last executing test programs:

49.121253607s ago: executing program 2 (id=210):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x18, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0003920000009203"], 0x0, 0x0, 0x0}, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1, 0x1, 0x6})

46.070736302s ago: executing program 2 (id=224):
socket$kcm(0xa, 0x922000000003, 0x11)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x0)
r2 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r3, 0x5b04, 0x0)

42.932209929s ago: executing program 2 (id=243):
creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000300), 0x20000, 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xec) (async)
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xec)
r0 = creat(&(0x7f0000000280)='./file1\x00', 0xf2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f0000000740)=[{0x84, 0x77, 0x0, 0x0, @tick=0x200, {}, {}, @raw32}, {0x2, 0x9, 0x40, 0x2, @tick, {0xa, 0x5}, {0x2, 0x7}, @addr={0x72, 0x4}}], 0x38)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x8004e500, &(0x7f0000000040)={0x2, 0x800000, 0x5, 0x2, 0x1}) (async)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x8004e500, &(0x7f0000000040)={0x2, 0x800000, 0x5, 0x2, 0x1})
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_INPUT(r2, &(0x7f0000001980)={0x8, {"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", 0x1000}}, 0x1006) (async)
write$UHID_INPUT(r2, &(0x7f0000001980)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa10100000009b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad7c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af801034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0)
socket$l2tp6(0xa, 0x2, 0x73) (async)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
connect$l2tp6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x0, 0x1}, 0x20) (async)
connect$l2tp6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x0, 0x1}, 0x20)
mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYRES64=r0])
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x20080c4, 0x0)

42.925252797s ago: executing program 2 (id=244):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f00006d5000/0x1000)=nil, 0x1000, 0x3000004, 0x20011, r0, 0xf648d000)
madvise(&(0x7f00002a7000/0x1000)=nil, 0x1000, 0x2)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="ff"])
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'virt_wifi0\x00', &(0x7f0000000180)=@ethtool_drvinfo={0x3, "73f0c351b8a0e7375288a7675433062487034d33b46bfd3c406777500a5c9596", "c228588101cad01919180000000000000000000000000000000000051300", "015204d84ed9d4c55745118a38fcad54b9518d8bdffcdb58937f2f032368d622", "54446eeee75fd3f1d31f613c947240a26d56c0ba30f02bfa7cdad8f74614d80e", "31704466c0732ab891fd8acfe66e1e8ae3fcc2bc3b5773fe7e7ca45b0383c020", "20d39965be3beb2bc876cc3f", 0x53, 0x800, 0x78fa, 0x10000, 0x4}})
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
sendmsg(r4, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1})
r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x400)
syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}})
r7 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000000)={0x27}, 0x62)
ioctl$VIDIOC_QBUF(r6, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800})
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

42.024669416s ago: executing program 2 (id=252):
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x8000, 0x0)
fchmodat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40)

41.990362281s ago: executing program 2 (id=253):
r0 = socket$inet6(0xa, 0x3, 0x3c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0)
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x5c, &(0x7f0000000480)=0x1000, 0x4)
ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080))
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f0000004640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x118, 0x5, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_CHAIN_USERDATA={0x76, 0xc, "02784397bb6a6a71c7d021fc1e0a5d7c50e846a4c00e7c72154e68694de91c488e7f3152c00c23fc78d5e2dbe7673f5b898ba0eebc1a5298abd4877e351c1b29db4fa6fb62be1488c524928f95a3cb742dafbfdd147375b5062ef23c62cecfb58bd74f9f5005cc7b7305accbdeaec0377365"}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_USERDATA={0x76, 0xc, "7a85fca908568f22484e939819db29d3a67d4ad8d41d804df5a2f9435a4a22914c268f987d992fd5b0d931a951a3ed34d29c9ee5a0a23e002a7512e42dffb361351d8d3763f9d53633c76ed7ccb5cbe506e872ce5adec3015a6b2ad945d02ae6cf9225863c342d3dbd51be875d8b78571afe"}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_ID={0x8}]}, @NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}}, @NFT_MSG_NEWSETELEM={0x16a4, 0xc, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x1690, 0x3, 0x0, 0x1, [{0x508, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x220, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xe0, 0x1, "eb191e019b5c75ed5785ad5e03c79ecf16a575c29a00287ba25abc2aef3944917acd1007652bfc902e7c4f0bb0545f2ad2c86a29907346af3fc91606b4a8c02d9346594231ac0fcc11bbf4cc5d8b7b4156a6d19a8fd96cc7285d6c06fc9fda4e67792210264ad0458e9d5440532f4fad4e7e67e86424981f66cbaaa22262aa593f524c82dc81a133961920dca50b52798c8b730c2e890f721da98ed5498ea0d946a00cc9f5d618746cbb58bdcb784631c471129205171bf940fb97d63512f3c4ae0052822d2e440850f8fbc0684c32c53967460b7f6568968e082bad"}, @NFTA_DATA_VALUE={0xd1, 0x1, "e5a64b1b104b9da64275254ac237e4ce65ea3882810260163c0044d9c8dab022babef61c2c6ec020b63ab081780bb33ab86f0667d7e8f304518b0cc3ff11344bab064ae16434ea695a3746aea2000bffcab90fbcbb1fd87d10e8258b7d33d0501342feaef394a5e1c25a60ffcb5279bad6f2bfcbdce57ceaec9d1d0078b014f245b73b32176cf29d705134fc523c8385065a73201f0679560c2b0d08fa34b337f0354343e79a79d1f683e8f38d9028d277d3bf10aedef1e7d8a83a3083a9938a56c2875c084f4d631f0c35e3cc"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_USERDATA={0x63, 0x6, 0x1, 0x0, "08a9006cfb7d2304f272b852e9701d5f20452aa11f954de5a3168cc90851d03daeda5baf46be8ebb041445e87ee9c3eb8afdacc1d8def95596f0b2bb6913936af25b9d1940f277b8a0828872416c8fe81ebd0133a0e524e63aaeffffadfadb"}, @NFTA_SET_ELEM_KEY_END={0x14c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x6d, 0x1, "937938b24bf83fcc431e1f3cd18de0107ad3bab96640220e7dc3731ce0dcb66b98bc714e34b9336b2949f064bbd08f5589b4e0b763adbac7aec85f8a788dcc0a938c6c8670b14e83c861bd7f6d32cdfd1d6181a98af3266390d8aa2ca92121d78214a980ceddc09ae5"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x21, 0x1, "e0ce5d32c405d5c5f1be92b65f4a7dc5a1a05e2fa1ffd537dbe0afcc83"}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_DATA={0xc8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x67f0e8ae0dcd7195}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xc, 0x1, "4476b79bd2c8c341"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x3c, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x800}, @NFTA_LIMIT_RATE={0xc}]}}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x35f}]}, {0x1184, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x38, 0x7, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}]}}}, @NFTA_SET_ELEM_DATA={0x1128, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x1a, 0x1, "d4258fcc3d4ca27b1bf24b6cb0d169d146e00a9332e0"}, @NFTA_DATA_VALUE={0x75, 0x1, "f0d0a84f278e3d7ba6a39e70cad9813ce81b1446425e7ab926496c8aea82f597e13cc4f3743df022172987972871d0fb5ae9f617e4799e6b1eafbd5ec04b598258458e75b2ccd46d7c0cea29833fb9a8bb163624d50dca4df2b5b204383e52bd44a826d0d677d93169b6c42dde88f4e8f0"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xa419}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}]}]}]}, @NFT_MSG_DELCHAIN={0x158, 0x5, 0xa, 0x300, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_CHAIN_HOOK={0x78, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x13aeb4a5}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4bbc740a}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1dc331bd}, @NFTA_HOOK_DEV={0x14, 0x3, 'bridge_slave_1\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6_vti0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'vxcan1\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x399024b6}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x26e2cc91}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4fcfb049}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_COUNTERS={0x64, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfca}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x61e2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffff7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x65a0}]}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'batadv_slave_0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2e5d7c85}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELFLOWTABLE={0x178, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x12c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6_vti0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'veth0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'sit0\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xb318d3414a36056b}}}, 0x1b30}, 0x1, 0x0, 0x0, 0x4840}, 0x2404c091)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0x8}, 0x1c)
sendmmsg$inet(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001180)="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", 0x447}, {&(0x7f0000000bc0)="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", 0x135}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x4044040)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x200000, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000300)=<r3=>0x0)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0)
read$FUSE(r4, &(0x7f0000002600)={0x2020, 0x0, 0x0, <r5=>0x0}, 0x2020)
setreuid(r5, 0x0)
mount$9p_fd(0x0, &(0x7f0000000200)='./cgroup\x00', &(0x7f00000002c0), 0x4, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, 'vxcan1\x00'}}, {@access_uid={'access', 0x3d, r3}}, {@noextend}, {@access_any}, {@afid={'afid', 0x3d, 0x2}}, {@aname={'aname', 0x3d, '-^[\xf9#)-'}}, {@cache_loose}], [{@appraise}, {@fowner_gt={'fowner>', r5}}, {@smackfshat={'smackfshat', 0x3d, '({@\\'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq}, {@subj_user={'subj_user', 0x3d, 'macvlan0\x00'}}]}})

26.717513551s ago: executing program 32 (id=253):
r0 = socket$inet6(0xa, 0x3, 0x3c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0)
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x5c, &(0x7f0000000480)=0x1000, 0x4)
ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080))
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f0000004640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x118, 0x5, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_CHAIN_USERDATA={0x76, 0xc, "02784397bb6a6a71c7d021fc1e0a5d7c50e846a4c00e7c72154e68694de91c488e7f3152c00c23fc78d5e2dbe7673f5b898ba0eebc1a5298abd4877e351c1b29db4fa6fb62be1488c524928f95a3cb742dafbfdd147375b5062ef23c62cecfb58bd74f9f5005cc7b7305accbdeaec0377365"}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_USERDATA={0x76, 0xc, "7a85fca908568f22484e939819db29d3a67d4ad8d41d804df5a2f9435a4a22914c268f987d992fd5b0d931a951a3ed34d29c9ee5a0a23e002a7512e42dffb361351d8d3763f9d53633c76ed7ccb5cbe506e872ce5adec3015a6b2ad945d02ae6cf9225863c342d3dbd51be875d8b78571afe"}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_ID={0x8}]}, @NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}}, @NFT_MSG_NEWSETELEM={0x16a4, 0xc, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x1690, 0x3, 0x0, 0x1, [{0x508, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x220, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xe0, 0x1, "eb191e019b5c75ed5785ad5e03c79ecf16a575c29a00287ba25abc2aef3944917acd1007652bfc902e7c4f0bb0545f2ad2c86a29907346af3fc91606b4a8c02d9346594231ac0fcc11bbf4cc5d8b7b4156a6d19a8fd96cc7285d6c06fc9fda4e67792210264ad0458e9d5440532f4fad4e7e67e86424981f66cbaaa22262aa593f524c82dc81a133961920dca50b52798c8b730c2e890f721da98ed5498ea0d946a00cc9f5d618746cbb58bdcb784631c471129205171bf940fb97d63512f3c4ae0052822d2e440850f8fbc0684c32c53967460b7f6568968e082bad"}, @NFTA_DATA_VALUE={0xd1, 0x1, "e5a64b1b104b9da64275254ac237e4ce65ea3882810260163c0044d9c8dab022babef61c2c6ec020b63ab081780bb33ab86f0667d7e8f304518b0cc3ff11344bab064ae16434ea695a3746aea2000bffcab90fbcbb1fd87d10e8258b7d33d0501342feaef394a5e1c25a60ffcb5279bad6f2bfcbdce57ceaec9d1d0078b014f245b73b32176cf29d705134fc523c8385065a73201f0679560c2b0d08fa34b337f0354343e79a79d1f683e8f38d9028d277d3bf10aedef1e7d8a83a3083a9938a56c2875c084f4d631f0c35e3cc"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_USERDATA={0x63, 0x6, 0x1, 0x0, "08a9006cfb7d2304f272b852e9701d5f20452aa11f954de5a3168cc90851d03daeda5baf46be8ebb041445e87ee9c3eb8afdacc1d8def95596f0b2bb6913936af25b9d1940f277b8a0828872416c8fe81ebd0133a0e524e63aaeffffadfadb"}, @NFTA_SET_ELEM_KEY_END={0x14c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x6d, 0x1, "937938b24bf83fcc431e1f3cd18de0107ad3bab96640220e7dc3731ce0dcb66b98bc714e34b9336b2949f064bbd08f5589b4e0b763adbac7aec85f8a788dcc0a938c6c8670b14e83c861bd7f6d32cdfd1d6181a98af3266390d8aa2ca92121d78214a980ceddc09ae5"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x21, 0x1, "e0ce5d32c405d5c5f1be92b65f4a7dc5a1a05e2fa1ffd537dbe0afcc83"}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_DATA={0xc8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x67f0e8ae0dcd7195}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xc, 0x1, "4476b79bd2c8c341"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x3c, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x800}, @NFTA_LIMIT_RATE={0xc}]}}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x35f}]}, {0x1184, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x38, 0x7, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}]}}}, @NFTA_SET_ELEM_DATA={0x1128, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "57760de96c9f8fc195aab5b050f9e22c440d00e720815bcdeab4ed58d6ddb17df1cb19c66fbf2d16cb99071a86ad6633981fc3092d901f83f477e78d073bbc108276d3c3c56e28c4977d9617a4ca574946be4eac7689d756b59aed0ae09f4d3269c51f418ef82c5319155aa0328f370919e55963b3603869516d256d68ff9a56dfde5e50b715ddb899bea1cba54e4c4dcbd83d79572cdf91d4af8467b8ac68a05bad750fe3a2cd0fae7092e2d82aa33c76323dd0607078658e9b34e14d041038135573bc1adaa2ffe2dc702406df033f36eb9765141144e787a66fd874c6e65130730dc181e0e721630c002799e80b10a4b2d19ba3655ad227ecdb3406a359319acc7f26a1a72abacd991ca313ba8ac4e81f079c1fb3c8c8602d7e488a7793b2aaf7c8353579d764104dadf10413e07bb5baa2009a7002f1cf3f8d9c06169f8a3a5bf8e926d9c8db384a2b4b5a0b16bda08138ef5b5c9249a9a68bc3903d952c96e1e6903bff556b063ce2eaabe3bd5e92c9f5bd602701523e53bf519ccd6be57eee5ab5170d0cc0ec23a4d1d4efcc30723ef612b0cde3fbc338d59f195a089e15079d79cce580bcff725d55b8ccb4ad16124847d7a7e3383da68200415f30e0150b08dd6ee40eb0584690592b40be09fb70e957ec180a45f69d508a25e6e23662632ec67363574f95d3fd4aedd3ad3bdc120e401ae6803ad47787f805d089785cb5808bb4be76306569dcb0a33fe178c976378d45b70577ddc30bb0f2013e029b71d3222801bbcbe1f91be9cc175a9895bc1476c521ec6d5fcc68467939c324b27d6c98a570a3e59bac9abcdff1a53ea91c42f20d7d3faa67a2b54adb312f6d34ae6ba48eea1e28f45f57dcbd7369da3997c9071196cc3f1ff495b9c75c60af29ac8f657c8d3ecdeb456d45ff0200040441f7874536900137d3b0ab0d90004ea64602bb81d9917b78594f7a6970a34e5c64b41302a43b3656ed7c3df505fe1e733654d74003fbfd4d9747b48f796849c66f6ebc3ea74d601d7eb4f958c5969de75ac0a16ccad0a4049869f6d97134ae0ea0dd86f352f52cff193bb6f6567308e95222f2e3e7f62fab675a5f22a80cffab9986e1fc2c2404cb994a2ab4b378f4cd3d335268e8b7e8544ee71190f54074ee32d6e8346de9437150d28fafb2698a0ba27d9657ad434f7a60f3022f844967d783190ffeff43cbd277e1a0603923400a2843e49a37380c438446c90465f5178d3c4a8a5757b37f5673a8e254512514d102ccff81e9fbdd8ccde599cca8d8166accac2ad57e7f0d0c79e2745b9e8d3a5ffd2b1e600e11c94b631e0bb7234ea0d0de355d1813223b21031ddfb8ff9d3a3043f4ef12580f427239d82720b36491e868f3b4fe415639500de9e382fb5ee638202486c94a673a84c25088e925f509dcdd6c716e50c694dcda378250e10f4ab6ab19aa6b730ff59e5c6ff483aa048a1b3199fa99c61f33d62d679cbe5289220bb376f5c50bdd7c4b5cf2766a72bd7364b794206a722ead85a4d90df7732ca2d81cf94a4c8bbc7e176f9abf635cee459c19e3977dd7e717c60158f8d2b8fda51d580fcece7430a834ae2784e041b1edb642b6899c9faf16d04e3538ca43689089615e728b13229478715c75f9aee9bad0e67891216d565ba9f5145fd390cc8a94d665519a79641ab9a636c26601dd3657a2f0389ba0b8796c01adfa3ce691824e3c83c448363b179b79dfdb5222d9d6d2fa4a0686df982f3608f2a08481628e3d77ce70423d0f417fbe52e8e682ff63282fa76abc594b9f0d346e5e19e9749b4fde98ee4a00cc3eee2c55a1f3f4306cae6abe1b4ea6a965e21b9964f981c977c16f08dafe94c36dcb1de2f715269c4f917970b49c136cfafbff564b3b0010a4cd255801ea3b163246ee9bb27f2c213b42b6a3ec9d41b8bb9753259116d665d797be0bc67f7307937e20617ba1deb8a83ea4390bfbf279fc427fd8dc3858367f2aea941e7154870364b760c52e0bb856c3604a92df745794e54a000c286338f55d4e7ccf3f64bcd1bb9cf743e41cf8a30eaee66351de4436919a4796fb8941e85f9b878a70d3acfcfeb2cbb26032fe1fbe98c6db1cfbb5918a445b342c7836aad99ff9cbef82bd24fc1ca2bf485c98cc5aeaa1a4efc14a1bbb6132ae8673bd5f60544d0878ce2397032c4026816789457a853cb0026d3ced420c0c0da0902f61afa35ad1745ee91c9fba42ba175e13b1e0b523071b54ce147ab40164f3730dd56fb50039fe034df0bd4c883f71310aec813a97c751b0d0f30c7d70eb948e76d7e75b600e60ad3656180647a83b1a61800931b9a58c9ea7ddc0e6bc1fce2a01c35cb499ff17d86fc45934f5424ef5cc9b36be0aff91a0020da83dc558385aae9073bcab961d9cf36e03800a636916a9d50f40e6faa7267b82d31395cafbe1c115fb1d7cb4d7828679e5b91f27d8ac76f82a152523291fea7c4a33eb96f5c8c288801d0b52ee3f8f2e03e6b955e21533079051311a3846dd671a117b755014e62ca3bf3c3c1d53db04c2f12499af63aa1401508de9a830488f98b1277d0d13ead781fd4a84e73e85d76622e75f2f7967015bfaaae1b10c8e1f24915bc73c7aec5028ae2566442a964dd2cd9de8e6f2d636041720bd934aa35b252caaa128e6cc5aca1a29e1c71defbe1f611e64e0c4fb2442a677afb509121971b26b412a059123f0110bb73a500b73fba2ded1466a7a923dcc69351283d36ac4b08031435e9a99c18fc0f43ba7d248fc43f044845a96f14616a849d7d6588ac22811203aceee41941b07656daeb9faa3348e37a9b48a00b9342877a6507fc8f9be9558800f2ca0e2bf349677b1234e34aaf919a1ad1f86e9caafebc746d3757903f3e1b81a0a90550d20707ff51798041254609148b7f4da8a228d1a628a6d9e09881f22f04c0ab088dbfdbd552d4642646387af0b33a97047d8667f9dcf0f1bc25613d7662440a055c699636f318a3bc650a323d447463aca5215278f4651af057b235ca352378a521f988bb6e1a68866522c09b22b47e006cb2b4f040b32cb2b6fbef40f26aac89d78eb0d9e26b1d4b46d839f3db671d81319270b08658628fd06d145543fe9483d056839607490b74deff2624e4b1cd4585611a50b9adfc56c2f84d3fa327d4ca72508f60e2c709109d04d3a9c4ff7724dc09403158b7ae060535c62aa78e6b55333404f1614d9fdef01e44d4caa635fecbec53779bfcb8cfa033174503e92429461cd88bab5d6f584675cf861f019d13c07c796fa77eaac99dc5041535eb312573efa10a1dc7026be3161cc99e8761fd5ac051da7d277792dfa59507294b3c67c9ac7a50fccd3f6d51739290b6db591d170ffe040d64b9cb73ca1b70a00eb067607706802930843d39e2a8707b85388173cc8c9d4467a57afe35f3ff38aad452a8bb369d4db7255b28a9e385b1181a5727e29f89bbe4a432f7ba9fd8b8ddf20fe7a5e52a1563753c5e5edc41b8a440168fa98b2dcbc99bc61ef18d82fa81636fd3a1e2f95cab941e4d10f49ce1e7424c456db1208289e23fc4afb52ccbf3f097e04fae50f89871dbf319ac7dc3cb5b21e8846c32281d9897e204543e7e66cf21fe1f96d0ac1bb0f7c3e878c0a4184a9ebde39a3e04577fe06a4a22ae7a28435d9a1757650f51b1f3ad18504cc5418e83bcee54a8f6ad52ebb16b170f83aca35546c24b640f6072273469c066ff87d7e7568610e798446d7e9b6cf53349cc3c2b241eff4f8d9da5df017cee96fffdb75290422d2f3703212cbf3c11bd41168dc6315f91df61a88debb37936b729dfaf51e910a5039e4f734abc662055c9cb2d66b0be2982926f91194d39f7d45d2c8aa7313a1ed99f3053dcee94291165315962100864f938344ff0f8ef8ca0476891c022889223bc895e5b0a3c51f6f78e7129cb0637a38bafc53907fea38093e975322a510024a95b185249077ef07c684f3b886c2a737b33826797082938e03bac44931870507e987283e011281be888e2ccff4d447cf51d780cf53df3e79de15d2f56da58b02cbd67b7297332f7cb2096b1b7b1efb5f6867c42f9f64fe1b5c9ab7f419a39d760b820126a4bbec44013a12e043f01cc34f7aca3e45af31444e6dffca7ad8e96ce385743941592147231132b42315c3ae6396f0432cbf5b044a313e896832a1ef6e94b5d9148705ff2663778fe6371a1c0cdacc4ce5ef6d72112d84466aec236f74c2b04e358aa97e30d93fb1e37ca480a236d9dcf97149496adb2cd3e9ca5a950edaf4e36fcdec55b1bcb4a7b5915efeae1d476f4fdb2131f11e5991c6a8ff3883fe2ccf397d76c6e95e96cd80f8b15981e9766a115592794bc7ecee51389f63d1709a159248b23ca43ab7ff68611ccfc12b6bf94e4be0a033ac5282aa07dd6f6e74d3cbcaa6abfdb8e893d6f052b51489e895ad0d5f0f6b326527f3623e407d38f2e6e475e24be4874eba98ee86ad5f311bff40ad31c52dc9aa26f019e6d1613a4e806fe07096d4c88347a140f029df8702c045bf4625755f0b4c01996da42d84925107f59db896cf7f85aaad1f7297f79107fc751af6fd7da5d9e0f0f4b09e62e3c4831c38230936d4e0c6365fe4fc49d2b3c81c1efaa959a50244d3b66f14b3b401cd9d15455bb2473f41cc07c0751ded962b76da408950a6da45b206cb42f6e3c90ed15537bde3c78965735fd125329592ff6eb6c2488f93d2a96e6e91a45ebfb85fada36be68ee2e9ed74a0cc22a8d080280d5d4d29c5c13ce0888b9de465a6dc0fbe6eba5987454803e62540976cc10453b503afe9950c0b39e6f39c4bc50e0d2524fc66d6f0251dadb60976f4b55f6b566708704f9e4c98ec20f38e97e7595901522fef4ebbf57a1bc460b62338bb1ed44e1fea75e99a78b446cbf3f5b502755878eec3d77eca27c71f95cd0d9548c2f16bf3b8143086749f4d4b957e1af8b7acb7615ff8388f851cd00cb700182d220a324d7d7277369f5a9f1fcbc782bd0cf4213d661dba8c5926599765d3aaa4f82e8df9198f8cf0d0a8746df72f09d3c6aab37bda67ecc735c17dcc23d71dc22faefe3ec849eb670ef45197ce46e8e3e3c78a1834f322ce45b52612ef33da389bb2d0f7edd6c1bbb5d2b7cf35dafd9cb3eff6fab2fee57969f271e7894b02ad162beae09fab77e1d60eabe55ec49698913dd12bc998482cd98c31984c1e343b791f7bb776b29edc136ee6556d47644f74fd9f1a44158a564b004d3cc350c25352a84c33cf22fa0e782422a2d024970c87e97bfa1da35d7d716907fbe07ddd4aaf82b7885af53da6be8906601206ff7b2d37d3b6d84063ea1f6226fbabc799193864dd7d8f28a35e809f03a26ef24e999c037ac92246f5bed7df4bc8ff52ca4302cb3a46b3c529078df394fdc5e965fcabedcb468fe80f129b7ec7e605eec111cf3bc5a979570dc6a726b52e6b86bbe1464ce72247fe1ecc2d4453359317189babffe684c18e982513196c9526a2e8dc0639c715529f1d00fd82d9784553c893c82ac9378302a4c0bf1bf83d297f2ecbbbe781229e827301464a6d7d0b91592898fff49474592c1ad547fac33dabddec9b27c2e69d059587ca880fb3771518e477825aec430ad6c736d48cea2128f69e621116068c576743115e4a62393de69c603dec2be4b2af68b6585ca446a58bea70d37f1d5e4b1b5b5474937c54c8656bd1953f4406778dfbd63f55b4929220f31a8b94cccb4a1e1d7945ffb9c5a7ae6d6eeb22653e0be16e731dab3ebdb4543f9b7bbafd1e329050"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x1a, 0x1, "d4258fcc3d4ca27b1bf24b6cb0d169d146e00a9332e0"}, @NFTA_DATA_VALUE={0x75, 0x1, "f0d0a84f278e3d7ba6a39e70cad9813ce81b1446425e7ab926496c8aea82f597e13cc4f3743df022172987972871d0fb5ae9f617e4799e6b1eafbd5ec04b598258458e75b2ccd46d7c0cea29833fb9a8bb163624d50dca4df2b5b204383e52bd44a826d0d677d93169b6c42dde88f4e8f0"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xa419}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}]}]}]}, @NFT_MSG_DELCHAIN={0x158, 0x5, 0xa, 0x300, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_CHAIN_HOOK={0x78, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x13aeb4a5}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4bbc740a}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1dc331bd}, @NFTA_HOOK_DEV={0x14, 0x3, 'bridge_slave_1\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6_vti0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'vxcan1\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x399024b6}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x26e2cc91}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4fcfb049}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_COUNTERS={0x64, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfca}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x61e2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffff7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x65a0}]}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'batadv_slave_0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2e5d7c85}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELFLOWTABLE={0x178, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x12c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6_vti0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'veth0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'sit0\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xb318d3414a36056b}}}, 0x1b30}, 0x1, 0x0, 0x0, 0x4840}, 0x2404c091)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0x8}, 0x1c)
sendmmsg$inet(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001180)="2fae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e070000000000000080fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa847cd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfdfdf05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf53a90a7f7bce5703de57cc5e93ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de15aab0c56a2edf2e0483b87f5ab299dc046076203dea10ccbfc631d5bf4a87ce67004519f248f086346ce6a8a9d181789a59f81d9b7f6781daac3e229914b8b8998c15c3b6302a519331cb05995bc60b7cb872dd3b5b43331c77c5d72e21f7bd2b1a915ff3204e3f20d3a20b22d6a58155b5a4ebf6d1d1cd90c656ecada531c07ff91deb3efa91762cdecfbcc43553750f22ac5c18cc5e8b6f790c2f4e6373af9f98d10e6df49ff8e5cbcbd68e11ed0b967add11410dc2e34f08dea658eb95d4d1153b4c6093192a340eb30fcc71619888c6486746a049500d249efb96b9cace83320b8f96b40ebe3a9a788d05a053380d1026b9434df87a3a387549bcabe88684c4dbf0da9a5212f3dbc8d1dff240856691243b203d7edd4d3cc89a38a6c80fdb1229a01044af7aaecb20d5570ebf24b30bbc6dfc3f70d85cd9f0d60ebd8fedd161d199d99a6a0e2d18d1c99bc7158564e0ddb4673055de196535d706d142e1dc7d404583923cb1b286cfc5418884ac7e605d93652dc48ff690894405a0b6abc3c4d0f6a16c0a95c0508bd7eeffcd1da0b17f7700000658864b429e9472edfeffbf34d6e7c78f4aa73c0ec84761a91a016f3f0926e3280582a3230e8e195574a0fb540410f5a1df7bf03fea1d2274fdc2df27726342e1b3cdd8b5fafb96997bd811cc3a8824deb6eaad37857f1fb10fc0c7b24ce1c3a8c5d1138e69c25c2c92fb2cdca447428cd8822216d5022f4dc415ecbd89d7b9dd475e21ff236611962a405178fe4daa0138505208792c56bb5d3a707cd3f62187b97cca9f9d4688b2b7791710bcd8cbf48956aac7978c85a33bb95d7067aa4564f6fab84e1eeff9459a4268987e1448a1b9c4c6324b092870d513ad091d656660500000000000000722cebb0c422fe7e3030c949d5274b6d04960361e7fb69b1ab915ec5d4ab54a5809cf072aa94d0884be112b635b10bf8260c39cb9b47e3398756f4b571c015b5d46254bd4af31728bc67e6712c785d41b52792c75e373d2c9493fa8dd623d28ec7e1ac66491e8ddbc4efa4ed4939b531e5b2eb86281b736043fbde530a9b842f24f7b00e0be423e6315a1d19b43d265b7f95fbfb", 0x447}, {&(0x7f0000000bc0)="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", 0x135}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x4044040)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x200000, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000300)=<r3=>0x0)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0)
read$FUSE(r4, &(0x7f0000002600)={0x2020, 0x0, 0x0, <r5=>0x0}, 0x2020)
setreuid(r5, 0x0)
mount$9p_fd(0x0, &(0x7f0000000200)='./cgroup\x00', &(0x7f00000002c0), 0x4, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, 'vxcan1\x00'}}, {@access_uid={'access', 0x3d, r3}}, {@noextend}, {@access_any}, {@afid={'afid', 0x3d, 0x2}}, {@aname={'aname', 0x3d, '-^[\xf9#)-'}}, {@cache_loose}], [{@appraise}, {@fowner_gt={'fowner>', r5}}, {@smackfshat={'smackfshat', 0x3d, '({@\\'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq}, {@subj_user={'subj_user', 0x3d, 'macvlan0\x00'}}]}})

4.475745272s ago: executing program 3 (id=476):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000001ec0)={0x1, &(0x7f0000001e80)=[{0x0, 0xcb}]})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad", 0x1)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000d80)=ANY=[@ANYRESHEX=r0, @ANYRESHEX, @ANYRES8=r0, @ANYRES8=r0, @ANYRES64=r0, @ANYRES32=r1, @ANYRES64=r0], 0x80}, 0x1, 0x0, 0x0, 0x8005}, 0x20000000)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000140)=""/58, 0x3a}], 0x2}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
sendfile(r3, r3, 0x0, 0x7ffff000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0x88)
openat$cgroup(r6, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000d40)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x1})
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
r9 = dup3(r8, r7, 0x0)
ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
r10 = syz_open_dev$dri(&(0x7f0000000a80), 0x6, 0x0)
r11 = open(&(0x7f0000000040)='./bus\x00', 0x240, 0x0)
r12 = creat(&(0x7f0000000200)='./bus\x00', 0x84)
write$FUSE_NOTIFY_STORE(r12, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES32=r11], 0x2b)
r13 = eventfd2(0x6d14, 0x800)
io_submit(0x0, 0xa, &(0x7f0000000cc0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0xf110dd2af4f0ad9f, 0x87a1, r1, &(0x7f0000000180)="a69b4b8830b7b624c9d8734b1d398edc180eb624588224bfeea19d82610dc533cefbf0c2f32c6175ddf809494e36261c9913516ff394e46eb4ba6d6ef11d7dd6a023199c32d20c70ababc22f372cd695ec0bcf1309c7109416bafc26867b6740b73a082073f4eeb4d0c1c31b306562cd296bde8b5aec479b3da1236456acbd47ff741934e036054ccd43c9c78e7b1004ccd5eb4a0fd643481288978600489aaf8b453a389052b38efd459dbc246ca59190570b43af8e2ab6e935d586b11bf42e9f527adf9982e0cb21c74d76e5f28b633088e7cd", 0xd4, 0x23, 0x0, 0x1}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000dc0)="a9ff31ada99936729da873a806c0411f7ba45e5bb021e805b5ae6a7a7dd529a6e008131f206ad5afa74fb1c50b8a614af88c82038456c0c2b6a52df8dc0aeeb728bcff992e5ef274b098cb75e67450acdb7dcab0b32f0003c0e52080ad8380a91cbe7bff553b38f3580ab776d7b29986a66e8070f25c8c30166f6c16ae279c4592432d4ebd88748b792ec3215a", 0x8d, 0x60000000}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x2d, r2, &(0x7f0000000600)="ed9b9c857392c8e3396347934560313458ca67bb6dbf35ccf8d0637aa1ebdef988b87120f7c95d0f1fde25256b2c575829e2cd3c6754cbb9db33a0035a1e127832be94fc69617db4d560eed457a23c12ce06b2dd4c540bb95d2da2db3a1119f98994d1749abe8dbd4a2ace50dab038de1d2ae747b2db36358a35bb909f90085129ae326ef65b3def5d2cb45a78", 0x8d, 0x5, 0x0, 0x3, r1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x2, 0x9, r1, &(0x7f0000000700)="82e7394ba967e9674c1c8d0648185fab082404e604db63fc8bf3c7b547035caff0547ded771b9e20c5562204adaf29898dd13a98db09ac49c8a6b19c2d00a98421febcec07e9652c7316ca5f4155bcb33e2ec5100a6c2ea213cadfb832f3011076de24df5e65fe90a143b6e7499834d8b6500273c971d540dfaa370584401318967c9ce692f96ee61ba0d2e52c54c71af1deccf35fbd7717bdab5c73a2a8431409eb675f27aba23564e0fd12aa9edec1a6c4340efaa403cd8d0d0aad157c15367a81e56dc34873998ee163d870a23539c3c16fb8f1be77c5483f", 0xda, 0x8000, 0x0, 0x1}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x4, r3, &(0x7f0000000800)="ebf1bc9225d7fbcbf1498d347034524942a453a028ebdb495b2e922d84285a9858589a3933f190e6d5e871f2f7f3f7e08fbaa64f5d234192c18bcbc31cfcc6825f8c432267b31368a4b59b415992ff5dbcb292fd0239532d4210e0d51a1a76de1dee02a07da807f715292ea345ee6019de51962b8550186b7e5b309d49d87b8eef675f7b8c19c19d53e99476ee1616b690e6a444bac1e3d91e5e5aef6b57b695fdf18473e6a20bce94d756ad85e1dbb971e5fb162e613f29e6d1a0f2517970187a185f0b4efffbf723ed5245e6a7e99c42bff3b92b5852f8", 0xd8, 0x727, 0x0, 0x3, r4}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0xb, r2, &(0x7f0000000900)="a54eeab96c5561efd14eb86f69b81c1e70bddcfb7a0fe4c13da5a4c96239e15b7bbda3d087cccf84c0d478cb41166907e28f9a59057b510990eac9040ee783441b40d694106ecad1c6a17d44777a7a4bdeb17bf12985cb0cddc40e07510ae62b9762eb56eef9bb0651abaa2f85b413e4f31d5309cafa7e51025ac49f7c96697207ec341e2e42d6892784eb20f6eeba8983bb0d0de3906e8b3eb940d1c89c1ea0a64fd105239f8d8a590661121d8d9f599ba37b7e45f520b1427e17f6f5a81bee4e8bb17a49090e2f98d4b582", 0xcc, 0xcbb, 0x0, 0x3, r6}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x2, 0x10, r2, &(0x7f0000000a00)="6c0344a98bc18f9cb84fc794142853e057d8ace44ed7d1b74d5125feefc7706d854c4fd8bf60406bc74367ad885f5d534467", 0x32, 0x2, 0x0, 0x0, r9}, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x5, r10, &(0x7f0000000ac0)="8838d2f3", 0x4, 0x9, 0x0, 0x2, r1}, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x3, 0xffff, r0, &(0x7f0000000b40)="b074128d10ada778d2bd9ef36c75f5146cdff86fd8cd08fc1511deb868f62b86f5d9bad7c0a944e46f62", 0x2a, 0x5, 0x0, 0x0, r12}, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x2, 0x9, r2, &(0x7f0000000bc0)="8bd24f936a67d71b03a3abf477c23f35cf1a6688836459a8b1f1c6875237469542ea1180fff4d6e2776878ba3f7aa284bdd8ff41031518b428ef5a779a1a98197d8f365759050776f44a42186c67a30e08db20bf14bdf5c863dda3d59c0808c1a7584801b535cb2bf2d6a535aa98b7617525912773b2773416d48216f40955a4369a9b62be2cb8a3f90050d43f47da833aef1a1995aa01eec2ff625640b4305c0caf96", 0xa3, 0x6, 0x0, 0x0, r13}])

3.94811638s ago: executing program 1 (id=482):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_open_dev$video4linux(&(0x7f0000000080), 0x5, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x807, 0x83, 0x6, 0xfffa}, 0x2000001d, [0x8000, 0xc95a, 0x12, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x49, 0x39cc191b, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x4, 0x8, 0x2, 0x4, 0x3c5b, 0x90, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x2, 0x4c74, 0x80000000, 0x242, 0x0, 0x6, 0x1000, 0x6e, 0x4, 0x7, 0x1, 0x7, 0x0, 0x3f, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x0, 0x8, 0x0, 0x5, 0x0, 0x2, 0x6, 0xb, 0x4, 0x7, 0x40], [0x10000007, 0xffff, 0x8000012d, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcd, 0x409, 0x9, 0x2bf, 0x6c9, 0x8, 0xfffffffc, 0x3, 0x0, 0x7, 0xeb, 0x5573, 0xe, 0x312, 0x78, 0xea4, 0x0, 0xda7a, 0x4, 0x8000, 0x2009, 0x400, 0x401, 0x6, 0x7, 0x4, 0x5, 0x5, 0x5f2e, 0x4, 0x0, 0x2, 0xfffffffe, 0x9, 0x4, 0x9, 0x8, 0x0, 0xef61, 0x7, 0x8000, 0x0, 0xfe000000, 0xffff, 0x2, 0x7f, 0x8, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x3, 0x0, 0x4, 0xfffffffe, 0x9, 0x8d2, 0x4, 0x5, 0x7fff, 0x2, 0x5, 0xb, 0x20004, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0xff, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0xfffffffd, 0xd, 0x4, 0x6d01, 0xc9d1, 0x9, 0x800000, 0x1fd, 0x80, 0x3, 0x400, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x5, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x800001, 0xffff, 0x3, 0x6, 0x1e, 0x120000, 0x3, 0x3, 0xa2ed, 0x404, 0x25], [0x9, 0xbb31, 0x296, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x53f53814, 0x2, 0x7, 0x22, 0x3, 0x101, 0x10000, 0x6, 0x207fff, 0xffff, 0x2, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xff7fffff, 0x95d, 0x5, 0x8, 0xc7, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x20100, 0x9603, 0x7, 0x2, 0x4, 0x6, 0x1, 0x6, 0x5, 0x8, 0x3, 0xa1f, 0xc, 0x7, 0x1, 0x6c1b, 0x8000, 0x4, 0x5, 0xb1e, 0x1, 0x200, 0xffff3441, 0x3]}, 0x45c)
r3 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000040)={0x1, @pix_mp={0x0, 0x0, 0x32314742}})
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000180)={0x0, 0x3, 0x101, 0x2})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001400)={<r4=>0x0, 0x0, "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", "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"})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000002400)={r4, 0x0, "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", "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"})
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000040)={0xc})
write(r0, &(0x7f0000000400)="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", 0x1f000)

3.876454147s ago: executing program 1 (id=483):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xf648d000)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async)
prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) (async, rerun: 64)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000003c0)={<r2=>0x0}) (rerun: 64)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={r2, 0x2, r1})
socket$alg(0x26, 0x5, 0x0) (async)
epoll_create1(0x0) (async)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x8}}, 0x2}}, 0x2e)

3.776585483s ago: executing program 3 (id=484):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x18, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0003920000009203"], 0x0, 0x0, 0x0}, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1, 0x1, 0x6})

3.768188995s ago: executing program 1 (id=486):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x400)
ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0)

2.27894273s ago: executing program 1 (id=493):
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2)
r1 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3)
fcntl$addseals(r1, 0x409, 0x7)
ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x8000})
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x300, 0x0)
r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x802000)
r3 = socket(0x40000000015, 0x5, 0x0)
r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0xb12f, 0x4740)
ioctl$EVIOCGREP(r4, 0x80084503, &(0x7f0000000300)=""/231)
setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0), 0x4)
sendfile(r2, r0, 0x0, 0x7ffff002)
accept$alg(r3, 0x0, 0x0)
bind$802154_dgram(r3, &(0x7f0000000080)={0x24, @short={0x2, 0x1}}, 0x14)

2.229389637s ago: executing program 1 (id=494):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x80000)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/asound/timers\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000700)={&(0x7f0000000480)=[<r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x9, 0x2, 0x2, 0x3})
ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000740)={r4})
read$FUSE(r3, &(0x7f0000002200)={0x2020}, 0xffffffac)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x47})
writev(r0, &(0x7f0000000300), 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x281}, {&(0x7f0000000140)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3f42b445293ca980200000000000000ecfd6cc1b3a9a9263506e88c5557069d0ca055991454ec1307b7411892a1beaef9ae54833107eb88b0411b1bc0ba9bc28d0eb6a73ad76be9facd1d9d82b6a3cc2040e84b398d279e50535b6557df8a633cfc7615fca9879b11834eb07eeb4278cab057f89b7464048cf573c21df5435e3b81aaba048fa4264d4c15513c91e9230a8e4b7635b58dc631604c", 0xd5}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendto(r5, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x66}, {&(0x7f0000000280)=""/76, 0x4c}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/92, 0x5c}, {&(0x7f0000000300)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, <r6=>0x0], &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x4, 0x2, 0x5})
ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000200)={0x0, r6, 0x5, 0x2, 0xfffffff7, 0xd5, 0x9, 0x6, 0x2})

2.116374327s ago: executing program 1 (id=495):
r0 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$inet_int(r0, 0x0, 0x15, &(0x7f0000000000)=0x400, 0x2e)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
fadvise64(r1, 0x92, 0x5, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r1, 0xa4717000)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r2, 0x7a6, &(0x7f0000000500)={0x4, 0x100000, 0x0, 0xfffffffffffffffd, 0xffffffff})
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x92)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@userxattr}, {@metacopy_on}]})
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8})
r4 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000200)={0x0, 0x41e, 0x6, 0x50, 0x6, 0xfff}, 0x14)
syz_usb_ep_write(r4, 0x81, 0xf8, &(0x7f0000000240)="00092cbc85f764b0cf5fc8125367d973b1a187f5a6c2eddcdcf404907a77e2d567fcbd1e2ad0ae629d5ecdb76aa5626e361174227145945cfc61d6889b0f04e38d907baae4fdcf93d7399ed4f9e9166e24b7f7b433348494ae0ae9d368caf1b9ebcd04e2f917881fd368e6c97109fff639ef77ffd3bc0198a9ba0ca4ae546c0892f38851145897f8a830037031bc7f92688d63f7d5aaf71cc06ebc6a3f55c9f52553855e746683eb1d28401878d00dfd6bcd23154d70a8883dee431aac45950c0f0b617a4298883b7f0f0c27ac6bb80ce313df912a59cb4633022a5b5e5ba520c604865f271100000000000000000000000000000000776e")
r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb)
ioctl$SIOCAX25CTLCON(r5, 0x89e8, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="940000001200110e"], 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000001c0))
getpeername$ax25(r5, &(0x7f0000000140)={{0x3, @default}, [@default, @bcast, @rose, @default, @null, @remote, @default, @netrom]}, &(0x7f0000000000)=0x48)

1.593367521s ago: executing program 0 (id=497):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0)
mmap(&(0x7f000078a000/0x11000)=nil, 0x11000, 0x5a051feb1f984a1d, 0x202812, r0, 0xd61f1000)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000006c0), r1)
sendmsg$NFC_CMD_VENDOR(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fedbdf251d00000008001e004000000008001d00ab000000080001"], 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x40884)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r1)

1.512673043s ago: executing program 0 (id=498):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x1c9a82, 0x20)
readlinkat(r1, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000180)=""/77, 0x4d)
sendfile(r1, r0, 0x0, 0xbc44)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c000140060404000d0404009bbc7a46e3988285dcdf12f213e6f768fec601955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)
mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x208002, 0x0)

1.49726249s ago: executing program 0 (id=499):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000180)={0x0, 0x0, r1, 0x0, 0x80, 0x5, 0x101, 0x0, {0x9, 0xd7, 0x1c, 0x7, 0x20fe, 0x401, 0x7, 0xa, 0x0, 0x50, 0x8000, 0x7e9, 0x401, 0x5, "cbd7d7ab3a0338057401a192419598961f50dc45c87d55b42a28b8f01c0e0e7a"}})
r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c643c, &(0x7f0000000300))

1.458126132s ago: executing program 0 (id=500):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) (async)
r1 = socket$inet6(0xa, 0x80002, 0x0) (async, rerun: 64)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async, rerun: 64)
r3 = socket$rds(0x15, 0x5, 0x0)
ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000840)=@generic={0x3, 0xff31, 0x80000001}) (async, rerun: 64)
ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r2, 0x3b72, &(0x7f00000001c0)={0x18, 0x5, 0x80000008, 0x200}) (async, rerun: 64)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e24, 0x1ff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}, 0x6}, 0x1c) (async, rerun: 32)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0xeac0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x1c) (async, rerun: 32)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
connect$l2tp6(r4, &(0x7f0000000080)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2, 0x4}, 0x20)
sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
r5 = socket$igmp6(0xa, 0x3, 0x2) (async)
r6 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'geneve1\x00', <r7=>0x0})
ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x0, 0x400, 0xb7, 0xc20022, r7})
sendto$packet(r6, 0x0, 0x0, 0x110, &(0x7f00000002c0)={0x11, 0x9, r7, 0x1, 0xd, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x14)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in6=@private0}, 0x0, @in=@dev}}, &(0x7f0000000000)=0xe8)
setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000300)={{{@in=@rand_addr=0x64010102, @in=@private=0xa010102, 0x4e22, 0x7, 0x4e22, 0x0, 0x0, 0xa0, 0x20, 0x88, r7, r8}, {0x9, 0x1, 0xf, 0x6, 0x8000, 0x1, 0x9}, {0xd3e, 0x6, 0x2, 0x3}, 0xfffffff9, 0x0, 0x0, 0x0, 0x1, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}, 0x4d6, 0xa}, 0xa, @in=@broadcast, 0x3503, 0x1, 0x1, 0x54, 0x2, 0xffff1538, 0x8}}, 0xe8) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000)

1.384597967s ago: executing program 0 (id=501):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x400)
ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0)

1.116922524s ago: executing program 4 (id=505):
mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x80a411, 0x0)

1.110429155s ago: executing program 4 (id=506):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000003a00)={@val={0x1c, 0xf5}, @val={0x0, 0x0, 0x2, 0x0, 0xc6}, @mpls={[{0x2}], @ipv4=@gre={{0x5, 0x4, 0x1, 0x26, 0x24b, 0x67, 0x500, 0x7, 0x2f, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0xb}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x1, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x2, {{0x2, 0x1, 0x9, 0x0, 0x0, 0x1, 0x6, 0x7}, 0x1, {0x80000001}}}, {0x8, 0x22eb, 0x4, {{0x9, 0x2, 0x8, 0x1, 0x0, 0x3, 0x1, 0x3}, 0x2, {0x5, 0x8, 0x3, 0x8, 0x0, 0x1, 0x3, 0x1}}}, {0x8, 0x6558, 0x3, "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"}}}}}, 0x25d)

964.587837ms ago: executing program 4 (id=507):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r2=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4, r2})
preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007)

924.622204ms ago: executing program 4 (id=508):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000180)={0x0, 0x0, r1, 0x0, 0x80, 0x5, 0x101, 0x0, {0x9, 0xd7, 0x1c, 0x7, 0x20fe, 0x401, 0x7, 0xa, 0x0, 0x50, 0x8000, 0x7e9, 0x401, 0x5, "cbd7d7ab3a0338057401a192419598961f50dc45c87d55b42a28b8f01c0e0e7a"}})
r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c643c, &(0x7f0000000300))

896.882808ms ago: executing program 4 (id=509):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000003a00)={@val={0x1c, 0xf5}, @val={0x0, 0x0, 0x2, 0x0, 0xc6}, @mpls={[{0x2}], @ipv4=@gre={{0x5, 0x4, 0x1, 0x26, 0x24b, 0x67, 0x0, 0x7, 0x2f, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0xb}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x1, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x2, {{0x2, 0x1, 0x9, 0x0, 0x0, 0x1, 0x6, 0x7}, 0x1, {0x80000001}}}, {0x8, 0x22eb, 0x4, {{0x9, 0x2, 0x8, 0x1, 0x0, 0x3, 0x1, 0x3}, 0x2, {0x5, 0x8, 0x3, 0x8, 0x0, 0x1, 0x3, 0x1}}}, {0x8, 0x6558, 0x3, "1ff18f2d258c8fcd69a5ef81e9cb8219e1cd5f721895283078889b13b0c8315a1f1dc898391f163696fc6335e97ec4a1bc0c045d611ee2039f1d27e52ad787e7ba5fc7be1dd2f1f4ecb71aa9f1eec8bcbb9e8873fe3e6fa184ed922d5306b3fc97f4aa98b8816822709ebcc9ecc052a368d3237d0cb5ad977a2795f033d7098192bf9784a8c7b758528c5b0985f46612727cbf52c6e0833a98bb46835df037fe0cbbbf343688f2dc18adbbed0daacbf8b44aebaa4af0063de3e35d6d31f5a81fad0ee8fc210d1dff4b86143cff0a5d4b200d85d983635d975a554d7d5b9c42020a18244f5f4f2bfe8f070980909b3e413145701d8e66b9e4c988a0eb7da3144bdd98bd22ff78919dabb3da9e6f995430bb6c8c5f155ba9e4bc5b31982560e123c75072e1d32efb82dd942e5357e57c08c7889598f21af3ce2e445180df65cc31ff54f338b43be04baf70e77fbcf4ca3ff11725bf20a3cd15893fbefd17b4843467f22b0371f405c2f52ae52318afe7ddebe5331123fce19116d4cf2274e3aa53f10ee23cee2e373b8757919c3bb5692a57d4bbfeda9e3f33a5c595634acd1dd0d90612ccdb5f582238a0804c9202d945e74faad7eef0e2cff5c60f49937a59bfe3b75dff249e0d9fc09256ac9674f6556242b0b3db35f9ff4e3917d84626a93d73b2d220c4fe450fd67833bb18dba91d784ad7"}}}}}, 0x25d)

728.53271ms ago: executing program 3 (id=510):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x180, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0xa)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0)
r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x103400, 0x0)
close(r2)
ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000140)=<r3=>0x0)
timer_create(0x0, &(0x7f0000000180)={0x0, 0x6, 0x2, @tid=r3}, &(0x7f00000001c0))
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r4, 0xffffffffffffffff, 0x0)

728.143115ms ago: executing program 4 (id=511):
syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x29, 0x6f, 0xb6, 0x8, 0x9022, 0xd484, 0xff88, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x0, 0x81, [{{0x9, 0x4, 0x1e, 0x80, 0x0, 0x56, 0xa7, 0xf6, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x16})
r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003)
ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f0000000380)=[{0x1900, 0x6041, 0x0, 0x0}], 0x1})

712.827135ms ago: executing program 3 (id=512):
lsm_get_self_attr(0x64, 0xffffffffffffffff, 0x0, 0x0)
mknod$loop(&(0x7f0000000200)='./file0\x00', 0x6000, 0x1)
mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x8000, 0x0)

687.911467ms ago: executing program 3 (id=513):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r3 = dup3(r2, r1, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x1, 0x0, 0x3000, 0x2, 0x4000002}, @flat=@weak_binder={0x77622a85, 0x100, 0x1}, @flat=@handle={0x73682a85, 0x100b, 0x77682a85}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0})
fadvise64(r0, 0x92, 0x5, 0x2)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r5, &(0x7f0000000a40)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000000100)="02", 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r5, 0x1)
getsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x5, 0x4, 0x9}, &(0x7f0000000040)=0x10)
r6 = socket$isdn(0x22, 0x3, 0x21)
mmap(&(0x7f0000932000/0x3000)=nil, 0x3000, 0x1000000, 0x30, r6, 0x9424000)

616.28827ms ago: executing program 3 (id=514):
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643d0b9712309f016699a89f6e347167416d8e823186c91cc64d6a879ac6ae85346103f94e75450e9a095adb45770215bf63a0a5ff3e938ce4b7bde123e80f1cd6d0b36b83bf78e39b41f82863d1d2087ca894868da41477cc387e3d952ff0bfd597524aa9070052572f7b29d1a93937bcbef2189d1ba22413a56de39b53e52682b9f670a1e85eed9ffb855a8521aa7cabdc251156313aabeaf6ecf63c66bb1240277cda13b5014b8fa0041206a67c0000", @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$printer(r4, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xfe05a, 0x5000, 0x0, 0x0, 0xc}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000002140)="4627563e95d073e9c44031e486c6c3c887234dab29bb5d4444d206b6ed7b2b3001b6ed59a692ab0f0251ebf104d3747ab90777b96df4449e5275f86a62902df16f5fba75e202cbdf6fe7cc018a76b412f6485398037d6cb464f1dcf7fda3c76e43cdf64a53f6182a0b7e6476035e8bce74d0582b1ccf32dc8b0cc3b610b143afb4d3c163308a66f2dedd0d45f392d7899f5c4d2ded35c1602f7338dea29e0dff356a32c9e921eeebf8b9845ec2a40b68d740186ee2a3f4a59672477230c4a3a62a1417659b1978cf2b671f836d49fd361ad0af9157916d29cb4fcc1e873a336660b639383485a5322faca6694c74f58fa428582950bd136778dff61da52778dade8b2c3331b31a89259469b0900ab4173202f6256b2d23d3feb8517556292de52662192eca03da5744515c4a92cd3f0f296209bacb28a0267776c9797a784cfd95a52f9de496a5ed70459d55041b663a70d7d471da4f86cd187fd53e667422a0fdfe5eb34e2f2b8c133f2271fe5b1e71533b698169ac8107187533e37765fbd69c327ec608249c44018e3496b2f66fb8bb942f4bd26ed687ee1f7d2a53d7233fbde91cd03f4b4db0c23ed56ff9a61e0d5a1bf6ed50c308e8af0c32b2e0b15df009046ed88d60b772e0cdbfb3d765251aae01b01660df364dce51971ea2034b316a0b0071cb1d28bb86279de377ccb5a18ce981241b5d566e248866a2cac1a9b74f1b92ad44342945663bd56ad056f79e49f8071153391f8de78b05496a5f174e812ee0b102e0421c632e4a9f8ffd87ea68df1d7e85af4b30024b2a3cf0e1106871b3427eedfe857f3bc2a021d42fc09224ece3c56e57806a2da229231cc8e3ed5dbd82fd2d3894cba01e36c2ba91a42456eb570446fa3e2eddfe30264572d5d778cbf5d676ad4bd37d11e09573a5566b3656a760c9d3030b2bcd90be0d670866010e2d33c93f223a79ca167bce1a46670db33470c75776582f26b5d9ce847493ddb34612bc829f93f473c24263246011c4ca689f62f4539550ee13b246aeeec477fb2e9e4b223f66c006303abdb003809b9cd4e993b90821750b86608882355e5f587182c1ac6c677b07c26956073ff3a78d4f1c5139d9c0b8aead052e73fd21b3615ea22acc084bf5060f72936796311e31c038426f0a0e6c304cd2d9c363e7a1a21752032be17adca8b476b0e571b591c9dd923b0066fd5e32e045494c0a9e1e511f147988e0a5fe9652b92ed0e015ef54e3ed2a510b9383f1938dece777ca866f1a21082052827f3a48c2f38482fe3a8286c0ff17d4c24a468a5a0ec0a2eb1165f48cf76fc07450c82294d973a1793dd58008834f0d3aba4e097ceff0ba44656c67839ff3e489975297b334ecf6c7ce4634afbe3d8ab70827563aa75ffafc43429170c3fe3854238485c5a9b567a959a746010c22a92e863e318312e0efc06ab86d1435e06aca5f4b7b7f06a78f90795545c145c9941b74adb9a31ab4f749f81665dd9308acba8d7861856b548eab226377be82611ad79c8d25b176de98003c1ea28b556a2b90360913c39f8f64f0d122c732af5a990603429b354ecd4de797e17722c66546cc38349cb09c40ea54972562734e9816c83103e0bd19451e6144d005e6ce6d6d6fc1ce90238b73d1e0aaa4ee9fd0545054cea97639a404edf3b27c0073be84961084ea685e8ace53c7d7f52b62e378d9ee167aec3e5cbd60ff36c0d3ad40181bad59f111c30e9414112fbc71ad7ede21c288c878dd2509c36f93c31dab5d091107c8e8bdcadffdcb3053eba35b44c70a6421b343922cb11c69b886db0f412e5c23f89dbaff9e5847fd749e28356cab3999f1142449047a3a6c43bf670244e55d888f36ef1dc87bc5bb1460b6c8d1e69efca9a02ba834591906a65102c3e1c1c7dbdeccc7e261795f349d110836445d8ba19cbc699c46d4edc34942a488de1cc1140dc6acf23c8ec1f475e613c85ba025ff7ae639cb2499629eb5f5c88c4057e30bcf41767424af763c9204084856d87cd99f0da06ae6ee5b7382c1f6f2cbb2cf2dfd8320271f16ba7ebd8f0e3c742482f5426530b1ab946c7118f70aa4eac41dd78569341a0f3dd250531aaefdff4cab9e9eed7efdaa865f9b804ade79ced061a1fcd18a6c61a708fdf119841dc232cc5c4e5343cb8a82e9dd9647779bca053b5a2c43481c06ce2a593e388f5f5f4e681771021aaaf0589dac69db22c7285035d1eb89c75935fa4208b3786f2640ce9d65b0e671967dc27808fea5d17ac70a3ac2802f65d45d9c0372aeed530ee58bf04e190f50dac25139caec0b253d17af28eaed173c7043d66567188f04ea51733835c1c66ac7a634d7b90bdac4a6d1075bb277dc6ca420b24485012db44aed5a2e8099f4f3ed53bdb0b35b35905db28169b3e3b3d13ff94bdf2c9549f4a54c64b8d27098b86ff46cfd515f35b1d5a1bbf1bb29df16cdf296e804977a6b583d018c4fdb66264d5f2d9e162059017d6b6cbc6d6c2f1009717c67093f6feaafce1f242f4b730a2e714e9bba79f18c42a158425147b7b2cd9add4ac1d2c1a95b13a4f352d51982a5d967cd611911e6d0777afbc10883c6293f056acc69da89a0a64913be996466ed63f969d5ccd124cd3052d6654e6db0519449f3cbf3a2011541d26e5b76c3c192857905bcf989fd943d42aee9ebd40fee33094eae69154092e9514819ff126040ea7d43a927809149cfaffcc76cb1e332426bf0eb1ac1a3968c70030453a284a0fe39b9ebd704f0950cb5350d4c60d65566b3f24ec4636cd5bb3e23066f4d4f1814e60f286f3ad2d3c10e79c5991c8bf5fdb561723873fe0c75c7bb6ba262aa3a6655349df95f07abb0200d5b9152da4bfdd66a311b29a15755e8465b7b0d99f7f8ccefe9cb3561b5619d4c21b36c9b29442ccd5949882d0167244d84b677685d62074f63b8dc66941f317c78bb093491e2acb7207cc80fe51c22199aae878170af9fa1eb164854587007eb108f23d1c7946bf75aee50eee6fffdae24b992393bd37d268a136b3dcb1b7d2c9b9fbfe0c860b0d344f488e85de2a65a20eb057f0047d0b6b8898bdd68e21f2234a2c66b963a2d86f62297a7d1176c14acaddd4861f5bb74ee91eb3b6ba0c7328433b977e23c02ab67d82a12d620fc034f1c9c3a99a6a07ddf59eaa18384e429101dacbd93ee794e27b774242446fa433a8c03e4312ad56f6c4dfd1ad014d07932480e07caedabda36caaeaaf405dfa1a650843f2e09ae89c666ab8754d9bf9b290f4c4c9242d8f98533bfdbae191a6fbcba6bdb9096427d2d8efb5dcfbd58df7763cc445bf44a0be6de2335a395ab8157dee25794be81c3d87a7d457b52d88f86cabf91f2ec16a8e05a00f72277943737839a5242163025704c7b938f3f424ef5db6b60d3181e3ef94cbdc6516f0ecf01b52164b92f2e12ed55db595fd8de6862a3b12ebe06b19d1f93132b83b2f5ddbc9808b3ce8fa40352c84664d824edd2631a5e2fddaae887689092007d3d0f22a948f54bfd5c42bea5f0d6bf5018cee5ef232c8b6ea3f54ee6f4997c8ad5ccfd28227eeca811312375a849bdf4d343c1b0ec7035279d1bc0892ef193a74018d5ccd5ccaf0503a697b23abb44b7aa3beced0626daa5e1fbfc4d29d2804292fcc60b775f656179510168bf05929dbc92e009d94561d946f7b4b5a18c08d29678c482d90e07abb029e80546e5cee6c4a30712a9b92d556a29b2de021bd49b6398340a9363b689bedc007416bcb659c0c4b6eaa31ec4976ee4896ff87a7dfab48dc7046d44c9c2db6881f7d6b252e582eb878b0be9b24666e74e8eb565c07582f17817ea2422de5da79cb367e76b9b8a9d056de06ad0483986fef2a3b62d64d5d2128cf55499025ad0739ad3ce5e1bfa6aaac16828bdacad2f86b32ed933a2f672efd1f4a32dd23e59aed872d1015eaaf701a0ef8e1427d59728450c4f1bd561e7ef6f8e34d12ae2120a51746a5c346e739c09854caeec07af0d70dd4d9164b3ae8a098a41c081465fdb5537cb560426bc0de4b735f253dbc779b9dce429d99700cd6c0cbd778caeb56401b2bb5c1ca310ab0c91e1d9f4578b5fb3b4f0dad4c565495797e8e83603f3ef188a896fad5bfec24457e0f6f962b8613434f16acf74308171567eae5ad9ec11186a56493a5394042bd1b29fbe0ce64e5f1b0b56e8910343666d627d71c729c0c90bfae0134e117842d67b160ff50688f7b45f0ae330c2d4890732ace7795ff74b6e36466da623c8eef75528b22199c9bf589a1fcd2aca6c5fe3cce2eddabf1ddc8e87380b815ed5928222613383db7941eb9d55b45487b399a9a35ca4cbd9eaf08c71273fc3334b0acdbd117b13697a9ae475e79a44911ce4fed1490a2ec654fe469c9ea933999dae3616b063769446cfefb4562bd124e42f62a3dd0385fe3d21029ad8fd1c58b0badd42e415a76e3e92f246629d3579dd80d940e6dd9bee3d9a6ef8a7840fb253507e718eca32ff4119eb0bcc02aa210939a3bc41704a63202139c68e276254395ab6b858f4528ea2b3a57328e0b31816de3ad85e50e7f4ec9445eaf21a8b9916ed209bb7e79a7a08c2e4e09644ab831c0ba68d05d5ebf57a9eb36fb9caa8e7ac78a8ccca1bcb03cef0c5eb31fafa6e283632c117031aa3919f72aa80a2b9b2557749951348d5294ed2414ffcbafdf976bfb7a401bedb208fe1285738df515af493047aec962bcacb8ea7bad5fc12d5bf415e66c06c4c87044e694291e104ef53850cbc7ef73ab57982d77a3f941c226a915163e8eebd256cb8a1f0130023d2c5d3be77cab39bae4449711d6f39e50cc83eefaf6cc727b1c0b3fc4f7bd110d18262cd872cee8ca95f1be8005d5b339abbde923ef2d4290d5579e4420ff2beb705c16e96101c38c31cfd05639f252730c145182e4406aab68f556e0290ccf05e25a7bf13cdb5db47a8a0841fbeb880d4f0add608d1badb8992924b548ef1426ec774ec9d86678d4c2aae8f1e3b2dfb295802f75727a308dd1b39460f26858eff99fae8d27f24ea6902adabc89311a5fd18c3d9c606db7295f25acd22624bcc753c4c3acdb3f6c563174441333b69a126e4fcc6b06165f6221539c5ed277c20dac4b7978619e10616475de88810bbac714f3651efaa59b75791080a1086c0f3f1b5edb4b3976cc936665855f6a56788d76c6e771b1c968c859fd1ba995d336d301695fc012b8031a14ca529e3e9bf622db6813417925bb4e1a7a5b786aa90f4d048f1f442a2696970dd442d3a6ee117a3e768644c99951b75e51e98de61bc7ed8eb9e87fd43ec75e948829bd19fc545cddefee7a6f068a419e216982ca4ce6ad3256f1e64d203ba1da27e9e175738124ca86a312d0dd0caae6d64751d459d8134830ebb4f4c7931aa90c1ad6fefd99ea4ded3d246236719d6fd48979ee31eaabbea385e91aea0557a58d73a63660ecee981e3da40a39fec3f01caaffafee3504e9f8dc990cc2d69c513db25f6e722ea4811f778af8a338498b6b908682aca6e02e898cb65377f820529d35707cb83ba69b16c92b571728c58188fb08ed6f6c27d6b70e963b147605714468b90966f082d7175fcbc6e770835efb6e7bac5eeaeb5b2c23eb30ecc102e647f1ff71bc6b35f629a55dd305f8ed5287e35403a91b4dc77a6df2fff354460bf563c071846c84617da4df4c46a9e359c45d217a2b096c830ac8614947d110334ca17f587d86825b2b7ae1039fc11109687c1ad0a16f0180d1700414a4694e7ab73c715436dce437a9b3dff55f62fc1ffffc33d3be037c34c9ee7a0fcfeaec1778268565663f39b69c141304c892ae80da42cc854a87c955e6d8060a731eb16ee91e8ea27f90da85196e4f034d40b85ff59eb4b7c76218342f9c9f8d3749c874562829b7ad0c786c5c25ed240aa14755ff7f5ba5298f9f6b6ec3a46ac36d6a39c59c2ecf7781da77931214ac9a8697691d933b20cb64acde409fc159d748e4f92d83ff7767260fdec04b2e80cc524a2366e8fa5b70eb8684d164dec49fa95f42e7e75daa8c268204beec1fbc58cbbe3317af0993a8676dfdb13db7875f50cebdbc629bcd605dd4c4a65c31870495fb9a9ec51c1867ca8b117a6f9507aa26cee54c4c12f8f22b9d88072639ad765bb7906435128d1c146b9e2029880eccbdf78449bd0630381ad16c13444d709a11890d80fae0d24c037180a8726143306a7cd67abbc830167f524008f9a8e3172df597a63af2e87a92e90b70ce53069657f9b46acc9da241a1b00571540ec5fed4a9acfdd0066ba248cb2bf24540d7296256d4c9a5a5bc821817ada912cdde59876d86d4c53c1d047c6bc3442c2ee78326d7c51b6d01bd4f7ff5bc45db88649220d44099b406ac2e4744996b869ea688ecb4e758e755b29717869d5dfccbf5fd553ad83de0c4cd16b3fd4913451734226e4cf29bc0a860943b3e854d8cf49f07d2bfba1c280efaa85bb8f0f8818d1e58178c338c9e46c873adc0a4b6c832aaf0878956d8a04fcc043ff307f60a263cf1bc57ad0434b6a6f99075d932ff75deb8b017cbd16b272139a4addc24749d9551ba44d5bef0536e58de5e9d0b8985f1044163d542859c699f27f033b01d1e5d4c5598bcc4279f29c56eca82cf40c3b2799277e9b0aea04ba5cdd679e3eb63ceb0eafc21c373356caadc0f5730054a0979d7e32117962af0444b7e0e75bf1d30fd1af656956367bbbddf018531833f6c383b76cd63d014c91f67b41548e558cfae6a953a78c36ba3a896b3a0bf48aaa947d042a456a48c8f323682f560f2679f53578f00746cb04c4ef12b905b37f1b1bac9c75a85d6f173d531198f150ee6dbe7fcdbed4e0baf7610b82a793c17124970924ae32c86f9b7b40a229219958cd2445fca613e264adbf29644b1f405c68ef8afff7f4c1dc86f0e578e3716fa86c53f776dc42e7d28978f1e694428560b923b5d44e3aacb18cb38d3efd90ca0812027d336b011557e9e953cbff769e9ba84b903f5fcf1e6b4ab3e210ceaac574f80607116b196b6ded8668729f9be216bfdd049e88d1cb45581701c6ca7c991488a73e6ae5decdfc6416fa69b76f82e92246ee2b29c91885be24e96ea72438499c5c421ffd199f172667adf7d257947bb47945817930a7f2f0dfc73c2a5f6002fd40b9ea51c4a0c610e9759d43c082ed0c126c0de63c5a079b4c8bac46fcc8a1f74d8929ee2b7878430e3cb26f0ef5a2c98614c4d659144a7cdbd654185ffdabd9b36257993ca823990df4aa7809ee58b7a278f38085202f3618fefef67f71b39f8ed35a28b3ff47e6caa3cecdbb41b899ea7ef3179ec3d67d0e3380f61d5a57453b9b790d171e1838c68f988a6914f4b81a7a12a0f50612182de8844a5f18026bc4110a10a31a88dae4bb40a3fea22360830784cf82ccde8187d04635e7e5bc6cda8252fa77d7022ae5fdeb978315f925cdbe7cbe0e3894965795fda4b94068bee89f79f86c420b211411929b9b3074703583c0ba0703a4d282441495110dd167c228079db163febc9ea0bcb02ab400999abfecfbca274fca55a055859eb256fcddc1d1773d72d5c3793ca3ff5f2fbe647b04f5ff2b2dc50a3a897e03634a36d21e391e6b6290cf85064711600de9a74057b78d9c04857017bc762300872f674eed1b68fac65025f3252bb803a9ff8ccf4b2b49028622168439db3bc01ea9ae7618b73dc7f858ba388891da14b88f7fee4f5f49abd687ba947969b8b923c2e119fe172126835ab4d1429133a38bbb80f1f6c308ffd180a179c05d9fb112a70e7658f9e3c7b6545556726e6589ba479edf21afd08da62963b5b724fa7b618c27fba201297dd465217de92395734355e9b34e27ff4916d78dbe0424df3d6110297a7847efda2675f12a3bf5e4b07827cdae6c61b0d969f6bb15be656b394a3f3ca8d705a4cac9c78c66c4be58c40888d49ceb08eb9a90c230faace7e4c837a8cb1aa69b020f9f43532cb7315cd698dfffb0179fb24e135480af4c437170c010e6e8f94108523dca95598c59b9e483753b79bafb02a455ceec727fd271b4cb4af7d958751a747afe6625c1e8b0316af5e13e42dc8d97dc42d5960edcaa391164693250a6f98653fa20c78823e1c1a77b798491f197a647b291cdd04087b3143e5b0fc550ecbbff19666b1c8e2a5bf2cb40f9f54c11828a8dd16489f36583e3128cda7a9abde8abbf61294450af638f56444176b5a11f84e67e4e666d6df58c45c0adc45938a2639fb1717a44c8dedf8471ac82fc1771a704f778fb812acb953493a831be5b28b16b20a112aafcee4e44640a6653c4b3035d5de4fcc16312057046bc3c650057dd9be4450b3e837ff8ac19019e67550a124416d671ccc76de36946c2d91f3d63b212111f4f09f39c24c1a981a7e63dd37a8d94ebfae1df5796d971193a8c723f172a9266af23d1d0e48aae73de4e7545a13f09a1ae3feb147ba1c700776148f027abc7dbdd1f3cb823b9a4c0e9dd43fd0bc411dc3eac2369f10fc9669ffaec5ef76da6b7f8884430b3a00da63a0e5272de159ea047584f4804a14159b1321309db45c55af563081d126300dc3ac446936f6653db92fc09d225716f425997dc247939b8c1e09a11f8b10c36b671cc590922051871ce19f6db85eefac9a666c3cec6fd5a69e7610ae5123413b458024b02521420d8c50c265d7b763f070b8fd1981824da47079135a667ee2395e43cae172e6a5ae96aeb7ce490212792498e427b80036f52cc557d3f94b118b2248af9a75a6d27d084ba423edc616981864cb0069a06f359a953a6e7df6b765d222626030248253e4e93eb0979b0a5550ee15d1489f56cc1d30b1584f37b51dfa029af5b45a85b141f4f8ffdc809a19e01f22f80c8a11e9d35f790a6de2d898462a19f412de4df26896a3d107baa7a661b5482cd71453b5f88f889b93ee6df84363ecaf04cb0dcd4369f9d1a827b955182334a998e8f2edbfe74beb14e9ff50134f03d24d70b068801684e25370c1cfc065d88582389713500f974e8a6c6e7f015b8e84e5b9861e45d4ce4eef79f0e8d4f15eaf7c1b33e64287470b5b3c0b8b6bdadae567f977341b57486c1eb279be8ee1cdf11b6e0dbd42d32c95b6801cea98e6000ea80777c6ad3f62012732859497080b3aa127a0f3a7b80a99182406ccfd54affb463f8eaf01b0c65ab582628b3c2237d039ee68d307dd113e4b593b243bd64eb6f58a0ccdd8e9a78f9ed393e2affde8d616d57c7aa1d12ebb4be718b49843ec6a90d5d8c197f154f27805046c410d4e1b66cbf4a8e495a3a229a2a1d58b4909a240d7ae6ea9e740c055b06e756e57e2ff19c148cbaf37357c0d3273b7f2ec631565e9f6c6c8722ddb0c1180695fb204f35917dc2fe11469801c545b2560a59d0666ec129b88e4f427989e820982329c2c39321f25648666af651f87b495195a95a5d158fd161324796272303114d99d22890385853dbc66d37ce22de0db447260217cf51aaed240e4f4963ca7510522fc6e7dbe164ccdedc334787ddb24bbc8205bf3353d447a1de2407c248775fa7e318d83e3ff18150b3cd9a7cbb0df0703aab6ef8d0f71bf9b5a305dc25fbd200e06b73c7f298320bd90dab05ec62b5f885e7cf95274c656051c71628f31196354460b001b6366c26fd2e92f6ad68ea37d7e3fe91fe98223563b4d23f802b3911a5241a793cb9f5b4f80081ace5877f95da7499f728ab09837120ca75c63d725e46f9f77c3da16318c9bcdd4a9d68379b627c1a71a34b684e5614ab3fabceab8d2741aca921b1b018098060686c56d7ed190e7470f529f6e680ed72e749fe7c9c2f37ea8cf08d4520e496361d2437018bbda93396c05abb2aeba443ea1ee56a3da04a8b880452a3610cb4163154e02df8a08a5e48c03fb0b0cdd4d355142cc736b344b9fd987b49b85791e5bf7805250dfe63b04c7ff56608129ef43664aa2acf82f18b49cdfd2ae5551ea4d486b35cd2ea60e3f032c58f531d4d36054f5ce268a29862ded0a3cc0ff1d30882f7c85b95e9a8599bf1d143d2d25555bbaa6f8b673b76ca8cc17b693519194784833d902581fec4e656ca546eade53abfd7e4650df648cb61a146bef5382f9255bf4a7c380854568495bdb7b33f490d240ead3d1851ce3b6400eda5a370f13ec998605f46b234bc9293c026bd1d648647bf52d506deb522012ae89c4ea75414ae6677c4aef28dd756f877af23d1a5ae3cb2205850c14f27f595d1a1542bb1eaf641293e3ba40e0bb54193a1e5db969d37c97709efbc34ab509f08a51ba71ecc4f9f66c27190115948cffaae914e7eb4e8d0c59ef7368e9b08a05bbbd340e1c1d34319f150d299c0ddf3bb2138359e826f4997068b99d13cc454fea46b8664d413b79b19656d62cbb5b31744aa33f99651fa56703eaec2e6998c7321f69f6cd110c89ae0c612a96f9a84dd751fd81ff66c80563e7091f5c5b67f89d52e7c58eb26218cddeaf5c6def3ad07a610bd4e5785675580c199b8550cbb02e3b4e1d240bb8df8e514fb505f39fd222209584331bef5d271056accaef84c88741ebd9f116cce3fe7b07b78ac4bad346c0d6e71c9daecd8d60aa8ea0914f85c9078dfaff04ba5e9bbbacddbc0cb40fe20f869d7f196c5edb6657c50b82c67f1abab663bff0a8da16422fe31a4a17995ee25081a06154d1c03f1a87a9d4ad5141a9227849bd920d2515ca16a245b635c85a77884cce0b8ae56929b5e22c52f971c2eed4ccfd64f7790a616f719fc0305af71405abae9407ed1cdaa26606331fdcf9b3c19b90e561f646ea15e0e668ef37b349594a335baf26962b89ef33c98aec3ca3e7df47c20dc2928d074e5f87c0edcf37cb25d3b8304f57f8257a5ae96791697e3c6d04f4ec2eb6a69f25346defed5b509368dea2b1960218bc6dd21b567583c229fc7b5fc85f7f2032eb304c3a1f72204f75ee950344cdef846d94e916b29a43d00c789256810de5fff6f9fd1af0fcfc2edd3fff9e2010d88083fc0b9e6a291e9a7a08af62433689a39e34bed8dafc90fec82be5c63a843d82132ce8916e395791dc86c8d11caf57f7fd096c28537ec38d6c14df9782312abc85fba2d04b0b159637b0e09f7e9faa1a6136359d17cf7c58b83994d58674ddbc248b804a82156900ca95a5002ef62de046e2f5ddf8e1e19f00189d4f5169bfc3c67afc149c6bc155767e64eac433cfb787be7f7bae7f869c0ec3d142668c2f90d383af7207a635850c515d69c6a62e24e0d58c5da244a917a17caa6be01992c4f8be0b9fff57522db4756840bdf72cafa6061ff2b86305c180c470b3af589e7c9e5328d98cf737bf01d80762e1e41a4d63a8655387be7f295862fdea629aa97b40c2ba1b563f1a103a860f7dff7fd5ee8423ce3dbf0fad41b66965c67299e35483130d461ac6c68215850fd441323bb856cdf03f624520743f7b445641c72e08994c8f252fe179b29226637b533f0ed6c94a0b84efc1a884af940fbc05c654b59d37a54047de233c496103bb27b657e7f63c24ef3ce29709622f67653f398dc7c4e4400", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="b000000000000000000000000000000003000000000000a62913523b9dad91ff0000000028000000fffffff7ffffff7ffcffffff000000000100000000000000ffffffffffffffff0000000000000000020000000000000000000000000000000000000000000006000000ffffffff00c00000007800000000000000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="000004000000000000000000800000000000000006000000000000000800"], 0x0, 0x0, 0x0})
r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0)
r7 = syz_usb_connect$cdc_ncm(0x3, 0x7a, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000018203010902680002010040000904000001020e0000052406000105240000000d240f0100000000000000000006241a0000000c241b4800f3ff00050080050945811302020000000904010000020d00000904010102020d00000905820200f6f10000090503020002"], 0x0)
syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0)
syz_usb_control_io(r7, 0x0, &(0x7f0000000a00)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r7, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
close_range(r6, 0xffffffffffffffff, 0x0)
getdents64(r5, 0x0, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wlan0\x00', <r10=>0x0})
ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f00000000c0)={@any, 0xfffff82b})
sendmsg$NL80211_CMD_DEL_KEY(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010025bd7000fbdbdf250c00000008000300", @ANYRES32=r10, @ANYBLOB="0800370002000000f2c603f24b2909d8c0ac253f30f1a54a2ace5c456fc178ccd36aabcd4387a23017235792a5571eb376725776574d6b6649c8bb933fbdd235fb3a75cca63443f8861de08dfd65843426caf42c13397c8e715b2db09ed8ff1aa9770cbfb88de148ff40e6ad78021bb4cfd0d789b23c5846875005267324f704c81615c3d5b804979ae7594a1f24aa57f28fadd6508879473219b627b19b5acd91a1ec6e851b770fcce91fc3198720f6a47c66e470ab1359c926b7"], 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x40)
ioctl$KDSETKEYCODE(r5, 0x4b4d, &(0x7f0000000100)={0x0, 0x5})
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0)
ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r11, 0xc008aec1, &(0x7f0000000000)={0xa00})
r12 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r12, &(0x7f0000000140)={0xa, 0x4e24, 0x1ff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}, 0x6}, 0x1c)

0s ago: executing program 0 (id=515):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1, 0x1, 0x6})

kernel console output (not intermixed with test programs):

 119.705192][ T6800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  119.715565][ T6800] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  119.724911][ T5867] speedtch 1-1:0.0: speedtch_bind: data interface not found!
[  119.733094][ T5867] speedtch 1-1:0.0: usbatm_usb_probe: bind failed: -19!
[  119.741883][ T5867] usb 1-1: USB disconnect, device number 20
[  119.985697][ T6685] usbtmc 4-1:16.0: usb_control_msg returned -110
[  120.006892][ T5971] usb 4-1: USB disconnect, device number 20
[  120.332463][ T6812] /dev/rnullb0: Can't open blockdev
[  120.345492][ T5971] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  120.515405][ T5971] usb 4-1: Using ep0 maxpacket: 32
[  120.553544][ T5971] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  120.571821][ T5971] usb 4-1: config 0 has no interface number 0
[  120.588510][ T5971] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  120.602176][ T5971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.627514][ T5971] usb 4-1: Product: syz
[  120.641879][ T5971] usb 4-1: Manufacturer: syz
[  120.651976][ T5971] usb 4-1: SerialNumber: syz
[  120.667243][ T5971] usb 4-1: config 0 descriptor??
[  120.684502][ T5971] smsc95xx v2.0.0
[  121.088429][ T5971] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout
[  121.121542][ T5971] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  121.161162][ T5971] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71
[  121.172370][ T5971] usb 4-1: USB disconnect, device number 21
[  121.315588][ T5867] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  121.465507][ T5867] usb 2-1: Using ep0 maxpacket: 32
[  121.472221][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  121.483425][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  121.493982][ T5867] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  121.506897][ T5867] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  121.515972][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.524971][ T5867] usb 2-1: config 0 descriptor??
[  121.665482][ T5899] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  121.823405][ T5899] usb 1-1: Using ep0 maxpacket: 8
[  121.837732][ T5899] usb 1-1: unable to get BOS descriptor or descriptor too short
[  121.847895][ T5899] usb 1-1: config 4 has an invalid interface number: 30 but max is 0
[  121.856879][ T5899] usb 1-1: config 4 has no interface number 0
[  121.862969][ T5899] usb 1-1: config 4 interface 30 has no altsetting 0
[  121.871805][ T5899] usb 1-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88
[  121.880913][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.889009][ T5899] usb 1-1: Product: syz
[  121.893167][ T5899] usb 1-1: Manufacturer: ࡡ
[  121.897797][ T5899] usb 1-1: SerialNumber: syz
[  121.933198][ T5867] usbhid 2-1:0.0: can't add hid device: -71
[  121.939718][ T5867] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  121.949185][ T5867] usb 2-1: USB disconnect, device number 33
[  122.065504][ T5962] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  122.112500][ T5899] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state.
[  122.119660][ T5899] dw2102: su3000_power_ctrl: 1, initialized 0
[  122.127065][ T5899] dvb-usb: bulk message failed: -22 (2/0)
[  122.133930][ T5899] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  122.143828][ T5899] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2))
[  122.151420][ T5899] usb 1-1: media controller created
[  122.157006][ T5899] dvb-usb: bulk message failed: -22 (6/0)
[  122.162717][ T5899] dw2102: i2c transfer failed.
[  122.167512][ T5899] dvb-usb: bulk message failed: -22 (6/0)
[  122.173233][ T5899] dw2102: i2c transfer failed.
[  122.178156][ T5899] dvb-usb: bulk message failed: -22 (6/0)
[  122.183874][ T5899] dw2102: i2c transfer failed.
[  122.188670][ T5899] dvb-usb: bulk message failed: -22 (6/0)
[  122.194404][ T5899] dw2102: i2c transfer failed.
[  122.199184][ T5899] dvb-usb: bulk message failed: -22 (6/0)
[  122.204917][ T5899] dw2102: i2c transfer failed.
[  122.210509][ T5899] dvb-usb: bulk message failed: -22 (6/0)
[  122.215429][ T5962] usb 4-1: Using ep0 maxpacket: 8
[  122.216308][ T5899] dw2102: i2c transfer failed.
[  122.223020][ T5962] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  122.226024][ T5899] dvb-usb: MAC address: 02:02:02:02:02:02
[  122.235851][ T5899] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  122.252344][ T5962] usb 4-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6
[  122.262168][ T5962] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.262518][ T5899] dvb-usb: bulk message failed: -22 (3/0)
[  122.272689][ T5962] usb 4-1: config 0 descriptor??
[  122.281133][ T5899] dw2102: command 0x0e transfer failed.
[  122.287415][ T5899] dvb-usb: bulk message failed: -22 (3/0)
[  122.293156][ T5899] dw2102: command 0x0e transfer failed.
[  122.476338][ T6837] Malformed UNC in devname
[  122.476338][ T6837] 
[  122.483013][ T6837] CIFS: VFS: Malformed UNC in devname
[  122.626463][ T5899] dvb-usb: bulk message failed: -22 (3/0)
[  122.632270][ T5899] dw2102: command 0x0e transfer failed.
[  122.642615][ T5899] dvb-usb: bulk message failed: -22 (3/0)
[  122.656986][ T5899] dw2102: command 0x0e transfer failed.
[  122.672905][ T5899] dvb-usb: bulk message failed: -22 (1/0)
[  122.687361][ T5899] dw2102: command 0x51 transfer failed.
[  122.705451][ T5899] dvb-usb: bulk message failed: -22 (5/0)
[  122.715477][ T5899] dw2102: i2c probe for address 0x68 failed.
[  122.722481][ T5899] dvb-usb: bulk message failed: -22 (5/0)
[  122.742280][ T5899] dw2102: i2c probe for address 0x69 failed.
[  122.755566][ T5899] dvb-usb: bulk message failed: -22 (5/0)
[  122.775734][ T5899] dw2102: i2c probe for address 0x6a failed.
[  122.781741][ T5899] dw2102: probing for demodulator failed. Is the external power switched on?
[  122.804510][ T5899] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)'
[  122.813972][ T6854] exFAT-fs (rnullb0): invalid boot record signature
[  122.825799][ T6854] exFAT-fs (rnullb0): failed to read boot sector
[  122.832324][ T6854] exFAT-fs (rnullb0): failed to recognize exfat type
[  122.899481][   T10] usb 4-1: USB disconnect, device number 22
[  122.935440][ T5899] rc_core: IR keymap rc-tt-1500 not found
[  122.941810][ T5899] Registered IR keymap rc-empty
[  122.950726][ T5899] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0
[  122.962790][ T5899] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input38
[  122.976194][ T5899] dvb-usb: schedule remote query interval to 250 msecs.
[  122.983152][ T5899] dw2102: su3000_power_ctrl: 0, initialized 1
[  122.989656][ T5899] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected.
[  123.004547][ T5899] usb 1-1: USB disconnect, device number 21
[  123.073973][ T5899] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected.
[  123.295572][ T5962] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  123.415485][ T5867] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  123.465647][ T5962] usb 2-1: Using ep0 maxpacket: 32
[  123.472389][ T5962] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  123.486586][ T5962] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  123.497101][ T5962] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  123.511431][ T5962] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  123.520719][ T5962] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.531806][ T5962] usb 2-1: config 0 descriptor??
[  123.575552][ T5867] usb 4-1: Using ep0 maxpacket: 8
[  123.580575][   T30] audit: type=1326 audit(1756071280.163:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6881 comm="syz.0.323" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa2ae98ebe9 code=0x0
[  123.603962][ T5867] usb 4-1: unable to get BOS descriptor or descriptor too short
[  123.612049][ T5867] usb 4-1: too many configurations: 30, using maximum allowed: 8
[  123.620898][ T5867] usb 4-1: unable to read config index 0 descriptor/start: -61
[  123.628512][ T5867] usb 4-1: can't read configurations, error -61
[  123.778136][ T5867] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  123.945638][ T5867] usb 4-1: Using ep0 maxpacket: 8
[  123.954524][ T5962] usbhid 2-1:0.0: can't add hid device: -71
[  123.963679][ T5962] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  123.974722][ T5867] usb 4-1: unable to get BOS descriptor or descriptor too short
[  123.982815][ T5867] usb 4-1: too many configurations: 30, using maximum allowed: 8
[  123.998986][ T5962] usb 2-1: USB disconnect, device number 34
[  124.009999][ T5867] usb 4-1: unable to read config index 0 descriptor/start: -61
[  124.019559][ T5867] usb 4-1: can't read configurations, error -61
[  124.033197][ T5867] usb usb4-port1: attempt power cycle
[  124.375454][ T5867] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  124.396738][ T5867] usb 4-1: Using ep0 maxpacket: 8
[  124.407664][ T5867] usb 4-1: unable to get BOS descriptor or descriptor too short
[  124.415860][ T5867] usb 4-1: too many configurations: 30, using maximum allowed: 8
[  124.424763][ T5867] usb 4-1: unable to read config index 0 descriptor/start: -61
[  124.434538][ T5867] usb 4-1: can't read configurations, error -61
[  124.576339][ T5867] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  124.595946][ T5867] usb 4-1: Using ep0 maxpacket: 8
[  124.602846][ T5867] usb 4-1: unable to get BOS descriptor or descriptor too short
[  124.611371][ T5867] usb 4-1: too many configurations: 30, using maximum allowed: 8
[  124.620246][ T5867] usb 4-1: unable to read config index 0 descriptor/start: -61
[  124.630939][ T5867] usb 4-1: can't read configurations, error -61
[  124.637872][ T5867] usb usb4-port1: unable to enumerate USB device
[  125.351087][ T6898] hpfs: Bad magic ... probably not HPFS
[  125.651755][ T6910] omfs: Invalid superblock (0)
[  125.735482][ T5899] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  125.885497][ T5899] usb 1-1: Using ep0 maxpacket: 8
[  125.892153][ T5899] usb 1-1: unable to get BOS descriptor or descriptor too short
[  125.901359][ T5899] usb 1-1: config 4 has an invalid interface number: 30 but max is 0
[  125.909540][ T5899] usb 1-1: config 4 has no interface number 0
[  125.917801][ T5899] usb 1-1: config 4 interface 30 has no altsetting 0
[  125.927782][ T5899] usb 1-1: string descriptor 0 read error: -22
[  125.933984][ T5899] usb 1-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88
[  125.943152][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.954363][ T5899] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state.
[  125.961752][ T5899] dw2102: su3000_power_ctrl: 1, initialized 0
[  125.967853][ T5899] dvb-usb: bulk message failed: -22 (2/0)
[  125.974554][ T5899] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  125.984201][ T5899] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2))
[  125.992113][ T5899] usb 1-1: media controller created
[  125.998632][ T5899] dvb-usb: bulk message failed: -22 (6/0)
[  126.004361][ T5899] dw2102: i2c transfer failed.
[  126.009416][ T5899] dvb-usb: bulk message failed: -22 (6/0)
[  126.015137][ T5899] dw2102: i2c transfer failed.
[  126.020205][ T5899] dvb-usb: bulk message failed: -22 (6/0)
[  126.025713][ T5971] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  126.026172][ T5899] dw2102: i2c transfer failed.
[  126.038360][ T5899] dvb-usb: bulk message failed: -22 (6/0)
[  126.044081][ T5899] dw2102: i2c transfer failed.
[  126.048936][ T5899] dvb-usb: bulk message failed: -22 (6/0)
[  126.054649][ T5899] dw2102: i2c transfer failed.
[  126.059630][ T5899] dvb-usb: bulk message failed: -22 (6/0)
[  126.065413][ T5899] dw2102: i2c transfer failed.
[  126.070183][ T5899] dvb-usb: MAC address: 02:02:02:02:02:02
[  126.081394][ T5899] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  126.095282][ T5899] dvb-usb: bulk message failed: -22 (3/0)
[  126.102034][ T5899] dw2102: command 0x0e transfer failed.
[  126.107634][ T5899] dvb-usb: bulk message failed: -22 (3/0)
[  126.113355][ T5899] dw2102: command 0x0e transfer failed.
[  126.185487][ T5971] usb 2-1: Using ep0 maxpacket: 16
[  126.195124][ T5971] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  126.205141][ T5971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.216117][ T5971] usb 2-1: config 0 descriptor??
[  126.223721][ T5971] gspca_main: sonixj-2.14.0 probing 0471:0327
[  126.427706][ T5899] dvb-usb: bulk message failed: -22 (3/0)
[  126.433460][ T5899] dw2102: command 0x0e transfer failed.
[  126.442534][ T5899] dvb-usb: bulk message failed: -22 (3/0)
[  126.450218][ T5899] dw2102: command 0x0e transfer failed.
[  126.455817][ T5899] dvb-usb: bulk message failed: -22 (1/0)
[  126.461640][ T5899] dw2102: command 0x51 transfer failed.
[  126.467690][ T5899] dvb-usb: bulk message failed: -22 (5/0)
[  126.473412][ T5899] dw2102: i2c probe for address 0x68 failed.
[  126.481757][ T5899] dvb-usb: bulk message failed: -22 (5/0)
[  126.487571][ T5899] dw2102: i2c probe for address 0x69 failed.
[  126.493558][ T5899] dvb-usb: bulk message failed: -22 (5/0)
[  126.500296][ T5899] dw2102: i2c probe for address 0x6a failed.
[  126.506488][ T5899] dw2102: probing for demodulator failed. Is the external power switched on?
[  126.517630][ T5899] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)'
[  126.575639][ T5899] rc_core: IR keymap rc-tt-1500 not found
[  126.583135][ T5899] Registered IR keymap rc-empty
[  126.592404][ T5899] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0
[  126.603785][ T5899] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input39
[  126.634947][ T5899] dvb-usb: schedule remote query interval to 250 msecs.
[  126.642202][ T5899] dw2102: su3000_power_ctrl: 0, initialized 1
[  126.653135][ T5899] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected.
[  126.692110][ T5899] usb 1-1: USB disconnect, device number 22
[  126.739603][ T5899] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected.
[  127.316653][ T5899] usb 2-1: USB disconnect, device number 35
[  127.515972][ T6961] netlink: 12 bytes leftover after parsing attributes in process `syz.3.338'.
[  127.853149][ T6974] ntfs3(rnullb0): Primary boot signature is not NTFS.
[  127.860597][ T6974] ntfs3(rnullb0): Alternative boot signature is not NTFS.
[  128.020654][ T6985] XFS (rnullb0): Invalid superblock magic number
[  128.047159][ T5899] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  128.205620][ T5899] usb 4-1: Using ep0 maxpacket: 8
[  128.217005][ T5899] usb 4-1: unable to get BOS descriptor or descriptor too short
[  128.234606][ T5899] usb 4-1: config 4 has an invalid interface number: 30 but max is 0
[  128.244252][ T5899] usb 4-1: config 4 has no interface number 0
[  128.259260][ T5899] usb 4-1: config 4 interface 30 has no altsetting 0
[  128.278486][ T5899] usb 4-1: string descriptor 0 read error: -22
[  128.284884][ T5899] usb 4-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88
[  128.294775][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.314269][ T5899] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state.
[  128.321365][ T5899] dw2102: su3000_power_ctrl: 1, initialized 0
[  128.327486][ T5899] dvb-usb: bulk message failed: -22 (2/0)
[  128.334221][ T5899] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  128.343947][ T5899] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2))
[  128.351487][ T5899] usb 4-1: media controller created
[  128.357692][ T5899] dvb-usb: bulk message failed: -22 (6/0)
[  128.363422][ T5899] dw2102: i2c transfer failed.
[  128.369234][ T5899] dvb-usb: bulk message failed: -22 (6/0)
[  128.374973][ T5899] dw2102: i2c transfer failed.
[  128.379794][ T5899] dvb-usb: bulk message failed: -22 (6/0)
[  128.385676][ T5899] dw2102: i2c transfer failed.
[  128.390460][ T5899] dvb-usb: bulk message failed: -22 (6/0)
[  128.396218][ T5899] dw2102: i2c transfer failed.
[  128.401305][ T5899] dvb-usb: bulk message failed: -22 (6/0)
[  128.407595][ T5899] dw2102: i2c transfer failed.
[  128.412376][ T5899] dvb-usb: bulk message failed: -22 (6/0)
[  128.418140][ T5899] dw2102: i2c transfer failed.
[  128.422943][ T5899] dvb-usb: MAC address: 02:02:02:02:02:02
[  128.440745][ T5899] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  128.456278][ T5899] dvb-usb: bulk message failed: -22 (3/0)
[  128.462019][ T5899] dw2102: command 0x0e transfer failed.
[  128.467816][ T5899] dvb-usb: bulk message failed: -22 (3/0)
[  128.473716][ T5899] dw2102: command 0x0e transfer failed.
[  128.601433][ T7002] 9p: Unknown access argument �: -22
[  128.665445][ T5971] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  128.787760][ T5899] dvb-usb: bulk message failed: -22 (3/0)
[  128.793491][ T5899] dw2102: command 0x0e transfer failed.
[  128.799141][ T5899] dvb-usb: bulk message failed: -22 (3/0)
[  128.804863][ T5899] dw2102: command 0x0e transfer failed.
[  128.810534][ T5899] dvb-usb: bulk message failed: -22 (1/0)
[  128.816295][ T5899] dw2102: command 0x51 transfer failed.
[  128.821878][ T5899] dvb-usb: bulk message failed: -22 (5/0)
[  128.827095][ T5971] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  128.827668][ T5899] dw2102: i2c probe for address 0x68 failed.
[  128.842756][ T5899] dvb-usb: bulk message failed: -22 (5/0)
[  128.849135][ T5899] dw2102: i2c probe for address 0x69 failed.
[  128.855159][ T5899] dvb-usb: bulk message failed: -22 (5/0)
[  128.855183][ T5971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.861900][ T5899] dw2102: i2c probe for address 0x6a failed.
[  128.877729][ T5899] dw2102: probing for demodulator failed. Is the external power switched on?
[  128.877741][ T6972] dvb-usb: bulk message failed: -22 (3/0)
[  128.886583][ T5899] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)'
[  128.893476][ T6972] dw2102: i2c transfer failed.
[  128.905585][ T5971] usb 2-1: config 0 descriptor??
[  128.913922][ T5971] cp210x 2-1:0.0: cp210x converter detected
[  128.947054][ T5899] rc_core: IR keymap rc-tt-1500 not found
[  128.952855][ T5899] Registered IR keymap rc-empty
[  128.959738][ T5899] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0
[  128.970891][ T5899] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input40
[  128.981706][ T5899] dvb-usb: schedule remote query interval to 250 msecs.
[  128.988723][ T5899] dw2102: su3000_power_ctrl: 0, initialized 1
[  128.994802][ T5899] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected.
[  129.011685][ T5899] usb 4-1: USB disconnect, device number 27
[  129.034010][ T5899] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected.
[  129.248991][ T7011] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  129.363280][ T5870] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  129.378137][ T5870] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  129.385585][ T5870] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  129.393237][ T5870] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  129.402173][ T5870] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  129.531983][ T5971] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -71
[  129.577163][ T5971] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71
[  129.595582][ T5971] cp210x 2-1:0.0: GPIO initialisation failed: -71
[  129.615606][ T5971] usb 2-1: cp210x converter now attached to ttyUSB0
[  129.620263][ T7025] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  129.643193][ T5971] usb 2-1: USB disconnect, device number 36
[  129.666908][ T5971] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  129.686276][ T5971] cp210x 2-1:0.0: device disconnected
[  129.838288][ T7016] chnl_net:caif_netlink_parms(): no params data found
[  129.974035][ T7037] 9p: Bad value for 'rfdno'
[  130.003385][ T7016] bridge0: port 1(bridge_slave_0) entered blocking state
[  130.016594][ T5867] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  130.034473][ T7016] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.054367][ T7016] bridge_slave_0: entered allmulticast mode
[  130.075497][ T7016] bridge_slave_0: entered promiscuous mode
[  130.095182][ T7016] bridge0: port 2(bridge_slave_1) entered blocking state
[  130.112550][ T7016] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.125963][ T7016] bridge_slave_1: entered allmulticast mode
[  130.132844][ T7016] bridge_slave_1: entered promiscuous mode
[  130.175040][ T7016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  130.186940][ T7016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  130.200415][ T5867] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  130.214842][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.223694][ T5867] usb 4-1: Product: syz
[  130.235818][ T5867] usb 4-1: Manufacturer: syz
[  130.240436][ T5867] usb 4-1: SerialNumber: syz
[  130.247934][ T7016] team0: Port device team_slave_0 added
[  130.256749][ T7016] team0: Port device team_slave_1 added
[  130.263655][ T5867] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  130.284560][ T5962] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  130.312970][ T7016] batman_adv: batadv0: Adding interface: batadv_slave_0
[  130.320105][ T7016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  130.346176][ T7016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  130.358231][ T7016] batman_adv: batadv0: Adding interface: batadv_slave_1
[  130.365235][ T7016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  130.391537][ T7016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  130.441204][ T7016] hsr_slave_0: entered promiscuous mode
[  130.456325][ T7016] hsr_slave_1: entered promiscuous mode
[  130.462599][ T7016] debugfs: 'hsr0' already exists in 'hsr'
[  130.475165][ T7016] Cannot create hsr debugfs directory
[  130.676445][ T7016] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  130.697613][ T7029] /dev/rnullb0: Can't open blockdev
[  130.703257][ T7016] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  130.716489][ T7050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  130.739353][ T7050] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  130.749028][ T7016] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  130.778082][ T7016] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  130.787845][ T5948] usb 4-1: USB disconnect, device number 28
[  130.887060][ T7016] 8021q: adding VLAN 0 to HW filter on device bond0
[  130.904707][ T7016] 8021q: adding VLAN 0 to HW filter on device team0
[  130.918693][ T3579] bridge0: port 1(bridge_slave_0) entered blocking state
[  130.925847][ T3579] bridge0: port 1(bridge_slave_0) entered forwarding state
[  130.933260][ T5867] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  130.960191][ T3579] bridge0: port 2(bridge_slave_1) entered blocking state
[  130.967341][ T3579] bridge0: port 2(bridge_slave_1) entered forwarding state
[  131.055571][ T5899] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  131.147096][ T5867] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[  131.173374][ T5867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  131.189860][ T7016] 8021q: adding VLAN 0 to HW filter on device batadv0
[  131.205220][ T5867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  131.222239][ T5867] usb 1-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00
[  131.236596][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.240269][ T5899] usb 2-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30
[  131.257610][ T5867] usb 1-1: config 0 descriptor??
[  131.258939][ T5899] usb 2-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84
[  131.280788][ T5899] usb 2-1: config 4 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 77
[  131.303120][ T5899] usb 2-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101
[  131.318347][ T5899] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  131.329097][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.341489][ T7060] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  131.345621][ T5962] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  131.361330][ T5962] ath9k_htc: Failed to initialize the device
[  131.415479][ T5948] usb 4-1: ath9k_htc: USB layer deinitialized
[  131.430591][ T5866] Bluetooth: hci4: command tx timeout
[  131.487416][ T7016] veth0_vlan: entered promiscuous mode
[  131.502423][ T7016] veth1_vlan: entered promiscuous mode
[  131.525996][ T7016] veth0_macvtap: entered promiscuous mode
[  131.535268][ T7016] veth1_macvtap: entered promiscuous mode
[  131.552426][ T7016] batman_adv: batadv0: Interface activated: batadv_slave_0
[  131.568245][ T7016] batman_adv: batadv0: Interface activated: batadv_slave_1
[  131.582742][ T4248] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  131.592698][ T4248] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  131.602418][ T5899] ath6kl: Failed to submit usb control message: -71
[  131.606722][ T4248] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  131.617894][ T5899] ath6kl: unable to send the bmi data to the device: -71
[  131.624955][ T5899] ath6kl: Unable to send get target info: -71
[  131.633773][ T5899] ath6kl: Failed to init ath6kl core: -71
[  131.638951][ T4248] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  131.640531][ T5899] ath6kl_usb 2-1:4.0: probe with driver ath6kl_usb failed with error -71
[  131.664926][ T5899] usb 2-1: USB disconnect, device number 37
[  131.688531][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  131.700992][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.719870][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  131.730635][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.892518][ T5867] usbhid 1-1:0.0: can't add hid device: -71
[  131.912661][ T5867] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  131.953687][ T5867] usb 1-1: USB disconnect, device number 23
[  132.023589][ T7088] netlink: 'syz.3.372': attribute type 2 has an invalid length.
[  132.225643][   T30] audit: type=1804 audit(1756071288.803:7): pid=7096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.375" name="/newroot/111/cgroup.controllers" dev="tmpfs" ino=599 res=1 errno=0
[  132.266702][ T7096] netlink: 132 bytes leftover after parsing attributes in process `syz.1.375'.
[  132.321796][   T30] audit: type=1800 audit(1756071288.803:8): pid=7096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.375" name="cgroup.controllers" dev="tmpfs" ino=599 res=0 errno=0
[  132.493661][ T7102] FAULT_INJECTION: forcing a failure.
[  132.493661][ T7102] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  132.534191][ T7102] CPU: 1 UID: 0 PID: 7102 Comm: syz.0.378 Not tainted syzkaller #0 PREEMPT(full) 
[  132.534213][ T7102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  132.534236][ T7102] Call Trace:
[  132.534243][ T7102]  <TASK>
[  132.534249][ T7102]  dump_stack_lvl+0x189/0x250
[  132.534277][ T7102]  ? __pfx____ratelimit+0x10/0x10
[  132.534297][ T7102]  ? __pfx_dump_stack_lvl+0x10/0x10
[  132.534318][ T7102]  ? __pfx__printk+0x10/0x10
[  132.534337][ T7102]  ? __might_fault+0xb0/0x130
[  132.534362][ T7102]  ? rcu_is_watching+0x15/0xb0
[  132.534381][ T7102]  should_fail_ex+0x414/0x560
[  132.534404][ T7102]  _copy_from_iter+0x1de/0x1790
[  132.534420][ T7102]  ? unwind_next_frame+0xa5/0x2390
[  132.534439][ T7102]  ? rcu_is_watching+0x15/0xb0
[  132.534456][ T7102]  ? unwind_next_frame+0xa5/0x2390
[  132.534474][ T7102]  ? unwind_next_frame+0xa5/0x2390
[  132.534493][ T7102]  ? __pfx__copy_from_iter+0x10/0x10
[  132.534509][ T7102]  ? rcu_is_watching+0x15/0xb0
[  132.534526][ T7102]  ? lock_release+0x4b/0x3e0
[  132.534541][ T7102]  ? lock_release+0x4b/0x3e0
[  132.534558][ T7102]  tun_get_user+0x219/0x3e20
[  132.534580][ T7102]  ? rcu_is_watching+0x15/0xb0
[  132.534597][ T7102]  ? lock_release+0x4b/0x3e0
[  132.534614][ T7102]  ? aa_file_perm+0x44d/0x1550
[  132.534635][ T7102]  ? __pfx_tun_get_user+0x10/0x10
[  132.534653][ T7102]  ? _parse_integer_limit+0x1ae/0x1f0
[  132.534677][ T7102]  ? kstrtoull+0x12f/0x1d0
[  132.534700][ T7102]  ? ref_tracker_alloc+0x318/0x460
[  132.534727][ T7102]  ? get_pid_task+0x20/0x1f0
[  132.534747][ T7102]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  132.534769][ T7102]  ? tun_get+0x1c/0x2f0
[  132.534787][ T7102]  ? tun_get+0x1c/0x2f0
[  132.534804][ T7102]  ? rcu_is_watching+0x15/0xb0
[  132.534820][ T7102]  ? tun_get+0x1c/0x2f0
[  132.534837][ T7102]  ? lock_release+0x4b/0x3e0
[  132.534852][ T7102]  ? common_file_perm+0x1b5/0x230
[  132.534871][ T7102]  ? tun_get+0x1c/0x2f0
[  132.534890][ T7102]  tun_chr_write_iter+0x113/0x200
[  132.534910][ T7102]  vfs_write+0x5c9/0xb30
[  132.534928][ T7102]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  132.534947][ T7102]  ? __pfx_vfs_write+0x10/0x10
[  132.534966][ T7102]  ? __fget_files+0x2a/0x420
[  132.534988][ T7102]  ksys_write+0x145/0x250
[  132.535004][ T7102]  ? __pfx_ksys_write+0x10/0x10
[  132.535022][ T7102]  ? rcu_is_watching+0x15/0xb0
[  132.535040][ T7102]  do_syscall_64+0xfa/0xfa0
[  132.535060][ T7102]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.535075][ T7102]  ? clear_bhb_loop+0x60/0xb0
[  132.535092][ T7102]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.535106][ T7102] RIP: 0033:0x7fa2ae98ebe9
[  132.535120][ T7102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  132.535134][ T7102] RSP: 002b:00007fa2af792038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  132.535152][ T7102] RAX: ffffffffffffffda RBX: 00007fa2aebb5fa0 RCX: 00007fa2ae98ebe9
[  132.535168][ T7102] RDX: 000000000000025d RSI: 0000200000003a00 RDI: 0000000000000003
[  132.535179][ T7102] RBP: 00007fa2af792090 R08: 0000000000000000 R09: 0000000000000000
[  132.535189][ T7102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  132.535199][ T7102] R13: 00007fa2aebb6038 R14: 00007fa2aebb5fa0 R15: 00007ffdfd25d348
[  132.535216][ T7102]  </TASK>
[  132.878315][ T5971] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  132.924127][ T1308] ieee802154 phy0 wpan0: encryption failed: -22
[  132.930533][ T1308] ieee802154 phy1 wpan1: encryption failed: -22
[  133.045731][ T5971] usb 4-1: Using ep0 maxpacket: 8
[  133.052673][ T5971] usb 4-1: unable to get BOS descriptor or descriptor too short
[  133.064717][ T5971] usb 4-1: config 4 has an invalid interface number: 30 but max is 0
[  133.073116][ T5971] usb 4-1: config 4 has no interface number 0
[  133.084529][ T5971] usb 4-1: config 4 interface 30 has no altsetting 0
[  133.094046][ T5971] usb 4-1: string descriptor 0 read error: -22
[  133.101808][ T5971] usb 4-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88
[  133.113074][ T5971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.134614][ T5971] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state.
[  133.143037][ T5971] dw2102: su3000_power_ctrl: 1, initialized 0
[  133.149647][ T5971] dvb-usb: bulk message failed: -22 (2/0)
[  133.167025][ T5971] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  133.178218][ T5971] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2))
[  133.229540][ T5971] usb 4-1: media controller created
[  133.241309][ T5971] dvb-usb: bulk message failed: -22 (6/0)
[  133.253856][ T5971] dw2102: i2c transfer failed.
[  133.260906][ T5971] dvb-usb: bulk message failed: -22 (6/0)
[  133.291257][ T5971] dw2102: i2c transfer failed.
[  133.300964][ T5971] dvb-usb: bulk message failed: -22 (6/0)
[  133.307231][ T5971] dw2102: i2c transfer failed.
[  133.312162][ T5971] dvb-usb: bulk message failed: -22 (6/0)
[  133.319502][ T5971] dw2102: i2c transfer failed.
[  133.324440][ T5971] dvb-usb: bulk message failed: -22 (6/0)
[  133.330790][ T5971] dw2102: i2c transfer failed.
[  133.338336][ T5971] dvb-usb: bulk message failed: -22 (6/0)
[  133.344065][ T5971] dw2102: i2c transfer failed.
[  133.350379][ T5971] dvb-usb: MAC address: 02:02:02:02:02:02
[  133.420393][ T5971] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  133.460628][ T5971] dvb-usb: bulk message failed: -22 (3/0)
[  133.485439][ T5971] dw2102: command 0x0e transfer failed.
[  133.507424][ T5971] dvb-usb: bulk message failed: -22 (3/0)
[  133.523768][ T5971] dw2102: command 0x0e transfer failed.
[  133.540552][ T5866] Bluetooth: hci4: command tx timeout
[  133.865527][ T5971] dvb-usb: bulk message failed: -22 (3/0)
[  133.894477][ T5971] dw2102: command 0x0e transfer failed.
[  133.914609][ T5971] dvb-usb: bulk message failed: -22 (3/0)
[  133.940983][ T5971] dw2102: command 0x0e transfer failed.
[  133.976899][ T5971] dvb-usb: bulk message failed: -22 (1/0)
[  134.000359][ T5971] dw2102: command 0x51 transfer failed.
[  134.024574][ T5971] dvb-usb: bulk message failed: -22 (5/0)
[  134.050873][ T5971] dw2102: i2c probe for address 0x68 failed.
[  134.080698][ T5971] dvb-usb: bulk message failed: -22 (5/0)
[  134.103406][ T7124] /dev/rnullb0: Can't open blockdev
[  134.114295][ T5971] dw2102: i2c probe for address 0x69 failed.
[  134.132576][ T5971] dvb-usb: bulk message failed: -22 (5/0)
[  134.150806][ T5971] dw2102: i2c probe for address 0x6a failed.
[  134.179367][ T5971] dw2102: probing for demodulator failed. Is the external power switched on?
[  134.220831][ T5971] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)'
[  134.357051][ T5971] rc_core: IR keymap rc-tt-1500 not found
[  134.383954][ T5971] Registered IR keymap rc-empty
[  134.404008][ T5971] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0
[  134.434439][ T7130] FAULT_INJECTION: forcing a failure.
[  134.434439][ T7130] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  134.459124][ T5971] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input42
[  134.477723][ T7132] /dev/rnullb0: Can't open blockdev
[  134.493261][ T7130] CPU: 1 UID: 0 PID: 7130 Comm: syz.0.390 Not tainted syzkaller #0 PREEMPT(full) 
[  134.493285][ T7130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  134.493295][ T7130] Call Trace:
[  134.493302][ T7130]  <TASK>
[  134.493310][ T7130]  dump_stack_lvl+0x189/0x250
[  134.493336][ T7130]  ? __pfx____ratelimit+0x10/0x10
[  134.493357][ T7130]  ? __pfx_dump_stack_lvl+0x10/0x10
[  134.493379][ T7130]  ? __pfx__printk+0x10/0x10
[  134.493407][ T7130]  ? __might_fault+0xb0/0x130
[  134.493431][ T7130]  ? rcu_is_watching+0x15/0xb0
[  134.493450][ T7130]  should_fail_ex+0x414/0x560
[  134.493473][ T7130]  _copy_from_iter+0x1de/0x1790
[  134.493489][ T7130]  ? unwind_next_frame+0xa5/0x2390
[  134.493507][ T7130]  ? rcu_is_watching+0x15/0xb0
[  134.493525][ T7130]  ? unwind_next_frame+0xa5/0x2390
[  134.493543][ T7130]  ? unwind_next_frame+0xa5/0x2390
[  134.493563][ T7130]  ? __pfx__copy_from_iter+0x10/0x10
[  134.493579][ T7130]  ? rcu_is_watching+0x15/0xb0
[  134.493596][ T7130]  ? lock_release+0x4b/0x3e0
[  134.493611][ T7130]  ? lock_release+0x4b/0x3e0
[  134.493627][ T7130]  tun_get_user+0x488/0x3e20
[  134.493649][ T7130]  ? rcu_is_watching+0x15/0xb0
[  134.493666][ T7130]  ? lock_release+0x4b/0x3e0
[  134.493682][ T7130]  ? aa_file_perm+0x44d/0x1550
[  134.493702][ T7130]  ? __pfx_tun_get_user+0x10/0x10
[  134.493718][ T7130]  ? _parse_integer_limit+0x1ae/0x1f0
[  134.493741][ T7130]  ? kstrtoull+0x12f/0x1d0
[  134.493763][ T7130]  ? ref_tracker_alloc+0x318/0x460
[  134.493783][ T7130]  ? get_pid_task+0x20/0x1f0
[  134.493803][ T7130]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  134.493823][ T7130]  ? tun_get+0x1c/0x2f0
[  134.493840][ T7130]  ? tun_get+0x1c/0x2f0
[  134.493857][ T7130]  ? rcu_is_watching+0x15/0xb0
[  134.493872][ T7130]  ? tun_get+0x1c/0x2f0
[  134.493889][ T7130]  ? lock_release+0x4b/0x3e0
[  134.493904][ T7130]  ? common_file_perm+0x1b5/0x230
[  134.493923][ T7130]  ? tun_get+0x1c/0x2f0
[  134.493940][ T7130]  tun_chr_write_iter+0x113/0x200
[  134.493960][ T7130]  vfs_write+0x5c9/0xb30
[  134.493978][ T7130]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  134.493997][ T7130]  ? __pfx_vfs_write+0x10/0x10
[  134.494016][ T7130]  ? __fget_files+0x2a/0x420
[  134.494036][ T7130]  ksys_write+0x145/0x250
[  134.494053][ T7130]  ? __pfx_ksys_write+0x10/0x10
[  134.494070][ T7130]  ? rcu_is_watching+0x15/0xb0
[  134.494088][ T7130]  do_syscall_64+0xfa/0xfa0
[  134.494108][ T7130]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.494124][ T7130]  ? clear_bhb_loop+0x60/0xb0
[  134.494141][ T7130]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.494157][ T7130] RIP: 0033:0x7fa2ae98ebe9
[  134.494172][ T7130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  134.494186][ T7130] RSP: 002b:00007fa2af792038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  134.494204][ T7130] RAX: ffffffffffffffda RBX: 00007fa2aebb5fa0 RCX: 00007fa2ae98ebe9
[  134.494217][ T7130] RDX: 000000000000025d RSI: 0000200000003a00 RDI: 0000000000000003
[  134.494228][ T7130] RBP: 00007fa2af792090 R08: 0000000000000000 R09: 0000000000000000
[  134.494238][ T7130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  134.494249][ T7130] R13: 00007fa2aebb6038 R14: 00007fa2aebb5fa0 R15: 00007ffdfd25d348
[  134.494266][ T7130]  </TASK>
[  134.825189][ T5971] dvb-usb: schedule remote query interval to 250 msecs.
[  134.833750][ T5971] dw2102: su3000_power_ctrl: 0, initialized 1
[  134.840054][ T5971] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected.
[  134.857230][ T5971] usb 4-1: USB disconnect, device number 29
[  134.900602][ T5971] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected.
[  134.957065][ T7134] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000).
[  134.968552][ T7134] qnx6: wrong signature (magic) in superblock #1.
[  134.975019][ T7134] qnx6: unable to read the first superblock
[  135.045839][ T5899] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  135.062947][ T7140] FAULT_INJECTION: forcing a failure.
[  135.062947][ T7140] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  135.076581][ T7140] CPU: 1 UID: 0 PID: 7140 Comm: syz.0.395 Not tainted syzkaller #0 PREEMPT(full) 
[  135.076603][ T7140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  135.076612][ T7140] Call Trace:
[  135.076618][ T7140]  <TASK>
[  135.076624][ T7140]  dump_stack_lvl+0x189/0x250
[  135.076648][ T7140]  ? __pfx____ratelimit+0x10/0x10
[  135.076665][ T7140]  ? __pfx_dump_stack_lvl+0x10/0x10
[  135.076686][ T7140]  ? __pfx__printk+0x10/0x10
[  135.076703][ T7140]  ? __might_fault+0xb0/0x130
[  135.076726][ T7140]  ? rcu_is_watching+0x15/0xb0
[  135.076743][ T7140]  should_fail_ex+0x414/0x560
[  135.076765][ T7140]  _copy_from_iter+0x1de/0x1790
[  135.076777][ T7140]  ? unwind_next_frame+0xa5/0x2390
[  135.076788][ T7140]  ? rcu_is_watching+0x15/0xb0
[  135.076798][ T7140]  ? unwind_next_frame+0xa5/0x2390
[  135.076809][ T7140]  ? unwind_next_frame+0xa5/0x2390
[  135.076820][ T7140]  ? __pfx__copy_from_iter+0x10/0x10
[  135.076829][ T7140]  ? rcu_is_watching+0x15/0xb0
[  135.076838][ T7140]  ? lock_release+0x4b/0x3e0
[  135.076847][ T7140]  ? lock_release+0x4b/0x3e0
[  135.076856][ T7140]  tun_get_user+0x219/0x3e20
[  135.076869][ T7140]  ? rcu_is_watching+0x15/0xb0
[  135.076878][ T7140]  ? lock_release+0x4b/0x3e0
[  135.076888][ T7140]  ? aa_file_perm+0x44d/0x1550
[  135.076901][ T7140]  ? __pfx_tun_get_user+0x10/0x10
[  135.076911][ T7140]  ? _parse_integer_limit+0x1ae/0x1f0
[  135.076926][ T7140]  ? kstrtoull+0x12f/0x1d0
[  135.076939][ T7140]  ? ref_tracker_alloc+0x318/0x460
[  135.076952][ T7140]  ? get_pid_task+0x20/0x1f0
[  135.076964][ T7140]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  135.076977][ T7140]  ? tun_get+0x1c/0x2f0
[  135.076987][ T7140]  ? tun_get+0x1c/0x2f0
[  135.076997][ T7140]  ? rcu_is_watching+0x15/0xb0
[  135.077006][ T7140]  ? tun_get+0x1c/0x2f0
[  135.077016][ T7140]  ? lock_release+0x4b/0x3e0
[  135.077024][ T7140]  ? common_file_perm+0x1b5/0x230
[  135.077035][ T7140]  ? tun_get+0x1c/0x2f0
[  135.077046][ T7140]  tun_chr_write_iter+0x113/0x200
[  135.077057][ T7140]  vfs_write+0x5c9/0xb30
[  135.077068][ T7140]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  135.077079][ T7140]  ? __pfx_vfs_write+0x10/0x10
[  135.077089][ T7140]  ? __fget_files+0x2a/0x420
[  135.077101][ T7140]  ksys_write+0x145/0x250
[  135.077110][ T7140]  ? __pfx_ksys_write+0x10/0x10
[  135.077119][ T7140]  ? rcu_is_watching+0x15/0xb0
[  135.077129][ T7140]  do_syscall_64+0xfa/0xfa0
[  135.077141][ T7140]  ? rcu_is_watching+0x15/0xb0
[  135.077150][ T7140]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.077159][ T7140]  ? clear_bhb_loop+0x60/0xb0
[  135.077169][ T7140]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.077177][ T7140] RIP: 0033:0x7fa2ae98ebe9
[  135.077187][ T7140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  135.077195][ T7140] RSP: 002b:00007fa2af792038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  135.077207][ T7140] RAX: ffffffffffffffda RBX: 00007fa2aebb5fa0 RCX: 00007fa2ae98ebe9
[  135.077214][ T7140] RDX: 0000000000000fce RSI: 0000200000003a00 RDI: 0000000000000003
[  135.077220][ T7140] RBP: 00007fa2af792090 R08: 0000000000000000 R09: 0000000000000000
[  135.077226][ T7140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  135.077232][ T7140] R13: 00007fa2aebb6038 R14: 00007fa2aebb5fa0 R15: 00007ffdfd25d348
[  135.077242][ T7140]  </TASK>
[  135.295654][ T5899] usb 2-1: Using ep0 maxpacket: 8
[  135.355507][ T5971] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  135.356176][ T5925] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  135.432355][ T5899] usb 2-1: unable to get BOS descriptor or descriptor too short
[  135.441413][ T5899] usb 2-1: config 4 has an invalid interface number: 30 but max is 0
[  135.449876][ T5899] usb 2-1: config 4 has no interface number 0
[  135.456287][ T5899] usb 2-1: config 4 interface 30 has no altsetting 0
[  135.465334][ T5899] usb 2-1: string descriptor 0 read error: -22
[  135.472756][ T5899] usb 2-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88
[  135.482757][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.506672][ T5899] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state.
[  135.513772][ T5899] dw2102: su3000_power_ctrl: 1, initialized 0
[  135.520889][ T5899] dvb-usb: bulk message failed: -22 (2/0)
[  135.528410][ T5899] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  135.536712][ T5971] usb 4-1: config 1 interface 0 altsetting 9 endpoint 0x2 has an invalid bInterval 160, changing to 11
[  135.555982][ T5971] usb 4-1: config 1 interface 0 has no altsetting 0
[  135.558764][ T5899] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2))
[  135.564715][ T5971] usb 4-1: New USB device found, idVendor=046d, idProduct=c704, bcdDevice= 0.40
[  135.571189][ T5899] usb 2-1: media controller created
[  135.579880][ T5971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.584757][ T5899] dvb-usb: bulk message failed: -22 (6/0)
[  135.593512][ T5971] usb 4-1: Product: syz
[  135.599165][ T5866] Bluetooth: hci4: command tx timeout
[  135.610329][ T5925] usb 5-1: Using ep0 maxpacket: 8
[  135.615423][ T5971] usb 4-1: Manufacturer: ࠁ
[  135.615441][ T5971] usb 4-1: SerialNumber: syz
[  135.626055][ T5899] dw2102: i2c transfer failed.
[  135.630836][ T5899] dvb-usb: bulk message failed: -22 (6/0)
[  135.653902][ T5899] dw2102: i2c transfer failed.
[  135.659650][ T5899] dvb-usb: bulk message failed: -22 (6/0)
[  135.665636][ T5899] dw2102: i2c transfer failed.
[  135.670691][ T5899] dvb-usb: bulk message failed: -22 (6/0)
[  135.677265][ T5899] dw2102: i2c transfer failed.
[  135.682155][ T5925] usb 5-1: unable to get BOS descriptor or descriptor too short
[  135.690115][ T5899] dvb-usb: bulk message failed: -22 (6/0)
[  135.695947][ T5899] dw2102: i2c transfer failed.
[  135.701231][ T5925] usb 5-1: config 4 has an invalid interface number: 30 but max is 0
[  135.709577][ T5925] usb 5-1: config 4 has no interface number 0
[  135.715806][ T5899] dvb-usb: bulk message failed: -22 (6/0)
[  135.721556][ T5899] dw2102: i2c transfer failed.
[  135.727399][ T5925] usb 5-1: config 4 interface 30 has no altsetting 0
[  135.734226][ T5899] dvb-usb: MAC address: 02:02:02:02:02:02
[  135.757380][ T5925] usb 5-1: string descriptor 0 read error: -22
[  135.763823][ T5925] usb 5-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88
[  135.776719][ T5899] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  135.785237][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.820297][ T5925] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state.
[  135.836192][ T5899] dvb-usb: bulk message failed: -22 (3/0)
[  135.851317][ T5899] dw2102: command 0x0e transfer failed.
[  135.857679][ T5925] dw2102: su3000_power_ctrl: 1, initialized 0
[  135.863759][ T5925] dvb-usb: bulk message failed: -22 (2/0)
[  135.875445][ T5899] dvb-usb: bulk message failed: -22 (3/0)
[  135.888059][ T5971] usbhid 4-1:1.0: can't add hid device: -71
[  135.893423][ T5899] dw2102: command 0x0e transfer failed.
[  135.899124][ T5971] usbhid 4-1:1.0: probe with driver usbhid failed with error -71
[  135.908429][ T5925] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  135.937640][ T5925] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2))
[  135.938810][ T5971] usb 4-1: USB disconnect, device number 30
[  135.963791][ T5925] usb 5-1: media controller created
[  135.979460][ T5925] dvb-usb: bulk message failed: -22 (6/0)
[  135.988947][ T5925] dw2102: i2c transfer failed.
[  136.005457][ T5925] dvb-usb: bulk message failed: -22 (6/0)
[  136.011207][ T5925] dw2102: i2c transfer failed.
[  136.035169][ T5925] dvb-usb: bulk message failed: -22 (6/0)
[  136.046952][ T5925] dw2102: i2c transfer failed.
[  136.053689][ T5925] dvb-usb: bulk message failed: -22 (6/0)
[  136.064944][ T5925] dw2102: i2c transfer failed.
[  136.078492][ T5925] dvb-usb: bulk message failed: -22 (6/0)
[  136.084474][ T5925] dw2102: i2c transfer failed.
[  136.115479][ T5925] dvb-usb: bulk message failed: -22 (6/0)
[  136.134898][ T5925] dw2102: i2c transfer failed.
[  136.144983][ T5925] dvb-usb: MAC address: 02:02:02:02:02:02
[  136.170532][ T5925] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  136.207357][ T5925] dvb-usb: bulk message failed: -22 (3/0)
[  136.220057][ T5925] dw2102: command 0x0e transfer failed.
[  136.225773][ T5899] dvb-usb: bulk message failed: -22 (3/0)
[  136.231496][ T5899] dw2102: command 0x0e transfer failed.
[  136.238387][ T5925] dvb-usb: bulk message failed: -22 (3/0)
[  136.244130][ T5925] dw2102: command 0x0e transfer failed.
[  136.250221][ T5899] dvb-usb: bulk message failed: -22 (3/0)
[  136.256287][ T5899] dw2102: command 0x0e transfer failed.
[  136.261965][ T5899] dvb-usb: bulk message failed: -22 (1/0)
[  136.267990][ T5899] dw2102: command 0x51 transfer failed.
[  136.273760][ T5899] dvb-usb: bulk message failed: -22 (5/0)
[  136.279859][ T5899] dw2102: i2c probe for address 0x68 failed.
[  136.286146][ T5899] dvb-usb: bulk message failed: -22 (5/0)
[  136.291864][ T5899] dw2102: i2c probe for address 0x69 failed.
[  136.298362][ T5899] dvb-usb: bulk message failed: -22 (5/0)
[  136.304120][ T5899] dw2102: i2c probe for address 0x6a failed.
[  136.310715][ T5899] dw2102: probing for demodulator failed. Is the external power switched on?
[  136.319808][ T5899] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)'
[  136.375501][ T5899] rc_core: IR keymap rc-tt-1500 not found
[  136.381264][ T5899] Registered IR keymap rc-empty
[  136.395917][ T5867] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  136.397655][ T5899] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0
[  136.438080][ T5899] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input43
[  136.467910][ T5899] dvb-usb: schedule remote query interval to 250 msecs.
[  136.474891][ T5899] dw2102: su3000_power_ctrl: 0, initialized 1
[  136.500194][ T5899] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected.
[  136.556876][ T5867] usb 1-1: device descriptor read/64, error -71
[  136.565769][ T5925] dvb-usb: bulk message failed: -22 (3/0)
[  136.571856][ T5925] dw2102: command 0x0e transfer failed.
[  136.592963][ T5925] dvb-usb: bulk message failed: -22 (3/0)
[  136.606576][ T5925] dw2102: command 0x0e transfer failed.
[  136.622418][ T5925] dvb-usb: bulk message failed: -22 (1/0)
[  136.637190][ T5925] dw2102: command 0x51 transfer failed.
[  136.652880][ T5925] dvb-usb: bulk message failed: -22 (5/0)
[  136.669599][ T5925] dw2102: i2c probe for address 0x68 failed.
[  136.687022][ T5925] dvb-usb: bulk message failed: -22 (5/0)
[  136.695637][ T5925] dw2102: i2c probe for address 0x69 failed.
[  136.698376][ T7164] FAULT_INJECTION: forcing a failure.
[  136.698376][ T7164] name failslab, interval 1, probability 0, space 0, times 0
[  136.726616][ T5925] dvb-usb: bulk message failed: -22 (5/0)
[  136.736301][ T5899] dvb-usb: bulk message failed: -22 (1/0)
[  136.742035][ T5899] dw2102: i2c transfer failed.
[  136.755466][ T5925] dw2102: i2c probe for address 0x6a failed.
[  136.771599][ T5925] dw2102: probing for demodulator failed. Is the external power switched on?
[  136.790812][ T5925] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)'
[  136.805627][ T7164] CPU: 0 UID: 0 PID: 7164 Comm: syz.4.402 Not tainted syzkaller #0 PREEMPT(full) 
[  136.805654][ T7164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  136.805664][ T7164] Call Trace:
[  136.805670][ T7164]  <TASK>
[  136.805677][ T7164]  dump_stack_lvl+0x189/0x250
[  136.805704][ T7164]  ? __pfx____ratelimit+0x10/0x10
[  136.805724][ T7164]  ? __pfx_dump_stack_lvl+0x10/0x10
[  136.805744][ T7164]  ? __pfx__printk+0x10/0x10
[  136.805765][ T7164]  ? __pfx___might_resched+0x10/0x10
[  136.805783][ T7164]  ? lock_acquire+0x5f/0x360
[  136.805799][ T7164]  should_fail_ex+0x414/0x560
[  136.805822][ T7164]  should_failslab+0xa8/0x100
[  136.805839][ T7164]  kmem_cache_alloc_node_noprof+0x76/0x390
[  136.805862][ T7164]  ? __alloc_skb+0x112/0x2d0
[  136.805883][ T7164]  __alloc_skb+0x112/0x2d0
[  136.805904][ T7164]  alloc_skb_with_frags+0xca/0x890
[  136.805926][ T7164]  ? rcu_is_watching+0x15/0xb0
[  136.805943][ T7164]  ? lock_release+0x4b/0x3e0
[  136.805957][ T7164]  ? __might_fault+0xb0/0x130
[  136.805979][ T7164]  sock_alloc_send_pskb+0x857/0x990
[  136.806002][ T7164]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  136.806018][ T7164]  ? rcu_is_watching+0x15/0xb0
[  136.806035][ T7164]  ? lock_release+0x4b/0x3e0
[  136.806049][ T7164]  ? lock_release+0x4b/0x3e0
[  136.806064][ T7164]  ? iov_iter_advance+0x8b/0x1c0
[  136.806080][ T7164]  tun_get_user+0xa43/0x3e20
[  136.806102][ T7164]  ? rcu_is_watching+0x15/0xb0
[  136.806118][ T7164]  ? lock_release+0x4b/0x3e0
[  136.806135][ T7164]  ? aa_file_perm+0x44d/0x1550
[  136.806164][ T7164]  ? __pfx_tun_get_user+0x10/0x10
[  136.806182][ T7164]  ? _parse_integer_limit+0x1ae/0x1f0
[  136.806205][ T7164]  ? kstrtoull+0x12f/0x1d0
[  136.806228][ T7164]  ? ref_tracker_alloc+0x318/0x460
[  136.806247][ T7164]  ? get_pid_task+0x20/0x1f0
[  136.806267][ T7164]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  136.806288][ T7164]  ? tun_get+0x1c/0x2f0
[  136.806304][ T7164]  ? tun_get+0x1c/0x2f0
[  136.806321][ T7164]  ? rcu_is_watching+0x15/0xb0
[  136.806337][ T7164]  ? tun_get+0x1c/0x2f0
[  136.806354][ T7164]  ? lock_release+0x4b/0x3e0
[  136.806369][ T7164]  ? common_file_perm+0x1b5/0x230
[  136.806388][ T7164]  ? tun_get+0x1c/0x2f0
[  136.806408][ T7164]  tun_chr_write_iter+0x113/0x200
[  136.806427][ T7164]  vfs_write+0x5c9/0xb30
[  136.806445][ T7164]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  136.806464][ T7164]  ? __pfx_vfs_write+0x10/0x10
[  136.806483][ T7164]  ? __fget_files+0x2a/0x420
[  136.806504][ T7164]  ksys_write+0x145/0x250
[  136.806521][ T7164]  ? __pfx_ksys_write+0x10/0x10
[  136.806538][ T7164]  ? rcu_is_watching+0x15/0xb0
[  136.806557][ T7164]  do_syscall_64+0xfa/0xfa0
[  136.806577][ T7164]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  136.806592][ T7164]  ? clear_bhb_loop+0x60/0xb0
[  136.806608][ T7164]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  136.806624][ T7164] RIP: 0033:0x7fee8cb8ebe9
[  136.806640][ T7164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  136.806658][ T7164] RSP: 002b:00007fee8daaa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  136.806676][ T7164] RAX: ffffffffffffffda RBX: 00007fee8cdb5fa0 RCX: 00007fee8cb8ebe9
[  136.806689][ T7164] RDX: 000000000000025d RSI: 0000200000003a00 RDI: 0000000000000003
[  136.806699][ T7164] RBP: 00007fee8daaa090 R08: 0000000000000000 R09: 0000000000000000
[  136.806713][ T7164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  136.806724][ T7164] R13: 00007fee8cdb6038 R14: 00007fee8cdb5fa0 R15: 00007ffdeaa073a8
[  136.806742][ T7164]  </TASK>
[  137.157492][    C0] vkms_vblank_simulate: vblank timer overrun
[  137.172588][  T981] dvb-usb: bulk message failed: -22 (1/0)
[  137.178375][  T981] dw2102: i2c transfer failed.
[  137.235728][ T5867] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  137.238326][ T5925] rc_core: IR keymap rc-tt-1500 not found
[  137.250321][ T5925] Registered IR keymap rc-empty
[  137.255883][ T5925] rc rc1: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc1
[  137.269135][ T5925] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc1/input44
[  137.282457][   T43] usb 2-1: USB disconnect, device number 38
[  137.282597][ T5925] dvb-usb: schedule remote query interval to 250 msecs.
[  137.295649][ T5925] dw2102: su3000_power_ctrl: 0, initialized 1
[  137.301731][ T5925] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected.
[  137.313765][ T5925] usb 5-1: USB disconnect, device number 2
[  137.366518][ T5925] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected.
[  137.378142][   T43] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected.
[  137.394137][ T5867] usb 1-1: device descriptor read/64, error -71
[  137.512801][ T7174] FAULT_INJECTION: forcing a failure.
[  137.512801][ T7174] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  137.527362][ T5867] usb usb1-port1: attempt power cycle
[  137.534181][ T7174] CPU: 1 UID: 0 PID: 7174 Comm: syz.3.404 Not tainted syzkaller #0 PREEMPT(full) 
[  137.534205][ T7174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  137.534216][ T7174] Call Trace:
[  137.534222][ T7174]  <TASK>
[  137.534229][ T7174]  dump_stack_lvl+0x189/0x250
[  137.534255][ T7174]  ? __pfx____ratelimit+0x10/0x10
[  137.534276][ T7174]  ? __pfx_dump_stack_lvl+0x10/0x10
[  137.534298][ T7174]  ? __pfx__printk+0x10/0x10
[  137.534325][ T7174]  ? __might_fault+0xb0/0x130
[  137.534349][ T7174]  ? rcu_is_watching+0x15/0xb0
[  137.534368][ T7174]  should_fail_ex+0x414/0x560
[  137.534391][ T7174]  _copy_from_iter+0x1de/0x1790
[  137.534407][ T7174]  ? unwind_next_frame+0xa5/0x2390
[  137.534425][ T7174]  ? rcu_is_watching+0x15/0xb0
[  137.534443][ T7174]  ? unwind_next_frame+0xa5/0x2390
[  137.534461][ T7174]  ? unwind_next_frame+0xa5/0x2390
[  137.534481][ T7174]  ? __pfx__copy_from_iter+0x10/0x10
[  137.534498][ T7174]  ? rcu_is_watching+0x15/0xb0
[  137.534515][ T7174]  ? lock_release+0x4b/0x3e0
[  137.534530][ T7174]  ? lock_release+0x4b/0x3e0
[  137.534547][ T7174]  tun_get_user+0x488/0x3e20
[  137.534569][ T7174]  ? rcu_is_watching+0x15/0xb0
[  137.534586][ T7174]  ? lock_release+0x4b/0x3e0
[  137.534604][ T7174]  ? aa_file_perm+0x44d/0x1550
[  137.534624][ T7174]  ? __pfx_tun_get_user+0x10/0x10
[  137.534642][ T7174]  ? _parse_integer_limit+0x1ae/0x1f0
[  137.534667][ T7174]  ? kstrtoull+0x12f/0x1d0
[  137.534691][ T7174]  ? ref_tracker_alloc+0x318/0x460
[  137.534712][ T7174]  ? get_pid_task+0x20/0x1f0
[  137.534732][ T7174]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  137.534754][ T7174]  ? tun_get+0x1c/0x2f0
[  137.534772][ T7174]  ? tun_get+0x1c/0x2f0
[  137.534789][ T7174]  ? rcu_is_watching+0x15/0xb0
[  137.534806][ T7174]  ? tun_get+0x1c/0x2f0
[  137.534822][ T7174]  ? lock_release+0x4b/0x3e0
[  137.534836][ T7174]  ? common_file_perm+0x1b5/0x230
[  137.534856][ T7174]  ? tun_get+0x1c/0x2f0
[  137.534874][ T7174]  tun_chr_write_iter+0x113/0x200
[  137.534893][ T7174]  vfs_write+0x5c9/0xb30
[  137.534911][ T7174]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  137.534929][ T7174]  ? __pfx_vfs_write+0x10/0x10
[  137.534947][ T7174]  ? __fget_files+0x2a/0x420
[  137.534969][ T7174]  ksys_write+0x145/0x250
[  137.534986][ T7174]  ? __pfx_ksys_write+0x10/0x10
[  137.535003][ T7174]  ? rcu_is_watching+0x15/0xb0
[  137.535021][ T7174]  do_syscall_64+0xfa/0xfa0
[  137.535042][ T7174]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  137.535058][ T7174]  ? clear_bhb_loop+0x60/0xb0
[  137.535076][ T7174]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  137.535091][ T7174] RIP: 0033:0x7fc9afd8ebe9
[  137.535106][ T7174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  137.535121][ T7174] RSP: 002b:00007fc9adff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  137.535139][ T7174] RAX: ffffffffffffffda RBX: 00007fc9affb5fa0 RCX: 00007fc9afd8ebe9
[  137.535152][ T7174] RDX: 0000000000000fce RSI: 0000200000003a00 RDI: 0000000000000003
[  137.535163][ T7174] RBP: 00007fc9adff6090 R08: 0000000000000000 R09: 0000000000000000
[  137.535174][ T7174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  137.535184][ T7174] R13: 00007fc9affb6038 R14: 00007fc9affb5fa0 R15: 00007ffdd0a328b8
[  137.535203][ T7174]  </TASK>
[  137.854982][ T5866] Bluetooth: hci4: command tx timeout
[  138.187704][ T5867] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  138.215845][ T5867] usb 1-1: device descriptor read/8, error -71
[  138.405488][   T43] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  138.465815][ T5867] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  138.495818][ T5867] usb 1-1: device descriptor read/8, error -71
[  138.565497][   T43] usb 2-1: Using ep0 maxpacket: 8
[  138.571927][   T43] usb 2-1: unable to get BOS descriptor or descriptor too short
[  138.580860][   T43] usb 2-1: config 4 has an invalid interface number: 30 but max is 0
[  138.585585][ T5899] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  138.588994][   T43] usb 2-1: config 4 has no interface number 0
[  138.603695][   T43] usb 2-1: config 4 interface 30 has no altsetting 0
[  138.610650][ T5867] usb usb1-port1: unable to enumerate USB device
[  138.619328][   T43] usb 2-1: string descriptor 0 read error: -22
[  138.625619][   T43] usb 2-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88
[  138.634797][   T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.648041][   T43] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state.
[  138.655135][   T43] dw2102: su3000_power_ctrl: 1, initialized 0
[  138.661251][   T43] dvb-usb: bulk message failed: -22 (2/0)
[  138.667987][   T43] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  138.677708][   T43] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2))
[  138.685196][   T43] usb 2-1: media controller created
[  138.690538][   T43] dvb-usb: bulk message failed: -22 (6/0)
[  138.697293][   T43] dw2102: i2c transfer failed.
[  138.702067][   T43] dvb-usb: bulk message failed: -22 (6/0)
[  138.707807][   T43] dw2102: i2c transfer failed.
[  138.712590][   T43] dvb-usb: bulk message failed: -22 (6/0)
[  138.718323][   T43] dw2102: i2c transfer failed.
[  138.723099][   T43] dvb-usb: bulk message failed: -22 (6/0)
[  138.725465][ T5899] usb 4-1: device descriptor read/64, error -71
[  138.728835][   T43] dw2102: i2c transfer failed.
[  138.739851][   T43] dvb-usb: bulk message failed: -22 (6/0)
[  138.745649][   T43] dw2102: i2c transfer failed.
[  138.750420][   T43] dvb-usb: bulk message failed: -22 (6/0)
[  138.756185][   T43] dw2102: i2c transfer failed.
[  138.760944][   T43] dvb-usb: MAC address: 02:02:02:02:02:02
[  138.772427][   T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  138.786682][   T43] dvb-usb: bulk message failed: -22 (3/0)
[  138.792419][   T43] dw2102: command 0x0e transfer failed.
[  138.799187][   T43] dvb-usb: bulk message failed: -22 (3/0)
[  138.804915][   T43] dw2102: command 0x0e transfer failed.
[  138.975472][ T5899] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  139.115528][ T5899] usb 4-1: device descriptor read/64, error -71
[  139.116005][   T43] dvb-usb: bulk message failed: -22 (3/0)
[  139.129608][   T43] dw2102: command 0x0e transfer failed.
[  139.135171][   T43] dvb-usb: bulk message failed: -22 (3/0)
[  139.156452][   T43] dw2102: command 0x0e transfer failed.
[  139.162031][   T43] dvb-usb: bulk message failed: -22 (1/0)
[  139.169557][   T43] dw2102: command 0x51 transfer failed.
[  139.177579][   T43] dvb-usb: bulk message failed: -22 (5/0)
[  139.183309][   T43] dw2102: i2c probe for address 0x68 failed.
[  139.195721][   T43] dvb-usb: bulk message failed: -22 (5/0)
[  139.201468][   T43] dw2102: i2c probe for address 0x69 failed.
[  139.216547][   T43] dvb-usb: bulk message failed: -22 (5/0)
[  139.222508][   T43] dw2102: i2c probe for address 0x6a failed.
[  139.228578][ T5867] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  139.235617][ T5899] usb usb4-port1: attempt power cycle
[  139.236299][   T43] dw2102: probing for demodulator failed. Is the external power switched on?
[  139.252252][   T43] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)'
[  139.327265][   T43] rc_core: IR keymap rc-tt-1500 not found
[  139.333015][   T43] Registered IR keymap rc-empty
[  139.346968][   T43] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0
[  139.361897][   T43] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input45
[  139.391882][   T43] dvb-usb: schedule remote query interval to 250 msecs.
[  139.406758][ T5867] usb 5-1: Using ep0 maxpacket: 8
[  139.413886][   T43] dw2102: su3000_power_ctrl: 0, initialized 1
[  139.424045][   T43] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected.
[  139.437235][ T5867] usb 5-1: unable to get BOS descriptor or descriptor too short
[  139.449897][ T5867] usb 5-1: config 4 has an invalid interface number: 30 but max is 0
[  139.465045][ T5867] usb 5-1: config 4 has no interface number 0
[  139.471890][   T43] usb 2-1: USB disconnect, device number 39
[  139.477980][ T5867] usb 5-1: config 4 interface 30 has no altsetting 0
[  139.487429][ T5867] usb 5-1: string descriptor 0 read error: -22
[  139.495505][ T5867] usb 5-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88
[  139.504549][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.530859][ T5867] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state.
[  139.562019][ T5867] dw2102: su3000_power_ctrl: 1, initialized 0
[  139.568909][   T43] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected.
[  139.580216][ T5867] dvb-usb: bulk message failed: -22 (2/0)
[  139.595482][ T5899] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  139.596814][ T5867] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  139.636035][ T5867] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2))
[  139.638338][ T5899] usb 4-1: device descriptor read/8, error -71
[  139.643548][ T5867] usb 5-1: media controller created
[  139.643569][ T5867] dvb-usb: bulk message failed: -22 (6/0)
[  139.676266][ T5867] dw2102: i2c transfer failed.
[  139.681100][ T5867] dvb-usb: bulk message failed: -22 (6/0)
[  139.687592][ T5867] dw2102: i2c transfer failed.
[  139.692399][ T5867] dvb-usb: bulk message failed: -22 (6/0)
[  139.753273][ T5867] dw2102: i2c transfer failed.
[  139.758162][ T5867] dvb-usb: bulk message failed: -22 (6/0)
[  139.763896][ T5867] dw2102: i2c transfer failed.
[  139.775427][ T5867] dvb-usb: bulk message failed: -22 (6/0)
[  139.781179][ T5867] dw2102: i2c transfer failed.
[  139.809085][ T5867] dvb-usb: bulk message failed: -22 (6/0)
[  139.819182][ T5867] dw2102: i2c transfer failed.
[  139.829280][ T5867] dvb-usb: MAC address: 02:02:02:02:02:02
[  139.853372][ T5867] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  139.896065][ T5867] dvb-usb: bulk message failed: -22 (3/0)
[  139.901831][ T5867] dw2102: command 0x0e transfer failed.
[  139.934572][ T5867] dvb-usb: bulk message failed: -22 (3/0)
[  139.953380][ T7230] FAULT_INJECTION: forcing a failure.
[  139.953380][ T7230] name failslab, interval 1, probability 0, space 0, times 0
[  139.953468][ T5867] dw2102: command 0x0e transfer failed.
[  139.966251][ T7230] CPU: 0 UID: 0 PID: 7230 Comm: syz.0.417 Not tainted syzkaller #0 PREEMPT(full) 
[  139.966274][ T7230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  139.966284][ T7230] Call Trace:
[  139.966293][ T7230]  <TASK>
[  139.966301][ T7230]  dump_stack_lvl+0x189/0x250
[  139.966327][ T7230]  ? __pfx____ratelimit+0x10/0x10
[  139.966346][ T7230]  ? __pfx_dump_stack_lvl+0x10/0x10
[  139.966368][ T7230]  ? __pfx__printk+0x10/0x10
[  139.966389][ T7230]  ? __pfx___might_resched+0x10/0x10
[  139.966405][ T7230]  ? lock_acquire+0x5f/0x360
[  139.966421][ T7230]  should_fail_ex+0x414/0x560
[  139.966444][ T7230]  should_failslab+0xa8/0x100
[  139.966460][ T7230]  kmem_cache_alloc_node_noprof+0x76/0x390
[  139.966482][ T7230]  ? __alloc_skb+0x112/0x2d0
[  139.966502][ T7230]  __alloc_skb+0x112/0x2d0
[  139.966523][ T7230]  alloc_skb_with_frags+0xca/0x890
[  139.966544][ T7230]  ? rcu_is_watching+0x15/0xb0
[  139.966562][ T7230]  ? lock_release+0x4b/0x3e0
[  139.966576][ T7230]  ? __might_fault+0xb0/0x130
[  139.966597][ T7230]  sock_alloc_send_pskb+0x857/0x990
[  139.966619][ T7230]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  139.966635][ T7230]  ? rcu_is_watching+0x15/0xb0
[  139.966652][ T7230]  ? lock_release+0x4b/0x3e0
[  139.966665][ T7230]  ? lock_release+0x4b/0x3e0
[  139.966680][ T7230]  ? iov_iter_advance+0x8b/0x1c0
[  139.966696][ T7230]  tun_get_user+0xa43/0x3e20
[  139.966717][ T7230]  ? rcu_is_watching+0x15/0xb0
[  139.966733][ T7230]  ? lock_release+0x4b/0x3e0
[  139.966750][ T7230]  ? aa_file_perm+0x44d/0x1550
[  139.966770][ T7230]  ? __pfx_tun_get_user+0x10/0x10
[  139.966787][ T7230]  ? _parse_integer_limit+0x1ae/0x1f0
[  139.966811][ T7230]  ? kstrtoull+0x12f/0x1d0
[  139.966833][ T7230]  ? ref_tracker_alloc+0x318/0x460
[  139.966853][ T7230]  ? get_pid_task+0x20/0x1f0
[  139.966872][ T7230]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  139.966893][ T7230]  ? tun_get+0x1c/0x2f0
[  139.966910][ T7230]  ? tun_get+0x1c/0x2f0
[  139.966926][ T7230]  ? rcu_is_watching+0x15/0xb0
[  139.966942][ T7230]  ? tun_get+0x1c/0x2f0
[  139.966958][ T7230]  ? lock_release+0x4b/0x3e0
[  139.966972][ T7230]  ? common_file_perm+0x1b5/0x230
[  139.966990][ T7230]  ? tun_get+0x1c/0x2f0
[  139.967009][ T7230]  tun_chr_write_iter+0x113/0x200
[  139.967027][ T7230]  vfs_write+0x5c9/0xb30
[  139.967045][ T7230]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  139.967062][ T7230]  ? __pfx_vfs_write+0x10/0x10
[  139.967081][ T7230]  ? __fget_files+0x2a/0x420
[  139.967109][ T7230]  ksys_write+0x145/0x250
[  139.967125][ T7230]  ? __pfx_ksys_write+0x10/0x10
[  139.967142][ T7230]  ? rcu_is_watching+0x15/0xb0
[  139.967159][ T7230]  do_syscall_64+0xfa/0xfa0
[  139.967180][ T7230]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  139.967195][ T7230]  ? clear_bhb_loop+0x60/0xb0
[  139.967212][ T7230]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  139.967227][ T7230] RIP: 0033:0x7fa2ae98ebe9
[  139.967242][ T7230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  139.967255][ T7230] RSP: 002b:00007fa2af792038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  139.967273][ T7230] RAX: ffffffffffffffda RBX: 00007fa2aebb5fa0 RCX: 00007fa2ae98ebe9
[  139.967285][ T7230] RDX: 0000000000000fce RSI: 0000200000003a00 RDI: 0000000000000003
[  139.967295][ T7230] RBP: 00007fa2af792090 R08: 0000000000000000 R09: 0000000000000000
[  139.967305][ T7230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  139.967315][ T7230] R13: 00007fa2aebb6038 R14: 00007fa2aebb5fa0 R15: 00007ffdfd25d348
[  139.967333][ T7230]  </TASK>
[  139.982913][ T7231] netlink: 28 bytes leftover after parsing attributes in process `syz.1.416'.
[  140.104982][ T7233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  140.235502][ T5899] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  140.239867][ T7233] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  140.355236][ T5867] dvb-usb: bulk message failed: -22 (3/0)
[  140.364516][ T5867] dw2102: command 0x0e transfer failed.
[  140.366620][ T5899] usb 4-1: device descriptor read/8, error -71
[  140.370900][ T5867] dvb-usb: bulk message failed: -22 (3/0)
[  140.382219][ T5867] dw2102: command 0x0e transfer failed.
[  140.388835][ T5867] dvb-usb: bulk message failed: -22 (1/0)
[  140.394691][ T5867] dw2102: command 0x51 transfer failed.
[  140.401671][ T5867] dvb-usb: bulk message failed: -22 (5/0)
[  140.407805][ T5867] dw2102: i2c probe for address 0x68 failed.
[  140.413803][ T5867] dvb-usb: bulk message failed: -22 (5/0)
[  140.454992][ T5867] dw2102: i2c probe for address 0x69 failed.
[  140.464953][ T5867] dvb-usb: bulk message failed: -22 (5/0)
[  140.476990][ T5867] dw2102: i2c probe for address 0x6a failed.
[  140.483108][ T5867] dw2102: probing for demodulator failed. Is the external power switched on?
[  140.483121][ T7233] dvb-usb: bulk message failed: -22 (3/0)
[  140.492437][ T5867] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)'
[  140.498091][ T5899] usb usb4-port1: unable to enumerate USB device
[  140.518512][ T7233] dw2102: i2c transfer failed.
[  140.565571][ T5867] rc_core: IR keymap rc-tt-1500 not found
[  140.571385][ T5867] Registered IR keymap rc-empty
[  140.588189][ T5867] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0
[  140.607747][ T5867] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input46
[  140.629223][ T5867] dvb-usb: schedule remote query interval to 250 msecs.
[  140.644383][ T5867] dw2102: su3000_power_ctrl: 0, initialized 1
[  140.651022][ T5867] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected.
[  140.779584][   T30] audit: type=1326 audit(1756071297.363:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7242 comm="syz.1.421" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6e7c18ebe9 code=0x0
[  140.895428][ T5971] dvb-usb: bulk message failed: -22 (1/0)
[  140.901162][ T5971] dw2102: i2c transfer failed.
[  140.975423][ T5867] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  141.125487][ T5867] usb 1-1: Using ep0 maxpacket: 8
[  141.132793][ T5867] usb 1-1: unable to get BOS descriptor or descriptor too short
[  141.142007][ T5867] usb 1-1: config 4 has an invalid interface number: 30 but max is 0
[  141.150255][ T5867] usb 1-1: config 4 has no interface number 0
[  141.157104][ T5867] usb 1-1: config 4 interface 30 has no altsetting 0
[  141.165442][ T5971] dvb-usb: bulk message failed: -22 (1/0)
[  141.171652][ T5971] dw2102: i2c transfer failed.
[  141.177580][ T5867] usb 1-1: string descriptor 0 read error: -22
[  141.183829][ T5867] usb 1-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88
[  141.193003][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.207171][ T5867] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state.
[  141.214228][ T5867] dw2102: su3000_power_ctrl: 1, initialized 0
[  141.220335][ T5867] dvb-usb: bulk message failed: -22 (2/0)
[  141.227617][ T5867] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  141.237484][ T5867] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2))
[  141.245275][ T5867] usb 1-1: media controller created
[  141.250610][ T5867] dvb-usb: bulk message failed: -22 (6/0)
[  141.257630][ T5867] dw2102: i2c transfer failed.
[  141.262428][ T5867] dvb-usb: bulk message failed: -22 (6/0)
[  141.268178][ T5867] dw2102: i2c transfer failed.
[  141.273112][ T5867] dvb-usb: bulk message failed: -22 (6/0)
[  141.278853][ T5867] dw2102: i2c transfer failed.
[  141.283609][ T5867] dvb-usb: bulk message failed: -22 (6/0)
[  141.289353][ T5867] dw2102: i2c transfer failed.
[  141.294157][ T5867] dvb-usb: bulk message failed: -22 (6/0)
[  141.299923][ T5867] dw2102: i2c transfer failed.
[  141.304682][ T5867] dvb-usb: bulk message failed: -22 (6/0)
[  141.310449][ T5867] dw2102: i2c transfer failed.
[  141.315202][ T5867] dvb-usb: MAC address: 02:02:02:02:02:02
[  141.327393][ T5867] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  141.341700][ T5867] dvb-usb: bulk message failed: -22 (3/0)
[  141.347569][ T5867] dw2102: command 0x0e transfer failed.
[  141.353126][ T5867] dvb-usb: bulk message failed: -22 (3/0)
[  141.360779][ T5867] dw2102: command 0x0e transfer failed.
[  141.436043][ T5971] dvb-usb: bulk message failed: -22 (1/0)
[  141.441800][ T5971] dw2102: i2c transfer failed.
[  141.677755][ T5867] dvb-usb: bulk message failed: -22 (3/0)
[  141.687412][ T5867] dw2102: command 0x0e transfer failed.
[  141.695270][ T5867] dvb-usb: bulk message failed: -22 (3/0)
[  141.701692][ T5867] dw2102: command 0x0e transfer failed.
[  141.707445][ T5971] dvb-usb: bulk message failed: -22 (1/0)
[  141.713320][ T5867] dvb-usb: bulk message failed: -22 (1/0)
[  141.725169][ T5971] dw2102: i2c transfer failed.
[  141.730157][ T5867] dw2102: command 0x51 transfer failed.
[  141.735846][ T5867] dvb-usb: bulk message failed: -22 (5/0)
[  141.741587][ T5867] dw2102: i2c probe for address 0x68 failed.
[  141.747725][ T5867] dvb-usb: bulk message failed: -22 (5/0)
[  141.753444][ T5867] dw2102: i2c probe for address 0x69 failed.
[  141.759458][ T5867] dvb-usb: bulk message failed: -22 (5/0)
[  141.765174][ T5867] dw2102: i2c probe for address 0x6a failed.
[  141.765565][ T5899] usb 4-1: new full-speed USB device number 35 using dummy_hcd
[  141.773853][ T5867] dw2102: probing for demodulator failed. Is the external power switched on?
[  141.787981][ T5867] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)'
[  141.847157][ T5867] rc_core: IR keymap rc-tt-1500 not found
[  141.852913][ T5867] Registered IR keymap rc-empty
[  141.854822][ T7263] /dev/rnullb0: Can't open blockdev
[  141.859889][ T5867] rc rc1: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc1
[  141.873978][ T5867] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc1/input47
[  141.885471][ T5867] dvb-usb: schedule remote query interval to 250 msecs.
[  141.892431][ T5867] dw2102: su3000_power_ctrl: 0, initialized 1
[  141.898604][ T5867] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected.
[  141.915544][ T5867] usb 1-1: USB disconnect, device number 28
[  141.927894][ T5899] usb 4-1: config 0 has an invalid interface number: 35 but max is 0
[  141.942361][ T5899] usb 4-1: config 0 has no interface number 0
[  141.958556][ T5899] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 10
[  141.959965][ T5867] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected.
[  141.970695][ T5899] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[  141.994317][ T5962] usb 5-1: USB disconnect, device number 3
[  141.996976][ T5899] usb 4-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c
[  142.015851][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.027718][ T5899] usb 4-1: Product: syz
[  142.032831][ T5899] usb 4-1: Manufacturer: syz
[  142.038074][ T5899] usb 4-1: SerialNumber: syz
[  142.047197][ T5899] usb 4-1: config 0 descriptor??
[  142.052723][ T5962] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected.
[  142.054284][ T5899] cypress_m8 4-1:0.35: Nokia CA-42 V2 Adapter converter detected
[  142.258684][ T5899] usb 4-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0
[  142.271971][ T5899] usb 4-1: USB disconnect, device number 35
[  142.282511][ T5899] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0
[  142.293913][ T5899] cypress_m8 4-1:0.35: device disconnected
[  142.456128][ T5867] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  142.535436][ T5962] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  142.615662][ T5867] usb 1-1: Using ep0 maxpacket: 8
[  142.623039][ T5867] usb 1-1: unable to get BOS descriptor or descriptor too short
[  142.633999][ T5867] usb 1-1: config 2 has an invalid interface number: 109 but max is 0
[  142.643652][ T5867] usb 1-1: config 2 has no interface number 0
[  142.649787][ T5867] usb 1-1: config 2 interface 109 has no altsetting 0
[  142.659901][ T5867] usb 1-1: New USB device found, idVendor=0ace, idProduct=1611, bcdDevice=ec.1e
[  142.679720][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.690747][ T5867] usb 1-1: Product: ␁
[  142.694925][ T5867] usb 1-1: SerialNumber:  
[  142.699786][ T5962] usb 5-1: Using ep0 maxpacket: 8
[  142.711522][ T5962] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  142.725592][ T5962] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.735092][ T5962] usb 5-1: Product: syz
[  142.741296][ T5962] usb 5-1: Manufacturer: syz
[  142.746280][ T5962] usb 5-1: SerialNumber: syz
[  142.756234][ T5962] usb 5-1: config 0 descriptor??
[  142.906891][   T43] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  142.922138][ T7279] /dev/rnullb0: Can't open blockdev
[  142.934088][ T7273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  142.948359][ T7273] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  142.959680][ T7273] /dev/rnullb0: Can't open blockdev
[  142.966051][ T5962] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  142.988723][ T5867] usb 1-1: USB disconnect, device number 29
[  143.095614][   T43] usb 2-1: Using ep0 maxpacket: 8
[  143.102533][   T43] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  143.111339][   T43] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  143.121149][   T43] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  143.130957][   T43] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  143.141175][   T43] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  143.154668][   T43] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  143.164425][   T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.285507][ T3094] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  143.379707][   T43] usb 2-1: usb_control_msg returned -32
[  143.385327][   T43] usbtmc 2-1:16.0: can't read capabilities
[  143.436858][ T3094] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  143.447191][ T3094] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  143.457823][ T3094] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  143.466924][ T3094] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  143.475102][ T3094] usb 4-1: Manufacturer: syz
[  143.480906][ T3094] usb 4-1: config 0 descriptor??
[  143.517261][ T7284] devtmpfs: Cannot enable quota on remount
[  143.642215][ T7291] overlayfs: invalid origin (00000000d1d3e81a820eee8a94416592a5356da96db48150eae08457fbc30ece5e7e7e318cb2b4b22122226fe65c239a)
[  143.740249][ T7277] usbtmc 2-1:16.0: usb_bulk_msg returned -71
[  144.382996][ T7271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  144.397140][ T7271] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  144.414050][ T5962] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  144.432982][ T5962] usb 5-1: USB disconnect, device number 4
[  144.989745][ T7302] /dev/rnullb0: Can't open blockdev
[  145.088242][ T7304] FAULT_INJECTION: forcing a failure.
[  145.088242][ T7304] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  145.101575][ T7304] CPU: 1 UID: 0 PID: 7304 Comm: syz.4.441 Not tainted syzkaller #0 PREEMPT(full) 
[  145.101597][ T7304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  145.101608][ T7304] Call Trace:
[  145.101614][ T7304]  <TASK>
[  145.101620][ T7304]  dump_stack_lvl+0x189/0x250
[  145.101644][ T7304]  ? __pfx____ratelimit+0x10/0x10
[  145.101664][ T7304]  ? __pfx_dump_stack_lvl+0x10/0x10
[  145.101682][ T7304]  ? __pfx__printk+0x10/0x10
[  145.101708][ T7304]  ? lock_acquire+0x5f/0x360
[  145.101724][ T7304]  should_fail_ex+0x414/0x560
[  145.101746][ T7304]  prepare_alloc_pages+0x213/0x610
[  145.101766][ T7304]  __alloc_frozen_pages_noprof+0x123/0x370
[  145.101783][ T7304]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  145.101800][ T7304]  ? rcu_is_watching+0x15/0xb0
[  145.101818][ T7304]  ? policy_nodemask+0x27c/0x720
[  145.101841][ T7304]  alloc_pages_mpol+0x232/0x4a0
[  145.101857][ T7304]  alloc_pages_noprof+0xa9/0x190
[  145.101872][ T7304]  alloc_skb_with_frags+0x233/0x890
[  145.101893][ T7304]  sock_alloc_send_pskb+0x857/0x990
[  145.101906][ T7304]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  145.101915][ T7304]  ? rcu_is_watching+0x15/0xb0
[  145.101925][ T7304]  ? lock_release+0x4b/0x3e0
[  145.101933][ T7304]  ? lock_release+0x4b/0x3e0
[  145.101941][ T7304]  ? iov_iter_advance+0x8b/0x1c0
[  145.101951][ T7304]  tun_get_user+0xa43/0x3e20
[  145.101964][ T7304]  ? rcu_is_watching+0x15/0xb0
[  145.101973][ T7304]  ? lock_release+0x4b/0x3e0
[  145.101983][ T7304]  ? aa_file_perm+0x44d/0x1550
[  145.101995][ T7304]  ? __pfx_tun_get_user+0x10/0x10
[  145.102006][ T7304]  ? _parse_integer_limit+0x1ae/0x1f0
[  145.102021][ T7304]  ? kstrtoull+0x12f/0x1d0
[  145.102034][ T7304]  ? ref_tracker_alloc+0x318/0x460
[  145.102048][ T7304]  ? get_pid_task+0x20/0x1f0
[  145.102060][ T7304]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  145.102073][ T7304]  ? tun_get+0x1c/0x2f0
[  145.102083][ T7304]  ? tun_get+0x1c/0x2f0
[  145.102093][ T7304]  ? rcu_is_watching+0x15/0xb0
[  145.102102][ T7304]  ? tun_get+0x1c/0x2f0
[  145.102112][ T7304]  ? lock_release+0x4b/0x3e0
[  145.102120][ T7304]  ? common_file_perm+0x1b5/0x230
[  145.102131][ T7304]  ? tun_get+0x1c/0x2f0
[  145.102142][ T7304]  tun_chr_write_iter+0x113/0x200
[  145.102157][ T7304]  vfs_write+0x5c9/0xb30
[  145.102172][ T7304]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  145.102189][ T7304]  ? __pfx_vfs_write+0x10/0x10
[  145.102203][ T7304]  ? __fget_files+0x2a/0x420
[  145.102215][ T7304]  ksys_write+0x145/0x250
[  145.102224][ T7304]  ? __pfx_ksys_write+0x10/0x10
[  145.102234][ T7304]  ? rcu_is_watching+0x15/0xb0
[  145.102244][ T7304]  do_syscall_64+0xfa/0xfa0
[  145.102256][ T7304]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.102265][ T7304]  ? clear_bhb_loop+0x60/0xb0
[  145.102275][ T7304]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.102284][ T7304] RIP: 0033:0x7fee8cb8ebe9
[  145.102294][ T7304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  145.102302][ T7304] RSP: 002b:00007fee8daaa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  145.102313][ T7304] RAX: ffffffffffffffda RBX: 00007fee8cdb5fa0 RCX: 00007fee8cb8ebe9
[  145.102320][ T7304] RDX: 0000000000000fce RSI: 0000200000003a00 RDI: 0000000000000003
[  145.102327][ T7304] RBP: 00007fee8daaa090 R08: 0000000000000000 R09: 0000000000000000
[  145.102332][ T7304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  145.102338][ T7304] R13: 00007fee8cdb6038 R14: 00007fee8cdb5fa0 R15: 00007ffdeaa073a8
[  145.102347][ T7304]  </TASK>
[  145.589751][   T10] usb 2-1: USB disconnect, device number 40
[  145.715422][ T5899] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  145.751589][ T7318] FAULT_INJECTION: forcing a failure.
[  145.751589][ T7318] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  145.768375][ T7318] CPU: 0 UID: 0 PID: 7318 Comm: syz.1.446 Not tainted syzkaller #0 PREEMPT(full) 
[  145.768401][ T7318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  145.768411][ T7318] Call Trace:
[  145.768418][ T7318]  <TASK>
[  145.768425][ T7318]  dump_stack_lvl+0x189/0x250
[  145.768451][ T7318]  ? __pfx____ratelimit+0x10/0x10
[  145.768472][ T7318]  ? __pfx_dump_stack_lvl+0x10/0x10
[  145.768493][ T7318]  ? __pfx__printk+0x10/0x10
[  145.768516][ T7318]  ? rcu_is_watching+0x15/0xb0
[  145.768535][ T7318]  should_fail_ex+0x414/0x560
[  145.768557][ T7318]  _copy_to_user+0x31/0xb0
[  145.768575][ T7318]  simple_read_from_buffer+0xe1/0x170
[  145.768593][ T7318]  proc_fail_nth_read+0x1b3/0x220
[  145.768615][ T7318]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  145.768635][ T7318]  ? rw_verify_area+0x2a6/0x4d0
[  145.768651][ T7318]  ? tun_chr_write_iter+0x18a/0x200
[  145.768669][ T7318]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  145.768690][ T7318]  vfs_read+0x200/0xa30
[  145.768705][ T7318]  ? fdget_pos+0x247/0x320
[  145.768724][ T7318]  ? __pfx___mutex_lock+0x10/0x10
[  145.768745][ T7318]  ? __pfx_vfs_read+0x10/0x10
[  145.768761][ T7318]  ? __fget_files+0x3a0/0x420
[  145.768783][ T7318]  ? __fget_files+0x2a/0x420
[  145.768803][ T7318]  ksys_read+0x145/0x250
[  145.768818][ T7318]  ? __pfx_ksys_read+0x10/0x10
[  145.768834][ T7318]  ? rcu_is_watching+0x15/0xb0
[  145.768851][ T7318]  do_syscall_64+0xfa/0xfa0
[  145.768871][ T7318]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.768888][ T7318]  ? clear_bhb_loop+0x60/0xb0
[  145.768905][ T7318]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.768920][ T7318] RIP: 0033:0x7f6e7c18d5fc
[  145.768934][ T7318] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  145.768947][ T7318] RSP: 002b:00007f6e7d060030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  145.768964][ T7318] RAX: ffffffffffffffda RBX: 00007f6e7c3b5fa0 RCX: 00007f6e7c18d5fc
[  145.768976][ T7318] RDX: 000000000000000f RSI: 00007f6e7d0600a0 RDI: 0000000000000005
[  145.768987][ T7318] RBP: 00007f6e7d060090 R08: 0000000000000000 R09: 0000000000000000
[  145.768997][ T7318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  145.769007][ T7318] R13: 00007f6e7c3b6038 R14: 00007f6e7c3b5fa0 R15: 00007ffe9dc49268
[  145.769023][ T7318]  </TASK>
[  146.003185][    C0] vkms_vblank_simulate: vblank timer overrun
[  146.054511][ T3094] usb 4-1: USB disconnect, device number 36
[  146.087283][ T5899] usb 1-1: Using ep0 maxpacket: 8
[  146.121636][ T5899] usb 1-1: unable to get BOS descriptor or descriptor too short
[  146.131189][ T5899] usb 1-1: config 4 has an invalid interface number: 30 but max is 0
[  146.141946][ T5899] usb 1-1: config 4 has no interface number 0
[  146.148807][ T5899] usb 1-1: config 4 interface 30 has no altsetting 0
[  146.157913][ T7329] /dev/rnullb0: Can't open blockdev
[  146.168177][ T5899] usb 1-1: string descriptor 0 read error: -22
[  146.175196][ T5899] usb 1-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88
[  146.184373][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.196719][ T5899] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state.
[  146.203823][ T5899] dw2102: su3000_power_ctrl: 1, initialized 0
[  146.210346][ T5899] dvb-usb: bulk message failed: -22 (2/0)
[  146.218036][ T5899] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  146.227968][ T5899] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2))
[  146.235530][ T5899] usb 1-1: media controller created
[  146.240742][ T5899] dvb-usb: bulk message failed: -22 (6/0)
[  146.246704][ T5899] dw2102: i2c transfer failed.
[  146.251499][ T5899] dvb-usb: bulk message failed: -22 (6/0)
[  146.257277][ T5899] dw2102: i2c transfer failed.
[  146.262046][ T5899] dvb-usb: bulk message failed: -22 (6/0)
[  146.267819][ T5899] dw2102: i2c transfer failed.
[  146.273625][ T5899] dvb-usb: bulk message failed: -22 (6/0)
[  146.279431][ T5899] dw2102: i2c transfer failed.
[  146.284200][ T5899] dvb-usb: bulk message failed: -22 (6/0)
[  146.289989][ T5899] dw2102: i2c transfer failed.
[  146.294767][ T5899] dvb-usb: bulk message failed: -22 (6/0)
[  146.300566][ T5899] dw2102: i2c transfer failed.
[  146.305498][ T5899] dvb-usb: MAC address: 02:02:02:02:02:02
[  146.327077][ T5899] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  146.352781][ T5899] dvb-usb: bulk message failed: -22 (3/0)
[  146.358588][ T5899] dw2102: command 0x0e transfer failed.
[  146.381870][ T5899] dvb-usb: bulk message failed: -22 (3/0)
[  146.388518][ T5899] dw2102: command 0x0e transfer failed.
[  146.400814][ T7335] [U] �
[  146.406452][ T7335] sp0: Synchronizing with TNC
[  146.490501][ T7338] FAULT_INJECTION: forcing a failure.
[  146.490501][ T7338] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  146.504953][ T7338] CPU: 1 UID: 0 PID: 7338 Comm: syz.4.453 Not tainted syzkaller #0 PREEMPT(full) 
[  146.504977][ T7338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  146.504988][ T7338] Call Trace:
[  146.504995][ T7338]  <TASK>
[  146.505002][ T7338]  dump_stack_lvl+0x189/0x250
[  146.505029][ T7338]  ? __pfx____ratelimit+0x10/0x10
[  146.505049][ T7338]  ? __pfx_dump_stack_lvl+0x10/0x10
[  146.505070][ T7338]  ? __pfx__printk+0x10/0x10
[  146.505089][ T7338]  ? __might_fault+0xb0/0x130
[  146.505114][ T7338]  ? rcu_is_watching+0x15/0xb0
[  146.505133][ T7338]  should_fail_ex+0x414/0x560
[  146.505156][ T7338]  _copy_from_iter+0x1de/0x1790
[  146.505172][ T7338]  ? skb_set_owner_w+0x25b/0x3a0
[  146.505196][ T7338]  ? sock_alloc_send_pskb+0x875/0x990
[  146.505213][ T7338]  ? __pfx__copy_from_iter+0x10/0x10
[  146.505231][ T7338]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  146.505249][ T7338]  skb_copy_datagram_from_iter+0xf5/0x720
[  146.505267][ T7338]  ? lock_release+0x4b/0x3e0
[  146.505283][ T7338]  ? skb_put+0x11b/0x210
[  146.505303][ T7338]  tun_get_user+0x1691/0x3e20
[  146.505325][ T7338]  ? rcu_is_watching+0x15/0xb0
[  146.505346][ T7338]  ? lock_release+0x4b/0x3e0
[  146.505360][ T7338]  ? aa_file_perm+0x44d/0x1550
[  146.505379][ T7338]  ? __pfx_tun_get_user+0x10/0x10
[  146.505395][ T7338]  ? _parse_integer_limit+0x1ae/0x1f0
[  146.505418][ T7338]  ? kstrtoull+0x12f/0x1d0
[  146.505439][ T7338]  ? ref_tracker_alloc+0x318/0x460
[  146.505460][ T7338]  ? get_pid_task+0x20/0x1f0
[  146.505480][ T7338]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  146.505500][ T7338]  ? tun_get+0x1c/0x2f0
[  146.505515][ T7338]  ? tun_get+0x1c/0x2f0
[  146.505531][ T7338]  ? rcu_is_watching+0x15/0xb0
[  146.505546][ T7338]  ? tun_get+0x1c/0x2f0
[  146.505562][ T7338]  ? lock_release+0x4b/0x3e0
[  146.505576][ T7338]  ? common_file_perm+0x1b5/0x230
[  146.505603][ T7338]  ? tun_get+0x1c/0x2f0
[  146.505622][ T7338]  tun_chr_write_iter+0x113/0x200
[  146.505641][ T7338]  vfs_write+0x5c9/0xb30
[  146.505659][ T7338]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  146.505677][ T7338]  ? __pfx_vfs_write+0x10/0x10
[  146.505696][ T7338]  ? __fget_files+0x2a/0x420
[  146.505717][ T7338]  ksys_write+0x145/0x250
[  146.505734][ T7338]  ? __pfx_ksys_write+0x10/0x10
[  146.505751][ T7338]  ? rcu_is_watching+0x15/0xb0
[  146.505769][ T7338]  do_syscall_64+0xfa/0xfa0
[  146.505788][ T7338]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.505804][ T7338]  ? clear_bhb_loop+0x60/0xb0
[  146.505822][ T7338]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.505837][ T7338] RIP: 0033:0x7fee8cb8ebe9
[  146.505851][ T7338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  146.505866][ T7338] RSP: 002b:00007fee8daaa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  146.505884][ T7338] RAX: ffffffffffffffda RBX: 00007fee8cdb5fa0 RCX: 00007fee8cb8ebe9
[  146.505896][ T7338] RDX: 0000000000000fce RSI: 0000200000003a00 RDI: 0000000000000003
[  146.505907][ T7338] RBP: 00007fee8daaa090 R08: 0000000000000000 R09: 0000000000000000
[  146.505917][ T7338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  146.505927][ T7338] R13: 00007fee8cdb6038 R14: 00007fee8cdb5fa0 R15: 00007ffdeaa073a8
[  146.505945][ T7338]  </TASK>
[  146.605440][ T5925] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  146.770129][    C0] vkms_vblank_simulate: vblank timer overrun
[  146.838209][ T5899] dvb-usb: bulk message failed: -22 (3/0)
[  146.843970][ T5899] dw2102: command 0x0e transfer failed.
[  146.849601][ T5899] dvb-usb: bulk message failed: -22 (3/0)
[  146.855396][ T5899] dw2102: command 0x0e transfer failed.
[  146.860948][ T5899] dvb-usb: bulk message failed: -22 (1/0)
[  146.866890][ T5899] dw2102: command 0x51 transfer failed.
[  146.872513][ T5899] dvb-usb: bulk message failed: -22 (5/0)
[  146.878355][ T5899] dw2102: i2c probe for address 0x68 failed.
[  146.884336][ T5899] dvb-usb: bulk message failed: -22 (5/0)
[  146.891050][ T5899] dw2102: i2c probe for address 0x69 failed.
[  146.897118][ T5899] dvb-usb: bulk message failed: -22 (5/0)
[  146.902856][ T5899] dw2102: i2c probe for address 0x6a failed.
[  146.908912][ T5899] dw2102: probing for demodulator failed. Is the external power switched on?
[  146.917714][ T5899] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)'
[  146.925457][ T7306] dvb-usb: bulk message failed: -22 (4/0)
[  146.931196][ T7306] dw2102: i2c transfer failed.
[  146.996569][ T5899] rc_core: IR keymap rc-tt-1500 not found
[  147.002347][ T5899] Registered IR keymap rc-empty
[  147.008973][ T5899] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0
[  147.020378][ T5899] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input48
[  147.032095][ T5899] dvb-usb: schedule remote query interval to 250 msecs.
[  147.039202][ T5899] dw2102: su3000_power_ctrl: 0, initialized 1
[  147.045400][ T5899] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected.
[  147.064459][ T5899] usb 1-1: USB disconnect, device number 30
[  147.085411][ T5925] usb 2-1: Using ep0 maxpacket: 8
[  147.093709][ T5925] usb 2-1: unable to get BOS descriptor or descriptor too short
[  147.102530][ T5925] usb 2-1: config 4 has an invalid interface number: 30 but max is 0
[  147.115514][ T5925] usb 2-1: config 4 has no interface number 0
[  147.121642][ T5925] usb 2-1: config 4 interface 30 has no altsetting 0
[  147.146430][ T5899] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected.
[  147.158422][ T5925] usb 2-1: string descriptor 0 read error: -22
[  147.164677][ T5925] usb 2-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.8c
[  147.183412][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.203122][ T5925] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state.
[  147.212248][ T5925] dw2102: su3000_power_ctrl: 1, initialized 0
[  147.220550][ T5925] dvb-usb: bulk message failed: -22 (2/0)
[  147.235443][ T5925] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  147.245300][ T5925] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2))
[  147.252677][ T7336] [U] �
[  147.252918][ T5925] usb 2-1: media controller created
[  147.255656][ T3094] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  147.260861][ T5925] dvb-usb: bulk message failed: -22 (6/0)
[  147.274104][ T5925] dw2102: i2c transfer failed.
[  147.279674][ T5925] dvb-usb: bulk message failed: -22 (6/0)
[  147.285478][ T5925] dw2102: i2c transfer failed.
[  147.290256][ T5925] dvb-usb: bulk message failed: -22 (6/0)
[  147.296821][ T5925] dw2102: i2c transfer failed.
[  147.301593][ T5925] dvb-usb: bulk message failed: -22 (6/0)
[  147.307536][ T5925] dw2102: i2c transfer failed.
[  147.312326][ T5925] dvb-usb: bulk message failed: -22 (6/0)
[  147.318098][ T5925] dw2102: i2c transfer failed.
[  147.322891][ T5925] dvb-usb: bulk message failed: -22 (6/0)
[  147.328697][ T5925] dw2102: i2c transfer failed.
[  147.333465][ T5925] dvb-usb: MAC address: 02:02:02:02:02:02
[  147.362050][ T5925] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  147.379418][ T5925] dvb-usb: bulk message failed: -22 (3/0)
[  147.385833][ T5925] dw2102: command 0x0e transfer failed.
[  147.391609][ T5925] dvb-usb: bulk message failed: -22 (3/0)
[  147.397500][ T5925] dw2102: command 0x0e transfer failed.
[  147.412216][ T7333] syzkaller1: entered promiscuous mode
[  147.418248][ T7333] syzkaller1: entered allmulticast mode
[  147.448403][ T3094] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  147.458737][ T3094] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  147.471222][ T3094] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253
[  147.488044][ T3094] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  147.509694][ T3094] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  147.533184][ T3094] usb 5-1: Manufacturer: syz
[  147.552373][ T3094] usb 5-1: config 0 descriptor??
[  147.706000][ T5925] dvb-usb: bulk message failed: -22 (3/0)
[  147.713821][ T5925] dw2102: command 0x0e transfer failed.
[  147.908233][ T5899] usb 1-1: new full-speed USB device number 31 using dummy_hcd
[  148.398644][ T5925] dvb-usb: bulk message failed: -22 (3/0)
[  148.557042][ T3094] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  148.685509][ T5925] dw2102: command 0x0e transfer failed.
[  148.691074][ T5925] dvb-usb: bulk message failed: -22 (1/0)
[  148.696864][ T5925] dw2102: command 0x51 transfer failed.
[  148.702436][ T5925] dvb-usb: bulk message failed: -22 (5/0)
[  148.708319][ T5925] dw2102: i2c probe for address 0x68 failed.
[  148.714317][ T5925] dvb-usb: bulk message failed: -22 (5/0)
[  148.728625][ T5925] dw2102: i2c probe for address 0x69 failed.
[  148.735099][ T5925] dvb-usb: bulk message failed: -22 (5/0)
[  148.807002][ T5925] dw2102: i2c probe for address 0x6a failed.
[  148.813223][ T5925] dw2102: probing for demodulator failed. Is the external power switched on?
[  148.825599][ T7333] dvb-usb: bulk message failed: -22 (3/0)
[  148.831338][ T7333] dw2102: i2c transfer failed.
[  148.885228][ T5925] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)'
[  148.919533][ T5899] usb 1-1: not running at top speed; connect to a high speed hub
[  148.968073][ T5899] usb 1-1: config 9 has an invalid interface number: 133 but max is 0
[  148.988662][ T5899] usb 1-1: config 9 has no interface number 0
[  148.994776][ T5899] usb 1-1: config 9 interface 133 has no altsetting 0
[  149.004002][ T5899] usb 1-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice=93.9b
[  149.013127][ T5925] rc_core: IR keymap rc-tt-1500 not found
[  149.018958][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.027052][ T5925] Registered IR keymap rc-empty
[  149.032596][ T5925] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0
[  149.042452][ T5899] usb 1-1: Product: syz
[  149.046700][ T5899] usb 1-1: Manufacturer: syz
[  149.051298][ T5899] usb 1-1: SerialNumber: syz
[  149.057034][ T5925] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input49
[  149.074429][ T5925] dvb-usb: schedule remote query interval to 250 msecs.
[  149.082127][ T5925] dw2102: su3000_power_ctrl: 0, initialized 1
[  149.104988][ T5925] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected.
[  149.118457][ T5925] usb 2-1: USB disconnect, device number 41
[  149.161173][ T5925] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected.
[  149.277908][ T7363] FAULT_INJECTION: forcing a failure.
[  149.277908][ T7363] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  149.291196][ T7363] CPU: 1 UID: 0 PID: 7363 Comm: syz.3.463 Not tainted syzkaller #0 PREEMPT(full) 
[  149.291220][ T7363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  149.291231][ T7363] Call Trace:
[  149.291237][ T7363]  <TASK>
[  149.291243][ T7363]  dump_stack_lvl+0x189/0x250
[  149.291267][ T7363]  ? __pfx____ratelimit+0x10/0x10
[  149.291285][ T7363]  ? __pfx_dump_stack_lvl+0x10/0x10
[  149.291303][ T7363]  ? __pfx__printk+0x10/0x10
[  149.291319][ T7363]  ? __might_fault+0xb0/0x130
[  149.291339][ T7363]  ? policy_nodemask+0x27c/0x720
[  149.291359][ T7363]  ? rcu_is_watching+0x15/0xb0
[  149.291374][ T7363]  should_fail_ex+0x414/0x560
[  149.291392][ T7363]  _copy_from_iter+0x1de/0x1790
[  149.291404][ T7363]  ? __might_fault+0xb0/0x130
[  149.291420][ T7363]  ? __might_fault+0xcc/0x130
[  149.291437][ T7363]  ? _copy_from_iter+0x24f/0x1790
[  149.291450][ T7363]  ? __pfx__copy_from_iter+0x10/0x10
[  149.291462][ T7363]  ? sock_alloc_send_pskb+0x875/0x990
[  149.291480][ T7363]  ? __pfx__copy_from_iter+0x10/0x10
[  149.291500][ T7363]  ? page_copy_sane+0x4e/0x280
[  149.291513][ T7363]  copy_page_from_iter+0xdd/0x170
[  149.291526][ T7363]  skb_copy_datagram_from_iter+0x306/0x720
[  149.291543][ T7363]  tun_get_user+0x1691/0x3e20
[  149.291561][ T7363]  ? rcu_is_watching+0x15/0xb0
[  149.291574][ T7363]  ? lock_release+0x4b/0x3e0
[  149.291587][ T7363]  ? aa_file_perm+0x44d/0x1550
[  149.291605][ T7363]  ? __pfx_tun_get_user+0x10/0x10
[  149.291623][ T7363]  ? _parse_integer_limit+0x1ae/0x1f0
[  149.291642][ T7363]  ? kstrtoull+0x12f/0x1d0
[  149.291660][ T7363]  ? ref_tracker_alloc+0x318/0x460
[  149.291677][ T7363]  ? get_pid_task+0x20/0x1f0
[  149.291693][ T7363]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  149.291711][ T7363]  ? tun_get+0x1c/0x2f0
[  149.291724][ T7363]  ? tun_get+0x1c/0x2f0
[  149.291738][ T7363]  ? rcu_is_watching+0x15/0xb0
[  149.291754][ T7363]  ? tun_get+0x1c/0x2f0
[  149.291767][ T7363]  ? lock_release+0x4b/0x3e0
[  149.291778][ T7363]  ? common_file_perm+0x1b5/0x230
[  149.291793][ T7363]  ? tun_get+0x1c/0x2f0
[  149.291808][ T7363]  tun_chr_write_iter+0x113/0x200
[  149.291823][ T7363]  vfs_write+0x5c9/0xb30
[  149.291837][ T7363]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  149.291851][ T7363]  ? __pfx_vfs_write+0x10/0x10
[  149.291866][ T7363]  ? __fget_files+0x2a/0x420
[  149.291886][ T7363]  ksys_write+0x145/0x250
[  149.291899][ T7363]  ? __pfx_ksys_write+0x10/0x10
[  149.291912][ T7363]  ? rcu_is_watching+0x15/0xb0
[  149.291926][ T7363]  do_syscall_64+0xfa/0xfa0
[  149.291942][ T7363]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.291954][ T7363]  ? clear_bhb_loop+0x60/0xb0
[  149.291968][ T7363]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.291980][ T7363] RIP: 0033:0x7fc9afd8ebe9
[  149.291991][ T7363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  149.292002][ T7363] RSP: 002b:00007fc9adff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  149.292020][ T7363] RAX: ffffffffffffffda RBX: 00007fc9affb5fa0 RCX: 00007fc9afd8ebe9
[  149.292035][ T7363] RDX: 0000000000000fce RSI: 0000200000003a00 RDI: 0000000000000003
[  149.292044][ T7363] RBP: 00007fc9adff6090 R08: 0000000000000000 R09: 0000000000000000
[  149.292052][ T7363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  149.292060][ T7363] R13: 00007fc9affb6038 R14: 00007fc9affb5fa0 R15: 00007ffdd0a328b8
[  149.292074][ T7363]  </TASK>
[  149.301484][ T7345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  149.639049][ T7345] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  149.663160][ T5899] pegasus 1-1:9.133: probe with driver pegasus failed with error -71
[  149.678518][ T5899] usb 1-1: USB disconnect, device number 31
[  149.986372][   T10] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  150.135419][   T10] usb 2-1: Using ep0 maxpacket: 8
[  150.141968][   T10] usb 2-1: unable to get BOS descriptor or descriptor too short
[  150.150527][   T10] usb 2-1: config 4 has an invalid interface number: 30 but max is 0
[  150.158675][   T10] usb 2-1: config 4 has no interface number 0
[  150.165259][   T10] usb 2-1: config 4 interface 30 has no altsetting 0
[  150.174173][   T10] usb 2-1: string descriptor 0 read error: -22
[  150.180526][   T10] usb 2-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88
[  150.189656][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.205233][   T10] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state.
[  150.212369][   T10] dw2102: su3000_power_ctrl: 1, initialized 0
[  150.218517][   T10] dvb-usb: bulk message failed: -22 (2/0)
[  150.226130][   T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  150.238135][   T10] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2))
[  150.245786][   T10] usb 2-1: media controller created
[  150.251646][   T10] dvb-usb: bulk message failed: -22 (6/0)
[  150.257670][   T10] dw2102: i2c transfer failed.
[  150.262689][   T10] dvb-usb: bulk message failed: -22 (6/0)
[  150.285775][   T10] dw2102: i2c transfer failed.
[  150.291578][   T10] dvb-usb: bulk message failed: -22 (6/0)
[  150.301403][   T10] dw2102: i2c transfer failed.
[  150.310222][   T10] dvb-usb: bulk message failed: -22 (6/0)
[  150.318312][   T10] dw2102: i2c transfer failed.
[  150.323325][   T10] dvb-usb: bulk message failed: -22 (6/0)
[  150.330569][   T10] dw2102: i2c transfer failed.
[  150.336738][   T10] dvb-usb: bulk message failed: -22 (6/0)
[  150.342521][   T10] dw2102: i2c transfer failed.
[  150.348678][   T10] dvb-usb: MAC address: 02:02:02:02:02:02
[  150.374380][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  150.393232][   T10] dvb-usb: bulk message failed: -22 (3/0)
[  150.399726][   T10] dw2102: command 0x0e transfer failed.
[  150.412398][   T10] dvb-usb: bulk message failed: -22 (3/0)
[  150.419040][   T10] dw2102: command 0x0e transfer failed.
[  150.461311][ T7388] fuse: Bad value for 'group_id'
[  150.467339][ T7388] fuse: Bad value for 'group_id'
[  150.735406][   T10] dvb-usb: bulk message failed: -22 (3/0)
[  150.744577][   T10] dw2102: command 0x0e transfer failed.
[  150.755309][   T10] dvb-usb: bulk message failed: -22 (3/0)
[  150.768164][   T10] dw2102: command 0x0e transfer failed.
[  150.774213][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  150.783832][   T10] dw2102: command 0x51 transfer failed.
[  150.790070][   T10] dvb-usb: bulk message failed: -22 (5/0)
[  150.797861][ T7401] FAULT_INJECTION: forcing a failure.
[  150.797861][ T7401] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  150.811580][   T10] dw2102: i2c probe for address 0x68 failed.
[  150.818012][   T10] dvb-usb: bulk message failed: -22 (5/0)
[  150.823935][   T10] dw2102: i2c probe for address 0x69 failed.
[  150.830324][ T7401] CPU: 0 UID: 0 PID: 7401 Comm: syz.3.474 Not tainted syzkaller #0 PREEMPT(full) 
[  150.830346][ T7401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  150.830356][ T7401] Call Trace:
[  150.830362][ T7401]  <TASK>
[  150.830369][ T7401]  dump_stack_lvl+0x189/0x250
[  150.830395][ T7401]  ? __pfx____ratelimit+0x10/0x10
[  150.830414][ T7401]  ? __pfx_dump_stack_lvl+0x10/0x10
[  150.830477][ T7401]  ? __pfx__printk+0x10/0x10
[  150.830499][ T7401]  ? rcu_is_watching+0x15/0xb0
[  150.830518][ T7401]  should_fail_ex+0x414/0x560
[  150.830541][ T7401]  _copy_to_user+0x31/0xb0
[  150.830559][ T7401]  simple_read_from_buffer+0xe1/0x170
[  150.830578][ T7401]  proc_fail_nth_read+0x1b3/0x220
[  150.830600][ T7401]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  150.830621][ T7401]  ? rw_verify_area+0x2a6/0x4d0
[  150.830636][ T7401]  ? tun_chr_write_iter+0x18a/0x200
[  150.830654][ T7401]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  150.830676][ T7401]  vfs_read+0x200/0xa30
[  150.830690][ T7401]  ? fdget_pos+0x247/0x320
[  150.830710][ T7401]  ? __pfx___mutex_lock+0x10/0x10
[  150.830731][ T7401]  ? __pfx_vfs_read+0x10/0x10
[  150.830748][ T7401]  ? __fget_files+0x3a0/0x420
[  150.830766][ T7401]  ? __fget_files+0x2a/0x420
[  150.830786][ T7401]  ksys_read+0x145/0x250
[  150.830802][ T7401]  ? __pfx_ksys_read+0x10/0x10
[  150.830819][ T7401]  ? rcu_is_watching+0x15/0xb0
[  150.830836][ T7401]  do_syscall_64+0xfa/0xfa0
[  150.830857][ T7401]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.830873][ T7401]  ? clear_bhb_loop+0x60/0xb0
[  150.830890][ T7401]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.830905][ T7401] RIP: 0033:0x7fc9afd8d5fc
[  150.830921][ T7401] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  150.830935][ T7401] RSP: 002b:00007fc9adff6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  150.830953][ T7401] RAX: ffffffffffffffda RBX: 00007fc9affb5fa0 RCX: 00007fc9afd8d5fc
[  150.830964][ T7401] RDX: 000000000000000f RSI: 00007fc9adff60a0 RDI: 0000000000000005
[  150.830975][ T7401] RBP: 00007fc9adff6090 R08: 0000000000000000 R09: 0000000000000000
[  150.830985][ T7401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  150.830995][ T7401] R13: 00007fc9affb6038 R14: 00007fc9affb5fa0 R15: 00007ffdd0a328b8
[  150.831014][ T7401]  </TASK>
[  150.831456][   T10] dvb-usb: bulk message failed: -22 (5/0)
[  150.854678][ T5962] usb 5-1: USB disconnect, device number 5
[  150.860435][   T10] dw2102: i2c probe for address 0x6a failed.
[  151.092772][ T7371] dvb-usb: bulk message failed: -22 (4/0)
[  151.098708][ T7371] dw2102: i2c transfer failed.
[  151.106604][   T10] dw2102: probing for demodulator failed. Is the external power switched on?
[  151.115556][   T10] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)'
[  151.188224][   T10] rc_core: IR keymap rc-tt-1500 not found
[  151.194442][   T10] Registered IR keymap rc-empty
[  151.209820][   T10] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0
[  151.227718][   T10] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input50
[  151.255642][   T10] dvb-usb: schedule remote query interval to 250 msecs.
[  151.262817][   T10] dw2102: su3000_power_ctrl: 0, initialized 1
[  151.273118][   T10] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected.
[  151.329311][ T7406] "syz.3.476" (7406) uses obsolete ecb(arc4) skcipher
[  151.362465][   T10] usb 2-1: USB disconnect, device number 42
[  151.426621][   T10] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected.
[  151.663501][ T7413] netlink: 'syz.0.477': attribute type 1 has an invalid length.
[  151.698179][ T7413] /dev/rnullb0: Can't open blockdev
[  152.281079][ T7441] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  152.288586][ T7441] /dev/rnullb0: Can't open blockdev
[  152.305453][   T10] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  152.335511][ T5962] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  152.345409][ T3094] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  152.457156][   T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  152.467520][   T10] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  152.478366][   T10] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253
[  152.492440][   T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  152.495442][ T5962] usb 2-1: Using ep0 maxpacket: 32
[  152.501566][   T10] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  152.508467][ T3094] usb 1-1: Using ep0 maxpacket: 32
[  152.515422][   T10] usb 4-1: Manufacturer: syz
[  152.523562][ T5962] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  152.530405][   T10] usb 4-1: config 0 descriptor??
[  152.536154][ T3094] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  152.546587][   T10] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  152.558946][ T3094] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.567838][ T5962] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  152.579532][ T5962] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  152.593279][ T3094] usb 1-1: config 0 descriptor??
[  152.598457][ T5962] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  152.607695][ T5962] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.617279][ T3094] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  152.629277][ T5962] usb 2-1: config 0 descriptor??
[  153.038292][ T3094] gspca_vc032x: reg_w err -71
[  153.043060][ T3094] gspca_vc032x: I2c Bus Busy Wait 00
[  153.056788][ T3094] gspca_vc032x: I2c Bus Busy Wait 00
[  153.062238][ T5962] usbhid 2-1:0.0: can't add hid device: -71
[  153.071398][ T3094] gspca_vc032x: I2c Bus Busy Wait 00
[  153.077104][ T5962] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  153.097522][ T3094] gspca_vc032x: I2c Bus Busy Wait 00
[  153.103079][ T5962] usb 2-1: USB disconnect, device number 43
[  153.110879][ T3094] gspca_vc032x: I2c Bus Busy Wait 00
[  153.118861][ T3094] gspca_vc032x: I2c Bus Busy Wait 00
[  153.124267][ T3094] gspca_vc032x: I2c Bus Busy Wait 00
[  153.130812][ T3094] gspca_vc032x: I2c Bus Busy Wait 00
[  153.139017][ T3094] gspca_vc032x: I2c Bus Busy Wait 00
[  153.144377][ T3094] gspca_vc032x: I2c Bus Busy Wait 00
[  153.151154][ T3094] gspca_vc032x: I2c Bus Busy Wait 00
[  153.157292][ T3094] gspca_vc032x: I2c Bus Busy Wait 00
[  153.162597][ T3094] gspca_vc032x: I2c Bus Busy Wait 00
[  153.170093][ T3094] gspca_vc032x: I2c Bus Busy Wait 00
[  153.175821][ T3094] gspca_vc032x: I2c Bus Busy Wait 00
[  153.181110][ T3094] gspca_vc032x: I2c Bus Busy Wait 00
[  153.187788][ T3094] gspca_vc032x: I2c Bus Busy Wait 00
[  153.193088][ T3094] gspca_vc032x: I2c Bus Busy Wait 00
[  153.199034][ T3094] gspca_vc032x: Unknown sensor...
[  153.204108][ T3094] vc032x 1-1:0.0: probe with driver vc032x failed with error -22
[  153.216748][ T3094] usb 1-1: USB disconnect, device number 32
[  153.295533][   T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  153.445406][   T10] usb 5-1: Using ep0 maxpacket: 8
[  153.452083][   T10] usb 5-1: unable to get BOS descriptor or descriptor too short
[  153.461225][   T10] usb 5-1: config 4 has an invalid interface number: 30 but max is 0
[  153.469430][   T10] usb 5-1: config 4 has no interface number 0
[  153.476665][   T10] usb 5-1: config 4 interface 30 has no altsetting 0
[  153.486623][   T10] usb 5-1: string descriptor 0 read error: -22
[  153.492901][   T10] usb 5-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88
[  153.501983][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.512552][   T10] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state.
[  153.519789][   T10] dw2102: su3000_power_ctrl: 1, initialized 0
[  153.525889][   T10] dvb-usb: bulk message failed: -22 (2/0)
[  153.532712][   T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  153.542938][   T10] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2))
[  153.550505][   T10] usb 5-1: media controller created
[  153.555784][   T10] dvb-usb: bulk message failed: -22 (6/0)
[  153.561519][   T10] dw2102: i2c transfer failed.
[  153.566333][   T10] dvb-usb: bulk message failed: -22 (6/0)
[  153.572056][   T10] dw2102: i2c transfer failed.
[  153.576892][   T10] dvb-usb: bulk message failed: -22 (6/0)
[  153.582947][   T10] dw2102: i2c transfer failed.
[  153.588283][   T10] dvb-usb: bulk message failed: -22 (6/0)
[  153.594010][   T10] dw2102: i2c transfer failed.
[  153.599939][   T10] dvb-usb: bulk message failed: -22 (6/0)
[  153.606808][   T10] dw2102: i2c transfer failed.
[  153.611586][   T10] dvb-usb: bulk message failed: -22 (6/0)
[  153.618160][   T10] dw2102: i2c transfer failed.
[  153.622928][   T10] dvb-usb: MAC address: 02:02:02:02:02:02
[  153.640326][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  153.660965][   T10] dvb-usb: bulk message failed: -22 (3/0)
[  153.667301][   T10] dw2102: command 0x0e transfer failed.
[  153.672861][   T10] dvb-usb: bulk message failed: -22 (3/0)
[  153.679495][   T10] dw2102: command 0x0e transfer failed.
[  153.777954][ T7466] overlayfs: conflicting options: userxattr,metacopy=on
[  153.985701][   T10] dvb-usb: bulk message failed: -22 (3/0)
[  153.991500][   T10] dw2102: command 0x0e transfer failed.
[  153.997213][   T10] dvb-usb: bulk message failed: -22 (3/0)
[  154.002932][   T10] dw2102: command 0x0e transfer failed.
[  154.008566][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  154.014291][   T10] dw2102: command 0x51 transfer failed.
[  154.019930][   T10] dvb-usb: bulk message failed: -22 (5/0)
[  154.025734][   T10] dw2102: i2c probe for address 0x68 failed.
[  154.031767][   T10] dvb-usb: bulk message failed: -22 (5/0)
[  154.037629][   T10] dw2102: i2c probe for address 0x69 failed.
[  154.039058][ T3094] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  154.043675][   T10] dvb-usb: bulk message failed: -22 (5/0)
[  154.058180][   T10] dw2102: i2c probe for address 0x6a failed.
[  154.064228][   T10] dw2102: probing for demodulator failed. Is the external power switched on?
[  154.064248][ T7446] dvb-usb: bulk message failed: -22 (4/0)
[  154.073417][   T10] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)'
[  154.080382][ T7446] dw2102: i2c transfer failed.
[  154.137981][   T10] rc_core: IR keymap rc-tt-1500 not found
[  154.143899][   T10] Registered IR keymap rc-empty
[  154.151501][   T10] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0
[  154.162448][   T10] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input51
[  154.174110][   T10] dvb-usb: schedule remote query interval to 250 msecs.
[  154.181567][   T10] dw2102: su3000_power_ctrl: 0, initialized 1
[  154.189153][   T10] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected.
[  154.202052][   T10] usb 5-1: USB disconnect, device number 6
[  154.220696][ T3094] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  154.225129][   T10] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected.
[  154.238249][ T3094] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  154.238272][ T3094] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  154.238304][ T3094] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  154.290091][ T3094] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  154.319270][ T3094] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  154.322083][ T7474] /dev/rnullb0: Can't open blockdev
[  154.328561][ T3094] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  154.328584][ T3094] usb 2-1: Product: syz
[  154.328597][ T3094] usb 2-1: Manufacturer: syz
[  154.345172][ T3094] cdc_wdm 2-1:1.0: skipping garbage
[  154.357715][ T3094] cdc_wdm 2-1:1.0: skipping garbage
[  154.369683][ T3094] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  154.375732][ T3094] cdc_wdm 2-1:1.0: Unknown control protocol
[  154.638660][ T7485] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  154.655144][ T7487] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  154.695479][ T3094] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  154.865721][ T3094] usb 1-1: Using ep0 maxpacket: 32
[  154.872986][ T3094] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  154.885157][ T3094] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  154.894952][ T3094] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  154.908209][ T3094] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  154.921754][ T3094] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.931511][ T3094] usb 1-1: config 0 descriptor??
[  155.084796][   T10] usb 4-1: USB disconnect, device number 37
[  155.159479][ T7509] /dev/rnullb0: Can't open blockdev
[  155.214532][ T7513] fuse: Bad value for 'group_id'
[  155.219729][ T7513] fuse: Bad value for 'group_id'
[  155.269844][ T7514] netlink: 116 bytes leftover after parsing attributes in process `syz.1.495'.
[  155.349558][ T3094] usbhid 1-1:0.0: can't add hid device: -71
[  155.355643][   T43] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  155.363211][ T3094] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  155.372888][ T3094] usb 1-1: USB disconnect, device number 33
[  155.515425][   T43] usb 5-1: Using ep0 maxpacket: 8
[  155.522148][   T43] usb 5-1: unable to get BOS descriptor or descriptor too short
[  155.530750][   T43] usb 5-1: config 4 has an invalid interface number: 30 but max is 0
[  155.538971][   T43] usb 5-1: config 4 has no interface number 0
[  155.545071][   T43] usb 5-1: config 4 interface 30 has no altsetting 0
[  155.554675][   T43] usb 5-1: string descriptor 0 read error: -22
[  155.561078][   T43] usb 5-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88
[  155.565513][   T10] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  155.570201][   T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.589703][   T43] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state.
[  155.597594][   T43] dw2102: su3000_power_ctrl: 1, initialized 0
[  155.603671][   T43] dvb-usb: bulk message failed: -22 (2/0)
[  155.610868][   T43] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  155.620503][   T43] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2))
[  155.628069][   T43] usb 5-1: media controller created
[  155.633295][   T43] dvb-usb: bulk message failed: -22 (6/0)
[  155.639124][   T43] dw2102: i2c transfer failed.
[  155.643888][   T43] dvb-usb: bulk message failed: -22 (6/0)
[  155.649669][   T43] dw2102: i2c transfer failed.
[  155.654443][   T43] dvb-usb: bulk message failed: -22 (6/0)
[  155.660195][   T43] dw2102: i2c transfer failed.
[  155.664966][   T43] dvb-usb: bulk message failed: -22 (6/0)
[  155.670797][   T43] dw2102: i2c transfer failed.
[  155.675624][   T43] dvb-usb: bulk message failed: -22 (6/0)
[  155.681330][   T43] dw2102: i2c transfer failed.
[  155.686128][   T43] dvb-usb: bulk message failed: -22 (6/0)
[  155.691841][   T43] dw2102: i2c transfer failed.
[  155.697418][   T43] dvb-usb: MAC address: 02:02:02:02:02:02
[  155.710331][   T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  155.724772][   T43] dvb-usb: bulk message failed: -22 (3/0)
[  155.730575][   T43] dw2102: command 0x0e transfer failed.
[  155.736182][   T43] dvb-usb: bulk message failed: -22 (3/0)
[  155.736802][   T10] usb 4-1: Using ep0 maxpacket: 16
[  155.741899][   T43] dw2102: command 0x0e transfer failed.
[  155.754648][   T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  155.762968][   T10] usb 4-1: config 0 has no interface number 0
[  155.770702][   T10] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  155.780135][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.788305][   T10] usb 4-1: Product: syz
[  155.792472][   T10] usb 4-1: Manufacturer: syz
[  155.797621][   T10] usb 4-1: SerialNumber: syz
[  155.803283][   T10] usb 4-1: config 0 descriptor??
[  155.810117][   T10] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  156.045431][   T43] dvb-usb: bulk message failed: -22 (3/0)
[  156.051221][   T43] dw2102: command 0x0e transfer failed.
[  156.057584][   T43] dvb-usb: bulk message failed: -22 (3/0)
[  156.063406][   T43] dw2102: command 0x0e transfer failed.
[  156.069520][   T43] dvb-usb: bulk message failed: -22 (1/0)
[  156.075256][   T43] dw2102: command 0x51 transfer failed.
[  156.081171][   T43] dvb-usb: bulk message failed: -22 (5/0)
[  156.087110][   T43] dw2102: i2c probe for address 0x68 failed.
[  156.093103][   T43] dvb-usb: bulk message failed: -22 (5/0)
[  156.098977][   T43] dw2102: i2c probe for address 0x69 failed.
[  156.106168][   T43] dvb-usb: bulk message failed: -22 (5/0)
[  156.111896][   T43] dw2102: i2c probe for address 0x6a failed.
[  156.118011][   T43] dw2102: probing for demodulator failed. Is the external power switched on?
[  156.118537][ T7507] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN PTI
[  156.126861][ T3094] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  156.138656][ T7507] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017]
[  156.138680][ T7507] CPU: 0 UID: 0 PID: 7507 Comm: syz.4.511 Not tainted syzkaller #0 PREEMPT(full) 
[  156.138698][ T7507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  156.138708][ T7507] RIP: 0010:su3000_i2c_transfer+0x1ad/0x1040
[  156.146377][   T43] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)'
[  156.154638][ T7507] Code: 4c 89 f8 48 c1 e8 03 49 bc 00 00 00 00 00 fc ff df 42 80 3c 20 00 74 08 4c 89 ff e8 0d 60 32 fa 49 8b 1f 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 5f 09 00 00 0f b6 1b 48 8b 44 24 38 42
[  156.206835][ T7507] RSP: 0018:ffffc90003c07a88 EFLAGS: 00010202
[  156.212891][ T7507] RAX: 0000000000000002 RBX: 0000000000000010 RCX: 0000000000000003
[  156.215476][   T43] rc_core: IR keymap rc-tt-1500 not found
[  156.220849][ T7507] RDX: ffffffff87f21855 RSI: ffffffff8f4ecdb0 RDI: 0000000000001900
[  156.227041][   T43] Registered IR keymap rc-empty
[  156.234499][ T7507] RBP: 0000000000000000 R08: ffff88802e26bc00 R09: 0000000000000002
[  156.241270][   T43] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0
[  156.247279][ T7507] R10: 0000000000001a00 R11: 0000000000000002 R12: dffffc0000000000
[  156.247294][ T7507] R13: 1ffff1100e2f0724 R14: 0000000000000001 R15: ffff888071783928
[  156.247305][ T7507] FS:  00007fee8daaa6c0(0000) GS:ffff8881257c4000(0000) knlGS:0000000000000000
[  156.247318][ T7507] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  156.247330][ T7507] CR2: 000000110c24fb0a CR3: 000000002491a000 CR4: 00000000003526f0
[  156.257517][   T43] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input52
[  156.264375][ T7507] Call Trace:
[  156.274407][   T43] dvb-usb: schedule remote query interval to 250 msecs.
[  156.281227][ T7507]  <TASK>
[  156.281237][ T7507]  ? i2cdev_ioctl+0x64b/0x7f0
[  156.281264][ T7507]  __i2c_transfer+0x871/0x2170
[  156.281287][ T7507]  ? __pfx___i2c_transfer+0x10/0x10
[  156.288599][ T3094] usb 1-1: device descriptor read/64, error -71
[  156.295821][ T7507]  ? rt_mutex_lock_nested+0x15e/0x1e0
[  156.295846][ T7507]  ? i2c_transfer+0x120/0x3a0
[  156.295865][ T7507]  i2c_transfer+0x25b/0x3a0
[  156.295884][ T7507]  ? lock_release+0x4b/0x3e0
[  156.305753][   T43] dw2102: su3000_power_ctrl: 0, initialized 1
[  156.308760][ T7507]  ? __pfx_i2c_transfer+0x10/0x10
[  156.308781][ T7507]  ? __might_fault+0xcc/0x130
[  156.308804][ T7507]  ? _copy_from_user+0x94/0xb0
[  156.308825][ T7507]  i2cdev_ioctl_rdwr+0x460/0x740
[  156.308848][ T7507]  i2cdev_ioctl+0x64b/0x7f0
[  156.308867][ T7507]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  156.308887][ T7507]  ? __fget_files+0x3a0/0x420
[  156.308907][ T7507]  ? __fget_files+0x2a/0x420
[  156.308926][ T7507]  ? bpf_lsm_file_ioctl+0x9/0x20
[  156.308949][ T7507]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  156.308968][ T7507]  __se_sys_ioctl+0xf9/0x170
[  156.308994][ T7507]  do_syscall_64+0xfa/0xfa0
[  156.309017][ T7507]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.309034][ T7507]  ? clear_bhb_loop+0x60/0xb0
[  156.309052][ T7507]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.309070][ T7507] RIP: 0033:0x7fee8cb8ebe9
[  156.309087][ T7507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  156.309103][ T7507] RSP: 002b:00007fee8daaa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  156.309124][ T7507] RAX: ffffffffffffffda RBX: 00007fee8cdb5fa0 RCX: 00007fee8cb8ebe9
[  156.309138][ T7507] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000004
[  156.309150][ T7507] RBP: 00007fee8cc11e19 R08: 0000000000000000 R09: 0000000000000000
[  156.309162][ T7507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  156.309173][ T7507] R13: 00007fee8cdb6038 R14: 00007fee8cdb5fa0 R15: 00007ffdeaa073a8
[  156.309194][ T7507]  </TASK>
[  156.309202][ T7507] Modules linked in:
[  156.309958][ T7507] ---[ end trace 0000000000000000 ]---
[  156.354591][   T43] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected.
[  156.365531][ T7507] RIP: 0010:su3000_i2c_transfer+0x1ad/0x1040
[  156.540836][ T7507] Code: 4c 89 f8 48 c1 e8 03 49 bc 00 00 00 00 00 fc ff df 42 80 3c 20 00 74 08 4c 89 ff e8 0d 60 32 fa 49 8b 1f 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 5f 09 00 00 0f b6 1b 48 8b 44 24 38 42
[  156.553139][ T7513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  156.560538][ T7507] RSP: 0018:ffffc90003c07a88 EFLAGS: 00010202
[  156.560564][ T7507] RAX: 0000000000000002 RBX: 0000000000000010 RCX: 0000000000000003
[  156.560576][ T7507] RDX: ffffffff87f21855 RSI: ffffffff8f4ecdb0 RDI: 0000000000001900
[  156.560588][ T7507] RBP: 0000000000000000 R08: ffff88802e26bc00 R09: 0000000000000002
[  156.560600][ T7507] R10: 0000000000001a00 R11: 0000000000000002 R12: dffffc0000000000
[  156.570209][ T3094] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  156.575034][ T7507] R13: 1ffff1100e2f0724 R14: 0000000000000001 R15: ffff888071783928
[  156.591395][ T7513] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  156.600307][ T7507] FS:  00007fee8daaa6c0(0000) GS:ffff8881257c4000(0000) knlGS:0000000000000000
[  156.640088][   T10] gspca_spca1528: reg_w err -71
[  156.644964][ T7507] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  156.651695][ T7507] CR2: 000000110c24fb0a CR3: 000000002491a000 CR4: 00000000003526f0
[  156.659885][   T10] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71
[  156.668184][ T7507] Kernel panic - not syncing: Fatal exception
[  156.674524][ T7507] Kernel Offset: disabled
[  156.678853][ T7507] Rebooting in 86400 seconds..