last executing test programs:

2m39.400085094s ago: executing program 3 (id=2260):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000680)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0)

2m39.265124054s ago: executing program 3 (id=2262):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212"], 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
keyctl$dh_compute(0x17, 0x0, &(0x7f00000001c0)=""/44, 0x2c, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0x9}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
getpgid(0x0)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0)
write$cgroup_int(r3, &(0x7f0000000040)=0x1ff8, 0x12)
read(r0, &(0x7f0000000340)=""/49, 0x31)
sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000200)={0x0, 0x27, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10)

2m34.905285277s ago: executing program 3 (id=2279):
ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc044560f, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
unshare(0x22020600)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = dup(r5)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000100)=@overlay={0x4, 0xc, 0x4, 0x20, 0x6, {}, {0x1, 0xc, 0xe, 0x3, 0x81, 0x57, "9e2bb432"}, 0x7, 0x3, {}, 0xffff, 0x0, r6})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)

2m32.065477641s ago: executing program 3 (id=2287):
openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_mount_image$fuse(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x8001, 0x0, 0x0, 0x0, 0x0)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
open_by_handle_at(r2, &(0x7f0000000140)=@ocfs2={0xc, 0x1, {0x7, 0x9, 0x800}}, 0x402000)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
mkdirat(r2, 0x0, 0x40)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
r5 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10)
sendmsg$tipc(r4, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030)
sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}, 0x4}}, 0x10, 0x0}, 0x240448e1)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)={0x24, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x8, 0x142, 0x0, 0x1, [@typed={0x4, 0x8}]}, @nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r3, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
socket$tipc(0x1e, 0x2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x28, 0x3e, 0x1, 0x80000, 0x0, {0x1}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@nested={0x4, 0x10}]}]}, @typed={0x4, 0x2, 0x0, 0x0, @binary}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
sendfile(r3, r3, 0x0, 0x40008)

2m28.965333926s ago: executing program 3 (id=2299):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, r1, 0x400, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x400c045)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310401080000030000001600000018000180140002006e657464657673696d3000000000000005000300010000000500040001000000050002"], 0x44}}, 0x0)

2m28.698172345s ago: executing program 3 (id=2302):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="54000000020603000000000000000000000000000d000300686173683a6e65740000000005000400000000000900020073797a31000000000c000780080008400000007005000500020300000500010006"], 0x54}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f00000001c0)={0x40, 0x15, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0})

2m13.520740877s ago: executing program 32 (id=2302):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="54000000020603000000000000000000000000000d000300686173683a6e65740000000005000400000000000900020073797a31000000000c000780080008400000007005000500020300000500010006"], 0x54}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f00000001c0)={0x40, 0x15, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0})

19.771503757s ago: executing program 0 (id=2815):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000240)={0x800, 0x8001, 0xbb9, 0x7, 0xb7})
syz_fuse_handle_req(r1, &(0x7f00000021c0)="1a1bf258bdc9f689c2c421aea0b5e6e277ab8227e0ecc7181d99cb039523ac4f21069c7411bdb3c58d6cbceb209c2a92afd63276b3ef9805157e7edcc4cb319c13e53019c1916ddf8c0f66d7e65afb76dfeb01add47faaab82536cdb72f859ac11fd497ee171914a1dfeed87f2e7e36bdc6536ac1841855e6a223dffade00f21b7a3fd86bf47b3e6733984b0718b9796d184d210f894807930cb1c2771ba66216076527e77605a1ccb5873bc955c4a74aaafa13a69dc98440921a569e22d05a4138cc7685f989c9c191e08571c34c0a449ce727260f6f332d8bc4a9defacfc144bd4dc7a83ef9ebc8cce944c31eac92b840a0f60a1014187fbcc9e860fb94e11c178984d6373677fce19249775aaf17fa80a128dfa786cce3f18d4b2a105b332b70e16333d648e3cd463023ce18436821f00d0fc29e26ef2dbb7e949707982a9d243447fcd8271cfc9678b8d097f7b6e0cf89a74b7257e308b2a58a2cf2b62a4ca7c52f0b1a0e04aa8c931b874662b5f3c49df15c214dbfca7fec7cdfbaa9b3a1264a3d467140cb0b19931daf7d7dc5971d4cccc1419415f9145f04a7d0dbf9637582cf2479bfc63f70f677e1b40545d381ef6f10e07eab1ab42514038491f833ab31c30f2c65eaeebdcb23a07553d527e9a89a5cb535c85e31b914e47390548a3aba0e30460483293b7dd537ed3738d31281b6ff5820361750839880548f8f0946a1e6c3e7248ecaa230b5ce03c5539d48cc0c255eec89282e86acd830b086e16abfe550187bd0d24e3ddb93cbd5b74d11b4ee6eb0e5527a15fb08e9d09eb690fe2bf365020a45b59081929bab81d90dae0fc53c1786faaa5480ea76c3f56958aff51583eadae41f5add8f857b60dd9504ca333dc79b9fde373ccc6db20b54d66d8bef1d376d9696964e9e76a263d4a1044da56c4ff1a222e2f76f6a62874f03fa1ed8e5d82f9ce6ff71cd7a579839e8139060072f2477eb664eada7675ed665a829dd7639f5107b098ca44281cb5fce9716035717824c9d129db601b1776f5f67c2049ed7f3ad0be67cc03dadecfd7cc76bb997885d979feafde4f0ee5f5d30383a792d0509ecfb9e8c4cfe54fbca29f36a48748d6b7510d4f8ded8ae6e168c59bf51f5bf18be2b18b3f860243af523c881e5e4bf4b995c96e81cd6638d2a749ae96d1d589cbe1f636ace178673570741e42613891a8a027f78f28e308cade08722e5fc629f73dc3cadf84515dbeff9f9d8c4cd0aa7cee59ca5f7afe0ae9c5e86680e0976bb58d60e5afad4b11a3d44d36d5e8d34169b52152ad5a60eccf0f8d54c4a7d936cfe389babd7f76219780e9d915a4b3dcb384f8c899ec02071e4e1ad329b7a1523cef48e81c5f40a2d429af3a985fec3f9cf9067766c6eec356c7608c45c74a7e28d6620303d237f870e8c9c34835622edfcb16aeb24a109974072ff969033574e8d189662efa9062422ef2f975b59aba0149110b29fd1905d3f755bc66964da685a22dc08a9443c7385f034f41c173b8776efe43da86bf078b53fddd6c22be93274d4ca7c2ffa0dac603cf641d8b54d9eb40ea30beb12a7057cada928b81d4807e52c432546f6438429e6bc835844d8fbc7a252e97628f5acbd4aa9df28dd38eb7a1d136849c375a7fbae0364d6befed9357ed10734db7367bb3b70d6d2508789cc2be3a7c67127e7caaf089a8861f48e0742c98622abecdb622803a325352621da831d1c1f1a210e16e9bbd0706305b4f1f6314aff880f6f03a016d2c6bd5c5a8055df05ed0ec2c0d670c3ae30ac764a05706d8f9a9fbace8b089b751a5b85bfd4ec3328657c39437f54035fadbf67df39e357440a56f7dc89db08fd1d854ecc2b1e2db4f5119cf01bd68b5f2d80e727056cc0920a6abbabd2fdb23992e40ae8935d5ca46b4648fdf58cab977e4a7980d25fd2af7d0e596aec98677f7eedcf2a8a429af00a401e712f7007e19d3588bd18ba2511fde5646a1083960e89176d8716e0565b59aa63fac085dc8fc3d828d2381105203ead50a01c869760823f5bacf898d9af2ebb4eda6efd1fa6ea5b7b019c3ba4d625f70dd5d841c1fe96eb01785a43e0c1cb4877dcc55bf0c8603fecf507772914bbffb8cd5c9d51b9e9e72e6e8b00512c2fa0a23ca3d71d75600ac3e7ac9580a4abfbdbc3c9bbcd1e2bc4096482912c45870ca932dd18a9e5c04826be0f6165c1e885fe1e252c96aed9b2e326c3b8651d3814843a778d748eebd17f1e5c92848a13e1570966249ae7d3c563748d259cfdc589e1ca287f22359fc5c207a9fe48814574dd9960e5234bcad598f6a968b2c24873227c4a0c3fb2c92a8dd3cb9b052ac19a9d5de68b46615677add2eff4b2ce562a68fa5a4577b225b49ed476fb1dfeb75a23193aae6caebbbd1aadb7028d352a4c49b0dd12d86025cfce0fbbaba4c4b1c5c0cb781825c7b42263603ddf50ebcc798b37cc84d52a437fd6c91abd2d66fac0e535177f3b19a5a91b57122adf62d831a7b46b5ff22878d8c053ed6c1785f7a3086d6824adffd5e7848013804d4725d3d3a662d2564580104210b74c174ee163d81b5ad0cbcf2af67a01312c7d74dc19840507e10d1711df67e52d04f354a5377387ea9e604b3c483c0f642b987198e6a23d7a39c2db845a1f68f4fab5379d80487cc2b3e43c911575a6e3dd26bdfd8ec85ced7444c0fb22a4c2e9f0accd29405fbc5752f95d4817e6b8e1f95ffa4c6e9aa92461da63e24d9ea34fa096cd3911c63be80c8f0a96309d2231d39f8944f04818a5e635eae9254decfd99b1fa3373a726594482474de4fa4842469baf04d036e04b7ff9b30d4cef8c1a52e15ed130d3abbb52935e41a106fda9710887015ebbb5baf3ff0ef1de7b4368274b1e1038d1b44af2c08467c475b8fcc70b3641467d775a87cb985b40f910cbc856634e33a9bbe834c0fd308198ac54a80de2876940ad774b992bff07eb81786a31397494d6d09259aae70e304df2e57e2123054764276ef803c046002fd8a4e4d0346d74aa6bf93747ee9f9dbe920a11303c3446b325856ca9b484c7c38508599f0f33fbacfd8984231e73ee59787b5f1dd4d1ad7ac739cbd1e53ec726434b767373db936800cdcf49be3955b22bd8dcae5c471aebfeab0a421ec0583847208a54e50e2299b90dc92200b0722be745b05c0a7d65eff13289075b71dbb8c5e357616d39923e1d6b81e1402abb2fcf80dd2147893a2b3de12314b902d0857de8c77fcfd12477f6542792babc1c7c3255f55c656a59e9bed71362f65425c43154919bccfc0201e59f805f8fbabeb136f02cb422ecc96b6630bd5f046d174aa369821ef8b37c9e681ca2654ec51a6f0dac57cd197b1c494230948213cfce943b5efd0428c60da4dc4c1ce7d9b7da804368e23c0608411b0d3e4f8cc80ee1be75ee216021a01c521df6413bc4aafec8f4a185de7b28c7f0a4de869b34fdebc3867d7eb3b30c553555659a071e2d6ac69a7ee3e81c5a7dc0e23a909ade0848bea7169e044bdc9f87aea29f36e334460f2c1447385263c67f873d428a2d33554515d7f27d754acd1247443bd64f635894aabf3341adcbd44b527f45f5d38dc96e6f7017aa6a595f66033a703daae9a002c7418840b4c0294d1ddc9a028be009f969cc07ef8fd911803303696ab0db4e7e1677f030a09d32f24d5589335ccc9a3adb99d17b8553c06516c8d41b90b56404f424721910576f22595c1bb1571d406dd724f775dd524cd084450128e9e8458780f26a33456f33850f6407a5432aa0fb5c0bcf557a39b1fcf3320f3cbd59979e031dec13e78ae0b9d9599f7d3adc9680315ee2cf53000f9892fe797da9753bdea8f4ae91b90a707c945d695a5d1e5d436b7f4f285580f4e9ba29828f3a6bc6dac8c856ca48829fb51d1b4c43bbaaf7db1775b3567c4e00b4090b50510e0b8ccdb064f5c75f22b5945c0316210516999bd01132a72d4133d51911c8f42f294ff5373c1e73e175454e111d8c9f0e0321e72351967d4ed759e24ae6fe9ab30e0be14f1a28026cf5c902c2cc0ab4dc9c9414517de95d7a42cb406ddf36d96e17ec69bba8cb1904bf8efe5639dd9d1e713ae1fdbb9431fa44cf658670fec67d638972b3cc715cd0373c0bb7a7b7f77d1fbc76ec229e272f577119148fb3976ff1dbe7eb78bff2324395183db09113a9d4a44b07953ce4c7642948d68bceee32453b943c992c0c3a7f5951d937809d3d6819773da5f8c757c6af5cc8a145430227ae90bc4dab4530a69c021809a65a9e1c1a3cb8ea28787a54e4adbb6e5710eeba63fc7c9d542e7f344eb5928fa6954ee9cf034b3f28b8c3a4681b09e61a345e7fdd241ac4095f01ab12260fb9bc970c67e7f71bd5405a5070fcf3f0a0446fc344024dfb6a89f8d11556d12f8d712bce084321c93197ad4d2a180046fe925a2835214ed394bf97294e8e2dcfa3d50a6737764bd9d353257264158238c6677876ce740233760c48f22381ed3210837aa6776cf34ebbbc0125e1c77f0f110278d2bb9dd2eedc533ec46249ce6eadc310540a3ca771bcf4355602b8abd101cc31c91de9986f79be5d3c368682a4f23d15fb82a302b9240f095e775feda6da506a7572ff9a7997d94e368b5baeb0c056886db312fa9c7ba3257ee2a39f34274663a435ba2d5aa4fe00036b1ebe075adb81ed754aa55b6f5ca73e8edce1a40c0d401a8ac87807e9c0d1b34420fc6863406742abb348a359ec5edff684dc4f9248e6f2c342a0bf629f88ece0361a0f3ce4000acb1f19b3beb10646e1d95fec8fee7f275ad60396cf08e6d002ce64136d2fa760b1d10160064bdcd86d13a74f98a7f423b72cbd87f847349ab7a226afb555657b98b5a753d9e35b204c05dcc430ab3678b268bc1d66ce18f6fee48a3b19c5ef0566dfff40c839cd719fb2a7ada58731284063e8504cd5f8e4d4f11ed5beaeeaa303ffd75403bba891fb9c1cf393b8aa89850556df3a70df309a8307855ec1cd8a31e9dbbd07bf08a5a7a4703e6457b67a499afe635c7dd579140ad15fd53ae0384870b1c29799b5643cb3f539c6391dc71919773e877b971687e0a61924993ab82401f62e00a128985290e9adadb6529ef14c6f965eaf1cf57c08acd5e5ecd7031d000b8ad7eb19edc19de178564dd2ca7eb79bb717dd303a85a76bef93252d68f65e1132bf77dc8b381dc84a3d917e174de5ebc569654d77ea832350fc2fa45c0bae3882c85297b597aba2c6e41528b97de6a101edc2c460772d355a355c794ebbe421fda5140b430eff3b88dd63ee1426b5a394006f531c0fbd825b72bffe689e9c4dcba362485d0a6739d54d2715a92706335d504cadcc23d8de2d870e6f11e67844128b3ba6b10809821897d794892804d8b81036836aef66131df174bbb0a6f11cbb5781c3e821bfdbe32c06f40e11e0e02b70e4c5ebfabf58e766ec24907a1bd2ab3d80ca1e66658780699f1eada7ce7b8e074ee7a3f40141a9f4362405a1ebe8eb39742dffa91b3cc41c49910cbd4a6aa088e7fe74fc8fa54c53e82b581514130b13bf1bbf07674b77ece33fb8217e65fb03912b10ac24863b9aa4e419da868935a1c835440cb6c2b599e32277aebc5dab22514f87ebb1badfbaf42fe3d8979a6fb2e409b649d709b538b483c424cf7af0f68be41e01631298a884d4afe52815b9dfdd37c03fb70d1af366d3a5954c244602e80d000f3106ef3ab2a2be5ece5a0d30bb6cf9d1f0ad0ed8bd87217a9285bad09432a5a582449bee76dd0b59175590e1edb8132d9703b8a5329d0c249f5159815076a8d930959a8206ba080de944e3e72976c18817b2fca01175b9a5c0fb1d1c1cc154917dfae64237295097837b734d0fe48f58644fa601aab06da0a05f35591efd31fa7a6b11ff0c81e98d6f1cf23a3e5c2b28e1c97b7561af44618c529a76aad5939fbd807011179b63ba179c66ac2c398da195c233e1ed33d5663a2cd7e4becdb15cb99cb8a270e64f87aa4735863c3f0125dd2a112d8dce9e9b745eb23cf31e8f5db5b69cda662d8a2235f22a68d3171c3bc9bd403a169c1285c0ed8f1f2d5522435307f93aa7c2ef43dddeeca89a9da4bba207fb04537c20950fd047c0052be427075ae26b420c4305ac902aceebd741a4d11b120fdc8b03c10cab560044f9c7c0afe2866893ab3b98725af4cbd9bd71000315d2b1a7bfd10e3136a53084e5aaaa563539fb0f335c21e9e37658c2cdc96e238682bde6c05155603b9bb9c07ad3f56b72312acd6b675ecd5bb6c71cf71ee1d66d8718f30a93ca6d9a9dd7002a46da81d92067aa0219604427901b30b94c09273dfa1f3fc543222595a3b593d02d9ef34fc66a05f2e5c14f15565c02be66cc997db902337da389f25ac01d84b13b90cb197df958d5d3b2be7f626148b225f6a92da3700a2e4ef8883105cb93e3c340b20557e52e3076a91f069f47547161e91618a1ec6d1f61aba188f14de82289566681b2ff243754b83f6f932bc9bb65bb20bc93a6ef162102709d86b6b2f9e8b4b779c396d47c702bd6b68b333805297eddbad5ed4c393087bcc86decc8e9ccb216f2509564661eaf683e7750ad8ec7ab57551de78220bdfea794c41a8b68735ba2bf74f98af22968bb011d7961d3986b09141773c7c99006b026ed073db5d05f7770ef9dc2fb188d0f5171b75dd1a25e8d7e7941dd53a7ea5b5143acdc954aba040d702148805cd6ada8d2a3aa232881dea941611a73a38610747e654944b8e127ab7cb5841cfb02a6f4850e69afea2d5a469eefa89d47501548f60d46ec41d387294ecb1b6de86694eeed21f511955912e5e735290396a0d5e6fb4e0505ce1b85debb12d2aca70be2d70f3d7cf948667077bf40bdc2d2c906f1ac864a59191b71cd86f9c479386704ab0659cddf25b27207a3ea32f702311965c5b8986a487c86d6f58da03b7d1e56a961088a6d957eba11f6a401850b2e7faffe7c7c81a5cf0639c06fe3c5365a8ed263aff1dd0d4466b4cf41848eb326140101526339a4485d8f8cab1ef3620251b4e2c6c4bec5e3755a22975da40949c3b48206ad087bf893b7797875297591cdc1aa167aa6036e3086bb66f199e5bd023952932e7e2883f41fc41edc71d260e1c73b8b5c68269f4ebeb47fc027e768ad34db9528b07a7bf68aae38f1c1fd8b87a56426c682f5790171487e806e900dfc389470f212b09898d95ffd380ec4d5c62c32fe0c7bc257993ed0ee9076369956a2e493fea88a038ffe710826818581487952f538605fc249253d91280361b0a80a669a4d912fe7b7c9ecc22aa9a01147a8ad1a39fa536e9528b352ad11d71e9757e7492b13b3fbf06d012aeb564d4a9e02dbc837d24cd68b99d0bf7614c7a6f8159926a9da81c4be3a5b93cdf4ba99ecaf3439578ca871f3337cc8e45f8b2ecacf91aba09160ecd5c5ff96fd6c4371783b052f9564b3c35db1af0ba923282d3691ec358eedf1a62da58046591b0290be2fa2c476c6e931a81b839be86c788297dede79412cb7ae003e4c877ad8a4f6ba2eec3966db1f07ea6fcc7b9ca9ac58ecdb4240cc113cf97681a280feed353db6deec3ea42a949f31ea4a7a60db94e55a34818c42c55cfa0315f4650b9b88dd8deba15e33d8d5d44a1eee19a57dd19ada3e86a9e18a43d6eb87e0490f006a069f853c5bbbe2ea32dd9f0f15d5c15a760832f6b2200815d93d404b860f441db9f5a6956432637a3473bfbdbeedbe2f543c4a89162150fdce9412939528be7bdc51fe7f66f5df8cf3cc62148e9ad035d3ffa267cca3a0092f48f8b12d04516dd1c83bc81c1936002afedc7a011c089ac31176b771a14b33b9fd1e1192c0df8db70faa31de029c22686aecf704d51c312691bf7215fe1b0f36c124c6a28f5a7eda377aa5a32817003d0832d59a3b742268ab3c358931e2c3b2bf63e841a5024b7a2a86e1bce6cf8f7d8031f8942ad4aa376709721abcccae98af060916fc434c86ac85cfede479549bb8c785b48ce2f426026980da1ebe44cc6ef857efdba2f969304e654d2cd6f3555823f670a79f1e664f34062e6e6c7b831c2d9c37149a9720924b31032df26faf081e2edbfc35ed746cda3a841cbc770a22e4b7d430734f67cd9f3fc186811336e3d1b3bba89a6f13e6b898bcf815c744bdb9243f283ae18d7caccc91c6f71e9e47fc4b5e3edb700539bf74e32fcd320087fff75567594338c5ed4eff53fe11cf53ddcd97a7988675dc98c0ebb88450e092b680b5099fa61dd5d5f8d9a2968cf26a3dfdaaf20a7949a9c926463498f3e60307c9c3067ee5aa93a06bcafdf5a621745e6f9164cd3f720c06bc609ad875ad23008851af3d65585719cde8d1a5fe46a43291e18374c5d4558aff111aac1754d9f54f009d21d9be54fe92e7a53db63f3c2b63e49987fbe634828f216e69d079e6fab4f55decccc5453b72ba48f2fbad6d56a80d12b97ff16523c773c88afc62c4fc833a6775037b500e387e5ce290c119110e6d42120e29964439114bca67fecec42ab2cc02910ea9131444afe25894e3cccef9f082b0f9b0735efc99dcc05bee83824aa24c9565abcf23b756a9f1b5b045bed51386ad7f735f03704041bcb5d1e762f6462364d8744c0fb6cb35781d42b7451b853f63a5c03d92ac89bbb5c5fb1b5af20c6fec417561e53f8c44b3f2b27d08d5cb913207215b220d1631afa34f95f13060f2844f1c4dd4bf0ccd40d09a1a055d6de0540717d92fcc03d0dcbf7b7ad5113bf25f0d5efb2e27282ad92f97af9f7a74cf9a74fa8a87c4ca78f065a3147d08f6d502167d264f75f0ede750abdf9eefd9f81433cec7463f76f78baaa3667d94405f302c872511abed1d26a52a5ab1001d6bab15d4d0e8572c91beffb97100ea004b8b4e67fb9165f84f2fb022c544c251da78e042bf3182b11b6564c27ff3e39497a35334f1768cef098bc86a1d6f7e808fc1024fe6434073dda424aa7829ef4862fe7b0ea3108a015388908785a30b80b5374b910d08f7dc827a35d676e67d5676bce0429cdf6993985a0dc2367989dd7c652600fa55150cce454bf2a9c2603f1eca07f4604a760b37f103810d2d98c8f76850e7dd398d435dadd3972adf0efd140e39dd10a2c25280d346fd6915d72bb53bf8c6754162c02c00dc275172a5f96a6a3e25565585ca709a64c402a5d1d636571e2d2996da5e669b1a5124313e1d3f507b5d9ca017d5754e3fed3557f119063395a776462c480471f09a795b5e31e729f01467c88d84d2d0eb2b2d559a720c31bfc0f72cffcfc8b906bad7ba92bf2e9fbe1bc5698a75bcb8d2cb6a7d069d14990876fc754f17db6c50c4ed47d6f3940b11108854a023049ecd45b8d56c01568c84bf37c46c5469524764a2487f1e21b3e05ea541a8ea25176df29560e6f007607d63a189793663e4389144811bd662e210e524a1abbf0e83f581a18ee5f6ec8e4d56f7e08ac7b7edc2faf40373cc3dcfec9ce793f4c2cb7ae08adc36644e50c9de676fbd3c7e1856ce62585b123717f6b15abbb4dda7841eb35930374e373b718b8947636bb76a23d9fab54316c45a75736bf1e893a79f47353466819f2e713668447d58b3f8b234b9aab25693f368138280d5ad6e472134099039e3d01dcc6c148aac3c92f6854873ff98264c7f7422aee6106d2dedb72954e649c7849ac3526e7551f4d08201576c49390ebd65dd31103d88a8626c3e7086ab85fd5542aea9dff1f8df7141e204584e4692e5b78c94f480509dbcab7429751ca9749a499701f69f902802b45f89d9ddf689058e935aa57eea3e7872c23c5e4600c301ab977522073875157963232e7dab90d748e5578cf07771e1ee50586558adff8429038950e9a5ef60774d01415771499cdb0b411c6b46c940c4c8262904dbd2289eac3e07abafc0b19becc0016d2ba0665d013365fbd3cd6e93a86da4e7185e1c0e3cab5d50958f3be15572ee5003757eb32cab0388f74fbb44dbf92212c08982493f60da07d2387d8a580d6b6b12dfed4a880a816ad021f70380ea0c86a579fc72c6924fd87ceabb8478c17a892787d4c3fb3ea00b2579da45c04134a1a13a27c39962e89673b4f076de2f1af006d42f4c6caece47ca76645412cd3f7593d104f1e94c65fbbd506d85548ad45cc74c23b8e9452dbbf92aadbf7d3245444afd161a17abd1a1e4294653df12f14b8dd7c695a6b885aa6bd8982a183078d75317922dd57a16c4b4d3d65b30a7cd17911d1da5ece3e8063b4ec9858eaaf3e6c86839a44b78a4cdf4b00fb4b900c76d85f7b89b70bd132c4d5b8fb01fe251b2ec019742db4e9a5dec5e8516816b5898ea9c2a49de194844e48a41f76c360dba8677b3df7d0b12733623cdd39b9a6b7a7de2c09a4fe0cb95bcafeff1a90b669b92511718bc1383c8ce4bd961376ad4c1c9bc4e46f849fe41c110925adbadf5e10ab6b6560a63832d63d9628c7a89fbf6f8353d8fd72bf3be33e1fc21aae7cf54e3d6f1fba871296a845d6ce99c86bcd7abe040891488227658db3e14aeb9712e145be6e71b57ca8fb0d9acbf16d97b8e530852e34b37d96a4a568584d465be7738e32a654f86aa7e89dd1a7a3e707ebf7a38df2ec2ca0a6752717f4a74b5b4768c2b66a4b7e373883e3e03191f6878fa6fcdf6dd0ef0f78efc6d32c1e10746c8309793500092c45ba162c4f2e34e600d43c35a8caa684f01dfce4ce57ee6b3f6986eb52dd32f02ee2455019ef8ad9d8f042342cf108966694c86f895f9b4af375c96716cd8478c6b667e4bdcc1ba78823c08ae285c121f57963cef71dedc41fd2fd5ca8af2559a83c0fd01e7cdb9fdf9668979e3011dec7a7d2f1e3e85acacbc808a8e6cf0b123c5f6a17c442f1652d224c1118a0629ec098c8b60fdc3a91d62519863171b5450af61146fa6d6293298a5f92fd225bb62fff98b2f7d004b7b2cc87adbfc5633ce5d1f3acd63a3ef65c55b682f87140dce64e4ee313d477df612908f2ab86b38b5b7b7c006d3d559128bb2afe45ff9e5af7ca2dbfd704b64bcc3e775e81e88d092dbb842c101e4e252d4aff72d3a08864d2024398ced335c15b324e5f12006b12cf3e5a6198d8d3bfe5513b614a201cb354e3cedea8049fc8465e74dc79e47c5476b195c3ba196b122253f1531f219fb73d9c6f63e6bcf136d6493d35b8976f66ffbb62b5360ed37752c894a2f98a44a9a8f1e12e46e2dcb7484612a58e6ee139112ae3af2b9d8e1171aaf4114ce4dbc56e075e6a3155f95a1f5334be9cd9d89f2ba5555ec9858a86ad71e9fef6b51199611c0036f3b54cc1a4d5f6c5f2a35b8e8c6d96c07a9f6fc427361f5fab31849e1f23f1b5c785b7344499c4d63c8084d7852c251d7cdc3f44591f2e1083f409dbf1e92f5d4a58d567736d7a996ffa7b46550565f9b0459c6f30fdc4a693346524add323dc79577a3598bc7ca6c6cc0b304c6fd4eb3cb5da21b9febf404b3ea01188f7554f09e4331a28a807a5adc858543637c4006f9f8c2e6e433ee2ac69f3f5443d84c2e2cb8ed8962bcc2653294de47153c9be911aa2f20b127ee5ff5f1b6084fba0300c247a13e0d9b4e680", 0x2000, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x0, 0x6a4, {0x0, 0x16}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x1}]})
close_range(r4, 0xffffffffffffffff, 0x600000000000000)

17.884584927s ago: executing program 0 (id=2819):
set_mempolicy(0x2, &(0x7f0000000140)=0x8001, 0x2)
prctl$PR_SET_IO_FLUSHER(0x39, 0x1)
io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f00000000c0)={"bcffffff", 0x0, 0x5, 0x1, 0x0, 0x0, '\x00', "00aa071e", "0300", "97ad3700", ["fdfbfdffffffffffffff0040", "84c9964f495c75ccffffffff", "0000ef000200", "3bf100000000000000c48400"]})

17.440830916s ago: executing program 0 (id=2823):
io_setup(0x5, &(0x7f0000000140)=<r0=>0x0)
io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x20, 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x7, 0x0, 0x2}])

17.158481407s ago: executing program 0 (id=2827):
getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, <r0=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000380)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x3, 0x0, 0x0, 0x0, 0x3, 0x9e, &(0x7f00000004c0)=""/158, 0x41100, 0x1, '\x00', r0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000005c0)={0x4000004, 0xf, 0x100, 0x4}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000049c0)=ANY=[@ANYBLOB="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"/2702], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})

16.111794299s ago: executing program 0 (id=2835):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, {[], @echo_request={0x80, 0x0, 0x0, 0x0, 0x9}}}}}}, 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$sock_linger(r2, 0x1, 0x3d, &(0x7f00000002c0)={0x1}, 0x8)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, r1)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x800)
r3 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000480)={'filter\x00', 0x4}, 0x68)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x5, 0xb68, 0xfffffffffffffeb9, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0xe}, 0x48)

15.949059449s ago: executing program 0 (id=2838):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000400)={0x0, 0x7, 0x401}, 0xc)

7.837687764s ago: executing program 1 (id=2883):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000370401000000ffdbdf2500000000", @ANYRES32=r1, @ANYBLOB="890c0400000000000500000005000000240012800b0001006772657461700000140002800800040003000000060003008000"], 0x4c}, 0x1, 0x0, 0x0, 0x44801}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000))
socket(0x1, 0x803, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01"], 0x3c}}, 0x0)
r5 = socket$inet(0x2, 0x2, 0x0)
sendmmsg$inet(r5, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @empty, @loopback}}}], 0x20}}], 0x1, 0x4040880)

7.344128207s ago: executing program 1 (id=2886):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x1, @remote}, 0xa}}, 0x26)
close(0x3)
getsockname(r1, 0x0, 0x0)

7.158116803s ago: executing program 1 (id=2889):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101005, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000100)={0x1, 0x5, [@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}]})

4.512083181s ago: executing program 1 (id=2902):
syz_emit_ethernet(0x5e, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x1, 0x3}, &(0x7f00000000c0)=<r4=>0x0, &(0x7f0000000040)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000100)=@IORING_OP_FADVISE={0x18, 0x40, 0x0, @fd_index=0x2, 0xc0f, 0x0, 0x8})
io_uring_enter(r3, 0x133d, 0x0, 0x8, 0x0, 0x0)

3.135047357s ago: executing program 4 (id=2909):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, 0x0, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e)
syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0)
recvmmsg(r1, &(0x7f00000092c0)=[{{0x0, 0x0, 0x0}, 0x725}, {{0x0, 0x0, 0x0}, 0x2}], 0x2, 0x102, 0x0)

2.442657179s ago: executing program 5 (id=2915):
r0 = socket$packet(0x11, 0x3, 0x300)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8})
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000040)={'\x00', {0x2, 0x4e23, @multicast1}})

2.388036712s ago: executing program 2 (id=2916):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={0x4c, r1, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x402c8c0}, 0x40000)

2.148075692s ago: executing program 5 (id=2917):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', <r2=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4)
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x12, r2}, 0x10)

2.069489199s ago: executing program 4 (id=2918):
ioprio_set$pid(0x2, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
preadv2(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x8, 0x0, 0x31)

2.046600497s ago: executing program 2 (id=2919):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r3=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={@loopback, 0x15, r3})

1.784104574s ago: executing program 4 (id=2920):
request_key(&(0x7f00000000c0)='syzkaller\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0xfffffffffffffffd)

1.761361397s ago: executing program 5 (id=2921):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f0000007480)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000c40)=""/128, 0x80}, {&(0x7f0000001900)=""/225, 0xe1}, {&(0x7f0000002e00)=""/4113, 0x1011}, {&(0x7f0000007740)=""/4086, 0xff6}, {&(0x7f0000000240)=""/112, 0x70}, {&(0x7f0000000140)=""/55, 0x37}, {&(0x7f0000000340)=""/107, 0x6b}, {&(0x7f00000003c0)=""/100, 0x64}, {&(0x7f0000000440)=""/188, 0xbc}, {&(0x7f0000006400)=""/73, 0x49}], 0xa}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x40010020, 0x0)

1.698101764s ago: executing program 1 (id=2922):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1, {[@rr={0x7, 0xf, 0x0, [@empty, @empty, @private]}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@loopback}]}, @ssrr={0x89, 0xf, 0x0, [@private, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x4c, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffffa}, {@private}, {@rand_addr=0x7000000}, {@local}, {@loopback}, {@private}, {@multicast2}, {@broadcast}, {@broadcast}]}, @timestamp={0x44, 0x8, 0x0, 0x0, 0x0, [0x0]}]}}}}}}}, 0x0)

1.560121s ago: executing program 4 (id=2923):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x34, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

1.559098103s ago: executing program 1 (id=2924):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x1}, 0x50)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000002c0)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x5, 0x2, 0xa})
ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000003c0)={0x1, 0x0, &(0x7f0000000380)=[0x0]})
r2 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000300)=[0x0, 0x0]})
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x141200, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000fc0)=0x2, 0x4)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006680)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xc7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000040)="13c6", 0x2}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e20, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x9c}, 0x1c, &(0x7f00000007c0)=[{&(0x7f00000004c0)}, {0x0}, {&(0x7f0000000640)}, {&(0x7f0000001000)="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", 0x38d}], 0x4}}, {{&(0x7f0000000200)={0xa, 0x4e22, 0xa, @dev={0xfe, 0x80, '\x00', 0x24}, 0xab8}, 0x1c, &(0x7f0000000b80)=[{&(0x7f00000006c0)="ed4d928de1ad94c9796ef8d9141643bb104c20bd93b0c1558f7a2fde05584aad78b6dee38b9fc462d5c4ba90f038b732af44bf1e80f7c3c7b347b59a680c085d96db543378fe44db214f09eb4a9b8a75eb7f43d7f428d65f3bcfa39fbf7238f367b5e54901004638ef4abd38d09b04278b4cbe225cfa3654e422f495571dde1963425ead2efb56082ccbb5ac7c70fc25187f67e17f", 0x95}, {&(0x7f00000008c0)="55616e647e14f923c0e66e0b20c22a00e02e5b1b7691f8f041e2ea9069a659f9b39cadad8b6d4b5789831325255f4eb3191add843bf88d21da10ae5ac5a2ac233462f470c2a38c66a46bd29863182ddfdeac2ab5d0bf9564bb237f0091278f40354e443640921a7e60d6390d1f76eda2f7bc0e721c28a162d4b43f1ed98117bfa5a8b82d38d6643cfc", 0x89}, {&(0x7f0000000a40)="6c1ace6f0c25cc6f7f47a9db088a19d75082a31db8fbd1f8e833c822d08c663dbdbf249f24e1427bb37a77fd4e27c1d2b39abcaaec09dcf9cb4e572dfb72363d4c694278ecd164e88f8d3d93083a50bd1f3d2652792c6f85c5c5cac81c71eb3b7df52701d4ddd7fe1a223a76f19f6737db00d6737e04bb0318fd492eabf90cb3cf5f890b62e3a620e67689b4d99410cb6aa448495f24b97f163efa3d0cfeabd1c3960be8ce600ec962654ec37ab69a2a40bf858e682656a9364e", 0xba}, {&(0x7f0000000b00)="67b05aa64895ef1e9e0d13554742eb87e260e3a515494e1e77532b2d8c059c89396f6c8270102d790f1ff930edb244bc8f20b57ce8df9ccd63abf9b1c9656b5c3c704087b0fa", 0x46}, {&(0x7f0000003040)="bde8ff6f3c7cfaf158fb69f12b2de96d040d893e5b48dfdf028c3badaab0ca592f5440344f622f7f781fe087b40f4931144bc4320f654ae1b4a38047633518e4e2f10f0e09677a1b2fcaed0dbed2f21caf6a41d93ab549e61ddc5ce3a0fc1734bc5fbe7cf87a0cdb906c3241bcda488978400b2280d15146d3e03620dbf8c287ef069ea27234adeed001dba5bfc4db058366921f6af169bede12cbb1dd37941c5c8a1a1b668689ca2008cbf9ebef0bc3f666e6407eb206d864c92596c7b15a1dd2d21a3374", 0xc5}, {&(0x7f0000003140)="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", 0xef0}, {&(0x7f0000004140)="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", 0xc00}], 0x7, &(0x7f0000005140)=[@dstopts={{0x18, 0x29, 0x37, {0xda373314d31b919d}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}, @dstopts={{0xf0, 0x29, 0x37, {0x0, 0x1a, '\x00', [@hao={0xc9, 0x10, @private2}, @ra={0x5, 0x2, 0x7}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x19}}, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x8, 0x85, "0de6d08198e5a34815e07da3bde8c959c3f949c3cd4013a66fa49e105411ffd0cef4ca749e3b20e193aaf9cc5d8a4a6e5bfe31dc0227bc6d52056211b39c44a7dac9be0fb7fa9bcbb0dcec56ab676328e223e9845d4ce30248f65df02b5bdc3c03adcf24be379be86c357e6224e7adc54e0bfa8a2b36e3250897a69b28dd9343bbddb069c6"}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x29}}, @ra, @jumbo={0xc2, 0x4, 0x5}]}}}], 0x120}}, {{&(0x7f00000002c0)={0xa, 0x4e21, 0x7, @empty, 0x2}, 0x1c, &(0x7f00000009c0)=[{&(0x7f0000005340)="5247d15247d3de2f043371a6a391e28e5e2c8f8bfafbe301e5845cd82bba6cec775e28a344dbc826cac696b52cebcb5ae50f6ba8a280c5f899817e5d79f79db4ec11bef78eba39f06b1ed51b48fc2e94a02d", 0x52}, {&(0x7f0000000340)="97f9fa790482fd4ceff6b0950cf3e31c6cbe7a22", 0x14}, {&(0x7f00000053c0)="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", 0x1000}, {&(0x7f0000000980)="4c64b0ddb30a9d6c3fdeaa3b255143ef8260036d4a8e5bfb291a9b5dc627519a486c6181b0a6ffc79a97c2fc7cb906b9335647e65d20b5ee113499", 0x3b}, {&(0x7f00000063c0)="7682123a1474c84ccc44ff06cb14b1ca914cc11c7379fce254bf8a8b32e9c3f72941cbfa4dba78d846aaebc2a7f9370eca59f9899036f7dff9434e41e41744317aeb4332d1133a6a1c537f76da8c8d9171461ced8ff3ded809c7742766e6407abcd92bcb368e187c8fc49069fe3782e9bdb9f947e666c59f9ac44628a6fb99bfa7614f90b90ed8c0f42a21f0c99f289c2d9d10fc34020e5057c7b52947280a9f05913a1300", 0xa5}], 0x5, &(0x7f0000006500)=[@hopopts_2292={{0xe0, 0x29, 0x36, {0x4, 0x18, '\x00', [@generic={0x8, 0x76, "2958e3397c1c2e46c6d1c258577349b24bab2d3f50f3f9fabaf2da514afc2bf75a76fe085c76047635bd295cdc1d736c654499db36617e9e2575a4a0f9836894af2ef7a06ca611363e767b29b80a259a20abfc8e22361fb96159c0abe0b7db0934235e6890bc58dfcc7ebba8ab8da199d54a51623fc3"}, @ra={0x5, 0x2, 0x1000}, @jumbo={0xc2, 0x4, 0xc}, @jumbo={0xc2, 0x4, 0xd050}, @calipso={0x7, 0x38, {0x3, 0xc, 0x2, 0x7fff, [0x81, 0x0, 0x0, 0x7, 0x8, 0xbe2]}}]}}}, @dstopts_2292={{0x38, 0x29, 0x4, {0xac, 0x3, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}]}}}, @tclass={{0x14, 0x29, 0x43, 0x2}}], 0x130}}], 0x4, 0x44)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff010}, {0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x1, 0xa1a}]}, 0x10)
sendmmsg(r5, &(0x7f0000000180), 0x4000190, 0x0)
symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file1\x00')
symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00')
r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3e616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r7, 0x0, 0x0)

1.51953848s ago: executing program 5 (id=2925):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x10034, @ipv4={'\x00', '\xff\xff', @loopback}, 0x80000001}, 0x1c)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x13, 0x8, 0x6}]}, 0x10)
sendmmsg$inet6(r0, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="02", 0x1}], 0x1}}], 0x1, 0x404c851)
ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000140))

1.384194339s ago: executing program 4 (id=2926):
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18}, '\x00'})
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000040)=0xffffffff)

1.264491841s ago: executing program 5 (id=2927):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, 0x0, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e)
syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0)
recvmmsg(r1, &(0x7f00000092c0)=[{{0x0, 0x0, 0x0}, 0x725}, {{0x0, 0x0, 0x0}, 0x2}], 0x2, 0x102, 0x0)

1.167357379s ago: executing program 4 (id=2928):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = syz_open_dev$loop(0x0, 0x4, 0x88000)
ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x20, 0x10, 0x403, 0x0, 0x25dfdc00, {0x0, 0x0, 0x74, 0x0, 0x800}}, 0x20}, 0x1, 0x0, 0x0, 0x20000801}, 0x24008804)
socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xffffffffffffffb6)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0xb, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x990}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)

964.219239ms ago: executing program 2 (id=2929):
ioprio_set$pid(0x2, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
preadv2(r0, &(0x7f0000000340)=[{0x0}], 0x1, 0x8, 0x0, 0x31)

791.25864ms ago: executing program 2 (id=2930):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', <r2=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4)
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x12, r2}, 0x10)

237.095951ms ago: executing program 2 (id=2931):
quotactl$Q_QUOTAON(0xffffffff80000200, 0x0, 0x0, &(0x7f0000000240)='./file0\x00')
syz_io_uring_setup(0x64b2, &(0x7f0000002600)={0x0, 0xffffff7c, 0x13580, 0x3, 0x35d}, 0x0, 0x0)
r0 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=<r1=>0x0, &(0x7f0000000300)=<r2=>0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1})
write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100})
io_uring_enter(r0, 0x7277, 0x0, 0x28, 0x0, 0x0)

236.707724ms ago: executing program 5 (id=2932):
r0 = landlock_create_ruleset(&(0x7f0000000100)={0x3002, 0x3, 0x2}, 0x18, 0x0)
landlock_restrict_self(r0, 0x6)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = getpgid(0x0)
fcntl$setownex(r2, 0xf, &(0x7f0000000140)={0x2, r3})
sendmmsg$unix(r1, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000008c0)='\x00', 0x1}], 0x1}}], 0x1, 0x408b1)

0s ago: executing program 2 (id=2933):
r0 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r0, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0x24004059)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x2, 0x6, 0xfff8}, 0x3d, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x1000, 0x5d, 0x8, 0xf, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0xb, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x100, 0x1, 0x4, 0x4, 0x7, 0x1, 0x8, 0x4c75, 0x80000000, 0xfffffffe, 0x3, 0xe, 0x0, 0x80008071, 0xb, 0x40017, 0x1, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x6, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000008, 0x9, 0x8000012f, 0x8, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0xc6e8, 0x5, 0xea4, 0x0, 0xb94, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x200006, 0x3, 0xff, 0x5, 0x1000005, 0x5f3e, 0x2d, 0x4e2, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x6, 0x3, 0x8000, 0x1, 0xfdfffffd, 0x8, 0x2, 0x4, 0x4, 0x3, 0x8000, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x8, 0x3], [0x7, 0x408, 0x3, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x8000, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x0, 0x3, 0x303c, 0x3e7, 0xc8, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x4, 0x6d01, 0x2, 0x8038, 0x800003, 0x200, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x4005, 0x4291, 0xac8, 0xca, 0x6, 0x2, 0x7ff, 0xbe, 0x4, 0x7, 0xa, 0x1000, 0x5, 0x1c, 0x120000, 0x4, 0x2006, 0x80a2ed, 0x1000, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x58, 0x9, 0x2, 0x101, 0x10000, 0x5, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x6, 0x9602, 0x67f, 0xaf, 0x5, 0x6, 0x222, 0x2, 0x7, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x8006c1b, 0x0, 0x4, 0x5, 0xb1e, 0x80000000, 0x201, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

15.020250][ T5959] em28xx 4-1:0.132: chip ID is em2710/2820
[  815.044997][T13776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  815.055323][T13776] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  815.205318][ T9467] r8152-cfgselector 3-1: USB disconnect, device number 102
[  815.246955][  T981] usbhid 2-1:0.0: can't add hid device: -71
[  815.258265][  T981] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  815.339347][  T981] usb 2-1: USB disconnect, device number 97
[  815.925983][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  816.218857][ T5959] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  816.275182][ T5959] em28xx 4-1:0.132: board has no eeprom
[  816.356399][ T5959] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  816.385813][ T5959] em28xx 4-1:0.132: analog set to bulk mode.
[  816.392307][  T981] em28xx 4-1:0.132: Registering V4L2 extension
[  816.541930][ T5921] usb 1-1: unable to get BOS descriptor or descriptor too short
[  816.575676][ T5921] usb 1-1: unable to read config index 0 descriptor/start: -71
[  816.625836][ T5921] usb 1-1: can't read configurations, error -71
[  816.710829][  T981] em28xx 4-1:0.132: failed to trigger read from i2c address 0x4a (error=-5)
[  816.735177][  T981] em28xx 4-1:0.132: failed to trigger read from i2c address 0x48 (error=-5)
[  816.793659][T13813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2309'.
[  816.801152][  T981] em28xx 4-1:0.132: failed to trigger read from i2c address 0x42 (error=-5)
[  816.815964][ T5959] usb 3-1: new high-speed USB device number 103 using dummy_hcd
[  816.837397][  T981] em28xx 4-1:0.132: failed to trigger read from i2c address 0x40 (error=-5)
[  816.896374][  T981] em28xx 4-1:0.132: failed to trigger read from i2c address 0x84 (error=-5)
[  816.915386][  T981] em28xx 4-1:0.132: failed to trigger read from i2c address 0x86 (error=-5)
[  816.939481][T13813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2309'.
[  816.941448][  T981] em28xx 4-1:0.132: failed to trigger read from i2c address 0x94 (error=-5)
[  816.965883][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  816.989641][  T981] em28xx 4-1:0.132: failed to trigger read from i2c address 0x96 (error=-5)
[  816.998993][ T5959] usb 3-1: Using ep0 maxpacket: 8
[  817.038273][ T5959] usb 3-1: config 0 has an invalid interface number: 31 but max is 0
[  817.075834][ T5959] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  817.131272][ T5959] usb 3-1: config 0 has no interface number 0
[  817.148453][ T5959] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  817.163453][ T5959] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  817.163965][T13826] FAULT_INJECTION: forcing a failure.
[  817.163965][T13826] name failslab, interval 1, probability 0, space 0, times 0
[  817.197015][ T5959] usb 3-1: Product: syz
[  817.201309][ T5959] usb 3-1: Manufacturer: syz
[  817.216291][ T5959] usb 3-1: SerialNumber: syz
[  817.234043][ T5959] usb 3-1: config 0 descriptor??
[  817.245409][T13826] CPU: 1 UID: 0 PID: 13826 Comm: syz.4.2313 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(full) 
[  817.245446][T13826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  817.245460][T13826] Call Trace:
[  817.245470][T13826]  <TASK>
[  817.245480][T13826]  dump_stack_lvl+0x189/0x250
[  817.245514][T13826]  ? __pfx____ratelimit+0x10/0x10
[  817.245544][T13826]  ? __pfx_dump_stack_lvl+0x10/0x10
[  817.245571][T13826]  ? __pfx__printk+0x10/0x10
[  817.245605][T13826]  ? __pfx___might_resched+0x10/0x10
[  817.245626][T13826]  ? fs_reclaim_acquire+0x7d/0x100
[  817.245666][T13826]  should_fail_ex+0x414/0x560
[  817.245701][T13826]  should_failslab+0xa8/0x100
[  817.245735][T13826]  __kmalloc_noprof+0xcb/0x4f0
[  817.245762][T13826]  ? sock_kmalloc+0xd6/0x160
[  817.245790][T13826]  sock_kmalloc+0xd6/0x160
[  817.245816][T13826]  skcipher_recvmsg+0x55c/0x11c0
[  817.245865][T13826]  ? __pfx_skcipher_recvmsg+0x10/0x10
[  817.245897][T13826]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  817.245921][T13826]  ? security_socket_recvmsg+0x7e/0x2e0
[  817.245946][T13826]  ? __pfx_skcipher_recvmsg+0x10/0x10
[  817.245975][T13826]  sock_recvmsg+0x22c/0x270
[  817.246007][T13826]  ____sys_recvmsg+0x1c9/0x460
[  817.246041][T13826]  ? __pfx_____sys_recvmsg+0x10/0x10
[  817.246080][T13826]  ? import_iovec+0x74/0xa0
[  817.246118][T13826]  ___sys_recvmsg+0x1b5/0x510
[  817.246148][T13826]  ? __pfx____sys_recvmsg+0x10/0x10
[  817.246200][T13826]  ? __fget_files+0x3a0/0x420
[  817.246248][T13826]  __x64_sys_recvmsg+0x198/0x260
[  817.246275][T13826]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  817.246310][T13826]  ? __pfx_ksys_write+0x10/0x10
[  817.246337][T13826]  ? rcu_is_watching+0x15/0xb0
[  817.246365][T13826]  ? do_syscall_64+0xbe/0x3b0
[  817.246401][T13826]  do_syscall_64+0xfa/0x3b0
[  817.246431][T13826]  ? lockdep_hardirqs_on+0x9c/0x150
[  817.246460][T13826]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  817.246482][T13826]  ? clear_bhb_loop+0x60/0xb0
[  817.246510][T13826]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  817.246532][T13826] RIP: 0033:0x7f569498ebe9
[  817.246553][T13826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  817.246574][T13826] RSP: 002b:00007f5695777038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  817.246597][T13826] RAX: ffffffffffffffda RBX: 00007f5694bb5fa0 RCX: 00007f569498ebe9
[  817.246614][T13826] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004
[  817.246628][T13826] RBP: 00007f5695777090 R08: 0000000000000000 R09: 0000000000000000
[  817.246642][T13826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  817.246656][T13826] R13: 00007f5694bb6038 R14: 00007f5694bb5fa0 R15: 00007f5694cdfa28
[  817.246691][T13826]  </TASK>
[  817.314852][ T5929] usb 2-1: new high-speed USB device number 98 using dummy_hcd
[  817.321586][  T981] em28xx 4-1:0.132: failed to trigger read from i2c address 0xc0 (error=-5)
[  817.509905][ T5929] usb 2-1: Using ep0 maxpacket: 32
[  817.535200][  T981] em28xx 4-1:0.132: failed to trigger read from i2c address 0xc2 (error=-5)
[  817.556736][ T5959] usb 3-1: Found UVC 0.00 device syz (046d:08c3)
[  817.565201][ T5959] usb 3-1: No valid video chain found.
[  817.630125][ T5929] usb 2-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=f9.d6
[  817.638628][  T981] em28xx 4-1:0.132: failed to trigger read from i2c address 0xc4 (error=-5)
[  817.650206][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  817.696826][ T5929] usb 2-1: config 0 descriptor??
[  817.722248][T13835] syz.0.2315: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  817.737210][T13835] CPU: 0 UID: 0 PID: 13835 Comm: syz.0.2315 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(full) 
[  817.737244][T13835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  817.737260][T13835] Call Trace:
[  817.737270][T13835]  <TASK>
[  817.737281][T13835]  dump_stack_lvl+0x189/0x250
[  817.737319][T13835]  ? __pfx_dump_stack_lvl+0x10/0x10
[  817.737348][T13835]  ? __pfx__printk+0x10/0x10
[  817.737382][T13835]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  817.737410][T13835]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  817.737440][T13835]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  817.737471][T13835]  warn_alloc+0x214/0x310
[  817.737507][T13835]  ? stack_depot_save_flags+0x40/0x860
[  817.737541][T13835]  ? __pfx_warn_alloc+0x10/0x10
[  817.737578][T13835]  ? kasan_save_track+0x4f/0x80
[  817.737608][T13835]  ? xskq_create+0x56/0x170
[  817.737635][T13835]  ? xsk_init_queue+0xb0/0x110
[  817.737661][T13835]  ? xsk_setsockopt+0x4dc/0x8d0
[  817.737685][T13835]  ? do_sock_setsockopt+0x179/0x1b0
[  817.737718][T13835]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  817.737752][T13835]  ? do_syscall_64+0xfa/0x3b0
[  817.737783][T13835]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  817.737815][T13835]  __vmalloc_node_range_noprof+0x125/0x12f0
[  817.737880][T13835]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  817.737922][T13835]  ? __kasan_kmalloc+0x93/0xb0
[  817.737956][T13835]  vmalloc_user_noprof+0xad/0xf0
[  817.737990][T13835]  ? xskq_create+0xbf/0x170
[  817.738020][T13835]  xskq_create+0xbf/0x170
[  817.738053][T13835]  xsk_init_queue+0xb0/0x110
[  817.738085][T13835]  xsk_setsockopt+0x4dc/0x8d0
[  817.738126][T13835]  ? __pfx_xsk_setsockopt+0x10/0x10
[  817.738154][T13835]  ? __pfx_aa_sk_perm+0x10/0x10
[  817.738193][T13835]  ? aa_sock_opt_perm+0xff/0x1b0
[  817.738234][T13835]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  817.738259][T13835]  ? __pfx_xsk_setsockopt+0x10/0x10
[  817.738288][T13835]  do_sock_setsockopt+0x179/0x1b0
[  817.738330][T13835]  __x64_sys_setsockopt+0x13f/0x1b0
[  817.738373][T13835]  do_syscall_64+0xfa/0x3b0
[  817.738403][T13835]  ? lockdep_hardirqs_on+0x9c/0x150
[  817.738434][T13835]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  817.738457][T13835]  ? clear_bhb_loop+0x60/0xb0
[  817.738484][T13835]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  817.738507][T13835] RIP: 0033:0x7f0a2638ebe9
[  817.738530][T13835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  817.738550][T13835] RSP: 002b:00007f0a24191038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  817.738574][T13835] RAX: ffffffffffffffda RBX: 00007f0a265b6270 RCX: 00007f0a2638ebe9
[  817.738592][T13835] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000d
[  817.738606][T13835] RBP: 00007f0a26411e19 R08: 0000000000000052 R09: 0000000000000000
[  817.738621][T13835] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  817.738636][T13835] R13: 00007f0a265b6308 R14: 00007f0a265b6270 R15: 00007f0a266dfa28
[  817.738673][T13835]  </TASK>
[  817.738694][T13835] Mem-Info:
[  818.012190][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  818.083468][ T5929] usb 2-1: dvb_usb_v2: found a 'Anysee' in warm state
[  818.090568][  T981] em28xx 4-1:0.132: failed to trigger read from i2c address 0xc6 (error=-5)
[  818.093258][  T981] em28xx 4-1:0.132: failed to trigger read from i2c address 0xc8 (error=-5)
[  818.119645][T13810] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  818.129166][  T981] em28xx 4-1:0.132: Config register raw data: 0xfffffffb
[  818.137067][T13835] active_anon:10042 inactive_anon:0 isolated_anon:0
[  818.137067][T13835]  active_file:14538 inactive_file:40153 isolated_file:0
[  818.137067][T13835]  unevictable:768 dirty:158 writeback:0
[  818.137067][T13835]  slab_reclaimable:10958 slab_unreclaimable:119050
[  818.137067][T13835]  mapped:32972 shmem:3574 pagetables:1453
[  818.137067][T13835]  sec_pagetables:3 bounce:0
[  818.137067][T13835]  kernel_misc_reclaimable:0
[  818.137067][T13835]  free:1288151 free_pcp:12212 free_cma:0
[  818.195260][ T5929] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  818.203206][ T5929] dvb_usb_anysee 2-1:0.0: probe with driver dvb_usb_anysee failed with error -22
[  818.206246][  T981] em28xx 4-1:0.132: AC97 chip type couldn't be determined
[  818.255848][  T981] em28xx 4-1:0.132: No AC97 audio processor
[  818.322444][  T981] usb 4-1: Decoder not found
[  818.336946][  T981] em28xx 4-1:0.132: failed to create media graph
[  818.354115][T13835] Node 0 active_anon:40368kB inactive_anon:0kB active_file:58132kB inactive_file:160408kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:132584kB dirty:632kB writeback:0kB shmem:12960kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:8192kB kernel_stack:12752kB pagetables:5640kB sec_pagetables:12kB all_unreclaimable? no Balloon:0kB
[  818.397160][  T981] em28xx 4-1:0.132: V4L2 device video103 deregistered
[  818.436108][T13835] Node 1 active_anon:0kB inactive_anon:0kB active_file:20kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  818.444741][  T981] em28xx 4-1:0.132: Remote control support is not available for this card.
[  818.583148][T13835] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  818.671032][T13835] lowmem_reserve[]: 0 2497 2499 2499 2499
[  818.685074][  T981] usb 3-1: USB disconnect, device number 103
[  818.722468][T13835] Node 0 DMA32 free:1237076kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40316kB inactive_anon:0kB active_file:58132kB inactive_file:158836kB unevictable:1536kB writepending:332kB present:3129332kB managed:2557484kB mlocked:0kB bounce:0kB free_pcp:39724kB local_pcp:19076kB free_cma:0kB
[  818.816072][T13835] lowmem_reserve[]: 0 0 1 1 1
[  818.820900][T13835] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1572kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[  818.877090][T13835] lowmem_reserve[]: 0 0 0 0 0
[  818.888760][T13835] Node 1 Normal free:3899956kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:20kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:9720kB local_pcp:7288kB free_cma:0kB
[  819.045825][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  819.097428][T13835] lowmem_reserve[]: 0 0 0 0 0
[  819.300572][T13835] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  819.468611][T13835] Node 0 DMA32: 868*4kB (UME) 491*8kB (ME) 98*16kB (ME) 379*32kB (UME) 818*64kB (UME) 331*128kB (UME) 133*256kB (UME) 43*512kB (UME) 21*1024kB (UM) 15*2048kB (UME) 247*4096kB (UM) = 1235816kB
[  819.783028][ T5929] usb 2-1: USB disconnect, device number 98
[  819.790227][T13835] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB
[  819.831084][T13835] Node 1 Normal: 137*4kB (UE) 58*8kB (UME) 38*16kB (UE) 257*32kB (UME) 97*64kB (UME) 21*128kB (UM) 5*256kB (UM) 4*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 945*4096kB (M) = 3899956kB
[  819.921043][T13835] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  819.994219][T13835] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  820.006895][T13835] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  820.029903][T13861] macsec0: entered promiscuous mode
[  820.035373][T13861] macsec0: entered allmulticast mode
[  820.053671][T13835] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  820.063788][T13835] 58737 total pagecache pages
[  820.068659][T13835] 0 pages in swap cache
[  820.072847][T13835] Free swap  = 124996kB
[  820.073939][T13861] bond0: entered allmulticast mode
[  820.085861][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  820.106012][T13861] bond_slave_0: entered allmulticast mode
[  820.111810][T13861] bond_slave_1: entered allmulticast mode
[  820.121484][T13835] Total swap = 124996kB
[  820.126705][  T981] usb 5-1: new high-speed USB device number 112 using dummy_hcd
[  820.144689][T13835] 2097051 pages RAM
[  820.156539][T13835] 0 pages HighMem/MovableOnly
[  820.161287][T13835] 425654 pages reserved
[  820.174955][T13861] syz_tun: entered allmulticast mode
[  820.202117][T13835] 0 pages cma reserved
[  820.211825][T13861] bond0: left allmulticast mode
[  820.233087][T13861] bond_slave_0: left allmulticast mode
[  820.256419][T13861] bond_slave_1: left allmulticast mode
[  820.261947][T13861] syz_tun: left allmulticast mode
[  820.309507][  T981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  820.349690][  T981] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  820.372273][  T981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  820.405424][  T981] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  820.420927][  T981] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  820.434046][  T981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  820.455489][  T981] usb 5-1: config 0 descriptor??
[  820.751580][  T981] hdpvr 5-1:0.0: firmware version 0x69 dated Ì«SL’Ù¸Öi:¸�hÏúŽ·Ý¤Dšjñu°íÿ7~½Ô?beÓlOˆz¬
[  820.762476][  T981] hdpvr 5-1:0.0: untested firmware, the driver might not work.
[  821.125825][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  821.805371][T13884] tipc: Failed to remove unknown binding: 66,1,1/0:3149521976/3149521978
[  821.835253][T13884] tipc: Failed to remove unknown binding: 66,1,1/0:3149521976/3149521978
[  821.916521][T13884] input: syz0 as /devices/virtual/input/input47
[  822.165828][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  822.372528][  T981] hdpvr 5-1:0.0: Could not setup controls
[  822.430946][  T981] hdpvr 5-1:0.0: registering videodev failed
[  822.487449][  T981] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -71
[  822.589362][  T981] usb 5-1: USB disconnect, device number 112
[  822.811964][T13893] 8021q: adding VLAN 0 to HW filter on device batadv1
[  822.819045][ T1213] usb 3-1: new high-speed USB device number 104 using dummy_hcd
[  822.830756][T13893] batadv1: entered promiscuous mode
[  822.839635][T13893] team0: Port device batadv1 added
[  822.986788][T13894] hub 9-0:1.0: USB hub found
[  822.991913][T13894] hub 9-0:1.0: 1 port detected
[  823.088384][ T1213] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid maxpacket 1280, setting to 64
[  823.102849][ T1213] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  823.160674][ T1213] usb 3-1: New USB device found, idVendor=413c, idProduct=8186, bcdDevice=a0.a2
[  823.205829][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  823.230955][ T1213] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  823.283077][ T1213] usb 3-1: Product: syz
[  823.298215][ T1213] usb 3-1: Manufacturer: syz
[  823.350593][ T1213] usb 3-1: SerialNumber: syz
[  823.403939][ T1213] usb 3-1: config 0 descriptor??
[  824.255953][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  824.948470][T13912] input: syz0 as /devices/virtual/input/input48
[  825.285828][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  825.629773][ T5929] usb 3-1: USB disconnect, device number 104
[  825.905300][T13921] loop4: detected capacity change from 0 to 7
[  825.918141][T10983] Dev loop4: unable to read RDB block 7
[  825.924015][T10983]  loop4: unable to read partition table
[  825.967523][T10983] loop4: partition table beyond EOD, truncated
[  826.021115][T13924] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2337'.
[  826.056097][T13921] Dev loop4: unable to read RDB block 7
[  826.062196][T13921]  loop4: unable to read partition table
[  826.096083][T13921] loop4: partition table beyond EOD, truncated
[  826.102395][T13921] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5)
[  826.325823][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  826.429028][T13928] vlan1: entered allmulticast mode
[  826.434219][T13928] bond3: entered allmulticast mode
[  826.975898][ T5959] usb 3-1: new high-speed USB device number 105 using dummy_hcd
[  827.105859][ T5959] usb 3-1: device descriptor read/64, error -71
[  827.365851][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  827.846185][ T5959] usb 3-1: new high-speed USB device number 106 using dummy_hcd
[  828.014801][ T5959] usb 3-1: device descriptor read/64, error -71
[  828.046992][  T981] usb 5-1: new high-speed USB device number 113 using dummy_hcd
[  828.136930][ T5959] usb usb3-port1: attempt power cycle
[  828.292305][  T981] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  828.303925][  T981] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  828.342381][  T981] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  828.405825][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  828.421694][  T981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  828.472891][T13784] Set syz1 is full, maxelem 65536 reached
[  828.486207][ T5959] usb 3-1: new high-speed USB device number 107 using dummy_hcd
[  828.507026][ T5959] usb 3-1: device descriptor read/8, error -71
[  828.550149][ T1213] usb 4-1: USB disconnect, device number 124
[  828.558627][ T1213] em28xx 4-1:0.132: Disconnecting em28xx
[  828.564761][ T1213] em28xx 4-1:0.132: Closing input extension
[  828.572580][ T5929] usb 2-1: new high-speed USB device number 99 using dummy_hcd
[  828.651227][ T1213] em28xx 4-1:0.132: Freeing device
[  828.676950][T13953] kAFS: unable to lookup cell '.,'
[  828.693068][T13953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2346'.
[  828.705966][ T5929] usb 2-1: device descriptor read/64, error -71
[  828.748030][ T5959] usb 3-1: new high-speed USB device number 108 using dummy_hcd
[  828.787048][ T5959] usb 3-1: device descriptor read/8, error -71
[  828.896552][ T5959] usb usb3-port1: unable to enumerate USB device
[  828.995957][ T5929] usb 2-1: new high-speed USB device number 100 using dummy_hcd
[  829.135996][ T5929] usb 2-1: device descriptor read/64, error -71
[  829.248717][ T5929] usb usb2-port1: attempt power cycle
[  829.440833][ T5872] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  829.448363][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  829.482843][ T5872] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  829.686729][ T5872] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  829.708894][ T5929] usb 2-1: new high-speed USB device number 101 using dummy_hcd
[  829.749535][ T5872] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  829.757775][ T5872] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  829.789198][ T5929] usb 2-1: device descriptor read/8, error -71
[  829.811654][ T5878] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  829.827182][ T5878] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  829.835085][ T5878] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  829.878802][ T5878] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  829.892153][ T5878] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  830.047873][ T5929] usb 2-1: new high-speed USB device number 102 using dummy_hcd
[  830.083751][ T5929] usb 2-1: device descriptor read/8, error -71
[  830.244147][ T5929] usb usb2-port1: unable to enumerate USB device
[  830.345375][  T981] usb 5-1: USB disconnect, device number 113
[  830.485954][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  830.525041][T11909] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  830.566563][T11909] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  830.585837][T11909] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  830.840754][T11909] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  830.854562][T11909] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  830.871769][T11909] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  830.939987][   T30] kauditd_printk_skb: 108 callbacks suppressed
[  830.940008][   T30] audit: type=1800 audit(1754816421.819:479): pid=13985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2355" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0
[  830.982957][ T5929] usb 3-1: new high-speed USB device number 109 using dummy_hcd
[  830.996280][T11909] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  831.025042][T11909] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  831.025114][T11909] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  831.132726][T11909] bond0: (slave netdevsim0): Releasing backup interface
[  831.155175][T11909] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  831.166405][T11909] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  831.172547][ T5929] usb 3-1: Using ep0 maxpacket: 16
[  831.178280][T11909] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  831.249655][T13992] usb usb8: usbfs: process 13992 (syz.4.2356) did not claim interface 0 before use
[  831.342716][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7
[  831.361640][ T5929] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[  831.373270][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  831.391199][ T5929] usb 3-1: Product: syz
[  831.408770][ T5929] usb 3-1: Manufacturer: syz
[  831.413558][ T5929] usb 3-1: SerialNumber: syz
[  831.432593][ T5929] usb 3-1: config 0 descriptor??
[  831.450781][ T5929] hub 3-1:0.0: bad descriptor, ignoring hub
[  831.467406][ T5929] hub 3-1:0.0: probe with driver hub failed with error -5
[  831.525926][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  831.565478][ T5929] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  831.668675][T13982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  831.711229][T13971] chnl_net:caif_netlink_parms(): no params data found
[  831.731904][T13982] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  831.959741][ T5929] usb 3-1: USB disconnect, device number 109
[  832.010389][ T5872] Bluetooth: hci4: command tx timeout
[  832.565822][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  832.681891][T14014] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2361'.
[  833.058862][T11909] bridge_slave_1: left allmulticast mode
[  833.065380][T11909] bridge_slave_1: left promiscuous mode
[  833.092205][T11909] bridge0: port 2(bridge_slave_1) entered disabled state
[  833.120258][T11909] bridge_slave_0: left allmulticast mode
[  833.128893][T11909] bridge_slave_0: left promiscuous mode
[  833.144422][T11909] bridge0: port 1(bridge_slave_0) entered disabled state
[  833.188909][T11909] tipc: Resetting bearer <eth:syzkaller0>
[  833.425714][T14023] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2363'.
[  833.494794][T14023] netlink: 31 bytes leftover after parsing attributes in process `syz.1.2363'.
[  833.536000][T14023] netlink: 'syz.1.2363': attribute type 3 has an invalid length.
[  833.543901][T14023] netlink: 'syz.1.2363': attribute type 2 has an invalid length.
[  833.605921][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  833.625508][T14023] netlink: 31 bytes leftover after parsing attributes in process `syz.1.2363'.
[  833.993701][T11909] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface
[  834.086099][ T5872] Bluetooth: hci4: command tx timeout
[  834.107920][T14042] fuse: Bad value for 'fd'
[  834.335474][T14053] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  834.365696][T14058] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  834.400431][T14053] binder: 14052:14053 ioctl c0306201 200000001440 returned -11
[  834.427345][T14053] binder: 14052:14053 ioctl 80404805 0 returned -22
[  834.645923][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  835.124697][T11909] tipc: Disabling bearer <eth:syzkaller0>
[  835.685923][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  835.718753][T11909] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  835.855514][T11909] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  835.885666][T11909] bond0 (unregistering): Released all slaves
[  835.912546][T11909] bond1 (unregistering): Released all slaves
[  836.057837][ T5929] usb 1-1: new full-speed USB device number 105 using dummy_hcd
[  836.087606][T11909] bond2 (unregistering): Released all slaves
[  836.103210][T13971] bridge0: port 1(bridge_slave_0) entered blocking state
[  836.111889][T13971] bridge0: port 1(bridge_slave_0) entered disabled state
[  836.120242][T13971] bridge_slave_0: entered allmulticast mode
[  836.128710][T13971] bridge_slave_0: entered promiscuous mode
[  836.176041][ T5872] Bluetooth: hci4: command tx timeout
[  836.216308][  T981] usb 2-1: new high-speed USB device number 103 using dummy_hcd
[  836.227979][ T5929] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  836.274713][T14077] bridge3: entered promiscuous mode
[  836.291331][T14077] bridge3: entered allmulticast mode
[  836.297421][ T5929] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  836.314246][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  836.323015][ T5929] usb 1-1: Product: syz
[  836.328100][ T5929] usb 1-1: Manufacturer: syz
[  836.332901][ T5929] usb 1-1: SerialNumber: syz
[  836.345391][T13971] bridge0: port 2(bridge_slave_1) entered blocking state
[  836.353394][T13971] bridge0: port 2(bridge_slave_1) entered disabled state
[  836.364309][T13971] bridge_slave_1: entered allmulticast mode
[  836.373505][T13971] bridge_slave_1: entered promiscuous mode
[  836.374954][ T5929] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  836.422897][  T981] usb 2-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36
[  836.439890][T11909] tipc: Disabling bearer <udp:s>
[  836.443424][  T981] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  836.460574][  T981] usb 2-1: config 0 descriptor??
[  836.467864][T11909] tipc: Left network mode
[  836.772236][  T981] kaweth 2-1:0.0: Firmware present in device.
[  836.839124][  T981] kaweth 2-1:0.0: Statistics collection: 0
[  836.864028][  T981] kaweth 2-1:0.0: Multicast filter limit: 0
[  836.875250][T13971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  836.880962][  T981] kaweth 2-1:0.0: MTU: 0
[  836.894425][  T981] kaweth 2-1:0.0: Read MAC address 00:00:00:00:00:00
[  836.923129][T13971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  836.964953][T14077] program syz.0.2373 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  837.089332][ T5929] usb 1-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[  837.528434][  T981] kaweth 2-1:0.0: kaweth interface created at eth5
[  837.559624][ T5921] usb 1-1: USB disconnect, device number 105
[  837.748191][T13971] team0: Port device team_slave_0 added
[  837.799926][T13971] team0: Port device team_slave_1 added
[  838.235682][T13971] batman_adv: batadv0: Adding interface: batadv_slave_0
[  838.249033][ T5872] Bluetooth: hci4: command tx timeout
[  838.274292][T13971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  838.300227][    C1] vkms_vblank_simulate: vblank timer overrun
[  838.524209][T13971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  838.580818][T13971] batman_adv: batadv0: Adding interface: batadv_slave_1
[  838.595475][T13971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  838.665547][T13971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  838.885492][T14120] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2377'.
[  838.960733][T14120] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2377'.
[  839.112687][T13971] hsr_slave_0: entered promiscuous mode
[  839.127153][T13971] hsr_slave_1: entered promiscuous mode
[  839.144071][T13971] debugfs: 'hsr0' already exists in 'hsr'
[  839.148521][ T5929] usb 2-1: USB disconnect, device number 103
[  839.159913][T13971] Cannot create hsr debugfs directory
[  840.177049][T14138] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2385'.
[  840.276223][T14138] netlink: 'syz.0.2385': attribute type 4 has an invalid length.
[  840.375320][T14138] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2385'.
[  841.142573][T14138] geneve2: entered promiscuous mode
[  841.487703][T14123] syz.4.2377 (14123): drop_caches: 2
[  841.616050][ T6032] usb 3-1: new high-speed USB device number 111 using dummy_hcd
[  841.796956][ T6032] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  841.916120][ T6032] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  842.049403][T11909] hsr_slave_0: left promiscuous mode
[  842.061350][ T6032] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  842.077003][T11909] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  842.136997][ T6032] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  842.145066][T11909] batman_adv: batadv0: Removing interface: batadv_slave_0
[  842.212175][T11909] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  842.221750][ T6032] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  842.240496][T11909] batman_adv: batadv0: Removing interface: batadv_slave_1
[  842.302105][  T981] usb 5-1: new high-speed USB device number 114 using dummy_hcd
[  842.314388][ T6032] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  842.367888][ T6032] usb 3-1: invalid MIDI out EP 0
[  842.389780][T11909] veth1_macvtap: left promiscuous mode
[  842.427583][T11909] veth0_macvtap: left promiscuous mode
[  842.501815][  T981] usb 5-1: Using ep0 maxpacket: 16
[  842.518190][  T981] usb 5-1: config 0 has an invalid interface number: 68 but max is 0
[  842.527479][T14163] delete_channel: no stack
[  842.558833][  T981] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  842.646412][  T981] usb 5-1: config 0 has no interface number 0
[  842.693084][  T981] usb 5-1: config 0 interface 68 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  842.711143][T10986] udevd[10986]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  842.744935][ T6032] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22
[  842.797757][ T6032] usb 3-1: USB disconnect, device number 111
[  842.839755][  T981] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4
[  842.862736][  T981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  842.888462][  T981] usb 5-1: Product: syz
[  842.905861][  T981] usb 5-1: Manufacturer: syz
[  842.913776][  T981] usb 5-1: SerialNumber: syz
[  842.992869][  T981] usb 5-1: config 0 descriptor??
[  843.085279][  T981] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  843.203431][ T1213] usb 1-1: new high-speed USB device number 106 using dummy_hcd
[  843.262405][T14171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  843.288568][T14171] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  843.311845][T14171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  843.332024][T14171] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  843.406920][T11909] team0 (unregistering): Port device batadv1 removed
[  843.420848][  T981] usb 5-1: USB disconnect, device number 114
[  843.436139][   T36] usb 5-1: Failed to submit usb control message: -71
[  843.445223][   T36] usb 5-1: unable to send the bmi data to the device: -71
[  843.461329][   T36] usb 5-1: unable to get target info from device
[  843.469777][   T36] usb 5-1: could not get target info (-71)
[  843.476077][   T36] usb 5-1: could not probe fw (-71)
[  843.554435][ T1213] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98
[  843.690544][ T1213] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  843.734492][ T1213] usb 1-1: config 0 descriptor??
[  843.754679][ T1213] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  843.810272][ T1213] ftdi_sio ttyUSB0: unknown device type: 0xc698
[  844.155135][T14199] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2396'.
[  845.311098][T14211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2397'.
[  845.382781][T14212] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2397'.
[  845.403674][T14212] netlink: 'syz.2.2397': attribute type 5 has an invalid length.
[  845.804570][T11909] team0 (unregistering): Port device team_slave_1 removed
[  845.873480][T11909] team0 (unregistering): Port device team_slave_0 removed
[  846.070793][  T981] usb 1-1: USB disconnect, device number 106
[  846.081220][  T981] ftdi_sio 1-1:0.0: device disconnected
[  847.032324][T14211] team1: entered promiscuous mode
[  847.056717][T14211] team1: entered allmulticast mode
[  847.867924][T13971] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  847.962640][T13971] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  848.036641][T13971] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  848.479754][T13971] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  848.891577][T11909] IPVS: stop unused estimator thread 0...
[  849.086065][ T5921] usb 1-1: new high-speed USB device number 107 using dummy_hcd
[  849.235970][ T5921] usb 1-1: Using ep0 maxpacket: 16
[  849.243819][ T5921] usb 1-1: unable to get BOS descriptor or descriptor too short
[  849.254187][ T5921] usb 1-1: config 36 has 0 interfaces, different from the descriptor's value: 10
[  849.267808][ T5921] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  849.278170][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  849.318527][ T5921] usb 1-1: Product: syz
[  849.370846][ T5921] usb 1-1: Manufacturer: syz
[  849.428982][ T5921] usb 1-1: SerialNumber: syz
[  849.449593][T13971] 8021q: adding VLAN 0 to HW filter on device bond0
[  849.777688][T13971] 8021q: adding VLAN 0 to HW filter on device team0
[  849.833532][ T5921] usb 1-1: USB disconnect, device number 107
[  849.869461][ T2937] bridge0: port 1(bridge_slave_0) entered blocking state
[  849.876837][ T2937] bridge0: port 1(bridge_slave_0) entered forwarding state
[  849.998115][ T2937] bridge0: port 2(bridge_slave_1) entered blocking state
[  850.005462][ T2937] bridge0: port 2(bridge_slave_1) entered forwarding state
[  850.359667][T13971] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  850.418949][T13971] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  850.676328][T14268] sctp: [Deprecated]: syz.4.2406 (pid 14268) Use of int in maxseg socket option.
[  850.676328][T14268] Use struct sctp_assoc_value instead
[  850.924984][T13971] 8021q: adding VLAN 0 to HW filter on device batadv0
[  851.239287][T13971] veth0_vlan: entered promiscuous mode
[  851.322492][T13971] veth1_vlan: entered promiscuous mode
[  851.626669][T13971] veth0_macvtap: entered promiscuous mode
[  851.634599][T14276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  851.665317][T14276] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  851.689640][T13971] veth1_macvtap: entered promiscuous mode
[  851.757151][ T6032] usb 5-1: new full-speed USB device number 115 using dummy_hcd
[  851.797476][T13971] batman_adv: batadv0: Interface activated: batadv_slave_0
[  851.898542][T13971] batman_adv: batadv0: Interface activated: batadv_slave_1
[  851.930628][ T6032] usb 5-1: not running at top speed; connect to a high speed hub
[  851.939845][ T6032] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  851.969119][ T6032] usb 5-1: config 0 has no interface number 0
[  851.981237][ T6032] usb 5-1: config 0 interface 1 has no altsetting 0
[  852.007945][ T6032] usb 5-1: New USB device found, idVendor=041e, idProduct=0005, bcdDevice=58.e0
[  852.020765][ T6032] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  852.031506][ T6032] usb 5-1: Product: syz
[  852.040437][ T6032] usb 5-1: Manufacturer: syz
[  852.058279][ T6032] usb 5-1: SerialNumber: syz
[  852.081528][ T6032] usb 5-1: config 0 descriptor??
[  852.104549][   T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  852.124266][   T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  852.155179][   T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  852.202382][   T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  852.286585][ T1213] usb 3-1: new high-speed USB device number 112 using dummy_hcd
[  852.434086][ T6032] snd-usb-audio 5-1:0.1: probe with driver snd-usb-audio failed with error -22
[  852.446287][ T1213] usb 3-1: device descriptor read/64, error -71
[  852.493690][ T6032] usb 5-1: USB disconnect, device number 115
[  852.503573][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  852.542024][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  852.569144][T13970] udevd[13970]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  852.639631][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  852.675689][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  852.695506][T14282] FAULT_INJECTION: forcing a failure.
[  852.695506][T14282] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  852.726204][ T1213] usb 3-1: new high-speed USB device number 113 using dummy_hcd
[  852.748056][T14282] CPU: 0 UID: 0 PID: 14282 Comm: syz.1.2410 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(full) 
[  852.748082][T14282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  852.748093][T14282] Call Trace:
[  852.748101][T14282]  <TASK>
[  852.748108][T14282]  dump_stack_lvl+0x189/0x250
[  852.748131][T14282]  ? __pfx____ratelimit+0x10/0x10
[  852.748153][T14282]  ? __pfx_dump_stack_lvl+0x10/0x10
[  852.748172][T14282]  ? __pfx__printk+0x10/0x10
[  852.748201][T14282]  ? __might_fault+0xb0/0x130
[  852.748242][T14282]  should_fail_ex+0x414/0x560
[  852.748276][T14282]  _copy_from_user+0x2d/0xb0
[  852.748301][T14282]  ___sys_sendmsg+0x158/0x2a0
[  852.748327][T14282]  ? __pfx____sys_sendmsg+0x10/0x10
[  852.748383][T14282]  ? __fget_files+0x2a/0x420
[  852.748414][T14282]  ? __fget_files+0x3a0/0x420
[  852.748446][T14282]  __sys_sendmmsg+0x227/0x430
[  852.748467][T14282]  ? __pfx___sys_sendmmsg+0x10/0x10
[  852.748481][T14282]  ? __mutex_unlock_slowpath+0x1a1/0x760
[  852.748523][T14282]  ? ksys_write+0x22a/0x250
[  852.748547][T14282]  ? __pfx_ksys_write+0x10/0x10
[  852.748566][T14282]  ? rcu_is_watching+0x15/0xb0
[  852.748586][T14282]  __x64_sys_sendmmsg+0xa0/0xc0
[  852.748604][T14282]  do_syscall_64+0xfa/0x3b0
[  852.748627][T14282]  ? lockdep_hardirqs_on+0x9c/0x150
[  852.748649][T14282]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  852.748665][T14282]  ? clear_bhb_loop+0x60/0xb0
[  852.748684][T14282]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  852.748699][T14282] RIP: 0033:0x7f479e58ebe9
[  852.748713][T14282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  852.748727][T14282] RSP: 002b:00007f479f4ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  852.748744][T14282] RAX: ffffffffffffffda RBX: 00007f479e7b5fa0 RCX: 00007f479e58ebe9
[  852.748756][T14282] RDX: 0000000000000001 RSI: 0000200000000f80 RDI: 0000000000000003
[  852.748766][T14282] RBP: 00007f479f4ac090 R08: 0000000000000000 R09: 0000000000000000
[  852.748776][T14282] R10: 4999fa8a21843244 R11: 0000000000000246 R12: 0000000000000001
[  852.748787][T14282] R13: 00007f479e7b6038 R14: 00007f479e7b5fa0 R15: 00007f479e8dfa28
[  852.748810][T14282]  </TASK>
[  852.974866][    C0] vkms_vblank_simulate: vblank timer overrun
[  853.065055][ T1213] usb 3-1: device descriptor read/64, error -71
[  853.188504][ T1213] usb usb3-port1: attempt power cycle
[  853.527924][ T1213] usb 3-1: new high-speed USB device number 114 using dummy_hcd
[  853.562271][ T1213] usb 3-1: device descriptor read/8, error -71
[  853.596244][ T6032] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  853.709191][ T5959] usb 1-1: new high-speed USB device number 108 using dummy_hcd
[  853.726024][ T6032] usb 6-1: device descriptor read/64, error -71
[  853.805905][ T1213] usb 3-1: new high-speed USB device number 115 using dummy_hcd
[  853.847307][ T1213] usb 3-1: device descriptor read/8, error -71
[  853.875886][ T5959] usb 1-1: Using ep0 maxpacket: 16
[  853.883528][ T5959] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  853.898803][ T5959] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  853.923018][ T5959] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  853.977335][ T6032] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  853.988254][ T1213] usb usb3-port1: unable to enumerate USB device
[  854.069099][ T5959] usb 1-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00
[  854.100050][ T5959] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  854.133625][ T5959] usb 1-1: config 0 descriptor??
[  854.165879][ T6032] usb 6-1: device descriptor read/64, error -71
[  854.288355][ T6032] usb usb6-port1: attempt power cycle
[  854.696331][ T6032] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  854.720611][T14325] loop6: detected capacity change from 0 to 524287999
[  854.729087][T14325] buffer_io_error: 8 callbacks suppressed
[  854.729120][T14325] Buffer I/O error on dev loop6, logical block 0, async page read
[  854.743366][T14325] Buffer I/O error on dev loop6, logical block 0, async page read
[  854.751604][T14325] Buffer I/O error on dev loop6, logical block 0, async page read
[  854.760707][T14325] Buffer I/O error on dev loop6, logical block 0, async page read
[  854.768997][T14325] Buffer I/O error on dev loop6, logical block 0, async page read
[  854.781775][ T6032] usb 6-1: device descriptor read/8, error -71
[  854.825232][T14327] Buffer I/O error on dev loop6, logical block 1048575, async page read
[  854.837177][T14325] Buffer I/O error on dev loop6, logical block 0, async page read
[  854.845691][T14325] Buffer I/O error on dev loop6, logical block 0, async page read
[  854.871652][T14325] Buffer I/O error on dev loop6, logical block 0, async page read
[  854.879973][T14325] ldm_validate_partition_table(): Disk read failed.
[  854.909275][T14325] Buffer I/O error on dev loop6, logical block 0, async page read
[  854.918650][T14325] Dev loop6: unable to read RDB block 0
[  854.933331][T14325]  loop6: unable to read partition table
[  854.941974][T14325] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[  855.025950][ T6032] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  855.049084][ T6032] usb 6-1: device descriptor read/8, error -71
[  855.184501][ T6032] usb usb6-port1: unable to enumerate USB device
[  856.538992][ T5959] usbhid 1-1:0.0: can't add hid device: -71
[  856.569589][ T5959] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  856.602169][ T5959] usb 1-1: USB disconnect, device number 108
[  856.685947][ T5929] usb 3-1: new full-speed USB device number 116 using dummy_hcd
[  856.866218][ T5929] usb 3-1: device descriptor read/64, error -71
[  857.075940][ T5959] usb 1-1: new high-speed USB device number 109 using dummy_hcd
[  857.185860][T13470] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  857.225854][ T5959] usb 1-1: Using ep0 maxpacket: 16
[  857.256088][ T5929] usb 3-1: new full-speed USB device number 117 using dummy_hcd
[  857.284036][ T5959] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024
[  857.338745][ T5959] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024
[  857.351724][ T5959] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  857.375989][ T5959] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  857.409697][ T5959] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87
[  857.420394][ T5959] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  857.429941][T13470] usb 6-1: Using ep0 maxpacket: 16
[  857.430593][ T5959] usb 1-1: Product: syz
[  857.443657][T13470] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  857.455437][ T5929] usb 3-1: device descriptor read/64, error -71
[  857.479269][T13470] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  857.482050][ T5959] usb 1-1: Manufacturer: syz
[  857.675967][ T5929] usb usb3-port1: attempt power cycle
[  857.697319][T13470] usb 6-1: config 0 interface 0 has no altsetting 0
[  857.704291][T13470] usb 6-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00
[  857.713542][ T5959] usb 1-1: SerialNumber: syz
[  857.761338][ T5959] usb 1-1: config 0 descriptor??
[  857.764430][T13470] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  857.785400][T13470] usb 6-1: config 0 descriptor??
[  857.903839][T14345] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  857.964434][    C1] port100 1-1:0.0: NFC: Urb failure (status -71)
[  857.991066][ T5235] ldm_validate_partition_table(): Disk read failed.
[  858.025979][ T5929] usb 3-1: new full-speed USB device number 118 using dummy_hcd
[  858.045117][ T5235] Dev loop6: unable to read RDB block 0
[  858.058255][ T5959] port100 1-1:0.0: NFC: Could not get supported command types
[  858.071376][ T5235]  loop6: unable to read partition table
[  858.088967][ T5929] usb 3-1: device descriptor read/8, error -71
[  858.231099][T13470] kye 0003:0458:0138.0029: unknown main item tag 0x0
[  858.248204][ T5959] usb 1-1: USB disconnect, device number 109
[  858.282969][T13470] kye 0003:0458:0138.0029: unknown main item tag 0x0
[  858.325969][ T5929] usb 3-1: new full-speed USB device number 119 using dummy_hcd
[  858.335983][T13470] kye 0003:0458:0138.0029: unknown main item tag 0x0
[  858.371893][T13470] kye 0003:0458:0138.0029: unknown main item tag 0x0
[  858.387410][ T5929] usb 3-1: device descriptor read/8, error -71
[  858.404153][T13470] kye 0003:0458:0138.0029: unknown main item tag 0x0
[  858.440562][T13470] kye 0003:0458:0138.0029: unknown main item tag 0x0
[  858.474536][T13470] kye 0003:0458:0138.0029: unknown main item tag 0x0
[  858.491871][T13470] kye 0003:0458:0138.0029: unknown main item tag 0x0
[  858.503526][T13470] kye 0003:0458:0138.0029: unknown main item tag 0x0
[  858.512643][ T5929] usb usb3-port1: unable to enumerate USB device
[  858.519940][T13470] kye 0003:0458:0138.0029: unknown main item tag 0x0
[  858.530572][T13470] kye 0003:0458:0138.0029: unexpected long global item
[  858.543094][T13470] kye 0003:0458:0138.0029: parse failed
[  858.557939][T13470] kye 0003:0458:0138.0029: probe with driver kye failed with error -22
[  858.587667][T13470] usb 6-1: USB disconnect, device number 6
[  858.595987][ T6032] usb 5-1: new high-speed USB device number 116 using dummy_hcd
[  859.242135][ T6032] usb 5-1: Using ep0 maxpacket: 8
[  859.268825][ T6032] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  859.285903][ T6032] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  859.328278][ T6032] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52
[  859.586011][ T6032] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  859.596679][ T6032] usb 5-1: Product: syz
[  859.601327][ T6032] usb 5-1: Manufacturer: syz
[  859.606857][ T6032] usb 5-1: SerialNumber: syz
[  859.624615][ T6032] usb 5-1: config 0 descriptor??
[  860.114393][ T5959] usb 5-1: USB disconnect, device number 116
[  860.288198][T14390] loop4: detected capacity change from 0 to 7
[  860.298136][T14390] Dev loop4: unable to read RDB block 7
[  860.303749][T14390]  loop4: unable to read partition table
[  860.315505][T14390] loop4: partition table beyond EOD, truncated
[  860.323071][T14390] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5)
[  860.776756][ T5959] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  860.952354][ T5959] usb 6-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00
[  860.964821][ T5959] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  861.139661][ T5959] usb 6-1: config 0 descriptor??
[  861.376781][ T5921] usb 2-1: new high-speed USB device number 104 using dummy_hcd
[  861.748142][ T5921] usb 2-1: config 0 has no interfaces?
[  861.804585][ T5921] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  862.004580][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  862.159672][ T5921] usb 2-1: Product: syz
[  862.163951][ T5921] usb 2-1: Manufacturer: syz
[  862.323283][ T5921] usb 2-1: SerialNumber: syz
[  862.396804][ T5921] usb 2-1: config 0 descriptor??
[  862.992063][ T5959] usbhid 6-1:0.0: can't add hid device: -71
[  863.006006][ T5929] usb 5-1: new full-speed USB device number 117 using dummy_hcd
[  863.111475][ T5959] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  863.142631][ T5959] usb 6-1: USB disconnect, device number 7
[  863.306524][ T5929] usb 5-1: config 0 has an invalid interface number: 176 but max is 2
[  863.386243][ T5929] usb 5-1: config 0 has an invalid interface number: 6 but max is 2
[  863.399205][ T5929] usb 5-1: config 0 has no interface number 0
[  863.405624][ T5929] usb 5-1: config 0 has no interface number 1
[  863.412328][ T5929] usb 5-1: too many endpoints for config 0 interface 6 altsetting 255: 255, using maximum allowed: 30
[  863.424716][ T5929] usb 5-1: config 0 interface 6 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  863.440252][ T5929] usb 5-1: config 0 interface 6 has no altsetting 0
[  863.447574][ T5929] usb 5-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[  863.457229][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  863.469245][ T5929] usb 5-1: config 0 descriptor??
[  863.796735][T14426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  863.836602][T14426] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  863.885604][ T5929] usb 5-1: Could not set interface, error -71
[  863.991574][ T5929] usb 5-1: selecting invalid altsetting 0
[  864.029292][ T5929] usb 5-1: Could not set interface, error -22
[  864.083588][ T5929] usb 5-1: USB disconnect, device number 117
[  864.361060][T14446] loop4: detected capacity change from 0 to 7
[  864.423342][T14446] Dev loop4: unable to read RDB block 7
[  864.476898][T14446]  loop4: unable to read partition table
[  864.505085][T14446] loop4: partition table beyond EOD, truncated
[  864.545962][ T5929] usb 2-1: USB disconnect, device number 104
[  864.560825][T14446] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5)
[  864.952215][T14471] netlink: 'syz.0.2448': attribute type 10 has an invalid length.
[  865.646004][T13470] usb 2-1: new high-speed USB device number 105 using dummy_hcd
[  865.776414][T13470] usb 2-1: device descriptor read/64, error -71
[  866.205138][T13470] usb 2-1: new high-speed USB device number 106 using dummy_hcd
[  866.295898][ T5959] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  866.415979][T13470] usb 2-1: device descriptor read/64, error -71
[  866.447359][ T5921] usb 1-1: new high-speed USB device number 110 using dummy_hcd
[  866.471436][ T5959] usb 6-1: Using ep0 maxpacket: 16
[  866.480057][ T5959] usb 6-1: config 0 has no interfaces?
[  866.489713][ T5959] usb 6-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb
[  866.499040][ T5959] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  866.523322][ T5959] usb 6-1: Product: syz
[  866.536145][T13470] usb usb2-port1: attempt power cycle
[  866.543634][ T5959] usb 6-1: Manufacturer: syz
[  866.553782][ T5959] usb 6-1: SerialNumber: syz
[  866.566383][ T5959] usb 6-1: config 0 descriptor??
[  866.616673][ T5921] usb 1-1: Using ep0 maxpacket: 8
[  866.633378][ T5921] usb 1-1: config 135 has an invalid interface number: 230 but max is 0
[  866.655885][ T5921] usb 1-1: config 135 has an invalid descriptor of length 179, skipping remainder of the config
[  866.678894][ T5921] usb 1-1: config 135 has no interface number 0
[  866.705985][ T5921] usb 1-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  866.739591][ T5921] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  866.751073][T14503] loop4: detected capacity change from 0 to 7
[  866.758374][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  866.766838][T14503] Dev loop4: unable to read RDB block 7
[  866.773214][T14503]  loop4: unable to read partition table
[  866.781864][T14503] loop4: partition table beyond EOD, truncated
[  866.785481][ T5921] usb 1-1: Product: syz
[  866.800697][ T5921] usb 1-1: Manufacturer: syz
[  866.805436][ T5921] usb 1-1: SerialNumber: syz
[  866.810821][T14503] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5)
[  866.833583][ T5921] uvcvideo 1-1:135.230: probe with driver uvcvideo failed with error -22
[  866.937203][T13470] usb 2-1: new high-speed USB device number 107 using dummy_hcd
[  866.996586][T13470] usb 2-1: device descriptor read/8, error -71
[  867.031846][ T5929] usb 6-1: USB disconnect, device number 8
[  867.246394][T13470] usb 2-1: new high-speed USB device number 108 using dummy_hcd
[  867.296907][T13470] usb 2-1: device descriptor read/8, error -71
[  867.329433][T14523] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  867.351733][T14525] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2462'.
[  867.417162][T13470] usb usb2-port1: unable to enumerate USB device
[  868.946863][ T5921] usb 1-1: USB disconnect, device number 110
[  869.538129][ T5856] usb 1-1: new high-speed USB device number 111 using dummy_hcd
[  869.736015][ T5856] usb 1-1: Using ep0 maxpacket: 32
[  869.762919][ T5856] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  869.802134][ T5856] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  869.833807][ T5856] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  869.865922][ T5856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  869.924114][ T5856] usb 1-1: config 0 descriptor??
[  869.965906][ T5856] hub 1-1:0.0: USB hub found
[  870.311664][ T5856] hub 1-1:0.0: config failed, can't read hub descriptor (err -22)
[  870.325993][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  870.390907][ T5856] usbhid 1-1:0.0: can't add hid device: -71
[  870.426707][T14594] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2477'.
[  870.450610][ T5856] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  870.485956][ T5929] usb 3-1: new high-speed USB device number 120 using dummy_hcd
[  870.547661][ T5856] usb 1-1: USB disconnect, device number 111
[  870.718207][ T5929] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  870.748141][ T5929] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  870.785849][ T5929] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  870.845837][ T5959] usb 2-1: new high-speed USB device number 109 using dummy_hcd
[  870.899762][ T5929] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  870.995562][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  871.083285][ T5929] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  871.152207][ T5929] usb 3-1: invalid MIDI out EP 0
[  871.184195][ T5959] usb 2-1: config 0 has no interfaces?
[  871.297298][ T5959] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  871.318428][ T5959] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  871.483862][ T5959] usb 2-1: Product: syz
[  871.504145][ T5959] usb 2-1: Manufacturer: syz
[  871.651680][ T5959] usb 2-1: SerialNumber: syz
[  871.693301][ T5959] usb 2-1: config 0 descriptor??
[  872.141532][T11068] udevd[11068]: setting mode of /dev/snd/controlC3 to 020660 failed: No such file or directory
[  872.308071][T11068] udevd[11068]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory
[  872.386747][ T5929] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22
[  872.675234][ T5872] Bluetooth: hci4: ISO packet for unknown connection handle 0
[  873.030431][T14633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2482'.
[  873.232608][ T5959] usb 2-1: USB disconnect, device number 109
[  873.666094][T14632] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  873.776789][T14632] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  873.824834][ T5856] usb 3-1: USB disconnect, device number 120
[  874.078949][T14632] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  874.549618][ T5929] usb 5-1: new high-speed USB device number 118 using dummy_hcd
[  874.744102][ T5929] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.6e
[  874.753828][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  874.776315][ T5929] usb 5-1: Product: syz
[  874.804346][ T5929] usb 5-1: Manufacturer: syz
[  874.849438][ T5929] usb 5-1: SerialNumber: syz
[  874.883531][ T5929] usb 5-1: config 0 descriptor??
[  875.215926][ T5872] Bluetooth: hci4: command 0x0c1a tx timeout
[  875.280076][T14662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  875.328836][T14662] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  875.449357][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[  875.456315][ T1305] ieee802154 phy1 wpan1: encryption failed: -22
[  875.517204][T14663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  875.527706][T13470] usb 1-1: new high-speed USB device number 112 using dummy_hcd
[  875.652008][T14663] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  875.986340][ T5929] usb 5-1: Firmware version (0.0) predates our first public release.
[  875.996422][T14651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  876.012417][ T5929] usb 5-1: Please update to version 0.2 or newer
[  876.019192][T13470] usb 1-1: device not accepting address 112, error -71
[  876.040572][T14651] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  876.083417][T14679] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2492'.
[  876.167516][   T30] audit: type=1326 audit(1754816467.049:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14678 comm="syz.0.2492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a2638ebe9 code=0x7ffc0000
[  876.244437][T14680] netlink: 'syz.2.2493': attribute type 23 has an invalid length.
[  876.250220][   T30] audit: type=1326 audit(1754816467.049:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14678 comm="syz.0.2492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f0a2638ebe9 code=0x7ffc0000
[  876.323599][   T30] audit: type=1326 audit(1754816467.049:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14678 comm="syz.0.2492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a2638ebe9 code=0x7ffc0000
[  876.323642][   T30] audit: type=1326 audit(1754816467.079:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14678 comm="syz.0.2492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0a2638ebe9 code=0x7ffc0000
[  876.323696][   T30] audit: type=1326 audit(1754816467.079:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14678 comm="syz.0.2492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a2638ebe9 code=0x7ffc0000
[  876.323730][   T30] audit: type=1326 audit(1754816467.079:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14678 comm="syz.0.2492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f0a2638ebe9 code=0x7ffc0000
[  876.363605][   T30] audit: type=1326 audit(1754816467.229:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14677 comm="syz.2.2493" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd8add8ebe9 code=0x0
[  876.691001][    C1] vkms_vblank_simulate: vblank timer overrun
[  877.148458][ T5929] usb 5-1: USB disconnect, device number 118
[  877.296478][ T5872] Bluetooth: hci4: command 0x0c1a tx timeout
[  878.046050][ T5921] usb 2-1: new high-speed USB device number 110 using dummy_hcd
[  878.185205][T14718] usb usb8: usbfs: process 14718 (syz.2.2501) did not claim interface 0 before use
[  878.218230][ T5921] usb 2-1: device descriptor read/64, error -71
[  878.442439][T14723] ip6tnl2: entered promiscuous mode
[  878.586537][ T5921] usb 2-1: new high-speed USB device number 111 using dummy_hcd
[  878.626434][T14723] ip6tnl2: entered allmulticast mode
[  878.643225][T14726] sctp: [Deprecated]: syz.2.2504 (pid 14726) Use of int in maxseg socket option.
[  878.643225][T14726] Use struct sctp_assoc_value instead
[  878.755810][ T5921] usb 2-1: device descriptor read/64, error -71
[  878.887575][ T5921] usb usb2-port1: attempt power cycle
[  879.130449][T14733] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2507'.
[  879.156722][T14733] fuse: Bad value for 'fd'
[  879.203730][T14733] gtp1: entered promiscuous mode
[  879.223217][T14736] bridge4: the hash_elasticity option has been deprecated and is always 16
[  879.261946][T14737] xt_limit: Overflow, try lower: 271964/0
[  879.366615][ T5872] Bluetooth: hci4: command 0x0c1a tx timeout
[  879.405873][ T5921] usb 2-1: new high-speed USB device number 112 using dummy_hcd
[  879.438122][ T5921] usb 2-1: device descriptor read/8, error -71
[  879.496188][ T1213] usb 1-1: new high-speed USB device number 114 using dummy_hcd
[  879.688835][ T1213] usb 1-1: Using ep0 maxpacket: 8
[  879.722117][ T1213] usb 1-1: unable to get BOS descriptor or descriptor too short
[  879.748630][ T5921] usb 2-1: new high-speed USB device number 113 using dummy_hcd
[  879.757877][ T1213] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E
[  879.786925][ T5921] usb 2-1: device descriptor read/8, error -71
[  879.831723][ T1213] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[  879.896560][ T5921] usb usb2-port1: unable to enumerate USB device
[  879.956045][ T1213] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  879.966712][ T1213] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  879.977105][ T1213] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0
[  880.162848][ T1213] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0
[  880.303315][ T1213] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  880.365909][ T1213] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  880.409896][ T1213] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[  880.429322][ T1213] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  880.468034][ T1213] usb 1-1: Product: syz
[  880.475668][ T1213] usb 1-1: Manufacturer: syz
[  880.492819][ T1213] usb 1-1: SerialNumber: syz
[  880.531161][ T1213] usb 1-1: config 0 descriptor??
[  880.580407][ T1213] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  880.644046][ T1213] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2
[  880.812717][T11068] udevd[11068]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  880.838288][ T1213] usb 1-1: USB disconnect, device number 114
[  882.576038][ T5929] usb 2-1: new full-speed USB device number 114 using dummy_hcd
[  882.796380][ T5929] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  882.835431][ T5929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  882.886067][ T5929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  882.946027][ T5929] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  882.965891][T13470] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  883.010799][ T5929] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  883.065381][ T5929] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  883.073989][ T1213] usb 3-1: new high-speed USB device number 121 using dummy_hcd
[  883.105196][ T5929] usb 2-1: Manufacturer: syz
[  883.135461][ T5929] usb 2-1: config 0 descriptor??
[  883.166147][T14812] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2522'.
[  883.170456][T13470] usb 6-1: Using ep0 maxpacket: 16
[  883.193041][T13470] usb 6-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85
[  883.215966][ T1213] usb 3-1: device descriptor read/64, error -71
[  883.243655][T13470] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  883.283264][T13470] usb 6-1: config 0 descriptor??
[  883.536171][ T1213] usb 3-1: new high-speed USB device number 122 using dummy_hcd
[  883.546112][T13470] usb 6-1: string descriptor 0 read error: -71
[  883.570356][T13470] usb 6-1: interface 1 not found
[  883.597355][T13470] usb 6-1: USB disconnect, device number 9
[  883.690684][T14819] tun0: tun_chr_ioctl cmd 2147767517
[  883.705836][ T1213] usb 3-1: device descriptor read/64, error -71
[  883.746505][ T5929] rc_core: IR keymap rc-hauppauge not found
[  883.752513][ T5929] Registered IR keymap rc-empty
[  883.787884][ T5929] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  883.815982][ T5929] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  883.826284][ T1213] usb usb3-port1: attempt power cycle
[  883.867023][ T5929] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  883.920860][ T5929] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input51
[  883.974653][ T5929] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  884.006180][ T5929] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  884.028274][T14825] sctp: [Deprecated]: syz.4.2524 (pid 14825) Use of int in maxseg socket option.
[  884.028274][T14825] Use struct sctp_assoc_value instead
[  884.028278][ T5929] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  884.110770][ T5929] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  884.159094][ T5929] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  884.196447][ T1213] usb 3-1: new high-speed USB device number 123 using dummy_hcd
[  884.207027][ T5929] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  884.240427][ T5929] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  884.256217][ T1213] usb 3-1: device descriptor read/8, error -71
[  884.298743][ T5929] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  884.349001][ T5929] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  884.391642][ T5929] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  884.447046][ T5929] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  884.496554][ T5929] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  884.526011][ T1213] usb 3-1: new high-speed USB device number 124 using dummy_hcd
[  884.576833][ T1213] usb 3-1: device descriptor read/8, error -71
[  884.706354][ T1213] usb usb3-port1: unable to enumerate USB device
[  885.096424][ T1213] usb 6-1: new low-speed USB device number 10 using dummy_hcd
[  885.106693][   T30] audit: type=1326 audit(1754816475.989:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14816 comm="syz.0.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a2638ebe9 code=0x7fc00000
[  885.151461][   T30] audit: type=1326 audit(1754816475.989:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14816 comm="syz.0.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f0a2638ebe9 code=0x7fc00000
[  885.175364][   T30] audit: type=1326 audit(1754816475.989:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14816 comm="syz.0.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a2638ebe9 code=0x7fc00000
[  885.198355][    C0] vkms_vblank_simulate: vblank timer overrun
[  885.226030][   T30] audit: type=1326 audit(1754816475.989:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14816 comm="syz.0.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a2638ebe9 code=0x7fc00000
[  885.248508][    C0] vkms_vblank_simulate: vblank timer overrun
[  885.269289][   T30] audit: type=1326 audit(1754816475.989:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14816 comm="syz.0.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a2638ebe9 code=0x7fc00000
[  885.308330][ T1213] usb 6-1: Invalid ep0 maxpacket: 32
[  885.309481][   T30] audit: type=1326 audit(1754816475.989:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14816 comm="syz.0.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a2638ebe9 code=0x7fc00000
[  885.432876][ T5929] usb 2-1: USB disconnect, device number 114
[  885.471099][   T30] audit: type=1326 audit(1754816475.989:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14816 comm="syz.0.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a2638ebe9 code=0x7fc00000
[  885.514610][   T30] audit: type=1326 audit(1754816475.989:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14816 comm="syz.0.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a2638ebe9 code=0x7fc00000
[  885.542854][   T30] audit: type=1326 audit(1754816475.989:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14816 comm="syz.0.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a2638ebe9 code=0x7fc00000
[  885.565839][ T1213] usb 6-1: new low-speed USB device number 11 using dummy_hcd
[  885.586964][   T30] audit: type=1326 audit(1754816475.989:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14816 comm="syz.0.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a2638ebe9 code=0x7fc00000
[  885.715909][ T1213] usb 6-1: Invalid ep0 maxpacket: 32
[  885.721901][ T1213] usb usb6-port1: attempt power cycle
[  886.089136][ T1213] usb 6-1: new low-speed USB device number 12 using dummy_hcd
[  886.148003][ T1213] usb 6-1: Invalid ep0 maxpacket: 32
[  886.286144][ T1213] usb 6-1: new low-speed USB device number 13 using dummy_hcd
[  886.327562][ T1213] usb 6-1: Invalid ep0 maxpacket: 32
[  886.333384][ T1213] usb usb6-port1: unable to enumerate USB device
[  887.255919][ T5856] usb 1-1: new full-speed USB device number 115 using dummy_hcd
[  887.449602][ T5856] usb 1-1: unable to get BOS descriptor or descriptor too short
[  887.481901][ T5856] usb 1-1: not running at top speed; connect to a high speed hub
[  887.511888][ T5856] usb 1-1: config 253 has an invalid descriptor of length 32, skipping remainder of the config
[  887.536053][ T5856] usb 1-1: config 253 interface 0 altsetting 57 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  887.605777][ T5856] usb 1-1: config 253 interface 0 has no altsetting 0
[  887.643525][ T5856] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  887.654215][ T5856] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  887.706071][ T5856] usb 1-1: Product: syz
[  887.777915][ T5856] usb 1-1: Manufacturer: syz
[  887.782739][ T5856] usb 1-1: SerialNumber: syz
[  888.083899][T14887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  888.093340][T14887] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  888.125934][ T1213] usb 2-1: new high-speed USB device number 115 using dummy_hcd
[  888.422444][T14911] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[  888.453246][ T1213] usb 2-1: config 0 has an invalid interface number: 117 but max is 0
[  888.467152][ T1213] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  888.502204][ T1213] usb 2-1: config 0 has no interface number 0
[  888.521034][ T1213] usb 2-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30
[  888.572302][T14911] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  888.583360][ T1213] usb 2-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 239
[  888.685565][ T1213] usb 2-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46
[  888.709156][ T1213] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  888.914396][ T1213] usb 2-1: Product: syz
[  888.930553][ T1213] usb 2-1: Manufacturer: syz
[  888.943199][ T1213] usb 2-1: SerialNumber: syz
[  888.966622][ T1213] usb 2-1: config 0 descriptor??
[  889.013001][ T1213] HFC-S_USB 2-1:0.117: probe with driver HFC-S_USB failed with error -5
[  889.290956][ T1213] usb 2-1: USB disconnect, device number 115
[  889.695430][ T5856] cdc_ether 1-1:253.0: skipping garbage
[  889.766326][ T5856] usb 1-1: bad CDC descriptors
[  889.850366][ T5856] usb 1-1: USB disconnect, device number 115
[  890.683461][T14959] loop4: detected capacity change from 0 to 7
[  890.729856][T14959] Dev loop4: unable to read RDB block 7
[  890.737986][T14959]  loop4: unable to read partition table
[  890.809746][T14959] loop4: partition table beyond EOD, truncated
[  890.817777][T14959] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5)
[  891.712352][T14982] 8021q: adding VLAN 0 to HW filter on device batadv1
[  891.722459][T14982] team0: Port device batadv1 added
[  891.748240][T14982] ptrace attach of "./syz-executor exec"[5879] was attempted by "./syz-executor exec"[14982]
[  892.703859][T15000] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2562'.
[  892.728986][T15000] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2562'.
[  892.951910][T15000] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2562'.
[  892.975819][ T5856] usb 5-1: new high-speed USB device number 119 using dummy_hcd
[  893.159998][ T5856] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  893.265781][ T5856] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  893.335862][ T5856] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  893.366419][ T5856] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  893.423287][T15010] loop4: detected capacity change from 0 to 7
[  893.441109][T15010] Dev loop4: unable to read RDB block 7
[  893.447089][T15010]  loop4: unable to read partition table
[  893.463987][T15010] loop4: partition table beyond EOD, truncated
[  893.471378][T15009] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2564'.
[  893.480529][T15010] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5)
[  893.489871][ T5856] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  893.489904][ T5856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  893.493267][ T5856] usb 5-1: config 0 descriptor??
[  893.589168][T15009] netlink: 'syz.5.2564': attribute type 20 has an invalid length.
[  893.678904][T15009] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2564'.
[  893.702288][T15012] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  894.064267][ T5856] plantronics 0003:047F:FFFF.002A: ignoring exceeding usage max
[  894.142919][ T5856] plantronics 0003:047F:FFFF.002A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  894.338379][ T5856] usb 5-1: USB disconnect, device number 119
[  895.003543][T15026] fido_id[15026]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  896.067070][T15055] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2572'.
[  896.547384][T15063] netlink: 15 bytes leftover after parsing attributes in process `syz.5.2575'.
[  896.611656][T15068] loop4: detected capacity change from 0 to 7
[  896.632230][T15068] Dev loop4: unable to read RDB block 7
[  896.656717][T15068]  loop4: unable to read partition table
[  896.656879][T15068] loop4: partition table beyond EOD, truncated
[  896.656906][T15068] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5)
[  896.666551][T15069] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2577'.
[  896.699164][T15072] kernel read not supported for file /½ Iqî"ûIvÃ
Qhþµ�“3ž�JÇÈyûxÐîÃüv÷Lª=QÿW-™.	Gaǹ”�óW£ (pid: 15072 comm: syz.2.2574)
[  896.738984][   T30] kauditd_printk_skb: 59 callbacks suppressed
[  896.739007][   T30] audit: type=1800 audit(1754816487.579:556): pid=15072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2574" name=BD16204971EE22FB4976C3015168FEB51D9093339E8F064AC7C879FB78D0EEC3FC76F74CAA3D5118FF572D05992E1A09476115C7B9949DF357A3 dev="mqueue" ino=58444 res=0 errno=0
[  896.839960][    C0] vkms_vblank_simulate: vblank timer overrun
[  897.235390][T15085] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2581'.
[  897.275992][ T5856] usb 2-1: new full-speed USB device number 116 using dummy_hcd
[  897.321945][ T5959] usb 1-1: new high-speed USB device number 116 using dummy_hcd
[  897.439038][ T5856] usb 2-1: unable to get BOS descriptor or descriptor too short
[  897.466955][ T5856] usb 2-1: not running at top speed; connect to a high speed hub
[  897.487068][ T5856] usb 2-1: config 9 has an invalid interface number: 2 but max is 0
[  897.495369][ T5856] usb 2-1: config 9 has no interface number 0
[  897.501694][ T5856] usb 2-1: config 9 interface 2 altsetting 127 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  897.513505][ T5856] usb 2-1: config 9 interface 2 has no altsetting 0
[  897.521291][ T5959] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  897.539105][ T5959] usb 1-1: config 1 interface 0 has no altsetting 1
[  897.716703][ T5959] usb 1-1: New USB device found, idVendor=0536, idProduct=a4a8, bcdDevice= 0.40
[  897.739928][ T5856] usb 2-1: New USB device found, idVendor=04f1, idProduct=3008, bcdDevice=f5.2a
[  897.752837][ T5959] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  897.796869][ T5856] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  897.869137][ T5959] usb 1-1: Product: syz
[  897.898510][ T5959] usb 1-1: Manufacturer: syz
[  897.903174][ T5959] usb 1-1: SerialNumber: syz
[  897.908071][ T5856] usb 2-1: Product: syz
[  897.912325][ T5856] usb 2-1: Manufacturer: syz
[  897.922224][ T5856] usb 2-1: SerialNumber: syz
[  898.131719][ T5921] usb 1-1: USB disconnect, device number 116
[  898.162178][T15097] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  898.783824][T15103] loop4: detected capacity change from 0 to 7
[  898.799007][T15105] bridge_slave_1: left allmulticast mode
[  898.810124][T15105] bridge_slave_1: left promiscuous mode
[  898.842636][T15105] bridge0: port 2(bridge_slave_1) entered disabled state
[  898.854492][T15103] Dev loop4: unable to read RDB block 7
[  898.864195][T15103]  loop4: unable to read partition table
[  898.876633][T15105] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  898.917368][T15103] loop4: partition table beyond EOD, truncated
[  898.928914][T15103] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5)
[  899.845798][ T5929] usb 1-1: new full-speed USB device number 117 using dummy_hcd
[  899.942385][ T5856] asix 2-1:9.2 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  899.972268][ T5856] asix 2-1:9.2: probe with driver asix failed with error -71
[  900.000895][ T5856] usb 2-1: USB disconnect, device number 116
[  900.032206][ T5929] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  900.057766][ T5929] usb 1-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d
[  900.068298][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  900.081023][T15135] tipc: Started in network mode
[  900.106033][ T5929] usb 1-1: Product: syz
[  900.110349][ T5929] usb 1-1: Manufacturer: syz
[  900.125671][ T5929] usb 1-1: SerialNumber: syz
[  900.163246][T15135] tipc: Node identity 7f000001, cluster identity 4711
[  900.200518][T15135] tipc: Enabled bearer <udp:syz2>, priority 10
[  900.402527][ T5929] usb 1-1: selecting invalid altsetting 1
[  900.636571][ T5929] LME2510(C): Firmware Status: 00 00 00 00 00 00
[  900.636695][ T5929] dvb_usb_lmedm04 1-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22
[  900.804927][   T30] audit: type=1326 audit(1754816491.679:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15145 comm="syz.1.2598" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f479e58ebe9 code=0x0
[  900.826899][    C1] vkms_vblank_simulate: vblank timer overrun
[  900.875258][T15147] netlink: 'syz.1.2598': attribute type 8 has an invalid length.
[  901.206023][ T5856] tipc: Node number set to 2130706433
[  901.700240][ T5856] usb 5-1: new high-speed USB device number 120 using dummy_hcd
[  901.727353][T15161] FAULT_INJECTION: forcing a failure.
[  901.727353][T15161] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  901.740754][T15161] CPU: 1 UID: 0 PID: 15161 Comm: syz.1.2603 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(full) 
[  901.740787][T15161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  901.740801][T15161] Call Trace:
[  901.740815][T15161]  <TASK>
[  901.740825][T15161]  dump_stack_lvl+0x189/0x250
[  901.740862][T15161]  ? __pfx____ratelimit+0x10/0x10
[  901.740892][T15161]  ? __pfx_dump_stack_lvl+0x10/0x10
[  901.740917][T15161]  ? __pfx__printk+0x10/0x10
[  901.740940][T15161]  ? __might_fault+0xb0/0x130
[  901.740970][T15161]  should_fail_ex+0x414/0x560
[  901.740996][T15161]  _copy_from_user+0x2d/0xb0
[  901.741014][T15161]  keyctl_pkey_params_get_2+0x107/0x480
[  901.741035][T15161]  ? __pfx_keyctl_pkey_params_get_2+0x10/0x10
[  901.741055][T15161]  ? get_pid_task+0x20/0x1f0
[  901.741085][T15161]  keyctl_pkey_e_d_s+0xb9/0x320
[  901.741104][T15161]  ? __pfx_keyctl_pkey_e_d_s+0x10/0x10
[  901.741132][T15161]  __se_sys_keyctl+0x469/0x910
[  901.741156][T15161]  ? __pfx___se_sys_keyctl+0x10/0x10
[  901.741178][T15161]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  901.741205][T15161]  ? __fget_files+0x3a0/0x420
[  901.741234][T15161]  ? fput+0xa0/0xd0
[  901.741250][T15161]  ? ksys_write+0x22a/0x250
[  901.741273][T15161]  ? __pfx_ksys_write+0x10/0x10
[  901.741292][T15161]  ? rcu_is_watching+0x15/0xb0
[  901.741311][T15161]  ? do_syscall_64+0xbe/0x3b0
[  901.741332][T15161]  ? __x64_sys_keyctl+0x20/0xc0
[  901.741354][T15161]  do_syscall_64+0xfa/0x3b0
[  901.741375][T15161]  ? lockdep_hardirqs_on+0x9c/0x150
[  901.741396][T15161]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  901.741411][T15161]  ? clear_bhb_loop+0x60/0xb0
[  901.741430][T15161]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  901.741445][T15161] RIP: 0033:0x7f479e58ebe9
[  901.741468][T15161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  901.741481][T15161] RSP: 002b:00007f479f4ac038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[  901.741499][T15161] RAX: ffffffffffffffda RBX: 00007f479e7b5fa0 RCX: 00007f479e58ebe9
[  901.741511][T15161] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000001b
[  901.741520][T15161] RBP: 00007f479f4ac090 R08: 0000000000000000 R09: 0000000000000000
[  901.741530][T15161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  901.741540][T15161] R13: 00007f479e7b6038 R14: 00007f479e7b5fa0 R15: 00007f479e8dfa28
[  901.741564][T15161]  </TASK>
[  901.985064][    C1] vkms_vblank_simulate: vblank timer overrun
[  902.123233][ T5856] usb 5-1: Using ep0 maxpacket: 32
[  902.130536][ T5856] usb 5-1: config 0 interface 0 has no altsetting 0
[  902.143820][ T5856] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  902.160428][ T5856] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  902.168626][ T5856] usb 5-1: Product: syz
[  902.173555][ T5856] usb 5-1: Manufacturer: syz
[  902.178264][ T5856] usb 5-1: SerialNumber: syz
[  902.186027][ T5856] usb 5-1: config 0 descriptor??
[  902.407772][ T1213] usb 3-1: new high-speed USB device number 125 using dummy_hcd
[  902.458883][T13470] usb 1-1: USB disconnect, device number 117
[  902.566062][ T1213] usb 3-1: Using ep0 maxpacket: 8
[  902.570784][ T5856] gs_usb 5-1:0.0: Couldn't send data format (err=-71)
[  902.591387][ T1213] usb 3-1: config index 0 descriptor too short (expected 28277, got 36)
[  902.599414][ T5856] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71
[  902.608847][ T1213] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  902.640031][ T1213] usb 3-1: config 0 has no interfaces?
[  902.653971][ T5856] usb 5-1: USB disconnect, device number 120
[  902.656988][ T1213] usb 3-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00
[  902.690070][ T1213] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  902.709958][ T1213] usb 3-1: config 0 descriptor??
[  903.566203][ T5856] usb 1-1: new high-speed USB device number 118 using dummy_hcd
[  903.815491][ T5856] usb 1-1: Using ep0 maxpacket: 8
[  903.876974][ T5856] usb 1-1: config 135 has an invalid interface number: 230 but max is 0
[  903.886021][ T5856] usb 1-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[  903.956948][ T5856] usb 1-1: config 135 has no interface number 0
[  903.994103][ T5856] usb 1-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  904.043002][ T5856] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  904.052556][ T5856] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  904.061031][ T5856] usb 1-1: Product: syz
[  904.065453][ T5856] usb 1-1: Manufacturer: syz
[  904.070724][ T5856] usb 1-1: SerialNumber: syz
[  904.088229][ T5856] usb 1-1: Found UVC 0.00 device syz (18ec:3288)
[  904.095101][ T5856] usb 1-1: No valid video chain found.
[  904.216524][ T1213] usb 5-1: new high-speed USB device number 121 using dummy_hcd
[  904.322602][T15191] blktrace: Concurrent blktraces are not allowed on sg0
[  904.456057][ T1213] usb 5-1: device descriptor read/64, error -71
[  904.698613][ T1213] usb 5-1: new high-speed USB device number 122 using dummy_hcd
[  904.835937][ T1213] usb 5-1: device descriptor read/64, error -71
[  904.946269][ T1213] usb usb5-port1: attempt power cycle
[  905.110479][T13470] usb 3-1: USB disconnect, device number 125
[  905.269303][T15202] FAULT_INJECTION: forcing a failure.
[  905.269303][T15202] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  905.286017][ T1213] usb 5-1: new high-speed USB device number 123 using dummy_hcd
[  905.303332][T15202] CPU: 0 UID: 0 PID: 15202 Comm: syz.1.2617 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(full) 
[  905.303367][T15202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  905.303430][T15202] Call Trace:
[  905.303440][T15202]  <TASK>
[  905.303450][T15202]  dump_stack_lvl+0x189/0x250
[  905.303484][T15202]  ? __pfx____ratelimit+0x10/0x10
[  905.303515][T15202]  ? __pfx_dump_stack_lvl+0x10/0x10
[  905.303542][T15202]  ? __pfx__printk+0x10/0x10
[  905.303587][T15202]  should_fail_ex+0x414/0x560
[  905.303623][T15202]  _copy_to_user+0x31/0xb0
[  905.303651][T15202]  simple_read_from_buffer+0xe1/0x170
[  905.303689][T15202]  proc_fail_nth_read+0x1b3/0x220
[  905.303718][T15202]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  905.303747][T15202]  ? rw_verify_area+0x2a6/0x4d0
[  905.303774][T15202]  ? __lock_acquire+0xab9/0xd20
[  905.303805][T15202]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  905.303832][T15202]  vfs_read+0x200/0xa30
[  905.303860][T15202]  ? fdget_pos+0x247/0x320
[  905.303885][T15202]  ? __pfx___mutex_lock+0x10/0x10
[  905.303917][T15202]  ? __pfx_vfs_read+0x10/0x10
[  905.303947][T15202]  ? __fget_files+0x2a/0x420
[  905.303986][T15202]  ? __fget_files+0x3a0/0x420
[  905.304018][T15202]  ? __fget_files+0x2a/0x420
[  905.304062][T15202]  ksys_read+0x145/0x250
[  905.304094][T15202]  ? __pfx_ksys_read+0x10/0x10
[  905.304120][T15202]  ? rcu_is_watching+0x15/0xb0
[  905.304149][T15202]  ? do_syscall_64+0xbe/0x3b0
[  905.304189][T15202]  do_syscall_64+0xfa/0x3b0
[  905.304219][T15202]  ? lockdep_hardirqs_on+0x9c/0x150
[  905.304248][T15202]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  905.304271][T15202]  ? clear_bhb_loop+0x60/0xb0
[  905.304299][T15202]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  905.304320][T15202] RIP: 0033:0x7f479e58d5fc
[  905.304340][T15202] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  905.304359][T15202] RSP: 002b:00007f479f4ac030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  905.304390][T15202] RAX: ffffffffffffffda RBX: 00007f479e7b5fa0 RCX: 00007f479e58d5fc
[  905.304407][T15202] RDX: 000000000000000f RSI: 00007f479f4ac0a0 RDI: 0000000000000003
[  905.304422][T15202] RBP: 00007f479f4ac090 R08: 0000000000000000 R09: 0000000000000000
[  905.304443][T15202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  905.304457][T15202] R13: 00007f479e7b6038 R14: 00007f479e7b5fa0 R15: 00007f479e8dfa28
[  905.304492][T15202]  </TASK>
[  905.631601][ T1213] usb 5-1: device descriptor read/8, error -71
[  905.692943][T15207] FAULT_INJECTION: forcing a failure.
[  905.692943][T15207] name failslab, interval 1, probability 0, space 0, times 0
[  905.707040][T15207] CPU: 0 UID: 0 PID: 15207 Comm: syz.1.2619 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(full) 
[  905.707072][T15207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  905.707086][T15207] Call Trace:
[  905.707095][T15207]  <TASK>
[  905.707104][T15207]  dump_stack_lvl+0x189/0x250
[  905.707149][T15207]  ? __pfx____ratelimit+0x10/0x10
[  905.707180][T15207]  ? __pfx_dump_stack_lvl+0x10/0x10
[  905.707206][T15207]  ? __pfx__printk+0x10/0x10
[  905.707238][T15207]  ? __pfx___might_resched+0x10/0x10
[  905.707259][T15207]  ? fs_reclaim_acquire+0x7d/0x100
[  905.707298][T15207]  should_fail_ex+0x414/0x560
[  905.707330][T15207]  should_failslab+0xa8/0x100
[  905.707364][T15207]  __kmalloc_noprof+0xcb/0x4f0
[  905.707403][T15207]  ? tomoyo_encode+0x28b/0x550
[  905.707428][T15207]  tomoyo_encode+0x28b/0x550
[  905.707455][T15207]  tomoyo_realpath_from_path+0x58d/0x5d0
[  905.707479][T15207]  ? tomoyo_domain+0xd9/0x130
[  905.707506][T15207]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  905.707538][T15207]  tomoyo_path_number_perm+0x1e8/0x5a0
[  905.707572][T15207]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  905.707607][T15207]  ? sb_end_write+0xe9/0x1c0
[  905.707629][T15207]  ? vfs_write+0x956/0xb30
[  905.707697][T15207]  ? ksys_write+0x1e1/0x250
[  905.707734][T15207]  security_file_ioctl+0xcb/0x2d0
[  905.707769][T15207]  __se_sys_ioctl+0x47/0x170
[  905.707800][T15207]  do_syscall_64+0xfa/0x3b0
[  905.707838][T15207]  ? lockdep_hardirqs_on+0x9c/0x150
[  905.707867][T15207]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  905.707890][T15207]  ? clear_bhb_loop+0x60/0xb0
[  905.707915][T15207]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  905.707936][T15207] RIP: 0033:0x7f479e58ebe9
[  905.707956][T15207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  905.707975][T15207] RSP: 002b:00007f479f4ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  905.707998][T15207] RAX: ffffffffffffffda RBX: 00007f479e7b5fa0 RCX: 00007f479e58ebe9
[  905.708015][T15207] RDX: 0000000000000000 RSI: 0000000000008933 RDI: 0000000000000004
[  905.708028][T15207] RBP: 00007f479f4ac090 R08: 0000000000000000 R09: 0000000000000000
[  905.708042][T15207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  905.708056][T15207] R13: 00007f479e7b6038 R14: 00007f479e7b5fa0 R15: 00007f479e8dfa28
[  905.708091][T15207]  </TASK>
[  905.708259][T15207] ERROR: Out of memory at tomoyo_realpath_from_path.
[  906.107547][ T1213] usb 5-1: new high-speed USB device number 124 using dummy_hcd
[  906.121885][T15212] @: renamed from vlan0 (while UP)
[  906.137212][ T1213] usb 5-1: device descriptor read/8, error -71
[  906.153801][T15212] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2621'.
[  906.169581][T15212] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2621'.
[  906.179936][T15212] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2621'.
[  906.246370][ T1213] usb usb5-port1: unable to enumerate USB device
[  906.650630][ T5856] usb 1-1: USB disconnect, device number 118
[  907.111123][ T5921] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  907.975862][ T5921] usb 6-1: Using ep0 maxpacket: 16
[  908.035146][ T5921] usb 6-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.02
[  908.073474][ T5921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  908.082133][ T5921] usb 6-1: Product: syz
[  908.090873][ T5921] usb 6-1: Manufacturer: syz
[  908.096588][ T5921] usb 6-1: SerialNumber: syz
[  908.104235][ T5921] usb 6-1: config 0 descriptor??
[  908.115833][ T5921] go7007 6-1:0.0: probe with driver go7007 failed with error -12
[  908.198750][ T1213] usb 3-1: new high-speed USB device number 126 using dummy_hcd
[  908.363637][ T1213] usb 3-1: Using ep0 maxpacket: 16
[  908.444935][ T1213] usb 3-1: too many endpoints for config 0 interface 0 altsetting 145: 155, using maximum allowed: 30
[  908.747057][ T1213] usb 3-1: config 0 interface 0 altsetting 145 has 0 endpoint descriptors, different from the interface descriptor's value: 155
[  908.798972][T15245] sch_fq: defrate 6 ignored.
[  908.838722][ T1213] usb 3-1: config 0 interface 0 has no altsetting 0
[  908.887591][ T1213] usb 3-1: New USB device found, idVendor=8a5b, idProduct=3725, bcdDevice=16.f5
[  908.910296][ T1213] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  908.923182][ T1213] usb 3-1: Product: syz
[  908.929961][ T1213] usb 3-1: Manufacturer: syz
[  908.939584][ T1213] usb 3-1: SerialNumber: syz
[  908.962024][ T1213] usb 3-1: config 0 descriptor??
[  909.719138][T15266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  909.789216][T15266] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  909.872841][ T1213] usb 6-1: USB disconnect, device number 14
[  910.007248][ T5856] usb 1-1: new high-speed USB device number 119 using dummy_hcd
[  910.718274][ T5856] usb 1-1: Using ep0 maxpacket: 32
[  910.727378][ T5856] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9
[  910.758434][ T5856] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  910.773918][ T5856] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  910.793634][ T5856] usb 1-1: Product: syz
[  910.802663][ T5856] usb 1-1: Manufacturer: syz
[  910.819563][ T5856] usb 1-1: SerialNumber: syz
[  910.915274][ T5856] usb 1-1: config 0 descriptor??
[  910.928931][T15263] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  910.994311][ T5856] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input52
[  911.171561][ T5959] usb 1-1: USB disconnect, device number 119
[  911.177686][    C1] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  912.619815][ T1213] usb 3-1: USB disconnect, device number 126
[  912.645924][ T5856] usb 1-1: new high-speed USB device number 120 using dummy_hcd
[  912.801191][ T5856] usb 1-1: Using ep0 maxpacket: 8
[  912.819866][ T5929] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  912.829574][ T5856] usb 1-1: unable to get BOS descriptor or descriptor too short
[  912.848446][ T5856] usb 1-1: config 1 has an invalid interface number: 65 but max is 0
[  912.862825][ T5856] usb 1-1: config 1 has no interface number 0
[  912.877155][ T5856] usb 1-1: config 1 interface 65 has no altsetting 0
[  912.887864][ T5856] usb 1-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=2b.cd
[  912.905820][ T5856] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  912.916227][ T5921] usb 2-1: new high-speed USB device number 117 using dummy_hcd
[  912.930648][ T5856] usb 1-1: Product: syz
[  912.936056][ T5856] usb 1-1: Manufacturer: syz
[  912.940713][ T5856] usb 1-1: SerialNumber: syz
[  912.999121][ T5929] usb 6-1: config 0 has no interfaces?
[  913.015641][ T5929] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  913.026826][ T5929] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  913.034960][ T5929] usb 6-1: Product: syz
[  913.040063][ T5929] usb 6-1: Manufacturer: syz
[  913.044776][ T5929] usb 6-1: SerialNumber: syz
[  913.056863][ T5929] usb 6-1: config 0 descriptor??
[  913.098988][ T5921] usb 2-1: config 0 has no interfaces?
[  913.109702][ T5921] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  913.119618][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  913.128876][ T5921] usb 2-1: Product: syz
[  913.133228][ T5921] usb 2-1: Manufacturer: syz
[  913.138529][ T5921] usb 2-1: SerialNumber: syz
[  913.148657][ T5921] usb 2-1: config 0 descriptor??
[  913.168227][ T1213] usb 3-1: new high-speed USB device number 127 using dummy_hcd
[  913.304624][ T5929] usb 6-1: USB disconnect, device number 15
[  913.334369][T15317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  913.344773][T15317] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  913.385059][ T1213] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  913.479750][ T1213] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  913.511999][T13470] usb 2-1: USB disconnect, device number 117
[  913.535035][ T1213] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  913.552326][ T1213] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  913.573890][ T1213] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  913.587620][ T1213] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  913.662060][T15317] delete_channel: no stack
[  913.725055][ T1213] usb 3-1: config 0 descriptor??
[  913.726142][ T5856] kalmia 1-1:1.65 (unnamed net_device) (uninitialized): Error sending init packet. Status -22
[  913.774111][ T5856] kalmia 1-1:1.65: probe with driver kalmia failed with error -22
[  913.821189][ T5856] usb 1-1: USB disconnect, device number 120
[  913.955357][ T1213] hid_parser_main: 74 callbacks suppressed
[  913.955377][ T1213] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0
[  913.983745][ T1213] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0
[  914.001454][ T1213] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0
[  914.053842][ T1213] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0
[  914.078654][ T1213] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0
[  914.099613][ T1213] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0
[  914.191082][ T1213] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0
[  914.231615][ T1213] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0
[  914.282169][T15330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  914.386197][T15334] fuse: Unknown parameter 'permit_directio'
[  914.417892][T15330] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  914.432552][ T1213] plantronics 0003:047F:FFFF.002B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  914.455870][T13470] usb 2-1: new high-speed USB device number 118 using dummy_hcd
[  914.591602][ T1213] usb 3-1: USB disconnect, device number 127
[  914.624808][T13470] usb 2-1: config index 0 descriptor too short (expected 36, got 18)
[  914.654364][T13470] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  914.700885][T13470] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  914.745596][T13470] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  914.785520][T13470] usb 2-1: config 0 descriptor??
[  914.835631][T15335] fido_id[15335]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  914.899037][T13470] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  915.020421][ T5921] usb 2-1: USB disconnect, device number 118
[  915.196191][T15337] binder: 15336:15337 ioctl c0306201 200000001a80 returned -14
[  915.642058][T15358] nft_compat: unsupported protocol 1
[  915.747964][T15360] sctp: [Deprecated]: syz.1.2658 (pid 15360) Use of int in maxseg socket option.
[  915.747964][T15360] Use struct sctp_assoc_value instead
[  915.809428][T15360] FAULT_INJECTION: forcing a failure.
[  915.809428][T15360] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  915.825010][T15360] CPU: 1 UID: 0 PID: 15360 Comm: syz.1.2658 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(full) 
[  915.825047][T15360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  915.825064][T15360] Call Trace:
[  915.825074][T15360]  <TASK>
[  915.825086][T15360]  dump_stack_lvl+0x189/0x250
[  915.825121][T15360]  ? __pfx____ratelimit+0x10/0x10
[  915.825155][T15360]  ? __pfx_dump_stack_lvl+0x10/0x10
[  915.825185][T15360]  ? __pfx__printk+0x10/0x10
[  915.825236][T15360]  should_fail_ex+0x414/0x560
[  915.825283][T15360]  _copy_to_user+0x31/0xb0
[  915.825315][T15360]  sctp_getsockopt_maxseg+0x522/0x6c0
[  915.825353][T15360]  ? __pfx_sctp_getsockopt_maxseg+0x10/0x10
[  915.825401][T15360]  sctp_getsockopt+0x933/0xb60
[  915.825436][T15360]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  915.825472][T15360]  do_sock_getsockopt+0x36f/0x450
[  915.825501][T15360]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  915.825524][T15360]  ? write_ibpb+0x30/0x40
[  915.825557][T15360]  ? __fget_files+0x3a0/0x420
[  915.825594][T15360]  ? __fget_files+0x2a/0x420
[  915.825640][T15360]  __x64_sys_getsockopt+0x1a5/0x250
[  915.825667][T15360]  ? write_ibpb+0x30/0x40
[  915.825706][T15360]  ? write_ibpb+0x30/0x40
[  915.825743][T15360]  do_syscall_64+0xfa/0x3b0
[  915.825776][T15360]  ? lockdep_hardirqs_on+0x9c/0x150
[  915.825809][T15360]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  915.825834][T15360]  ? clear_bhb_loop+0x60/0xb0
[  915.825864][T15360]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  915.825888][T15360] RIP: 0033:0x7f479e58ebe9
[  915.825911][T15360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  915.825931][T15360] RSP: 002b:00007f479f4ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  915.825957][T15360] RAX: ffffffffffffffda RBX: 00007f479e7b5fa0 RCX: 00007f479e58ebe9
[  915.825975][T15360] RDX: 000000000000000d RSI: 0000000000000084 RDI: 0000000000000003
[  915.825989][T15360] RBP: 00007f479f4ac090 R08: 0000200000000000 R09: 0000000000000000
[  915.826006][T15360] R10: 0000200000003140 R11: 0000000000000246 R12: 0000000000000001
[  915.826021][T15360] R13: 00007f479e7b6038 R14: 00007f479e7b5fa0 R15: 00007f479e8dfa28
[  915.826060][T15360]  </TASK>
[  916.315847][ T1213] usb 1-1: new high-speed USB device number 121 using dummy_hcd
[  916.555225][ T1213] usb 1-1: config 0 has no interfaces?
[  916.578800][ T1213] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  916.737970][ T1213] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  916.767885][ T1213] usb 1-1: Product: syz
[  916.813979][ T1213] usb 1-1: Manufacturer: syz
[  916.829647][ T1213] usb 1-1: SerialNumber: syz
[  916.839744][ T1213] usb 1-1: config 0 descriptor??
[  916.879340][T15391] IPVS: set_ctl: invalid protocol: 255 10.1.1.1:20001
[  916.949062][T15392] netlink: 'syz.2.2667': attribute type 10 has an invalid length.
[  916.957581][T15392] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2667'.
[  916.975265][T15391] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  917.009946][T15392] team0: entered promiscuous mode
[  917.037308][T15392] team_slave_0: entered promiscuous mode
[  917.044057][T15392] team_slave_1: entered promiscuous mode
[  917.058994][T15392] batadv1: entered promiscuous mode
[  917.067609][T15392] team0: entered allmulticast mode
[  917.072783][T15392] team_slave_0: entered allmulticast mode
[  917.082481][T15392] team_slave_1: entered allmulticast mode
[  917.093996][T15392] batadv1: entered allmulticast mode
[  917.114051][T15392] bridge0: port 3(team0) entered blocking state
[  917.130989][T15392] bridge0: port 3(team0) entered disabled state
[  917.159008][T15392] bridge0: port 3(team0) entered blocking state
[  917.165510][T15392] bridge0: port 3(team0) entered forwarding state
[  917.202598][ T1213] usb 1-1: USB disconnect, device number 121
[  917.448386][   T49] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  917.458563][   T49] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  918.408761][T15402] ip6gretap1: entered allmulticast mode
[  919.345978][ T1213] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  919.476332][ T1213] usb 3-1: device descriptor read/64, error -71
[  919.766368][ T1213] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  919.955995][ T1213] usb 3-1: device descriptor read/64, error -71
[  920.120657][ T1213] usb usb3-port1: attempt power cycle
[  920.486319][ T1213] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  920.526812][ T1213] usb 3-1: device descriptor read/8, error -71
[  920.535455][T15431] ip6erspan0: entered promiscuous mode
[  920.765857][ T1213] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  920.836999][ T1213] usb 3-1: device descriptor read/8, error -71
[  920.952648][ T1213] usb usb3-port1: unable to enumerate USB device
[  926.506062][T13470] usb 5-1: new full-speed USB device number 125 using dummy_hcd
[  926.760664][T13470] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  926.772291][T13470] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  926.799510][T13470] usb 5-1: config 0 interface 0 has no altsetting 0
[  926.819690][T13470] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00
[  926.841422][T13470] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  926.881758][T13470] usb 5-1: config 0 descriptor??
[  927.109030][T15537] netlink: 'syz.4.2705': attribute type 1 has an invalid length.
[  927.222470][T15557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2705'.
[  927.578652][T15554] bond3: (slave vcan1): The slave device specified does not support setting the MAC address
[  927.590223][T15554] bond3: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[  927.747421][T15554] bond3: (slave vcan1): making interface the new active one
[  927.843031][T15554] bond3: (slave vcan1): Enslaving as an active interface with an up link
[  928.524008][T13470] usbhid 5-1:0.0: can't add hid device: -71
[  928.542386][T13470] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  928.576752][T13470] usb 5-1: USB disconnect, device number 125
[  928.823299][   T30] audit: type=1800 audit(1754816519.699:558): pid=15568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2715" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  930.742113][T15595] veth1_to_bond: entered allmulticast mode
[  931.219986][T15601] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  931.232372][T15601] tipc: Enabled bearer <udp:syz0>, priority 10
[  931.709610][T15619] sch_fq: defrate 257 ignored.
[  931.945404][T15625] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2738'.
[  932.595871][T13470] usb 6-1: new full-speed USB device number 16 using dummy_hcd
[  932.917935][T13470] usb 6-1: config index 0 descriptor too short (expected 63186, got 210)
[  932.927142][T13470] usb 6-1: config 0 has an invalid interface number: 106 but max is 0
[  932.935623][T13470] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  932.946723][T13470] usb 6-1: config 0 has no interface number 0
[  932.953176][T13470] usb 6-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  933.345970][T13470] usb 6-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6
[  933.376861][T13470] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb
[  933.398360][T13470] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  933.430180][T13470] usb 6-1: config 0 descriptor??
[  933.484940][T13470] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  933.684727][T13470] usb 6-1: USB disconnect, device number 16
[  933.686398][T11907] usb 6-1: Failed to submit usb control message: -71
[  933.728758][T11907] usb 6-1: unable to send the bmi data to the device: -71
[  933.743782][T11907] usb 6-1: unable to get target info from device
[  933.783470][T11907] usb 6-1: could not get target info (-71)
[  933.799720][T11907] usb 6-1: could not probe fw (-71)
[  934.580770][T15679] binder: 15677:15679 ioctl c0306201 2000000008c0 returned -14
[  935.280038][T15708] netlink: 'syz.0.2769': attribute type 4 has an invalid length.
[  935.296753][T15708] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2769'.
[  935.832741][T15715] bridge0: port 1(
) entered disabled state
[  936.746054][T11910] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  936.755567][T11910] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  936.805990][T11909] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  936.842994][T11909] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  936.875411][T11909] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  936.894624][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[  936.901192][ T1305] ieee802154 phy1 wpan1: encryption failed: -22
[  936.927886][T11909] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  936.951835][T11909] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  936.974063][T11909] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  942.916107][ T5959] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  943.167958][ T5959] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  943.216034][ T5959] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  943.248000][ T5959] usb 6-1: Product: syz
[  943.252527][ T5959] usb 6-1: Manufacturer: syz
[  943.287902][ T5959] usb 6-1: SerialNumber: syz
[  943.348542][ T5959] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  943.416291][ T5856] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  943.790727][   T30] audit: type=1326 audit(1754816534.669:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15832 comm="syz.0.2815" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0a2638ebe9 code=0x0
[  944.372740][T15848] binder: 15846:15848 ioctl c0306201 2000000008c0 returned -14
[  944.489041][ T5856] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[  944.516253][ T5856] ath9k_htc: Failed to initialize the device
[  944.579670][ T5856] usb 6-1: ath9k_htc: USB layer deinitialized
[  944.830800][ T1213] usb 6-1: USB disconnect, device number 17
[  945.753352][T15879] binder: 15878:15879 ioctl c0306201 2000000008c0 returned -14
[  945.942169][T15880] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2825'.
[  946.006249][T15880] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2825'.
[  946.397766][T15897] lo: entered allmulticast mode
[  946.410835][T15895] lo: left allmulticast mode
[  948.172646][ T5878] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  948.188406][ T5878] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  948.197210][ T5878] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  948.205543][ T5878] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  948.214427][ T5878] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  949.994998][T15923] chnl_net:caif_netlink_parms(): no params data found
[  950.083117][T11908] 
: left allmulticast mode
[  950.095855][T11908] 
: left promiscuous mode
[  950.112050][T11908] bridge0: port 1(
) entered disabled state
[  950.326190][ T5872] Bluetooth: hci2: command tx timeout
[  951.218320][T15958] binder: 15957:15958 ioctl c0306201 2000000008c0 returned -11
[  952.160240][T15979] sctp: [Deprecated]: syz.1.2870 (pid 15979) Use of int in max_burst socket option deprecated.
[  952.160240][T15979] Use struct sctp_assoc_value instead
[  952.256448][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  952.308296][T11908] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  952.321152][T11908] bond_slave_0: left promiscuous mode
[  952.330689][T11908] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  952.341360][T11908] bond_slave_1: left promiscuous mode
[  952.348101][T11908] bond0 (unregistering): Released all slaves
[  952.398159][   T30] audit: type=1326 audit(1754816543.269:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15963 comm="syz.2.2863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8add8ebe9 code=0x7fc00000
[  952.421517][ T5872] Bluetooth: hci2: command tx timeout
[  952.810524][T11908] bond1 (unregistering): Released all slaves
[  953.294915][T11908] bond2 (unregistering): (slave veth5): Releasing active interface
[  953.322021][T11908] bond2 (unregistering): Released all slaves
[  953.385468][T11908] bond3 (unregistering): Released all slaves
[  953.613226][T11908] _ÐZ`Ô€@ÿÃ: left promiscuous mode
[  953.836960][T16011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  953.877571][T16011] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  953.963206][T16011] netlink: 'syz.4.2880': attribute type 10 has an invalid length.
[  954.015839][T11908] tipc: Left network mode
[  954.130058][T15923] bridge0: port 1(bridge_slave_0) entered blocking state
[  954.163268][T15923] bridge0: port 1(bridge_slave_0) entered disabled state
[  954.189575][T15923] bridge_slave_0: entered allmulticast mode
[  954.219959][T15923] bridge_slave_0: entered promiscuous mode
[  954.258200][T16011] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  954.286331][T16011] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  954.310290][T16011] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  954.351948][T16018] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  954.370575][T16018] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  954.486603][ T5872] Bluetooth: hci2: command tx timeout
[  954.538006][T16031] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2883'.
[  954.559769][T15923] bridge0: port 2(bridge_slave_1) entered blocking state
[  954.584689][T15923] bridge0: port 2(bridge_slave_1) entered disabled state
[  954.633857][T15923] bridge_slave_1: entered allmulticast mode
[  954.658356][T15923] bridge_slave_1: entered promiscuous mode
[  955.336021][T11908] hsr_slave_0: left promiscuous mode
[  955.373218][T11908] hsr_slave_1: left promiscuous mode
[  956.301685][T11908] team0 (unregistering): Port device team_slave_1 removed
[  956.354753][T11908] team0 (unregistering): Port device team_slave_0 removed
[  956.566234][ T5872] Bluetooth: hci2: command tx timeout
[  957.294795][T15923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  957.419011][T15923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  957.644982][T15923] team0: Port device team_slave_0 added
[  957.689756][T15923] team0: Port device team_slave_1 added
[  957.888672][T15923] batman_adv: batadv0: Adding interface: batadv_slave_0
[  957.916611][T15923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  957.986018][T15923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  958.027226][T15923] batman_adv: batadv0: Adding interface: batadv_slave_1
[  958.034318][T15923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  958.146045][T15923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  958.402273][T15923] hsr_slave_0: entered promiscuous mode
[  958.423650][T15923] hsr_slave_1: entered promiscuous mode
[  959.698459][T16126] binder: 16125:16126 ioctl c0306201 2000000008c0 returned -14
[  960.302547][T15923] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  960.394086][T15923] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  960.446788][T15923] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  960.492152][T15923] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  960.858826][T15923] 8021q: adding VLAN 0 to HW filter on device bond0
[  960.940773][T15923] 8021q: adding VLAN 0 to HW filter on device team0
[  960.984880][T11908] bridge0: port 1(bridge_slave_0) entered blocking state
[  960.992277][T11908] bridge0: port 1(bridge_slave_0) entered forwarding state
[  961.065154][T11908] bridge0: port 2(bridge_slave_1) entered blocking state
[  961.072411][T11908] bridge0: port 2(bridge_slave_1) entered forwarding state
[  961.146207][T13470] usb 2-1: new high-speed USB device number 119 using dummy_hcd
[  961.315811][T13470] usb 2-1: Using ep0 maxpacket: 8
[  961.334248][T15923] 8021q: adding VLAN 0 to HW filter on device batadv0
[  961.346222][T13470] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[  961.393575][T13470] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  961.434600][T13470] usb 2-1: Product: syz
[  961.452655][T13470] usb 2-1: Manufacturer: syz
[  961.478985][T13470] usb 2-1: SerialNumber: syz
[  961.499927][T15923] veth0_vlan: entered promiscuous mode
[  961.518308][T13470] usb 2-1: config 0 descriptor??
[  961.551272][T13470] gspca_main: sonixj-2.14.0 probing 0c45:613e
[  961.575488][T15923] veth1_vlan: entered promiscuous mode
[  961.697420][T15923] veth0_macvtap: entered promiscuous mode
[  961.721488][T15923] veth1_macvtap: entered promiscuous mode
[  961.803930][T15923] batman_adv: batadv0: Interface activated: batadv_slave_0
[  961.839776][T15923] batman_adv: batadv0: Interface activated: batadv_slave_1
[  961.880371][T11909] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  961.908196][T11909] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  961.936093][T11909] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  961.979342][T11909] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  962.254967][T10837] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  962.256518][T13470] gspca_sonixj: reg_r err -110
[  962.292167][T13470] sonixj 2-1:0.0: probe with driver sonixj failed with error -110
[  962.293210][T10837] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  962.368001][T16191] 
[  962.370389][T16191] =====================================================
[  962.377344][T16191] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected
[  962.384836][T16191] 6.16.0-syzkaller-12256-g561c80369df0 #0 Not tainted
[  962.391624][T16191] -----------------------------------------------------
[  962.394754][T11908] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  962.398576][T16191] syz.5.2932/16191 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire:
[  962.398602][T16191] ffffffff8de0c058 (tasklist_lock){.+.+}-{3:3}, at: send_sigurg+0x12b/0x420
[  962.417995][T11908] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  962.422942][T16191] 
[  962.422942][T16191] and this task is already holding:
[  962.422955][T16191] ffff888021af5a20 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420
[  962.446749][T16191] which would create a new lock dependency:
[  962.453122][T16191]  (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3}
[  962.460734][T16191] 
[  962.460734][T16191] but this new dependency connects a SOFTIRQ-irq-safe lock:
[  962.470194][T16191]  (&client->buffer_lock){..-.}-{3:3}
[  962.470227][T16191] 
[  962.470227][T16191] ... which became SOFTIRQ-irq-safe at:
[  962.483680][T16191]   lock_acquire+0x120/0x360
[  962.488303][T16191]   _raw_spin_lock+0x2e/0x40
[  962.492915][T16191]   evdev_pass_values+0xb9/0xbd0
[  962.497881][T16191]   evdev_events+0x1e6/0x340
[  962.502491][T16191]   input_pass_values+0x285/0x890
[  962.507681][T16191]   input_event_dispose+0x330/0x6b0
[  962.512908][T16191]   input_event+0x89/0xe0
[  962.517259][T16191]   hidinput_report_event+0xa1/0x100
[  962.522913][T16191]   hid_report_raw_event+0x148b/0x16d0
[  962.528473][T16191]   hid_input_report+0x43e/0x520
[  962.533440][T16191]   hid_irq_in+0x47e/0x6d0
[  962.538054][T16191]   __usb_hcd_giveback_urb+0x417/0x690
[  962.543638][T16191]   dummy_timer+0x862/0x4550
[  962.548265][T16191]   __hrtimer_run_queues+0x52c/0xc60
[  962.553564][T16191]   hrtimer_run_softirq+0x187/0x2b0
[  962.558777][T16191]   handle_softirqs+0x283/0x870
[  962.563744][T16191]   __irq_exit_rcu+0xca/0x1f0
[  962.568526][T16191]   irq_exit_rcu+0x9/0x30
[  962.572901][T16191]   sysvec_apic_timer_interrupt+0xa6/0xc0
[  962.578823][T16191]   asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  962.584947][T16191]   kasan_check_range+0x1d4/0x2c0
[  962.590024][T16191]   __asan_memset+0x22/0x50
[  962.594641][T16191]   unwind_next_frame+0xc98/0x2390
[  962.599780][T16191]   arch_stack_walk+0x11c/0x150
[  962.604655][T16191]   stack_trace_save+0x9c/0xe0
[  962.609429][T16191]   kasan_save_track+0x3e/0x80
[  962.614206][T16191]   __kasan_slab_alloc+0x6c/0x80
[  962.619163][T16191]   kmem_cache_alloc_noprof+0x1c1/0x3c0
[  962.624725][T16191]   alloc_empty_file+0x55/0x1d0
[  962.629590][T16191]   path_openat+0x107/0x3830
[  962.634201][T16191]   do_filp_open+0x1fa/0x410
[  962.638803][T16191]   do_sys_openat2+0x121/0x1c0
[  962.643613][T16191]   __x64_sys_openat+0x138/0x170
[  962.648600][T16191]   do_syscall_64+0xfa/0x3b0
[  962.653233][T16191]   entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  962.659221][T16191] 
[  962.659221][T16191] to a SOFTIRQ-irq-unsafe lock:
[  962.666678][T16191]  (tasklist_lock){.+.+}-{3:3}
[  962.666709][T16191] 
[  962.666709][T16191] ... which became SOFTIRQ-irq-unsafe at:
[  962.679629][T16191] ...
[  962.679644][T16191]   lock_acquire+0x120/0x360
[  962.686879][T16191]   _raw_read_lock+0x36/0x50
[  962.691502][T16191]   __do_wait+0xde/0x740
[  962.695760][T16191]   do_wait+0x1f8/0x520
[  962.699933][T16191]   kernel_wait+0xab/0x170
[  962.704543][T16191]   call_usermodehelper_exec_work+0xbe/0x230
[  962.710543][T16191]   process_scheduled_works+0xade/0x17b0
[  962.716271][T16191]   worker_thread+0x8a0/0xda0
[  962.721220][T16191]   kthread+0x70e/0x8a0
[  962.725396][T16191]   ret_from_fork+0x3fc/0x770
[  962.730256][T16191]   ret_from_fork_asm+0x1a/0x30
[  962.735124][T16191] 
[  962.735124][T16191] other info that might help us debug this:
[  962.735124][T16191] 
[  962.745371][T16191] Chain exists of:
[  962.745371][T16191]   &client->buffer_lock --> &f_owner->lock --> tasklist_lock
[  962.745371][T16191] 
[  962.758708][T16191]  Possible interrupt unsafe locking scenario:
[  962.758708][T16191] 
[  962.767031][T16191]        CPU0                    CPU1
[  962.772406][T16191]        ----                    ----
[  962.777778][T16191]   lock(tasklist_lock);
[  962.782029][T16191]                                local_irq_disable();
[  962.788793][T16191]                                lock(&client->buffer_lock);
[  962.796180][T16191]                                lock(&f_owner->lock);
[  962.803210][T16191]   <Interrupt>
[  962.806670][T16191]     lock(&client->buffer_lock);
[  962.811701][T16191] 
[  962.811701][T16191]  *** DEADLOCK ***
[  962.811701][T16191] 
[  962.819851][T16191] 2 locks held by syz.5.2932/16191:
[  962.825137][T16191]  #0: ffff88807b5b97c0 (&u->lock){+.+.}-{3:3}, at: queue_oob+0x1b0/0x4f0
[  962.833691][T16191]  #1: ffff888021af5a20 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420
[  962.842851][T16191] 
[  962.842851][T16191] the dependencies between SOFTIRQ-irq-safe lock and the holding lock:
[  962.853262][T16191]   -> (&client->buffer_lock){..-.}-{3:3} {
[  962.859184][T16191]      IN-SOFTIRQ-W at:
[  962.863435][T16191]                         lock_acquire+0x120/0x360
[  962.870053][T16191]                         _raw_spin_lock+0x2e/0x40
[  962.876675][T16191]                         evdev_pass_values+0xb9/0xbd0
[  962.883554][T16191]                         evdev_events+0x1e6/0x340
[  962.890085][T16191]                         input_pass_values+0x285/0x890
[  962.897140][T16191]                         input_event_dispose+0x330/0x6b0
[  962.904367][T16191]                         input_event+0x89/0xe0
[  962.910629][T16191]                         hidinput_report_event+0xa1/0x100
[  962.917835][T16191]                         hid_report_raw_event+0x148b/0x16d0
[  962.925261][T16191]                         hid_input_report+0x43e/0x520
[  962.932124][T16191]                         hid_irq_in+0x47e/0x6d0
[  962.938552][T16191]                         __usb_hcd_giveback_urb+0x417/0x690
[  962.945953][T16191]                         dummy_timer+0x862/0x4550
[  962.952485][T16191]                         __hrtimer_run_queues+0x52c/0xc60
[  962.959690][T16191]                         hrtimer_run_softirq+0x187/0x2b0
[  962.966822][T16191]                         handle_softirqs+0x283/0x870
[  962.973590][T16191]                         __irq_exit_rcu+0xca/0x1f0
[  962.980187][T16191]                         irq_exit_rcu+0x9/0x30
[  962.986445][T16191]                         sysvec_apic_timer_interrupt+0xa6/0xc0
[  962.994185][T16191]                         asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  963.002173][T16191]                         kasan_check_range+0x1d4/0x2c0
[  963.009126][T16191]                         __asan_memset+0x22/0x50
[  963.015551][T16191]                         unwind_next_frame+0xc98/0x2390
[  963.022583][T16191]                         arch_stack_walk+0x11c/0x150
[  963.029379][T16191]                         stack_trace_save+0x9c/0xe0
[  963.036071][T16191]                         kasan_save_track+0x3e/0x80
[  963.042845][T16191]                         __kasan_slab_alloc+0x6c/0x80
[  963.049722][T16191]                         kmem_cache_alloc_noprof+0x1c1/0x3c0
[  963.057188][T16191]                         alloc_empty_file+0x55/0x1d0
[  963.064049][T16191]                         path_openat+0x107/0x3830
[  963.070563][T16191]                         do_filp_open+0x1fa/0x410
[  963.077076][T16191]                         do_sys_openat2+0x121/0x1c0
[  963.083761][T16191]                         __x64_sys_openat+0x138/0x170
[  963.090620][T16191]                         do_syscall_64+0xfa/0x3b0
[  963.097141][T16191]                         entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  963.105042][T16191]      INITIAL USE at:
[  963.109120][T16191]                        lock_acquire+0x120/0x360
[  963.115550][T16191]                        _raw_spin_lock+0x2e/0x40
[  963.122059][T16191]                        evdev_pass_values+0xb9/0xbd0
[  963.128922][T16191]                        evdev_events+0x1e6/0x340
[  963.135528][T16191]                        input_pass_values+0x285/0x890
[  963.142390][T16191]                        input_event_dispose+0x330/0x6b0
[  963.149422][T16191]                        input_inject_event+0x1dd/0x340
[  963.156371][T16191]                        evdev_write+0x2fc/0x480
[  963.162713][T16191]                        vfs_write+0x27b/0xb30
[  963.168890][T16191]                        ksys_write+0x145/0x250
[  963.175583][T16191]                        do_syscall_64+0xfa/0x3b0
[  963.182135][T16191]                        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  963.189966][T16191]    }
[  963.192755][T16191]    ... key      at: [<ffffffff99e2a1a0>] evdev_open.__key.25+0x0/0x20
[  963.201181][T16191]  -> (&new->fa_lock){....}-{3:3} {
[  963.206427][T16191]     INITIAL USE at:
[  963.210439][T16191]                      lock_acquire+0x120/0x360
[  963.216705][T16191]                      _raw_write_lock_irq+0xa2/0xf0
[  963.223412][T16191]                      fasync_remove_entry+0xf1/0x1c0
[  963.230229][T16191]                      sock_fasync+0x85/0xf0
[  963.236238][T16191]                      __fput+0x8a2/0xa70
[  963.241967][T16191]                      task_work_run+0x1d4/0x260
[  963.248311][T16191]                      exit_to_user_mode_loop+0xec/0x110
[  963.255359][T16191]                      do_syscall_64+0x2bd/0x3b0
[  963.261699][T16191]                      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  963.269423][T16191]     INITIAL READ USE at:
[  963.273934][T16191]                           lock_acquire+0x120/0x360
[  963.280649][T16191]                           _raw_read_lock_irqsave+0xaf/0x100
[  963.288160][T16191]                           kill_fasync+0x199/0x4d0
[  963.294859][T16191]                           sock_wake_async+0x137/0x160
[  963.301805][T16191]                           sk_wake_async+0x184/0x280
[  963.308590][T16191]                           mptcp_destroy_common+0x152/0x320
[  963.315972][T16191]                           mptcp_disconnect+0x23d/0x700
[  963.323015][T16191]                           inet_shutdown+0x1c1/0x390
[  963.329810][T16191]                           __x64_sys_shutdown+0x13c/0x1a0
[  963.337041][T16191]                           do_syscall_64+0xfa/0x3b0
[  963.344616][T16191]                           entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  963.352895][T16191]   }
[  963.355515][T16191]   ... key      at: [<ffffffff99b2af80>] fasync_insert_entry.__key+0x0/0x20
[  963.364416][T16191]   ... acquired at:
[  963.368322][T16191]    lock_acquire+0x120/0x360
[  963.373039][T16191]    _raw_read_lock_irqsave+0xaf/0x100
[  963.378524][T16191]    kill_fasync+0x199/0x4d0
[  963.383144][T16191]    evdev_pass_values+0x627/0xbd0
[  963.388370][T16191]    evdev_events+0x1e6/0x340
[  963.393074][T16191]    input_pass_values+0x285/0x890
[  963.398310][T16191]    input_event_dispose+0x330/0x6b0
[  963.403666][T16191]    input_inject_event+0x1dd/0x340
[  963.408893][T16191]    evdev_write+0x2fc/0x480
[  963.413607][T16191]    vfs_write+0x27b/0xb30
[  963.418072][T16191]    ksys_write+0x145/0x250
[  963.422594][T16191]    do_syscall_64+0xfa/0x3b0
[  963.427334][T16191]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  963.433427][T16191] 
[  963.435853][T16191] -> (&f_owner->lock){....}-{3:3} {
[  963.441170][T16191]    INITIAL USE at:
[  963.445072][T16191]                    lock_acquire+0x120/0x360
[  963.451164][T16191]                    _raw_write_lock_irq+0xa2/0xf0
[  963.457681][T16191]                    __f_setown+0x67/0x370
[  963.463505][T16191]                    fcntl_dirnotify+0x3fa/0x6a0
[  963.469854][T16191]                    do_fcntl+0x6d0/0x1910
[  963.475673][T16191]                    __se_sys_fcntl+0xc8/0x150
[  963.482452][T16191]                    do_syscall_64+0xfa/0x3b0
[  963.488544][T16191]                    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  963.496021][T16191]    INITIAL READ USE at:
[  963.500447][T16191]                         lock_acquire+0x120/0x360
[  963.507056][T16191]                         _raw_read_lock_irqsave+0xaf/0x100
[  963.514349][T16191]                         send_sigio+0x38/0x370
[  963.520607][T16191]                         kill_fasync+0x24d/0x4d0
[  963.527230][T16191]                         sock_wake_async+0x137/0x160
[  963.534027][T16191]                         sk_wake_async+0x184/0x280
[  963.540628][T16191]                         unix_release_sock+0x768/0xd30
[  963.547591][T16191]                         unix_release+0x92/0xd0
[  963.553952][T16191]                         sock_close+0xc3/0x240
[  963.560302][T16191]                         __fput+0x449/0xa70
[  963.566300][T16191]                         task_work_run+0x1d4/0x260
[  963.572992][T16191]                         get_signal+0x11ed/0x1340
[  963.579604][T16191]                         arch_do_signal_or_restart+0x9a/0x750
[  963.587346][T16191]                         exit_to_user_mode_loop+0x75/0x110
[  963.594654][T16191]                         do_syscall_64+0x2bd/0x3b0
[  963.601259][T16191]                         entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  963.609176][T16191]  }
[  963.611691][T16191]  ... key      at: [<ffffffff99b2af60>] file_f_owner_allocate.__key+0x0/0x20
[  963.620655][T16191]  ... acquired at:
[  963.624545][T16191]    lock_acquire+0x120/0x360
[  963.629249][T16191]    _raw_read_lock_irqsave+0xaf/0x100
[  963.634725][T16191]    send_sigio+0x38/0x370
[  963.639155][T16191]    kill_fasync+0x24d/0x4d0
[  963.643764][T16191]    sock_wake_async+0x137/0x160
[  963.648716][T16191]    sk_wake_async+0x184/0x280
[  963.653668][T16191]    unix_release_sock+0x768/0xd30
[  963.658787][T16191]    unix_release+0x92/0xd0
[  963.663294][T16191]    sock_close+0xc3/0x240
[  963.667723][T16191]    __fput+0x449/0xa70
[  963.671887][T16191]    task_work_run+0x1d4/0x260
[  963.676672][T16191]    get_signal+0x11ed/0x1340
[  963.681374][T16191]    arch_do_signal_or_restart+0x9a/0x750
[  963.687205][T16191]    exit_to_user_mode_loop+0x75/0x110
[  963.692704][T16191]    do_syscall_64+0x2bd/0x3b0
[  963.697606][T16191]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  963.703775][T16191] 
[  963.706103][T16191] 
[  963.706103][T16191] the dependencies between the lock to be acquired
[  963.706114][T16191]  and SOFTIRQ-irq-unsafe lock:
[  963.719818][T16191] -> (tasklist_lock){.+.+}-{3:3} {
[  963.724958][T16191]    HARDIRQ-ON-R at:
[  963.728945][T16191]                     lock_acquire+0x120/0x360
[  963.735118][T16191]                     _raw_read_lock+0x36/0x50
[  963.741294][T16191]                     __do_wait+0xde/0x740
[  963.747293][T16191]                     do_wait+0x1f8/0x520
[  963.753041][T16191]                     kernel_wait+0xab/0x170
[  963.759039][T16191]                     call_usermodehelper_exec_work+0xbe/0x230
[  963.766601][T16191]                     process_scheduled_works+0xade/0x17b0
[  963.773805][T16191]                     worker_thread+0x8a0/0xda0
[  963.780093][T16191]                     kthread+0x70e/0x8a0
[  963.785844][T16191]                     ret_from_fork+0x3fc/0x770
[  963.792099][T16191]                     ret_from_fork_asm+0x1a/0x30
[  963.798530][T16191]    SOFTIRQ-ON-R at:
[  963.802528][T16191]                     lock_acquire+0x120/0x360
[  963.808703][T16191]                     _raw_read_lock+0x36/0x50
[  963.814878][T16191]                     __do_wait+0xde/0x740
[  963.820697][T16191]                     do_wait+0x1f8/0x520
[  963.826436][T16191]                     kernel_wait+0xab/0x170
[  963.832473][T16191]                     call_usermodehelper_exec_work+0xbe/0x230
[  963.840069][T16191]                     process_scheduled_works+0xade/0x17b0
[  963.847275][T16191]                     worker_thread+0x8a0/0xda0
[  963.853525][T16191]                     kthread+0x70e/0x8a0
[  963.859348][T16191]                     ret_from_fork+0x3fc/0x770
[  963.865598][T16191]                     ret_from_fork_asm+0x1a/0x30
[  963.872569][T16191]    INITIAL USE at:
[  963.876573][T16191]                    lock_acquire+0x120/0x360
[  963.882659][T16191]                    _raw_write_lock_irq+0xa2/0xf0
[  963.889371][T16191]                    copy_process+0x224f/0x3c00
[  963.895625][T16191]                    kernel_clone+0x21e/0x840
[  963.901798][T16191]                    user_mode_thread+0xdd/0x140
[  963.908138][T16191]                    rest_init+0x23/0x300
[  963.913867][T16191]                    start_kernel+0x3a9/0x410
[  963.919941][T16191]                    x86_64_start_reservations+0x24/0x30
[  963.926977][T16191]                    x86_64_start_kernel+0x143/0x1c0
[  963.933665][T16191]                    common_startup_64+0x13e/0x147
[  963.940183][T16191]    INITIAL READ USE at:
[  963.944519][T16191]                         lock_acquire+0x120/0x360
[  963.951137][T16191]                         _raw_read_lock+0x36/0x50
[  963.957653][T16191]                         __do_wait+0xde/0x740
[  963.963819][T16191]                         do_wait+0x1f8/0x520
[  963.969899][T16191]                         kernel_wait+0xab/0x170
[  963.976252][T16191]                         call_usermodehelper_exec_work+0xbe/0x230
[  963.984166][T16191]                         process_scheduled_works+0xade/0x17b0
[  963.991717][T16191]                         worker_thread+0x8a0/0xda0
[  963.998497][T16191]                         kthread+0x70e/0x8a0
[  964.004604][T16191]                         ret_from_fork+0x3fc/0x770
[  964.011311][T16191]                         ret_from_fork_asm+0x1a/0x30
[  964.018111][T16191]  }
[  964.020631][T16191]  ... key      at: [<ffffffff8de0c058>] tasklist_lock+0x18/0x40
[  964.028376][T16191]  ... acquired at:
[  964.032198][T16191]    lock_acquire+0x120/0x360
[  964.036896][T16191]    _raw_read_lock+0x36/0x50
[  964.041590][T16191]    send_sigurg+0x12b/0x420
[  964.046209][T16191]    sk_send_sigurg+0x6c/0x2e0
[  964.050989][T16191]    queue_oob+0x420/0x4f0
[  964.055415][T16191]    unix_stream_sendmsg+0xc3f/0xdf0
[  964.060709][T16191]    __sock_sendmsg+0x21c/0x270
[  964.065575][T16191]    ____sys_sendmsg+0x52d/0x830
[  964.070525][T16191]    ___sys_sendmsg+0x21f/0x2a0
[  964.075385][T16191]    __sys_sendmmsg+0x227/0x430
[  964.080253][T16191]    __x64_sys_sendmmsg+0xa0/0xc0
[  964.085736][T16191]    do_syscall_64+0xfa/0x3b0
[  964.090441][T16191]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  964.096527][T16191] 
[  964.098867][T16191] 
[  964.098867][T16191] stack backtrace:
[  964.104767][T16191] CPU: 0 UID: 0 PID: 16191 Comm: syz.5.2932 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(full) 
[  964.104793][T16191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  964.104805][T16191] Call Trace:
[  964.104815][T16191]  <TASK>
[  964.104823][T16191]  dump_stack_lvl+0x189/0x250
[  964.104850][T16191]  ? __pfx_dump_stack_lvl+0x10/0x10
[  964.104872][T16191]  ? __pfx__printk+0x10/0x10
[  964.104902][T16191]  validate_chain+0x1f05/0x2140
[  964.104932][T16191]  __lock_acquire+0xab9/0xd20
[  964.104966][T16191]  ? send_sigurg+0x12b/0x420
[  964.104986][T16191]  lock_acquire+0x120/0x360
[  964.105012][T16191]  ? send_sigurg+0x12b/0x420
[  964.105032][T16191]  ? _raw_read_lock_irqsave+0xbb/0x100
[  964.105059][T16191]  _raw_read_lock+0x36/0x50
[  964.105080][T16191]  ? send_sigurg+0x12b/0x420
[  964.105098][T16191]  send_sigurg+0x12b/0x420
[  964.105120][T16191]  sk_send_sigurg+0x6c/0x2e0
[  964.105144][T16191]  queue_oob+0x420/0x4f0
[  964.105168][T16191]  ? __pfx_queue_oob+0x10/0x10
[  964.105192][T16191]  ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20
[  964.105236][T16191]  unix_stream_sendmsg+0xc3f/0xdf0
[  964.105260][T16191]  ? rcu_is_watching+0x15/0xb0
[  964.105278][T16191]  ? __schedule+0x17ae/0x4cc0
[  964.105303][T16191]  ? __pfx_unix_stream_sendmsg+0x10/0x10
[  964.105326][T16191]  ? aa_sock_msg_perm+0xda/0x1d0
[  964.105356][T16191]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  964.105375][T16191]  ? __pfx_unix_stream_sendmsg+0x10/0x10
[  964.105396][T16191]  __sock_sendmsg+0x21c/0x270
[  964.105420][T16191]  ____sys_sendmsg+0x52d/0x830
[  964.105439][T16191]  ? __pfx_____sys_sendmsg+0x10/0x10
[  964.105460][T16191]  ? import_iovec+0x74/0xa0
[  964.105483][T16191]  ___sys_sendmsg+0x21f/0x2a0
[  964.105501][T16191]  ? __pfx____sys_sendmsg+0x10/0x10
[  964.105532][T16191]  ? __fget_files+0x2a/0x420
[  964.105567][T16191]  ? __fget_files+0x3a0/0x420
[  964.105598][T16191]  __sys_sendmmsg+0x227/0x430
[  964.105618][T16191]  ? __pfx___sys_sendmmsg+0x10/0x10
[  964.105634][T16191]  ? do_futex+0x333/0x420
[  964.105671][T16191]  ? rcu_is_watching+0x15/0xb0
[  964.105694][T16191]  __x64_sys_sendmmsg+0xa0/0xc0
[  964.105713][T16191]  do_syscall_64+0xfa/0x3b0
[  964.105740][T16191]  ? lockdep_hardirqs_on+0x9c/0x150
[  964.105764][T16191]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  964.105781][T16191]  ? clear_bhb_loop+0x60/0xb0
[  964.105801][T16191]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  964.105820][T16191] RIP: 0033:0x7faf0078ebe9
[  964.105837][T16191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  964.105855][T16191] RSP: 002b:00007faf01547038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  964.105874][T16191] RAX: ffffffffffffffda RBX: 00007faf009b5fa0 RCX: 00007faf0078ebe9
[  964.105888][T16191] RDX: 0000000000000001 RSI: 0000200000006c40 RDI: 0000000000000004
[  964.105900][T16191] RBP: 00007faf00811e19 R08: 0000000000000000 R09: 0000000000000000
[  964.105912][T16191] R10: 00000000000408b1 R11: 0000000000000246 R12: 0000000000000000
[  964.105924][T16191] R13: 00007faf009b6038 R14: 00007faf009b5fa0 R15: 00007faf00adfa28
[  964.105943][T16191]  </TASK>
[  964.426321][T16199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2934'.
[  964.437411][T16199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2934'.
[  964.684670][ T5921] usb 2-1: USB disconnect, device number 119