last executing test programs:

6m6.603498891s ago: executing program 4 (id=6661):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r3, 0xc008aec1, &(0x7f00000001c0)={0x2, 0x0, [{0xc0000006, 0xf7c3, 0x1, 0xfffffffd, 0x3, 0xe71, 0x8}, {0x2, 0xc, 0x2, 0x9, 0x3, 0x1, 0x6}]})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18)
syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
getdents64(r6, &(0x7f0000000100)=""/134, 0x86)
getsockopt(r0, 0x200000000114, 0x271e, 0x0, &(0x7f0000000000))

6m5.271114389s ago: executing program 4 (id=6664):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='children\x00')
socket$l2tp(0x2, 0x2, 0x73)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
unshare(0xc000400)
r2 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
ppoll(&(0x7f0000000000)=[{r2, 0x4040}], 0x1, 0x0, 0x0, 0x0)
mknod$loop(0x0, 0xfff, 0x1)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(0xffffffffffffffff, &(0x7f0000006300)={0x2020, 0x0, <r3=>0x0}, 0x2020)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000040000000000000003000007"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x9}, 0x94)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r5 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a339f2d30afddbdf4d200f070700000000000025862f00000001ffffffc3000000060000000087c32be695bfd3ead0084f", @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0)
setrlimit(0xf, 0x0)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000041c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0xfffffffffffffff5, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000580)={0x0, 0x1, 0x2, 0xf2, 0x3, [], [0x0, 0x2, 0xffff, 0x4e4b], [0x80, 0x8, 0x1d51, 0x7], [0x50, 0x8, 0x1, 0x7f]})

6m3.524349749s ago: executing program 4 (id=6672):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000005c0)}], 0x1}}], 0x1, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x98, 0x29, 0x4, {0x4, 0xf, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0x80, 0x12, "09e12e5f0b6bdcf72f2ec7008a15fa88b025"}, @calipso={0x7, 0x30, {0x1, 0xa, 0x7a, 0x8001, [0x5, 0x4, 0x4, 0x400, 0xb]}}, @pad1, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0xf, "e80ee304ecb784ec4655260cecea14"}]}}}, @hoplimit={{0x14}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x3a, 0x2, 0x2, 0x70, 0x0, [@mcast2]}}}], 0x128}}], 0x1, 0x810)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000002c0)="2c385ad8febe166f34d48699fe9cbacf090000004bb5ddf8e42438ea50adbf57512ac5b56dc793f250e8ac03e4e5d935e10bb6bbcc015044b6b92858b775fd0045d4a41056d591133d3618ae3f15f6496939d9a073d00a75e8469159a03cab85c160c6f9dde696b2cd796dc232f92a4c617f5f3860171fcb9c94be6888de5e06a3000000a81ae71a009df7ac56b57813fa8e09a66b738f5cd781a239370ce0a51703bd", 0xa3)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

6m3.276974419s ago: executing program 4 (id=6675):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4011}, 0x80)
socket$inet(0x2, 0x2, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000380)={{0x1, 0x1, 0x18, <r3=>r2, {0x77c}}, './file0\x00'})
write$UHID_GET_REPORT_REPLY(r3, &(0x7f00000003c0)={0xa, {0x1, 0x0, 0x10}}, 0xa)
add_key$keyring(&(0x7f0000000240), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r4 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x8801, 0x0)
writev(r4, &(0x7f00000024c0)=[{&(0x7f0000000480)="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", 0x191}], 0x1)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r5 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000700)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}})
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801)
move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e23, 0xcaeb, @empty, 0x532}, 0x1c)
r9 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet6(r9, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001)
sendmsg$inet6(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002700)="b540bc234aa31963438a3256773c9a4714887e00008ff85b747644a0a56ed2dcfd98", 0x22}, {&(0x7f0000000240)="c9be3da19ffebdcf92b102f6030649392ab54e50472a4f2ff42fa7b7f830ea646d4244a40fa9d2603ab727327169a54d634c4fac58bf0edb1ce948e6720660fc3e58d223e0adb430f2b4a2bfd9e691709ef3e57a6cf3f84573abd126cf09010331466c6bcdc724dd340369f0ab6ff2617b0a889d1a1fd0f936cf37d80658005262d87ba2de3d55fa22e47a89e4d89fefb8dd9a7a163a95cd7c3195bbf1cd84e293cd07dc507f2998d062", 0xaa}, {&(0x7f0000000980)="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", 0xabd}], 0x3}, 0x4048805)

6m1.993594344s ago: executing program 4 (id=6678):
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f00000000c0)={0x3, 0x0, 0x1004, 0x7, 0xd, 0x3, 0x6414}) (async)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async)
listen(r1, 0x5)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00')
read$FUSE(r2, &(0x7f0000000180)={0x2020}, 0x181f)

6m1.718046984s ago: executing program 4 (id=6680):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x861, 0x0, 0x160f}]})
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r0], 0x20}, 0x1, 0x0, 0x0, 0x404c005}, 0x4008094)

6m1.103472944s ago: executing program 32 (id=6680):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x861, 0x0, 0x160f}]})
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r0], 0x20}, 0x1, 0x0, 0x0, 0x404c005}, 0x4008094)

11.778017871s ago: executing program 1 (id=8306):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
getpeername$packet(r3, 0x0, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x7, 0x808, 0x0, 0x3}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r5, 0x6, 0x1, &(0x7f0000000040)=0x8, 0x4)
setsockopt$inet_int(r5, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4)
sendmsg$NFT_BATCH(r4, 0x0, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f5, &(0x7f0000000240)={'syztnl0\x00', 0x0})
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x2, 0xfffffffa, @loopback, 0xc000000}, 0x1c)
setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r7, &(0x7f0000000340)='G', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c)
syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000092ecc620ac05c2773aeb010f03010902120001000020000904c40100fffd0180"], 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000000)='scalable', 0x8)
shutdown(r7, 0x1)
r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)

8.139474151s ago: executing program 2 (id=8313):
socket$can_bcm(0x1d, 0x2, 0x2)
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000840), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f0000000880)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x6, 0x3a, '\\', 0x3a, '\\!.', 0x3a, './file0'}, 0x2b)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = syz_open_dev$video4linux(&(0x7f00000007c0), 0x5, 0x20040)
ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x1, 0x0, 0x201a, 0x9, 0xa, 0x0, 0x5, 0x1993012db91ab52e}})
sched_setattr(0x0, 0x0, 0x0)
r4 = syz_open_procfs(0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$RTC_VL_CLR(r4, 0x7014)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r6, 0x4b52, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900"], 0x88}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0)
syz_emit_ethernet(0x1270, &(0x7f00000008c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @gre={{0x1b, 0x4, 0x1, 0x9, 0x1262, 0x65, 0x0, 0x3, 0x2f, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x14, 0x49, 0x3, 0x1, [{@multicast1, 0x3}, {@rand_addr=0x64010100, 0xfffffff8}]}, @ssrr={0x89, 0xf, 0xa1, [@multicast2, @multicast2, @broadcast]}, @timestamp_prespec={0x44, 0x14, 0xc3, 0x3, 0xc, [{@private=0xa010101, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @lsrr={0x83, 0xb, 0x98, [@local, @private=0xa010100]}, @generic={0x94, 0x11, "4267519310d7609dc808356d0b6fab"}, @generic={0x89, 0x5, "9fc74c"}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x1000, 0x0, [], "2a960fc386218cf51b9100cb63a29c10317de6ff48f66d050f5c15eede9bbc9ce770a616369be8901b478e68f72396b7b330d2309341d6665b808a47a41deb76cbabeeee8e1498cdcdac6e165348e7a34f991f99007c4db77e624693f84c2cba79306b2655dfbc6230a80d40e19048fd02fa0a50b36f82ab881a7108e7823be687c16c1c2848c7f831d67e491745826065918fa3493ef56d230b3a1cd6597a095a323c07d3e380755509d3c1615187cca498b4d258e801953c01596cca772f0c0f5fce3f3844b694ae5f9bcdb637da56c4a05651ba300d0bef67eebc48a2d8b6b84606a5868aebbef3e08383e75f2e09b2b3fcc31b24d908f8a3a53b08b2619718d50e7b90da24b7a1343090191be68c02b87f87bee7468e19c38a45d1aee143e5b73a2b61fb9bc1a942c38783b20e9bace6c5c3c665d500c0e741891afa27341dfd11970ce04a0d2e85fa06691b8b47e259a1fe9ed17ab4d6cf6d80018530ed71656c9ef3d895f1adc546f38de74f84cfa504035e319224e6f81d7636ea77dff5b2a0d56318932501e4740b32296c7c4a57d40b62b3315167a60d8fb046ef1d18265978340937ba856422a766ef27d65e991f6e07f697acf937e583847ad5b4c7ddad63e7a37f4057526f490b2ad74ae4e6d58e1cc341d4e31934f128da1afe62a273ee083695caf1882573ce1abfd6adb03ce21481e2af73dce8046673be9e96d8f548384a73175637a2f62c7da3f1c7547d549b613af8a369a4262617db22252c46ef4f14ac97cdeb52eab79e603d864c09cd3c385c388ab2773093f35d6dbdfa8ca4629ba874c70d3d54b1f0bffd5613af738160ff0b1510a1d764f7e9b5ddf11c281f2bc69546d69ad1229d96626a5765b49460dda44ec2b3248f4a8436f576bc3b9f47c2ae6b74601499cca12a0fc8e23416397fefa58c2b19281e9f372839466320fa81fffed6bc60d897e93fb638bf59f481c1b61ccbf71bf492a9a007cac0754dc358c7540777c713cc78d8aed12e60d3694f085bc95b56cc46105e0c5103fed7e3bc72aa62634c37ab3b808ff146bd2cfda3b9d62ba5fccc48241a09e9b810c595f637b9479e4955ee4063364aab4e303adfaf19afa46c6e5c8ab2509693b59951f6e9573e375a5e016ea0c27b7e011f5d209cfebba89a8d8f5419838cf28f5827f74f190d365f90c2fd1020b9bea7c93ba4a1186d4845071287d7d3648e404ea618a13f46a1bbf24b84eb6e5d79db0f65bae059d01c6c7f03e17b19a582c7b02f2287e6114937d79de5311dba3983a175478295acfe7a0fc100bf27205fef146047ad75a0929534b3658291c937e4359aaf57ce6b57bde609845aa523d6b33189736e7b62bf8503431679460bce1ea7e0e73fc0727eadb18bab6e8b4fa69179668e50edcfd48d8038c35bb6e15c65b109352319b8f2139226c954a6e8697bc764b7281df9d20bebf31f83b32857bf065d41f06f9fca22c42ba20740e4ae92f2b07b370289f9af9645a76e992624b079db25d9038c30603578ffd043366a8638b5281125242f77b54c6602cac06f07113ad66b2c01119cd34e6093e91602f7f13c53fad9ba6475c3aa034f2b50b929a2889ebb0ae46cc7d2ce6da918b54cc9efbbfd87cbabbbd40ae04067c82273be000c68ac3a5e42dd2b350ba22ba95e9c1e4ae90f8fd201af6bcebe57d2d794e050146c5cbe1678f78c1e694374aef2570ffc30f52e683c795a7c6befb20ad86a130f2ec1302f864ecf877a0bf003466d65698e52b32087187a53b5bb366d83bdcbf85534dd18e9fcac1f70eb94fc447c60330833fad519caab7c66808c66415dfc881ad3f41514c69e9594264d739da5835f2596f8e666deee3d0451d96e4481fb41b9d6005de0c5f5a7a4b3c09c24fc94354ed03c66d8670c71f98fc18af39783db6efe3cca20fcc0da6770eb82d1359c08728fb2cb4b678a13b197dd94653231d1eb6da97d26d2d14d5d54e5be06537b9872f6fa423fcac9406e302596b76c260f58fb42744648645ff9c4f4bab2cbe5f85b81b970bed29f28462b5ce95127d8c3eb027dd81808c2f2a592bc6117e28768b5aca35fd16a421109d7a0ed8901bdc9dc89c64bd5bb7d3cf7859435d2889a359714d27a675eebb5b898c62a86e8e2adec24ffb29a96d97b12dcdc955d981e12a6cbd56fad1db011a201b5cce179170f8ad69e5192ffd32fd60ba4631973e76ff69635b49a170ab50fdb311c9245866a9ee508769418699aac8fa18000bee88a92a6a6d5eb60fdb9025a951c02d605c95967882e7a6b8ed5c69f772a05bafb3a048cf70fd50cefdf5d1a984342d792ddf8e12e7ded0f922d1bf27b8b2757e3ac09edf6a22cbd1879bcf67b0a6f7f2ea17175822aa37443c911b266901def214e207d2072ebfc95cb61c48463c1c406bc648883ca0d912100bb2f425ee042642cbdc4bce14ddbb2c641d0e3768bb96b2523c0900f27a438b0bb228dedb678bdba50a835811fdf9cbea3bfa807f4d39402e1d17314579294f758e44225c7a532ccbc7cf60061056498d3e5b37076adad8a6f64e14d673a3b195416b0a724f0754804b93fdbcbed7b3f1f89157cce2c83153126c6bc026a9f84c100de788af8ae14bd52058f8e0f6b1e55e2fd253ecbb63ebf6fbf8fd297806da59757d99962090dfd543ca2f925e7f4565205b9880243160ef8a10bd573a28405ab8e36e8c537b873f0c8945cdc4d977ef561c00d23999c830a4ad6672264bc2d7c939f0603b47d72addb5b92afe63d58d23c5a27a0ca904c5d47406eabd6fc3b4c4655985dcc784b1653ce3198a5d29798c3a79112144f996741e3b41e290f1a278fe9c90651dd1b1e03cfdaf1e5a7e0e0b84459dc8815b6931c7cca833e968297795ad3dacbf0849b4231e7f6bada22b5ce934d9f681dcf39540e0924f8092a8f46cb52fd15623612c4b3b8a94c45f1f50339a9e1b952d2ca041497482972c4b3bee80468621a2a04a12d1aee20581d872a64606ca59b39bd04a025678b7efb32785abd5cdd5c0994df6dac82a8226f5a633853b17194e49ba5cfa1cd55befffab61e2d6f7239ad43ad3c23e028b15f37c7207b6e30d59e7c665dacc576f9262075617ef5ad2b4229df363665db6717c29996760ccc0ee4fbdc55c62085acdcd0fd411523dbce1d446c1d4d5d8a3317d490882d2b3bc45a7a9440dec4c5c0c41324ebff74bf1d3d900a6ea0cc98e5069531fe68f8a8c3529d48a6441ebaf6594770d6347b2ba992d60507795f4f9f5a06fb3b1ed9962f78076550c308f675096513afd6b1cb26e28c1ba1eabbea39da0d05d184be233923c722ec57f15a07687fe2bab2669c0afa084c24f43306cd326cbbb2bb996b44ec9d19f8c0aee5783c5facf10a923961172fbe66a68aff5e63afa2ef076ae74dc1ebe246a8e89cfd381f028729c9f9764e247771bd1d0c74471576844bb085a3607300afa6c364e9b13daf51182a83ed28a30cf56c18e4ccdc2345b42d35346d9a02b8b1cdb7d280fe6f9c33f88019ca62219dd57bae14dbffe2898543583ae9c7bf504290efe290dea60a794e64e4afb5220ff01d2b5b44b526d4310e98114228886771900589c5629a3538011d751a712ef8da552b5b12c896a29876fe0b7807da1773b34f5c8aeca15c9398eb52e246cbd597e868db8e0ecd0ca5c1eb01658d246fd0c013cb046169f7ced8d59b3e572697fddd3c993ae821c33c973a7b529d178416a832c98864acc78e8d8689efdf2fcf00ef7a89082d0bf3fa9173b0099b6b3ec78a9e942aedaa7af5ec1dcd1d5f869e9bf0f42e8df23c58ab69e31bcc4053380eb9e790d02806fd7bedaecaafa701a11a9dc71b8271dca210bebec5bcab2c44325cf796e0fe547e03110b923d027a6f653375d942db62a7efe46914fe6508f13fa2d06c13d5b501b6f5b592e82c74fb7322b9a141c7a6c786e77e3a822b1c7fbcb6942582642b885227bbc3546b07be9ed76c6ca187fb30ac44ce2c5a164d84bffbdad738e2c5d8b7bc51cd28bc73f765d13d83745e7c2989bfd4afac5cdb0cb35cad28a0a232b80b1a81093ef69892109c58f9d29a926860c78199eedca0ccdb1b9733f28258f7f8b7c2e40e29a31ffd75f7d2248f60e7e66823b601f6457f9208e6f0926d41bacaab5d9a9295b60d298374d86e38f37cffb31056f1e58273f68c4afc960dd4f60b1205ed16d48c772c41c0b4c23de3b9b91458f3b64dc0fa61c9833f58e21eceaca3f81fddec6993eabc5c55fa90a143866df8585328e4c0174ecf721262dee9d1b9dde06222dd79ae5cae44b4294c3a4c667a59f35c2c24a23687a3537e77f7e0b16b6c63253711ecd49b6101a6a9e0b5875c285e5623b98b55aaed6a10232e292c5e998e7bb322006d0fb6d71a6c4b1b10f63b95e80cb58854b3cd621a69f577eea38365cf6bcb29deb8f2dec67664c6a32bc331c75d0a2315261d5b6dd0cb6a7d3c9c0a1dd57a220777aafc8924f16df6c23bebe84116d24dd281bfc5ecf380d1bb05fdcdcbdc67fae475fe5f7ae67cb5acc227b70486cd3d4e7939d82fc154d44f4eae187c7f50322585e4b8d0118e468d588b2e58a31f5f0b49196e0472463f9d47d2e61cc0e9dc528b6d63d5185f205401bb482b311d88518743a40b9630a33b16b8dac77fb10c7d5d654fba8a53b4d5a920b65beb3395ec7f6dbb26c828fb312a00f5fd47c2695209152f2087b59e7628178f6a696ee46b7b5f5624acf1c019992bd8c689ec012fecc9ccb8131292405cfe966df3c5d0da238c8d1b2240d1a3de670ae380d842f6f49509e2efddf62925af814f2782be043a560a4ec98c8267802e3885fbe19081c7a4569d7c0f39aa96b257a29475fddfaf8cc261dcadbfc4ebf75fdfa6e710d146e03bef76b354816762d8d97e391523841731178600fdbeebb9c049142326362114cb418f89d66e3e2b4ee5579ae86618083cafc9c8502a9c822e4d561817322fd97956eada69f69f3e1865afc9d0cce5f9ae1e9fc4bdbae796725655b49160bfbf36210a4a40fa2dfb3a4dbd0cfc08146a3a46c69c59a2ec7ead2d882df34aafbc5174e0dc80eee878c1ef5f1145a9aaeb33fdcd2badbe531581225426ca39650b019aaa1ae9196dc20f99ddd7bc73414ea8b689ccf073a37fdc101c4f73158e4cd8c76889bb2a963b942f86b75fe549730c00c2a049628c4be6933bfc1d1f05e100ea0450e8abc5d652f111508b7decd7c885c6a86ed23812667aa20185b3b6c9f80d7deca4fa5ad3041567fb9add34614931666456d7e637cda4025df107014a8d96dd2a2cc0efb216ca6d2a4a43918ee496ab0dc572785b00c9075f129262a12c2e1cbf8a8c1684c4451fa4eb98f1f4c56dd6bb956ff36c09f5ccaaae45cb4474959a557080e29e9bf92492030b9998eff875df998fa84577b99ef03181eccc3b4bd40c2ab22d1ad6504de7383c631dc1c3ba207ac8c1ce9481d93b64d1160ec14b5dee7faf799c41b240dc77527c0a1797ca4e56ffd1488a8f4aea541ad99109320a3da29a9359dac743b13bf3824973a0f063bbe62b8b38dcf1f00969fa799394b6611772791cb550011f67997e5b05addbc56a82d69e9cdcde127f7847b98fdc9759e9cbd1cf80593f73dba83f43e51b4e4e90836264b785eda9f18f733d44390f5d8e7c866886f526c1612b5d0b9956235f91acef283811abfdac11e8e72b61a6e4b75c25d0fe953e043ec11f240209dcdc84768376636a2c2f7632792de33b202a3dfdd1cb45882ee2cd325cfd5bfa"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [], "bbf62bcf5486564a89297b04132537c6355c672d69641a6815dd73ab9e24161907d933444ba90849cbc52c610f1aa86745ecf29666d23d3712b32b21e20b4883fb0c95479b46f2688513d7cfcf63df8e18418762f437fcebafd4be537d7052a35eec7b98ee3799b4552e7761bf641f6b87fa3f0976cc59cda580f6b0c7c4ded845e6377ab39b86c1c6ef6f19a988cc8d4aaddf9ca8b3886af5180b4ea50a7926bef7933d3c4d8f3b027f3e06d958bf1bc86dfcc2f143e0670c5ef69da70c0b5783421a4962367b98e9b16cf20a14b7f06f8b4aa197c4b8f4"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [0x3, 0x10], "e61fe9cf7dea943924c259030e4f6c55da678e59b203fc858d46bec534bbbf322e6619b8ebb65898c49eb14d4af9a187d254fd0b5cdb4a496734940a8610ce00eef9eed48e3f5ac7"}, {0x8, 0x88be, 0x2, {{0x2, 0x1, 0xf, 0x0, 0x0, 0x2, 0x5, 0x40}, 0x1, {0x3}}}, {0x8, 0x22eb, 0x0, {{0x4, 0x2, 0x4, 0x2, 0x0, 0x1, 0x3, 0x80}, 0x2, {0x4, 0x1, 0x0, 0x1b, 0x1, 0x1, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x1, "e1f5201ef85be1afc251798d044cf4e088bfefe48a14736df738713380ce86043942010d7975585680e8d7fb6ea72ff4888cbc959609474b47da1641b799b66f482b4760175286797641de65a36a45a3e3963251fe376d2738dceebf3474481435c3ae64ceb64886763940166b73a43266d5cc99fce3bb2c4bd1ea39f05fc9ddd32ded910261f18efc3da9812cee"}}}}}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x18)
ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000140)={0x0, {0x3, 0x31}})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x7c}}, 0x0)
keyctl$session_to_parent(0x12)
keyctl$session_to_parent(0x12)
syz_emit_ethernet(0xcf, &(0x7f00000005c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x1, 0x0, 0x1}}, {@x25={0x805, {0x3, 0x2, 0x0, "a0aecc98da80ec76c30138dc34ec4a83c134e1698a1d7b765342e422ffa11c378175a5fe67d93893bdf7849d2d52e1dfe2a1abd416e868adbc407c7b895d05e085e47ecd0f179ebf6d60f1dbaef279929c8627a69445b289ea6d33b82fde42f0273c826d83c675a63ef1be4e548218d467363d33440fdd08107afd451ed85acfa541462827ac169c8c65eec30c2dcb253e961fd09e0391fe96c24e8bb005464244580464be272cbf45b52a16b0eab94265e906e9c43d35f7dae7"}}}}, 0x0)
fcntl$getown(r1, 0x9)

8.04261697s ago: executing program 1 (id=8314):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x2166994bd8d20fda, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000280)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000000)={0xc, r1})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000240)={0x1f})
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ftruncate(r4, 0xffff)
r5 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, 0x0, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40)
sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f80)={<r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f00000033c0)={0x0, 0x0, &(0x7f00000032c0)=[{0x0}, {0x0}], 0x2}, 0x4004004)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'syztnl1\x00', &(0x7f00000001c0)={'ip_vti0\x00', <r8=>0x0, 0x8701, 0x8000, 0xffffffff, 0x7fffffff, {{0x5, 0x4, 0x2, 0x3, 0x14, 0x64, 0x0, 0x6, 0x0, 0x0, @loopback, @remote}}}})
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000004a0001eeffffffffaa0000000a00806e0800004000000000d66d3a503f7c5fbaa21e14315d8f634e48ffd340149d2c1c4746c4cb64d7d3dce475259cbea97f36b75b7566d51959dd609ed344d04690436a8cf19c13817e072fb56d1ed5ffa8595733c602ed73edd2dc8c06eb0a74b794c3f232d0bb5719e0b4fc56db8347d445b76efb33b30f2e3acc70c9d0ce7e7a681c0f108409ec4efc9d60c74e6aafadbbf7fc9613ec81b09690fd91db5bc9b9435ad290f3962c9c1847508b04873252024ade9bdf2f1c9f843c76f48201fd788611244f38eadfac739d24bdb931cac9887c7f16b3f1b54c"], 0x1c}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000002c0)={'syztnl1\x00', r8, 0x700, 0x8, 0x7, 0x401, {{0xa, 0x4, 0x3, 0x9, 0x28, 0x6a, 0x0, 0x1, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x89, 0x11, "819ea9e51cb18056c063868c13812b"}]}}}}})
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, r8, 0x1, {0x0, 0x0, 0x2}, 0x1}, 0x18)

7.534132196s ago: executing program 5 (id=8318):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
getpeername$packet(r3, 0x0, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x7, 0x808, 0x0, 0x3}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r5, 0x6, 0x1, &(0x7f0000000040)=0x8, 0x4)
setsockopt$inet_int(r5, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4)
sendmsg$NFT_BATCH(r4, 0x0, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f5, &(0x7f0000000240)={'syztnl0\x00', 0x0})
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x2, 0xfffffffa, @loopback, 0xc000000}, 0x1c)
setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r7, &(0x7f0000000340)='G', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c)
syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000092ecc620ac05c2773aeb010f03010902120001000020000904c40100fffd0180"], 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000000)='scalable', 0x8)
shutdown(r7, 0x1)
r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)

7.038497399s ago: executing program 2 (id=8319):
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3)
ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000140)={0x2, &(0x7f00000016c0)=[{0x48, 0xc0, 0x38, 0x9}, {0x6, 0xfc}]})
ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000040)=0x5d)
write$ppp(r0, &(0x7f00000005c0)="3600f4496661705372", 0x9)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000001480)={'wg2\x00', <r3=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002040)=ANY=[@ANYBLOB='@\r\x00\x00', @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="24000300000000000000000000000000000000000000000000000000000000000000000024000300a05ca84f6c9c8e3853e2fd7a7cae0fb20fa152600cb00845174f08076f8d7843080007"], 0xd40}}, 0x0)
ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000000)=0x4)
io_pgetevents(0x0, 0x5, 0x0, 0x0, &(0x7f0000002580), 0x0)

6.608625449s ago: executing program 2 (id=8320):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0x87, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffd2a9dc6da626c0e21677ffaaaaaaaaaa2b86dd6700000100513afffe880000000000000000000000000201ff02000000000000000000000000000189009078000000002001000000000000000000000001fe800000000000000000000000000038220560aeb59d3fb13258c6f29dd7eed9c5aaa04a18f74d2a89000000000000"], 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r2 = mq_open(&(0x7f0000000000)='e_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000040000000, 0x4, 0x4, 0x9})
mq_timedsend(r2, 0x0, 0x0, 0x5, 0x0)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x18})
mq_timedreceive(r2, &(0x7f0000000140)=""/154, 0x9a, 0x0, &(0x7f0000000040)={0x77359400})
creat(&(0x7f00000001c0)='./file0\x00', 0x16c)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ZERO(r4, 0x0, 0x48f, 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000200), 0x8, 0xa80a00)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
write$UHID_CREATE2(r5, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r5, 0x1000)
syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042)

6.607180055s ago: executing program 0 (id=8321):
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000001a00))
socket$can_bcm(0x1d, 0x2, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$video4linux(&(0x7f00000007c0), 0x5, 0x20040)
ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x1, 0x0, 0x201a, 0x9, 0xa, 0x0, 0x5, 0x1993012db91ab52e}})
sched_setattr(0x0, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r4, 0x4b52, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000"], 0x88}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x86, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "9d42a08597d3b2f44ac89b1b52cc6728d6697d4cebc8f2f062c6f91f224aaacc", "99bd3410936eefeb3ea898dafab974aa", {"96deedc95f5d10a12027128db2e9bdf6", "f838a300b01b0e19ecdf00b20600"}}}}}}}, 0x0)
syz_emit_ethernet(0x32, &(0x7f0000000300)=ANY=[@ANYBLOB="e90c630faca2aaaaaaaaaabb0800451f00240000e0000011907800000000000000000000000000109078cbe66f1099d3a422"], 0x0)
r6 = fcntl$getown(r0, 0x9)
ptrace$PTRACE_GETSIGMASK(0x420a, r6, 0x8, &(0x7f00000001c0))
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)
r7 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
close(r7)
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
execve(&(0x7f00000002c0)='./file1/file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y<yN\xfbXh[\xe9\xa9\x1702\x7f\x9e\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab?P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xd9!\x89%\xb8\x10\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x15\x03\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7vC\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000a40)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y<yN\xfbXh[\xe9\xa9\x1702\x7f\x9e\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab7P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xd9!\x89%\xb80\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x15\xb9\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7\x87C\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']})
socket$nl_route(0x10, 0x3, 0x0)

5.281414989s ago: executing program 1 (id=8322):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000180)=0x40000000, 0x4)
ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000040)={0xac5d, 0x9, 0x5, 0x1, 0x0, [0xf3dd, 0x1, 0x7ff, 0x1]})
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io$hid(r4, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0})
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r5, 0x40045b0a, &(0x7f0000000000))
r6 = fsmount(r3, 0x0, 0x0)
fchdir(r6)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00')
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4000080}, 0x40010)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2458a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000040)

4.89559566s ago: executing program 2 (id=8323):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
getpeername$packet(r3, 0x0, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x7, 0x808, 0x0, 0x3}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r5, 0x6, 0x1, &(0x7f0000000040)=0x8, 0x4)
setsockopt$inet_int(r5, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4)
sendmsg$NFT_BATCH(r4, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f5, &(0x7f0000000240)={'syztnl0\x00', 0x0})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x2, 0xfffffffa, @loopback, 0xc000000}, 0x1c)
setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r6, &(0x7f0000000340)='G', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c)
syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000092ecc620ac05c2773aeb010f03010902120001000020000904c40100fffd0180"], 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000000)='scalable', 0x8)
shutdown(r6, 0x1)
r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)

4.357738546s ago: executing program 0 (id=8324):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040844)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r2, 0xfffffffc)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r5, 0x1, 0x170bd29, 0x0, {0x1, 0x0, 0x6000}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x13}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x4c}, 0x1, 0xff07, 0x0, 0x10044840}, 0x2000000)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x4000050, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
ioctl$TCSETS(r6, 0x5402, &(0x7f0000000180)={0x90000, 0xa, 0x0, 0x6, 0xf, "99043bf679104dc7bb311645fe896d52b8e997"})
r8 = openat$cgroup_subtree(r7, &(0x7f0000000200), 0x2, 0x0)
rmdir(&(0x7f0000000240)='./cgroup/../file0\x00')
lseek(r8, 0x93, 0x3)
write$binfmt_script(r6, &(0x7f00000004c0), 0x208e24b)
r9 = socket$unix(0x1, 0x2, 0x0)
getpeername$unix(r9, &(0x7f00000000c0), &(0x7f0000000140)=0x6e)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r6, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
cachestat(r6, &(0x7f0000000040), &(0x7f000009de80), 0x0)

3.679691395s ago: executing program 5 (id=8325):
bind$alg(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
prlimit64(0x0, 0x1, &(0x7f0000000240)={0x0, 0xcb}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea70000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020630000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0xffffffffffffffff, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
writev(r2, &(0x7f0000000140)=[{&(0x7f00000006c0)='R', 0x1}], 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec779000)
futex(&(0x7f000000cffc)=0x3, 0x5, 0x2, 0x0, &(0x7f0000000000)=0x3, 0x5000000)

3.576752884s ago: executing program 5 (id=8326):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x44000}, 0x400d0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_usbip_server_init(0x6)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
syz_open_dev$tty20(0xc, 0x4, 0x1)
socket$netlink(0x10, 0x3, 0x15)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xe, 0xb, &(0x7f0000000840)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000280)={'dummy0\x00', &(0x7f0000000100)=@ethtool_gfeatures})
creat(0x0, 0xd931d3864d39dcca)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB="2c8f3d", @ANYRESDEC=0x0])
memfd_create(&(0x7f0000000280)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\x86\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F91 ^x\x85\x80[\xa3B\n#!\xc2R\xdd\xf4)\xba\x1e\xfb6U\xabc\xda\x9a)\xc3\x9a\x06\xc5\xccP)\xdf.\xa7-\x84\xdf8\xbf\xfc1^}B\xee\xccR/z\x1e\xe8\x1e\x99\x99\n\xf4u\xd4\xbd^L\xb2j\xda\xff\x1d\x10\xc8\xad\xbd_OI\xb1\xe8y\x003\a\x06\x92\x8e\n\x8b\xf3\xd4G\x85\xbd\x1a\x81+3\x99jq\xd1\xacK^\xef\xb6!8\xcd?\x1e\\\x16W2\xbd4$zn\xa9\x7f\x9dE\xaf\x0f\xdb\xe0\xfa\x10\xc3\xb2\xf8\x80\x8c\xec$\xda\xc0\x94y1\t\xc5`\xda\xca\xd1\xab:\x18\x10\x9b\xd0w', 0x1)
r6 = openat$cgroup_root(0xffffff9c, 0x0, 0x200002, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40246608, &(0x7f0000000800)={0x4, 0x5, 0xf7, 0x6, 0xe819, 0xe})
write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x8, 0x55610518, 0x0, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4}}, 0x50)
r7 = syz_open_dev$vim2m(&(0x7f0000000040), 0xf7f, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000000)={0xf0f071, 0x1})

3.430722876s ago: executing program 0 (id=8327):
r0 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0505405, 0x0)
ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x147e)

3.422024387s ago: executing program 0 (id=8328):
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) (async)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="600000004e007f049e", 0x12}, {&(0x7f0000000180)="78cabf2dfb73fc0a7d0a0080f2dcb9fe06892544001100b8f9e6aaeb1ae2f6e8bcb5ee52dc06249798093c5102a1bca0b646a7ce904f6e6b788b3219c233e60ddc36024a99a63e729f9b06f96137c89d03234f008c5681", 0x57}], 0x2}, 0x0) (async)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="1401000010003b620000000000000000fe8000000000000000000000000000bbac1414bb00000000000000000000000000000000000000000000080088000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000002b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000002000000000000000000000008001d000000000008001e000000000014000e00"], 0x114}}, 0x0) (async)
sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@ieee802154={0x24, @none={0x0, 0xffff}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000140)="f80f5a1be2026f974e80dc4ac8979d8ae8900cbd47a8c8", 0x17}, {&(0x7f0000000300)="ad46b7475765b5d862e60b143a8ee3de291217ba5678063c27e49a460d5c307fa2b04eca8eab8edabcf9d186d1013779a12b03f866445b75f224f5156417a29d67d499765efb95bdba49485b078cde7b9c7ec314ccb40524f7525090dbdaeefa36d181c64ba0b89c7c5b7f621b14e72fa27329f9c7fd5f84ab82f12f351fb9358c6ed69e9080b0d745a98341c5e1fcce481444fc46e8465b0156bd5fe350b89a85751c8b421f5464a7db8b", 0xab}], 0x2, &(0x7f0000000480)=[{0xa8, 0x108, 0x7ff, "f3e02fab6b56c4d0d2ecacdba7b10070d00727258fead1e948b911206ea040c5c745746116d69445dfff3be93bd85e3fde4ee64bd459845dc25128ca6699743b67af2d2e590b77e8c2f7b281a40278c2e46e44951fac43f6a1e4e47e98684dd07716e022008067225370cdb9cf4e7d50ae7419fec0ed301c4dc0afa91a340e4629bff79c16b410f01e87280c8a591ebcdf106bb10ccb"}], 0xa8}, 0x0)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
connect$l2tp6(r2, &(0x7f0000000540)={0xa, 0x0, 0xb, @loopback, 0x8, 0x2}, 0x20)

3.229372327s ago: executing program 3 (id=8330):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="2c0000001200010000000000008a0000100017000c00000000000000000000000c0036"], 0x2c}], 0x1}, 0x0) (async, rerun: 64)
socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec00000001090212"], 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'sit0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x0, 0x1, 0x3, 0x2}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc891}, 0x40020)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r3, 0x29, 0x5, 0x0, 0x0) (async)
socket$kcm(0xa, 0x2, 0x73)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) (async)
setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) (async)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) (async)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) (async, rerun: 64)
r6 = socket$igmp(0x2, 0x3, 0x2) (rerun: 64)
setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4)
fsopen(&(0x7f0000000240)='ntfs3\x00', 0x1) (async, rerun: 32)
r7 = socket(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$AUDIT_ADD_RULE(r7, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x444, 0x3f3, 0x200, 0x70bd28, 0x25dfdbfd, {0x1, 0x1, 0x2c, [0x6, 0x9, 0x1, 0x401, 0x8, 0xf, 0x1, 0x9946, 0x101, 0x2, 0x6, 0xb8, 0x8, 0x7ff, 0xbe, 0x8, 0x3, 0x9, 0x3a39, 0x400, 0x3, 0x0, 0x888, 0x7ff, 0x45109702, 0x7, 0x1, 0x3, 0x9, 0x1, 0xd6f, 0x200, 0xfffffb0d, 0x8, 0xc, 0x6, 0x8, 0xf, 0x7, 0x1, 0xfffffff7, 0xd, 0xa6c, 0x400, 0x7, 0x3, 0x7, 0x7, 0xffffffbc, 0x5, 0xd, 0x5, 0x8, 0xfffffffe, 0x3, 0x6b, 0x5fcc0352, 0xd, 0x82, 0x1, 0xa28, 0xa9, 0x1, 0x7], [0x2, 0xfffffffa, 0x5438, 0x59e92dff, 0x2, 0x4, 0x4, 0x8100, 0xa, 0x8, 0x45, 0xfffffffa, 0x672c, 0x81, 0x7, 0x9a, 0xffffa14b, 0xff, 0x33, 0x0, 0x9, 0x6, 0x4d5, 0x5, 0x80000000, 0xdff5, 0x80000000, 0x8, 0x3, 0x7, 0x0, 0x0, 0x4, 0xa2, 0xc5, 0x7, 0xfffffff8, 0x3c, 0x9, 0x8, 0x0, 0x3, 0x5, 0x9, 0x0, 0x9354, 0x6, 0x14, 0xfff, 0x80000000, 0xfffffff9, 0xb, 0x1, 0x2, 0x9, 0x7, 0x10000, 0x5, 0x6, 0x80000000, 0x7fb, 0xfb86, 0x942, 0x9], [0x7, 0x5a1ecce8, 0x4, 0x800, 0x1, 0x2, 0x200, 0x6, 0x6, 0x4, 0x1, 0xfd6, 0x6, 0x7, 0x4, 0x938b, 0x2, 0x7, 0x4, 0x8, 0x400, 0x800, 0x2, 0x6, 0x8, 0x5, 0x3, 0x15b7, 0x8, 0x400, 0x5, 0x0, 0xff, 0x101, 0x1, 0x2, 0x7, 0x0, 0x0, 0x5, 0x9, 0x5, 0x6, 0xf8, 0x537694d3, 0x8a, 0x9, 0x8, 0x8, 0xff, 0x6, 0x8, 0x4, 0xa, 0x2, 0x5, 0x6, 0x3, 0xeb17, 0x4, 0x7, 0x1, 0x0, 0x6], [0x9, 0xc, 0x0, 0x5, 0x5, 0x101, 0x3, 0x4, 0x5, 0x7fff, 0x8, 0x186, 0x4ff1, 0x6, 0xfffffffb, 0x1, 0x80, 0x6, 0x5, 0x1ff, 0x7f, 0xfffffff2, 0x3, 0x9d, 0xb, 0xede, 0xa, 0x4, 0xfffffffa, 0x10001, 0x7, 0x8, 0x4, 0x3, 0x0, 0x86f8, 0x4, 0xfffffffd, 0x308, 0x4, 0xfffffe76, 0x3, 0x6, 0x80000001, 0x5, 0x4, 0x9, 0x5, 0x5, 0x3, 0x6, 0xe1b9, 0xf, 0x8, 0xf, 0x2, 0x7, 0x0, 0x4, 0x7fffffff, 0x8000, 0xb2, 0x3, 0x100], 0x21, ['ntfs3\x00', 'ntfs3\x00', 'ntfs3\x00', 'ntfs3\x00', ',\x00', ']/\\%!{\x00']}, [""]}, 0x444}, 0x1, 0x0, 0x0, 0x40084}, 0x40000c0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r7], 0x20}}, 0x0)

3.097611214s ago: executing program 3 (id=8331):
r0 = syz_open_dev$usbfs(&(0x7f0000000300), 0x77, 0x1c1b41)
ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000000)={0x80, 0x8, 0x2fe, 0x0, 0xecff, 0x800000, 0x0})
r1 = socket$inet6(0xa, 0x80003, 0xff)
setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4)
setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000000)=0xfffffffe, 0x4)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00'})
socket$netlink(0x10, 0x3, 0x0)
r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0)
r4 = add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)="0eae8a7a5d646a6ddc649c05a35341795ddafe50572797d245e8e07c30aba3afd92c4772edf98722276f5b7a654e581747d6f9722e78df9e3fefee125cc46e10b1828aac7e2981f598fc4807176ce8e8a68e074c8083317bb5faef90be6680fa7388782a4110f30938bb4add3149e3bea329faebde98367b35cb98c99debde23da57115cd0fcb78dd0acc932fbbb421b211fde0b31219ffb01a984dcfb3af2c258adbe3d46da2e41f3c03df0908dea54433bde66efa35e8bca256089d0e56edbaf030c5984e4bd5dec7e85b7664bee317699119a6188a19da1f1f1c0a995e10658dc495be69d4df586c9d1f19ca6cc1a3f960c69", 0xf4, 0xfffffffffffffffd)
r5 = add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000280)={'fscrypt:', @auto=[0x36, 0xe71b7a86a0d52dd5, 0x65, 0x33, 0x34, 0x30, 0x64, 0x36, 0x66, 0x34, 0x66, 0x2, 0x63, 0x63, 0x64, 0x61]}, &(0x7f00000002c0)={0x0, "501cf624817bb5ff633e3d3d93e1549ffbf206e043f14ad130973858a67ae555955e3d54ec606f32c6027f29fe3ca5f70ba41a58d9635a852eb303840a9dbe74", 0x34}, 0x48, 0xfffffffffffffffc)
setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f0000000080)=0x8, 0x4)
keyctl$dh_compute(0x17, &(0x7f0000000340)={r4, 0x0, r5}, &(0x7f0000000380)=""/199, 0xc7, &(0x7f0000000540)={&(0x7f0000000480)={'streebog512-generic\x00'}, &(0x7f00000004c0)="85e07d8e3bbca3cbbfa352e60f15dac300ae5d1e2920ab79482f47ab5d9c956a92b8c6bd087811f2249c97b2efbd2c67dc1982aa09618dd5705fb2e56fc9bab70994b0e637e3b39cfd209833230a11a5dd2f155608f8f6160166ffcc27138359a6796fefccf1", 0x66})

3.097341091s ago: executing program 0 (id=8332):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022400", @ANYRES16], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xa, {[@local=@item_4={0x3, 0x2, 0x0, "f896e404"}, @local=@item_012={0x1, 0x2, 0x2, 'e'}, @main=@item_012={0x2, 0x0, 0x9, "f792"}]}}, 0x0}, 0x0)
r1 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0xfa000, 0x6ae0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x58, 0x10, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x14318}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x2c}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000884}, 0x0)
ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0x501c4814, &(0x7f00000000c0)={0x2, 0xffffffff})

3.030829855s ago: executing program 3 (id=8333):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0xffef, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0)

2.964298292s ago: executing program 3 (id=8334):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) (async)
r1 = socket$packet(0x11, 0x2, 0x300) (async)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', <r3=>0x0})
sendto$packet(r2, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a88800892f4803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) (async)
recvmmsg(r1, &(0x7f0000003d00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40, 0x0)
ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4004550c, 0x0)

2.845535408s ago: executing program 1 (id=8335):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) (async)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000004c0)=@hopopts={0x2e, 0x2, '\x00', [@pad1, @calipso={0x7, 0x8, {0x3, 0x0, 0x5, 0xfff7}}, @enc_lim={0x4, 0x1, 0x8}]}, 0x18) (async)
sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @local, 0x9}, 0x1c) (async)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="34002300110001002abd7000fedbdf25ac14142e000000000000000000000000000004d5020033000c0015005b0735d45f472100"], 0x34}, 0x1, 0x0, 0x0, 0x4040030}, 0x0) (async)
mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r2)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000004000000400001802c0004001400010002000000ac14140f00000000000000001400020005000000ffffffff00000000000000000d000100756470a1135d3a7379"], 0x54}}, 0x0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

2.566202508s ago: executing program 3 (id=8336):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0))
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r0, 0x560e, &(0x7f0000000000))
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x5})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0x2000000000000198, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x9}, 0x94)
syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x4a7c0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000380)={0x21, 0x0, [{0x298, 0x0, 0x100}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$FIBMAP(r4, 0x1, &(0x7f0000000040)=0x5)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@gettaction={0x14, 0x32, 0x801, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x880e)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x14, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x8e, 0x7}})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, 0x0)
r7 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000200), 0x4)

1.582358765s ago: executing program 2 (id=8337):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000002280)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d00090582", @ANYBLOB="d7e1687a"], 0x0)
syz_usb_connect(0x3, 0x123a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0x10, 0xc9, 0x3d, 0xa0, 0x75a, 0xea72, 0x90b6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1228, 0x4, 0x5, 0x1, 0x0, 0x2, [{{0x9, 0x4, 0x37, 0x4, 0xd, 0x2, 0x2, 0x3, 0x6, [], [{{0x9, 0x5, 0xf, 0x10, 0x400, 0x0, 0xff, 0x9, [@generic={0x4a, 0x6, "e1c78bcd67184bf2ea5108e8776a2847f6fe5938405a20ea5a71705b374d7a29cd440c5ccb7d713bc442d026c446fb537e78218f7dbdab107b65d4bb11c328887a5dc6271074160f"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0x7, 0x0, 0x7f, [@generic={0x87, 0xf, "849e1a399474039a0074eea58e7550294cb7358b347c26fd8a8b105b91a76e6017e7d98c5c4bf9eef2e06fcaf58d61f28a84a6aadcd3818556095b75067097a3a8e00436af36f73deb7f945bf54bc632b7d2450a6063a7699700a4d1ce8737eb66a93ebee098c7ce879377dcab2a8823a063c7a355430b188c026b960b5376f97c9ebe9ada"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x8, 0x2, 0x7f}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x2, 0x9, 0x15}}, {{0x9, 0x5, 0x9, 0x8, 0x3cf, 0xfb, 0x7f, 0x5}}, {{0x9, 0x5, 0x1, 0x0, 0xabb872aed9e467b9, 0x8, 0x6, 0x0, [@generic={0xe6, 0x22, "2d9112eec2ae8bb7e2adbe6044d33a9044213d9e6601338818ef91b058c6f31eab5b07856d0cc97964ebf014e600847157f991cbf27bf46de0a37c9ccdc17e4bdb774171f138b5d44f1af898182c83cf13fb544bbae9066949bf74341cdb093f216fe47df28bda1339dd85464f7d8410076d18b018958608adcdedd71b69a689cdda088653ba5ae7c20b422c1a114ef5e5e23dca107b33631764648330268e696c4b31186fa528f732744eb5fc1de567db30360d25efc6368f6d419e96a734eb607abea8565c1bb8162cd216e81037f9620faf99b787bfed100c08cf98c088a62dae01d1"}, @generic={0x100, 0x23, "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"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x8, 0x3, 0x3, 0x2, [@generic={0x27, 0xb, "e29fae2a79df9f43fd26156f1f798248d72e4b6173dd69822f964dd3af6154e678c9e8ec2d"}, @generic={0xe3, 0x7, "e58cc17c0a868fb61094fce5738472acb562079f035a48f89af1c4e7ee8afb6a0081870a73cccfa9e77c2e7f694d9266deb8e5bd8e7b5722c70726790a707807fb808ea410b5c6fee8c6ab4302f0711f485f5eef7f64fbb057011c76a78734212e8ad8f0520d15a73365f729fd9d8b4bad8c10f0a077649548f3e252ec21d739b52027d21fb799976e8c93a56854f38de21a46fabb2cb0c787eeb440f5516f18e84cdd5fea96f8accb3fb42037eb52f188a6ed9b4cc6d11490a28b57699a1f1eeff6c2e21d7a89393735a441cf14f6bfe9aef227cbaa3215b68b419079659636f4"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0xed, 0x4, 0x13}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0x4, 0x8e, 0x66, [@generic={0x7f, 0x21, "079a7ce31bb33f672f81000a1aed204e0fdecc32a5ebada6b1231dd985f7dec770ed697de555c396791ac2b66799c9e9de778129f7c32768871fe5fce7bacb37a088a53f896ec61787a5deccdd4936cd2d6138f2e917583f56348bc352e7732af60bd7d6853cb44cbd641b19d2c3e801409d4a61b34c39f439817d719d"}, @generic={0x4, 0x24, '5:'}]}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0x1, 0x8, 0xb}}, {{0x9, 0x5, 0x0, 0x1, 0x8, 0x7, 0x90, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x7}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0xb, 0xb, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x2, 0x10}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0xe, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x40, 0xc, 0x7f}]}}]}}, {{0x9, 0x4, 0x4, 0xe, 0xe, 0x59, 0xa, 0x79, 0x0, [@uac_as={[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x3, 0x2, 0x3d, 0xff, 'M', "2883d9"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x5, 0x2, 0x20, "8c22985f"}, @as_header={0x7, 0x24, 0x1, 0x80, 0x1, 0x1}]}], [{{0x9, 0x5, 0x7, 0x0, 0x8, 0xb6, 0x80, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0xff01}, @generic={0x12, 0x3, "c316a4e47d8ae42f635854930b1e054d"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x1, 0x6, 0x1, [@generic={0x14, 0x30, "a6398b5226739a4d3ad2947b73b983f9bb63"}, @generic={0x6f, 0x23, "925911b270481679e1d8730f43c916c5baabb18d4029da2d5c57796b92e47a5a9ec99f9d3498bdd53f91c8df707132f6a83442ed49fef93c1f69baedfb9d1124b24f9d18dd6aaabb8a252ead97fefb3b1cb93925e89c3885684051680c4769e7eb6b3461b266b5c80ab3f09230"}]}}, {{0x9, 0x5, 0xf, 0x3, 0x8, 0x8, 0x2, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0xd}]}}, {{0x9, 0x5, 0xc, 0x1, 0x8, 0x8, 0x9, 0x8}}, {{0x9, 0x5, 0x7, 0xc, 0x20, 0x4, 0x7, 0x8}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0x5, 0x34, 0xf8, [@generic={0xcf, 0x9, "352f90c6d58e1e0aef9361c6ad96f0a995acf7bdfa16a7562ae3ccfdc48b10c378ccdc31d7a47f4f6d29df6ba01ed5f20ebc62180bbecd113c09a479eb09c26347a67e06e1e5c5be3484d22048b4fc4537370b0ec80501d8617ca774e65efb1408a14e1034493b7685aa44dc796ac9f2f582f0b681a3ffb6b1867e84dffe399668c4b77e76168172c51e76871f025ff6cfe2b56ce1a975ae6afb766e6cb6bd3804704e05dd313a73a24b78a36990f673a99faf8a6b7fe4033b185922ba18c170b5e1a2f934feb33c234962aa1f"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xf6, 0x9}]}}, {{0x9, 0x5, 0x2, 0x2, 0x0, 0x80, 0x7a, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6c, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x2}]}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0x0, 0x3, 0x3}}, {{0x9, 0x5, 0x5, 0x2, 0x8311a97deee73cda, 0x8, 0x8, 0xb, [@generic={0x3a, 0x21, "209753b0f78ca4426f5f27d9c5894b3915ee6aba8d5ae52e7475f6e1145e54fe5f0031305cd11ca344f64f4cfb5b49661d59547b261bb877"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x6}]}}, {{0x9, 0x5, 0xd, 0x2, 0x20, 0xd1, 0x1, 0x39}}, {{0x9, 0x5, 0x86, 0x10, 0x20, 0x78, 0x0, 0xe, [@generic={0xc4, 0xc, "f3c362acda93a4c8170fcaef6d6b905b32bb0aa8c2732046df266559bb7481710783e65bf16af1af646e6e8890bdce9c3650c68b06ce4eab74e5cdf3e942d65ff4e44de8b0813793da6c1637fcf39e45687d28e5a7fd89d0d0c206e62b7f5fa380be39102ab476a42295eb050c1f96c09ff38f3fd236b752e5f5f1ec41d212ec02d34dcd2a109cfceff29553b3b165071a17775a63f9f411247bda02b655ff6e7db4a67efcec1baa18cc6333d3224765a769571c16082e7fed46eb691a113ad245d8"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0xa}]}}, {{0x9, 0x5, 0x9, 0xc, 0x200, 0xd3, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0x4}]}}, {{0x9, 0x5, 0xe, 0x10, 0x400, 0x5, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0xfffd}]}}, {{0x9, 0x5, 0x0, 0xc, 0x200, 0x4, 0x1, 0x8}}]}}, {{0x9, 0x4, 0xbb, 0x6, 0x7, 0x56, 0x32, 0xd7, 0x4d, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "7183f174ca8e"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0xada, 0x9, 0x4, 0x8}, {0x6, 0x24, 0x1a, 0x7, 0x20}, [@network_terminal={0x7, 0x24, 0xa, 0x5, 0xfd, 0xc, 0x7}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0xff}]}], [{{0x9, 0x5, 0x7, 0x10, 0x20, 0xb6, 0xd}}, {{0x9, 0x5, 0xc, 0x10, 0x0, 0x7, 0xd, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xf, 0x40}]}}, {{0x9, 0x5, 0x7, 0x3, 0x3ff, 0x87, 0xa, 0x9}}, {{0x9, 0x5, 0xf, 0x1, 0x0, 0x8, 0x7, 0x8}}, {{0x9, 0x5, 0xc, 0x3, 0x40, 0x2, 0x5, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0xb}]}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0x81, 0x77, 0x3, [@generic={0xf0, 0x7, "9b54d88d39aaa4584b862ffd2bf88ef64808a04ffdb45d1c73621e7203957f789648369f00f970024200503254b70a8aad5f7e77d3e22f49478ad5131f2a8ed6930a047a6297ab63c072834001fafc120ecedd7104eaa57ec8a4e3651a057322e6b115f80b1b09ff750fd4cff722703da99834e5b22cd0e9903c99875ead82d6baa605d4a7d81a0945925ea3dc38c633a5563513e89a8e456271e6ec89d34c7516e614e411eb56b1f3ed854b5008dcf188c340466055a14d6d44ddf4eee71ca75a024a4d9f79c4a3ff6a42ea114f93aca7a54db81442d802b0c59d344cb9066611f83ae6011f1fd99cf6e09f4813"}, @generic={0xfa, 0x2, "fdfe172bea99a2b8221b0ffee73ff14bc6306f12b0ce26d8b1a8ac6b7f52a67ca628765a74a973000191f2a8645c57efd85edbe4e610e7cd23a83c064c14d61667dee9b94b1d41f02d8fd982d647145729cfe6e5d6ce4113a24ec31c379088fb423e027ecb4517a55d0fc0718abebc335b344f6d7d674896abc9c432fe5d030543f2d84e0092e570aa54e11eb5c1158df6a718255fd7fa8a28c17701357a38a4f02335687d50716e594e25ae400e7e941d5ad5156b1627adb2a79351f2634d9da6cf1c28923b9062f8667037273b2f029a31c47bd774094355ce4f034aadc5fa5607718f4de9752b4e78cd7a806116a51fc449bdae30b0ab"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0x4f, 0x4, 0x3}}]}}, {{0x9, 0x4, 0xda, 0xb, 0xe, 0xb3, 0x49, 0xb3, 0xff, [@uac_control={{0xa, 0x24, 0x1, 0x3, 0x5c}, [@processing_unit={0x9, 0x24, 0x7, 0x4, 0x3, 0xb0, "f915"}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x302, 0x6, 0x5, 0x3}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x203, 0x3, 0x4a, 0x9, 0x5, 0x5}]}, @hid_hid={0x9, 0x21, 0xffff, 0x3, 0x1, {0x22, 0xb1f}}], [{{0x9, 0x5, 0x7, 0x2, 0x8, 0x8c, 0x3, 0x9}}, {{0x9, 0x5, 0x5, 0x3, 0x10, 0x9, 0x9f, 0x83, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x8000}]}}, {{0x9, 0x5, 0xf, 0xc, 0x12e, 0x8, 0x3b, 0xe, [@generic={0x94, 0x22, "862ec7f08694abc14e06e2a98869b393b8f509f56b70be6e2ec45740ee03df8cb9242e8f57a921ee50ede155cae839dbeef73f378e4f7dbc17774b782bb37e7ec64e20704c485e0fa815be52f23f3e47c245777fd4da8aa7aae0cd14bc2308bc7992a4d724d8030c049454220b2f61ffc023a87d40d9a6c1db79545963527c1fc31dc76595cb58064d03c149766adf83ddfa"}, @generic={0x24, 0x10, "5fa8044fcd35fdc04a4d9210aacf1096760339041720a4987c8984a20f110dfd19ff"}]}}, {{0x9, 0x5, 0x7, 0x1, 0x40, 0x1, 0x0, 0xa, [@generic={0xd0, 0xf, "dc5ae8820023a7bd2baa1369bcf30313fef4923c090c3dc9ff7d9c27d8c94bc93fed8254a609e536fdf791aea72668da4e62eaf60fa72d5fa677d23d8c66915f2bc1ba63ba8380010bd629a2288cbad3bc490d46a9876c5c78dd49b95125dda3cc2679bdb14b4a27174cb83cbd14f19901597aacaf63f6adf45386fd1beb547b2e9ca1ea5603170438bb5fbe427ab65439603de27ac082744731e8e2e73cab583d66bf4f96a19a2e34f5c922f1d132fd1c8c2c0977909e585dc10b473d9feb35cdcdf45f09e0563e0a773d9ddaf2"}]}}, {{0x9, 0x5, 0x2, 0x8, 0x400, 0x4, 0x1, 0x1}}, {{0x9, 0x5, 0x8, 0x11, 0x8, 0x4, 0x3, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xfb, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8}]}}, {{0x9, 0x5, 0x4, 0x3, 0x10, 0x79, 0x9, 0x0, [@generic={0x94, 0x3, "7044dada6c5656eab41ec6c4c30c3465ee46f2915b9524e39d77c7c84a01415b2445b3d7fc0f66cf7f0c7137910c5b157146c98ffc4dc22107707967ef948c9cafd3612886b3ca20189a4f7d9e4e9e135eb1a5806df4d56f50f94b3dfd7951d69f466d1b13fe867be6ae7a454dc83a9488001ed88bfac1e3ae02e0da5e47de1d1c91d73516aa57fbf26eb9138f59be4c479d"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x1}]}}, {{0x9, 0x5, 0x3, 0x0, 0x8, 0x9, 0x8, 0xf5, [@generic={0xbb, 0x1f, "dea427b5ff4c446884e1c3bdce420d85b92e6f2d841ee16d4efa6eaa0209a5220be528be53831502db6273fd688814dbd0d7de805c671578a9bc90ab41db6fc176014420a1b4f40c49196916199cec3d833f03bc8cbdecdab2bf59a96ebacbbc85158975f82eaace2b9b4c8fdc167d1df23224da7df5c3b987ad991cf8f827b0abe2d8d8a7c3e4c0c93b4f99e83b75fe5ebd2b09c6085152c6e9acdc4883939af4182feadbf7154a1b2fa4cc5199c0bc7e96ce747738e8621d"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x3e6e}]}}, {{0x9, 0x5, 0x6, 0x4, 0x0, 0xf, 0x9, 0x7, [@generic={0x47, 0x3, "1adfa54003398fa8cf1696e60600cee0a8da61b018dcde966a5de97029d9b4dda39fc828aeb11ed3df20cd01400b41eb8d2a07c2d50840a5035144f50c3d0ad80bc07300db"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x400, 0x3, 0x40, 0x2e, [@generic={0xc7, 0x30, "ce0fc978c656dd0ae1a8c8b89422f8a990f2d6aea0218a42065c17780dd4eb3f808b78f1000c444026b1aa8c3dd2011d0238c38dc68aa884d66fb5872e2d075af4e10ea63ed01a9dc82b07008d376b96037ffe69e8684cdc278bb93e98624fb8cc59f07be8b14f52b24974b633f28c4a73e31dff9ca3ad73c70138590a21fc008d57eb967dc5f15feb841f7a001ddc32418e00b937ee51d3f5581bbd6e1a2cce91c0fd8ea720de97d786ec3328bd3c167837a3cdd0692b6b3855b7a5873f8864292e1f379e"}]}}, {{0x9, 0x5, 0x80, 0xc, 0x8, 0x2, 0x3, 0x7, [@generic={0xe7, 0xb, "ed0530832e7133f518714f4f14a258e3bbed8b7eb8504a5e98d98c0712defd7f6e8705fac952fc94e75a33a4d8798baad25db62dded24e465ac4a2fdecb504c49f8ce8a5c21e01e8df0678b600d0d2f286fcfe49036222da7881d3d3c1eeec8951736cb1465db06dcc931882d9f67199c2cb49bd811f79782d14b794e828b767d0bbb55582dda6d6e53fa138fdebce426cdee49e6f224c8ae1e35c6de9c361ea74cf087fba2b961ef4e7cf8cdb0cc8cca20e9a12f5612b6af8ce810a8178c1aab47e2b98c39c063836760a3e9c6fdee77d97eb7d54135f3af7fda5e28f9033ae32211ad80a"}, @generic={0xfb, 0x31, "cd45a8e645487c07d8451040744527b30bca2abdf052e76e97d79a3e9260fe26049574e3f305fe64d64b95a5304d2ee67e004153e5c63f5b5cef1287478babdbf2ffca81ae9346e6577c0456bc627349dccad0a0de9bc106e993c247354319d1477efdc56aac71249d89a8727d5644e5c86d17d9261028de62aeb7fffbb2ee14731a6709920e507f562629342270236381bf292ee4c4f34d74f628184e9ef99a443f3074a4a7f4d50d5598d6f183e15faf965b7f3fdf01a0a7e6d9516c8ce0435878e819a2d662739b393d5cc4016c540614c859da7a3116755f9453611a5e320c31ff4316cee3651c8d8220e8c65cf0e5e3951b702336f137"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x8, 0xfe, 0x8, [@generic={0xf, 0x22, "482fc5191d0c278799d81d2178"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x3a7, 0x3, 0x0, 0x80}}, {{0x9, 0x5, 0x1, 0x10, 0x8, 0x93, 0x0, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xd, 0x6}, @generic={0xc5, 0x0, "67c6499cef2c9187e512a3c59cba51ecba4c8baf9f09dfbd5c496a12d6f5359e4fa784b231a11c577e88e363c3825e5b24404ece30e2c95c86531dbf240905d07546da63c6a0d694a297fb518fed8ca80af50387e97402bbf86c50c00cf272c1c220c447bf285073000f93593dc21342330894dd0b7b3e5cc0d3d846fc80c0edffe9b96d955990ce421618dce900d1ccca394691dfb6db06c471e0be7e67cbdb4b9c0d67b3956e5f881f8430d5d671160bf2eb499aea69c7e36b790bd83d1413b2d627"}]}}]}}]}}]}}, &(0x7f0000001780)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0xd1, 0x6, 0x3, 0x40, 0x65}, 0x45, &(0x7f0000000080)={0x5, 0xf, 0x45, 0x1, [@generic={0x40, 0x10, 0xb, "cbe5da0f2667bfcc6f22a6188d585f01862fd41ed22d9dce4969ce6e079c7e68b2f5938d4d1f497b4267a66746127a81590d1254c1e997eb5b6bd6d374"}]}, 0x6, [{0xa1, &(0x7f0000000100)=@string={0xa1, 0x3, "aa5c23f0cfbb5896e56f48b705db47049048c61ae8a662ed415d15a4c96445a48073de1aa78f5302af3a3f171480ce144bed55f495e0332247748039dd85ee6c3ec0815db36a48732c8e3b7d5332e7286b53c3dff9f2d4a7d6fd4b0088b3a2a88df24b49b0df83bf10bb6234ad0cc1259c7c1327a2bde6fed1dbd8de6d71f013a3b5ca1a1a14ecb8f44c98fec7931e2396101a5aca34735350ea43f5d78524"}}, {0x4, &(0x7f00000014c0)=@lang_id={0x4, 0x3, 0x436}}, {0x4, &(0x7f0000001500)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f0000001540)=@lang_id={0x4, 0x3, 0x422}}, {0x102, &(0x7f0000001800)=@string={0x102, 0x3, "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"}}, {0xde, &(0x7f0000001680)=@string={0xde, 0x3, "e7125540c59b5e603a1a6af1da89552dfef602e6c6b5a2a014d407a61af0190d679c291060b85d4f0b20c0b5462024d19578e9eea99b2d926a142399f23df8a9b889f5dfb5d311ff1a3249624bf8581985e65687cd4fe726443989ab4129aa0a505b7399d09fbfb67ffdb19c5955249a5be688b4e12c20d49445a5e0cd20ef41135ed59d97bbfd38ac991775fb913dd9cd807d78ed3ef7814c16dfcc13bb7bbcf208c4c8b9bbad4cea7626f3f430134aebe7b30d7481a36e62b9327670b06cfde0a0837d86b92108ef54dace66c22b10b39e51586692f645f4604358"}}]})
r1 = socket$key(0xf, 0x3, 0x2)
mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x200000c, 0x831, 0xffffffffffffffff, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000000201040000000000000000020000052400028014000180080001000000000008000200ac1e00010c000280050001000000000024000380140001800800010000000000080002de531414000c0002800500010000000000240001"], 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
getdents64(r3, &(0x7f0000002f40)=""/4098, 0x1002)
sendmsg$key(r1, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100090a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

1.484518543s ago: executing program 1 (id=8338):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb, 0x2000000})

1.438143837s ago: executing program 1 (id=8339):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00006d3000/0x4000)=nil, 0x4000, 0x66)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0)
write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0)
r3 = gettid()
r4 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r4, 0xc1004110, &(0x7f0000000000)={0x3, [0x6, 0xffff1337, 0x3], [{0x0, 0xa, 0x0, 0x1}, {0x35, 0x35}, {0x9, 0x131}, {0x2, 0x3}, {0x0, 0xa5}, {}, {0x80000000, 0xfffffffd}, {0x0, 0x7fff}, {0xf}, {0xfffffffd}, {0x0, 0x2}, {0x0, 0xfffffffd}], 0xc})
r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_SETGAMMA(r5, 0xc02064a5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0})
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f0000000040)=0x2fff)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
syz_usb_connect(0x2, 0x0, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00')
preadv(r7, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/230, 0xe6}], 0x1, 0x185, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010027bd7000fedbdf2500000000", @ANYRES32=r8, @ANYBLOB="1e5600000000000044459d51404c7a26e265c64cdb3b7f5e301fe7a0b50a30f1f54b"], 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x80)
syz_open_dev$video(&(0x7f0000000000), 0x101, 0xc8380)

857.040222ms ago: executing program 2 (id=8340):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x2710, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x3ff, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0xfffffffffffffffd, 0x7, 0xefffffffffffffff, 0x2000000000000, 0x0, 0x2000000, 0xfffffffffffffffe, 0x1c, 0x0, 0xffffffffffffffff, 0x7], 0x0, 0x41901})
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@arm64={0x80, 0xd, 0x25, '\x00', 0x7fff})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00')
exit(0x1ff)
write$UHID_CREATE2(r3, 0x0, 0x0)

855.065824ms ago: executing program 5 (id=8341):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x50, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8052)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="60000000090603ffffffffffffeff900050000000900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c000180080001400a0101010c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000540)={0x1c, 0x8, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20000010)

724.741786ms ago: executing program 5 (id=8342):
r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"})
pipe2(&(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x0)
fcntl$addseals(r1, 0x409, 0x47e8c3b29599b862)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000006c0)={0x40, 0xf, 0x4, 0x8, 0x0, 0xd, 0x0})
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/keys\x00', 0x0, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000180)={<r3=>0x0, 0x4, 0x10}, &(0x7f00000001c0)=0xc)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000200)={r3, 0xfbff, 0x3, 0x5, 0x5, 0x48}, &(0x7f0000000240)=0x14)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x8)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r5, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={<r6=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={<r7=>r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000080)={r7}, &(0x7f0000000000)=0x8)
ioctl$SNDCTL_TMR_SOURCE(r4, 0xc0045406)

638.301731ms ago: executing program 5 (id=8343):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x7, 0x5f, 0x37, 0x40, 0x471, 0x602, 0xa495, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x42, 0xd8, 0x0, 0xa, [{{0x9, 0x4, 0x0, 0x10, 0x1, 0x32, 0x3a, 0xb4, 0x8, [], [{{0x9, 0x5, 0x7, 0x2, 0x10, 0x7f, 0xdc, 0x14}}]}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x102, &(0x7f00000004c0)=@string={0x102, 0x3, "8048becfa83dccd8ad2f00bbf4e8cacd84fc0c9ec02c48f8b51b4ac4f4ed938ed37d749d559b04c758e3bdd451856775b8d90d0675e46681fbc3a33c33ed03f7318180281421d1ce6b632c5e13fb7a6af6d23861c2f3caac532616441df51bfd2fffc825032ec41cb8e6ed0052fd57384a0d81d575a54b44b7d61f53a3b48c1044c8f55adbe011f0894f2e6c9d83373fa3159ad81fb248e60000c9f798c1d6ce9a9e5c9caf305e8ea01d3e832afec9a98e8a3d91c392649537075890b2d055ff44ba9b604e16c9c960212de61ae59b242f713fe7de5d055cbaf23ee95977005695e0e9124f1fee71beb1869970597c92691baf00"/256}}, {0x102, &(0x7f0000000340)=@string={0x102, 0x3, "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"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0xc07}}, {0xa8, &(0x7f0000000140)=@string={0xa8, 0x3, "09a1823b07e6c300e8dfeb0347091a22cf5688e8a9a7c8a51fcc781ba5ddd6785caa3a964a478fd7544e08e33810d04cfdfe1d0c53a6cba18c9c9bf20babdb1d0af61480e6bdd443566b2cfef25609298722198c4523f7aaa45df5fad84e5c23aaf089cab6458ab412a70cbc7fc9817aa3335da1f90bdc548290188a88c096f0c5c422a9414f44892b59939e959f4bf7557ca1b2a61d2102356e0722dac3fc99265ebb9d0b99"}}, {0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x2401}}]})
syz_usb_connect$uac1(0x3, 0xc8, &(0x7f0000000600)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb6, 0x3, 0x1, 0xd, 0x0, 0xf9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x800, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x6, 0x2, 0x0, 0x7, "607a0634"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xe, 0x80, 0x9, "ca33d76ba4"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xd, 0x4, 0xf, {0x7, 0x25, 0x1, 0x81, 0x80, 0x800}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x0, 0x1, 0x3, 0xf2, "7946d2581de1c63f"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x4, 0x2, 0x5, 0xc, "b814d8c99ce55d"}, @as_header={0x7, 0x24, 0x1, 0x80, 0x5, 0x1}, @as_header={0x7, 0x24, 0x1, 0x5, 0x9, 0x5}, @as_header={0x7, 0x24, 0x1, 0x1, 0xac, 0x1001}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x81, 0x3, 0x9, 0x5, "e1"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x10, 0x9, 0x8, {0x7, 0x25, 0x1, 0x80, 0x32, 0x7}}}}}}}]}}, &(0x7f0000000a00)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x6, 0x8, 0x6, 0x20, 0x40}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0xa, [{0xb5, &(0x7f0000000200)=@string={0xb5, 0x3, "ea64bc053f96acefaa06ebe17e653e97c71886e74b999d69a1f75b0052ac89ca75bad29b8281e097d1e06683b41536482f8bc36f7aa6fe730c79fe43cb7a1f3eeb612d2b7ca6f295475bf969d8ff01b0c0e26eebc825e5914b2d01a1c6ed74e626e728aa3019300b4f5495809a3b4027c840f4ef5e3c7764cb9e8aca5e4cf2c62fc813e4218788aba880ce221cd97858fb8f7ee6f64bb836e30d0ddeeb73252b330f29b9d75e71b3a7294715221092ac2ec712"}}, {0x97, &(0x7f0000000700)=@string={0x97, 0x3, "581c38291cd6423affac82e6a7553db3523d8cd9c8e327f75318e84b47d89ebf945da6dac41bf2a770bd708b31d67034ccd451d4901ec7588e83956f01fa5843048d215ca4a501225819ee25b036c033054dba959e3d406600643ead600427ed1133e776f3d4f5b15cffb1c8d605259d5979c8c14c77a195d422abcb584f4f948d2541e08ae9d539e75715090a28b933c51932d215"}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x401}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x48, &(0x7f0000000840)=@string={0x48, 0x3, "ac4580dbafe2559bf814ba37e59c4fa6b91b58fb9479a15b5e28a0a2502b39d315e049330c8d8f80174fae2f1b5489e2fa425f3041b68599aab0423cd9c060902df82dc8a4d5"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0xc07}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x816}}, {0x5a, &(0x7f0000000940)=@string={0x5a, 0x3, "119c9906ee7502a9ee7accc80d9b6f3730e5d50f7913a5b697706f1e8929dff00714f14a04986348a18d9c03e5675038325e88356875a368326c2e999a8e31ca726703dc038dc390fa174677299d7b35d03464e32cb20b83"}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x42f}}]})
syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000ac0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x1ae7, 0x9001, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x80, 0xc0, 0x7f, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0xa, {0x9, 0x21, 0x6, 0xc0, 0x1, {0x22, 0x8e6}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xd, 0x80, 0x83}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0xfe, 0xfd, 0xe}}]}}}]}}]}}, &(0x7f0000000d80)={0xa, &(0x7f0000000b00)={0xa, 0x6, 0x250, 0x6, 0xf, 0x1, 0xff, 0x9}, 0x1c3, &(0x7f0000000b40)={0x5, 0xf, 0x1c3, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x5, 0x10, 0xcf}, @generic={0xa1, 0x10, 0xb, "35d25fbe2a30cbc25c93f3c68883e8bb1b4a5d46114afc5b94a9b292ec448d0a4e355b12888a136eafbb8aa21ee6c82e4cf5976dfa513a2566b2b70667a26bdcb19ec092803817f0cc6f4fd0e738984837dde058882418504e954f7100ecb194831546830ea67c119b6d6a7cd6fcf0aff6b649b6d874c4fe641dcc4bae644518fbb5dc2145ec87a2eaf11b5e6484701f9ce8283d9890ebc4febf08922b63"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x18, 0x2, 0x1, 0x6, 0x6}, @generic={0x9d, 0x10, 0x3, "43aae7114ef20bc8405014fcd2cdf6af8bfb2e054a2fb29e3f70851db2c76ce9be2eb932d925724f12597e270b14cd01e82510a9743d56ca25680bdbc2385dba6c0a6e6c6da483bd2421bfb54c8c9134f4aaa2b3b26e2bd6c23aaaae80a0864a47f7ac8e78897159aa046ee6f4649e83257d4209ca4dcb1c4a2875852b94bca2a5d584ca3caf541411dd6dea1dff98700f3ee1bd8c8ef3b6c8bc"}, @generic={0x60, 0x10, 0xa, "0ad42b6781c34e268d2a2b867e1abca17709e89dc6614d62919b025c4c540ec1a3d9d38d0c1e0ffcb8a24d95883af6361055fe35c36d4fb24676efd8e001bc2ba149c03d79f8444d3ca8639c5cb9e5acc0c76e5b8bdb5d1568cfe11c80"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x20, 0x59, 0x7, 0xfff8}]}, 0x1, [{0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x2c09}}]})

567.803141ms ago: executing program 3 (id=8344):
syz_usb_connect(0x3, 0x24, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0xdb, 0x16, 0x89, 0x20, 0x2040, 0xd900, 0xa92c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4c, 0x0, 0x0, 0xb2, 0x50, 0xcf}}]}}]}}, 0x0)
r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003)
ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f0000000800)=[{0x1a00, 0x800, 0x0, 0x0}, {0x8, 0xc800, 0x0, 0x0}, {0x8, 0xc001, 0x0, 0x0}], 0x3})

0s ago: executing program 0 (id=8345):
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0x3b4f, 0x80, 0x7ffe, 0x40024e}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0x200ffb, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x13, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {0x0, 0xffffffffffffff37}, {&(0x7f0000000480)=""/109, 0x6d}, {&(0x7f0000000540)=""/75, 0x4b}], 0x4}, 0x0, 0x2161, 0x1, {0x2}})
io_uring_enter(r0, 0x3d0e, 0x609a, 0x49, 0x0, 0x0)
setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e22, 0x7fff, @empty, 0x3ff}, {0xa, 0x4e22, 0x2, @mcast2, 0xfffffff8}, 0xffffffffffffffff, {[0x2, 0x2, 0x7, 0x1, 0x7fffffff, 0x7ff, 0x8001, 0x4]}}, 0x5c)
syz_io_uring_setup(0x17eb, &(0x7f0000000080)={0x0, 0x6a62, 0x8000, 0x1, 0x2f0}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140))
syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x51ef, 0x80}, &(0x7f0000000100), &(0x7f0000000200)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index, 0x0, 0x0, 0x8})
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r5, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @local, 0xf}], 0x1c)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r6, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x0, @local, 0xf}], 0x1c)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r7, &(0x7f0000000800), 0x0}, 0x20)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r8, &(0x7f00000000c0), 0x0, 0x23, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f00000000c0)={0xffffffffffffff47, 0x5, 0x8, 0x8001, 0x0, 0x1, 0xfff, 0xfffffdfffffffffe, 0xfa11, 0xffffff82}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, 0x0, 0x40008a0)
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0)
r11 = socket$kcm(0x2, 0x3, 0x2)
socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r11, 0x8916, &(0x7f0000000040)={'veth1_macvtap\x00', @random="0200ac7f7f00"})

kernel console output (not intermixed with test programs):

 fail, usb_ep_enable returned -22
[ 1411.191319][   T39] usb 4-1: ucan: probing device on interface #0
[ 1411.215397][T17770] usb 3-1: Using ep0 maxpacket: 32
[ 1411.222594][T17770] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[ 1411.233335][T16918] usb 2-1: config 220 has too many interfaces: 184, using maximum allowed: 32
[ 1411.246126][T16918] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 184
[ 1411.275058][T17770] usb 3-1: config 0 has no interface number 0
[ 1411.281223][T17770] usb 3-1: config 0 interface 184 has no altsetting 0
[ 1411.300943][T16918] usb 2-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85
[ 1411.301246][T16918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1411.429183][T16918] gspca_main: sn9c2028-2.14.0 probing 0c45:8008
[ 1411.443089][T17770] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 1411.458401][T17770] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1411.476449][T17770] usb 3-1: Product: syz
[ 1411.484482][T17770] usb 3-1: Manufacturer: syz
[ 1411.489742][T17770] usb 3-1: SerialNumber: syz
[ 1411.497833][T17770] usb 3-1: config 0 descriptor??
[ 1411.592934][T17770] smsc75xx v1.0.0
[ 1411.645344][   T39] usb 4-1: ucan: device reported invalid tx-fifo size
[ 1411.652539][   T39] usb 4-1: ucan: probe failed; try to update the device firmware
[ 1411.739139][T16918] gspca_sn9c2028: read1 error -71
[ 1411.745969][T16918] gspca_sn9c2028: read1 error -71
[ 1411.756084][T16918] gspca_sn9c2028: read1 error -71
[ 1411.761474][T16918] sn9c2028 2-1:220.0: probe with driver sn9c2028 failed with error -71
[ 1411.778501][T16918] usb 2-1: USB disconnect, device number 93
[ 1411.911665][T17770] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[ 1411.950310][T17770] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1411.966294][T17770] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[ 1411.986043][T17770] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[ 1411.996766][T17770] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[ 1412.058603][T17770] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[ 1412.111072][T17770] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71
[ 1412.134252][T17770] usb 3-1: USB disconnect, device number 93
[ 1412.406157][T30390] FAULT_INJECTION: forcing a failure.
[ 1412.406157][T30390] name failslab, interval 1, probability 0, space 0, times 0
[ 1412.420628][T30390] CPU: 0 UID: 0 PID: 30390 Comm: syz.2.7843 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1412.420660][T30390] Tainted: [L]=SOFTLOCKUP
[ 1412.420668][T30390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1412.420680][T30390] Call Trace:
[ 1412.420689][T30390]  <TASK>
[ 1412.420697][T30390]  dump_stack_lvl+0xe8/0x150
[ 1412.420727][T30390]  should_fail_ex+0x414/0x560
[ 1412.420769][T30390]  should_failslab+0xa8/0x100
[ 1412.420794][T30390]  kmem_cache_alloc_node_noprof+0x8c/0x720
[ 1412.420825][T30390]  ? __alloc_skb+0x198/0x3a0
[ 1412.420844][T30390]  ? __alloc_skb+0x1dc/0x3a0
[ 1412.420862][T30390]  ? __local_bh_enable_ip+0xd0/0x130
[ 1412.420883][T30390]  ? __alloc_skb+0x198/0x3a0
[ 1412.420902][T30390]  __alloc_skb+0x1dc/0x3a0
[ 1412.420924][T30390]  netlink_sendmsg+0x5c6/0xb30
[ 1412.420956][T30390]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1412.420980][T30390]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1412.420997][T30390]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1412.421011][T30390]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1412.421032][T30390]  __sock_sendmsg+0x21c/0x270
[ 1412.421057][T30390]  ____sys_sendmsg+0x505/0x820
[ 1412.421080][T30390]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1412.421105][T30390]  ? import_iovec+0x74/0xa0
[ 1412.421128][T30390]  ___sys_sendmsg+0x21f/0x2a0
[ 1412.421148][T30390]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1412.421170][T30390]  ? __schedule+0x14b1/0x4fd0
[ 1412.421224][T30390]  __x64_sys_sendmsg+0x19b/0x260
[ 1412.421243][T30390]  ? irqentry_exit+0x5e8/0x670
[ 1412.421260][T30390]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1412.421277][T30390]  ? irqentry_exit+0x5e8/0x670
[ 1412.421310][T30390]  do_syscall_64+0xec/0xf80
[ 1412.421325][T30390]  ? rcu_is_watching+0x15/0xb0
[ 1412.421344][T30390]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1412.421361][T30390]  ? clear_bhb_loop+0x60/0xb0
[ 1412.421380][T30390]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1412.421396][T30390] RIP: 0033:0x7f79ed98f749
[ 1412.421412][T30390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1412.421427][T30390] RSP: 002b:00007f79ee75e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1412.421445][T30390] RAX: ffffffffffffffda RBX: 00007f79edbe6180 RCX: 00007f79ed98f749
[ 1412.421458][T30390] RDX: 0000000000040000 RSI: 0000200000001380 RDI: 0000000000000009
[ 1412.421470][T30390] RBP: 00007f79ee75e090 R08: 0000000000000000 R09: 0000000000000000
[ 1412.421480][T30390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1412.421491][T30390] R13: 00007f79edbe6218 R14: 00007f79edbe6180 R15: 00007f79edd0fa28
[ 1412.421517][T30390]  </TASK>
[ 1412.426317][   T39] usb 4-1: USB disconnect, device number 10
[ 1412.959674][T30396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7846'.
[ 1412.969029][T30396] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7846'.
[ 1412.981153][T30396] FAULT_INJECTION: forcing a failure.
[ 1412.981153][T30396] name failslab, interval 1, probability 0, space 0, times 0
[ 1413.059584][T30396] CPU: 0 UID: 0 PID: 30396 Comm: syz.3.7846 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1413.059617][T30396] Tainted: [L]=SOFTLOCKUP
[ 1413.059625][T30396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1413.059638][T30396] Call Trace:
[ 1413.059646][T30396]  <TASK>
[ 1413.059655][T30396]  dump_stack_lvl+0xe8/0x150
[ 1413.059692][T30396]  should_fail_ex+0x414/0x560
[ 1413.059727][T30396]  should_failslab+0xa8/0x100
[ 1413.059753][T30396]  __kvmalloc_node_noprof+0x175/0x920
[ 1413.059780][T30396]  ? alloc_netdev_mqs+0xa4b/0x11b0
[ 1413.059814][T30396]  alloc_netdev_mqs+0xa4b/0x11b0
[ 1413.059848][T30396]  rtnl_create_link+0x31f/0xcf0
[ 1413.059882][T30396]  rtnl_newlink_create+0x25c/0xb00
[ 1413.059919][T30396]  ? __pfx_rtnl_newlink_create+0x10/0x10
[ 1413.059947][T30396]  ? __pfx___mutex_lock+0x10/0x10
[ 1413.059980][T30396]  ? ns_capable+0x8a/0xf0
[ 1413.060003][T30396]  rtnl_newlink+0x16e7/0x1c90
[ 1413.060040][T30396]  ? __pfx_rtnl_newlink+0x10/0x10
[ 1413.060059][T30396]  ? do_syscall_64+0xec/0xf80
[ 1413.060078][T30396]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1413.060133][T30396]  ? kasan_quarantine_put+0xbb/0x1f0
[ 1413.060152][T30396]  ? lockdep_hardirqs_on+0x7b/0x110
[ 1413.060177][T30396]  ? kmem_cache_free+0x197/0x620
[ 1413.060196][T30396]  ? nlmon_xmit+0xb0/0x100
[ 1413.060231][T30396]  ? __lock_acquire+0x6b6/0x2cf0
[ 1413.060261][T30396]  ? __local_bh_enable_ip+0xd0/0x130
[ 1413.060281][T30396]  ? lockdep_hardirqs_on+0x7b/0x110
[ 1413.060300][T30396]  ? __dev_queue_xmit+0x289/0x31c0
[ 1413.060324][T30396]  ? __local_bh_enable_ip+0xd0/0x130
[ 1413.060341][T30396]  ? __dev_queue_xmit+0x289/0x31c0
[ 1413.060373][T30396]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[ 1413.060409][T30396]  ? __pfx_rtnl_newlink+0x10/0x10
[ 1413.060429][T30396]  rtnetlink_rcv_msg+0x7cf/0xb70
[ 1413.060454][T30396]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[ 1413.060474][T30396]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1413.060493][T30396]  ? ref_tracker_free+0x63a/0x7d0
[ 1413.060513][T30396]  ? __asan_memcpy+0x40/0x70
[ 1413.060541][T30396]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1413.060559][T30396]  ? __skb_clone+0x63/0x7a0
[ 1413.060589][T30396]  netlink_rcv_skb+0x208/0x470
[ 1413.060614][T30396]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1413.060635][T30396]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1413.060677][T30396]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1413.060710][T30396]  netlink_unicast+0x82f/0x9e0
[ 1413.060740][T30396]  ? __pfx_netlink_unicast+0x10/0x10
[ 1413.060761][T30396]  ? __alloc_skb+0x198/0x3a0
[ 1413.060782][T30396]  ? netlink_sendmsg+0x642/0xb30
[ 1413.060805][T30396]  ? skb_put+0x11b/0x210
[ 1413.060830][T30396]  netlink_sendmsg+0x805/0xb30
[ 1413.060863][T30396]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1413.060892][T30396]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1413.060919][T30396]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1413.060938][T30396]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1413.060964][T30396]  __sock_sendmsg+0x21c/0x270
[ 1413.060996][T30396]  sock_write_iter+0x279/0x360
[ 1413.061025][T30396]  ? __pfx_sock_write_iter+0x10/0x10
[ 1413.061062][T30396]  ? bpf_lsm_file_permission+0x9/0x20
[ 1413.061082][T30396]  ? security_file_permission+0x75/0x290
[ 1413.061110][T30396]  vfs_write+0x5c9/0xb30
[ 1413.061134][T30396]  ? __pfx_sock_write_iter+0x10/0x10
[ 1413.061160][T30396]  ? __pfx_vfs_write+0x10/0x10
[ 1413.061190][T30396]  ? __fget_files+0x2a/0x420
[ 1413.061223][T30396]  ksys_write+0x145/0x250
[ 1413.061245][T30396]  ? __pfx_ksys_write+0x10/0x10
[ 1413.061275][T30396]  do_syscall_64+0xec/0xf80
[ 1413.061295][T30396]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1413.061314][T30396]  ? trace_irq_disable+0x37/0x100
[ 1413.061339][T30396]  ? clear_bhb_loop+0x60/0xb0
[ 1413.061363][T30396]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1413.061382][T30396] RIP: 0033:0x7f5fcf78f749
[ 1413.061400][T30396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1413.061419][T30396] RSP: 002b:00007f5fd06d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1413.061440][T30396] RAX: ffffffffffffffda RBX: 00007f5fcf9e5fa0 RCX: 00007f5fcf78f749
[ 1413.061456][T30396] RDX: 000000000000033a RSI: 0000200000000040 RDI: 0000000000000003
[ 1413.061470][T30396] RBP: 00007f5fd06d0090 R08: 0000000000000000 R09: 0000000000000000
[ 1413.061483][T30396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1413.061495][T30396] R13: 00007f5fcf9e6038 R14: 00007f5fcf9e5fa0 R15: 00007f5fcfb0fa28
[ 1413.061528][T30396]  </TASK>
[ 1413.535685][T30398] netlink: 220 bytes leftover after parsing attributes in process `syz.1.7845'.
[ 1413.591961][T30398] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1414.867568][T30427] FAULT_INJECTION: forcing a failure.
[ 1414.867568][T30427] name failslab, interval 1, probability 0, space 0, times 0
[ 1414.990932][T30427] CPU: 0 UID: 0 PID: 30427 Comm: syz.0.7857 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1414.990963][T30427] Tainted: [L]=SOFTLOCKUP
[ 1414.990969][T30427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1414.990981][T30427] Call Trace:
[ 1414.990989][T30427]  <TASK>
[ 1414.990998][T30427]  dump_stack_lvl+0xe8/0x150
[ 1414.991032][T30427]  should_fail_ex+0x414/0x560
[ 1414.991065][T30427]  should_failslab+0xa8/0x100
[ 1414.991091][T30427]  kmem_cache_alloc_noprof+0x88/0x710
[ 1414.991124][T30427]  ? sctp_chunkify+0x5a/0x260
[ 1414.991156][T30427]  sctp_chunkify+0x5a/0x260
[ 1414.991188][T30427]  _sctp_make_chunk+0x122/0x290
[ 1414.991219][T30427]  sctp_make_init+0x58b/0xd30
[ 1414.991242][T30427]  ? is_bpf_text_address+0x292/0x2b0
[ 1414.991281][T30427]  ? __pfx_sctp_make_init+0x10/0x10
[ 1414.991323][T30427]  ? stack_trace_save+0x9c/0xe0
[ 1414.991351][T30427]  ? __pfx_stack_trace_save+0x10/0x10
[ 1414.991379][T30427]  sctp_sf_do_prm_asoc+0xd2/0x3f0
[ 1414.991403][T30427]  sctp_do_sm+0x1e7/0x5c40
[ 1414.991426][T30427]  ? __pfx_sctp_pname+0x10/0x10
[ 1414.991451][T30427]  ? kasan_save_track+0x4f/0x80
[ 1414.991469][T30427]  ? kasan_save_track+0x3e/0x80
[ 1414.991495][T30427]  ? __kmalloc_cache_noprof+0x3e2/0x700
[ 1414.991514][T30427]  ? sctp_sendmsg_to_asoc+0x1307/0x18d0
[ 1414.991534][T30427]  ? ____sys_sendmsg+0x52d/0x820
[ 1414.991555][T30427]  ? ___sys_sendmsg+0x21f/0x2a0
[ 1414.991572][T30427]  ? __sys_sendmmsg+0x227/0x430
[ 1414.991589][T30427]  ? __x64_sys_sendmmsg+0xa0/0xc0
[ 1414.991611][T30427]  ? do_syscall_64+0xec/0xf80
[ 1414.991636][T30427]  ? __pfx_sctp_do_sm+0x10/0x10
[ 1414.991697][T30427]  ? __sk_mem_raise_allocated+0x290/0x1270
[ 1414.991723][T30427]  ? __genradix_ptr+0x1e1/0x220
[ 1414.991755][T30427]  sctp_primitive_ASSOCIATE+0x95/0xc0
[ 1414.991781][T30427]  sctp_sendmsg_to_asoc+0x1088/0x18d0
[ 1414.991808][T30427]  ? sctp_assoc_add_peer+0xce1/0x13b0
[ 1414.991840][T30427]  ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10
[ 1414.991859][T30427]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[ 1414.991885][T30427]  ? __local_bh_enable_ip+0xd0/0x130
[ 1414.991905][T30427]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[ 1414.991926][T30427]  ? security_sctp_bind_connect+0x7e/0x2e0
[ 1414.991947][T30427]  sctp_sendmsg+0x1941/0x2840
[ 1414.991964][T30427]  ? __lock_acquire+0x6b6/0x2cf0
[ 1414.991993][T30427]  ? __pfx_sctp_sendmsg+0x10/0x10
[ 1414.992011][T30427]  ? aa_sk_perm+0x15f/0x920
[ 1414.992037][T30427]  ? aa_sk_perm+0x7ee/0x920
[ 1414.992065][T30427]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1414.992092][T30427]  ? sock_rps_record_flow+0x19/0x410
[ 1414.992122][T30427]  ? inet_sendmsg+0x2f4/0x370
[ 1414.992152][T30427]  __sock_sendmsg+0x19c/0x270
[ 1414.992184][T30427]  ____sys_sendmsg+0x52d/0x820
[ 1414.992214][T30427]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1414.992240][T30427]  ? import_iovec+0x74/0xa0
[ 1414.992262][T30427]  ___sys_sendmsg+0x21f/0x2a0
[ 1414.992283][T30427]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1414.992312][T30427]  ? kstrtouint+0x6e/0xe0
[ 1414.992366][T30427]  ? __fget_files+0x2a/0x420
[ 1414.992390][T30427]  ? __fget_files+0x3a0/0x420
[ 1414.992424][T30427]  __sys_sendmmsg+0x227/0x430
[ 1414.992454][T30427]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1414.992495][T30427]  ? __mutex_unlock_slowpath+0x1a1/0x730
[ 1414.992541][T30427]  ? ksys_write+0x22a/0x250
[ 1414.992563][T30427]  ? __pfx_ksys_write+0x10/0x10
[ 1414.992589][T30427]  __x64_sys_sendmmsg+0xa0/0xc0
[ 1414.992615][T30427]  do_syscall_64+0xec/0xf80
[ 1414.992636][T30427]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1414.992656][T30427]  ? trace_irq_disable+0x37/0x100
[ 1414.992682][T30427]  ? clear_bhb_loop+0x60/0xb0
[ 1414.992706][T30427]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1414.992726][T30427] RIP: 0033:0x7f295658f749
[ 1414.992745][T30427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1414.992764][T30427] RSP: 002b:00007f29574c4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1414.992786][T30427] RAX: ffffffffffffffda RBX: 00007f29567e5fa0 RCX: 00007f295658f749
[ 1414.992803][T30427] RDX: 0000000000000002 RSI: 00002000000021c0 RDI: 0000000000000003
[ 1414.992817][T30427] RBP: 00007f29574c4090 R08: 0000000000000000 R09: 0000000000000000
[ 1414.992831][T30427] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000002
[ 1414.992844][T30427] R13: 00007f29567e6038 R14: 00007f29567e5fa0 R15: 00007f295690fa28
[ 1414.992876][T30427]  </TASK>
[ 1415.415231][T17770] usb 2-1: new high-speed USB device number 94 using dummy_hcd
[ 1415.875889][T17770] usb 2-1: config 220 has too many interfaces: 184, using maximum allowed: 32
[ 1415.887458][T17770] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 184
[ 1415.982324][T17770] usb 2-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85
[ 1415.992577][T17770] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1416.094771][T17770] gspca_main: sn9c2028-2.14.0 probing 0c45:8008
[ 1416.165219][   T39] usb 3-1: new high-speed USB device number 94 using dummy_hcd
[ 1416.291164][T17770] gspca_sn9c2028: read1 error -71
[ 1416.297198][T17770] gspca_sn9c2028: read1 error -71
[ 1416.310774][T17770] gspca_sn9c2028: read1 error -71
[ 1416.316616][T17770] sn9c2028 2-1:220.0: probe with driver sn9c2028 failed with error -71
[ 1416.345047][   T39] usb 3-1: Using ep0 maxpacket: 32
[ 1416.357899][   T39] usb 3-1: config 0 has an invalid interface number: 76 but max is 0
[ 1416.376964][   T39] usb 3-1: config 0 has no interface number 0
[ 1416.384285][T17770] usb 2-1: USB disconnect, device number 94
[ 1416.421263][   T39] usb 3-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c
[ 1416.431122][   T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1416.444242][   T39] usb 3-1: Product: syz
[ 1416.477495][   T39] usb 3-1: Manufacturer: syz
[ 1416.496621][   T39] usb 3-1: SerialNumber: syz
[ 1416.513839][   T39] usb 3-1: config 0 descriptor??
[ 1416.560954][   T39] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state.
[ 1416.570934][   T39] dw2102: su3000_power_ctrl: 1, initialized 0
[ 1416.578626][   T39] dvb-usb: bulk message failed: -22 (2/0)
[ 1416.590655][   T39] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1416.604220][   T39] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0)
[ 1416.716557][   T39] usb 3-1: media controller created
[ 1416.776676][T30438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1416.836117][T30438] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1416.874840][   T39] dvb-usb: bulk message failed: -22 (6/0)
[ 1416.895265][   T39] dw2102: i2c transfer failed.
[ 1416.900082][   T39] dvb-usb: bulk message failed: -22 (6/0)
[ 1416.920859][   T39] dw2102: i2c transfer failed.
[ 1416.931008][   T39] dvb-usb: bulk message failed: -22 (6/0)
[ 1416.945170][   T39] dw2102: i2c transfer failed.
[ 1416.955380][   T39] dvb-usb: bulk message failed: -22 (6/0)
[ 1416.971301][   T39] dw2102: i2c transfer failed.
[ 1416.978968][   T39] dvb-usb: bulk message failed: -22 (6/0)
[ 1416.984744][   T39] dw2102: i2c transfer failed.
[ 1417.006012][   T39] dvb-usb: bulk message failed: -22 (6/0)
[ 1417.012980][   T39] dw2102: i2c transfer failed.
[ 1417.062535][   T39] dvb-usb: MAC address: 02:02:02:02:02:02
[ 1417.101588][   T39] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1417.129833][   T39] dvb-usb: bulk message failed: -22 (3/0)
[ 1417.136063][   T39] dw2102: command 0x0e transfer failed.
[ 1417.141717][   T39] dvb-usb: bulk message failed: -22 (3/0)
[ 1417.150411][   T39] dw2102: command 0x0e transfer failed.
[ 1417.467265][   T39] dvb-usb: bulk message failed: -22 (3/0)
[ 1417.481153][   T39] dw2102: command 0x0e transfer failed.
[ 1417.501696][   T39] dvb-usb: bulk message failed: -22 (3/0)
[ 1417.521568][   T39] dw2102: command 0x0e transfer failed.
[ 1417.535306][T16894] usb 2-1: new full-speed USB device number 95 using dummy_hcd
[ 1417.548605][   T39] dvb-usb: bulk message failed: -22 (1/0)
[ 1417.567638][   T39] dw2102: command 0x51 transfer failed.
[ 1417.663771][   T39] DVB: Unable to find symbol ds3000_attach()
[ 1417.674535][   T39] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0'
[ 1417.708889][T16894] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1417.735025][T16894] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1417.838062][T16894] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1417.910485][T16894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1417.946931][   T39] rc_core: IR keymap rc-su3000 not found
[ 1417.967704][   T39] Registered IR keymap rc-empty
[ 1417.985186][   T39] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0
[ 1418.011381][   T39] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input109
[ 1418.086739][   T39] dvb-usb: schedule remote query interval to 150 msecs.
[ 1418.096330][   T39] dw2102: su3000_power_ctrl: 0, initialized 1
[ 1418.102534][   T39] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected.
[ 1418.257124][   T39] dvb-usb: bulk message failed: -22 (1/0)
[ 1418.263094][   T39] dw2102: i2c transfer failed.
[ 1418.272373][T30474] FAULT_INJECTION: forcing a failure.
[ 1418.272373][T30474] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1418.307189][T30474] CPU: 1 UID: 0 PID: 30474 Comm: syz.5.7870 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1418.307219][T30474] Tainted: [L]=SOFTLOCKUP
[ 1418.307227][T30474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1418.307240][T30474] Call Trace:
[ 1418.307247][T30474]  <TASK>
[ 1418.307255][T30474]  dump_stack_lvl+0xe8/0x150
[ 1418.307283][T30474]  should_fail_ex+0x414/0x560
[ 1418.307317][T30474]  _copy_from_user+0x2d/0xb0
[ 1418.307342][T30474]  __sys_bpf+0x1e3/0x860
[ 1418.307371][T30474]  ? __pfx___sys_bpf+0x10/0x10
[ 1418.307411][T30474]  ? ksys_write+0x22a/0x250
[ 1418.307443][T30474]  ? __pfx_ksys_write+0x10/0x10
[ 1418.307469][T30474]  __x64_sys_bpf+0x7c/0x90
[ 1418.307494][T30474]  do_syscall_64+0xec/0xf80
[ 1418.307514][T30474]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1418.307533][T30474]  ? trace_irq_disable+0x37/0x100
[ 1418.307558][T30474]  ? clear_bhb_loop+0x60/0xb0
[ 1418.307581][T30474]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1418.307600][T30474] RIP: 0033:0x7fb647f8f749
[ 1418.307618][T30474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1418.307635][T30474] RSP: 002b:00007fb648d62038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1418.307656][T30474] RAX: ffffffffffffffda RBX: 00007fb6481e5fa0 RCX: 00007fb647f8f749
[ 1418.307672][T30474] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 0000000000000000
[ 1418.307686][T30474] RBP: 00007fb648d62090 R08: 0000000000000000 R09: 0000000000000000
[ 1418.307699][T30474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1418.307711][T30474] R13: 00007fb6481e6038 R14: 00007fb6481e5fa0 R15: 00007fb64830fa28
[ 1418.307742][T30474]  </TASK>
[ 1418.314734][T16894] usb 2-1: GET_CAPABILITIES returned 0
[ 1418.515336][T16894] usbtmc 2-1:16.0: can't read capabilities
[ 1418.574256][   T39] dvb-usb: bulk message failed: -22 (1/0)
[ 1418.648980][   T39] dw2102: i2c transfer failed.
[ 1418.674905][T30451] bond3: (slave bond_slave_1): Device is not our slave
[ 1418.725124][T30451] bond3: option active_slave: invalid value (bond_slave_1)
[ 1419.009731][T16918] dvb-usb: bulk message failed: -22 (1/0)
[ 1419.016207][T16918] dw2102: i2c transfer failed.
[ 1419.074120][T30451] bond3 (unregistering): Released all slaves
[ 1419.186407][T16918] dvb-usb: bulk message failed: -22 (1/0)
[ 1419.192192][T16918] dw2102: i2c transfer failed.
[ 1419.278960][T16894] usb 3-1: USB disconnect, device number 94
[ 1419.504129][T16894] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected.
[ 1419.527669][T15742] usb 2-1: USB disconnect, device number 95
[ 1420.045736][T16894] usb 3-1: new high-speed USB device number 95 using dummy_hcd
[ 1420.071228][T30498] netlink: 'syz.5.7876': attribute type 1 has an invalid length.
[ 1420.215631][T16894] usb 3-1: Using ep0 maxpacket: 32
[ 1420.275655][T16894] usb 3-1: config 0 has an invalid interface number: 196 but max is 0
[ 1420.284242][T16894] usb 3-1: config 0 has no interface number 0
[ 1420.318288][T16894] usb 3-1: config 0 interface 196 has no altsetting 0
[ 1420.328043][T30498] bond6: entered promiscuous mode
[ 1420.333391][T30498] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1420.380500][T16894] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[ 1420.434994][T16894] usb 3-1: New USB device strings: Mfr=1, Product=15, SerialNumber=3
[ 1420.465007][T30503] 8021q: adding VLAN 0 to HW filter on device bond7
[ 1420.597118][T30503] bond6: (slave bond7): making interface the new active one
[ 1420.606238][T16894] usb 3-1: Product: syz
[ 1420.610537][T30503] bond7: entered promiscuous mode
[ 1420.626775][T30503] bond6: (slave bond7): Enslaving as an active interface with an up link
[ 1420.636936][T16894] usb 3-1: Manufacturer: syz
[ 1420.668346][T16894] usb 3-1: SerialNumber: syz
[ 1420.776151][T16894] usb 3-1: config 0 descriptor??
[ 1421.739743][T30523] FAULT_INJECTION: forcing a failure.
[ 1421.739743][T30523] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1421.806282][T30523] CPU: 0 UID: 0 PID: 30523 Comm: syz.5.7881 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1421.806303][T30523] Tainted: [L]=SOFTLOCKUP
[ 1421.806307][T30523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1421.806314][T30523] Call Trace:
[ 1421.806322][T30523]  <TASK>
[ 1421.806327][T30523]  dump_stack_lvl+0xe8/0x150
[ 1421.806346][T30523]  should_fail_ex+0x414/0x560
[ 1421.806366][T30523]  prepare_alloc_pages+0x22b/0x650
[ 1421.806383][T30523]  __alloc_frozen_pages_noprof+0x123/0x370
[ 1421.806397][T30523]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1421.806411][T30523]  ? lruvec_stat_mod_folio+0x6f/0x2e0
[ 1421.806428][T30523]  ? policy_nodemask+0x27c/0x720
[ 1421.806443][T30523]  alloc_pages_mpol+0x232/0x4a0
[ 1421.806457][T30523]  vma_alloc_folio_noprof+0xe4/0x200
[ 1421.806471][T30523]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[ 1421.806490][T30523]  folio_prealloc+0x30/0x180
[ 1421.806508][T30523]  do_wp_page+0x1231/0x5810
[ 1421.806523][T30523]  ? irqentry_exit+0x5e8/0x670
[ 1421.806540][T30523]  ? ___pte_offset_map+0x29/0x240
[ 1421.806572][T30523]  ? __pfx_do_wp_page+0x10/0x10
[ 1421.806585][T30523]  ? do_raw_spin_lock+0x121/0x290
[ 1421.806601][T30523]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1421.806620][T30523]  handle_mm_fault+0x14c5/0x32b0
[ 1421.806634][T30523]  ? __pte_offset_map_lock+0x13e/0x210
[ 1421.806655][T30523]  ? handle_mm_fault+0xdb/0x32b0
[ 1421.806673][T30523]  ? __pfx_handle_mm_fault+0x10/0x10
[ 1421.806688][T30523]  ? follow_page_pte+0xd03/0x13e0
[ 1421.806707][T30523]  ? __pfx_follow_page_pte+0x10/0x10
[ 1421.806727][T30523]  __get_user_pages+0x1650/0x29f0
[ 1421.806756][T30523]  __gup_longterm_locked+0xde4/0x1660
[ 1421.806776][T30523]  ? sanity_check_pinned_pages+0x1241/0x1300
[ 1421.806793][T30523]  gup_fast_fallback+0x1d26/0x2290
[ 1421.806822][T30523]  ? __pfx_gup_fast_fallback+0x10/0x10
[ 1421.806834][T30523]  ? ____sys_recvmsg+0x1c9/0x460
[ 1421.806847][T30523]  ? __x64_sys_recvmsg+0x198/0x260
[ 1421.806858][T30523]  ? do_syscall_64+0xec/0xf80
[ 1421.806868][T30523]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1421.806880][T30523]  ? pin_user_pages_fast+0x4d/0xb0
[ 1421.806895][T30523]  iov_iter_extract_pages+0x35f/0x5e0
[ 1421.806913][T30523]  extract_iter_to_sg+0xe46/0x24e0
[ 1421.806931][T30523]  ? __pfx_extract_iter_to_sg+0x10/0x10
[ 1421.806943][T30523]  ? rcu_is_watching+0x15/0xb0
[ 1421.806956][T30523]  ? trace_kmalloc+0x1f/0xb0
[ 1421.806966][T30523]  ? sock_kmalloc+0xd6/0x160
[ 1421.806981][T30523]  ? __asan_memset+0x22/0x50
[ 1421.806998][T30523]  af_alg_get_rsgl+0x436/0x810
[ 1421.807018][T30523]  skcipher_recvmsg+0x3d1/0x11d0
[ 1421.807033][T30523]  ? aa_sk_perm+0x7ee/0x920
[ 1421.807051][T30523]  ? __pfx_skcipher_recvmsg+0x10/0x10
[ 1421.807062][T30523]  ? __lock_acquire+0x6b6/0x2cf0
[ 1421.807074][T30523]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[ 1421.807083][T30523]  ? security_socket_recvmsg+0x7e/0x2e0
[ 1421.807099][T30523]  ? __pfx_skcipher_recvmsg+0x10/0x10
[ 1421.807110][T30523]  sock_recvmsg+0x22c/0x270
[ 1421.807129][T30523]  ____sys_recvmsg+0x1c9/0x460
[ 1421.807145][T30523]  ? __pfx_____sys_recvmsg+0x10/0x10
[ 1421.807166][T30523]  ? import_iovec+0x74/0xa0
[ 1421.807179][T30523]  ___sys_recvmsg+0x1b5/0x510
[ 1421.807191][T30523]  ? get_pid_task+0x20/0x1f0
[ 1421.807206][T30523]  ? __pfx____sys_recvmsg+0x10/0x10
[ 1421.807221][T30523]  ? __fget_files+0x2a/0x420
[ 1421.807243][T30523]  ? __fget_files+0x3a0/0x420
[ 1421.807261][T30523]  __x64_sys_recvmsg+0x198/0x260
[ 1421.807275][T30523]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[ 1421.807292][T30523]  ? __pfx_ksys_write+0x10/0x10
[ 1421.807308][T30523]  do_syscall_64+0xec/0xf80
[ 1421.807318][T30523]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1421.807327][T30523]  ? trace_irq_disable+0x37/0x100
[ 1421.807340][T30523]  ? clear_bhb_loop+0x60/0xb0
[ 1421.807353][T30523]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1421.807363][T30523] RIP: 0033:0x7fb647f8f749
[ 1421.807373][T30523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1421.807382][T30523] RSP: 002b:00007fb648d62038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[ 1421.807395][T30523] RAX: ffffffffffffffda RBX: 00007fb6481e5fa0 RCX: 00007fb647f8f749
[ 1421.807403][T30523] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004
[ 1421.807410][T30523] RBP: 00007fb648d62090 R08: 0000000000000000 R09: 0000000000000000
[ 1421.807416][T30523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1421.807423][T30523] R13: 00007fb6481e6038 R14: 00007fb6481e5fa0 R15: 00007fb64830fa28
[ 1421.807439][T30523]  </TASK>
[ 1422.757168][   T30] kauditd_printk_skb: 8 callbacks suppressed
[ 1422.757180][   T30] audit: type=1800 audit(1767558663.420:3142): pid=30525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.7883" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[ 1422.999991][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[ 1423.009889][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[ 1423.540867][T16894] ipheth 3-1:0.196: Unable to find endpoints
[ 1423.557406][T16894] usb 3-1: USB disconnect, device number 95
[ 1423.615984][T30552] netlink: 'syz.2.7888': attribute type 1 has an invalid length.
[ 1423.700929][T30552] bond16: entered promiscuous mode
[ 1423.763043][T30552] 8021q: adding VLAN 0 to HW filter on device bond16
[ 1423.830581][T30554] 8021q: adding VLAN 0 to HW filter on device bond17
[ 1423.853820][T30554] bond16: (slave bond17): making interface the new active one
[ 1424.101342][T30554] bond17: entered promiscuous mode
[ 1424.108291][T30554] bond16: (slave bond17): Enslaving as an active interface with an up link
[ 1424.371721][T30559] kvm: kvm [30558]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010003) = 0xffffffffffffffff
[ 1424.932633][   T39] usb 2-1: new high-speed USB device number 96 using dummy_hcd
[ 1425.195392][   T39] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1425.206847][   T39] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1425.246128][   T39] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1425.273539][   T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1425.288081][   T39] usb 2-1: SerialNumber: syz
[ 1425.532549][T30566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1425.541668][T30566] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1425.581535][T30566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1425.593214][T30566] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1425.614770][   T39] usb 2-1: unknown interface protocol 0x17, assuming v1
[ 1425.663428][   T39] usb 2-1: 0:2 : does not exist
[ 1425.670052][   T39] usb 2-1: unit 3 not found!
[ 1425.690029][   T39] usb 2-1: USB disconnect, device number 96
[ 1426.073997][T30591] netlink: 'syz.0.7900': attribute type 1 has an invalid length.
[ 1426.123198][T30591] bond13: entered promiscuous mode
[ 1426.179682][T30591] 8021q: adding VLAN 0 to HW filter on device bond13
[ 1426.268923][T30593] 8021q: adding VLAN 0 to HW filter on device bond14
[ 1426.278384][T30593] bond13: (slave bond14): making interface the new active one
[ 1426.286871][T30593] bond14: entered promiscuous mode
[ 1426.292994][T30593] bond13: (slave bond14): Enslaving as an active interface with an up link
[ 1426.455079][   T39] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[ 1426.605019][   T39] usb 4-1: Using ep0 maxpacket: 16
[ 1426.616791][   T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1426.653004][   T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1426.673951][   T39] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1426.710059][   T39] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1426.724664][   T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1426.754505][   T39] usb 4-1: config 0 descriptor??
[ 1426.982544][T16918] usb 3-1: new full-speed USB device number 96 using dummy_hcd
[ 1427.147891][T16918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1427.159447][T16918] usb 3-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00
[ 1427.169650][T16918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1427.185837][T16918] usb 3-1: config 0 descriptor??
[ 1427.275301][T16919] usb 2-1: new high-speed USB device number 97 using dummy_hcd
[ 1427.397172][   T39] microsoft 0003:045E:07DA.002A: report is too long
[ 1427.411967][   T39] microsoft 0003:045E:07DA.002A: item 0 4 0 8 parsing failed
[ 1427.420268][T30610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1427.435537][   T39] microsoft 0003:045E:07DA.002A: parse failed
[ 1427.443222][   T39] microsoft 0003:045E:07DA.002A: probe with driver microsoft failed with error -22
[ 1427.456277][T30610] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1427.466855][T16919] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1427.481364][T16919] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1427.490729][T16919] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1427.503255][T16919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1427.543354][T16919] usb 2-1: config 0 descriptor??
[ 1427.721057][T16918] acrux 0003:1A34:F705.002B: unexpected long global item
[ 1427.728638][T16918] acrux 0003:1A34:F705.002B: parse failed
[ 1427.734720][T16918] acrux 0003:1A34:F705.002B: probe with driver acrux failed with error -22
[ 1427.770327][T16919] usb 2-1: string descriptor 0 read error: -71
[ 1427.789191][T16919] usb 2-1: USB disconnect, device number 97
[ 1428.748939][T16919] IPVS: starting estimator thread 0...
[ 1428.873380][T30644] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7918'.
[ 1428.886191][T30640] IPVS: using max 48 ests per chain, 115200 per kthread
[ 1429.405864][T30654] netlink: 'syz.2.7917': attribute type 29 has an invalid length.
[ 1430.206308][T16894] usb 4-1: USB disconnect, device number 11
[ 1430.599092][T30675] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7926'.
[ 1430.811612][T16894] usb 2-1: new high-speed USB device number 98 using dummy_hcd
[ 1430.990783][T16894] usb 2-1: Using ep0 maxpacket: 32
[ 1431.048779][T16894] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1431.212726][T16894] usb 2-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=58.d6
[ 1431.224085][T16894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1431.234069][T16894] usb 2-1: Product: syz
[ 1431.244175][T16894] usb 2-1: Manufacturer: syz
[ 1431.252442][T16894] usb 2-1: SerialNumber: syz
[ 1431.293635][T16894] usb 2-1: config 0 descriptor??
[ 1431.298175][T30681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1431.316171][T16894] snd_usb_variax 2-1:0.0: Line 6 Variax Workbench found
[ 1431.323530][T16894] usb 2-1: selecting invalid altsetting 1
[ 1431.381558][T16894] snd_usb_variax 2-1:0.0: set_interface failed
[ 1431.389051][T30681] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1431.404115][T16894] snd_usb_variax 2-1:0.0: Line 6 Variax Workbench now disconnected
[ 1431.464557][T16894] snd_usb_variax 2-1:0.0: probe with driver snd_usb_variax failed with error -22
[ 1431.876500][T30686] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5)
[ 1431.883059][T30686] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[ 1431.893306][T30686] vhci_hcd vhci_hcd.0: Device attached
[ 1432.122904][T30687] vhci_hcd: connection closed
[ 1432.123237][T16394] vhci_hcd vhci_hcd.0: stop threads
[ 1432.142228][T16394] vhci_hcd vhci_hcd.0: release socket
[ 1432.160078][T16394] vhci_hcd vhci_hcd.0: disconnect device
[ 1433.290343][T16894] usb 2-1: USB disconnect, device number 98
[ 1433.816115][T16894] usb 2-1: new high-speed USB device number 99 using dummy_hcd
[ 1433.975192][T16894] usb 2-1: Using ep0 maxpacket: 32
[ 1433.994658][T16894] usb 2-1: config 0 has an invalid interface number: 66 but max is 0
[ 1434.013436][T16894] usb 2-1: config 0 has no interface number 0
[ 1434.033227][T16894] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[ 1434.052519][T16894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1434.089334][T16894] usb 2-1: Product: syz
[ 1434.102094][T16894] usb 2-1: Manufacturer: syz
[ 1434.118863][T16894] usb 2-1: SerialNumber: syz
[ 1434.180138][T16894] usb 2-1: config 0 descriptor??
[ 1434.186313][T30724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1434.198963][T16894] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state.
[ 1434.236361][T30724] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1434.252823][T16894] dvb-usb: bulk message failed: -22 (2/0)
[ 1434.268037][T16894] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1434.283092][T16894] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold)
[ 1434.296205][T16894] usb 2-1: media controller created
[ 1434.332380][T16894] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1434.389187][T16894] cxusb: set interface failed
[ 1434.403304][T30704] cxusb: i2c rd: len=133 is too big!
[ 1434.403304][T30704] 
[ 1434.412982][T16894] dvb-usb: bulk message failed: -22 (1/0)
[ 1434.510747][T16894] DVB: Unable to find symbol lgdt330x_attach()
[ 1434.519998][T16894] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold'
[ 1434.664122][T16894] rc_core: IR keymap rc-dvico-portable not found
[ 1434.671041][T16894] Registered IR keymap rc-empty
[ 1434.684258][T16894] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0
[ 1434.704782][T16894] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input110
[ 1434.748693][T16894] dvb-usb: schedule remote query interval to 100 msecs.
[ 1434.793091][T16894] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected.
[ 1434.905215][T16894] dvb-usb: bulk message failed: -22 (1/0)
[ 1434.994155][T16894] usb 2-1: USB disconnect, device number 99
[ 1435.114445][T16894] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected.
[ 1435.150848][T16918] IPVS: starting estimator thread 0...
[ 1435.265322][T30732] IPVS: using max 28 ests per chain, 67200 per kthread
[ 1436.488465][T30741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1436.537049][T30741] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1436.913125][T30755] binder: BINDER_SET_CONTEXT_MGR already set
[ 1436.919335][T30755] binder: 30751:30755 ioctl 4018620d 200000000040 returned -16
[ 1437.337312][T30758] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7948'.
[ 1437.499443][T30761] usb usb8: usbfs: process 30761 (syz.1.7949) did not claim interface 0 before use
[ 1437.605384][T30761] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7949'.
[ 1437.915185][T16919] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[ 1438.040483][T16918] IPVS: starting estimator thread 0...
[ 1438.075721][T16919] usb 4-1: Using ep0 maxpacket: 16
[ 1438.092170][T16919] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88
[ 1438.115323][   T39] usb 2-1: new high-speed USB device number 100 using dummy_hcd
[ 1438.126537][T16919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1438.144181][T16919] usb 4-1: Product: syz
[ 1438.148702][T30777] IPVS: using max 54 ests per chain, 129600 per kthread
[ 1438.162150][T16919] usb 4-1: Manufacturer: syz
[ 1438.171612][T16919] usb 4-1: SerialNumber: syz
[ 1438.193256][T16919] usb 4-1: config 0 descriptor??
[ 1438.290781][   T39] usb 2-1: config 220 has too many interfaces: 184, using maximum allowed: 32
[ 1438.313069][   T39] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 184
[ 1438.340608][   T39] usb 2-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85
[ 1438.375120][   T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1438.411061][T30765] syzkaller0: entered promiscuous mode
[ 1438.486462][T30765] syzkaller0: entered allmulticast mode
[ 1438.612077][   T39] gspca_main: sn9c2028-2.14.0 probing 0c45:8008
[ 1438.809223][   T39] gspca_sn9c2028: read1 error -71
[ 1438.820522][   T39] gspca_sn9c2028: read1 error -71
[ 1438.830915][   T39] gspca_sn9c2028: read1 error -71
[ 1438.843485][   T39] sn9c2028 2-1:220.0: probe with driver sn9c2028 failed with error -71
[ 1438.895473][   T39] usb 2-1: USB disconnect, device number 100
[ 1439.199921][T30790] fuse: Bad value for 'rootmode'
[ 1439.258800][T30793] fuse: Invalid rootmode
[ 1439.282558][T16919] speedtch 4-1:0.0: speedtch_bind: data interface not found!
[ 1439.291343][T16919] speedtch 4-1:0.0: usbatm_usb_probe: bind failed: -19!
[ 1439.316612][T16919] usb 4-1: USB disconnect, device number 12
[ 1440.566961][T30812] FAULT_INJECTION: forcing a failure.
[ 1440.566961][T30812] name failslab, interval 1, probability 0, space 0, times 0
[ 1440.706767][T30812] CPU: 0 UID: 0 PID: 30812 Comm: syz.1.7965 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1440.706788][T30812] Tainted: [L]=SOFTLOCKUP
[ 1440.706792][T30812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1440.706800][T30812] Call Trace:
[ 1440.706805][T30812]  <TASK>
[ 1440.706819][T30812]  dump_stack_lvl+0xe8/0x150
[ 1440.706838][T30812]  should_fail_ex+0x414/0x560
[ 1440.706858][T30812]  should_failslab+0xa8/0x100
[ 1440.706872][T30812]  __kmalloc_cache_noprof+0x84/0x700
[ 1440.706884][T30812]  ? trace_kmalloc+0x1f/0xb0
[ 1440.706892][T30812]  ? call_usermodehelper_setup+0x8e/0x270
[ 1440.706902][T30812]  ? __kasan_kmalloc+0x93/0xb0
[ 1440.706922][T30812]  call_usermodehelper_setup+0x8e/0x270
[ 1440.706932][T30812]  ? __pfx_free_modprobe_argv+0x10/0x10
[ 1440.706946][T30812]  __request_module+0x38f/0x5d0
[ 1440.706961][T30812]  ? __pfx___request_module+0x10/0x10
[ 1440.706974][T30812]  ? __up_read+0x25d/0x670
[ 1440.706991][T30812]  ? alg_bind+0x26b/0x570
[ 1440.707005][T30812]  alg_bind+0x284/0x570
[ 1440.707018][T30812]  __sys_bind+0x2c6/0x3e0
[ 1440.707029][T30812]  ? __pfx___sys_bind+0x10/0x10
[ 1440.707048][T30812]  ? __pfx_ksys_write+0x10/0x10
[ 1440.707062][T30812]  __x64_sys_bind+0x7a/0x90
[ 1440.707071][T30812]  do_syscall_64+0xec/0xf80
[ 1440.707083][T30812]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1440.707093][T30812]  ? trace_irq_disable+0x37/0x100
[ 1440.707107][T30812]  ? clear_bhb_loop+0x60/0xb0
[ 1440.707119][T30812]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1440.707129][T30812] RIP: 0033:0x7f4d7558f749
[ 1440.707140][T30812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1440.707149][T30812] RSP: 002b:00007f4d76409038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[ 1440.707162][T30812] RAX: ffffffffffffffda RBX: 00007f4d757e5fa0 RCX: 00007f4d7558f749
[ 1440.707170][T30812] RDX: 0000000000000058 RSI: 0000200000000540 RDI: 0000000000000005
[ 1440.707177][T30812] RBP: 00007f4d76409090 R08: 0000000000000000 R09: 0000000000000000
[ 1440.707184][T30812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1440.707191][T30812] R13: 00007f4d757e6038 R14: 00007f4d757e5fa0 R15: 00007f4d7590fa28
[ 1440.707206][T30812]  </TASK>
[ 1441.965474][T30827] binder: 30824:30827 unknown command 1768042286
[ 1442.007051][T30827] binder: 30824:30827 ioctl c0306201 200000000080 returned -22
[ 1442.086440][T30827] binder: 30824:30827 ioctl c0306201 200000000240 returned -11
[ 1442.215060][T16891] usb 2-1: new high-speed USB device number 101 using dummy_hcd
[ 1442.283644][T30831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1442.334226][T30831] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1442.386660][T30831] : entered promiscuous mode
[ 1442.487033][T16891] usb 2-1: Using ep0 maxpacket: 32
[ 1442.512368][T16891] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1442.546693][T16891] usb 2-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=58.d6
[ 1442.566192][T16891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1442.695866][   T30] audit: type=1326 audit(1767558683.290:3143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30834 comm="syz.5.7972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb647f8f749 code=0x7ffc0000
[ 1442.725792][   T30] audit: type=1326 audit(1767558683.290:3144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30834 comm="syz.5.7972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb647f8f749 code=0x7ffc0000
[ 1442.759818][T16891] usb 2-1: Product: syz
[ 1442.766883][T16891] usb 2-1: Manufacturer: syz
[ 1442.773125][T16891] usb 2-1: SerialNumber: syz
[ 1442.853564][T16891] usb 2-1: config 0 descriptor??
[ 1442.894231][T16891] snd_usb_variax 2-1:0.0: Line 6 Variax Workbench found
[ 1442.906993][   T30] audit: type=1326 audit(1767558683.290:3145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30834 comm="syz.5.7972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fb647f8f749 code=0x7ffc0000
[ 1442.918849][T16891] usb 2-1: selecting invalid altsetting 1
[ 1442.929967][   T30] audit: type=1326 audit(1767558683.290:3146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30834 comm="syz.5.7972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb647f8f749 code=0x7ffc0000
[ 1442.959500][   T30] audit: type=1326 audit(1767558683.290:3147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30834 comm="syz.5.7972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb647f8f749 code=0x7ffc0000
[ 1442.984435][   T30] audit: type=1326 audit(1767558683.290:3148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30834 comm="syz.5.7972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fb647f8f749 code=0x7ffc0000
[ 1443.112659][T16891] snd_usb_variax 2-1:0.0: set_interface failed
[ 1443.141658][T16891] snd_usb_variax 2-1:0.0: Line 6 Variax Workbench now disconnected
[ 1443.158066][T16891] snd_usb_variax 2-1:0.0: probe with driver snd_usb_variax failed with error -22
[ 1443.194294][   T30] audit: type=1326 audit(1767558683.290:3149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30834 comm="syz.5.7972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb647f8f749 code=0x7ffc0000
[ 1443.411675][   T30] audit: type=1326 audit(1767558683.290:3150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30834 comm="syz.5.7972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb647f8f749 code=0x7ffc0000
[ 1443.529219][   T30] audit: type=1326 audit(1767558683.290:3151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30834 comm="syz.5.7972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fb647f8f749 code=0x7ffc0000
[ 1443.572263][   T30] audit: type=1326 audit(1767558683.290:3152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30834 comm="syz.5.7972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb647f8f749 code=0x7ffc0000
[ 1443.988038][T30849] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7976'.
[ 1444.289486][T16891] usb 2-1: USB disconnect, device number 101
[ 1447.128737][T16918] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[ 1447.285313][T16918] usb 4-1: Using ep0 maxpacket: 32
[ 1447.293467][T16918] usb 4-1: config 0 has an invalid interface number: 66 but max is 0
[ 1447.303008][T16918] usb 4-1: config 0 has no interface number 0
[ 1447.317195][T16918] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[ 1447.336665][T16891] usb 2-1: new high-speed USB device number 102 using dummy_hcd
[ 1447.345292][T16918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1447.363561][T16918] usb 4-1: Product: syz
[ 1447.388480][T16918] usb 4-1: Manufacturer: syz
[ 1447.393111][T16918] usb 4-1: SerialNumber: syz
[ 1447.401605][T16918] usb 4-1: config 0 descriptor??
[ 1447.418855][T16918] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state.
[ 1447.435661][T16918] dvb-usb: bulk message failed: -22 (2/0)
[ 1447.464828][T16918] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1447.495429][T16918] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold)
[ 1447.503726][T16918] usb 4-1: media controller created
[ 1447.506424][T16891] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1447.544663][T16891] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1447.560772][T16891] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1447.566930][T16918] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1447.570619][T16891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1447.587766][T16891] usb 2-1: SerialNumber: syz
[ 1447.622286][T30877] cxusb: i2c rd: len=133 is too big!
[ 1447.622286][T30877] 
[ 1447.632111][T16918] cxusb: set interface failed
[ 1447.662413][T16918] dvb-usb: bulk message failed: -22 (1/0)
[ 1447.830685][T30880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1447.837555][T16918] DVB: Unable to find symbol lgdt330x_attach()
[ 1447.849749][T16918] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold'
[ 1447.860095][T30880] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1448.005955][T30880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1448.048366][T30880] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1448.097343][T16891] usb 2-1: unknown interface protocol 0x17, assuming v1
[ 1448.125554][T30896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1448.149466][T16891] usb 2-1: 0:2 : does not exist
[ 1448.154377][T16891] usb 2-1: unit 3 not found!
[ 1448.165147][T16918] rc_core: IR keymap rc-dvico-portable not found
[ 1448.171658][T16918] Registered IR keymap rc-empty
[ 1448.179007][T16918] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0
[ 1448.191980][T30896] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1448.199850][T30898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7991'.
[ 1448.209263][T16918] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input111
[ 1448.224368][T16918] dvb-usb: schedule remote query interval to 100 msecs.
[ 1448.231568][T16918] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected.
[ 1448.307233][T16891] usb 2-1: USB disconnect, device number 102
[ 1448.335060][T16919] dvb-usb: bulk message failed: -22 (1/0)
[ 1448.449492][T16918] usb 4-1: USB disconnect, device number 13
[ 1448.461553][T30898] syz_tun (unregistering): left allmulticast mode
[ 1448.535538][T20890] udevd[20890]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1448.567067][T30898] syz_tun (unregistering): left promiscuous mode
[ 1448.583888][T30898] bridge0: port 3(syz_tun) entered disabled state
[ 1448.704388][T16918] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected.
[ 1448.955899][T30908] netlink: 112 bytes leftover after parsing attributes in process `syz.3.7993'.
[ 1449.734000][T30918] fuse: Bad value for 'user_id'
[ 1449.748367][T30918] fuse: Bad value for 'user_id'
[ 1449.857780][T30920] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7999'.
[ 1450.198731][T30934] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8000'.
[ 1451.298427][T30943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1451.315190][T30943] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1451.374618][T30943] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8005'.
[ 1451.515715][T30948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1451.540204][T30949] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8006'.
[ 1451.881736][T30948] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1453.106188][T30962] fuse: Bad value for 'user_id'
[ 1453.133804][T30962] fuse: Bad value for 'user_id'
[ 1453.401400][T16894] IPVS: starting estimator thread 0...
[ 1453.502582][T30965] IPVS: using max 53 ests per chain, 127200 per kthread
[ 1455.128872][T30997] fuse: Unknown parameter '0x0000000000000007'
[ 1455.145750][T30997] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8018'.
[ 1455.300587][T31001] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8017'.
[ 1455.423935][T31004] fuse: Bad value for 'fd'
[ 1455.855788][T31007] fuse: Bad value for 'fd'
[ 1456.268766][T31020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1456.327368][T31020] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1456.389155][T31020] xfrm0: entered promiscuous mode
[ 1456.394250][T31020] xfrm0: entered allmulticast mode
[ 1456.512454][T31026] bridge3: entered promiscuous mode
[ 1456.529171][T31026] bridge3: entered allmulticast mode
[ 1456.565224][T16919] usb 2-1: new high-speed USB device number 103 using dummy_hcd
[ 1456.726152][T16919] usb 2-1: Using ep0 maxpacket: 8
[ 1456.757231][T31028] netlink: 84 bytes leftover after parsing attributes in process `syz.3.8032'.
[ 1456.770168][T16919] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[ 1456.786935][T16919] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1456.798521][T31028] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8032'.
[ 1456.798564][T31028] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8032'.
[ 1456.845953][T16919] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1
[ 1456.859776][T16919] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64
[ 1456.892184][T16919] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[ 1456.906759][T16919] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1456.919677][T16919] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1
[ 1456.945688][T31032] fuse: Bad value for 'fd'
[ 1456.972301][T16919] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64
[ 1457.005299][T16919] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[ 1457.037524][T16919] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1457.106241][T16919] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1
[ 1457.124155][T31036] FAULT_INJECTION: forcing a failure.
[ 1457.124155][T31036] name failslab, interval 1, probability 0, space 0, times 0
[ 1457.131283][T16919] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64
[ 1457.162356][T31038] tls_set_device_offload_rx: netdev not found
[ 1457.181453][T16919] usb 2-1: string descriptor 0 read error: -22
[ 1457.195654][T16919] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1457.204416][T31036] CPU: 0 UID: 0 PID: 31036 Comm: syz.2.8036 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1457.204448][T31036] Tainted: [L]=SOFTLOCKUP
[ 1457.204455][T31036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1457.204467][T31036] Call Trace:
[ 1457.204481][T31036]  <TASK>
[ 1457.204491][T31036]  dump_stack_lvl+0xe8/0x150
[ 1457.204521][T31036]  should_fail_ex+0x414/0x560
[ 1457.204555][T31036]  should_failslab+0xa8/0x100
[ 1457.204581][T31036]  __kmalloc_cache_noprof+0x84/0x700
[ 1457.204602][T31036]  ? __nft_trans_set_add+0x5e/0x710
[ 1457.204623][T31036]  ? __pfx_nft_rhash_obj+0x10/0x10
[ 1457.204649][T31036]  ? __pfx_nft_rhash_cmp+0x10/0x10
[ 1457.204678][T31036]  __nft_trans_set_add+0x5e/0x710
[ 1457.204704][T31036]  nf_tables_newset+0x1d74/0x2540
[ 1457.204743][T31036]  ? __pfx_nf_tables_newset+0x10/0x10
[ 1457.204788][T31036]  ? __nla_parse+0x40/0x60
[ 1457.204813][T31036]  nfnetlink_rcv+0x11d9/0x2590
[ 1457.204873][T31036]  ? __pfx_nfnetlink_rcv+0x10/0x10
[ 1457.204936][T31036]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1457.204961][T31036]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1457.205000][T31036]  netlink_unicast+0x82f/0x9e0
[ 1457.205030][T31036]  ? __pfx_netlink_unicast+0x10/0x10
[ 1457.205050][T31036]  ? __alloc_skb+0x198/0x3a0
[ 1457.205070][T31036]  ? netlink_sendmsg+0x642/0xb30
[ 1457.205091][T31036]  ? skb_put+0x11b/0x210
[ 1457.205115][T31036]  netlink_sendmsg+0x805/0xb30
[ 1457.205146][T31036]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1457.205175][T31036]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1457.205201][T31036]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1457.205219][T31036]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1457.205243][T31036]  __sock_sendmsg+0x21c/0x270
[ 1457.205274][T31036]  ____sys_sendmsg+0x505/0x820
[ 1457.205301][T31036]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1457.205332][T31036]  ? import_iovec+0x74/0xa0
[ 1457.205358][T31036]  ___sys_sendmsg+0x21f/0x2a0
[ 1457.205383][T31036]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1457.205437][T31036]  ? __fget_files+0x2a/0x420
[ 1457.205460][T31036]  ? __fget_files+0x3a0/0x420
[ 1457.205499][T31036]  __x64_sys_sendmsg+0x19b/0x260
[ 1457.205526][T31036]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1457.205562][T31036]  ? __pfx_ksys_write+0x10/0x10
[ 1457.205592][T31036]  do_syscall_64+0xec/0xf80
[ 1457.205612][T31036]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1457.205630][T31036]  ? trace_irq_disable+0x37/0x100
[ 1457.205653][T31036]  ? clear_bhb_loop+0x60/0xb0
[ 1457.205676][T31036]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1457.205695][T31036] RIP: 0033:0x7f79ed98f749
[ 1457.205726][T31036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1457.205743][T31036] RSP: 002b:00007f79ee7a0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1457.205764][T31036] RAX: ffffffffffffffda RBX: 00007f79edbe5fa0 RCX: 00007f79ed98f749
[ 1457.205779][T31036] RDX: 0000000000048800 RSI: 00002000000000c0 RDI: 0000000000000003
[ 1457.205792][T31036] RBP: 00007f79ee7a0090 R08: 0000000000000000 R09: 0000000000000000
[ 1457.205805][T31036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1457.205817][T31036] R13: 00007f79edbe6038 R14: 00007f79edbe5fa0 R15: 00007f79edd0fa28
[ 1457.205867][T31036]  </TASK>
[ 1457.543013][T16919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1457.672440][T31048] FAULT_INJECTION: forcing a failure.
[ 1457.672440][T31048] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1457.704361][T16919] adutux 2-1:168.0: interrupt endpoints not found
[ 1457.744366][T31048] CPU: 0 UID: 0 PID: 31048 Comm: syz.3.8039 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1457.744397][T31048] Tainted: [L]=SOFTLOCKUP
[ 1457.744404][T31048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1457.744415][T31048] Call Trace:
[ 1457.744423][T31048]  <TASK>
[ 1457.744432][T31048]  dump_stack_lvl+0xe8/0x150
[ 1457.744460][T31048]  should_fail_ex+0x414/0x560
[ 1457.744494][T31048]  _copy_to_user+0x31/0xb0
[ 1457.744520][T31048]  simple_read_from_buffer+0xe1/0x170
[ 1457.744548][T31048]  proc_fail_nth_read+0x1b3/0x220
[ 1457.744572][T31048]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1457.744596][T31048]  ? rw_verify_area+0x2a6/0x4d0
[ 1457.744630][T31048]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1457.744652][T31048]  vfs_read+0x200/0xa30
[ 1457.744668][T31048]  ? fdget_pos+0x247/0x320
[ 1457.744694][T31048]  ? __pfx___mutex_lock+0x10/0x10
[ 1457.744714][T31048]  ? __pfx_vfs_read+0x10/0x10
[ 1457.744733][T31048]  ? __fget_files+0x2a/0x420
[ 1457.744758][T31048]  ? __fget_files+0x3a0/0x420
[ 1457.744780][T31048]  ? __fget_files+0x2a/0x420
[ 1457.744811][T31048]  ksys_read+0x145/0x250
[ 1457.744840][T31048]  ? __pfx_ksys_read+0x10/0x10
[ 1457.744869][T31048]  do_syscall_64+0xec/0xf80
[ 1457.744889][T31048]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1457.744907][T31048]  ? trace_irq_disable+0x37/0x100
[ 1457.744935][T31048]  ? clear_bhb_loop+0x60/0xb0
[ 1457.744957][T31048]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1457.744973][T31048] RIP: 0033:0x7f5fcf78e15c
[ 1457.744989][T31048] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1457.745007][T31048] RSP: 002b:00007f5fd06d0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1457.745027][T31048] RAX: ffffffffffffffda RBX: 00007f5fcf9e5fa0 RCX: 00007f5fcf78e15c
[ 1457.745042][T31048] RDX: 000000000000000f RSI: 00007f5fd06d00a0 RDI: 0000000000000003
[ 1457.745055][T31048] RBP: 00007f5fd06d0090 R08: 0000000000000000 R09: 0000000000000000
[ 1457.745068][T31048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1457.745081][T31048] R13: 00007f5fcf9e6038 R14: 00007f5fcf9e5fa0 R15: 00007f5fcfb0fa28
[ 1457.745112][T31048]  </TASK>
[ 1458.340721][T31056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8042'.
[ 1458.399622][T31056] random: crng reseeded on system resumption
[ 1458.693963][T31063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1458.706630][T31063] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1458.764746][T31067] fuse: Unknown parameter '0x0000000000000007'
[ 1458.784852][T31067] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8043'.
[ 1458.883184][T16894] usb 2-1: USB disconnect, device number 103
[ 1459.188310][T31074] fuse: Bad value for 'fd'
[ 1459.733609][T31083] fuse: Unknown parameter '0x0000000000000007'
[ 1459.743222][T31083] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8048'.
[ 1460.026367][T31089] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8050'.
[ 1460.370949][   T30] kauditd_printk_skb: 34 callbacks suppressed
[ 1460.370966][   T30] audit: type=1326 audit(1767558701.030:3187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31078 comm="syz.2.8049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ed98f749 code=0x7fc00000
[ 1460.555059][   T30] audit: type=1326 audit(1767558701.060:3188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31078 comm="syz.2.8049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f79ed98f749 code=0x7fc00000
[ 1460.651841][   T30] audit: type=1326 audit(1767558701.060:3189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31078 comm="syz.2.8049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ed98f749 code=0x7fc00000
[ 1460.735043][   T30] audit: type=1326 audit(1767558701.060:3190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31078 comm="syz.2.8049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ed98f749 code=0x7fc00000
[ 1460.795011][   T30] audit: type=1326 audit(1767558701.060:3191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31078 comm="syz.2.8049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ed98f749 code=0x7fc00000
[ 1460.862563][   T30] audit: type=1326 audit(1767558701.060:3192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31078 comm="syz.2.8049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ed98f749 code=0x7fc00000
[ 1460.890233][   T30] audit: type=1326 audit(1767558701.060:3193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31078 comm="syz.2.8049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ed98f749 code=0x7fc00000
[ 1460.948246][   T30] audit: type=1326 audit(1767558701.060:3194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31078 comm="syz.2.8049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ed98f749 code=0x7fc00000
[ 1461.006996][   T30] audit: type=1326 audit(1767558701.060:3195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31078 comm="syz.2.8049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ed98f749 code=0x7fc00000
[ 1461.072939][   T30] audit: type=1326 audit(1767558701.060:3196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31078 comm="syz.2.8049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ed98f749 code=0x7fc00000
[ 1461.266035][T16891] usb 2-1: new full-speed USB device number 104 using dummy_hcd
[ 1461.293320][T31109] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8053'.
[ 1461.490442][T16891] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1461.499589][T16891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1461.521892][T16891] usb 2-1: Product: syz
[ 1461.537311][T16891] usb 2-1: Manufacturer: syz
[ 1461.553189][T16891] usb 2-1: SerialNumber: syz
[ 1462.615697][T31133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8061'.
[ 1462.954720][T31139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1462.967322][T31139] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1463.158238][T31144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8065'.
[ 1463.175189][T31144] openvswitch: netlink: Missing key (keys=40, expected=80)
[ 1463.358548][T31146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1463.394798][T31146] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1463.868806][T16891] usb 2-1: 2:1 : format type 0 is detected, processed as PCM
[ 1463.878162][T16891] usb 2-1: 2:1 : sample bitwidth 205 in over sample bytes 2
[ 1463.895019][T16891] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[ 1463.990233][T16891] usb 2-1: USB disconnect, device number 104
[ 1464.160616][T31158] netlink: 'syz.3.8071': attribute type 1 has an invalid length.
[ 1464.206564][T31162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1464.235852][T31162] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1464.415458][T16918] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[ 1464.602127][T16918] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[ 1464.611854][T16918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1464.620321][T16918] usb 4-1: Product: syz
[ 1464.624661][T16918] usb 4-1: Manufacturer: syz
[ 1464.630254][T16918] usb 4-1: SerialNumber: syz
[ 1464.639280][T16918] usb 4-1: config 0 descriptor??
[ 1464.653344][T16918] gspca_main: sunplus-2.14.0 probing 055f:c230
[ 1464.705033][T16891] usb 2-1: new full-speed USB device number 105 using dummy_hcd
[ 1464.877186][T16891] usb 2-1: too many configurations: 20, using maximum allowed: 8
[ 1464.897168][T16891] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 1464.904778][T16891] usb 2-1: can't read configurations, error -61
[ 1465.094494][T16918] gspca_sunplus: reg_r err -71
[ 1465.099964][T16918] sunplus 4-1:0.0: probe with driver sunplus failed with error -71
[ 1465.119729][T16918] usb 4-1: USB disconnect, device number 14
[ 1465.294544][T16891] usb 2-1: new full-speed USB device number 106 using dummy_hcd
[ 1465.475601][T16891] usb 2-1: too many configurations: 20, using maximum allowed: 8
[ 1465.500912][T16891] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 1465.536927][T16891] usb 2-1: can't read configurations, error -61
[ 1465.686508][T16891] usb usb2-port1: attempt power cycle
[ 1466.145440][T16891] usb 2-1: new full-speed USB device number 107 using dummy_hcd
[ 1466.190618][T16891] usb 2-1: too many configurations: 20, using maximum allowed: 8
[ 1466.223794][T16891] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 1466.244748][T16891] usb 2-1: can't read configurations, error -61
[ 1466.386936][T31199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1466.387920][T31199] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1466.420888][T31202] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8080'.
[ 1466.493259][T16891] usb 2-1: new full-speed USB device number 108 using dummy_hcd
[ 1466.578442][T16891] usb 2-1: too many configurations: 20, using maximum allowed: 8
[ 1466.680516][T16891] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 1466.688346][T16891] usb 2-1: can't read configurations, error -61
[ 1466.695848][T16891] usb usb2-port1: unable to enumerate USB device
[ 1467.799965][T31220] vlan2: entered promiscuous mode
[ 1467.806747][T31220] bridge0: entered promiscuous mode
[ 1467.940124][T15702] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[ 1468.033628][T31222] kvm: kvm [31221]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010003) = 0xffffffffffffffff
[ 1468.126843][T15702] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1468.138925][T15702] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1468.201092][T15702] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1468.236459][T15702] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1468.284443][T15702] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1468.343953][T15702] usb 4-1: config 0 descriptor??
[ 1468.785653][T15702] plantronics 0003:047F:FFFF.002C: unbalanced collection at end of report description
[ 1468.801040][T15702] plantronics 0003:047F:FFFF.002C: parse failed
[ 1468.825180][T15702] plantronics 0003:047F:FFFF.002C: probe with driver plantronics failed with error -22
[ 1468.981992][T31218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1469.068708][T31218] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1469.117158][T30381] usb 4-1: USB disconnect, device number 15
[ 1469.947355][T31246] netlink: 148 bytes leftover after parsing attributes in process `syz.3.8094'.
[ 1470.138931][T31252] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8096'.
[ 1470.235230][T16918] usb 2-1: new high-speed USB device number 109 using dummy_hcd
[ 1470.644697][T31255] fuse: Bad value for 'fd'
[ 1470.675074][T16918] usb 2-1: Using ep0 maxpacket: 16
[ 1470.682612][T16918] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1470.692570][T16918] usb 2-1: unable to read config index 0 descriptor/start: -71
[ 1470.715359][T16918] usb 2-1: can't read configurations, error -71
[ 1471.667728][T31276] FAULT_INJECTION: forcing a failure.
[ 1471.667728][T31276] name failslab, interval 1, probability 0, space 0, times 0
[ 1471.799282][T31276] CPU: 1 UID: 0 PID: 31276 Comm: syz.3.8102 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1471.799313][T31276] Tainted: [L]=SOFTLOCKUP
[ 1471.799321][T31276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1471.799333][T31276] Call Trace:
[ 1471.799341][T31276]  <TASK>
[ 1471.799351][T31276]  dump_stack_lvl+0xe8/0x150
[ 1471.799380][T31276]  should_fail_ex+0x414/0x560
[ 1471.799413][T31276]  should_failslab+0xa8/0x100
[ 1471.799438][T31276]  __kmalloc_node_noprof+0xe7/0x820
[ 1471.799458][T31276]  ? __pfx___up_read+0x10/0x10
[ 1471.799481][T31276]  ? crypto_create_tfm_node+0x83/0x3f0
[ 1471.799508][T31276]  crypto_create_tfm_node+0x83/0x3f0
[ 1471.799539][T31276]  crypto_spawn_tfm2+0x5c/0x90
[ 1471.799568][T31276]  aead_init_geniv+0x169/0x240
[ 1471.799592][T31276]  crypto_create_tfm_node+0x18c/0x3f0
[ 1471.799619][T31276]  crypto_alloc_tfm_node+0x172/0x3f0
[ 1471.799658][T31276]  esp_init_state+0x5b6/0x1140
[ 1471.799679][T31276]  ? ___sys_sendmsg+0x21f/0x2a0
[ 1471.799700][T31276]  ? __x64_sys_sendmsg+0x19b/0x260
[ 1471.799732][T31276]  ? __pfx_esp_init_state+0x10/0x10
[ 1471.799771][T31276]  ? xfrm_state_get_afinfo+0x2e/0x1b0
[ 1471.799796][T31276]  ? xfrm_state_get_afinfo+0x2e/0x1b0
[ 1471.799827][T31276]  ? __xfrm_init_state+0x7ef/0x13f0
[ 1471.799851][T31276]  __xfrm_init_state+0xa76/0x13f0
[ 1471.799870][T31276]  ? __xfrm_init_state+0x7ef/0x13f0
[ 1471.799891][T31276]  xfrm_add_sa+0x3057/0x4220
[ 1471.799930][T31276]  ? __pfx_xfrm_add_sa+0x10/0x10
[ 1471.799956][T31276]  ? apparmor_capable+0x137/0x1a0
[ 1471.799988][T31276]  ? __nla_parse+0x40/0x60
[ 1471.800011][T31276]  xfrm_user_rcv_msg+0x7a3/0xab0
[ 1471.800044][T31276]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[ 1471.800104][T31276]  ? __pfx___mutex_trylock_common+0x10/0x10
[ 1471.800132][T31276]  ? rcu_is_watching+0x15/0xb0
[ 1471.800156][T31276]  ? trace_contention_end+0x39/0x100
[ 1471.800180][T31276]  ? __mutex_lock+0x335/0x1350
[ 1471.800208][T31276]  netlink_rcv_skb+0x208/0x470
[ 1471.800233][T31276]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[ 1471.800264][T31276]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1471.800298][T31276]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1471.800319][T31276]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1471.800344][T31276]  xfrm_netlink_rcv+0x79/0x90
[ 1471.800372][T31276]  netlink_unicast+0x82f/0x9e0
[ 1471.800400][T31276]  ? __pfx_netlink_unicast+0x10/0x10
[ 1471.800422][T31276]  ? __alloc_skb+0x198/0x3a0
[ 1471.800442][T31276]  ? netlink_sendmsg+0x642/0xb30
[ 1471.800464][T31276]  ? skb_put+0x11b/0x210
[ 1471.800488][T31276]  netlink_sendmsg+0x805/0xb30
[ 1471.800521][T31276]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1471.800549][T31276]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1471.800576][T31276]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1471.800594][T31276]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1471.800619][T31276]  __sock_sendmsg+0x21c/0x270
[ 1471.800657][T31276]  ____sys_sendmsg+0x505/0x820
[ 1471.800685][T31276]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1471.800715][T31276]  ? import_iovec+0x74/0xa0
[ 1471.800740][T31276]  ___sys_sendmsg+0x21f/0x2a0
[ 1471.800765][T31276]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1471.800818][T31276]  ? __fget_files+0x2a/0x420
[ 1471.800839][T31276]  ? __fget_files+0x3a0/0x420
[ 1471.800870][T31276]  __x64_sys_sendmsg+0x19b/0x260
[ 1471.800894][T31276]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1471.800927][T31276]  ? __pfx_ksys_write+0x10/0x10
[ 1471.800955][T31276]  do_syscall_64+0xec/0xf80
[ 1471.800974][T31276]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1471.800991][T31276]  ? trace_irq_disable+0x37/0x100
[ 1471.801017][T31276]  ? clear_bhb_loop+0x60/0xb0
[ 1471.801041][T31276]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1471.801059][T31276] RIP: 0033:0x7f5fcf78f749
[ 1471.801077][T31276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1471.801095][T31276] RSP: 002b:00007f5fd06d0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1471.801115][T31276] RAX: ffffffffffffffda RBX: 00007f5fcf9e5fa0 RCX: 00007f5fcf78f749
[ 1471.801129][T31276] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004
[ 1471.801140][T31276] RBP: 00007f5fd06d0090 R08: 0000000000000000 R09: 0000000000000000
[ 1471.801152][T31276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1471.801162][T31276] R13: 00007f5fcf9e6038 R14: 00007f5fcf9e5fa0 R15: 00007f5fcfb0fa28
[ 1471.801189][T31276]  </TASK>
[ 1472.443820][T31288] netlink: 'syz.3.8106': attribute type 4 has an invalid length.
[ 1472.684561][T31294] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8103'.
[ 1472.740019][T16891] usb 2-1: new high-speed USB device number 111 using dummy_hcd
[ 1472.889498][T16891] usb 2-1: device descriptor read/64, error -71
[ 1473.355384][T16891] usb 2-1: new high-speed USB device number 112 using dummy_hcd
[ 1473.505039][T16891] usb 2-1: device descriptor read/64, error -71
[ 1473.618718][T16891] usb usb2-port1: attempt power cycle
[ 1473.939891][T31301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1473.950833][T31301] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1473.975598][T16891] usb 2-1: new high-speed USB device number 113 using dummy_hcd
[ 1474.008623][T16891] usb 2-1: device descriptor read/8, error -71
[ 1474.039136][T31303] bond8: option packets_per_slave: invalid value (18446744073709551615)
[ 1474.065051][T31303] bond8: option packets_per_slave: allowed values 0 - 65535
[ 1474.086389][T31303] bond8 (unregistering): Released all slaves
[ 1474.115032][T15702] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[ 1474.257182][T16891] usb 2-1: new high-speed USB device number 114 using dummy_hcd
[ 1474.271604][T15702] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1474.283534][T15702] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1474.293948][T16891] usb 2-1: device descriptor read/8, error -71
[ 1474.300944][T15702] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1474.311264][T15702] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1474.319804][T15702] usb 4-1: SerialNumber: syz
[ 1474.408746][T16891] usb usb2-port1: unable to enumerate USB device
[ 1474.550018][T31299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1474.559729][T31299] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1474.612712][T31299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1474.629638][T31299] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1474.652453][T15702] usb 4-1: unknown interface protocol 0x17, assuming v1
[ 1474.662604][T15702] usb 4-1: 0:2 : does not exist
[ 1474.671669][T15702] usb 4-1: unit 3 not found!
[ 1474.692030][T15702] usb 4-1: USB disconnect, device number 16
[ 1475.565592][T15702] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[ 1475.918135][T15702] usb 4-1: config 220 has too many interfaces: 184, using maximum allowed: 32
[ 1475.931565][T15702] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 184
[ 1475.942771][T15702] usb 4-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85
[ 1476.147993][T15702] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1476.216446][T15702] gspca_main: sn9c2028-2.14.0 probing 0c45:8008
[ 1476.444450][T15702] gspca_sn9c2028: read1 error -71
[ 1476.465907][T15702] gspca_sn9c2028: read1 error -71
[ 1476.471579][T15702] gspca_sn9c2028: read1 error -71
[ 1476.555121][T15702] sn9c2028 4-1:220.0: probe with driver sn9c2028 failed with error -71
[ 1476.615639][T15702] usb 4-1: USB disconnect, device number 17
[ 1477.232799][T31328] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8117'.
[ 1477.418075][T31332] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8118'.
[ 1477.561139][   T30] kauditd_printk_skb: 128 callbacks suppressed
[ 1477.561153][   T30] audit: type=1326 audit(1767558718.220:3325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31334 comm="syz.1.8120" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4d7558f749 code=0x0
[ 1477.829597][T31337] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING
[ 1478.071619][T31342] fuse: Unknown parameter '0xffffffffffffffff'
[ 1478.136503][T31345] SET target dimension over the limit!
[ 1478.395029][T30381] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[ 1478.444109][T31348] netlink: 'syz.1.8124': attribute type 1 has an invalid length.
[ 1478.523854][T31348] bond3: entered promiscuous mode
[ 1478.548453][T31348] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1478.565364][T30381] usb 4-1: Using ep0 maxpacket: 8
[ 1478.572482][T30381] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[ 1478.580995][T30381] usb 4-1: config 179 has no interface number 0
[ 1478.597391][T30381] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 1478.626351][T31348] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8124'.
[ 1478.646252][T30381] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[ 1478.657348][T31350] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1478.674992][T30381] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 48, changing to 9
[ 1478.695104][T30381] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[ 1478.706982][T30381] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1478.718288][T31350] bond3: (slave bond4): making interface the new active one
[ 1478.721478][T30381] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 1478.738129][T30381] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1478.749619][T31350] bond4: entered promiscuous mode
[ 1478.755549][T31350] bond3: (slave bond4): Enslaving as an active interface with an up link
[ 1478.771826][T31345] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[ 1479.033726][T30381] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input114
[ 1479.243377][T31342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1479.256058][T31342] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1479.277681][T15702] usb 4-1: USB disconnect, device number 18
[ 1479.277773][    C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[ 1479.292566][    C1] dummy_hcd dummy_hcd.3: timer fired with no URBs pending?
[ 1479.396731][T31356] fuse: Unknown parameter '0x0000000000000007'
[ 1479.412041][T31356] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8125'.
[ 1479.649866][   T30] audit: type=1326 audit(1767558720.310:3326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31362 comm="syz.2.8128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ed98f749 code=0x7ffc0000
[ 1479.708398][   T30] audit: type=1326 audit(1767558720.310:3327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31362 comm="syz.2.8128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ed98f749 code=0x7ffc0000
[ 1479.781598][   T30] audit: type=1326 audit(1767558720.310:3328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31362 comm="syz.2.8128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f79ed98f749 code=0x7ffc0000
[ 1479.871463][   T30] audit: type=1326 audit(1767558720.310:3329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31362 comm="syz.2.8128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ed98f749 code=0x7ffc0000
[ 1479.905206][   T30] audit: type=1326 audit(1767558720.310:3330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31362 comm="syz.2.8128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f79ed98f749 code=0x7ffc0000
[ 1479.957997][   T30] audit: type=1326 audit(1767558720.310:3331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31362 comm="syz.2.8128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ed98f749 code=0x7ffc0000
[ 1480.035018][   T30] audit: type=1326 audit(1767558720.310:3332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31362 comm="syz.2.8128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f79ed98f749 code=0x7ffc0000
[ 1480.110846][   T30] audit: type=1326 audit(1767558720.310:3333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31362 comm="syz.2.8128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ed98f749 code=0x7ffc0000
[ 1480.166152][   T30] audit: type=1326 audit(1767558720.320:3334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31362 comm="syz.2.8128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f79ed98f749 code=0x7ffc0000
[ 1480.255934][T31372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1480.265225][T31372] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1480.765159][T30381] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[ 1480.967383][T30381] usb 4-1: config 220 has too many interfaces: 184, using maximum allowed: 32
[ 1480.980234][T30381] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 184
[ 1480.991361][T30381] usb 4-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85
[ 1481.045481][T30381] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1481.351967][T30381] gspca_main: sn9c2028-2.14.0 probing 0c45:8008
[ 1481.770710][T30381] gspca_sn9c2028: read1 error -71
[ 1481.776251][T30381] gspca_sn9c2028: read1 error -71
[ 1481.781703][T30381] gspca_sn9c2028: read1 error -71
[ 1481.845893][T30381] sn9c2028 4-1:220.0: probe with driver sn9c2028 failed with error -71
[ 1481.856344][T30381] usb 4-1: USB disconnect, device number 19
[ 1483.393584][T31398] FAULT_INJECTION: forcing a failure.
[ 1483.393584][T31398] name failslab, interval 1, probability 0, space 0, times 0
[ 1483.425348][T31398] CPU: 1 UID: 0 PID: 31398 Comm: syz.5.8138 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1483.425381][T31398] Tainted: [L]=SOFTLOCKUP
[ 1483.425388][T31398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1483.425400][T31398] Call Trace:
[ 1483.425408][T31398]  <TASK>
[ 1483.425417][T31398]  dump_stack_lvl+0xe8/0x150
[ 1483.425445][T31398]  should_fail_ex+0x414/0x560
[ 1483.425480][T31398]  should_failslab+0xa8/0x100
[ 1483.425506][T31398]  __kvmalloc_node_noprof+0x175/0x920
[ 1483.425530][T31398]  ? alloc_netdev_mqs+0xa4b/0x11b0
[ 1483.425568][T31398]  alloc_netdev_mqs+0xa4b/0x11b0
[ 1483.425600][T31398]  rtnl_create_link+0x31f/0xcf0
[ 1483.425635][T31398]  rtnl_newlink_create+0x25c/0xb00
[ 1483.425671][T31398]  ? __pfx_rtnl_newlink_create+0x10/0x10
[ 1483.425699][T31398]  ? __pfx___mutex_lock+0x10/0x10
[ 1483.425732][T31398]  ? ns_capable+0x8a/0xf0
[ 1483.425755][T31398]  rtnl_newlink+0x16e7/0x1c90
[ 1483.425792][T31398]  ? __pfx_rtnl_newlink+0x10/0x10
[ 1483.425810][T31398]  ? do_syscall_64+0xec/0xf80
[ 1483.425829][T31398]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1483.425891][T31398]  ? kasan_quarantine_put+0xbb/0x1f0
[ 1483.425911][T31398]  ? lockdep_hardirqs_on+0x7b/0x110
[ 1483.425936][T31398]  ? kmem_cache_free+0x197/0x620
[ 1483.425955][T31398]  ? nlmon_xmit+0xb0/0x100
[ 1483.425988][T31398]  ? __lock_acquire+0x6b6/0x2cf0
[ 1483.426018][T31398]  ? __local_bh_enable_ip+0xd0/0x130
[ 1483.426039][T31398]  ? lockdep_hardirqs_on+0x7b/0x110
[ 1483.426058][T31398]  ? __dev_queue_xmit+0x289/0x31c0
[ 1483.426082][T31398]  ? __local_bh_enable_ip+0xd0/0x130
[ 1483.426101][T31398]  ? __dev_queue_xmit+0x289/0x31c0
[ 1483.426139][T31398]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[ 1483.426175][T31398]  ? __pfx_rtnl_newlink+0x10/0x10
[ 1483.426196][T31398]  rtnetlink_rcv_msg+0x7cf/0xb70
[ 1483.426220][T31398]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[ 1483.426241][T31398]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1483.426260][T31398]  ? ref_tracker_free+0x63a/0x7d0
[ 1483.426281][T31398]  ? __asan_memcpy+0x40/0x70
[ 1483.426308][T31398]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1483.426325][T31398]  ? __skb_clone+0x63/0x7a0
[ 1483.426355][T31398]  netlink_rcv_skb+0x208/0x470
[ 1483.426379][T31398]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1483.426402][T31398]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1483.426438][T31398]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1483.426470][T31398]  netlink_unicast+0x82f/0x9e0
[ 1483.426501][T31398]  ? __pfx_netlink_unicast+0x10/0x10
[ 1483.426522][T31398]  ? __alloc_skb+0x198/0x3a0
[ 1483.426543][T31398]  ? netlink_sendmsg+0x642/0xb30
[ 1483.426566][T31398]  ? skb_put+0x11b/0x210
[ 1483.426590][T31398]  netlink_sendmsg+0x805/0xb30
[ 1483.426624][T31398]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1483.426653][T31398]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1483.426680][T31398]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1483.426699][T31398]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1483.426725][T31398]  __sock_sendmsg+0x21c/0x270
[ 1483.426757][T31398]  ____sys_sendmsg+0x505/0x820
[ 1483.426784][T31398]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1483.426813][T31398]  ? import_iovec+0x74/0xa0
[ 1483.426840][T31398]  ___sys_sendmsg+0x21f/0x2a0
[ 1483.426866][T31398]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1483.426923][T31398]  ? __fget_files+0x2a/0x420
[ 1483.426947][T31398]  ? __fget_files+0x3a0/0x420
[ 1483.426981][T31398]  __x64_sys_sendmsg+0x19b/0x260
[ 1483.427007][T31398]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1483.427041][T31398]  ? __pfx_ksys_write+0x10/0x10
[ 1483.427071][T31398]  do_syscall_64+0xec/0xf80
[ 1483.427092][T31398]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1483.427111][T31398]  ? trace_irq_disable+0x37/0x100
[ 1483.427141][T31398]  ? clear_bhb_loop+0x60/0xb0
[ 1483.427165][T31398]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1483.427185][T31398] RIP: 0033:0x7fb647f8f749
[ 1483.427204][T31398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1483.427223][T31398] RSP: 002b:00007fb648d62038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1483.427246][T31398] RAX: ffffffffffffffda RBX: 00007fb6481e5fa0 RCX: 00007fb647f8f749
[ 1483.427262][T31398] RDX: 0000000000008044 RSI: 0000200000000440 RDI: 0000000000000003
[ 1483.427276][T31398] RBP: 00007fb648d62090 R08: 0000000000000000 R09: 0000000000000000
[ 1483.427290][T31398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1483.427302][T31398] R13: 00007fb6481e6038 R14: 00007fb6481e5fa0 R15: 00007fb64830fa28
[ 1483.427335][T31398]  </TASK>
[ 1484.437359][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[ 1484.443715][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[ 1484.509680][T31410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1484.574103][T31410] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1486.898647][T31456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1486.936986][T31456] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1487.015090][   T39] usb 2-1: new high-speed USB device number 115 using dummy_hcd
[ 1487.155036][   T39] usb 2-1: device descriptor read/64, error -71
[ 1487.395310][   T39] usb 2-1: new high-speed USB device number 116 using dummy_hcd
[ 1487.535643][   T39] usb 2-1: device descriptor read/64, error -71
[ 1487.645339][   T39] usb usb2-port1: attempt power cycle
[ 1487.867332][T30381] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[ 1488.015346][   T39] usb 2-1: new high-speed USB device number 117 using dummy_hcd
[ 1488.049957][   T39] usb 2-1: device descriptor read/8, error -71
[ 1488.057618][T30381] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1488.068040][T30381] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1488.086571][T30381] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1488.096374][T30381] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1488.104478][T30381] usb 4-1: SerialNumber: syz
[ 1488.295185][   T39] usb 2-1: new high-speed USB device number 118 using dummy_hcd
[ 1488.320646][T31464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1488.347632][   T39] usb 2-1: device descriptor read/8, error -71
[ 1488.354538][T31464] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1488.384478][T31464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1488.411214][T31464] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1488.429425][T30381] usb 4-1: unknown interface protocol 0x17, assuming v1
[ 1488.437835][T30381] usb 4-1: 0:2 : does not exist
[ 1488.444198][T30381] usb 4-1: unit 3 not found!
[ 1488.471775][   T39] usb usb2-port1: unable to enumerate USB device
[ 1488.495354][T30381] usb 4-1: USB disconnect, device number 20
[ 1488.541786][T21343] udevd[21343]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1489.271253][T31476] loop2: detected capacity change from 0 to 7
[ 1489.283494][T31476] Dev loop2: unable to read RDB block 7
[ 1489.290524][T31476]  loop2: unable to read partition table
[ 1489.298163][T31476] loop2: partition table beyond EOD, truncated
[ 1489.342776][T31476] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1489.347983][   T30] kauditd_printk_skb: 18 callbacks suppressed
[ 1489.347999][   T30] audit: type=1326 audit(1767558730.010:3353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31475 comm="syz.3.8164" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5fcf78f749 code=0x0
[ 1489.776699][T31480] FAULT_INJECTION: forcing a failure.
[ 1489.776699][T31480] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1489.845107][T31480] CPU: 0 UID: 0 PID: 31480 Comm: syz.3.8165 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1489.845134][T31480] Tainted: [L]=SOFTLOCKUP
[ 1489.845138][T31480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1489.845145][T31480] Call Trace:
[ 1489.845150][T31480]  <TASK>
[ 1489.845156][T31480]  dump_stack_lvl+0xe8/0x150
[ 1489.845174][T31480]  should_fail_ex+0x414/0x560
[ 1489.845194][T31480]  strncpy_from_user+0x36/0x2c0
[ 1489.845211][T31480]  keyctl_restrict_keyring+0xc7/0x210
[ 1489.845223][T31480]  ? __pfx_keyctl_restrict_keyring+0x10/0x10
[ 1489.845240][T31480]  __se_sys_keyctl+0x314/0x910
[ 1489.845253][T31480]  ? __pfx___se_sys_keyctl+0x10/0x10
[ 1489.845265][T31480]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1489.845285][T31480]  ? __fget_files+0x3a0/0x420
[ 1489.845313][T31480]  ? fput+0xa0/0xd0
[ 1489.845337][T31480]  ? ksys_write+0x22a/0x250
[ 1489.845357][T31480]  ? __pfx_ksys_write+0x10/0x10
[ 1489.845370][T31480]  ? __x64_sys_keyctl+0x20/0xc0
[ 1489.845387][T31480]  do_syscall_64+0xec/0xf80
[ 1489.845398][T31480]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1489.845408][T31480]  ? trace_irq_disable+0x37/0x100
[ 1489.845423][T31480]  ? clear_bhb_loop+0x60/0xb0
[ 1489.845435][T31480]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1489.845445][T31480] RIP: 0033:0x7f5fcf78f749
[ 1489.845455][T31480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1489.845464][T31480] RSP: 002b:00007f5fd06d0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[ 1489.845477][T31480] RAX: ffffffffffffffda RBX: 00007f5fcf9e5fa0 RCX: 00007f5fcf78f749
[ 1489.845485][T31480] RDX: 0000200000000100 RSI: 000000002d2f05e4 RDI: 000000000000001d
[ 1489.845493][T31480] RBP: 00007f5fd06d0090 R08: 0000000000000000 R09: 0000000000000000
[ 1489.845499][T31480] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001
[ 1489.845511][T31480] R13: 00007f5fcf9e6038 R14: 00007f5fcf9e5fa0 R15: 00007f5fcfb0fa28
[ 1489.845527][T31480]  </TASK>
[ 1490.545078][T16891] usb 2-1: new high-speed USB device number 119 using dummy_hcd
[ 1490.625020][T15742] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[ 1490.728857][T16891] usb 2-1: config 255 has too many interfaces: 255, using maximum allowed: 32
[ 1490.755040][T16891] usb 2-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config
[ 1490.802676][T16891] usb 2-1: config 255 has 0 interfaces, different from the descriptor's value: 255
[ 1490.815425][T16891] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1490.835712][T16891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1490.849155][T15742] usb 4-1: config 0 has no interfaces?
[ 1490.854769][T15742] usb 4-1: New USB device found, idVendor=046d, idProduct=c087, bcdDevice= 0.00
[ 1490.866776][T15742] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1490.901845][T15742] usb 4-1: config 0 descriptor??
[ 1491.002413][T31501] usb usb8: usbfs: process 31501 (syz.2.8173) did not claim interface 0 before use
[ 1491.038108][T31501] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8173'.
[ 1491.053819][T31501] ip6tnl1: entered allmulticast mode
[ 1491.133297][T16891] usb 4-1: USB disconnect, device number 21
[ 1491.188272][T31503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1491.207040][T31503] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1491.227425][T31503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1491.245499][T31503] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1491.268328][T31503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1491.287170][T31503] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1491.895776][T31512] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8176'.
[ 1492.022422][T31516] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8177'.
[ 1492.205403][T16891] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[ 1492.479159][T16891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1492.490157][T16891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1492.556477][T16891] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[ 1492.575075][T16891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1492.584720][T16891] usb 4-1: config 0 descriptor??
[ 1493.050865][T31512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1493.064150][T31512] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1493.078294][T16891] usbhid 4-1:0.0: can't add hid device: -71
[ 1493.084514][T16891] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1493.127658][T16891] usb 4-1: USB disconnect, device number 22
[ 1493.372926][T16918] usb 2-1: USB disconnect, device number 119
[ 1493.675328][T31526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1493.825421][T31526] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1494.462056][T31550] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1494.470034][T31550] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1494.594041][T31550] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1494.636907][T31550] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1495.804333][T31557] fuse: Unknown parameter 'fd0xffffffffffffffff'
[ 1495.938461][T31557] SET target dimension over the limit!
[ 1496.235744][T16891] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[ 1496.405179][T16891] usb 4-1: Using ep0 maxpacket: 8
[ 1496.413886][T16891] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[ 1496.421466][T31563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8192'.
[ 1496.423487][T16891] usb 4-1: config 179 has no interface number 0
[ 1496.440225][T16891] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 1496.441430][T31563] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8192'.
[ 1496.460966][T16891] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[ 1496.473356][T16891] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 48, changing to 9
[ 1496.485796][T16891] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[ 1496.497524][T16891] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1496.512060][T16891] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 1496.536652][T16891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1496.557938][T31565] netlink: 156 bytes leftover after parsing attributes in process `syz.2.8193'.
[ 1496.562754][T31557] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[ 1496.567340][T31565] FAULT_INJECTION: forcing a failure.
[ 1496.567340][T31565] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1496.589512][T31565] CPU: 1 UID: 0 PID: 31565 Comm: syz.2.8193 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1496.589542][T31565] Tainted: [L]=SOFTLOCKUP
[ 1496.589550][T31565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1496.589561][T31565] Call Trace:
[ 1496.589568][T31565]  <TASK>
[ 1496.589577][T31565]  dump_stack_lvl+0xe8/0x150
[ 1496.589606][T31565]  should_fail_ex+0x414/0x560
[ 1496.589640][T31565]  _copy_to_user+0x31/0xb0
[ 1496.589664][T31565]  simple_read_from_buffer+0xe1/0x170
[ 1496.589689][T31565]  proc_fail_nth_read+0x1b3/0x220
[ 1496.589710][T31565]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1496.589732][T31565]  ? rw_verify_area+0x2a6/0x4d0
[ 1496.589759][T31565]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1496.589779][T31565]  vfs_read+0x200/0xa30
[ 1496.589794][T31565]  ? fdget_pos+0x247/0x320
[ 1496.589819][T31565]  ? __pfx___mutex_lock+0x10/0x10
[ 1496.589840][T31565]  ? __pfx_vfs_read+0x10/0x10
[ 1496.589858][T31565]  ? __fget_files+0x2a/0x420
[ 1496.589885][T31565]  ? __fget_files+0x3a0/0x420
[ 1496.589945][T31565]  ? __fget_files+0x2a/0x420
[ 1496.589977][T31565]  ksys_read+0x145/0x250
[ 1496.589998][T31565]  ? __pfx_ksys_read+0x10/0x10
[ 1496.590027][T31565]  do_syscall_64+0xec/0xf80
[ 1496.590055][T31565]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1496.590074][T31565]  ? trace_irq_disable+0x37/0x100
[ 1496.590099][T31565]  ? clear_bhb_loop+0x60/0xb0
[ 1496.590123][T31565]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1496.590141][T31565] RIP: 0033:0x7f79ed98e15c
[ 1496.590160][T31565] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1496.590178][T31565] RSP: 002b:00007f79ee7a0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1496.590199][T31565] RAX: ffffffffffffffda RBX: 00007f79edbe5fa0 RCX: 00007f79ed98e15c
[ 1496.590214][T31565] RDX: 000000000000000f RSI: 00007f79ee7a00a0 RDI: 0000000000000004
[ 1496.590227][T31565] RBP: 00007f79ee7a0090 R08: 0000000000000000 R09: 0000000000000000
[ 1496.590240][T31565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1496.590253][T31565] R13: 00007f79edbe6038 R14: 00007f79edbe5fa0 R15: 00007f79edd0fa28
[ 1496.590285][T31565]  </TASK>
[ 1496.890089][T16891] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input115
[ 1497.077290][T31557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1497.100069][T31557] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1497.127632][T16891] usb 4-1: USB disconnect, device number 23
[ 1497.133603][    C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[ 1497.133633][    C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 1497.211940][T16918] usb 2-1: new high-speed USB device number 120 using dummy_hcd
[ 1497.289386][T31577] FAULT_INJECTION: forcing a failure.
[ 1497.289386][T31577] name failslab, interval 1, probability 0, space 0, times 0
[ 1497.313089][T31577] CPU: 1 UID: 0 PID: 31577 Comm: syz.0.8197 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1497.313120][T31577] Tainted: [L]=SOFTLOCKUP
[ 1497.313127][T31577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1497.313140][T31577] Call Trace:
[ 1497.313148][T31577]  <TASK>
[ 1497.313157][T31577]  dump_stack_lvl+0xe8/0x150
[ 1497.313185][T31577]  should_fail_ex+0x414/0x560
[ 1497.313218][T31577]  should_failslab+0xa8/0x100
[ 1497.313244][T31577]  __kmalloc_noprof+0xdf/0x800
[ 1497.313261][T31577]  ? kernfs_fop_write_iter+0x158/0x540
[ 1497.313292][T31577]  kernfs_fop_write_iter+0x158/0x540
[ 1497.313323][T31577]  vfs_write+0x5c9/0xb30
[ 1497.313344][T31577]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[ 1497.313371][T31577]  ? __pfx_vfs_write+0x10/0x10
[ 1497.313391][T31577]  ? kmem_cache_free+0x197/0x620
[ 1497.313408][T31577]  ? do_sys_openat2+0x15a/0x200
[ 1497.313447][T31577]  __x64_sys_pwrite64+0x193/0x220
[ 1497.313470][T31577]  ? __pfx___x64_sys_pwrite64+0x10/0x10
[ 1497.313500][T31577]  do_syscall_64+0xec/0xf80
[ 1497.313520][T31577]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1497.313537][T31577]  ? trace_irq_disable+0x37/0x100
[ 1497.313561][T31577]  ? clear_bhb_loop+0x60/0xb0
[ 1497.313583][T31577]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1497.313600][T31577] RIP: 0033:0x7f295658f749
[ 1497.313618][T31577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1497.313634][T31577] RSP: 002b:00007f29574c4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012
[ 1497.313655][T31577] RAX: ffffffffffffffda RBX: 00007f29567e5fa0 RCX: 00007f295658f749
[ 1497.313671][T31577] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[ 1497.313683][T31577] RBP: 00007f29574c4090 R08: 0000000000000000 R09: 0000000000000000
[ 1497.313695][T31577] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001
[ 1497.313707][T31577] R13: 00007f29567e6038 R14: 00007f29567e5fa0 R15: 00007f295690fa28
[ 1497.313737][T31577]  </TASK>
[ 1497.725849][T16918] usb 2-1: Using ep0 maxpacket: 32
[ 1497.745935][T16918] usb 2-1: config 0 has an invalid interface number: 66 but max is 0
[ 1497.754039][T16918] usb 2-1: config 0 has no interface number 0
[ 1497.767956][T16918] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[ 1497.779273][T16918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1497.928774][T16918] usb 2-1: Product: syz
[ 1497.948460][T16918] usb 2-1: Manufacturer: syz
[ 1497.953129][T16918] usb 2-1: SerialNumber: syz
[ 1497.961302][T16918] usb 2-1: config 0 descriptor??
[ 1498.016106][T16918] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state.
[ 1498.023714][T16918] dvb-usb: bulk message failed: -22 (2/0)
[ 1498.071211][T16918] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1498.115771][T16918] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold)
[ 1498.134018][T16918] usb 2-1: media controller created
[ 1498.153074][T16918] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1498.218582][T16918] cxusb: set interface failed
[ 1498.224737][T16918] dvb-usb: bulk message failed: -22 (1/0)
[ 1498.238385][T31567] cxusb: i2c rd: len=133 is too big!
[ 1498.238385][T31567] 
[ 1498.324249][T16918] DVB: Unable to find symbol lgdt330x_attach()
[ 1498.333349][T16918] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold'
[ 1498.477885][T31590] netlink: 'syz.3.8200': attribute type 1 has an invalid length.
[ 1498.587511][T16918] rc_core: IR keymap rc-dvico-portable not found
[ 1498.593882][T16918] Registered IR keymap rc-empty
[ 1498.628166][T31592] bond6: entered promiscuous mode
[ 1498.633208][T31592] bond6: entered allmulticast mode
[ 1498.645954][T16918] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0
[ 1498.702724][T16918] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input116
[ 1498.719158][T31592] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1498.776785][T16918] dvb-usb: schedule remote query interval to 100 msecs.
[ 1498.804995][T16918] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected.
[ 1498.810963][T31594] bridge4: entered promiscuous mode
[ 1498.828550][T31594] bridge4: entered allmulticast mode
[ 1498.845198][T30305] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond
[ 1498.859994][T31594] bond6: (slave bridge4): Enslaving as an active interface with an up link
[ 1498.912019][   T39] usb 2-1: USB disconnect, device number 120
[ 1498.992010][T28907] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond
[ 1499.121674][T31590] netlink: 76 bytes leftover after parsing attributes in process `syz.3.8200'.
[ 1499.208947][   T39] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected.
[ 1499.547135][T31609] netlink: 9 bytes leftover after parsing attributes in process `syz.3.8204'.
[ 1499.635010][T31609] sit0: entered promiscuous mode
[ 1499.699956][T31609] netlink: 'syz.3.8204': attribute type 1 has an invalid length.
[ 1499.726582][T31609] netlink: 1 bytes leftover after parsing attributes in process `syz.3.8204'.
[ 1499.978293][T31619] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8208'.
[ 1500.165023][T15742] usb 4-1: new full-speed USB device number 24 using dummy_hcd
[ 1500.329230][T15742] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1500.343363][T15742] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1500.379183][T15742] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1500.388708][T15742] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1500.611924][T15742] usb 4-1: GET_CAPABILITIES returned 0
[ 1500.660016][T15742] usbtmc 4-1:16.0: can't read capabilities
[ 1500.858359][T31617] bond7: (slave bond_slave_1): Device is not our slave
[ 1500.885210][T31617] bond7: option active_slave: invalid value (bond_slave_1)
[ 1500.911733][T31617] bond7 (unregistering): Released all slaves
[ 1500.975757][T31638] netlink: 220 bytes leftover after parsing attributes in process `syz.1.8215'.
[ 1501.002842][T31638] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1501.201962][T15742] usb 4-1: USB disconnect, device number 24
[ 1501.511961][T31641] tipc: Started in network mode
[ 1501.522682][T31641] tipc: Node identity 0000000000005f000000000000000001, cluster identity 4711
[ 1501.531735][T31641] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1503.108038][T31659] netlink: 156 bytes leftover after parsing attributes in process `syz.0.8220'.
[ 1504.568704][T31682] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[ 1504.826312][T31687] fuse: Bad value for 'group_id'
[ 1504.831512][T31687] fuse: Bad value for 'group_id'
[ 1506.648442][T31703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8233'.
[ 1506.764203][T31706] netlink: 220 bytes leftover after parsing attributes in process `syz.2.8234'.
[ 1506.854094][T31706] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1506.865152][T15742] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[ 1506.985302][T16891] usb 2-1: new high-speed USB device number 121 using dummy_hcd
[ 1507.184984][T16891] usb 2-1: Using ep0 maxpacket: 8
[ 1507.190982][T16891] usb 2-1: no configurations
[ 1507.196167][T16891] usb 2-1: can't read configurations, error -22
[ 1507.226842][T15742] usb 4-1: config 220 has too many interfaces: 184, using maximum allowed: 32
[ 1507.237283][T15742] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 184
[ 1507.257294][T15742] usb 4-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85
[ 1507.283659][T15742] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1507.331531][T15742] gspca_main: sn9c2028-2.14.0 probing 0c45:8008
[ 1507.345305][T16891] usb 2-1: new high-speed USB device number 122 using dummy_hcd
[ 1507.520567][T16891] usb 2-1: Using ep0 maxpacket: 8
[ 1507.531071][T16891] usb 2-1: no configurations
[ 1507.540189][T16891] usb 2-1: can't read configurations, error -22
[ 1507.552302][T15742] gspca_sn9c2028: read1 error -71
[ 1507.611691][T16891] usb usb2-port1: attempt power cycle
[ 1507.621511][T15742] gspca_sn9c2028: read1 error -71
[ 1507.627114][T15742] gspca_sn9c2028: read1 error -71
[ 1507.633232][T15742] sn9c2028 4-1:220.0: probe with driver sn9c2028 failed with error -71
[ 1507.677487][T15742] usb 4-1: USB disconnect, device number 25
[ 1507.965114][T16891] usb 2-1: new high-speed USB device number 123 using dummy_hcd
[ 1508.052642][T16891] usb 2-1: Using ep0 maxpacket: 8
[ 1508.067954][T16891] usb 2-1: no configurations
[ 1508.078775][T16891] usb 2-1: can't read configurations, error -22
[ 1508.225153][T16891] usb 2-1: new high-speed USB device number 124 using dummy_hcd
[ 1508.247967][T16891] usb 2-1: Using ep0 maxpacket: 8
[ 1508.253627][T16891] usb 2-1: no configurations
[ 1508.258642][T16891] usb 2-1: can't read configurations, error -22
[ 1508.298823][T16891] usb usb2-port1: unable to enumerate USB device
[ 1508.656329][T31726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1508.685411][T31726] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1509.165234][   T30] audit: type=1326 audit(1767558749.820:3354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31729 comm="syz.0.8245" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f295658f749 code=0x0
[ 1509.663233][T31743] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1509.670822][T31743] syzkaller0: entered promiscuous mode
[ 1509.676518][T31743] syzkaller0: entered allmulticast mode
[ 1509.706467][T31743] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8247'.
[ 1510.188881][T31743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8247'.
[ 1510.200575][T31743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8247'.
[ 1510.300212][T31742] tipc: Resetting bearer <eth:syzkaller0>
[ 1510.387014][T31742] tipc: Disabling bearer <eth:syzkaller0>
[ 1510.827119][T31756] vlan2: entered allmulticast mode
[ 1510.835332][T31756] veth1: entered allmulticast mode
[ 1511.014647][T31761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1511.071928][T31761] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1511.571225][T31777] loop2: detected capacity change from 0 to 7
[ 1511.613410][T31777] Dev loop2: unable to read RDB block 7
[ 1511.645326][T31777]  loop2: AHDI p1 p2
[ 1511.649370][T31777] loop2: partition table partially beyond EOD, truncated
[ 1511.685437][T31777] loop2: p1 start 1700753509 is beyond EOD, truncated
[ 1512.181514][T15742] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[ 1512.450537][T31789] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8262'.
[ 1512.782809][T15742] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1512.805508][T15742] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1512.971381][T31789] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8262'.
[ 1513.010630][T15742] usb 4-1: New USB device found, idVendor=1b94, idProduct=0009, bcdDevice= 0.00
[ 1513.040561][T15742] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1513.040581][T31789] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8262'.
[ 1513.045675][T31789] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8262'.
[ 1513.273175][T15742] usb 4-1: config 0 descriptor??
[ 1514.818084][T15742] usb 4-1: USB disconnect, device number 26
[ 1514.974450][T31820] fuse: Bad value for 'fd'
[ 1515.103343][T31824] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8269'.
[ 1515.455332][T31824] netlink: 'syz.0.8269': attribute type 2 has an invalid length.
[ 1515.496234][T31829] usb usb8: usbfs: process 31829 (syz.0.8270) did not claim interface 0 before use
[ 1515.518848][T31829] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8270'.
[ 1515.690028][T31836] loop2: detected capacity change from 0 to 7
[ 1515.739290][T21343] Dev loop2: unable to read RDB block 7
[ 1515.751495][T21343]  loop2: AHDI p1 p2
[ 1515.756734][T21343] loop2: partition table partially beyond EOD, truncated
[ 1515.811516][T21343] loop2: p1 start 1700753509 is beyond EOD, truncated
[ 1515.842765][T31836] Dev loop2: unable to read RDB block 7
[ 1515.850907][T31836]  loop2: AHDI p1 p2
[ 1515.856061][T31836] loop2: partition table partially beyond EOD, truncated
[ 1515.863807][T31836] loop2: p1 start 1700753509 is beyond EOD, truncated
[ 1516.165108][T15742] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[ 1516.218714][T31845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1516.253201][T31845] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1516.335252][T15742] usb 4-1: Using ep0 maxpacket: 16
[ 1516.343037][T15742] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1516.352572][T15742] usb 4-1: config 3 has an invalid interface number: 199 but max is 0
[ 1516.361029][T15742] usb 4-1: config 3 has no interface number 0
[ 1516.369125][T15742] usb 4-1: config 3 interface 199 has no altsetting 0
[ 1516.383270][T15742] usb 4-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=bf.bf
[ 1516.397119][T15742] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1516.406018][T15742] usb 4-1: Product: syz
[ 1516.410358][T15742] usb 4-1: Manufacturer: syz
[ 1516.415360][T15742] usb 4-1: SerialNumber: syz
[ 1516.632685][T31839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1516.667231][T31839] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1516.703937][T15742] mdc800 4-1:3.199: probe fails -> wrong Interface
[ 1516.723613][T15742] usb 4-1: USB disconnect, device number 27
[ 1517.334042][T31863] usb usb8: usbfs: process 31863 (syz.3.8281) did not claim interface 0 before use
[ 1517.453715][T31863] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8281'.
[ 1518.205945][T31879] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8285'.
[ 1518.248724][T31879] netlink: 220 bytes leftover after parsing attributes in process `syz.3.8285'.
[ 1518.336056][T31879] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1518.378343][T31883] kernel profiling enabled (shift: 17)
[ 1518.524246][T31883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1518.538415][T31883] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1518.565770][T31883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1518.578214][T31883] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1521.485439][T16918] usb 4-1: new full-speed USB device number 28 using dummy_hcd
[ 1521.658954][T16918] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1521.669395][T16918] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1521.689429][T16918] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1521.705781][T31943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1521.714680][T31943] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1521.724534][T16918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1521.875707][   T30] audit: type=1326 audit(1767558762.540:3355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31893 comm="syz.0.8291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f295658f749 code=0x7fc00000
[ 1522.388012][T16918] usb 4-1: GET_CAPABILITIES returned 0
[ 1522.435771][T16918] usbtmc 4-1:16.0: can't read capabilities
[ 1522.494725][T31953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8308'.
[ 1522.540298][T31953] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8308'.
[ 1522.598534][T31933] bond7: entered promiscuous mode
[ 1522.621903][T16891] usb 4-1: USB disconnect, device number 28
[ 1522.695847][T16918] usb 2-1: new high-speed USB device number 125 using dummy_hcd
[ 1522.737651][T31956] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8310'.
[ 1522.855204][T16918] usb 2-1: Using ep0 maxpacket: 32
[ 1522.866058][T16918] usb 2-1: config 0 has an invalid interface number: 196 but max is 0
[ 1522.875906][T16918] usb 2-1: config 0 has no interface number 0
[ 1522.882615][T16918] usb 2-1: config 0 interface 196 has no altsetting 0
[ 1522.905414][T16918] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[ 1522.915179][T16918] usb 2-1: New USB device strings: Mfr=1, Product=15, SerialNumber=3
[ 1523.139362][T16918] usb 2-1: Product: syz
[ 1523.259134][T31969] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8311'.
[ 1523.284439][T16918] usb 2-1: Manufacturer: syz
[ 1523.317350][T16918] usb 2-1: SerialNumber: syz
[ 1523.425780][T16918] usb 2-1: config 0 descriptor??
[ 1524.486268][T31975] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[ 1524.492831][T31975] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[ 1524.554320][T31975] vhci_hcd vhci_hcd.0: Device attached
[ 1524.706915][T31976] vhci_hcd: connection closed
[ 1524.707289][T21578] vhci_hcd vhci_hcd.3: stop threads
[ 1524.718607][T21578] vhci_hcd vhci_hcd.3: release socket
[ 1524.745037][T21578] vhci_hcd vhci_hcd.3: disconnect device
[ 1525.837827][T16918] ipheth 2-1:0.196: Unable to find endpoints
[ 1525.907152][T16918] usb 2-1: USB disconnect, device number 125
[ 1526.001279][T31986] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8313'.
[ 1526.102746][T31990] netlink: 'syz.1.8314': attribute type 10 has an invalid length.
[ 1526.132282][T31990] team0: Port device dummy0 added
[ 1526.256380][T31992] netlink: 'syz.1.8314': attribute type 10 has an invalid length.
[ 1526.367079][T31992] team0: Port device dummy0 removed
[ 1526.486339][T31992] bond0: (slave dummy0): Enslaving as an active interface with an up link
[ 1527.668125][T16918] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0
[ 1527.678777][T32017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8321'.
[ 1527.970558][T16918] hid-generic 0000:0000:0000.002D: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1528.525983][T32015] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1528.533555][T32015] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1528.895104][T32015] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1528.949418][T32015] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1529.096189][T15742] usb 2-1: new full-speed USB device number 126 using dummy_hcd
[ 1529.286820][T15742] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1529.297721][T15742] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1529.323639][T15742] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1529.392411][T15742] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1529.461844][T32029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1529.838943][T32029] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1530.158994][T15742] usb 2-1: GET_CAPABILITIES returned 0
[ 1530.170237][T15742] usbtmc 2-1:16.0: can't read capabilities
[ 1530.384175][T32023] bond5: entered promiscuous mode
[ 1530.454105][T16918] usb 2-1: USB disconnect, device number 126
[ 1530.588262][T32044] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8328'.
[ 1531.232636][T32070] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5)
[ 1531.239185][T32070] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[ 1531.352515][T32070] vhci_hcd vhci_hcd.0: Device attached
[ 1531.521669][T32071] vhci_hcd: connection closed
[ 1531.522131][T22189] vhci_hcd vhci_hcd.5: stop threads
[ 1531.535294][T22189] vhci_hcd vhci_hcd.5: release socket
[ 1531.541077][T22189] vhci_hcd vhci_hcd.5: disconnect device
[ 1531.655556][T32076] kvm: pic: non byte write
[ 1531.660169][T32076] kvm: pic: non byte write
[ 1532.364582][T32083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1532.376175][T32083] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1532.398477][T32083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1532.416549][T32083] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1533.595059][T16918] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[ 1533.745353][T16918] usb 4-1: Using ep0 maxpacket: 32
[ 1533.755167][T16918] usb 4-1: config 0 has an invalid interface number: 76 but max is 0
[ 1533.763576][T16918] usb 4-1: config 0 has no interface number 0
[ 1533.772171][T16918] usb 4-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c
[ 1533.781442][T16918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1533.789545][T16918] usb 4-1: Product: syz
[ 1533.793779][T16918] usb 4-1: Manufacturer: syz
[ 1533.798738][T16918] usb 4-1: SerialNumber: syz
[ 1533.811777][T16918] usb 4-1: config 0 descriptor??
[ 1533.820578][T16918] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state.
[ 1533.830016][T16918] dw2102: su3000_power_ctrl: 1, initialized 0
[ 1533.836330][T16918] dvb-usb: bulk message failed: -22 (2/0)
[ 1533.845905][T16918] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1533.857910][T16918] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0)
[ 1533.868387][T16918] usb 4-1: media controller created
[ 1533.874407][T16918] dvb-usb: bulk message failed: -22 (6/0)
[ 1533.880483][T16918] dw2102: i2c transfer failed.
[ 1533.885669][T16918] dvb-usb: bulk message failed: -22 (6/0)
[ 1533.892327][T16918] dw2102: i2c transfer failed.
[ 1533.897504][T16918] dvb-usb: bulk message failed: -22 (6/0)
[ 1533.903946][T16918] dw2102: i2c transfer failed.
[ 1533.910369][T16918] dvb-usb: bulk message failed: -22 (6/0)
[ 1533.917828][T16918] dw2102: i2c transfer failed.
[ 1533.922991][T16918] dvb-usb: bulk message failed: -22 (6/0)
[ 1533.929116][T16918] dw2102: i2c transfer failed.
[ 1533.933975][T16918] dvb-usb: bulk message failed: -22 (6/0)
[ 1533.940675][T16918] dw2102: i2c transfer failed.
[ 1533.946050][T16918] dvb-usb: MAC address: 02:02:02:02:02:02
[ 1533.967208][T16918] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1534.025068][T32105] dvb-usb: bulk message failed: -22 (1/0)
[ 1534.030952][T32105] dw2102: i2c transfer failed.
[ 1534.036357][T32105] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN PTI
[ 1534.048233][T32105] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017]
[ 1534.056713][T32105] CPU: 1 UID: 0 PID: 32105 Comm: syz.3.8344 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1534.067633][T32105] Tainted: [L]=SOFTLOCKUP
[ 1534.071976][T32105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1534.082022][T32105] RIP: 0010:su3000_i2c_transfer+0x2e3/0xfd0
[ 1534.087908][T32105] Code: 0f b6 18 49 83 c7 08 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 2a 1b 6c fa 4d 8b 37 49 ff c6 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 7a 08 00 00 41 88 1e 48 8b 44 24 48 42
[ 1534.107552][T32105] RSP: 0018:ffffc9000488fbb0 EFLAGS: 00010202
[ 1534.113697][T32105] RAX: 0000000000000002 RBX: 0000000000000010 RCX: afd0877635c2d200
[ 1534.121653][T32105] RDX: ffffc9000da79000 RSI: 0000000000004825 RDI: 0000000000004826
[ 1534.129602][T32105] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
[ 1534.137561][T32105] R10: dffffc0000000000 R11: fffffbfff1bbae40 R12: 0000000000000003
[ 1534.145510][T32105] R13: dffffc0000000000 R14: 0000000000000011 R15: ffff8880271dbb88
[ 1534.153468][T32105] FS:  00007f5fd06d06c0(0000) GS:ffff888125f1f000(0000) knlGS:0000000000000000
[ 1534.162380][T32105] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1534.168944][T32105] CR2: 0000001b30a23ffc CR3: 00000000b3e1c000 CR4: 00000000003526f0
[ 1534.176908][T32105] Call Trace:
[ 1534.180182][T32105]  <TASK>
[ 1534.183184][T32105]  __i2c_transfer+0x79a/0x1f00
[ 1534.187963][T32105]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1534.193758][T32105]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1534.199547][T32105]  ? i2c_transfer+0xc8/0x2d0
[ 1534.204117][T32105]  i2c_transfer+0x1cc/0x2d0
[ 1534.208599][T32105]  i2cdev_ioctl_rdwr+0x460/0x740
[ 1534.213525][T32105]  i2cdev_ioctl+0x64b/0x820
[ 1534.218011][T32105]  ? __pfx_i2cdev_ioctl+0x10/0x10
[ 1534.223014][T32105]  ? __fget_files+0x3a0/0x420
[ 1534.227690][T32105]  ? __fget_files+0x2a/0x420
[ 1534.232262][T32105]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1534.237178][T32105]  ? __pfx_i2cdev_ioctl+0x10/0x10
[ 1534.242176][T32105]  __se_sys_ioctl+0xfc/0x170
[ 1534.246750][T32105]  do_syscall_64+0xec/0xf80
[ 1534.251229][T32105]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1534.257269][T32105]  ? trace_irq_disable+0x37/0x100
[ 1534.262272][T32105]  ? clear_bhb_loop+0x60/0xb0
[ 1534.266927][T32105]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1534.272795][T32105] RIP: 0033:0x7f5fcf78f749
[ 1534.277193][T32105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1534.296778][T32105] RSP: 002b:00007f5fd06d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1534.305176][T32105] RAX: ffffffffffffffda RBX: 00007f5fcf9e5fa0 RCX: 00007f5fcf78f749
[ 1534.313125][T32105] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000004
[ 1534.321072][T32105] RBP: 00007f5fcf813f91 R08: 0000000000000000 R09: 0000000000000000
[ 1534.329111][T32105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1534.337060][T32105] R13: 00007f5fcf9e6038 R14: 00007f5fcf9e5fa0 R15: 00007f5fcfb0fa28
[ 1534.345026][T32105]  </TASK>
[ 1534.348042][T32105] Modules linked in:
[ 1534.352592][T32105] ---[ end trace 0000000000000000 ]---
[ 1534.365626][T32105] RIP: 0010:su3000_i2c_transfer+0x2e3/0xfd0
[ 1534.378141][T32105] Code: 0f b6 18 49 83 c7 08 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 2a 1b 6c fa 4d 8b 37 49 ff c6 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 7a 08 00 00 41 88 1e 48 8b 44 24 48 42
[ 1534.398928][T32105] RSP: 0018:ffffc9000488fbb0 EFLAGS: 00010202
[ 1534.406306][T32105] RAX: 0000000000000002 RBX: 0000000000000010 RCX: afd0877635c2d200
[ 1534.415259][T32105] RDX: ffffc9000da79000 RSI: 0000000000004825 RDI: 0000000000004826
[ 1534.423750][T32105] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
[ 1534.432302][T32105] R10: dffffc0000000000 R11: fffffbfff1bbae40 R12: 0000000000000003
[ 1534.440407][T32105] R13: dffffc0000000000 R14: 0000000000000011 R15: ffff8880271dbb88
[ 1534.448819][T32105] FS:  00007f5fd06d06c0(0000) GS:ffff888125e1f000(0000) knlGS:0000000000000000
[ 1534.457921][T32105] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1534.464827][T32105] CR2: 0000001b2e60eff8 CR3: 00000000b3e1c000 CR4: 00000000003526f0
[ 1534.474127][T32105] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083
[ 1534.483061][T32105] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1534.491198][T32105] Kernel panic - not syncing: Fatal exception
[ 1534.497755][T32105] Kernel Offset: disabled
[ 1534.502062][T32105] Rebooting in 86400 seconds..