3-1:0.0: V4L2 device registered as radio48
[  748.752877][T16933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3438'.
[  748.826690][T16936] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3439'.
[  749.114900][T13278] usb 4-1: new high-speed USB device number 104 using dummy_hcd
[  749.135466][   T24] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[  749.314908][   T24] usb 2-1: Using ep0 maxpacket: 16
[  749.320193][T13278] usb 4-1: Using ep0 maxpacket: 32
[  749.329029][T13278] usb 4-1: config 0 interface 0 has no altsetting 0
[  749.336754][T13278] usb 4-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e
[  749.347280][   T24] usb 2-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 70, changing to 10
[  749.358854][T13278] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  749.367255][   T24] usb 2-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  749.382721][   T24] usb 2-1: config 1 interface 0 has no altsetting 0
[  749.392603][T13278] usb 4-1: config 0 descriptor??
[  749.401912][T13278] usb 4-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state
[  749.412866][   T24] usb 2-1: New USB device found, idVendor=056a, idProduct=0032, bcdDevice= 0.40
[  749.422395][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  749.432986][   T24] usb 2-1: Product: ࠬ
[  749.437935][T13278] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  749.448500][   T24] usb 2-1: Manufacturer: ᵙ粖唸컐䍎恆솞Ἓ
[  749.456753][T13278] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+)
[  749.468217][T13278] usb 4-1: media controller created
[  749.500241][T13278] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  749.605193][T16938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  749.618608][T16938] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  749.761175][   T24] usbhid 2-1:1.0: can't add hid device: -71
[  749.768511][   T24] usbhid 2-1:1.0: probe with driver usbhid failed with error -71
[  749.781131][   T24] usb 2-1: USB disconnect, device number 74
[  749.863191][T16955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  749.872295][T16955] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  750.605519][   T10] usb 3-1: USB disconnect, device number 71
[  750.674872][ T2152] usb 1-1: new high-speed USB device number 80 using dummy_hcd
[  751.003301][ T2152] usb 1-1: config 0 has no interfaces?
[  751.022647][ T2152] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  751.032082][ T2152] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  751.059558][ T2152] usb 1-1: Product: syz
[  751.074817][ T2152] usb 1-1: Manufacturer: syz
[  751.110495][ T2152] usb 1-1: SerialNumber: syz
[  751.162393][T16972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  751.184149][ T2152] usb 1-1: config 0 descriptor??
[  751.255508][T16972] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  751.394880][   T10] usb 3-1: new high-speed USB device number 72 using dummy_hcd
[  751.919564][T13278] set interface failed
[  751.919601][T13278] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  751.960196][T13278] error writing reg: 0xff, val: 0x00
[  752.030245][T16965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3447'.
[  752.045860][T16960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3446'.
[  752.096185][T16981] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3452'.
[  752.114453][T13278] dvb_usb_mxl111sf 4-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22
[  752.133612][T16983] FAULT_INJECTION: forcing a failure.
[  752.133612][T16983] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  752.185751][T16983] CPU: 0 UID: 0 PID: 16983 Comm: syz.2.3451 Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) 
[  752.185783][T16983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  752.185797][T16983] Call Trace:
[  752.185805][T16983]  <TASK>
[  752.185814][T16983]  dump_stack_lvl+0x189/0x250
[  752.185853][T16983]  ? __pfx____ratelimit+0x10/0x10
[  752.185873][T16983]  ? __pfx_dump_stack_lvl+0x10/0x10
[  752.185905][T16983]  ? __pfx__printk+0x10/0x10
[  752.185941][T16983]  should_fail_ex+0x414/0x560
[  752.185970][T16983]  _copy_to_user+0x31/0xb0
[  752.186003][T16983]  simple_read_from_buffer+0xe1/0x170
[  752.186055][T16983]  proc_fail_nth_read+0x1df/0x250
[  752.186093][T16983]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  752.186131][T16983]  ? rw_verify_area+0x258/0x650
[  752.186155][T16983]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  752.186190][T16983]  vfs_read+0x200/0x980
[  752.186221][T16983]  ? __pfx___mutex_lock+0x10/0x10
[  752.186242][T16983]  ? __pfx_vfs_read+0x10/0x10
[  752.186265][T16983]  ? __fget_files+0x2a/0x420
[  752.186312][T16983]  ? __fget_files+0x3a0/0x420
[  752.186337][T16983]  ? __fget_files+0x2a/0x420
[  752.186370][T16983]  ksys_read+0x145/0x250
[  752.186396][T16983]  ? __pfx_ksys_read+0x10/0x10
[  752.186421][T16983]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  752.186443][T16983]  ? lockdep_hardirqs_on+0x9c/0x150
[  752.186471][T16983]  __do_fast_syscall_32+0xb6/0x2b0
[  752.186494][T16983]  ? lockdep_hardirqs_on+0x9c/0x150
[  752.186517][T16983]  do_fast_syscall_32+0x34/0x80
[  752.186538][T16983]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  752.186562][T16983] RIP: 0023:0xf70fe539
[  752.186581][T16983] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  752.186598][T16983] RSP: 002b:00000000f50ee590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003
[  752.186619][T16983] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50ee620
[  752.186632][T16983] RDX: 000000000000000f RSI: 00000000f7462ff4 RDI: 0000000000000000
[  752.186644][T16983] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[  752.186655][T16983] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  752.186666][T16983] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  752.186691][T16983]  </TASK>
[  752.191013][T13278] usb 4-1: USB disconnect, device number 104
[  752.826273][   T24] usb 3-1: new high-speed USB device number 73 using dummy_hcd
[  753.126090][   T10] usb 4-1: new high-speed USB device number 105 using dummy_hcd
[  753.134982][   T24] usb 3-1: Using ep0 maxpacket: 16
[  753.149296][   T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  753.166777][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  753.183232][   T24] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  753.192870][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  753.229843][   T24] usb 3-1: Product: syz
[  753.244454][   T24] usb 3-1: Manufacturer: syz
[  753.257790][   T24] usb 3-1: SerialNumber: syz
[  753.278653][   T24] usb 3-1: config 0 descriptor??
[  753.297132][   T24] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  753.310735][   T24] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[  753.312402][   T10] usb 4-1: config 0 interface 0 has no altsetting 0
[  753.329356][   T10] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[  753.346749][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  753.384464][   T10] usb 4-1: config 0 descriptor??
[  753.424551][T17000] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3460'.
[  753.760259][ T5836] usb 1-1: USB disconnect, device number 80
[  753.975194][   T24] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[  753.995181][   T24] em28xx 3-1:0.0: Config register raw data: 0x33
[  754.001569][   T24] em28xx 3-1:0.0: I2S Audio (3 sample rate(s))
[  754.008078][   T24] em28xx 3-1:0.0: No AC97 audio processor
[  754.254892][ T5836] usb 1-1: new high-speed USB device number 81 using dummy_hcd
[  754.414942][ T5836] usb 1-1: Using ep0 maxpacket: 32
[  754.482541][ T5836] usb 1-1: config 0 interface 0 has no altsetting 0
[  754.492851][ T5836] usb 1-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e
[  754.512905][ T5836] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  754.525190][   T10] video4linux radio48: keene_cmd_main failed (-110)
[  754.582677][   T10] radio-keene 4-1:0.0: V4L2 device registered as radio48
[  754.641243][ T5836] usb 1-1: config 0 descriptor??
[  754.661058][ T5836] usb 1-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state
[  754.829026][   T24] usb 3-1: USB disconnect, device number 73
[  754.848902][ T5836] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  754.860871][T17007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  754.873499][T17007] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  754.891905][ T5836] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+)
[  754.922724][ T5836] usb 1-1: media controller created
[  755.027304][ T5836] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  755.183528][T17027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  755.192527][T17027] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  756.721067][   T24] usb 4-1: USB disconnect, device number 105
[  756.790087][T17030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3466'.
[  756.914971][ T1217] usb 5-1: new full-speed USB device number 82 using dummy_hcd
[  757.002252][ T5836] set interface failed
[  757.002284][ T5836] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  757.015243][ T5836] error writing reg: 0xff, val: 0x00
[  757.190699][ T1217] usb 5-1: config index 0 descriptor too short (expected 69, got 36)
[  757.207370][ T5836] dvb_usb_mxl111sf 1-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22
[  757.263827][ T1217] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  757.309154][ T5836] usb 1-1: USB disconnect, device number 81
[  757.328751][T17050] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  757.393160][ T1217] usb 5-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89
[  757.484558][ T1217] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  757.546313][ T1217] usb 5-1: Product: syz
[  757.570046][ T1217] usb 5-1: Manufacturer: syz
[  757.574714][ T1217] usb 5-1: SerialNumber: syz
[  757.684098][ T1217] usb 5-1: config 0 descriptor??
[  757.819493][ T1217] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622
[  757.996109][ T1217] gspca_pac7302: reg_w() failed i: ff v: 01 error -71
[  758.033472][ T1217] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -71
[  758.065201][ T1217] usb 5-1: USB disconnect, device number 82
[  758.205119][ T5836] usb 2-1: new high-speed USB device number 75 using dummy_hcd
[  758.394856][ T5836] usb 2-1: Using ep0 maxpacket: 16
[  758.412523][ T5836] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  758.444972][ T5836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  758.473094][ T5836] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  758.504986][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  758.533595][ T5836] usb 2-1: Product: syz
[  758.553911][ T5836] usb 2-1: Manufacturer: syz
[  758.574174][ T5836] usb 2-1: SerialNumber: syz
[  758.589371][ T2152] usb 1-1: new high-speed USB device number 82 using dummy_hcd
[  758.606950][ T5836] usb 2-1: config 0 descriptor??
[  758.627425][ T5836] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  758.655083][ T5836] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class)
[  758.867233][ T2152] usb 1-1: config 0 interface 0 has no altsetting 0
[  758.878222][ T2152] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[  758.897675][ T2152] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  758.945367][ T2152] usb 1-1: config 0 descriptor??
[  759.104984][   T10] usb 3-1: new high-speed USB device number 74 using dummy_hcd
[  759.324825][   T10] usb 3-1: Using ep0 maxpacket: 32
[  759.341326][   T10] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  759.356885][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  759.379323][ T5836] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[  759.386827][ T5836] em28xx 2-1:0.0: Config register raw data: 0x33
[  759.393209][ T5836] em28xx 2-1:0.0: I2S Audio (3 sample rate(s))
[  759.417740][ T5836] em28xx 2-1:0.0: No AC97 audio processor
[  759.433089][   T10] usb 3-1: config 0 descriptor??
[  759.670137][   T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  759.681778][   T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  759.747957][   T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  759.763634][   T10] usb 3-1: media controller created
[  759.805331][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  759.931033][T17078] xt_CONNSECMARK: invalid mode: 0
[  760.097260][ T2152] video4linux radio48: keene_cmd_main failed (-110)
[  760.106971][ T2152] radio-keene 1-1:0.0: V4L2 device registered as radio48
[  760.124041][   T10] az6027: usb out operation failed. (-71)
[  760.132616][   T10] az6027: usb out operation failed. (-71)
[  760.144515][   T10] stb0899_attach: Driver disabled by Kconfig
[  760.152246][   T10] az6027: no front-end attached
[  760.152246][   T10] 
[  760.165635][   T10] az6027: usb out operation failed. (-71)
[  760.173705][   T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  760.218756][   T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input32
[  760.220737][ T5836] usb 2-1: USB disconnect, device number 75
[  760.279288][   T10] dvb-usb: schedule remote query interval to 400 msecs.
[  760.332424][   T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  760.391905][   T10] usb 3-1: USB disconnect, device number 74
[  760.550038][   T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  761.251315][T17126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3495'.
[  761.263207][T17126] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3495'.
[  761.474895][ T5836] usb 3-1: new high-speed USB device number 75 using dummy_hcd
[  761.652936][ T2152] usb 1-1: USB disconnect, device number 82
[  761.659239][ T5836] usb 3-1: Using ep0 maxpacket: 16
[  761.668157][T17137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3498'.
[  761.676687][ T5836] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  761.693917][T17137] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3498'.
[  761.697379][ T5836] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  761.750822][ T5836] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  761.807206][ T5836] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  761.821955][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  761.850708][ T5836] usb 3-1: Product: syz
[  761.863075][ T5836] usb 3-1: Manufacturer: syz
[  761.887098][ T5836] usb 3-1: SerialNumber: syz
[  762.145068][ T5836] usb 3-1: 0:2 : does not exist
[  762.154895][ T2152] usb 1-1: new high-speed USB device number 83 using dummy_hcd
[  762.172136][ T5836] usb 3-1: 1:0: failed to get current value for ch 0 (-22)
[  762.269410][ T5836] usb 3-1: USB disconnect, device number 75
[  762.315510][ T2152] usb 1-1: Using ep0 maxpacket: 16
[  762.336639][ T2152] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  762.350036][T17156] FAULT_INJECTION: forcing a failure.
[  762.350036][T17156] name failslab, interval 1, probability 0, space 0, times 0
[  762.376870][ T2152] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  762.394984][T17156] CPU: 1 UID: 0 PID: 17156 Comm: syz.2.3502 Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) 
[  762.395017][T17156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  762.395032][T17156] Call Trace:
[  762.395041][T17156]  <TASK>
[  762.395051][T17156]  dump_stack_lvl+0x189/0x250
[  762.395092][T17156]  ? __pfx____ratelimit+0x10/0x10
[  762.395115][T17156]  ? __pfx_dump_stack_lvl+0x10/0x10
[  762.395150][T17156]  ? __pfx__printk+0x10/0x10
[  762.395177][T17156]  ? __pfx___might_resched+0x10/0x10
[  762.395218][T17156]  ? fs_reclaim_acquire+0x7d/0x100
[  762.395255][T17156]  should_fail_ex+0x414/0x560
[  762.395285][T17156]  should_failslab+0xa8/0x100
[  762.395325][T17156]  __kmalloc_noprof+0xcb/0x4f0
[  762.395352][T17156]  ? sock_kmalloc+0xd6/0x160
[  762.395409][T17156]  sock_kmalloc+0xd6/0x160
[  762.395446][T17156]  skcipher_recvmsg+0x55c/0x11c0
[  762.395495][T17156]  ? __pfx_skcipher_recvmsg+0x10/0x10
[  762.395525][T17156]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  762.395548][T17156]  ? security_socket_recvmsg+0x7e/0x2e0
[  762.395579][T17156]  ? __pfx_skcipher_recvmsg+0x10/0x10
[  762.395606][T17156]  sock_recvmsg+0x22c/0x270
[  762.395635][T17156]  ____sys_recvmsg+0x1c9/0x460
[  762.395678][T17156]  ? __pfx_____sys_recvmsg+0x10/0x10
[  762.395708][T17156]  ? get_compat_msghdr+0x37e/0x4a0
[  762.395765][T17156]  ___sys_recvmsg+0x1b5/0x510
[  762.395805][T17156]  ? __pfx____sys_recvmsg+0x10/0x10
[  762.395864][T17156]  ? __fget_files+0x3a0/0x420
[  762.395909][T17156]  do_recvmmsg+0x36a/0x770
[  762.395952][T17156]  ? __pfx_do_recvmmsg+0x10/0x10
[  762.395999][T17156]  ? __pfx_vfs_write+0x10/0x10
[  762.396043][T17156]  __sys_recvmmsg+0x19d/0x280
[  762.396080][T17156]  ? __pfx___sys_recvmmsg+0x10/0x10
[  762.396110][T17156]  ? ksys_write+0x22a/0x250
[  762.396148][T17156]  __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0
[  762.396188][T17156]  __do_fast_syscall_32+0xb6/0x2b0
[  762.396214][T17156]  ? lockdep_hardirqs_on+0x9c/0x150
[  762.396241][T17156]  do_fast_syscall_32+0x34/0x80
[  762.396266][T17156]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  762.396294][T17156] RIP: 0023:0xf70fe539
[  762.396327][T17156] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  762.396348][T17156] RSP: 002b:00000000f50ee55c EFLAGS: 00000206 ORIG_RAX: 0000000000000151
[  762.396371][T17156] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080001100
[  762.396387][T17156] RDX: 0000000000000001 RSI: 00000000400000a0 RDI: 0000000000000000
[  762.396401][T17156] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  762.396415][T17156] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  762.396429][T17156] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  762.396461][T17156]  </TASK>
[  762.677530][    C1] vkms_vblank_simulate: vblank timer overrun
[  762.850528][T17160] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  762.991474][ T2152] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  763.000654][ T2152] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  763.010311][ T2152] usb 1-1: Product: syz
[  763.014519][ T2152] usb 1-1: Manufacturer: syz
[  763.064888][ T2152] usb 1-1: SerialNumber: syz
[  763.073014][ T2152] usb 1-1: config 0 descriptor??
[  763.092278][ T2152] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  763.130657][ T2152] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[  763.365282][ T5836] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[  763.545450][ T5836] usb 2-1: Using ep0 maxpacket: 16
[  763.572259][ T5836] usb 2-1: unable to get BOS descriptor or descriptor too short
[  763.585228][ T5836] usb 2-1: config 1 interface 0 altsetting 201 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  763.598832][ T5836] usb 2-1: config 1 interface 0 has no altsetting 0
[  763.635505][ T5836] usb 2-1: New USB device found, idVendor=056a, idProduct=00d3, bcdDevice= 0.40
[  763.646888][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  763.662518][ T5836] usb 2-1: Product: syz
[  763.676516][ T5836] usb 2-1: Manufacturer: syz
[  763.690721][ T5836] usb 2-1: SerialNumber: syz
[  763.777138][ T2152] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  763.847496][ T2152] em28xx 1-1:0.0: Config register raw data: 0x33
[  763.853932][ T2152] em28xx 1-1:0.0: I2S Audio (3 sample rate(s))
[  763.895532][ T2152] em28xx 1-1:0.0: No AC97 audio processor
[  764.053487][T17162] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3501'.
[  764.075816][T13278] usb 4-1: new high-speed USB device number 106 using dummy_hcd
[  764.394987][T13278] usb 4-1: Using ep0 maxpacket: 32
[  764.463588][T13278] usb 4-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8
[  764.480469][T13278] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  764.550935][T13278] usb 4-1: Product: syz
[  764.572278][T13278] usb 4-1: Manufacturer: syz
[  764.608498][T13278] usb 4-1: SerialNumber: syz
[  764.631886][T13278] usb 4-1: config 0 descriptor??
[  764.671059][   T10] usb 1-1: USB disconnect, device number 83
[  764.785224][T13278] empeg 4-1:0.0: empeg converter detected
[  764.879583][T13278] usb 4-1: active config #0 != 1 ??
[  765.835043][   T10] usb 1-1: new high-speed USB device number 84 using dummy_hcd
[  766.025013][T17192] fuse: Bad value for 'source'
[  766.517132][   T10] usb 1-1: config 0 interface 0 has no altsetting 0
[  766.524178][   T10] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[  766.557453][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  766.632349][   T10] usb 1-1: config 0 descriptor??
[  766.957231][ T5836] usbhid 2-1:1.0: can't add hid device: -71
[  766.963555][ T5836] usbhid 2-1:1.0: probe with driver usbhid failed with error -71
[  767.008501][ T5836] usb 2-1: USB disconnect, device number 76
[  768.124911][   T10] video4linux radio48: keene_cmd_main failed (-110)
[  768.160592][   T10] radio-keene 1-1:0.0: V4L2 device registered as radio48
[  768.342690][   T10] usb 4-1: USB disconnect, device number 106
[  768.504220][T17202] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3512'.
[  768.560738][T17202] unsupported nlmsg_type 40
[  768.690126][T17206] netlink: 'syz.2.3512': attribute type 10 has an invalid length.
[  768.698676][T17206] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3512'.
[  769.316857][   T10] usb 4-1: new high-speed USB device number 107 using dummy_hcd
[  769.578394][   T10] usb 4-1: device descriptor read/64, error -71
[  769.823927][ T5882] usb 1-1: USB disconnect, device number 84
[  769.835168][   T10] usb 4-1: new high-speed USB device number 108 using dummy_hcd
[  769.855286][ T5881] usb 5-1: new full-speed USB device number 83 using dummy_hcd
[  769.965206][   T10] usb 4-1: device descriptor read/64, error -71
[  770.018486][ T5881] usb 5-1: config index 0 descriptor too short (expected 69, got 36)
[  770.044872][ T5881] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  770.058242][ T5881] usb 5-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89
[  770.077566][   T10] usb usb4-port1: attempt power cycle
[  770.097853][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  770.151967][ T5881] usb 5-1: Product: syz
[  770.160353][ T5881] usb 5-1: Manufacturer: syz
[  770.172110][ T5881] usb 5-1: SerialNumber: syz
[  770.184041][ T5881] usb 5-1: config 0 descriptor??
[  770.201330][ T5881] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622
[  770.424500][ T5881] gspca_pac7302: reg_w() failed i: ff v: 01 error -71
[  770.434351][ T5881] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -71
[  770.454435][   T10] usb 4-1: new high-speed USB device number 109 using dummy_hcd
[  770.479541][ T5881] usb 5-1: USB disconnect, device number 83
[  770.521463][   T10] usb 4-1: device descriptor read/8, error -71
[  770.535023][ T5836] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[  770.774847][ T5836] usb 2-1: Using ep0 maxpacket: 16
[  770.781841][ T5836] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  770.794000][ T5836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  770.814847][   T10] usb 4-1: new high-speed USB device number 110 using dummy_hcd
[  770.835619][   T10] usb 4-1: device descriptor read/8, error -71
[  770.894633][ T5836] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  770.904427][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  770.916071][ T5836] usb 2-1: Product: syz
[  770.927095][ T5836] usb 2-1: Manufacturer: syz
[  770.937591][ T5836] usb 2-1: SerialNumber: syz
[  770.947169][   T10] usb usb4-port1: unable to enumerate USB device
[  770.957333][ T5836] usb 2-1: config 0 descriptor??
[  771.156149][ T5836] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  771.184847][ T5836] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class)
[  771.378387][T17239] netlink: 4400 bytes leftover after parsing attributes in process `syz.4.3522'.
[  771.425513][T17239] workqueue: name exceeds WQ_NAME_LEN. Truncating to: �`]��I�q�!�>�s���*��!)\�+`
[  771.649750][ T5836] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[  771.673533][ T5836] em28xx 2-1:0.0: Config register raw data: 0x33
[  771.680446][ T5836] em28xx 2-1:0.0: I2S Audio (3 sample rate(s))
[  771.688853][ T5836] em28xx 2-1:0.0: No AC97 audio processor
[  771.715038][ T5881] usb 1-1: new high-speed USB device number 85 using dummy_hcd
[  771.875009][T13278] usb 5-1: new high-speed USB device number 84 using dummy_hcd
[  771.912257][ T5881] usb 1-1: config 0 has no interfaces?
[  771.972888][ T5881] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  771.982551][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  771.994896][ T5881] usb 1-1: Product: syz
[  771.999325][ T5881] usb 1-1: Manufacturer: syz
[  772.004206][ T5881] usb 1-1: SerialNumber: syz
[  772.032667][ T5881] usb 1-1: config 0 descriptor??
[  772.045984][T13278] usb 5-1: Using ep0 maxpacket: 8
[  772.046174][   T10] usb 3-1: new high-speed USB device number 76 using dummy_hcd
[  772.087055][T13278] usb 5-1: config 0 has an invalid interface number: 25 but max is 0
[  772.153975][T13278] usb 5-1: config 0 has no interface number 0
[  772.178957][T13278] usb 5-1: config 0 interface 25 altsetting 6 endpoint 0x8 has invalid maxpacket 544, setting to 64
[  772.196353][T13278] usb 5-1: config 0 interface 25 has no altsetting 0
[  772.213892][T13278] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c00, bcdDevice=b4.82
[  772.214960][   T10] usb 3-1: Using ep0 maxpacket: 32
[  772.233993][   T10] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  772.263675][T13278] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  772.264100][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  772.294330][T13278] usb 5-1: Product: syz
[  772.303489][T13278] usb 5-1: Manufacturer: syz
[  772.308486][T13278] usb 5-1: SerialNumber: syz
[  772.317067][T13278] usb 5-1: config 0 descriptor??
[  772.319422][   T10] usb 3-1: config 0 descriptor??
[  772.369496][   T10] gspca_main: sunplus-2.14.0 probing 041e:400b
[  772.474853][ T2152] usb 4-1: new high-speed USB device number 111 using dummy_hcd
[  772.492014][ T5881] usb 2-1: USB disconnect, device number 77
[  772.546753][T13278] usb 5-1: bad CDC descriptors
[  772.558577][T13278] cp210x 5-1:0.25: cp210x converter detected
[  772.565801][T13278] cp210x 5-1:0.25: failed to get vendor val 0x370b size 1: -71
[  772.573664][T13278] cp210x 5-1:0.25: querying part number failed
[  772.587266][T13278] usb 5-1: cp210x converter now attached to ttyUSB0
[  772.604395][T13278] usb 5-1: USB disconnect, device number 84
[  772.629719][T13278] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  772.640948][ T2152] usb 4-1: config 0 interface 0 has no altsetting 0
[  772.647836][ T2152] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[  772.676958][ T2152] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  772.690240][T13278] cp210x 5-1:0.25: device disconnected
[  772.708853][ T2152] usb 4-1: config 0 descriptor??
[  773.333943][T17257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3527'.
[  773.491286][T17261] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  773.512954][T17261] batadv_slave_0: entered promiscuous mode
[  773.514317][T17263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3530'.
[  773.534183][T17261] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  773.774202][   T10] gspca_sunplus: reg_w_riv err -71
[  773.780563][   T10] sunplus 3-1:0.0: probe with driver sunplus failed with error -71
[  773.797233][   T10] usb 3-1: USB disconnect, device number 76
[  773.825108][ T2152] video4linux radio48: keene_cmd_main failed (-110)
[  773.841464][ T2152] radio-keene 4-1:0.0: V4L2 device registered as radio48
[  774.074900][ T5836] usb 5-1: new high-speed USB device number 85 using dummy_hcd
[  774.301486][ T5836] usb 5-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=61.d8
[  774.321210][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  774.358596][ T5836] usb 5-1: Product: syz
[  774.381634][ T5836] usb 5-1: Manufacturer: syz
[  774.403650][ T5836] usb 5-1: SerialNumber: syz
[  774.426401][ T5836] usb 5-1: config 0 descriptor??
[  774.443395][ T5836] usb 5-1: selecting invalid altsetting 1
[  774.545495][ T5836] flexcop_usb: set interface failed.
[  774.573657][ T5836] b2c2_flexcop_usb 5-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22
[  774.590673][ T5882] usb 1-1: USB disconnect, device number 85
[  774.644893][T13278] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[  774.880109][T13278] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  774.891908][T13278] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  775.091547][T17292] netlink: 'syz.0.3538': attribute type 3 has an invalid length.
[  775.150029][T13278] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  775.218454][T13278] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  775.263793][T13278] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  775.304985][ T5882] usb 3-1: new high-speed USB device number 77 using dummy_hcd
[  775.336485][T13278] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  775.544905][T13278] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  775.625015][ T5882] usb 3-1: Using ep0 maxpacket: 32
[  775.636439][ T5882] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  775.693938][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  775.723140][T13278] usb 2-1: Product: syz
[  775.743509][ T5882] usb 3-1: config 0 descriptor??
[  775.925348][T13278] usb 2-1: Manufacturer: syz
[  775.974896][T13278] cdc_wdm 2-1:1.0: skipping garbage
[  775.998206][T13278] cdc_wdm 2-1:1.0: skipping garbage
[  776.024883][ T5836] usb 4-1: USB disconnect, device number 111
[  776.073237][T13278] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  776.108251][T13278] cdc_wdm 2-1:1.0: Unknown control protocol
[  776.118160][ T5882] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  776.148812][ T5882] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  776.195387][   T10] usb 2-1: USB disconnect, device number 78
[  776.212860][ T5882] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  776.232618][ T5882] usb 3-1: media controller created
[  776.301090][ T5882] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  776.334093][T17289] xt_CONNSECMARK: invalid mode: 0
[  776.359673][ T5882] az6027: usb out operation failed. (-71)
[  776.387760][ T5882] az6027: usb out operation failed. (-71)
[  776.424685][ T5882] stb0899_attach: Driver disabled by Kconfig
[  776.433471][ T5882] az6027: no front-end attached
[  776.433471][ T5882] 
[  776.443558][ T5882] az6027: usb out operation failed. (-71)
[  776.452998][ T5882] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  776.478748][T17278] netlink: 'syz.1.3534': attribute type 10 has an invalid length.
[  776.492504][T17278] bridge0: port 4(macsec0) entered blocking state
[  776.508198][T17278] bridge0: port 4(macsec0) entered disabled state
[  776.514861][ T5881] usb 4-1: new high-speed USB device number 112 using dummy_hcd
[  776.526735][ T5882] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input33
[  776.540245][T17278] macsec0: entered allmulticast mode
[  776.556903][ T5882] dvb-usb: schedule remote query interval to 400 msecs.
[  776.563906][ T5882] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  776.580660][T17278] veth1_macvtap: entered allmulticast mode
[  776.593361][T17278] macsec0: entered promiscuous mode
[  776.613378][T17278] bridge0: port 4(macsec0) entered blocking state
[  776.620375][T17278] bridge0: port 4(macsec0) entered forwarding state
[  776.673083][ T5882] usb 3-1: USB disconnect, device number 77
[  776.724884][ T5881] usb 4-1: Using ep0 maxpacket: 16
[  776.733874][ T5881] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  776.779575][ T5881] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  776.792239][ T5882] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  776.836991][ T5884] usb 5-1: USB disconnect, device number 85
[  776.854615][ T5881] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  776.900672][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  776.928532][ T5881] usb 4-1: Product: syz
[  776.937382][ T5881] usb 4-1: Manufacturer: syz
[  776.946703][ T5881] usb 4-1: SerialNumber: syz
[  776.982669][ T5881] usb 4-1: config 0 descriptor??
[  777.016669][ T5881] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  777.056545][ T5881] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[  777.675426][ T5881] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[  777.682270][ T5881] em28xx 4-1:0.0: Config register raw data: 0x33
[  777.690893][ T5881] em28xx 4-1:0.0: I2S Audio (3 sample rate(s))
[  777.718920][ T5881] em28xx 4-1:0.0: No AC97 audio processor
[  778.338689][T17319] fuse: Bad value for 'source'
[  779.285014][ T5881] usb 4-1: USB disconnect, device number 112
[  779.414847][ T5884] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[  779.554970][ T5884] usb 2-1: device descriptor read/64, error -71
[  779.824929][ T5884] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[  780.125091][ T5884] usb 2-1: device descriptor read/64, error -71
[  780.320515][ T5884] usb usb2-port1: attempt power cycle
[  780.555008][ T5836] usb 4-1: new high-speed USB device number 113 using dummy_hcd
[  780.714842][ T5884] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[  780.744894][ T5884] usb 2-1: device descriptor read/8, error -71
[  780.766825][ T5836] usb 4-1: config 0 has no interfaces?
[  780.913296][ T5836] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  781.014962][ T5836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  781.033506][ T5836] usb 4-1: Product: syz
[  781.041873][ T5836] usb 4-1: Manufacturer: syz
[  781.053870][ T5836] usb 4-1: SerialNumber: syz
[  781.065189][ T5884] usb 2-1: new high-speed USB device number 82 using dummy_hcd
[  781.083499][ T5836] usb 4-1: config 0 descriptor??
[  781.115553][ T5884] usb 2-1: device descriptor read/8, error -71
[  781.244384][ T5884] usb usb2-port1: unable to enumerate USB device
[  781.363474][T17362] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3559'.
[  781.663885][T17364] 
[  781.666253][T17364] =====================================================
[  781.673199][T17364] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected
[  781.680658][T17364] 6.15.0-syzkaller-09113-g8477ab143069 #0 Not tainted
[  781.687414][T17364] -----------------------------------------------------
[  781.694338][T17364] syz.0.3558/17364 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire:
[  781.702055][T17364] ffffffff8de0c058 (tasklist_lock){.+.+}-{3:3}, at: send_sigurg+0x12b/0x420
[  781.710765][T17364] 
[  781.710765][T17364] and this task is already holding:
[  781.718130][T17364] ffff88806ada2120 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420
[  781.726957][T17364] which would create a new lock dependency:
[  781.732847][T17364]  (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3}
[  781.740469][T17364] 
[  781.740469][T17364] but this new dependency connects a SOFTIRQ-irq-safe lock:
[  781.749919][T17364]  (&dev->event_lock#2){..-.}-{3:3}
[  781.749955][T17364] 
[  781.749955][T17364] ... which became SOFTIRQ-irq-safe at:
[  781.762843][T17364]   lock_acquire+0x120/0x360
[  781.767449][T17364]   _raw_spin_lock_irqsave+0xa7/0xf0
[  781.772769][T17364]   input_event+0x7a/0xc0
[  781.777106][T17364]   atp_complete_geyser_3_4+0x11f2/0x1e80
[  781.782830][T17364]   __usb_hcd_giveback_urb+0x41a/0x690
[  781.788296][T17364]   dummy_timer+0x862/0x4550
[  781.792896][T17364]   __hrtimer_run_queues+0x529/0xc60
[  781.798186][T17364]   hrtimer_run_softirq+0x187/0x2b0
[  781.803401][T17364]   handle_softirqs+0x286/0x870
[  781.808290][T17364]   __irq_exit_rcu+0xca/0x1f0
[  781.812979][T17364]   irq_exit_rcu+0x9/0x30
[  781.817313][T17364]   sysvec_apic_timer_interrupt+0xa6/0xc0
[  781.823040][T17364]   asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  781.829194][T17364]   terminate_walk+0x1d4/0x4b0
[  781.833975][T17364]   path_openat+0x2e01/0x3830
[  781.838659][T17364]   do_filp_open+0x1fa/0x410
[  781.843258][T17364]   do_sys_openat2+0x121/0x1c0
[  781.848026][T17364]   __x64_sys_openat+0x138/0x170
[  781.852966][T17364]   do_syscall_64+0xfa/0x3b0
[  781.857557][T17364]   entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  781.863544][T17364] 
[  781.863544][T17364] to a SOFTIRQ-irq-unsafe lock:
[  781.870572][T17364]  (tasklist_lock){.+.+}-{3:3}
[  781.870599][T17364] 
[  781.870599][T17364] ... which became SOFTIRQ-irq-unsafe at:
[  781.883242][T17364] ...
[  781.883251][T17364]   lock_acquire+0x120/0x360
[  781.890434][T17364]   _raw_read_lock+0x36/0x50
[  781.895058][T17364]   __do_wait+0xde/0x740
[  781.899332][T17364]   do_wait+0x1f8/0x520
[  781.903487][T17364]   kernel_wait+0xab/0x170
[  781.907903][T17364]   call_usermodehelper_exec_work+0xbe/0x230
[  781.913948][T17364]   process_scheduled_works+0xae1/0x17b0
[  781.919613][T17364]   worker_thread+0x8a0/0xda0
[  781.924296][T17364]   kthread+0x70e/0x8a0
[  781.928476][T17364]   ret_from_fork+0x3fc/0x770
[  781.933184][T17364]   ret_from_fork_asm+0x1a/0x30
[  781.938042][T17364] 
[  781.938042][T17364] other info that might help us debug this:
[  781.938042][T17364] 
[  781.948272][T17364] Chain exists of:
[  781.948272][T17364]   &dev->event_lock#2 --> &f_owner->lock --> tasklist_lock
[  781.948272][T17364] 
[  781.961364][T17364]  Possible interrupt unsafe locking scenario:
[  781.961364][T17364] 
[  781.969688][T17364]        CPU0                    CPU1
[  781.975059][T17364]        ----                    ----
[  781.980421][T17364]   lock(tasklist_lock);
[  781.984671][T17364]                                local_irq_disable();
[  781.991427][T17364]                                lock(&dev->event_lock#2);
[  781.998660][T17364]                                lock(&f_owner->lock);
[  782.005518][T17364]   <Interrupt>
[  782.008983][T17364]     lock(&dev->event_lock#2);
[  782.013872][T17364] 
[  782.013872][T17364]  *** DEADLOCK ***
[  782.013872][T17364] 
[  782.022016][T17364] 2 locks held by syz.0.3558/17364:
[  782.027213][T17364]  #0: ffff888029c0b000 (&u->lock){+.+.}-{3:3}, at: queue_oob+0x17d/0x8a0
[  782.035772][T17364]  #1: ffff88806ada2120 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420
[  782.044938][T17364] 
[  782.044938][T17364] the dependencies between SOFTIRQ-irq-safe lock and the holding lock:
[  782.055346][T17364]    -> (&dev->event_lock#2){..-.}-{3:3} {
[  782.061186][T17364]       IN-SOFTIRQ-W at:
[  782.065444][T17364]                           lock_acquire+0x120/0x360
[  782.072134][T17364]                           _raw_spin_lock_irqsave+0xa7/0xf0
[  782.079524][T17364]                           input_event+0x7a/0xc0
[  782.085951][T17364]                           atp_complete_geyser_3_4+0x11f2/0x1e80
[  782.093906][T17364]                           __usb_hcd_giveback_urb+0x41a/0x690
[  782.101525][T17364]                           dummy_timer+0x862/0x4550
[  782.108229][T17364]                           __hrtimer_run_queues+0x529/0xc60
[  782.115617][T17364]                           hrtimer_run_softirq+0x187/0x2b0
[  782.122921][T17364]                           handle_softirqs+0x286/0x870
[  782.129875][T17364]                           __irq_exit_rcu+0xca/0x1f0
[  782.136651][T17364]                           irq_exit_rcu+0x9/0x30
[  782.143074][T17364]                           sysvec_apic_timer_interrupt+0xa6/0xc0
[  782.150892][T17364]                           asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  782.159056][T17364]                           terminate_walk+0x1d4/0x4b0
[  782.165917][T17364]                           path_openat+0x2e01/0x3830
[  782.172702][T17364]                           do_filp_open+0x1fa/0x410
[  782.179396][T17364]                           do_sys_openat2+0x121/0x1c0
[  782.186253][T17364]                           __x64_sys_openat+0x138/0x170
[  782.193277][T17364]                           do_syscall_64+0xfa/0x3b0
[  782.199961][T17364]                           entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  782.208037][T17364]       INITIAL USE at:
[  782.212205][T17364]                          lock_acquire+0x120/0x360
[  782.218827][T17364]                          _raw_spin_lock_irqsave+0xa7/0xf0
[  782.226128][T17364]                          input_inject_event+0xab/0x320
[  782.233188][T17364]                          kbd_led_trigger_activate+0xbc/0x100
[  782.240753][T17364]                          led_trigger_set+0x52d/0x950
[  782.247610][T17364]                          led_trigger_set_default+0x215/0x250
[  782.255162][T17364]                          led_classdev_register_ext+0x73d/0x930
[  782.262899][T17364]                          input_leds_connect+0x517/0x790
[  782.270017][T17364]                          input_register_device+0xcee/0x10b0
[  782.277484][T17364]                          atkbd_connect+0x70e/0x9c0
[  782.284192][T17364]                          serio_driver_probe+0x82/0xa0
[  782.291141][T17364]                          really_probe+0x26a/0x9a0
[  782.297735][T17364]                          __driver_probe_device+0x18c/0x2f0
[  782.305140][T17364]                          driver_probe_device+0x4f/0x430
[  782.312314][T17364]                          __driver_attach+0x452/0x700
[  782.319168][T17364]                          bus_for_each_dev+0x230/0x2b0
[  782.326119][T17364]                          serio_handle_event+0x1a2/0x860
[  782.333259][T17364]                          process_scheduled_works+0xae1/0x17b0
[  782.340901][T17364]                          worker_thread+0x8a0/0xda0
[  782.347594][T17364]                          kthread+0x70e/0x8a0
[  782.353765][T17364]                          ret_from_fork+0x3fc/0x770
[  782.360449][T17364]                          ret_from_fork_asm+0x1a/0x30
[  782.367309][T17364]     }
[  782.370070][T17364]     ... key      at: [<ffffffff99df17c0>] input_allocate_device.__key.5+0x0/0x20
[  782.379382][T17364]   -> (&client->buffer_lock){....}-{3:3} {
[  782.385313][T17364]      INITIAL USE at:
[  782.389388][T17364]                        lock_acquire+0x120/0x360
[  782.395812][T17364]                        _raw_spin_lock_irqsave+0xa7/0xf0
[  782.402937][T17364]                        evdev_ioctl_handler+0x1969/0x1f10
[  782.410150][T17364]                        __ia32_compat_sys_ioctl+0x543/0x840
[  782.417533][T17364]                        __do_fast_syscall_32+0xb6/0x2b0
[  782.424562][T17364]                        do_fast_syscall_32+0x34/0x80
[  782.431335][T17364]                        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  782.439587][T17364]    }
[  782.442260][T17364]    ... key      at: [<ffffffff99df1a60>] evdev_open.__key.25+0x0/0x20
[  782.450636][T17364]    ... acquired at:
[  782.454625][T17364]    lock_acquire+0x120/0x360
[  782.459310][T17364]    _raw_spin_lock+0x2e/0x40
[  782.464016][T17364]    evdev_pass_values+0xb9/0xbd0
[  782.469055][T17364]    evdev_events+0x1e6/0x340
[  782.473744][T17364]    input_pass_values+0x288/0x890
[  782.478875][T17364]    input_event_dispose+0x330/0x6b0
[  782.484170][T17364]    input_inject_event+0x1fe/0x320
[  782.489379][T17364]    evdev_write+0x2fc/0x480
[  782.493981][T17364]    vfs_write+0x27e/0xa90
[  782.498401][T17364]    ksys_write+0x145/0x250
[  782.502908][T17364]    __do_fast_syscall_32+0xb6/0x2b0
[  782.508206][T17364]    do_fast_syscall_32+0x34/0x80
[  782.513328][T17364]    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  782.519841][T17364] 
[  782.522167][T17364]  -> (&new->fa_lock){....}-{3:3} {
[  782.527399][T17364]     INITIAL USE at:
[  782.531387][T17364]                      lock_acquire+0x120/0x360
[  782.537634][T17364]                      _raw_write_lock_irq+0xa2/0xf0
[  782.544321][T17364]                      fasync_remove_entry+0xf1/0x1c0
[  782.551089][T17364]                      sock_fasync+0x85/0xf0
[  782.557076][T17364]                      __fput+0x89f/0xa70
[  782.562814][T17364]                      task_work_run+0x1d1/0x260
[  782.569158][T17364]                      get_signal+0x11ed/0x1340
[  782.575413][T17364]                      arch_do_signal_or_restart+0x9a/0x750
[  782.582704][T17364]                      exit_to_user_mode_loop+0x75/0x110
[  782.589736][T17364]                      __do_fast_syscall_32+0x1f4/0x2b0
[  782.596682][T17364]                      do_fast_syscall_32+0x34/0x80
[  782.603277][T17364]                      entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  782.611377][T17364]     INITIAL READ USE at:
[  782.615801][T17364]                           lock_acquire+0x120/0x360
[  782.622486][T17364]                           _raw_read_lock_irqsave+0xaf/0x100
[  782.629958][T17364]                           kill_fasync+0x199/0x4d0
[  782.636552][T17364]                           sock_wake_async+0x137/0x160
[  782.643494][T17364]                           sock_def_error_report+0x332/0x390
[  782.650955][T17364]                           sk_error_report+0x45/0x290
[  782.657814][T17364]                           tls_rx_msg_size+0x409/0x5e0
[  782.664766][T17364]                           tls_strp_check_rcv+0x928/0xf10
[  782.672004][T17364]                           tls_rx_rec_wait+0x3b1/0xa30
[  782.678957][T17364]                           tls_sw_recvmsg+0x73f/0x1820
[  782.685915][T17364]                           inet6_recvmsg+0x234/0x6b0
[  782.692699][T17364]                           sock_recvmsg+0x105/0x270
[  782.699395][T17364]                           __sys_recvfrom+0x1f6/0x340
[  782.706279][T17364]                           __ia32_compat_sys_socketcall+0x852/0x9c0
[  782.714397][T17364]                           __do_fast_syscall_32+0xb6/0x2b0
[  782.721691][T17364]                           do_fast_syscall_32+0x34/0x80
[  782.728726][T17364]                           entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  782.737255][T17364]   }
[  782.739854][T17364]   ... key      at: [<ffffffff99ae29e0>] fasync_insert_entry.__key+0x0/0x20
[  782.748645][T17364]   ... acquired at:
[  782.752585][T17364]    lock_acquire+0x120/0x360
[  782.757380][T17364]    _raw_read_lock_irqsave+0xaf/0x100
[  782.762862][T17364]    kill_fasync+0x199/0x4d0
[  782.767470][T17364]    evdev_pass_values+0x627/0xbd0
[  782.772596][T17364]    evdev_events+0x1e6/0x340
[  782.777305][T17364]    input_pass_values+0x288/0x890
[  782.782457][T17364]    input_event_dispose+0x330/0x6b0
[  782.787754][T17364]    input_inject_event+0x1fe/0x320
[  782.792981][T17364]    evdev_write+0x2fc/0x480
[  782.797591][T17364]    vfs_write+0x27e/0xa90
[  782.802016][T17364]    ksys_write+0x145/0x250
[  782.806791][T17364]    __do_fast_syscall_32+0xb6/0x2b0
[  782.812089][T17364]    do_fast_syscall_32+0x34/0x80
[  782.817138][T17364]    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  782.823648][T17364] 
[  782.825984][T17364] -> (&f_owner->lock){....}-{3:3} {
[  782.831236][T17364]    INITIAL USE at:
[  782.835134][T17364]                    lock_acquire+0x120/0x360
[  782.841209][T17364]                    _raw_write_lock_irq+0xa2/0xf0
[  782.847716][T17364]                    __f_setown+0x67/0x370
[  782.853549][T17364]                    do_fcntl+0x15ff/0x1910
[  782.859457][T17364]                    do_compat_fcntl64+0x477/0x720
[  782.865980][T17364]                    __do_fast_syscall_32+0xb6/0x2b0
[  782.872695][T17364]                    do_fast_syscall_32+0x34/0x80
[  782.879135][T17364]                    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  782.887043][T17364]    INITIAL READ USE at:
[  782.891385][T17364]                         lock_acquire+0x120/0x360
[  782.898101][T17364]                         _raw_read_lock_irqsave+0xaf/0x100
[  782.905405][T17364]                         send_sigio+0x38/0x370
[  782.911653][T17364]                         kill_fasync+0x24d/0x4d0
[  782.918074][T17364]                         lease_break_callback+0x26/0x30
[  782.925110][T17364]                         __break_lease+0x6a2/0x1620
[  782.931963][T17364]                         do_dentry_open+0xd62/0x1970
[  782.938739][T17364]                         vfs_open+0x3b/0x340
[  782.944824][T17364]                         path_openat+0x2ee5/0x3830
[  782.951421][T17364]                         do_filp_open+0x1fa/0x410
[  782.957963][T17364]                         do_sys_openat2+0x121/0x1c0
[  782.964652][T17364]                         __ia32_compat_sys_openat+0x131/0x160
[  782.972287][T17364]                         __do_fast_syscall_32+0xb6/0x2b0
[  782.979408][T17364]                         do_fast_syscall_32+0x34/0x80
[  782.986262][T17364]                         entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  782.994598][T17364]  }
[  782.997099][T17364]  ... key      at: [<ffffffff99ae29c0>] file_f_owner_allocate.__key+0x0/0x20
[  783.005962][T17364]  ... acquired at:
[  783.009764][T17364]    lock_acquire+0x120/0x360
[  783.014446][T17364]    _raw_read_lock_irqsave+0xaf/0x100
[  783.019921][T17364]    send_sigio+0x38/0x370
[  783.024361][T17364]    kill_fasync+0x24d/0x4d0
[  783.028966][T17364]    lease_break_callback+0x26/0x30
[  783.034173][T17364]    __break_lease+0x6a2/0x1620
[  783.039044][T17364]    do_dentry_open+0xd62/0x1970
[  783.043995][T17364]    vfs_open+0x3b/0x340
[  783.048261][T17364]    path_openat+0x2ee5/0x3830
[  783.053037][T17364]    do_filp_open+0x1fa/0x410
[  783.057723][T17364]    do_sys_openat2+0x121/0x1c0
[  783.062578][T17364]    __ia32_compat_sys_openat+0x131/0x160
[  783.068303][T17364]    __do_fast_syscall_32+0xb6/0x2b0
[  783.073595][T17364]    do_fast_syscall_32+0x34/0x80
[  783.078625][T17364]    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  783.085150][T17364] 
[  783.087477][T17364] 
[  783.087477][T17364] the dependencies between the lock to be acquired
[  783.087488][T17364]  and SOFTIRQ-irq-unsafe lock:
[  783.101010][T17364] -> (tasklist_lock){.+.+}-{3:3} {
[  783.106171][T17364]    HARDIRQ-ON-R at:
[  783.110158][T17364]                     lock_acquire+0x120/0x360
[  783.116324][T17364]                     _raw_read_lock+0x36/0x50
[  783.122495][T17364]                     __do_wait+0xde/0x740
[  783.128307][T17364]                     do_wait+0x1f8/0x520
[  783.134032][T17364]                     kernel_wait+0xab/0x170
[  783.140027][T17364]                     call_usermodehelper_exec_work+0xbe/0x230
[  783.147583][T17364]                     process_scheduled_works+0xae1/0x17b0
[  783.154793][T17364]                     worker_thread+0x8a0/0xda0
[  783.161043][T17364]                     kthread+0x70e/0x8a0
[  783.166777][T17364]                     ret_from_fork+0x3fc/0x770
[  783.173029][T17364]                     ret_from_fork_asm+0x1a/0x30
[  783.179450][T17364]    SOFTIRQ-ON-R at:
[  783.183433][T17364]                     lock_acquire+0x120/0x360
[  783.189593][T17364]                     _raw_read_lock+0x36/0x50
[  783.195762][T17364]                     __do_wait+0xde/0x740
[  783.201659][T17364]                     do_wait+0x1f8/0x520
[  783.207379][T17364]                     kernel_wait+0xab/0x170
[  783.213357][T17364]                     call_usermodehelper_exec_work+0xbe/0x230
[  783.220911][T17364]                     process_scheduled_works+0xae1/0x17b0
[  783.228120][T17364]                     worker_thread+0x8a0/0xda0
[  783.234376][T17364]                     kthread+0x70e/0x8a0
[  783.240111][T17364]                     ret_from_fork+0x3fc/0x770
[  783.246364][T17364]                     ret_from_fork_asm+0x1a/0x30
[  783.252788][T17364]    INITIAL USE at:
[  783.256689][T17364]                    lock_acquire+0x120/0x360
[  783.262763][T17364]                    _raw_write_lock_irq+0xa2/0xf0
[  783.269267][T17364]                    copy_process+0x224f/0x3c00
[  783.275519][T17364]                    kernel_clone+0x21e/0x870
[  783.281596][T17364]                    user_mode_thread+0xdd/0x140
[  783.287939][T17364]                    rest_init+0x23/0x300
[  783.293665][T17364]                    start_kernel+0x478/0x500
[  783.299738][T17364]                    x86_64_start_reservations+0x24/0x30
[  783.306776][T17364]                    x86_64_start_kernel+0x143/0x1c0
[  783.313460][T17364]                    common_startup_64+0x13e/0x147
[  783.319982][T17364]    INITIAL READ USE at:
[  783.324335][T17364]                         lock_acquire+0x120/0x360
[  783.330850][T17364]                         _raw_read_lock+0x36/0x50
[  783.337364][T17364]                         __do_wait+0xde/0x740
[  783.343526][T17364]                         do_wait+0x1f8/0x520
[  783.349595][T17364]                         kernel_wait+0xab/0x170
[  783.355938][T17364]                         call_usermodehelper_exec_work+0xbe/0x230
[  783.363861][T17364]                         process_scheduled_works+0xae1/0x17b0
[  783.371414][T17364]                         worker_thread+0x8a0/0xda0
[  783.378016][T17364]                         kthread+0x70e/0x8a0
[  783.384099][T17364]                         ret_from_fork+0x3fc/0x770
[  783.390797][T17364]                         ret_from_fork_asm+0x1a/0x30
[  783.397571][T17364]  }
[  783.400079][T17364]  ... key      at: [<ffffffff8de0c058>] tasklist_lock+0x18/0x40
[  783.407844][T17364]  ... acquired at:
[  783.411646][T17364]    lock_acquire+0x120/0x360
[  783.416333][T17364]    _raw_read_lock+0x36/0x50
[  783.421054][T17364]    send_sigurg+0x12b/0x420
[  783.425657][T17364]    sk_send_sigurg+0x6c/0x2e0
[  783.430426][T17364]    queue_oob+0x699/0x8a0
[  783.434869][T17364]    unix_stream_sendmsg+0xaf9/0xc90
[  783.440188][T17364]    __sock_sendmsg+0x21c/0x270
[  783.445047][T17364]    ____sys_sendmsg+0x52d/0x830
[  783.449999][T17364]    ___sys_sendmsg+0x21f/0x2a0
[  783.454862][T17364]    __sys_sendmmsg+0x28e/0x430
[  783.459725][T17364]    __ia32_compat_sys_sendmmsg+0xa2/0xc0
[  783.465461][T17364]    __do_fast_syscall_32+0xb6/0x2b0
[  783.470757][T17364]    do_fast_syscall_32+0x34/0x80
[  783.475790][T17364]    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  783.482333][T17364] 
[  783.484660][T17364] 
[  783.484660][T17364] stack backtrace:
[  783.490555][T17364] CPU: 1 UID: 0 PID: 17364 Comm: syz.0.3558 Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) 
[  783.490578][T17364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  783.490590][T17364] Call Trace:
[  783.490598][T17364]  <TASK>
[  783.490606][T17364]  dump_stack_lvl+0x189/0x250
[  783.490638][T17364]  ? __pfx_dump_stack_lvl+0x10/0x10
[  783.490667][T17364]  ? __pfx__printk+0x10/0x10
[  783.490690][T17364]  validate_chain+0x1f05/0x2140
[  783.490725][T17364]  __lock_acquire+0xab9/0xd20
[  783.490746][T17364]  ? send_sigurg+0x12b/0x420
[  783.490762][T17364]  lock_acquire+0x120/0x360
[  783.490781][T17364]  ? send_sigurg+0x12b/0x420
[  783.490798][T17364]  ? _raw_read_lock_irqsave+0xbb/0x100
[  783.490836][T17364]  _raw_read_lock+0x36/0x50
[  783.490863][T17364]  ? send_sigurg+0x12b/0x420
[  783.490879][T17364]  send_sigurg+0x12b/0x420
[  783.490897][T17364]  sk_send_sigurg+0x6c/0x2e0
[  783.490917][T17364]  queue_oob+0x699/0x8a0
[  783.490945][T17364]  ? __pfx_queue_oob+0x10/0x10
[  783.490970][T17364]  ? __pfx___might_resched+0x10/0x10
[  783.490995][T17364]  ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20
[  783.491018][T17364]  unix_stream_sendmsg+0xaf9/0xc90
[  783.491045][T17364]  ? aa_sk_perm+0x81e/0x950
[  783.491064][T17364]  ? __pfx_unix_stream_sendmsg+0x10/0x10
[  783.491091][T17364]  ? __asan_memset+0x22/0x50
[  783.491108][T17364]  ? __import_iovec+0x5d4/0x7f0
[  783.491134][T17364]  ? aa_sock_msg_perm+0x94/0x160
[  783.491154][T17364]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  783.491173][T17364]  ? __pfx_unix_stream_sendmsg+0x10/0x10
[  783.491198][T17364]  __sock_sendmsg+0x21c/0x270
[  783.491218][T17364]  ____sys_sendmsg+0x52d/0x830
[  783.491245][T17364]  ? __pfx_____sys_sendmsg+0x10/0x10
[  783.491273][T17364]  ? futex_unqueue+0x22/0x240
[  783.491297][T17364]  ? futex_unqueue+0x22/0x240
[  783.491323][T17364]  ___sys_sendmsg+0x21f/0x2a0
[  783.491349][T17364]  ? __pfx____sys_sendmsg+0x10/0x10
[  783.491400][T17364]  ? __fget_files+0x2a/0x420
[  783.491424][T17364]  ? __fget_files+0x3a0/0x420
[  783.491451][T17364]  __sys_sendmmsg+0x28e/0x430
[  783.491478][T17364]  ? __pfx___sys_sendmmsg+0x10/0x10
[  783.491506][T17364]  ? __pfx_do_futex+0x10/0x10
[  783.491538][T17364]  ? __pfx___se_sys_futex_time32+0x10/0x10
[  783.491558][T17364]  __ia32_compat_sys_sendmmsg+0xa2/0xc0
[  783.491585][T17364]  __do_fast_syscall_32+0xb6/0x2b0
[  783.491605][T17364]  ? lockdep_hardirqs_on+0x9c/0x150
[  783.491623][T17364]  do_fast_syscall_32+0x34/0x80
[  783.491642][T17364]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  783.491664][T17364] RIP: 0023:0xf70ce539
[  783.491680][T17364] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  783.491696][T17364] RSP: 002b:00000000f504955c EFLAGS: 00000206 ORIG_RAX: 0000000000000159
[  783.491715][T17364] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000080006c40
[  783.491727][T17364] RDX: 0000000000000001 RSI: 0000000000040015 RDI: 0000000000000000
[  783.491739][T17364] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  783.491749][T17364] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  783.491760][T17364] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  783.491777][T17364]  </TASK>
[  784.396472][ T5836] usb 4-1: USB disconnect, device number 113