last executing test programs:

9.281612094s ago: executing program 3 (id=2721):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0)
fallocate(r0, 0x0, 0xfea000, 0x2000402)
syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0)
r1 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
timer_create(0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000380)={<r2=>r1, &(0x7f0000000100)='pids.current\x00', 0x140, &(0x7f00000002c0)={@_ha_fsid={[0x100, 0x1]}, {0x8, 0x1, 0x5}}, 0x9, &(0x7f0000000300), &(0x7f0000000340)=0x8})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
lseek(r0, 0x1, 0x3)
r3 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r3, 0x0, 0x0)
syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r3, 0x0, &(0x7f0000000f40)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="400b74000000e4cd75cd12d41ff123fc2bb8c43c1bb4d4d883e7626647427f24bdd094479a672f6493ddf55cbdc0ed81c72be578787efa4c5594a16ad6ea49b7611d03e156ad145a0dd88fef5ed6b4ad82c63120750d866f84e8d4d7cc02c5b16acb092c27385e77752d47bdd4c4bcc14b5f12d8d2100fb8cbab"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r3, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r3, 0x0, 0x0)
syz_usb_control_io$lan78xx(r3, &(0x7f0000000bc0)={0x14, &(0x7f0000000a80)={0x20, 0x6, 0xdd, {0xdd, 0x1, "93961a5b0c28c88b1836d26f3b6c89d1279c039d893b92de05f1ee08c93a52df293a4d85cc5e61daee9b7548679d2178a90d95148d041267728787927833f40c2722a2bc1e8838e5df1043c1142664c8a0fc4451ed9477052136e32c004d41443d5f13c86962474c574e847934b710d09f7acc07f4f57f647dee26929bbe9db1ad9ff1a119791831ebc30b0b10db0cf0856987befdc36038a3ed392d7cafae3f85e3a670219c879d2cc39abbf5493b8f7ac36d84ea896f16074bf3194e8b0a72a3656d04a0b8593495b02deee0a76a41f999ec6a31e44c52ef8d4a"}}, &(0x7f0000000b80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc2e}}}, &(0x7f0000000e80)={0x34, &(0x7f0000000c00)={0x0, 0xe, 0xc3, "1217eb5d6d205a643bde0f793598713a5a0533025843e30b5b37b2283a40aded168b867a7ff0a2265db7fda4f4f97c3e3b4ac32d8b195c2d35d69f0d63b790ba16e2ea43040a1fa0f23878c330fb6c542bd9889bb8f015f35073f2570137aae9eb12b3bab6abc2e2fa933c6aa692338c96c92a7f6d1bc39c9c61f3e07a6e2f35a59977afa668bd32af512a645b91b5665d11b1d60a771d429a046f911ccda9af830affc6d3a8a6c8b9f9c3677fb96d02ee1b36ed05380f980e03bb283ed192027de4e5"}, &(0x7f0000000d00)={0x0, 0xa, 0x1, 0xf8}, &(0x7f0000000d40)={0x0, 0x8, 0x1, 0xfc}, &(0x7f0000000d80)={0xc0, 0xa1, 0x4, 0x4}, &(0x7f0000000e00)={0x40, 0xa0, 0x4, 0x8}, &(0x7f0000000600)={0xc0, 0xa2, 0x2f, "58ffeca636cf7fe58bb4ec34dbe9a00d8e832b540e3b3016a1ed85ee98953c06ded10000feffffff00"}})
syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000280)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f00000003c0))
r4 = syz_open_dev$dri(0x0, 0x4, 0x20100)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x9, 0x7, 0x3, 0x4})
r5 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000640)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$rtl8150(r5, &(0x7f0000000780)={0x14, &(0x7f00000006c0)=ANY=[@ANYBLOB="200f510000005122661150e96eeb1e3b4bd96b9413ce77a2b578c3c0fef4b5f89bb5424f72046abb59355e00e20970558acf122a5d4a06a14af5d5ba4929cd3e57fad3c643ca08c29b2664036a0addc150df0353f59200"], &(0x7f0000000740)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1401}}}, &(0x7f0000000a40)={0x2c, &(0x7f00000007c0)={0x40, 0x6, 0x2d, "1e9d002c88dc45ef66a616b4a59bb94f0ddd0a777a2896518aa830640865f78b47e7e4d7de3f31a510a60986ec"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000840)={0x0, 0x8, 0x1}, &(0x7f00000008c0)={0xc0, 0x5, 0x4, "a7444cfd"}, &(0x7f0000000900)={0x40, 0x5, 0x3, "66f6b4"}})

5.917593304s ago: executing program 2 (id=2741):
syz_io_uring_setup(0x35, 0x0, 0x0, 0x0, &(0x7f0000000000))
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x275a, 0x0)
r1 = gettid()
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = userfaultfd(0x801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000300)={0xaa, 0x1c8})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000200)={'wlan0\x00'})
sendmsg$NL80211_CMD_NEW_STATION(r4, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0)
socket$inet6(0xa, 0x1, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/92, 0x5c}], &(0x7f0000000100)=[0x9, 0x8, 0x80000000, 0x0, 0x101]}, 0x20)

5.125476665s ago: executing program 3 (id=2742):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xc}, {0x8, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x80000000}, @TCA_CAKE_FWMARK={0x8, 0x12, 0xffff7fff}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'lc\x00', 0x1, 0x400000, 0x4}, 0x2c)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xc}, {0x8, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x80000000}, @TCA_CAKE_FWMARK={0x8, 0x12, 0xffff7fff}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x10) (async)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084) (async)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'lc\x00', 0x1, 0x400000, 0x4}, 0x2c) (async)

5.01552525s ago: executing program 2 (id=2743):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x9, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="9f00000000000000020000000000000000000000000000000010"], 0x0, 0x1a}, 0x28)
syz_usb_connect$uac3(0x0, 0x9f, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040ba0d001040000102030109028d000301635006080b00ff010130020904000000010130000a24010a2900010000000c240b07010500000007f80013240306020603040703"], 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000002400)='net/wireless\x00')
read$FUSE(r2, &(0x7f0000003f80)={0x2020}, 0x2020)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)=0x1)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x9, 0x0)
read$FUSE(r2, &(0x7f0000005fc0)={0x2020}, 0x2020)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000001800", [0x0, 0x2000000000001]}})
readv(r0, &(0x7f0000001800)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r4, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000003700)=ANY=[@ANYBLOB="e8020000000000002900000004000000005a"], 0x2e8}}], 0x2, 0x0)

4.742944422s ago: executing program 1 (id=2745):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=ANY=[@ANYBLOB="020f000015000080ffffffffffffff0005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080)

4.66391717s ago: executing program 1 (id=2746):
r0 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x2}, 0x54)
r1 = socket$tipc(0x1e, 0x2, 0x0)
preadv2(r1, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/191, 0xbf}, {&(0x7f0000000100)=""/87, 0x57}], 0x2, 0xffffff50, 0xffffffff, 0x0)
bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x2}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket(0x2, 0x80805, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000007d80)={0x0, 0x101, 0x40, 0xfff}, &(0x7f0000007dc0)=0x10)
connect$unix(r3, &(0x7f0000000280)=@file={0x0, './bus\x00'}, 0x6e)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000440)=0x2, 0x4)
r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fsetxattr$system_posix_acl(r6, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="02000000200000000000000002000600", @ANYRES32=0x0, @ANYBLOB="04c10700000000001000070000000000200000000000000091aa9a9e6618f8155409f6c411e7586863f4db7f0f1dbce69207ba0867998108"], 0x2c, 0x2)
setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4e26, 0x43, @remote, 0x9}, 0x1c)
connect$inet(r6, &(0x7f0000000300)={0x2, 0x4e24, @multicast1}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3d, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1=0xac14140f}, {0x4e24, 0x4e20, 0x8}}}}}, 0x0)
userfaultfd(0x1)
bind$tipc(r0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bond0\x00'})
sendmsg$tipc(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x20008820)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)

4.598251277s ago: executing program 3 (id=2747):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0xffffffff, "5e5c3446aa0ecd604c893eba3198600b1891109654fe9676d14574be70b6225c", <r2=>0xffffffffffffffff})
ioctl$SYNC_IOC_FILE_INFO(r2, 0xc0383e04, &(0x7f0000000140)={""/32, 0x0, 0x0, 0x51, 0x0, 0xffffffffffffffff})
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="1800000025000103241720341c9513bde50000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20004058}, 0x20000094)
recvmmsg(r0, &(0x7f0000006900)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000003c0)=""/4092, 0xffc}, {&(0x7f00000002c0)=""/177, 0xb1}], 0x2}, 0x5}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000001b80)=""/130, 0x82}, {&(0x7f0000003340)=""/4096, 0x1000}, {&(0x7f0000001840)=""/165, 0xa5}, {&(0x7f0000000000)=""/164, 0xa4}, {&(0x7f0000002e80)=""/251, 0xfb}, {&(0x7f0000001500)=""/245, 0xf5}, {&(0x7f0000001d40)=""/249, 0xf9}, {&(0x7f0000000200)=""/115, 0x73}, {&(0x7f00000000c0)=""/98, 0x62}, {&(0x7f0000001900)=""/94, 0x5e}], 0xa}, 0x81}], 0x4, 0x40012032, 0x0)

4.471393796s ago: executing program 3 (id=2748):
r0 = io_uring_setup(0x115a, &(0x7f0000000440)={0x0, 0x8274, 0x40, 0x3, 0x117})
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, 0x0, 0x1)
r1 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket(0x10, 0x1, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@gettaction={0x24, 0x32, 0x301, 0x70bd2c, 0xfffffffe, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000003800010326bd700203dcd125070000000800020004"], 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x20004814)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="180000001200210325bd70000500000007"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0xc080)
io_setup(0x8, &(0x7f0000004200)=<r5=>0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
io_submit(r5, 0x1, &(0x7f0000000180)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x9, r6, 0x0, 0x0, 0x0, 0x0, 0x2}])
ioctl$VIDIOC_G_SELECTION(r6, 0xc040565e, &(0x7f0000000100)={0x3, 0x100, 0x3, {0x0, 0x6, 0x6, 0x7}})
sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000003c0)={0x0, 0xf0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}}, 0x0)

4.196040777s ago: executing program 3 (id=2751):
r0 = socket(0x15, 0x5, 0x0)
socket$inet6(0xa, 0x1, 0x100)
syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x100)
unshare(0x20000)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x8841, 0x0)
r2 = socket$kcm(0x1e, 0x9, 0x0)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
getgid()
r3 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r4 = syz_open_dev$video(&(0x7f0000000180), 0xc407, 0x800)
ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000040)={0x0, 0x5, 0x1, {0x9, @meta={0x3854454d, 0x31912aef, 0x33565348, 0x6661, 0x4c319713}}, 0x10000})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005f8bfa4099115268345701020301090212000100000000090499", @ANYRES16, @ANYBLOB="09efbaddab6f7813c1d64eaa4aff6f6a"], 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r6, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000bc0)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac539985bac8624c50b527c68b0ff250261953f2da79a78104c2d0000000086b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d59e5ac2d704fa2595b5d36400d0b2d119796726a223", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000025c0)="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", 0x4a4}], 0x1}}], 0x2, 0x2090)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r6, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)
sendmsg$nl_generic(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x14, 0x38, 0x301, 0x270bd26, 0x25dfdc03, {0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x20004814)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000200)=0x12)
ioctl$SNDCTL_DSP_GETBLKSIZE(r1, 0xc0045004, 0x0)
getsockopt(r0, 0x200000000114, 0x2710, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x19059)

3.619932455s ago: executing program 1 (id=2752):
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0xdf, @local, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="24001200000000002900000032"], 0x28, 0x7ffffff7}}], 0x1, 0x4040)

3.511877868s ago: executing program 1 (id=2753):
syz_io_uring_setup(0x35, 0x0, 0x0, 0x0, &(0x7f0000000000))
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x275a, 0x0)
r1 = gettid()
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = userfaultfd(0x801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000300)={0xaa, 0x1c8})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000200)={'wlan0\x00'})
sendmsg$NL80211_CMD_NEW_STATION(r4, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0)
socket$inet6(0xa, 0x1, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/92, 0x5c}], &(0x7f0000000100)=[0x9, 0x8, 0x80000000, 0x0, 0x101]}, 0x20)

3.204007421s ago: executing program 4 (id=2754):
r0 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2840)
ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000040)={0x5, &(0x7f0000000700)=[{0x1a, '\x00', @buffer={"575757700d0a10152180d68cf337ecf338c59363fdc8598600", 0x20}, 0xffff}, {0x42, '\x00', @data=0x8, 0xffff}, {0x34, '\x00', @st={0x4, [{0x3}, {0x1, @uvalue=0x6}, {0x0, @uvalue=0x400}, {0x3, @svalue=0x8}]}, 0x80000}, {0x2a, '\x00', @buffer={"7d92c52655500169a9cb11aa8bf9ebbf5c0849c22e48e0f51760516445c41b54", 0x20}, 0x1}, {0x40, '\x00', @data=0x9, 0x4}, {0x21, '\x00', @data, 0x7}]})
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf00020106500008ffffffe7020d0000052406000108247c2a6ad07be4aefb0000000300ff000606241a05001407240a050905580c240c00000000a90c090003042402"], 0x0)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x6, @mcast2}}, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffc}}}, 0x108)
syz_emit_ethernet(0xd2, &(0x7f00000006c0)=ANY=[@ANYBLOB="bbbbbbbb37dfdf68bf0b63e886dd6000676c009c1100fe880000000000000000000000000001ff02000000000000000000000000000100000e"], 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0)
r4 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x40}, 0xc)
r5 = getuid()
sendmsg$nl_generic(r4, &(0x7f0000002100)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000020c0)={&(0x7f0000000900)={0x1698, 0x18, 0x20, 0x70bd28, 0x25dfdbfd, {0x15}, [@typed={0x5, 0x105, 0x0, 0x0, @str='\x00'}, @nested={0x2a9, 0x100, 0x0, 0x1, [@generic="7bed64e688d7a930cf15cbfc2066a4cf89a265c176c70939234a6f1c04b57467c0c80018f58b5a94112a8e63443f69610637152bbc1921399a9e6c26a02c939d6c0e8f99582fb1d7bd92edaf4e153536029487426d30ef31ac8dba31d3fb746a360c9cb9273480b6d6eec154ed2620c5425dde169f6592f36eee87b6bd2f53f8b528cd49d079b07f920cc9d1a48da60e881d09cd0dad05a809dbaee7b8f01a5235d74cd38cad465380fc0d9b7325f6f8988a0bb249bb1d6363dd48cdf76764aa494fcd39c67fed89443df79d0fa64062d00277c7ec61d7fa57f0ef2a7e6892dea9caf97a8c795dee1fa511c623b56b07454c", @generic="65a6", @generic="1e0cee676c1c77c1f3f01d6d79fe8d8c75e9f16e6936b382931a038fbb952d038401f64498887ea6b46b3e1688ece131998ba924cf2e73d9cf7562a52640df8f43ba45d09e15e9a0cba22ec3359304852a9a203e61e454cb557caa26b223f507be8ca11b72dc336c6ab1dc7500c3da2074b95f15aa450ff8e1c7e3bee090e58faa0f8b8cfc35af1705ac12582be888f7230224276af45692641b969eb26916ddd41ec5bc910029451130d382b43d0e6fbdfa016845a95db279b7de7426dcbfd17381fc5aa26be86d90b2b7e5725e236899ab993fdd1802760663de11006e7b72169ce6cd01", @generic="7e11bfc02b4059e254c766b25874658a05f3b402a0054ff6afd52915c71c4b6395b75a9fc09bb76be3b86cbd136ebd57c041bdeb2257104dc9b40644a5437971aba9d965ed7dd50af507b5d80ae6af5c9ca6c28f447b12508d96835bec87edba6ecdb176ad984bd60385f654980ac2a72323187ae5354f150db25b7c31dcd1b8b1dd5354568239c003dff346eafb7e982de079e5ae230e493c796ed47c6b0d1011d7533d52f1ba73f3ef4ff4ed026cc442c2c53391c586f41ec42eb7c5d703e62cbd4b48766ffc038d2233fa"]}, @generic="60c2b360cbc9a090f675d37bb5fa6ca0ec5f2afdca812661a81c20e5c8c6842f1849d8e14caa1f56dbed379340cfbfd7dc8e90937b4444ba2a8ddc8ad6d59a8bbec468351b08ca0db780058d4bb25d92a1fa5620015d9122fa1f0e5fa65615df7278032479ff39da20d0685cbe8a9086c1ab74679508ebd85b47a67645f1", @typed={0x8, 0x25, 0x0, 0x0, @uid=r5}, @generic="6231d33a06713257be467d6ae2f1ed63710fcbb5984191927973c2c4ffff21c4b2e45f64d3b56d0fea8485bdc2fa238bce69a233036cf601d29054a7d4e59e3e02f044dc85737c7a7e3181fe2e39c0ee0ad6a337667186fac7954bb08f3f02909c1aa25962d7e3fe6b6b77bb902e3da5d727ffff6264f460868d803f8200a6a1bae37497c14f5eccef108c7591b1eda451d0fcce729687443160d970ac437e46e18e26a4ea56758ff8a7704f620977bb8e05cfe7066d0e720277a4d903cc76fc2a6340c4693b06c7d615f275df8d7d9d8bf6", @nested={0x10be, 0xdb, 0x0, 0x1, [@generic="27c38c9a26c8bc1c3eb69c8b2cbf25cd5bd1f840c6120bae9468f16111f3f376b161224eaf00d22e678bf7552cb4ea89c08b790543c6072c560b0eac1a5a8dbf8e7bc577d22d717ec63fd9c6fc3b7de4e1e23e58408ac5efaab3aa36e92a12c9088583248e58f8cc7ec75b7fec6b3017ab5863eabb336d6dd35336b62b3a80a52c7b9a847428a156bf2ddfdc4aa38495d6bcb9f1d5230cc8f3866e148db0beaa848064e0a6dba7be943f9037ca180ab855f734dbfb441ee57552", @generic="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"]}, @nested={0xca, 0x80, 0x0, 0x1, [@nested={0x4, 0x109}, @typed={0x8, 0x16b, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x4, 0x11e}, @nested={0x4, 0xdd}, @generic="aec8eb92e4be1393f8f3f46c70a454ef2a8937cf2b14d5514dca3be0cc5b9c88defd76cd530b59f0efea3d88f4a87d28846834a70e039a57add29982f8d77e1765a9f5fc9853667ec52b7f49ea8dde4bdde8ff36b641eb4fd118c1ba5e9e30d8440e93b74931cbce7c7af4e5c69ba7a211a1b5475e3096e6792338aed276ab4187273c600626a5c25b6dcf1c76fcb883d67209ab5a47c57f2b3cacc8b2d00090f3be65717cda64d8ed46bd48d3c5288bde11"]}, @nested={0xeb, 0x30, 0x0, 0x1, [@generic="e7c611f0ad5905cae22b1ba73d4165591989cd8e3d4859aa271c1a5934a9462397c3c5e0a0d4c0642edfa028eded40a0ccfa65e2bc672d54c948048fa3a83c810b50cd6523675f5f99ce8cc5b72099f9973a3f8e0b9269c532eb542ae7b577712ac987e50c171a04049ae72a5b99f80917dbc28c121ab1e4449cfd493f0fa72245c99eefb873c839d9a3ccddb0f306e83d7046a9c6121ea51d7a7eeb4e3b50e994e546c7e86673d1582de191107f5b290840a3389ee9c76669bbf8a5d771a95d67085dd241705940d2a0638541e9735d380ca1db27227109fcf02e5f5e4bd2630fe431b7281135", @generic]}]}, 0x1698}, 0x1, 0x0, 0x0, 0x4000011}, 0x8000)
ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)=0x1)

2.866218958s ago: executing program 2 (id=2756):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x170bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0)
r5 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r7, &(0x7f0000000240), 0x3af4701e)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28012, r7, 0xffffc000)
ioctl$FS_IOC_RESVSP(r6, 0x4030582b, &(0x7f0000000c00)={0x0, 0x1, 0x4, 0x40000000000000, 0x0, 0xf0})
r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r9 = eventfd2(0x6, 0x80800)
ioctl$KVM_HYPERV_EVENTFD(r8, 0x4018aebd, &(0x7f0000000380)={0x5, r9})
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x40, 0x3, "9b6a37b458a8056dd9a87f963d140d7a9d3ac869f3a860917523679abf4579f9cd656422a633a39f0300000000000000000000000100000000000000"}, @NFTA_TARGET_NAME={0xa, 0x1, 'HMARK\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @random="2c09000000f8", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x3, 0x7, 0x3c, 0x67, 0x0, 0x9, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, @remote}, @redirect={0x5, 0x1, 0x0, @private=0xa010101, {0x8, 0x4, 0x3, 0x2a, 0xc7e, 0x64, 0xdd, 0x2, 0x21, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @timestamp={0x44, 0x8, 0x4b, 0x0, 0x6, [0xffff8001]}]}}}}}}}, 0x0)
ioctl$KVM_HYPERV_EVENTFD(r8, 0x4018aebd, &(0x7f00000002c0)={0x1, r9})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x60, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xfff2}, {}, {0xb, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x405}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0xe6a7, 0x0, 0xf2ff}}}]}]}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010)

2.598920558s ago: executing program 1 (id=2759):
r0 = syz_open_dev$vbi(&(0x7f00000003c0), 0x3, 0x2)
ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000001100)={0x0, 0x204, "725098737f978e58a14f43d5e354bc4a2df2280493e307e3d1c02ee428f4e0be", 0xc910, 0x2, 0x7, 0x0, 0x7, 0x1000, 0x1, 0x81, [0x823e, 0x1, 0x3, 0xfffffffd]})

2.538510293s ago: executing program 1 (id=2760):
getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f00000033c0)={'icmp6\x00'}, &(0x7f0000003400)=0x1e)
sendmmsg(0xffffffffffffffff, &(0x7f0000008e00), 0x0, 0x200000c1)
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xf, {"a2e3ad21e08eeb661b5e060987f70e06d038e7ff7fc6e5539b0d650e8b089b3f373b68090890e0878f0e1ac6e7049b3646959b429a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07440936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc9d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6089ae6899d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec2c0911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8de7f4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c2715500b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017eef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f48451ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x35)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
writev(r1, &(0x7f0000000100)=[{0x0, 0xfffffcf6}, {&(0x7f00000005c0)="0200", 0x10}], 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan0\x00'})
sendmsg$can_raw(r1, &(0x7f00000013c0)={&(0x7f0000000580), 0x10, &(0x7f0000001040)={0x0}, 0x2, 0x0, 0x0, 0x44940}, 0x4000844)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0)
bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f0000001040), 0x598f, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000001080)={0x38, 0x3, 0x40, 0x0, 0xa67, 0x5, 0x759d, 0x3, 0x0, 0x204}, 0x0)
r4 = userfaultfd(0x100001)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108})
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}})
ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000001140)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0})

2.363923688s ago: executing program 0 (id=2761):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x48}, 0x1, 0x0, 0xfff5}, 0x0)

2.350437906s ago: executing program 0 (id=2762):
r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x4, 0x0, 0x2d, 0x0, 0x0, 0x0, 'syz1\x00', 0x0})

2.209512748s ago: executing program 0 (id=2763):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0b01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000000)={'ipvlan1\x00', {0x2, 0x4e22, @loopback}})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0)
ftruncate(r3, 0x8800000)
read$FUSE(r3, &(0x7f0000002f40)={0x2020}, 0xfffffd24)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0)
write$tun(r0, &(0x7f0000000240)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@igmp={{0xe, 0x4, 0x1, 0x38, 0xfc, 0x66, 0x0, 0x4, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@lsrr={0x83, 0x1b, 0x2d, [@dev={0xac, 0x14, 0x14, 0x2e}, @dev={0xac, 0x14, 0x14, 0xc9}, @rand_addr=0x64010102, @remote, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0x8, 0x8f, 0x0, 0x0, [0x9]}]}}, {0x15, 0x6, 0x0, @loopback, "f8051add71af82a83d3d31ee42886a912230aea1b5db6436fc4d0d69e3850e98d6b3f97c6f45fbfdbf1ce6da579e44ec48fa63d232b22f512d561cfe15b385cfb1ca6aabffd65855a093b569678995c36b46f7168242f7c810d4b45c9b2738cbd5ab07801a4f9ffad8c4b85419bc2168fce70c2252be51b1321d6ee848f7670d45cf4fce95093383079ee4e9ffbdaa0f265d0cb3039f3ca6f29bbd8facc3dfef7a5e0285ac4d3e59e4d050436ac4576516555826aea704b04b16db88"}}}, 0x106)

1.878711391s ago: executing program 4 (id=2764):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x2, 0x6, 0x5e0, 0x0, 0x0, 0x420, 0x330, 0x190, 0x510, 0x510, 0x510, 0x510, 0x510, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0xfffa, @empty, @mcast2, @private2={0xfc, 0x2, '\x00', 0x8}, [], [0xff000000, 0xffffffff, 0xff000000, 0xffffff00], [], 0x0, 0x886}}, @common=@inet=@dccp={{0x30}, {[0x4e21, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x21, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x5, 0xff}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff000000], [0xff], 'bridge0\x00', 'sit0\x00', {0xff}, {}, 0x67}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@empty, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_to_bridge\x00', {0xff}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@private=0xa010100, 0x5, 0x3d, 0xf}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x640)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x1, 0x7f, 0x1}})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000001100), 0x101000, 0x0)

1.739298569s ago: executing program 4 (id=2765):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x2, 0xa, 0x5, 0x5, 0x2, 0x0, 0x70bd2c, 0x25dfdbfd}, 0x10}}, 0x40004)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, &(0x7f0000000080)={'batadv0\x00'})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0)
ioctl$TUNSETIFF(r1, 0x400454da, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045)
r3 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce})
writev(0xffffffffffffffff, 0x0, 0x0)
io_uring_enter(r3, 0x2219, 0xcf74, 0x16, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = socket$kcm(0xa, 0x2, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x26}, 0x4e1e, 0x3, 'sed\x00', 0x21, 0x2, 0x6e}, 0x2c)
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44)
r9 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44)
sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xe0000000}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4)
setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000480)=0x1, 0x4)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c)
read(r4, &(0x7f0000000200)=""/151, 0x97)

1.690737966s ago: executing program 4 (id=2766):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
unshare(0x20400)
setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2)
socket(0x1e, 0x4, 0x0)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x5, 0x0, 0x4}, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010800000000000000000a0000000c0000800800", @ANYRES16=r2], 0x20}, 0x1, 0x0, 0x0, 0x240c0811}, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000600)={0x2, @pix={0x80000000, 0xbb46, 0x34324142, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}})
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000100)={0x410000, 0x2, 0x2})
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x2, @sliced={0x8, [0x1, 0x7, 0x5, 0x3ff, 0x9, 0x2, 0x6, 0x9, 0x1ff, 0xdd, 0x494, 0x139, 0x7, 0x5, 0x5, 0x7, 0x6, 0x9, 0x2, 0x5, 0x1, 0x1, 0xd, 0x6, 0x9, 0x8, 0xf6, 0x5, 0x7, 0x9, 0x4, 0x5, 0x9, 0x5, 0x5, 0x258d, 0xa, 0x9, 0x6, 0x1, 0xe, 0x40, 0x7ff, 0x7, 0x7f, 0xdea, 0x5, 0xbb], 0x80000000}})

1.631563172s ago: executing program 4 (id=2767):
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000000000020ac050f0222000182830109022400010100000009040000020301020009210005000122000009058103c3"], 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x16, 0x301, 0x70bd24, 0xfffffffc, {0x2e}}, 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000000))
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)
timer_settime(0x0, 0x1, 0x0, 0x0)
r2 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r2, &(0x7f0000000ac0)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}], 0x1, 0x4000000)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={r4, 0x4, 0xffffffff}, 0xc)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x215832, 0xffffffffffffffff, 0xec778000)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x6, 0x4, 0x8, 0xa}]}, 0x10)
syz_open_dev$vim2m(0x0, 0x47b, 0x2)
syz_open_dev$sndmidi(0x0, 0xff, 0x0)
openat$nvram(0xffffffffffffff9c, 0x0, 0x40002, 0x0)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
close_range(r6, 0xffffffffffffffff, 0x0)

1.499943685s ago: executing program 0 (id=2768):
sched_setattr(0x0, &(0x7f0000000400)={0x38, 0x3, 0x5628f18787378490, 0x6, 0x4, 0x1, 0x1, 0xfffffffffffffffe, 0x4}, 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
syz_io_uring_setup(0x2, &(0x7f0000000180)={0x0, 0x289b, 0x10000, 0x1, 0x31f}, &(0x7f0000000040), &(0x7f0000000480), 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000002000/0xa000)=nil, 0xa000, 0x2)
mremap(&(0x7f00008d4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil)
mremap(&(0x7f00004d8000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil)
set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x8000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200000)

1.204446549s ago: executing program 2 (id=2769):
syz_io_uring_setup(0x35, 0x0, 0x0, 0x0, &(0x7f0000000000))
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x275a, 0x0)
r1 = gettid()
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = userfaultfd(0x801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000300)={0xaa, 0x1c8})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000200)={'wlan0\x00'})
sendmsg$NL80211_CMD_NEW_STATION(r4, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0)
socket$inet6(0xa, 0x1, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/92, 0x5c}], &(0x7f0000000100)=[0x9, 0x8, 0x80000000, 0x0, 0x101]}, 0x20)

1.048780089s ago: executing program 3 (id=2770):
clock_gettime(0x0, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000001040)={0xfc, {"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", 0xffffffffffffff68}}, 0x1006)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e04074020"], 0x7)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000008c0), 0x80800, 0x0)
ioctl$PTP_ENABLE_PPS(r3, 0xc4c03d16, 0x1)
r4 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
sendto$inet6(r1, &(0x7f0000000200)="ccf4629ebe6b90cc39613a4aa4dd1c606e19868ceeb410a3c1374c363fb6da7b88f0649211c2f80d18366130380654967ffdfaeb1ac52c575386916d0ccb6eaea38347e0e693f23a80302dec51afeff4b99273a547b2d0e815e610ce85443125492e9fa7e35cd79c24520f49d080c41c5d8e728146dd46ee5094b92e5c45e6d3f143c9ae7e2f63e0a86f210934ba3a60857b16ec7172e9c5b37b", 0x9a, 0x48006, &(0x7f00000002c0)={0xa, 0x4e24, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, 0x1c)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c0000001800dd8d0000000000000000020010000000000000000000080005"], 0x2c}, 0x1, 0x0, 0x0, 0x841}, 0x0)
r6 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r6, &(0x7f0000000580)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000300)="a905000000407464000100000000000000e5c0d8af7a6417e436a106993e1e5ad8311dab", 0x24}], 0x1}}], 0x1, 0x800)
close(r4)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b700000081020100bfa30000000000000703000004feffff720af0fff8ffffff69a4f0ff000000002d030000000000001d400500000000004704000001ed000072030281020100001d440000000000006b0a00fe000000007313000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f1ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c107571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d1abf3cb17b40ac9b10968f38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d61f3b39c64307f9c82b2807c9ff4a269841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67a41b9e320146ee9f566a28"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[], 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
r7 = gettid()
syz_open_procfs(r7, &(0x7f0000000000)='net/vlan/config\x00')
faccessat2(r1, &(0x7f0000000040)='./file0\x00', 0x39, 0x1300)

556.099414ms ago: executing program 0 (id=2771):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="06000000040000004000000005"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r0, 0x0, 0xa0028000}, 0x38) (fail_nth: 71)

277.741857ms ago: executing program 0 (id=2772):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x40d82, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getsockopt$sock_buf(r1, 0x1, 0x3d, &(0x7f0000000280)=""/155, &(0x7f00000003c0)=0x9b) (async)
getsockopt$sock_buf(r1, 0x1, 0x3d, &(0x7f0000000280)=""/155, &(0x7f00000003c0)=0x9b)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
landlock_create_ruleset(0x0, 0x0, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xa8282, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r5, 0x0)
syz_emit_ethernet(0x7e, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r1, @ANYRES32=r2], 0x0)
dup(r5) (async)
r6 = dup(r5)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1c, 0x20000000000001bf, &(0x7f00000012c0)=ANY=[@ANYRES16=r5, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0xd, 0x0, &(0x7f0000000080)="2b1c52ac82e71ea05b0c5e43ed", 0x0, 0x8e, 0x0, 0x0, 0xc0, 0x0, &(0x7f0000001200)="4c4228369f88e91870041ef4c8baa41449dc6ad5553764e898ddee1dfbb587ef4e6854a6bea12aecd99ac5dd4e39745d195df155a8628b7483b791d4de8609a893ccfbe9dc5c2ed555df193d92968b81da97fe3f0f220dd48b29c98152d9ecb2bb68cbf0bfe454a10e0adf453bd021ba3b502665c757d209f1fa9daa8979aa1fc22684d52bba1cd3c5946a6ea16b40f3bf8cc0134fb55a63817f6bac437682ed4c30147c2d86997f970ba094a19b0de4904bf83ff6fc3f0e46aba38692387ce1", 0x4, 0x0, 0x7}, 0x50)
r8 = syz_clone(0x4039080, 0x0, 0x0, 0x0, 0x0, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd86) (async)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd86)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x2, r8, 0x2, 0x0)
madvise(&(0x7f00009ef000/0x4000)=nil, 0x4000, 0x9) (async)
madvise(&(0x7f00009ef000/0x4000)=nil, 0x4000, 0x9)
read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001a00010028bd7000fedbdf2481808000000000000000000008000f000180000000000000000000000001"], 0x38}, 0x1, 0x0, 0x0, 0x40048c0}, 0x884)

225.533012ms ago: executing program 2 (id=2773):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0)
recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000009702000020febfff7a0af0fff8ff00f869a4f0ff00000000b70600001218d1fe2d640500000000002404000000ffffffd404000020000000b7040000100000207207f0ff00000000850000002f000000b70000000a00000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x25}, 0x94)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x3b)

119.171833ms ago: executing program 2 (id=2774):
r0 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2840)
ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000040)={0x5, &(0x7f0000000700)=[{0x1a, '\x00', @buffer={"575757700d0a10152180d68cf337ecf338c59363fdc8598600", 0x20}, 0xffff}, {0x42, '\x00', @data=0x8, 0xffff}, {0x34, '\x00', @st={0x4, [{0x3}, {0x1, @uvalue=0x6}, {0x0, @uvalue=0x400}, {0x3, @svalue=0x8}]}, 0x80000}, {0x2a, '\x00', @buffer={"7d92c52655500169a9cb11aa8bf9ebbf5c0849c22e48e0f51760516445c41b54", 0x20}, 0x1}, {0x40, '\x00', @data=0x9, 0x4}, {0x21, '\x00', @data, 0x7}]})
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf00020106500008ffffffe7020d0000052406000108247c2a6ad07be4aefb0000000300ff000606241a05001407240a050905580c240c00000000a90c090003042402"], 0x0)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x6, @mcast2}}, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffc}}}, 0x108)
syz_emit_ethernet(0xd2, &(0x7f00000006c0)=ANY=[@ANYBLOB="bbbbbbbb37dfdf68bf0b63e886dd6000676c009c1100fe880000000000000000000000000001ff02000000000000000000000000000100000e"], 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0)
r4 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x40}, 0xc)
r5 = getuid()
sendmsg$nl_generic(r4, &(0x7f0000002100)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000020c0)={&(0x7f0000000900)={0x16a8, 0x18, 0x20, 0x70bd28, 0x25dfdbfd, {0x15}, [@typed={0x5, 0x105, 0x0, 0x0, @str='\x00'}, @nested={0x2a9, 0x100, 0x0, 0x1, [@generic="7bed64e688d7a930cf15cbfc2066a4cf89a265c176c70939234a6f1c04b57467c0c80018f58b5a94112a8e63443f69610637152bbc1921399a9e6c26a02c939d6c0e8f99582fb1d7bd92edaf4e153536029487426d30ef31ac8dba31d3fb746a360c9cb9273480b6d6eec154ed2620c5425dde169f6592f36eee87b6bd2f53f8b528cd49d079b07f920cc9d1a48da60e881d09cd0dad05a809dbaee7b8f01a5235d74cd38cad465380fc0d9b7325f6f8988a0bb249bb1d6363dd48cdf76764aa494fcd39c67fed89443df79d0fa64062d00277c7ec61d7fa57f0ef2a7e6892dea9caf97a8c795dee1fa511c623b56b07454c", @generic="65a6", @generic="1e0cee676c1c77c1f3f01d6d79fe8d8c75e9f16e6936b382931a038fbb952d038401f64498887ea6b46b3e1688ece131998ba924cf2e73d9cf7562a52640df8f43ba45d09e15e9a0cba22ec3359304852a9a203e61e454cb557caa26b223f507be8ca11b72dc336c6ab1dc7500c3da2074b95f15aa450ff8e1c7e3bee090e58faa0f8b8cfc35af1705ac12582be888f7230224276af45692641b969eb26916ddd41ec5bc910029451130d382b43d0e6fbdfa016845a95db279b7de7426dcbfd17381fc5aa26be86d90b2b7e5725e236899ab993fdd1802760663de11006e7b72169ce6cd01", @generic="7e11bfc02b4059e254c766b25874658a05f3b402a0054ff6afd52915c71c4b6395b75a9fc09bb76be3b86cbd136ebd57c041bdeb2257104dc9b40644a5437971aba9d965ed7dd50af507b5d80ae6af5c9ca6c28f447b12508d96835bec87edba6ecdb176ad984bd60385f654980ac2a72323187ae5354f150db25b7c31dcd1b8b1dd5354568239c003dff346eafb7e982de079e5ae230e493c796ed47c6b0d1011d7533d52f1ba73f3ef4ff4ed026cc442c2c53391c586f41ec42eb7c5d703e62cbd4b48766ffc038d2233fa"]}, @generic="60c2b360cbc9a090f675d37bb5fa6ca0ec5f2afdca812661a81c20e5c8c6842f1849d8e14caa1f56dbed379340cfbfd7dc8e90937b4444ba2a8ddc8ad6d59a8bbec468351b08ca0db780058d4bb25d92a1fa5620015d9122fa1f0e5fa65615df7278032479ff39da20d0685cbe8a9086c1ab74679508ebd85b47a67645f1", @typed={0x8, 0x25, 0x0, 0x0, @uid=r5}, @generic="6231d33a06713257be467d6ae2f1ed63710fcbb5984191927973c2c4ffff21c4b2e45f64d3b56d0fea8485bdc2fa238bce69a233036cf601d29054a7d4e59e3e02f044dc85737c7a7e3181fe2e39c0ee0ad6a337667186fac7954bb08f3f02909c1aa25962d7e3fe6b6b77bb902e3da5d727ffff6264f460868d803f8200a6a1bae37497c14f5eccef108c7591b1eda451d0fcce729687443160d970ac437e46e18e26a4ea56758ff8a7704f620977bb8e05cfe7066d0e720277a4d903cc76fc2a6340c4693b06c7d615f275df8d7d9d8bf6cc3609ccc4e5d6268c12abd21afde8", @nested={0x10be, 0xdb, 0x0, 0x1, [@generic="27c38c9a26c8bc1c3eb69c8b2cbf25cd5bd1f840c6120bae9468f16111f3f376b161224eaf00d22e678bf7552cb4ea89c08b790543c6072c560b0eac1a5a8dbf8e7bc577d22d717ec63fd9c6fc3b7de4e1e23e58408ac5efaab3aa36e92a12c9088583248e58f8cc7ec75b7fec6b3017ab5863eabb336d6dd35336b62b3a80a52c7b9a847428a156bf2ddfdc4aa38495d6bcb9f1d5230cc8f3866e148db0beaa848064e0a6dba7be943f9037ca180ab855f734dbfb441ee57552", @generic="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"]}, @nested={0xca, 0x80, 0x0, 0x1, [@nested={0x4, 0x109}, @typed={0x8, 0x16b, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x4, 0x11e}, @nested={0x4, 0xdd}, @generic="aec8eb92e4be1393f8f3f46c70a454ef2a8937cf2b14d5514dca3be0cc5b9c88defd76cd530b59f0efea3d88f4a87d28846834a70e039a57add29982f8d77e1765a9f5fc9853667ec52b7f49ea8dde4bdde8ff36b641eb4fd118c1ba5e9e30d8440e93b74931cbce7c7af4e5c69ba7a211a1b5475e3096e6792338aed276ab4187273c600626a5c25b6dcf1c76fcb883d67209ab5a47c57f2b3cacc8b2d00090f3be65717cda64d8ed46bd48d3c5288bde11"]}, @nested={0xeb, 0x30, 0x0, 0x1, [@generic="e7c611f0ad5905cae22b1ba73d4165591989cd8e3d4859aa271c1a5934a9462397c3c5e0a0d4c0642edfa028eded40a0ccfa65e2bc672d54c948048fa3a83c810b50cd6523675f5f99ce8cc5b72099f9973a3f8e0b9269c532eb542ae7b577712ac987e50c171a04049ae72a5b99f80917dbc28c121ab1e4449cfd493f0fa72245c99eefb873c839d9a3ccddb0f306e83d7046a9c6121ea51d7a7eeb4e3b50e994e546c7e86673d1582de191107f5b290840a3389ee9c76669bbf8a5d771a95d67085dd241705940d2a0638541e9735d380ca1db27227109fcf02e5f5e4bd2630fe431b7281135", @generic]}]}, 0x16a8}, 0x1, 0x0, 0x0, 0x4000011}, 0x8000)
ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)=0x1)

0s ago: executing program 4 (id=2775):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x4)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x7, 0x2, 0x6, 0x0, 0xffffffff}, 0x0)
unshare(0x26020480)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x1, 0x1)
syz_emit_ethernet(0x52, 0x0, 0x0)
add_key$keyring(&(0x7f0000000140), 0x0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f280, 0x0, 0x399})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ffffffff000000000000000000000000000800000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000070000000000020002000000fcffffff000000002abd700004350000020004002000000000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
io_uring_enter(r3, 0x33a8, 0xfbb9, 0x1f, 0x0, 0x0)

kernel console output (not intermixed with test programs):

d register index 0x00000098. ret = -EPIPE
[  456.506519][T13043] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  456.548348][T13043] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  456.584771][T13043] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  456.613489][T13043] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  456.627166][T13043] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32
[  456.850426][T13374] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2480'.
[  456.902472][T13043] usb 5-1: new high-speed USB device number 109 using dummy_hcd
[  457.066662][T13043] usb 5-1: config 1 has an invalid interface number: 7 but max is 0
[  457.086717][T13043] usb 5-1: config 1 has no interface number 0
[  457.102560][T13043] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 64
[  457.124866][T13043] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7
[  457.148628][T13043] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  457.167410][T13043] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  457.182491][T13043] usb 5-1: Product: syz
[  457.192520][T13043] usb 5-1: Manufacturer: syz
[  457.200554][T13043] usb 5-1: SerialNumber: syz
[  457.219836][T13369] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  457.231407][T13043] usb 5-1: Error in usbnet_get_endpoints (-22)
[  457.435759][ T5764] usb 5-1: USB disconnect, device number 109
[  457.572470][T13043] usb 1-1: new high-speed USB device number 108 using dummy_hcd
[  457.725255][T13043] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[  457.733762][T13043] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  457.744282][T13043] usb 1-1: config 220 has no interface number 2
[  457.750607][T13043] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  457.764234][T13043] usb 1-1: config 220 interface 0 has no altsetting 0
[  457.771041][T13043] usb 1-1: config 220 interface 76 has no altsetting 0
[  457.778913][T13043] usb 1-1: config 220 interface 1 has no altsetting 0
[  457.788733][T13043] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  457.798059][T13043] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  457.806308][T13043] usb 1-1: Product: syz
[  457.810480][T13043] usb 1-1: Manufacturer: syz
[  457.812479][   T46] usb 3-1: new high-speed USB device number 104 using dummy_hcd
[  457.816301][T13043] usb 1-1: SerialNumber: syz
[  457.982465][   T46] usb 3-1: Using ep0 maxpacket: 32
[  457.989386][   T46] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  458.002316][   T46] usb 3-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=aa.5f
[  458.014296][   T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  458.022298][   T46] usb 3-1: Product: syz
[  458.026501][   T46] usb 3-1: Manufacturer: syz
[  458.031091][   T46] usb 3-1: SerialNumber: syz
[  458.035853][ T5764] usb 2-1: new high-speed USB device number 114 using dummy_hcd
[  458.046850][   T46] usb 3-1: config 0 descriptor??
[  458.052258][T13043] usb 1-1: selecting invalid altsetting 0
[  458.066675][T13043] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  458.095877][T13043] uvcvideo 1-1:220.0: No valid video chain found.
[  458.116991][T13043] usb 1-1: selecting invalid altsetting 0
[  458.125295][T13043] usbtest 1-1:220.1: probe with driver usbtest failed with error -22
[  458.138718][T13043] usb 1-1: USB disconnect, device number 108
[  458.222734][ T5764] usb 2-1: Using ep0 maxpacket: 16
[  458.236112][ T5764] usb 2-1: config 0 has an invalid interface number: 105 but max is 0
[  458.246467][ T5764] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  458.261668][ T5764] usb 2-1: config 0 has no interface number 0
[  458.282150][ T5764] usb 2-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28
[  458.305743][ T5764] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  458.319986][    T9] usb 3-1: USB disconnect, device number 104
[  458.330553][ T5764] usb 2-1: Product: syz
[  458.350788][ T5764] usb 2-1: Manufacturer: syz
[  458.368275][ T5764] usb 2-1: SerialNumber: syz
[  458.385113][T13414] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2491'.
[  458.403702][ T5764] usb 2-1: config 0 descriptor??
[  458.418352][ T5764] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046c:14e8)
[  458.436551][ T5764] uvcvideo 2-1:0.105: No valid video chain found.
[  458.454071][T13043] usb 4-1: USB disconnect, device number 14
[  458.624815][ T5764] usb 2-1: USB disconnect, device number 114
[  458.876482][T13421] bridge0: port 1(team0) entered disabled state
[  459.022962][T13424] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2496'.
[  459.442412][T13435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2499'.
[  459.724659][T13445] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2502'.
[  459.962566][ T5764] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  460.052764][ T5688] usb 1-1: new high-speed USB device number 109 using dummy_hcd
[  460.156413][ T5764] usb 4-1: config 220 has an invalid interface number: 76 but max is 2
[  460.164006][    T9] usb 2-1: new high-speed USB device number 115 using dummy_hcd
[  460.194465][ T5764] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  460.231756][ T5764] usb 4-1: config 220 has no interface number 2
[  460.233057][ T5688] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  460.276589][ T5688] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  460.278938][ T5764] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  460.292655][ T5688] usb 1-1: Product: syz
[  460.334760][ T5764] usb 4-1: config 220 interface 0 has no altsetting 0
[  460.342224][ T5688] usb 1-1: Manufacturer: syz
[  460.350658][    T9] usb 2-1: Using ep0 maxpacket: 8
[  460.363069][ T5764] usb 4-1: config 220 interface 76 has no altsetting 0
[  460.367292][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[  460.379304][ T5688] usb 1-1: SerialNumber: syz
[  460.400300][ T5764] usb 4-1: config 220 interface 1 has no altsetting 0
[  460.426632][    T9] usb 2-1: config 2 has an invalid interface number: 76 but max is 0
[  460.427508][ T5764] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  460.439235][    T9] usb 2-1: config 2 has no interface number 0
[  460.474300][    T9] usb 2-1: config 2 interface 76 has no altsetting 0
[  460.481044][ T5764] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  460.495179][    T9] usb 2-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01
[  460.518153][ T5764] usb 4-1: Product: syz
[  460.529859][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  460.532160][ T5764] usb 4-1: Manufacturer: syz
[  460.559725][ T5764] usb 4-1: SerialNumber: syz
[  460.561541][    T9] usb 2-1: Product: syz
[  460.597473][    T9] usb 2-1: Manufacturer: syz
[  460.606664][    T9] usb 2-1: SerialNumber: syz
[  460.763040][T13459] netlink: 'syz.2.2507': attribute type 4 has an invalid length.
[  460.799540][T13446] pim6reg: entered allmulticast mode
[  460.831118][T13452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  460.834411][ T5764] usb 4-1: selecting invalid altsetting 0
[  460.840551][ T5688] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  460.845912][T13452] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  460.866894][ T5764] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  460.873018][ T5688] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  460.888857][ T5764] uvcvideo 4-1:220.0: No valid video chain found.
[  460.896580][ T5688] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  460.903306][ T5764] usb 4-1: selecting invalid altsetting 0
[  460.915312][ T5764] usbtest 4-1:220.1: probe with driver usbtest failed with error -22
[  460.925757][ T5688] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  460.952844][ T5764] usb 4-1: USB disconnect, device number 15
[  460.957454][ T5688] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  460.994038][ T5688] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32
[  461.114131][   T29] kauditd_printk_skb: 149 callbacks suppressed
[  461.114146][   T29] audit: type=1326 audit(1780325619.042:2695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13451 comm="syz.1.2505" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6a6f9ce59 code=0x7ffc0000
[  461.153067][   T29] audit: type=1326 audit(1780325619.072:2696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13451 comm="syz.1.2505" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6a6f9ce59 code=0x7ffc0000
[  461.179479][   T29] audit: type=1326 audit(1780325619.072:2697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13451 comm="syz.1.2505" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6a6f9ce59 code=0x7ffc0000
[  461.212256][T13460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  461.236075][T13460] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  461.265832][   T29] audit: type=1326 audit(1780325619.072:2698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13451 comm="syz.1.2505" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6a6f9ce59 code=0x7ffc0000
[  461.316636][   T29] audit: type=1326 audit(1780325619.072:2699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13451 comm="syz.1.2505" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fa6a6f9ce59 code=0x7ffc0000
[  461.342502][   T29] audit: type=1326 audit(1780325619.132:2700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13451 comm="syz.1.2505" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6a6f9ce59 code=0x7ffc0000
[  461.367861][   T29] audit: type=1326 audit(1780325619.132:2701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13451 comm="syz.1.2505" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6a6f9ce59 code=0x7ffc0000
[  461.490394][   T29] audit: type=1326 audit(1780325619.132:2702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13451 comm="syz.1.2505" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa6a6f9ce59 code=0x7ffc0000
[  461.539963][   T29] audit: type=1326 audit(1780325619.132:2703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13451 comm="syz.1.2505" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6a6f9ce59 code=0x7ffc0000
[  461.585165][   T29] audit: type=1326 audit(1780325619.132:2704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13451 comm="syz.1.2505" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6a6f9ce59 code=0x7ffc0000
[  461.693831][    T9] go7007 2-1:2.76: Sensoray 2250 found
[  461.702202][    T9] go7007 2-1:2.76: probe with driver go7007 failed with error -12
[  461.714662][    T9] usb 2-1: USB disconnect, device number 115
[  461.740122][T13471] netlink: zone id is out of range
[  461.745622][T13471] netlink: get zone limit has 8 unknown bytes
[  461.924043][T13474] FAULT_INJECTION: forcing a failure.
[  461.924043][T13474] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  461.937290][T13474] CPU: 0 UID: 0 PID: 13474 Comm: syz.2.2511 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  461.937306][T13474] Tainted: [L]=SOFTLOCKUP
[  461.937310][T13474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  461.937317][T13474] Call Trace:
[  461.937321][T13474]  <TASK>
[  461.937326][T13474]  dump_stack_lvl+0xe8/0x150
[  461.937341][T13474]  should_fail_ex+0x412/0x560
[  461.937355][T13474]  _copy_from_user+0x2d/0xb0
[  461.937368][T13474]  input_event_from_user+0xb1/0x290
[  461.937380][T13474]  ? __pfx_input_event_from_user+0x10/0x10
[  461.937396][T13474]  evdev_write+0x2c7/0x4c0
[  461.937406][T13474]  ? __lock_acquire+0x6b5/0x2cf0
[  461.937418][T13474]  ? __pfx_evdev_write+0x10/0x10
[  461.937429][T13474]  ? bpf_lsm_file_permission+0x9/0x20
[  461.937443][T13474]  ? security_file_permission+0x75/0x260
[  461.937456][T13474]  ? rw_verify_area+0x255/0x4d0
[  461.937470][T13474]  ? __pfx_evdev_write+0x10/0x10
[  461.937480][T13474]  vfs_write+0x29a/0xb90
[  461.937497][T13474]  ? __pfx_vfs_write+0x10/0x10
[  461.937511][T13474]  ? __fget_files+0x2a/0x420
[  461.937524][T13474]  ? __fget_files+0x2a/0x420
[  461.937535][T13474]  ? __fget_files+0x3a0/0x420
[  461.937546][T13474]  ? __fget_files+0x2a/0x420
[  461.937561][T13474]  ksys_write+0x150/0x270
[  461.937576][T13474]  ? __pfx_ksys_write+0x10/0x10
[  461.937593][T13474]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  461.937603][T13474]  do_syscall_64+0x174/0x580
[  461.937617][T13474]  ? clear_bhb_loop+0x40/0x90
[  461.937629][T13474]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  461.937639][T13474] RIP: 0033:0x7f8404d9ce59
[  461.937648][T13474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  461.937657][T13474] RSP: 002b:00007f8405bb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  461.937668][T13474] RAX: ffffffffffffffda RBX: 00007f8405016090 RCX: 00007f8404d9ce59
[  461.937675][T13474] RDX: 0000000000000918 RSI: 0000200000000040 RDI: 0000000000000006
[  461.937681][T13474] RBP: 00007f8405bb6090 R08: 0000000000000000 R09: 0000000000000000
[  461.937687][T13474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  461.937693][T13474] R13: 00007f8405016128 R14: 00007f8405016090 R15: 00007f840513fa48
[  461.937707][T13474]  </TASK>
[  462.355947][T13482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2514'.
[  462.367300][T13482] program syz.2.2514 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  462.385914][T13482] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  462.474446][T13486] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2515'.
[  462.540072][T13490] ip6erspan0: entered allmulticast mode
[  462.689772][T13043] usb 1-1: USB disconnect, device number 109
[  462.772740][ T5688] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  462.802636][    T9] usb 3-1: new high-speed USB device number 105 using dummy_hcd
[  462.956896][ T5688] usb 4-1: config 220 has an invalid interface number: 76 but max is 2
[  462.974442][ T5688] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  462.985873][    T9] usb 3-1: Using ep0 maxpacket: 8
[  462.995078][ T5688] usb 4-1: config 220 has no interface number 2
[  463.001561][    T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  463.010912][ T5688] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  463.024644][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  463.034413][ T5688] usb 4-1: config 220 interface 0 has no altsetting 0
[  463.045067][    T9] pvrusb2: Hardware description: Terratec Grabster AV400
[  463.059317][    T9] pvrusb2: **********
[  463.069804][ T5688] usb 4-1: config 220 interface 76 has no altsetting 0
[  463.094577][    T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  463.106071][ T5688] usb 4-1: config 220 interface 1 has no altsetting 0
[  463.125516][    T9] pvrusb2: Important functionality might not be entirely working.
[  463.137971][ T5688] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  463.156989][    T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  463.169480][ T5688] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  463.171341][T13508] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2524'.
[  463.197676][ T5688] usb 4-1: Product: syz
[  463.201994][    T9] pvrusb2: **********
[  463.206357][ T5688] usb 4-1: Manufacturer: syz
[  463.213937][ T5688] usb 4-1: SerialNumber: syz
[  463.223107][T13508] xt_hashlimit: size too large, truncated to 1048576
[  463.240755][T13508] xt_NFQUEUE: number of queues (10) out of range (got 65542)
[  463.264364][ T2365] pvrusb2: Invalid write control endpoint
[  463.380127][ T2365] pvrusb2: Invalid write control endpoint
[  463.415588][ T2365] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  463.450214][ T2365] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  463.481620][ T5688] usb 4-1: selecting invalid altsetting 0
[  463.487951][ T2365] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  463.513042][ T5688] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  463.541652][ T2365] pvrusb2: Device being rendered inoperable
[  463.557563][ T5688] uvcvideo 4-1:220.0: No valid video chain found.
[  463.573927][ T2365] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[  463.595657][ T5688] usb 4-1: selecting invalid altsetting 0
[  463.606869][ T2365] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  463.621706][ T5688] usbtest 4-1:220.1: probe with driver usbtest failed with error -22
[  463.638125][ T2365] pvrusb2: Attached sub-driver cx25840
[  463.649952][ T2365] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  463.661807][ T5688] usb 4-1: USB disconnect, device number 16
[  463.672700][ T2365] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  463.966844][ T5688] usb 3-1: USB disconnect, device number 105
[  464.227059][T13521] tipc: Resetting bearer <eth:macvlan0>
[  464.568904][T13532] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2531'.
[  464.712431][ T5764] usb 1-1: new high-speed USB device number 110 using dummy_hcd
[  464.885013][ T5764] usb 1-1: Using ep0 maxpacket: 8
[  464.899026][ T5764] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  464.916043][ T5764] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7
[  464.936752][ T5764] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00
[  464.947105][T13035] usb 3-1: new high-speed USB device number 106 using dummy_hcd
[  464.958397][T13542] FAULT_INJECTION: forcing a failure.
[  464.958397][T13542] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  464.990478][ T5764] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  465.011120][T13542] CPU: 0 UID: 0 PID: 13542 Comm: syz.3.2534 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  465.011145][T13542] Tainted: [L]=SOFTLOCKUP
[  465.011151][T13542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  465.011161][T13542] Call Trace:
[  465.011169][T13542]  <TASK>
[  465.011177][T13542]  dump_stack_lvl+0xe8/0x150
[  465.011200][T13542]  should_fail_ex+0x412/0x560
[  465.011224][T13542]  _copy_to_user+0x31/0xb0
[  465.011246][T13542]  copy_siginfo_to_user+0x22/0xc0
[  465.011265][T13542]  x64_setup_rt_frame+0x77b/0xcb0
[  465.011306][T13542]  ? __pfx_x64_setup_rt_frame+0x10/0x10
[  465.011337][T13542]  arch_do_signal_or_restart+0x442/0x840
[  465.011361][T13542]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  465.011399][T13542]  exit_to_user_mode_loop+0xa9/0x680
[  465.011415][T13542]  ? rcu_is_watching+0x15/0xb0
[  465.011434][T13542]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  465.011452][T13542]  do_syscall_64+0x353/0x580
[  465.011468][T13542]  ? trace_irq_disable+0x3b/0x140
[  465.011490][T13542]  ? clear_bhb_loop+0x40/0x90
[  465.011511][T13542]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  465.011527][T13542] RIP: 0033:0x7f58ad39ce57
[  465.011543][T13542] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89
[  465.011556][T13542] RSP: 002b:00007f58ae273028 EFLAGS: 00000246
[  465.011570][T13542] RAX: 0000000000000000 RBX: 00007f58ad615fa0 RCX: 00007f58ad39ce59
[  465.011582][T13542] RDX: 000000000000205c RSI: 0000200000001b40 RDI: 0000000000000003
[  465.011592][T13542] RBP: 00007f58ae273090 R08: 0000000000000000 R09: 0000000000000000
[  465.011601][T13542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  465.011611][T13542] R13: 00007f58ad616038 R14: 00007f58ad615fa0 R15: 00007f58ad73fa48
[  465.011644][T13542]  </TASK>
[  465.036837][ T5764] usb 1-1: config 0 descriptor??
[  465.320386][T13035] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  465.340240][T13035] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  465.355662][T13035] usb 3-1: Product: syz
[  465.365385][T13035] usb 3-1: Manufacturer: syz
[  465.385827][T13035] usb 3-1: SerialNumber: syz
[  465.652677][T13043] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  465.701665][ T5764] hid_parser_main: 5 callbacks suppressed
[  465.701679][ T5764] ryos 0003:1E7D:3138.002E: unknown main item tag 0x0
[  465.728106][ T5764] ryos 0003:1E7D:3138.002E: unknown main item tag 0x0
[  465.737692][ T5764] ryos 0003:1E7D:3138.002E: unknown main item tag 0x0
[  465.745170][ T5764] ryos 0003:1E7D:3138.002E: unknown main item tag 0x0
[  465.752181][ T5764] ryos 0003:1E7D:3138.002E: unknown main item tag 0x0
[  465.762304][ T5764] ryos 0003:1E7D:3138.002E: unknown main item tag 0x0
[  465.774932][ T5764] ryos 0003:1E7D:3138.002E: unknown main item tag 0x0
[  465.782536][ T5764] ryos 0003:1E7D:3138.002E: unknown main item tag 0x0
[  465.805980][ T5764] ryos 0003:1E7D:3138.002E: unknown main item tag 0x0
[  465.820160][ T5764] ryos 0003:1E7D:3138.002E: unknown main item tag 0x0
[  465.840841][ T5764] ryos 0003:1E7D:3138.002E: hidraw0: USB HID v0.08 Device [HID 1e7d:3138] on usb-dummy_hcd.0-1/input0
[  465.857630][T13043] usb 4-1: config 1 has an invalid interface number: 7 but max is 0
[  465.869004][T13035] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  465.873796][T13043] usb 4-1: config 1 has no interface number 0
[  465.898023][T13035] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  465.914680][T13043] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 64
[  465.940619][T13550] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  465.952177][T13043] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7
[  465.961769][ T5764] usb 1-1: USB disconnect, device number 110
[  465.981045][T13043] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  465.990877][T13043] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  466.007746][T13043] usb 4-1: Product: syz
[  466.011994][T13043] usb 4-1: Manufacturer: syz
[  466.016982][T13043] usb 4-1: SerialNumber: syz
[  466.023557][T13547] fido_id[13547]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[  466.066963][T13545] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  466.076645][T13553] FAULT_INJECTION: forcing a failure.
[  466.076645][T13553] name failslab, interval 1, probability 0, space 0, times 0
[  466.093892][T13553] CPU: 1 UID: 0 PID: 13553 Comm: syz.1.2537 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  466.093921][T13553] Tainted: [L]=SOFTLOCKUP
[  466.093927][T13553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  466.093935][T13553] Call Trace:
[  466.093942][T13553]  <TASK>
[  466.093950][T13553]  dump_stack_lvl+0xe8/0x150
[  466.093974][T13553]  should_fail_ex+0x412/0x560
[  466.093998][T13553]  should_failslab+0xa8/0x100
[  466.094017][T13553]  __kmalloc_cache_noprof+0x88/0x660
[  466.094035][T13553]  ? __sctp_v6_cmp_addr+0x1e6/0x510
[  466.094051][T13553]  ? sctp_add_bind_addr+0x8c/0x370
[  466.094072][T13553]  sctp_add_bind_addr+0x8c/0x370
[  466.094093][T13553]  sctp_copy_local_addr_list+0x314/0x4f0
[  466.094114][T13553]  ? sctp_copy_local_addr_list+0xa4/0x4f0
[  466.094131][T13553]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  466.094150][T13553]  ? sctp_v6_is_any+0x64/0x80
[  466.094168][T13553]  ? sctp_copy_one_addr+0x93/0x360
[  466.094189][T13553]  sctp_bind_addr_copy+0xb3/0x3c0
[  466.094207][T13553]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  466.094233][T13553]  sctp_connect_new_asoc+0x2ff/0x6b0
[  466.094256][T13553]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  466.094281][T13553]  ? __local_bh_enable_ip+0xd0/0x130
[  466.094297][T13553]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  466.094318][T13553]  ? security_sctp_bind_connect+0x7e/0x2c0
[  466.094340][T13553]  sctp_sendmsg+0x1576/0x2c50
[  466.094374][T13553]  ? __pfx_sctp_sendmsg+0x10/0x10
[  466.094397][T13553]  ? aa_sk_perm+0x6d5/0x900
[  466.094426][T13553]  ? __pfx_aa_sk_perm+0x10/0x10
[  466.094450][T13553]  ? sock_rps_record_flow+0x19/0x350
[  466.094471][T13553]  ? inet_sendmsg+0x2f4/0x370
[  466.094491][T13553]  ____sys_sendmsg+0x80a/0x9f0
[  466.094516][T13553]  ? __pfx_____sys_sendmsg+0x10/0x10
[  466.094547][T13553]  ? import_iovec+0x73/0xa0
[  466.094568][T13553]  ___sys_sendmsg+0x2a5/0x360
[  466.094583][T13553]  ? __lock_acquire+0x6b5/0x2cf0
[  466.094606][T13553]  ? __pfx____sys_sendmsg+0x10/0x10
[  466.094627][T13553]  ? kstrtouint+0x6e/0xe0
[  466.094675][T13553]  ? __fget_files+0x2a/0x420
[  466.094692][T13553]  ? __fget_files+0x3a0/0x420
[  466.094721][T13553]  __sys_sendmmsg+0x27c/0x4e0
[  466.094743][T13553]  ? __pfx___sys_sendmmsg+0x10/0x10
[  466.094758][T13553]  ? __mutex_unlock_slowpath+0x1be/0x6f0
[  466.094799][T13553]  ? ksys_write+0x242/0x270
[  466.094823][T13553]  ? __pfx_ksys_write+0x10/0x10
[  466.094851][T13553]  __x64_sys_sendmmsg+0xa0/0xc0
[  466.094868][T13553]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  466.094885][T13553]  do_syscall_64+0x174/0x580
[  466.094901][T13553]  ? trace_irq_disable+0x3b/0x140
[  466.094923][T13553]  ? clear_bhb_loop+0x40/0x90
[  466.094944][T13553]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  466.094960][T13553] RIP: 0033:0x7fa6a6f9ce59
[  466.094976][T13553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  466.094989][T13553] RSP: 002b:00007fa6a7e4a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  466.095006][T13553] RAX: ffffffffffffffda RBX: 00007fa6a7215fa0 RCX: 00007fa6a6f9ce59
[  466.095019][T13553] RDX: 0000000000000002 RSI: 0000200000000540 RDI: 0000000000000003
[  466.095029][T13553] RBP: 00007fa6a7e4a090 R08: 0000000000000000 R09: 0000000000000000
[  466.095040][T13553] R10: 00000000000c88c4 R11: 0000000000000246 R12: 0000000000000002
[  466.095051][T13553] R13: 00007fa6a7216038 R14: 00007fa6a7215fa0 R15: 00007fa6a733fa48
[  466.095078][T13553]  </TASK>
[  466.100465][T13043] usb 4-1: Error in usbnet_get_endpoints (-22)
[  466.296276][T13545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2535'.
[  466.479275][ T5764] usb 4-1: USB disconnect, device number 17
[  466.522459][ T5722] usb 2-1: new high-speed USB device number 116 using dummy_hcd
[  466.674871][ T5722] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[  466.684455][ T5722] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  466.696914][ T5722] usb 2-1: config 220 has no interface number 2
[  466.703501][ T5722] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  466.716871][ T5722] usb 2-1: config 220 interface 0 has no altsetting 0
[  466.723932][ T5722] usb 2-1: config 220 interface 76 has no altsetting 0
[  466.730827][ T5722] usb 2-1: config 220 interface 1 has no altsetting 0
[  466.741819][ T5722] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  466.751297][ T5722] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  466.759502][ T5722] usb 2-1: Product: syz
[  466.763963][ T5722] usb 2-1: Manufacturer: syz
[  466.768596][ T5722] usb 2-1: SerialNumber: syz
[  466.967585][T13571] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2543'.
[  466.994068][ T5722] usb 2-1: selecting invalid altsetting 0
[  467.022312][ T5722] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  467.044181][ T5722] uvcvideo 2-1:220.0: No valid video chain found.
[  467.064952][ T5722] usb 2-1: selecting invalid altsetting 0
[  467.081215][ T5722] usbtest 2-1:220.1: probe with driver usbtest failed with error -22
[  467.098798][ T5722] usb 2-1: USB disconnect, device number 116
[  467.107452][T13575] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2545'.
[  467.589368][T13582] bridge0: port 3(team0) entered disabled state
[  467.752574][ T5722] usb 5-1: new high-speed USB device number 110 using dummy_hcd
[  467.763211][T13582] bridge_slave_0: left allmulticast mode
[  467.787773][T13582] bridge_slave_0: left promiscuous mode
[  467.808346][T13534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  467.823382][T13534] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  467.838216][T13035] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000080. ret = -EPROTO
[  467.850870][T13582] bridge0: port 1(bridge_slave_0) entered disabled state
[  467.865709][T13035] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  467.874777][T13043] usb 2-1: new high-speed USB device number 117 using dummy_hcd
[  467.888474][T13035] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  467.904282][T13035] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71
[  467.919818][ T5722] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  467.930477][T13582] bridge_slave_1: left allmulticast mode
[  467.940670][ T5722] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  467.951734][T13035] usb 3-1: USB disconnect, device number 106
[  467.963633][T13582] bridge0: port 2(bridge_slave_1) entered disabled state
[  467.971106][ T5722] usb 5-1: Product: syz
[  467.978685][ T5722] usb 5-1: Manufacturer: syz
[  467.983723][ T5722] usb 5-1: SerialNumber: syz
[  468.035321][T13043] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  468.047719][T13043] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  468.064486][T13043] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  468.077162][T13043] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  468.094320][T13043] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  468.106064][    T9] usb 4-1: new full-speed USB device number 18 using dummy_hcd
[  468.113984][T13582] bond0: (slave bond_slave_0): Releasing backup interface
[  468.124443][T13043] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  468.136505][T13043] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  468.144839][T13043] usb 2-1: Product: syz
[  468.151543][T13043] usb 2-1: Manufacturer: syz
[  468.166731][T13043] cdc_wdm 2-1:1.0: skipping garbage
[  468.174518][T13043] cdc_wdm 2-1:1.0: skipping garbage
[  468.184753][T13043] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  468.192076][T13043] cdc_wdm 2-1:1.0: Unknown control protocol
[  468.193351][T13582] bond_slave_0: left promiscuous mode
[  468.264242][    T9] usb 4-1: config 3 interface 0 has no altsetting 0
[  468.273703][    T9] usb 4-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=d0.db
[  468.283104][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  468.294909][    T9] usb 4-1: Product: syz
[  468.299527][    T9] usb 4-1: Manufacturer: syz
[  468.306216][    T9] usb 4-1: SerialNumber: syz
[  468.326509][T13582] bond0: (slave bond_slave_1): Releasing backup interface
[  468.416255][ T5722] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  468.454833][ T5722] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  468.480913][T13582] bond_slave_1: left promiscuous mode
[  468.521789][T13593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  468.547103][T13593] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  468.607370][T13582] team_slave_0: left promiscuous mode
[  468.694416][T13582] team_slave_0: left allmulticast mode
[  468.815340][    T9] usb 4-1: USB disconnect, device number 18
[  468.869420][T13582] team0: Port device team_slave_0 removed
[  468.924220][T13582] team_slave_1: left promiscuous mode
[  468.931159][T13582] team_slave_1: left allmulticast mode
[  468.979692][T13582] team0: Port device team_slave_1 removed
[  468.989514][T13582] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  469.006973][T13582] batman_adv: batadv0: Removing interface: batadv_slave_0
[  469.046588][T13582] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  469.064075][T13582] batman_adv: batadv0: Removing interface: batadv_slave_1
[  469.080580][T13582] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  469.100520][T13043] usb 2-1: USB disconnect, device number 117
[  469.137107][   T35] bond3: (slave macvlan2): speed changed to 0 on port 1
[  469.203245][    T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  469.215927][ T8136] bond3: (slave macvlan2): link status definitely down, disabling slave
[  469.382406][    T9] usb 4-1: Using ep0 maxpacket: 16
[  469.408637][    T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0089, bcdDevice= 0.40
[  469.428201][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  469.444290][    T9] usb 4-1: Product: Т
[  469.449089][    T9] usb 4-1: Manufacturer: ϛ赾錧�귖섮솅铷�棦೘⇖⡀䫪ڷﳪ买�祲ሔ⭊컥�䢻ᚌ⇇�诋᯵곥꘷��﫵�쳀ఛ駜໳㧑홽泠⋠ﴭꄵ⎽䌉戉ڋ巼椒�ᙽ묒��
[  469.472204][    T9] usb 4-1: SerialNumber: �곉�ᬇ�ྥὃꀂ㱓碛ｰ톋㩀횹匞冻븢漺㊩엄묇�ꪫ蔹洰�뛠䙻亘疵棤鬶嗜下嚫渪䡋ᣚ묾ầ䜟鳧尚㿲訤಑ཷߛ꟞粡�晷㑶祢౻�祉╦틙※槺꬗觪﷤‒⊵惄夣閆㑞⺄횜ࡹ풛鶴䠪洸ꑑ㦰炸✼㯮ᬶ⿆鲮黱ꌔ煆ꆘ澰䧘⓼⻶�샮ଶ
[  469.738112][    T9] usb 4-1: Audio class v2/v3 interfaces need an interface association
[  469.879618][    T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  469.919422][    T9] usb 4-1: USB disconnect, device number 19
[  469.958120][ T5642] udevd[5642]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  470.109375][T13581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  470.124984][T13581] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  470.442610][ T5764] usb 2-1: new high-speed USB device number 118 using dummy_hcd
[  470.486694][T13630] FAULT_INJECTION: forcing a failure.
[  470.486694][T13630] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  470.502431][T13630] CPU: 1 UID: 0 PID: 13630 Comm: syz.0.2560 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  470.502456][T13630] Tainted: [L]=SOFTLOCKUP
[  470.502462][T13630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  470.502474][T13630] Call Trace:
[  470.502482][T13630]  <TASK>
[  470.502489][T13630]  dump_stack_lvl+0xe8/0x150
[  470.502513][T13630]  should_fail_ex+0x412/0x560
[  470.502536][T13630]  _copy_from_user+0x2d/0xb0
[  470.502556][T13630]  generic_map_update_batch+0x648/0x990
[  470.502583][T13630]  ? __pfx_generic_map_update_batch+0x10/0x10
[  470.502603][T13630]  ? __fget_files+0x2a/0x420
[  470.502625][T13630]  ? __pfx_generic_map_update_batch+0x10/0x10
[  470.502643][T13630]  bpf_map_do_batch+0x39b/0x630
[  470.502663][T13630]  __sys_bpf+0x7c1/0x950
[  470.502686][T13630]  ? __pfx___sys_bpf+0x10/0x10
[  470.502721][T13630]  ? ksys_write+0x242/0x270
[  470.502744][T13630]  ? __pfx_ksys_write+0x10/0x10
[  470.502769][T13630]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  470.502787][T13630]  __x64_sys_bpf+0x7c/0x90
[  470.502807][T13630]  do_syscall_64+0x174/0x580
[  470.502823][T13630]  ? trace_irq_disable+0x3b/0x140
[  470.502844][T13630]  ? clear_bhb_loop+0x40/0x90
[  470.502864][T13630]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  470.502886][T13630] RIP: 0033:0x7fddb7b9ce59
[  470.502903][T13630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  470.502916][T13630] RSP: 002b:00007fddb8a57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  470.502934][T13630] RAX: ffffffffffffffda RBX: 00007fddb7e15fa0 RCX: 00007fddb7b9ce59
[  470.502945][T13630] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a
[  470.502956][T13630] RBP: 00007fddb8a57090 R08: 0000000000000000 R09: 0000000000000000
[  470.502967][T13630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  470.502977][T13630] R13: 00007fddb7e16038 R14: 00007fddb7e15fa0 R15: 00007fddb7f3fa48
[  470.503004][T13630]  </TASK>
[  470.837839][ T5722] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000084. ret = -EPROTO
[  470.849783][ T5722] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO
[  470.860112][ T5722] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  470.870134][ T5722] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  470.894874][ T5722] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71
[  470.904545][ T5764] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[  470.913008][ T5764] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  470.923324][ T5764] usb 2-1: config 220 has no interface number 2
[  470.929622][ T5764] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  470.942900][ T5764] usb 2-1: config 220 interface 0 has no altsetting 0
[  470.954720][ T5764] usb 2-1: config 220 interface 76 has no altsetting 0
[  470.961862][ T5722] usb 5-1: USB disconnect, device number 110
[  470.968050][ T5764] usb 2-1: config 220 interface 1 has no altsetting 0
[  470.969021][T13636] netlink: 'syz.2.2563': attribute type 1 has an invalid length.
[  471.000092][ T5764] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  471.017462][ T5764] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  471.027216][ T5764] usb 2-1: Product: syz
[  471.031410][ T5764] usb 2-1: Manufacturer: syz
[  471.046058][ T5764] usb 2-1: SerialNumber: syz
[  471.077478][T13636] bond3: (slave geneve2): making interface the new active one
[  471.099817][T13636] bond3: (slave geneve2): Enslaving as an active interface with an up link
[  471.118772][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[  471.127995][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[  471.138755][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[  471.152724][ T8129] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[  471.298111][ T5764] usb 2-1: selecting invalid altsetting 0
[  471.319783][ T5764] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  471.327603][ T5764] uvcvideo 2-1:220.0: No valid video chain found.
[  471.351070][ T5764] usb 2-1: selecting invalid altsetting 0
[  471.362051][ T5764] usbtest 2-1:220.1: probe with driver usbtest failed with error -22
[  471.399943][ T5764] usb 2-1: USB disconnect, device number 118
[  471.432475][T13043] usb 3-1: new high-speed USB device number 107 using dummy_hcd
[  471.533966][T13649] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2566'.
[  471.554373][T13649] netlink: 'syz.3.2566': attribute type 7 has an invalid length.
[  471.580556][T13649] netlink: 'syz.3.2566': attribute type 8 has an invalid length.
[  471.590112][T13043] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  471.614530][T13043] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  471.627911][T13649] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2566'.
[  471.646375][T13043] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  471.702193][T13043] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  471.752534][T13043] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  471.777540][T13043] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  471.823458][T13043] usb 3-1: config 0 descriptor??
[  471.906863][T13649] ip6gretap0: entered promiscuous mode
[  471.961595][T13649] syz_tun: entered promiscuous mode
[  472.026315][T13649] ip6gretap0: left promiscuous mode
[  472.058784][T13649] syz_tun: left promiscuous mode
[  472.291626][T13043] plantronics 0003:047F:FFFF.002F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  472.581311][T13663] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2567'.
[  472.674539][T13665] FAULT_INJECTION: forcing a failure.
[  472.674539][T13665] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  472.734411][T13665] CPU: 1 UID: 0 PID: 13665 Comm: syz.0.2570 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  472.734438][T13665] Tainted: [L]=SOFTLOCKUP
[  472.734445][T13665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  472.734454][T13665] Call Trace:
[  472.734461][T13665]  <TASK>
[  472.734468][T13665]  dump_stack_lvl+0xe8/0x150
[  472.734492][T13665]  should_fail_ex+0x412/0x560
[  472.734514][T13665]  _copy_from_user+0x2d/0xb0
[  472.734535][T13665]  generic_map_update_batch+0x648/0x990
[  472.734561][T13665]  ? __pfx_generic_map_update_batch+0x10/0x10
[  472.734580][T13665]  ? __fget_files+0x2a/0x420
[  472.734603][T13665]  ? __pfx_generic_map_update_batch+0x10/0x10
[  472.734621][T13665]  bpf_map_do_batch+0x39b/0x630
[  472.734642][T13665]  __sys_bpf+0x7c1/0x950
[  472.734665][T13665]  ? __pfx___sys_bpf+0x10/0x10
[  472.734697][T13665]  ? ksys_write+0x242/0x270
[  472.734721][T13665]  ? __pfx_ksys_write+0x10/0x10
[  472.734745][T13665]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  472.734761][T13665]  __x64_sys_bpf+0x7c/0x90
[  472.734782][T13665]  do_syscall_64+0x174/0x580
[  472.734798][T13665]  ? trace_irq_disable+0x3b/0x140
[  472.734819][T13665]  ? clear_bhb_loop+0x40/0x90
[  472.734839][T13665]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  472.734854][T13665] RIP: 0033:0x7fddb7b9ce59
[  472.734870][T13665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  472.734882][T13665] RSP: 002b:00007fddb8a57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  472.734899][T13665] RAX: ffffffffffffffda RBX: 00007fddb7e15fa0 RCX: 00007fddb7b9ce59
[  472.734911][T13665] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a
[  472.734922][T13665] RBP: 00007fddb8a57090 R08: 0000000000000000 R09: 0000000000000000
[  472.734932][T13665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  472.734941][T13665] R13: 00007fddb7e16038 R14: 00007fddb7e15fa0 R15: 00007fddb7f3fa48
[  472.734975][T13665]  </TASK>
[  473.284391][ T5688] usb 3-1: USB disconnect, device number 107
[  473.342445][    T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  473.517639][    T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  473.552702][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  473.567017][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  473.577444][    T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  473.592530][    T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  473.603964][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  473.629925][    T9] usb 4-1: config 0 descriptor??
[  473.855117][T13673] binder: 13671:13673 ioctl c0306201 0 returned -14
[  474.092296][    T9] hid_parser_main: 30 callbacks suppressed
[  474.092311][    T9] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0
[  474.109963][    T9] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0
[  474.117646][    T9] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0
[  474.125366][    T9] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0
[  474.133161][    T9] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0
[  474.140649][    T9] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0
[  474.152652][    T9] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0
[  474.160067][    T9] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0
[  474.168044][    T9] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0
[  474.176019][    T9] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0
[  474.200733][    T9] plantronics 0003:047F:FFFF.0030: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  474.363785][T13673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  474.387392][T13673] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  474.432783][ T5764] usb 3-1: new high-speed USB device number 108 using dummy_hcd
[  474.461249][    T9] usb 4-1: USB disconnect, device number 20
[  474.595884][ T5764] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[  474.606170][ T5764] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  474.616636][   T46] usb 1-1: new high-speed USB device number 111 using dummy_hcd
[  474.625605][ T5764] usb 3-1: config 220 has no interface number 2
[  474.633329][ T5764] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  474.646828][ T5764] usb 3-1: config 220 interface 0 has no altsetting 0
[  474.660821][ T5764] usb 3-1: config 220 interface 76 has no altsetting 0
[  474.668032][ T5764] usb 3-1: config 220 interface 1 has no altsetting 0
[  474.680490][ T5764] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  474.691704][ T5764] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  474.699844][ T5764] usb 3-1: Product: syz
[  474.708742][ T5764] usb 3-1: Manufacturer: syz
[  474.715779][ T5764] usb 3-1: SerialNumber: syz
[  474.789072][   T46] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  474.812468][   T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  474.822501][   T46] usb 1-1: Product: syz
[  474.830760][   T46] usb 1-1: Manufacturer: syz
[  474.836554][   T46] usb 1-1: SerialNumber: syz
[  474.971053][ T5764] usb 3-1: selecting invalid altsetting 0
[  475.002214][ T5764] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  475.038861][ T5764] uvcvideo 3-1:220.0: No valid video chain found.
[  475.102410][ T5764] usb 3-1: selecting invalid altsetting 0
[  475.119497][ T5764] usbtest 3-1:220.1: probe with driver usbtest failed with error -22
[  475.140462][T13708] batadv0: entered promiscuous mode
[  475.174505][T13708] batadv0: left promiscuous mode
[  475.184075][ T5764] usb 3-1: USB disconnect, device number 108
[  475.259375][T13697] netlink: 'syz.0.2580': attribute type 1 has an invalid length.
[  475.317622][T13697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2580'.
[  475.356250][T13716] netlink: 'syz.1.2587': attribute type 1 has an invalid length.
[  475.438913][T13720] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2587'.
[  475.535653][   T46] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[  475.598416][T13716] bond11: entered promiscuous mode
[  475.606827][   T46] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO
[  475.639250][T13716] 8021q: adding VLAN 0 to HW filter on device bond11
[  475.653288][   T46] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[  475.673990][T13720] bond11: entered allmulticast mode
[  475.685616][   T46] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  475.716038][   T46] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  475.742003][   T46] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71
[  475.787131][   T46] usb 1-1: USB disconnect, device number 111
[  476.179515][T13740] netlink: 'syz.0.2592': attribute type 1 has an invalid length.
[  476.251671][T13740] bond6: entered promiscuous mode
[  476.261766][T13740] 8021q: adding VLAN 0 to HW filter on device bond6
[  476.318281][T13744] FAULT_INJECTION: forcing a failure.
[  476.318281][T13744] name failslab, interval 1, probability 0, space 0, times 0
[  476.359571][T13744] CPU: 0 UID: 0 PID: 13744 Comm: syz.1.2593 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  476.359592][T13744] Tainted: [L]=SOFTLOCKUP
[  476.359596][T13744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  476.359602][T13744] Call Trace:
[  476.359607][T13744]  <TASK>
[  476.359611][T13744]  dump_stack_lvl+0xe8/0x150
[  476.359627][T13744]  should_fail_ex+0x412/0x560
[  476.359641][T13744]  should_failslab+0xa8/0x100
[  476.359652][T13744]  __kmalloc_cache_noprof+0x88/0x660
[  476.359666][T13744]  ? sctp_v6_cmp_addr+0x15/0xd0
[  476.359677][T13744]  ? sctp_add_bind_addr+0x8c/0x370
[  476.359689][T13744]  sctp_add_bind_addr+0x8c/0x370
[  476.359706][T13744]  sctp_copy_local_addr_list+0x314/0x4f0
[  476.359719][T13744]  ? sctp_copy_local_addr_list+0xa4/0x4f0
[  476.359728][T13744]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  476.359739][T13744]  ? sctp_v6_is_any+0x64/0x80
[  476.359750][T13744]  ? sctp_copy_one_addr+0x93/0x360
[  476.359761][T13744]  sctp_bind_addr_copy+0xb3/0x3c0
[  476.359771][T13744]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  476.359786][T13744]  sctp_connect_new_asoc+0x2ff/0x6b0
[  476.359801][T13744]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  476.359815][T13744]  ? __local_bh_enable_ip+0xd0/0x130
[  476.359825][T13744]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  476.359839][T13744]  ? security_sctp_bind_connect+0x7e/0x2c0
[  476.359853][T13744]  sctp_sendmsg+0x1576/0x2c50
[  476.359872][T13744]  ? __pfx_sctp_sendmsg+0x10/0x10
[  476.359894][T13744]  ? aa_sk_perm+0x6d5/0x900
[  476.359911][T13744]  ? __might_fault+0xaf/0x130
[  476.359926][T13744]  ? __pfx_aa_sk_perm+0x10/0x10
[  476.359940][T13744]  ? sock_rps_record_flow+0x19/0x350
[  476.359952][T13744]  ? __pfx_inet_sendmsg+0x10/0x10
[  476.359962][T13744]  ? inet_sendmsg+0x2f4/0x370
[  476.359973][T13744]  ? __pfx_inet_sendmsg+0x10/0x10
[  476.359983][T13744]  __sys_sendto+0x5de/0x710
[  476.359999][T13744]  ? __pfx___sys_sendto+0x10/0x10
[  476.360011][T13744]  ? __mutex_unlock_slowpath+0x1be/0x6f0
[  476.360028][T13744]  ? __fget_files+0x3a0/0x420
[  476.360045][T13744]  ? ksys_write+0x242/0x270
[  476.360060][T13744]  ? __pfx_ksys_write+0x10/0x10
[  476.360076][T13744]  __x64_sys_sendto+0xde/0x100
[  476.360090][T13744]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  476.360100][T13744]  do_syscall_64+0x174/0x580
[  476.360110][T13744]  ? trace_irq_disable+0x3b/0x140
[  476.360124][T13744]  ? clear_bhb_loop+0x40/0x90
[  476.360136][T13744]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  476.360145][T13744] RIP: 0033:0x7fa6a6f9ce59
[  476.360155][T13744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  476.360163][T13744] RSP: 002b:00007fa6a7e4a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  476.360174][T13744] RAX: ffffffffffffffda RBX: 00007fa6a7215fa0 RCX: 00007fa6a6f9ce59
[  476.360181][T13744] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003
[  476.360190][T13744] RBP: 00007fa6a7e4a090 R08: 000020000005ffe4 R09: 000000000000001c
[  476.360196][T13744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  476.360202][T13744] R13: 00007fa6a7216038 R14: 00007fa6a7215fa0 R15: 00007fa6a733fa48
[  476.360217][T13744]  </TASK>
[  477.362562][ T5688] usb 3-1: new high-speed USB device number 109 using dummy_hcd
[  477.502413][    T9] usb 2-1: new high-speed USB device number 119 using dummy_hcd
[  477.525924][ T5688] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[  477.540847][ T5688] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  477.565365][ T5688] usb 3-1: config 220 has no interface number 2
[  477.590412][ T5688] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  477.627311][ T5688] usb 3-1: config 220 interface 0 has no altsetting 0
[  477.640801][ T5688] usb 3-1: config 220 interface 76 has no altsetting 0
[  477.657496][ T5688] usb 3-1: config 220 interface 1 has no altsetting 0
[  477.697960][    T9] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  477.711754][ T5688] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  477.726329][    T9] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  477.740141][ T5688] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  477.753977][    T9] usb 2-1: Product: syz
[  477.762008][    T9] usb 2-1: SerialNumber: syz
[  477.776822][ T5688] usb 3-1: Product: syz
[  477.785488][ T5688] usb 3-1: Manufacturer: syz
[  477.795563][ T5688] usb 3-1: SerialNumber: syz
[  477.801131][    T9] usb 2-1: config 0 descriptor??
[  477.954437][T13772] netlink: zone id is out of range
[  477.970841][T13772] netlink: get zone limit has 8 unknown bytes
[  478.052754][ T5688] usb 3-1: selecting invalid altsetting 0
[  478.067047][ T5688] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  478.076804][ T5688] uvcvideo 3-1:220.0: No valid video chain found.
[  478.147742][ T5688] usb 3-1: selecting invalid altsetting 0
[  478.174543][ T5688] usbtest 3-1:220.1: probe with driver usbtest failed with error -22
[  478.219256][ T5688] usb 3-1: USB disconnect, device number 109
[  478.348578][    T9] usb 2-1: USB disconnect, device number 119
[  478.522450][   T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  478.672417][   T10] usb 4-1: Using ep0 maxpacket: 32
[  478.681343][   T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  478.695159][   T10] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  478.704705][   T10] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  478.713284][   T10] usb 4-1: Product: syz
[  478.732486][   T10] usb 4-1: Manufacturer: syz
[  478.737319][   T10] usb 4-1: SerialNumber: syz
[  478.750084][   T10] usb 4-1: config 0 descriptor??
[  478.758583][T13777] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  479.016310][T13808] The dccp option matching is deprecated and scheduled to be removed in 2027.
[  479.016310][T13808] Please contact the netfilter-devel mailing list or update your nftables rules.
[  479.116624][T13811] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2615'.
[  479.251356][T13813] bridge0: left allmulticast mode
[  479.447379][    T9] usb 4-1: USB disconnect, device number 21
[  479.487160][T13824] netlink: 'syz.1.2622': attribute type 18 has an invalid length.
[  479.513816][T13824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2622'.
[  479.539798][ T8129] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  479.549646][T13824] netlink: 'syz.1.2622': attribute type 18 has an invalid length.
[  479.557628][T13824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2622'.
[  479.567388][ T8129] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  479.577907][ T8129] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  479.589117][ T8129] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  479.744477][ T5764] usb 1-1: new high-speed USB device number 112 using dummy_hcd
[  479.771995][T13841] bridge0: entered allmulticast mode
[  479.817707][T13843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2629'.
[  479.829772][T13843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2629'.
[  479.897518][T13848] macsec1: entered promiscuous mode
[  479.915408][ T5764] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[  479.923977][   T46] usb 3-1: new full-speed USB device number 110 using dummy_hcd
[  479.932695][ T5764] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  479.944013][ T5764] usb 1-1: config 220 has no interface number 2
[  479.950564][ T5764] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  479.965249][ T5764] usb 1-1: config 220 interface 0 has no altsetting 0
[  479.972798][ T5764] usb 1-1: config 220 interface 76 has no altsetting 0
[  479.979683][ T5764] usb 1-1: config 220 interface 1 has no altsetting 0
[  479.988919][ T5764] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  479.999018][ T5764] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  480.018860][ T5764] usb 1-1: Product: syz
[  480.024768][ T5764] usb 1-1: Manufacturer: syz
[  480.029601][ T5764] usb 1-1: SerialNumber: syz
[  480.126037][   T46] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  480.135191][   T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  480.143897][   T46] usb 3-1: Product: syz
[  480.148101][   T46] usb 3-1: Manufacturer: syz
[  480.153156][   T46] usb 3-1: SerialNumber: syz
[  480.290030][ T5764] usb 1-1: selecting invalid altsetting 0
[  480.300078][ T5764] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  480.309318][ T5764] uvcvideo 1-1:220.0: No valid video chain found.
[  480.326425][ T5764] usb 1-1: selecting invalid altsetting 0
[  480.332279][ T5764] usbtest 1-1:220.1: probe with driver usbtest failed with error -22
[  480.354428][ T5764] usb 1-1: USB disconnect, device number 112
[  480.438741][T13863] FAULT_INJECTION: forcing a failure.
[  480.438741][T13863] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  480.451912][T13863] CPU: 0 UID: 0 PID: 13863 Comm: syz.4.2638 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  480.451937][T13863] Tainted: [L]=SOFTLOCKUP
[  480.451943][T13863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  480.451952][T13863] Call Trace:
[  480.451960][T13863]  <TASK>
[  480.451968][T13863]  dump_stack_lvl+0xe8/0x150
[  480.451991][T13863]  should_fail_ex+0x412/0x560
[  480.452013][T13863]  _copy_to_user+0x31/0xb0
[  480.452043][T13863]  simple_read_from_buffer+0xe1/0x170
[  480.452068][T13863]  proc_fail_nth_read+0x1bb/0x230
[  480.452088][T13863]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  480.452102][T13863]  ? rw_verify_area+0x2a6/0x4d0
[  480.452116][T13863]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  480.452137][T13863]  vfs_read+0x20c/0xa70
[  480.452163][T13863]  ? __pfx___mutex_lock+0x10/0x10
[  480.452181][T13863]  ? __pfx_vfs_read+0x10/0x10
[  480.452204][T13863]  ? __fget_files+0x2a/0x420
[  480.452220][T13863]  ? __fget_files+0x3a0/0x420
[  480.452231][T13863]  ? __fget_files+0x2a/0x420
[  480.452246][T13863]  ksys_read+0x150/0x270
[  480.452260][T13863]  ? __pfx_ksys_read+0x10/0x10
[  480.452283][T13863]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  480.452301][T13863]  do_syscall_64+0x174/0x580
[  480.452321][T13863]  ? trace_irq_disable+0x3b/0x140
[  480.452343][T13863]  ? clear_bhb_loop+0x40/0x90
[  480.452362][T13863]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  480.452378][T13863] RIP: 0033:0x7f052175d68e
[  480.452393][T13863] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  480.452407][T13863] RSP: 002b:00007f052261dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  480.452421][T13863] RAX: ffffffffffffffda RBX: 00007f052261e6c0 RCX: 00007f052175d68e
[  480.452431][T13863] RDX: 000000000000000f RSI: 00007f052261e0a0 RDI: 0000000000000004
[  480.452441][T13863] RBP: 00007f052261e090 R08: 0000000000000000 R09: 0000000000000000
[  480.452452][T13863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  480.452462][T13863] R13: 00007f0521a16038 R14: 00007f0521a15fa0 R15: 00007f0521b3fa48
[  480.452491][T13863]  </TASK>
[  480.666313][   T10] usb 2-1: new high-speed USB device number 120 using dummy_hcd
[  480.699880][   T46] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 110 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202
[  480.844371][   T10] usb 2-1: unable to get BOS descriptor or descriptor too short
[  480.853279][   T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  480.863452][   T10] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  480.872610][   T10] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[  480.884232][   T10] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[  480.901179][   T10] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  480.912107][   T10] usb 2-1: config 1 interface 1 has no altsetting 0
[  480.921859][   T10] usb 2-1: string descriptor 0 read error: -22
[  480.928393][   T10] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  480.938009][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  481.064671][T13881] Cannot find del_set index 0 as target
[  481.104699][T13883] fuse: Bad value for 'fd'
[  481.116599][T13883] tipc: Started in network mode
[  481.121502][T13883] tipc: Node identity aaaaaaaaaa34, cluster identity 4711
[  481.129099][T13883] tipc: Enabled bearer <eth:macvlan0>, priority 10
[  481.152745][   T46] usb 5-1: new full-speed USB device number 111 using dummy_hcd
[  481.304701][   T46] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  481.314703][   T46] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  481.327792][   T46] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  481.337361][   T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  481.492438][ T5688] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  481.550942][   T46] usb 5-1: usb_control_msg returned -32
[  481.557866][   T46] usbtmc 5-1:16.0: can't read capabilities
[  481.644004][ T5688] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  481.652195][ T5688] usb 4-1: config 0 has no interface number 0
[  481.658787][ T5688] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  481.670169][ T5688] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  481.680089][ T5688] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  481.689335][ T5688] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  481.700383][ T5688] usb 4-1: config 0 descriptor??
[  481.867555][T13892] FAULT_INJECTION: forcing a failure.
[  481.867555][T13892] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  481.880828][T13892] CPU: 0 UID: 0 PID: 13892 Comm: syz.0.2649 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  481.880844][T13892] Tainted: [L]=SOFTLOCKUP
[  481.880848][T13892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  481.880854][T13892] Call Trace:
[  481.880858][T13892]  <TASK>
[  481.880862][T13892]  dump_stack_lvl+0xe8/0x150
[  481.880878][T13892]  should_fail_ex+0x412/0x560
[  481.880894][T13892]  _copy_to_user+0x31/0xb0
[  481.880907][T13892]  rng_dev_read+0x3ef/0x7b0
[  481.880923][T13892]  ? __pfx_rng_dev_read+0x10/0x10
[  481.880934][T13892]  ? bpf_lsm_file_permission+0x9/0x20
[  481.880949][T13892]  ? security_file_permission+0x75/0x260
[  481.880961][T13892]  ? rw_verify_area+0x2a6/0x4d0
[  481.880977][T13892]  vfs_readv+0x587/0x840
[  481.880988][T13892]  ? __pfx_rng_dev_read+0x10/0x10
[  481.881002][T13892]  ? __pfx_vfs_readv+0x10/0x10
[  481.881030][T13892]  ? __fget_files+0x2a/0x420
[  481.881052][T13892]  ? __fget_files+0x3a0/0x420
[  481.881069][T13892]  ? __fget_files+0x2a/0x420
[  481.881086][T13892]  __x64_sys_preadv+0x19f/0x2a0
[  481.881097][T13892]  ? __pfx___x64_sys_preadv+0x10/0x10
[  481.881115][T13892]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  481.881125][T13892]  do_syscall_64+0x174/0x580
[  481.881141][T13892]  ? trace_irq_disable+0x3b/0x140
[  481.881155][T13892]  ? clear_bhb_loop+0x40/0x90
[  481.881167][T13892]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  481.881176][T13892] RIP: 0033:0x7fddb7b9ce59
[  481.881186][T13892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  481.881194][T13892] RSP: 002b:00007fddb8a57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  481.881204][T13892] RAX: ffffffffffffffda RBX: 00007fddb7e15fa0 RCX: 00007fddb7b9ce59
[  481.881212][T13892] RDX: 0000000000000001 RSI: 0000200000000400 RDI: 0000000000000004
[  481.881218][T13892] RBP: 00007fddb8a57090 R08: 0000000000000000 R09: 0000000000000000
[  481.881224][T13892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  481.881230][T13892] R13: 00007fddb7e16038 R14: 00007fddb7e15fa0 R15: 00007fddb7f3fa48
[  481.881244][T13892]  </TASK>
[  482.133638][   T46] tipc: Node number set to 10398378
[  482.143117][T13895] netlink: 'syz.0.2650': attribute type 29 has an invalid length.
[  482.151234][T13895] netlink: 296 bytes leftover after parsing attributes in process `syz.0.2650'.
[  482.293579][   T10] usb 2-1: 2:0: sticky mixer values (-10144/0/1 => 0), disabling
[  482.310498][ T5688] hid_parser_main: 5 callbacks suppressed
[  482.310516][ T5688] prodikeys 0003:041E:2801.0031: unknown main item tag 0x0
[  482.324560][ T5688] prodikeys 0003:041E:2801.0031: unknown main item tag 0x0
[  482.331802][ T5688] prodikeys 0003:041E:2801.0031: unknown main item tag 0x0
[  482.339679][ T5688] prodikeys 0003:041E:2801.0031: unknown main item tag 0x0
[  482.347092][ T5688] prodikeys 0003:041E:2801.0031: unknown main item tag 0x0
[  482.354687][ T5688] prodikeys 0003:041E:2801.0031: unknown main item tag 0x0
[  482.361906][ T5688] prodikeys 0003:041E:2801.0031: unknown main item tag 0x0
[  482.371428][ T5688] prodikeys 0003:041E:2801.0031: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.3-1/input1
[  482.384928][ T5688] hid_prodikeys: hid-prodikeys: failed to find output report
[  482.384928][ T5688] 
[  482.515093][   T46] usb 4-1: USB disconnect, device number 22
[  482.566659][   T10] usb 2-1: USB disconnect, device number 120
[  482.748245][ T5688] usb 3-1: USB disconnect, device number 110
[  482.769530][ T5688] usblp0: removed
[  483.112573][ T5688] usb 3-1: new high-speed USB device number 111 using dummy_hcd
[  483.275578][ T5688] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[  483.284145][ T5688] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  483.295998][ T5688] usb 3-1: config 220 has no interface number 2
[  483.302469][ T5688] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  483.315970][ T5688] usb 3-1: config 220 interface 0 has no altsetting 0
[  483.322820][ T5688] usb 3-1: config 220 interface 76 has no altsetting 0
[  483.329678][ T5688] usb 3-1: config 220 interface 1 has no altsetting 0
[  483.339662][ T5688] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  483.352572][ T5688] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  483.362460][ T5688] usb 3-1: Product: syz
[  483.367622][ T5688] usb 3-1: Manufacturer: syz
[  483.372499][ T5688] usb 3-1: SerialNumber: syz
[  483.378062][T13925] x_tables: duplicate entry at hook 1
[  483.402442][   T10] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  483.572414][   T10] usb 4-1: Using ep0 maxpacket: 32
[  483.579176][   T10] usb 4-1: unable to get BOS descriptor or descriptor too short
[  483.594774][   T10] usb 4-1: config 14 has an invalid interface number: 57 but max is 1
[  483.603329][   T10] usb 4-1: config 14 has an invalid interface number: 228 but max is 1
[  483.616842][   T10] usb 4-1: config 14 has no interface number 0
[  483.629264][ T5688] usb 3-1: selecting invalid altsetting 0
[  483.636417][   T10] usb 4-1: config 14 has no interface number 1
[  483.648438][ T5688] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  483.667904][   T10] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  483.679521][ T5688] uvcvideo 3-1:220.0: No valid video chain found.
[  483.680651][T13935] FAULT_INJECTION: forcing a failure.
[  483.680651][T13935] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  483.686251][   T10] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  483.701265][T13935] CPU: 1 UID: 0 PID: 13935 Comm: syz.0.2663 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  483.701290][T13935] Tainted: [L]=SOFTLOCKUP
[  483.701296][T13935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  483.701306][T13935] Call Trace:
[  483.701313][T13935]  <TASK>
[  483.701321][T13935]  dump_stack_lvl+0xe8/0x150
[  483.701344][T13935]  should_fail_ex+0x412/0x560
[  483.701366][T13935]  _copy_from_user+0x2d/0xb0
[  483.701386][T13935]  kstrtouint_from_user+0xd6/0x180
[  483.701405][T13935]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  483.701437][T13935]  proc_fail_nth_write+0x8e/0x210
[  483.701457][T13935]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  483.701485][T13935]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  483.701506][T13935]  vfs_write+0x29a/0xb90
[  483.701535][T13935]  ? __pfx_vfs_write+0x10/0x10
[  483.701556][T13935]  ? __fget_files+0x2a/0x420
[  483.701579][T13935]  ? __fget_files+0x3a0/0x420
[  483.701595][T13935]  ? __fget_files+0x2a/0x420
[  483.701621][T13935]  ksys_write+0x150/0x270
[  483.701643][T13935]  ? __pfx_ksys_write+0x10/0x10
[  483.701671][T13935]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  483.701688][T13935]  do_syscall_64+0x174/0x580
[  483.701705][T13935]  ? trace_irq_disable+0x3b/0x140
[  483.701726][T13935]  ? clear_bhb_loop+0x40/0x90
[  483.701745][T13935]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  483.701761][T13935] RIP: 0033:0x7fddb7b5d68e
[  483.701776][T13935] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  483.701790][T13935] RSP: 002b:00007fddb8a56fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  483.701807][T13935] RAX: ffffffffffffffda RBX: 00007fddb8a576c0 RCX: 00007fddb7b5d68e
[  483.701818][T13935] RDX: 0000000000000001 RSI: 00007fddb8a570a0 RDI: 0000000000000004
[  483.701828][T13935] RBP: 00007fddb8a57090 R08: 0000000000000000 R09: 0000000000000000
[  483.701838][T13935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  483.701847][T13935] R13: 00007fddb7e16038 R14: 00007fddb7e15fa0 R15: 00007fddb7f3fa48
[  483.701874][T13935]  </TASK>
[  483.854510][   T46] usb 5-1: USB disconnect, device number 111
[  483.877071][   T10] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  483.938085][ T5688] usb 3-1: selecting invalid altsetting 0
[  483.944044][ T5688] usbtest 3-1:220.1: probe with driver usbtest failed with error -22
[  483.955489][ T5688] usb 3-1: USB disconnect, device number 111
[  484.044237][   T10] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  484.044270][   T10] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[  484.044292][   T10] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  484.044314][   T10] usb 4-1: config 14 interface 57 has no altsetting 0
[  484.044330][   T10] usb 4-1: config 14 interface 228 has no altsetting 0
[  484.055381][   T10] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  484.132385][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  484.132409][   T10] usb 4-1: Product: syz
[  484.132422][   T10] usb 4-1: Manufacturer: syz
[  484.132435][   T10] usb 4-1: SerialNumber: syz
[  484.526616][T13962] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2671'.
[  484.567088][   T10] legousbtower 4-1:14.57: interrupt endpoints not found
[  484.945584][T13968] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2674'.
[  484.977200][   T10] legousbtower 4-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507
[  485.018799][   T10] legousbtower 4-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0
[  485.210807][T13975] FAULT_INJECTION: forcing a failure.
[  485.210807][T13975] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  485.233203][T13975] CPU: 1 UID: 0 PID: 13975 Comm: syz.0.2677 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  485.233229][T13975] Tainted: [L]=SOFTLOCKUP
[  485.233236][T13975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  485.233246][T13975] Call Trace:
[  485.233253][T13975]  <TASK>
[  485.233260][T13975]  dump_stack_lvl+0xe8/0x150
[  485.233284][T13975]  should_fail_ex+0x412/0x560
[  485.233307][T13975]  prepare_alloc_pages+0x22a/0x650
[  485.233337][T13975]  __alloc_frozen_pages_noprof+0x12f/0x380
[  485.233363][T13975]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  485.233389][T13975]  ? __pfx_policy_nodemask+0x10/0x10
[  485.233410][T13975]  ? __folio_put+0x4a2/0x580
[  485.233434][T13975]  alloc_pages_mpol+0x235/0x490
[  485.233455][T13975]  folio_alloc_mpol_noprof+0x39/0x160
[  485.233474][T13975]  migrate_pages_batch+0xa55/0x4ca0
[  485.233503][T13975]  ? migrate_pages_batch+0x18d1/0x4ca0
[  485.233523][T13975]  ? __pfx_alloc_migration_target_by_mpol+0x10/0x10
[  485.233547][T13975]  ? __pfx_migrate_pages_batch+0x10/0x10
[  485.233563][T13975]  ? walk_pgd_range+0x1cbb/0x1d90
[  485.233579][T13975]  ? mas_next_slot+0xc3b/0xd10
[  485.233627][T13975]  ? __pfx_remove_migration_pte+0x10/0x10
[  485.233652][T13975]  ? __pfx_remove_migration_pte+0x10/0x10
[  485.233674][T13975]  ? __pfx_walk_pgd_range+0x10/0x10
[  485.233703][T13975]  migrate_pages+0x20e0/0x2a10
[  485.233722][T13975]  ? vma_migratable+0x2ea/0x3e0
[  485.233755][T13975]  ? __pfx_alloc_migration_target_by_mpol+0x10/0x10
[  485.233773][T13975]  ? __flush_work+0x100/0xc50
[  485.233798][T13975]  ? __pfx_migrate_pages+0x10/0x10
[  485.233813][T13975]  ? __flush_work+0x100/0xc50
[  485.233842][T13975]  ? mas_next_slot+0xc3b/0xd10
[  485.233886][T13975]  __se_sys_mbind+0xe89/0x10f0
[  485.233915][T13975]  ? __pfx___se_sys_mbind+0x10/0x10
[  485.233947][T13975]  ? fput+0xa0/0xd0
[  485.233964][T13975]  ? ksys_write+0x242/0x270
[  485.233988][T13975]  ? __pfx_ksys_write+0x10/0x10
[  485.234013][T13975]  ? __x64_sys_mbind+0x21/0xf0
[  485.234033][T13975]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  485.234051][T13975]  do_syscall_64+0x174/0x580
[  485.234066][T13975]  ? trace_irq_disable+0x3b/0x140
[  485.234088][T13975]  ? clear_bhb_loop+0x40/0x90
[  485.234108][T13975]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  485.234123][T13975] RIP: 0033:0x7fddb7b9ce59
[  485.234139][T13975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  485.234152][T13975] RSP: 002b:00007fddb8a57028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[  485.234169][T13975] RAX: ffffffffffffffda RBX: 00007fddb7e15fa0 RCX: 00007fddb7b9ce59
[  485.234181][T13975] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000200000000000
[  485.234191][T13975] RBP: 00007fddb8a57090 R08: 0000000000000000 R09: 0000000000000002
[  485.234201][T13975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  485.234211][T13975] R13: 00007fddb7e16038 R14: 00007fddb7e15fa0 R15: 00007fddb7f3fa48
[  485.234238][T13975]  </TASK>
[  485.776877][ T5722] usb 4-1: USB disconnect, device number 23
[  485.793023][ T5722] legousbtower 4-1:14.228: LEGO USB Tower #-160 now disconnected
[  485.834564][   T46] usb 2-1: new high-speed USB device number 121 using dummy_hcd
[  485.972559][T13035] usb 1-1: new high-speed USB device number 113 using dummy_hcd
[  485.993633][   T46] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[  486.002044][   T46] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  486.013978][   T46] usb 2-1: config 220 has no interface number 2
[  486.020272][   T46] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  486.033711][   T46] usb 2-1: config 220 interface 0 has no altsetting 0
[  486.040477][   T46] usb 2-1: config 220 interface 76 has no altsetting 0
[  486.047783][   T46] usb 2-1: config 220 interface 1 has no altsetting 0
[  486.056820][   T46] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  486.066419][   T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  486.074630][   T46] usb 2-1: Product: syz
[  486.078811][   T46] usb 2-1: Manufacturer: syz
[  486.083469][   T46] usb 2-1: SerialNumber: syz
[  486.144947][T13035] usb 1-1: config 1 interface 0 has no altsetting 0
[  486.157099][T13035] usb 1-1: string descriptor 0 read error: -22
[  486.163651][T13035] usb 1-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.40
[  486.173295][T13035] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  486.180462][T14000] input: syz0 as /devices/virtual/input/input40
[  486.317206][   T46] usb 2-1: selecting invalid altsetting 0
[  486.332975][   T46] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  486.347371][   T46] uvcvideo 2-1:220.0: No valid video chain found.
[  486.365204][T14002] netlink: 'syz.3.2687': attribute type 61 has an invalid length.
[  486.367222][   T46] usb 2-1: selecting invalid altsetting 0
[  486.380284][   T46] usbtest 2-1:220.1: probe with driver usbtest failed with error -22
[  486.395430][   T46] usb 2-1: USB disconnect, device number 121
[  486.456468][   T10] usb 3-1: new high-speed USB device number 112 using dummy_hcd
[  486.592895][T13035] usbhid 1-1:1.0: can't add hid device: -71
[  486.599711][T13035] usbhid 1-1:1.0: probe with driver usbhid failed with error -71
[  486.609996][T13035] usb 1-1: USB disconnect, device number 113
[  486.622520][   T10] usb 3-1: Using ep0 maxpacket: 8
[  486.632231][   T10] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  486.643268][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  486.651275][   T10] usb 3-1: Product: syz
[  486.656857][   T10] usb 3-1: Manufacturer: syz
[  486.661459][   T10] usb 3-1: SerialNumber: syz
[  486.668421][   T10] usb 3-1: config 0 descriptor??
[  486.675802][   T10] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  486.768293][T14006] netlink: zone id is out of range
[  486.774953][T14006] netlink: get zone limit has 8 unknown bytes
[  486.875057][T14008] bond3: option mode: unable to set because the bond device is up
[  486.891375][T14008] bond3: (slave macvlan2): Error -22 calling dev_set_mtu
[  487.303559][ T5688] usb 5-1: new high-speed USB device number 112 using dummy_hcd
[  487.352463][T13035] usb 2-1: new high-speed USB device number 122 using dummy_hcd
[  487.380746][T14029] FAULT_INJECTION: forcing a failure.
[  487.380746][T14029] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  487.394440][T14029] CPU: 0 UID: 0 PID: 14029 Comm: syz.3.2697 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  487.394456][T14029] Tainted: [L]=SOFTLOCKUP
[  487.394460][T14029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  487.394466][T14029] Call Trace:
[  487.394470][T14029]  <TASK>
[  487.394475][T14029]  dump_stack_lvl+0xe8/0x150
[  487.394490][T14029]  should_fail_ex+0x412/0x560
[  487.394504][T14029]  _copy_from_iter+0x1d3/0x1670
[  487.394520][T14029]  ? rcu_is_watching+0x15/0xb0
[  487.394534][T14029]  ? __pfx__copy_from_iter+0x10/0x10
[  487.394548][T14029]  ? netlink_sendmsg+0x650/0xb40
[  487.394562][T14029]  ? skb_put+0x11b/0x210
[  487.394577][T14029]  netlink_sendmsg+0x6c0/0xb40
[  487.394596][T14029]  ? __pfx_netlink_sendmsg+0x10/0x10
[  487.394612][T14029]  ? aa_sock_msg_perm+0xf1/0x1b0
[  487.394627][T14029]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  487.394642][T14029]  ____sys_sendmsg+0x972/0x9f0
[  487.394651][T14029]  ? __might_fault+0xaf/0x130
[  487.394667][T14029]  ? __pfx_____sys_sendmsg+0x10/0x10
[  487.394680][T14029]  ? import_iovec+0x73/0xa0
[  487.394699][T14029]  ___sys_sendmsg+0x2a5/0x360
[  487.394708][T14029]  ? __lock_acquire+0x6b5/0x2cf0
[  487.394720][T14029]  ? __pfx____sys_sendmsg+0x10/0x10
[  487.394732][T14029]  ? kstrtouint+0x6e/0xe0
[  487.394759][T14029]  ? __fget_files+0x2a/0x420
[  487.394770][T14029]  ? __fget_files+0x3a0/0x420
[  487.394786][T14029]  __sys_sendmmsg+0x27c/0x4e0
[  487.394798][T14029]  ? __pfx___sys_sendmmsg+0x10/0x10
[  487.394806][T14029]  ? __mutex_unlock_slowpath+0x1be/0x6f0
[  487.394829][T14029]  ? ksys_write+0x242/0x270
[  487.394843][T14029]  ? __pfx_ksys_write+0x10/0x10
[  487.394860][T14029]  __x64_sys_sendmmsg+0xa0/0xc0
[  487.394869][T14029]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  487.394878][T14029]  do_syscall_64+0x174/0x580
[  487.394888][T14029]  ? trace_irq_disable+0x3b/0x140
[  487.394902][T14029]  ? clear_bhb_loop+0x40/0x90
[  487.394913][T14029]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  487.394922][T14029] RIP: 0033:0x7f58ad39ce59
[  487.394932][T14029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  487.394941][T14029] RSP: 002b:00007f58ae273028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  487.394952][T14029] RAX: ffffffffffffffda RBX: 00007f58ad615fa0 RCX: 00007f58ad39ce59
[  487.394959][T14029] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 000000000000000b
[  487.394965][T14029] RBP: 00007f58ae273090 R08: 0000000000000000 R09: 0000000000000000
[  487.394972][T14029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  487.394977][T14029] R13: 00007f58ad616038 R14: 00007f58ad615fa0 R15: 00007f58ad73fa48
[  487.394991][T14029]  </TASK>
[  487.692644][ T5688] usb 5-1: Using ep0 maxpacket: 16
[  487.700066][ T5688] usb 5-1: config 251 has an invalid interface number: 202 but max is 0
[  487.708821][ T5688] usb 5-1: config 251 has no interface number 0
[  487.716982][ T5688] usb 5-1: config 251 interface 202 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  487.723421][   T46] usb 1-1: new full-speed USB device number 114 using dummy_hcd
[  487.727270][ T5688] usb 5-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0
[  487.745058][ T5688] usb 5-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  487.745914][T13035] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  487.756488][ T5688] usb 5-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64
[  487.765951][T13035] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  487.777269][ T5688] usb 5-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81
[  487.797551][ T5688] usb 5-1: config 251 interface 202 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  487.808949][ T5688] usb 5-1: config 251 interface 202 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[  487.819304][ T5688] usb 5-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  487.819331][T13035] usb 2-1: Product: syz
[  487.832755][ T5688] usb 5-1: config 251 interface 202 has no altsetting 0
[  487.844315][T13035] usb 2-1: Manufacturer: syz
[  487.848977][T13035] usb 2-1: SerialNumber: syz
[  487.850793][ T5688] usb 5-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9
[  487.863421][ T5688] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  487.871452][ T5688] usb 5-1: Product: syz
[  487.875977][ T5688] usb 5-1: SerialNumber: syz
[  487.884293][   T46] usb 1-1: config 1 has an invalid interface number: 128 but max is 1
[  487.894354][   T46] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  487.906468][   T46] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  487.915781][   T46] usb 1-1: config 1 has no interface number 0
[  487.921895][   T46] usb 1-1: config 1 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  487.934662][   T46] usb 1-1: config 1 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  487.946920][   T46] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  487.956139][   T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  487.964214][   T46] usb 1-1: Product: syz
[  487.968370][   T46] usb 1-1: Manufacturer: syz
[  487.973011][   T46] usb 1-1: SerialNumber: syz
[  487.983240][   T46] cdc_wdm 1-1:1.128: skipping garbage
[  487.990274][   T46] cdc_wdm 1-1:1.128: cdc-wdm0: USB WDM device
[  487.997231][   T46] cdc_wdm 1-1:1.128: Unknown control protocol
[  488.154414][T14034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  488.163296][T14034] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  488.179689][ T5688] cxacru 5-1:251.202: cxacru_bind: interface has incorrect endpoints
[  488.192602][ T5688] cxacru 5-1:251.202: usbatm_usb_probe: bind failed: -19!
[  488.202800][   T46] usb 1-1: USB disconnect, device number 114
[  488.219269][ T5688] usb 5-1: USB disconnect, device number 112
[  488.270307][T13035] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  488.285057][T13035] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  488.302506][   T10] gspca_sonixj: i2c_w8 err -71
[  488.382540][   T10] sonixj 3-1:0.0: probe with driver sonixj failed with error -71
[  488.392822][   T10] usb 3-1: USB disconnect, device number 112
[  488.812623][   T10] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  488.869998][T14042] netlink: 'syz.4.2701': attribute type 1 has an invalid length.
[  488.937784][T14042] 8021q: adding VLAN 0 to HW filter on device bond5
[  488.979989][T14046] bond5: (slave syz_tun): Enslaving as a backup interface with an up link
[  488.994154][   T10] usb 4-1: config 220 has an invalid interface number: 76 but max is 2
[  489.004544][   T10] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  489.015134][   T10] usb 4-1: config 220 has no interface number 2
[  489.021470][   T10] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  489.037477][   T10] usb 4-1: config 220 interface 0 has no altsetting 0
[  489.044362][   T10] usb 4-1: config 220 interface 76 has no altsetting 0
[  489.051306][   T10] usb 4-1: config 220 interface 1 has no altsetting 0
[  489.071588][   T10] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  489.090299][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  489.110797][   T10] usb 4-1: Product: syz
[  489.121756][   T10] usb 4-1: Manufacturer: syz
[  489.136018][   T10] usb 4-1: SerialNumber: syz
[  489.192717][ T5688] usb 1-1: new high-speed USB device number 115 using dummy_hcd
[  489.346421][ T5688] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF4, changing to 0x84
[  489.362501][ T5688] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1023
[  489.374016][ T5688] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  489.385822][ T5688] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  489.399383][ T5688] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  489.408784][ T5715] usb 5-1: new high-speed USB device number 113 using dummy_hcd
[  489.425414][ T5688] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  489.445660][ T5688] usb 1-1: Product: syz
[  489.450413][   T10] usb 4-1: selecting invalid altsetting 0
[  489.456893][ T5688] usb 1-1: Manufacturer: syz
[  489.461873][   T10] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  489.480510][ T5688] usb 1-1: SerialNumber: syz
[  489.485486][   T10] uvcvideo 4-1:220.0: No valid video chain found.
[  489.497534][ T5688] usb 1-1: config 0 descriptor??
[  489.510586][T14040] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  489.511713][   T10] usb 4-1: selecting invalid altsetting 0
[  489.532032][   T10] usbtest 4-1:220.1: probe with driver usbtest failed with error -22
[  489.545131][ T5688] usb 1-1: ucan: probing device on interface #0
[  489.559118][   T10] usb 4-1: USB disconnect, device number 24
[  489.565435][ T5688] usb 1-1: ucan: invalid endpoint configuration
[  489.582501][ T5715] usb 5-1: Using ep0 maxpacket: 32
[  489.591427][ T5688] usb 1-1: ucan: probe failed; try to update the device firmware
[  489.606353][ T5715] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  489.631755][ T5715] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  489.652043][ T5715] usb 5-1: Product: syz
[  489.660936][ T5715] usb 5-1: Manufacturer: syz
[  489.672226][ T5715] usb 5-1: SerialNumber: syz
[  489.689916][ T5715] usb 5-1: config 0 descriptor??
[  489.704154][ T5715] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  489.716756][ T5715] dvb-usb: bulk message failed: -22 (4/0)
[  489.725713][ T5715] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  489.742638][ T5715] dvb-usb: bulk message failed: -22 (5/0)
[  489.750558][   T46] usb 1-1: USB disconnect, device number 115
[  489.760388][ T5715] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  489.821680][ T5715] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  489.849838][ T5715] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  489.874905][ T5715] usb 5-1: media controller created
[  489.901808][ T5715] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  489.941553][ T5715] usb 5-1: selecting invalid altsetting 3
[  489.954510][ T5715] ttusb2: set interface to alts=3 failed
[  490.027497][ T5715] DVB: Unable to find symbol tda10086_attach()
[  490.042584][ T5715] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  490.064785][ T5715] dvb-usb: bulk message failed: -22 (4/0)
[  490.076224][ T5715] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  490.099583][ T5715] dvb-usb: bulk message failed: -22 (5/0)
[  490.121045][ T5715] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  490.137381][T14012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  490.154006][ T5715] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  490.156080][T14012] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  490.177295][ T5715] usb 5-1: USB disconnect, device number 113
[  490.205955][T13035] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000080. ret = -EPROTO
[  490.232954][T13035] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  490.247123][T13035] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  490.258206][T13035] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71
[  490.279566][T13035] usb 2-1: USB disconnect, device number 122
[  490.352695][T14060] FAULT_INJECTION: forcing a failure.
[  490.352695][T14060] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  490.357712][ T5715] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  490.375622][T14060] CPU: 1 UID: 0 PID: 14060 Comm: syz.2.2707 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  490.375648][T14060] Tainted: [L]=SOFTLOCKUP
[  490.375655][T14060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  490.375665][T14060] Call Trace:
[  490.375671][T14060]  <TASK>
[  490.375678][T14060]  dump_stack_lvl+0xe8/0x150
[  490.375703][T14060]  should_fail_ex+0x412/0x560
[  490.375727][T14060]  _copy_from_user+0x2d/0xb0
[  490.375747][T14060]  ___sys_sendmsg+0x1c6/0x360
[  490.375763][T14060]  ? __lock_acquire+0x6b5/0x2cf0
[  490.375784][T14060]  ? __pfx____sys_sendmsg+0x10/0x10
[  490.375804][T14060]  ? lapic_next_event+0x11/0x20
[  490.375821][T14060]  ? clockevents_program_event+0x491/0x630
[  490.375860][T14060]  ? __fget_files+0x2a/0x420
[  490.375879][T14060]  ? __fget_files+0x3a0/0x420
[  490.375903][T14060]  __x64_sys_sendmsg+0x1bd/0x2a0
[  490.375920][T14060]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  490.375941][T14060]  ? __pfx_ksys_write+0x10/0x10
[  490.375967][T14060]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  490.375983][T14060]  do_syscall_64+0x174/0x580
[  490.376000][T14060]  ? trace_irq_disable+0x3b/0x140
[  490.376020][T14060]  ? clear_bhb_loop+0x40/0x90
[  490.376038][T14060]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  490.376053][T14060] RIP: 0033:0x7f8404d9ce59
[  490.376069][T14060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  490.376082][T14060] RSP: 002b:00007f8405bd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  490.376098][T14060] RAX: ffffffffffffffda RBX: 00007f8405015fa0 RCX: 00007f8404d9ce59
[  490.376110][T14060] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003
[  490.376119][T14060] RBP: 00007f8405bd7090 R08: 0000000000000000 R09: 0000000000000000
[  490.376128][T14060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  490.376137][T14060] R13: 00007f8405016038 R14: 00007f8405015fa0 R15: 00007f840513fa48
[  490.376164][T14060]  </TASK>
[  491.079028][T14077] netlink: 25 bytes leftover after parsing attributes in process `syz.3.2712'.
[  491.126056][T14077] hsr0: entered allmulticast mode
[  491.148305][T14077] hsr_slave_0: entered allmulticast mode
[  491.186930][T14077] hsr_slave_1: entered allmulticast mode
[  491.272019][T14074] dvmrp31: entered allmulticast mode
[  491.899294][ T5715] usb 3-1: new high-speed USB device number 113 using dummy_hcd
[  492.064414][ T5715] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[  492.072908][ T5715] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  492.122684][ T5715] usb 3-1: config 220 has no interface number 2
[  492.141930][ T5715] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  492.193913][ T5715] usb 3-1: config 220 interface 0 has no altsetting 0
[  492.214205][ T5715] usb 3-1: config 220 interface 76 has no altsetting 0
[  492.232248][ T5715] usb 3-1: config 220 interface 1 has no altsetting 0
[  492.254749][ T5715] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  492.269672][ T5715] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  492.296119][ T5715] usb 3-1: Product: syz
[  492.315368][ T5715] usb 3-1: Manufacturer: syz
[  492.330132][ T5715] usb 3-1: SerialNumber: syz
[  492.456974][T14115] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2723'.
[  492.522464][   T46] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  492.568076][ T5715] usb 3-1: selecting invalid altsetting 0
[  492.622048][ T5715] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  492.645956][ T5715] uvcvideo 3-1:220.0: No valid video chain found.
[  492.688082][   T46] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  492.688473][ T5715] usb 3-1: selecting invalid altsetting 0
[  492.743885][ T5715] usbtest 3-1:220.1: probe with driver usbtest failed with error -22
[  492.765486][   T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  492.769833][ T5715] usb 3-1: USB disconnect, device number 113
[  492.829569][   T46] usb 4-1: Product: syz
[  492.847024][   T46] usb 4-1: Manufacturer: syz
[  492.875759][   T46] usb 4-1: SerialNumber: syz
[  493.042973][T14126] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2726'.
[  493.319501][T14135] netlink: 'syz.2.2729': attribute type 1 has an invalid length.
[  493.335265][T14135] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2729'.
[  493.337337][T14137] sg_write: data in/out 479232/136 bytes for SCSI command 0x0-- guessing data in;
[  493.337337][T14137]    program syz.1.2730 not setting count and/or reply_len properly
[  493.361885][   T46] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  493.374571][   T46] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  493.389313][T14137] FAULT_INJECTION: forcing a failure.
[  493.389313][T14137] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  493.402652][T14137] CPU: 1 UID: 0 PID: 14137 Comm: syz.1.2730 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  493.402676][T14137] Tainted: [L]=SOFTLOCKUP
[  493.402682][T14137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  493.402692][T14137] Call Trace:
[  493.402700][T14137]  <TASK>
[  493.402707][T14137]  dump_stack_lvl+0xe8/0x150
[  493.402730][T14137]  should_fail_ex+0x412/0x560
[  493.402755][T14137]  _copy_from_iter+0x1d3/0x1670
[  493.402779][T14137]  ? pfn_valid+0x125/0x4c0
[  493.402794][T14137]  ? pfn_valid+0x440/0x4c0
[  493.402808][T14137]  ? __pfx__copy_from_iter+0x10/0x10
[  493.402825][T14137]  ? bvec_try_merge_page+0x1d4/0x280
[  493.402846][T14137]  ? bio_add_page+0x2e9/0x6f0
[  493.402865][T14137]  copy_page_from_iter+0x220/0x2d0
[  493.402887][T14137]  blk_rq_map_user_iov+0xa12/0x1810
[  493.402920][T14137]  ? __pfx_blk_rq_map_user_iov+0x10/0x10
[  493.402953][T14137]  ? import_ubuf+0xfb/0x1d0
[  493.402974][T14137]  blk_rq_map_user_io+0x2ae/0x440
[  493.402999][T14137]  ? __pfx_blk_rq_map_user_io+0x10/0x10
[  493.403026][T14137]  ? sg_common_write+0xba7/0x13e0
[  493.403049][T14137]  ? __mutex_unlock_slowpath+0x1be/0x6f0
[  493.403073][T14137]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  493.403092][T14137]  ? sg_build_indirect+0x5fa/0x850
[  493.403121][T14137]  sg_common_write+0xcff/0x13e0
[  493.403153][T14137]  ? __pfx_sg_common_write+0x10/0x10
[  493.403181][T14137]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  493.403201][T14137]  ? ___ratelimit+0x58c/0x8d0
[  493.403228][T14137]  sg_write+0xaf2/0xf00
[  493.403252][T14137]  ? __pfx_sg_write+0x10/0x10
[  493.403272][T14137]  ? __pfx_aa_file_perm+0x10/0x10
[  493.403312][T14137]  ? bpf_lsm_file_permission+0x9/0x20
[  493.403333][T14137]  ? security_file_permission+0x75/0x260
[  493.403347][T14137]  ? rw_verify_area+0x255/0x4d0
[  493.403360][T14137]  ? __pfx_sg_write+0x10/0x10
[  493.403371][T14137]  vfs_write+0x29a/0xb90
[  493.403388][T14137]  ? __pfx_vfs_write+0x10/0x10
[  493.403402][T14137]  ? __fget_files+0x2a/0x420
[  493.403415][T14137]  ? __fget_files+0x2a/0x420
[  493.403425][T14137]  ? __fget_files+0x3a0/0x420
[  493.403436][T14137]  ? __fget_files+0x2a/0x420
[  493.403451][T14137]  ksys_write+0x150/0x270
[  493.403465][T14137]  ? __pfx_ksys_write+0x10/0x10
[  493.403482][T14137]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  493.403492][T14137]  do_syscall_64+0x174/0x580
[  493.403502][T14137]  ? trace_irq_disable+0x3b/0x140
[  493.403516][T14137]  ? clear_bhb_loop+0x40/0x90
[  493.403529][T14137]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  493.403543][T14137] RIP: 0033:0x7fa6a6f9ce59
[  493.403559][T14137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  493.403571][T14137] RSP: 002b:00007fa6a7e4a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  493.403588][T14137] RAX: ffffffffffffffda RBX: 00007fa6a7215fa0 RCX: 00007fa6a6f9ce59
[  493.403599][T14137] RDX: 00000000000000b2 RSI: 0000200000000040 RDI: 0000000000000007
[  493.403609][T14137] RBP: 00007fa6a7e4a090 R08: 0000000000000000 R09: 0000000000000000
[  493.403618][T14137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  493.403627][T14137] R13: 00007fa6a7216038 R14: 00007fa6a7215fa0 R15: 00007fa6a733fa48
[  493.403652][T14137]  </TASK>
[  493.989506][T13035] usb 1-1: new high-speed USB device number 116 using dummy_hcd
[  494.115329][T14143] bond5: (slave syz_tun): Removing an active aggregator
[  494.144292][T13035] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  494.155438][T13035] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  494.224407][T13035] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  494.258072][T13035] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  494.281419][T14143] bond5: (slave syz_tun): Releasing backup interface
[  494.292264][T13035] usb 1-1: Manufacturer: syz
[  494.308581][T13035] usb 1-1: config 0 descriptor??
[  494.512104][T14155] FAULT_INJECTION: forcing a failure.
[  494.512104][T14155] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  494.515188][T14143] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  494.554459][T14155] CPU: 0 UID: 0 PID: 14155 Comm: syz.2.2735 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  494.554485][T14155] Tainted: [L]=SOFTLOCKUP
[  494.554490][T14155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  494.554495][T14155] Call Trace:
[  494.554500][T14155]  <TASK>
[  494.554505][T14155]  dump_stack_lvl+0xe8/0x150
[  494.554521][T14155]  should_fail_ex+0x412/0x560
[  494.554535][T14155]  _copy_from_user+0x2d/0xb0
[  494.554554][T14155]  input_event_from_user+0xb1/0x290
[  494.554574][T14155]  ? __pfx_input_event_from_user+0x10/0x10
[  494.554603][T14155]  evdev_write+0x2c7/0x4c0
[  494.554620][T14155]  ? __lock_acquire+0x6b5/0x2cf0
[  494.554641][T14155]  ? __pfx_evdev_write+0x10/0x10
[  494.554652][T14155]  ? bpf_lsm_file_permission+0x9/0x20
[  494.554665][T14155]  ? security_file_permission+0x75/0x260
[  494.554677][T14155]  ? rw_verify_area+0x255/0x4d0
[  494.554691][T14155]  ? __pfx_evdev_write+0x10/0x10
[  494.554706][T14155]  vfs_write+0x29a/0xb90
[  494.554735][T14155]  ? __pfx_vfs_write+0x10/0x10
[  494.554759][T14155]  ? __fget_files+0x2a/0x420
[  494.554780][T14155]  ? __fget_files+0x2a/0x420
[  494.554797][T14155]  ? __fget_files+0x3a0/0x420
[  494.554820][T14155]  ? __fget_files+0x2a/0x420
[  494.554844][T14155]  ksys_write+0x150/0x270
[  494.554868][T14155]  ? __pfx_ksys_write+0x10/0x10
[  494.554897][T14155]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  494.554915][T14155]  do_syscall_64+0x174/0x580
[  494.554931][T14155]  ? trace_irq_disable+0x3b/0x140
[  494.554954][T14155]  ? clear_bhb_loop+0x40/0x90
[  494.554974][T14155]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  494.554990][T14155] RIP: 0033:0x7f8404d9ce59
[  494.555007][T14155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  494.555021][T14155] RSP: 002b:00007f8405bb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  494.555039][T14155] RAX: ffffffffffffffda RBX: 00007f8405016090 RCX: 00007f8404d9ce59
[  494.555052][T14155] RDX: 0000000000000918 RSI: 0000200000000040 RDI: 0000000000000006
[  494.555062][T14155] RBP: 00007f8405bb6090 R08: 0000000000000000 R09: 0000000000000000
[  494.555072][T14155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  494.555078][T14155] R13: 00007f8405016128 R14: 00007f8405016090 R15: 00007f840513fa48
[  494.555093][T14155]  </TASK>
[  494.795666][T13035] pyra 0003:1E7D:2CF6.0032: unknown main item tag 0x0
[  494.802617][T13035] pyra 0003:1E7D:2CF6.0032: unknown main item tag 0x0
[  494.809436][T13035] pyra 0003:1E7D:2CF6.0032: unknown main item tag 0x0
[  494.817052][T13035] pyra 0003:1E7D:2CF6.0032: unknown main item tag 0x0
[  494.824102][T13035] pyra 0003:1E7D:2CF6.0032: unknown main item tag 0x0
[  494.834545][T13035] pyra 0003:1E7D:2CF6.0032: unknown main item tag 0x0
[  494.847172][T13035] pyra 0003:1E7D:2CF6.0032: unknown main item tag 0x0
[  494.875660][T13035] pyra 0003:1E7D:2CF6.0032: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0
[  495.001523][T13035] pyra 0003:1E7D:2CF6.0032: couldn't init struct pyra_device
[  495.031064][T13035] pyra 0003:1E7D:2CF6.0032: couldn't install mouse
[  495.063375][T14163] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2737'.
[  495.074541][T13035] pyra 0003:1E7D:2CF6.0032: probe with driver pyra failed with error -5
[  495.412658][ T5715] usb 2-1: new high-speed USB device number 123 using dummy_hcd
[  495.576037][ T5715] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[  495.584779][ T5715] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  495.595487][ T5715] usb 2-1: config 220 has no interface number 2
[  495.602153][ T5715] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  495.616379][ T5715] usb 2-1: config 220 interface 0 has no altsetting 0
[  495.623232][ T5715] usb 2-1: config 220 interface 76 has no altsetting 0
[  495.630116][ T5715] usb 2-1: config 220 interface 1 has no altsetting 0
[  495.633621][T14107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  495.641628][ T5715] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  495.663202][ T5715] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  495.664410][T14107] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  495.678918][ T5715] usb 2-1: Product: syz
[  495.685695][ T5715] usb 2-1: Manufacturer: syz
[  495.689330][   T46] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000080. ret = -EPROTO
[  495.693532][ T5715] usb 2-1: SerialNumber: syz
[  495.703837][   T46] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  495.721699][   T46] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  495.735283][   T46] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71
[  495.749238][   T46] usb 4-1: USB disconnect, device number 25
[  495.948621][T14179] bridge0: port 1(batadv1) entered blocking state
[  495.961164][T14179] bridge0: port 1(batadv1) entered disabled state
[  495.972771][T14179] batadv1: entered allmulticast mode
[  495.985705][T14179] batadv1: entered promiscuous mode
[  496.007221][ T5715] usb 2-1: selecting invalid altsetting 0
[  496.037655][ T5715] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  496.048016][ T5715] uvcvideo 2-1:220.0: No valid video chain found.
[  496.063126][ T5715] usb 2-1: selecting invalid altsetting 0
[  496.069238][ T5715] usbtest 2-1:220.1: probe with driver usbtest failed with error -22
[  496.085067][ T5715] usb 2-1: USB disconnect, device number 123
[  496.432919][   T13] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  496.442485][   T13] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  496.624153][T14186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2742'.
[  496.652519][T14186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2742'.
[  496.675302][T14186] netlink: 'syz.3.2742': attribute type 18 has an invalid length.
[  496.683300][ T5715] usb 3-1: new high-speed USB device number 114 using dummy_hcd
[  496.727464][ T5688] IPVS: starting estimator thread 0...
[  496.823556][T14190] IPVS: using max 56 ests per chain, 134400 per kthread
[  496.844068][ T5715] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  496.863884][ T5715] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  496.905406][ T5715] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[  496.924917][ T5715] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  496.930189][T14200] netlink: 'syz.3.2748': attribute type 1 has an invalid length.
[  496.954310][ T5715] usb 3-1: Product: syz
[  496.964006][ T5715] usb 3-1: Manufacturer: syz
[  496.972975][ T5715] usb 3-1: SerialNumber: syz
[  496.995323][T14200] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2748'.
[  497.010741][T14200] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2748'.
[  497.020687][T14200] netlink: 'syz.3.2748': attribute type 5 has an invalid length.
[  497.029106][T14200] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2748'.
[  497.085158][T13035] usb 1-1: USB disconnect, device number 116
[  497.232415][   T46] usb 5-1: new high-speed USB device number 114 using dummy_hcd
[  497.243896][T14182] loop9: detected capacity change from 0 to 7
[  497.251964][T14182] Dev loop9: unable to read RDB block 7
[  497.258476][T14182]  loop9: unable to read partition table
[  497.264309][   T29] kauditd_printk_skb: 72 callbacks suppressed
[  497.264323][   T29] audit: type=1326 audit(1780325655.182:2777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14207 comm="syz.3.2751" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ad39ce59 code=0x7ffc0000
[  497.272882][T14182] loop9: partition table beyond EOD, 
[  497.302301][   T29] audit: type=1326 audit(1780325655.182:2778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14207 comm="syz.3.2751" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7f58ad39ce59 code=0x7ffc0000
[  497.334316][T14182] truncated
[  497.335194][   T29] audit: type=1326 audit(1780325655.182:2779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14207 comm="syz.3.2751" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ad39ce59 code=0x7ffc0000
[  497.337740][T14182] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[  497.364594][   T29] audit: type=1326 audit(1780325655.182:2780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14207 comm="syz.3.2751" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f58ad39ce59 code=0x7ffc0000
[  497.404423][   T29] audit: type=1326 audit(1780325655.182:2781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14207 comm="syz.3.2751" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ad39ce59 code=0x7ffc0000
[  497.406637][   T46] usb 5-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00
[  497.454026][   T46] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0
[  497.462562][   T46] usb 5-1: Product: syz
[  497.476021][   T29] audit: type=1326 audit(1780325655.182:2782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14207 comm="syz.3.2751" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f58ad39ce59 code=0x7ffc0000
[  497.512518][   T29] audit: type=1326 audit(1780325655.182:2783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14207 comm="syz.3.2751" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ad39ce59 code=0x7ffc0000
[  497.513061][   T46] usb 5-1: config 0 descriptor??
[  497.543852][T13035] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  497.568706][   T29] audit: type=1326 audit(1780325655.182:2784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14207 comm="syz.3.2751" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ad39ce59 code=0x7ffc0000
[  497.572837][   T46] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[  497.624943][   T46] usb 5-1: Detected FT232H
[  497.649143][   T29] audit: type=1326 audit(1780325655.192:2785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14207 comm="syz.3.2751" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f58ad35d68e code=0x7ffc0000
[  497.705570][T13035] usb 4-1: config 0 has an invalid interface number: 153 but max is 0
[  497.713911][T13035] usb 4-1: config 0 has no interface number 0
[  497.720378][T13035] usb 4-1: too many endpoints for config 0 interface 153 altsetting 255: 255, using maximum allowed: 30
[  497.731855][   T29] audit: type=1326 audit(1780325655.192:2786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14207 comm="syz.3.2751" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ad39ce59 code=0x7ffc0000
[  497.781353][   T46] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  497.802153][T13035] usb 4-1: config 0 interface 153 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  497.818755][   T46] ftdi_sio 5-1:0.0: GPIO initialisation failed: -32
[  497.833412][   T35] bond3: (slave macvlan2): link status definitely down, disabling slave
[  497.833455][   T46] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  497.856628][T13035] usb 4-1: config 0 interface 153 has no altsetting 0
[  497.868467][T13035] usb 4-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34
[  497.876884][ T5715] usb 3-1: unit 4 not found!
[  497.883376][T13035] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  497.901844][T13035] usb 4-1: Product: syz
[  497.916592][T13035] usb 4-1: Manufacturer: syz
[  497.939044][T13035] usb 4-1: SerialNumber: syz
[  497.970971][T13035] usb 4-1: config 0 descriptor??
[  498.032070][ T5715] usb 3-1: USB disconnect, device number 114
[  498.144629][   T10] usb 5-1: USB disconnect, device number 114
[  498.153897][   T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  498.191558][   T10] ftdi_sio 5-1:0.0: device disconnected
[  498.554597][   T10] usb 5-1: new high-speed USB device number 115 using dummy_hcd
[  498.588674][T14230] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2757'.
[  498.607380][   T35] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  498.616411][T14230] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2757'.
[  498.625369][   T35] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  498.636218][   T35] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  498.656618][   T35] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  498.724235][   T10] usb 5-1: config 220 has an invalid interface number: 76 but max is 2
[  498.724259][   T10] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  498.724277][   T10] usb 5-1: config 220 has no interface number 2
[  498.724336][   T10] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  498.724360][   T10] usb 5-1: config 220 interface 0 has no altsetting 0
[  498.724375][   T10] usb 5-1: config 220 interface 76 has no altsetting 0
[  498.724391][   T10] usb 5-1: config 220 interface 1 has no altsetting 0
[  498.726526][   T10] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  498.726549][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  498.726567][   T10] usb 5-1: Product: syz
[  498.726581][   T10] usb 5-1: Manufacturer: syz
[  498.726594][   T10] usb 5-1: SerialNumber: syz
[  498.950730][   T10] usb 5-1: selecting invalid altsetting 0
[  498.983282][   T10] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  499.000787][   T10] uvcvideo 5-1:220.0: No valid video chain found.
[  499.019962][   T10] usb 5-1: selecting invalid altsetting 0
[  499.032395][   T10] usbtest 5-1:220.1: probe with driver usbtest failed with error -22
[  499.056270][   T10] usb 5-1: USB disconnect, device number 115
[  499.094978][T14244] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  499.115439][ T5715] usb 2-1: new high-speed USB device number 124 using dummy_hcd
[  499.233435][T14246] syzkaller1: entered promiscuous mode
[  499.239034][T14246] syzkaller1: entered allmulticast mode
[  499.272408][ T5715] usb 2-1: Using ep0 maxpacket: 32
[  499.283681][ T5715] usb 2-1: config 0 has an invalid interface number: 89 but max is 0
[  499.292798][ T5715] usb 2-1: config 0 has no interface number 0
[  499.305157][ T5715] usb 2-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  499.321934][ T5715] usb 2-1: config 0 interface 89 has no altsetting 0
[  499.336650][ T5715] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[  499.348205][ T5715] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  499.362028][ T5715] usb 2-1: Product: syz
[  499.382397][ T5715] usb 2-1: Manufacturer: syz
[  499.387046][ T5715] usb 2-1: SerialNumber: syz
[  499.398545][ T5715] usb 2-1: config 0 descriptor??
[  499.416443][ T5715] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  499.428140][ T5715] em28xx 2-1:0.89: Video interface 89 found:
[  500.012494][ T5764] usb 5-1: new high-speed USB device number 116 using dummy_hcd
[  500.021474][ T5715] em28xx 2-1:0.89: unknown em28xx chip ID (0)
[  500.173024][ T5764] usb 5-1: Using ep0 maxpacket: 32
[  500.188952][ T5764] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  500.224486][ T5764] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  500.260936][T13035] hub 4-1:0.153: bad descriptor, ignoring hub
[  500.273768][ T5764] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  500.293212][T13035] hub 4-1:0.153: probe with driver hub failed with error -5
[  500.300752][ T5764] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  500.311405][T13035] sierra 4-1:0.153: Sierra USB modem converter detected
[  500.323438][ T5764] usb 5-1: Product: syz
[  500.328280][ T5764] usb 5-1: Manufacturer: syz
[  500.337651][ T5764] usb 5-1: SerialNumber: syz
[  500.353561][T13035] usb 4-1: USB disconnect, device number 26
[  500.368384][ T5764] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input41
[  500.379622][T13035] sierra 4-1:0.153: device disconnected
[  500.621955][T14264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2770'.
[  500.661118][ T5764] usb 5-1: USB disconnect, device number 116
[  500.730636][ T5764] appletouch 5-1:1.0: input: appletouch disconnected
[  500.842610][T14269] FAULT_INJECTION: forcing a failure.
[  500.842610][T14269] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  500.861608][T14269] CPU: 0 UID: 0 PID: 14269 Comm: syz.0.2771 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  500.861633][T14269] Tainted: [L]=SOFTLOCKUP
[  500.861640][T14269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  500.861650][T14269] Call Trace:
[  500.861657][T14269]  <TASK>
[  500.861665][T14269]  dump_stack_lvl+0xe8/0x150
[  500.861690][T14269]  should_fail_ex+0x412/0x560
[  500.861717][T14269]  _copy_from_user+0x2d/0xb0
[  500.861738][T14269]  generic_map_update_batch+0x69a/0x990
[  500.861766][T14269]  ? __pfx_generic_map_update_batch+0x10/0x10
[  500.861786][T14269]  ? __fget_files+0x2a/0x420
[  500.861810][T14269]  ? __pfx_generic_map_update_batch+0x10/0x10
[  500.861829][T14269]  bpf_map_do_batch+0x39b/0x630
[  500.861851][T14269]  __sys_bpf+0x7c1/0x950
[  500.861875][T14269]  ? __pfx___sys_bpf+0x10/0x10
[  500.861911][T14269]  ? ksys_write+0x242/0x270
[  500.861934][T14269]  ? __pfx_ksys_write+0x10/0x10
[  500.861959][T14269]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  500.861977][T14269]  __x64_sys_bpf+0x7c/0x90
[  500.861999][T14269]  do_syscall_64+0x174/0x580
[  500.862017][T14269]  ? clear_bhb_loop+0x40/0x90
[  500.862037][T14269]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  500.862052][T14269] RIP: 0033:0x7fddb7b9ce59
[  500.862068][T14269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  500.862081][T14269] RSP: 002b:00007fddb8a57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  500.862097][T14269] RAX: ffffffffffffffda RBX: 00007fddb7e15fa0 RCX: 00007fddb7b9ce59
[  500.862109][T14269] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a
[  500.862120][T14269] RBP: 00007fddb8a57090 R08: 0000000000000000 R09: 0000000000000000
[  500.862130][T14269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  500.862140][T14269] R13: 00007fddb7e16038 R14: 00007fddb7e15fa0 R15: 00007fddb7f3fa48
[  500.862167][T14269]  </TASK>
[  501.064085][   T10] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  501.202768][   T10] usb 4-1: device descriptor read/64, error -71
[  501.376015][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[  501.386439][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  501.442656][   T10] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  501.572479][   T10] usb 4-1: device descriptor read/64, error -71
[  501.613435][ T5715] em28xx 2-1:0.89: failed to get i2c transfer status from bridge register (error=-5)
[  501.622462][ T5764] usb 3-1: new high-speed USB device number 115 using dummy_hcd
[  501.649772][ T5715] em28xx 2-1:0.89: board has no eeprom
[  501.683008][   T10] usb usb4-port1: attempt power cycle
[  501.722499][ T5715] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67)
[  501.733704][ T5715] em28xx 2-1:0.89: analog set to bulk mode.
[  501.755137][T13043] em28xx 2-1:0.89: Registering V4L2 extension
[  501.784298][ T5764] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[  501.804893][ T5764] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  501.846728][ T5764] usb 3-1: config 220 has no interface number 2
[  501.871276][ T5764] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  501.899658][ T5764] usb 3-1: config 220 interface 0 has no altsetting 0
[  501.914947][ T5764] usb 3-1: config 220 interface 76 has no altsetting 0
[  501.933430][T13043] em28xx 2-1:0.89: reading from i2c device at 0x4a failed (error=-5)
[  501.945274][ T5764] usb 3-1: config 220 interface 1 has no altsetting 0
[  501.969703][ T5764] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  501.980003][ T5764] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  501.991855][ T5764] usb 3-1: Product: syz
[  502.001771][T13043] em28xx 2-1:0.89: reading from i2c device at 0x48 failed (error=-5)
[  502.020296][ T5764] usb 3-1: Manufacturer: syz
[  502.020332][T13043] em28xx 2-1:0.89: reading from i2c device at 0x42 failed (error=-5)
[  502.033528][   T10] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  502.042869][T13043] em28xx 2-1:0.89: reading from i2c device at 0x40 failed (error=-5)
[  502.053787][ T5764] usb 3-1: SerialNumber: syz
[  502.065172][   T10] usb 4-1: device descriptor read/8, error -71
[  502.072148][T13043] em28xx 2-1:0.89: Config register raw data: 0xfffffffb
[  502.080410][T13043] em28xx 2-1:0.89: AC97 chip type couldn't be determined
[  502.099352][T13043] em28xx 2-1:0.89: No AC97 audio processor
[  502.172503][T13043] usb 2-1: Decoder not found
[  502.180079][T13043] em28xx 2-1:0.89: failed to create media graph
[  502.212435][T13043] em28xx 2-1:0.89: V4L2 device video103 deregistered
[  502.258889][T14285] ==================================================================
[  502.258921][T13043] em28xx 2-1:0.89: Registering snapshot button...
[  502.266969][T14285] BUG: KASAN: slab-use-after-free in v4l2_open+0x395/0x3a0
[  502.266998][T14285] Read of size 4 at addr ffff88802b1f0860 by task v4l_id/14285
[  502.267010][T14285] 
[  502.267022][T14285] CPU: 1 UID: 0 PID: 14285 Comm: v4l_id Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  502.267043][T14285] Tainted: [L]=SOFTLOCKUP
[  502.267050][T14285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  502.267060][T14285] Call Trace:
[  502.267067][T14285]  <TASK>
[  502.267074][T14285]  dump_stack_lvl+0xe8/0x150
[  502.267092][T14285]  print_address_description+0x55/0x1e0
[  502.267109][T14285]  ? v4l2_open+0x395/0x3a0
[  502.267134][T14285]  print_report+0x58/0x70
[  502.267148][T14285]  kasan_report+0x117/0x150
[  502.267164][T14285]  ? v4l2_open+0x395/0x3a0
[  502.267186][T14285]  v4l2_open+0x395/0x3a0
[  502.267207][T14285]  chrdev_open+0x4cd/0x5e0
[  502.267223][T14285]  ? __pfx_chrdev_open+0x10/0x10
[  502.267238][T14285]  ? fsnotify_open_perm_and_set_mode+0x135/0x6d0
[  502.267261][T14285]  ? __pfx_chrdev_open+0x10/0x10
[  502.267276][T14285]  do_dentry_open+0x822/0x13a0
[  502.267298][T14285]  vfs_open+0x3b/0x340
[  502.267312][T14285]  ? path_openat+0x2df0/0x3860
[  502.267332][T14285]  path_openat+0x2e08/0x3860
[  502.267357][T14285]  ? __pfx_stack_trace_save+0x10/0x10
[  502.267379][T14285]  ? stack_depot_save_flags+0x33/0x810
[  502.267399][T14285]  ? __pfx_path_openat+0x10/0x10
[  502.267417][T14285]  ? __x64_sys_openat+0x138/0x170
[  502.267436][T14285]  ? __lock_acquire+0x6b5/0x2cf0
[  502.267456][T14285]  do_file_open+0x23e/0x4a0
[  502.267476][T14285]  ? __pfx_do_file_open+0x10/0x10
[  502.267504][T14285]  ? _raw_spin_unlock+0x28/0x50
[  502.267524][T14285]  ? alloc_fd+0x64b/0x6c0
[  502.267544][T14285]  do_sys_openat2+0x113/0x200
[  502.267562][T14285]  ? __pfx_do_sys_openat2+0x10/0x10
[  502.267579][T14285]  ? exc_page_fault+0x6a/0xc0
[  502.267595][T14285]  ? do_user_addr_fault+0xc6f/0x1340
[  502.267612][T14285]  __x64_sys_openat+0x138/0x170
[  502.267629][T14285]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  502.267645][T14285]  do_syscall_64+0x174/0x580
[  502.267660][T14285]  ? trace_irq_disable+0x3b/0x140
[  502.267680][T14285]  ? clear_bhb_loop+0x40/0x90
[  502.267696][T14285]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  502.267712][T14285] RIP: 0033:0x7f4a82ea7407
[  502.267726][T14285] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  502.267739][T14285] RSP: 002b:00007ffcb9b1c5d0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  502.267756][T14285] RAX: ffffffffffffffda RBX: 00007f4a8362e880 RCX: 00007f4a82ea7407
[  502.267767][T14285] RDX: 0000000000000000 RSI: 00007ffcb9b1cf1c RDI: ffffffffffffff9c
[  502.267778][T14285] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[  502.267788][T14285] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[  502.267797][T14285] R13: 00007ffcb9b1c820 R14: 00007f4a83795000 R15: 000055b17686d4d8
[  502.267815][T14285]  </TASK>
[  502.267821][T14285] 
[  502.563684][T14285] Allocated by task 13043:
[  502.568074][T14285]  kasan_save_track+0x3e/0x80
[  502.572734][T14285]  __kasan_kmalloc+0x93/0xb0
[  502.577302][T14285]  __kmalloc_cache_noprof+0x31c/0x660
[  502.582651][T14285]  em28xx_v4l2_init+0x10b/0x2eb0
[  502.587560][T14285]  em28xx_init_extension+0x120/0x1c0
[  502.592819][T14285]  process_scheduled_works+0xb5d/0x1860
[  502.598340][T14285]  worker_thread+0xa53/0xfc0
[  502.602906][T14285]  kthread+0x389/0x470
[  502.606953][T14285]  ret_from_fork+0x514/0xb70
[  502.611516][T14285]  ret_from_fork_asm+0x1a/0x30
[  502.616256][T14285] 
[  502.618557][T14285] Freed by task 13043:
[  502.622593][T14285]  kasan_save_track+0x3e/0x80
[  502.627247][T14285]  kasan_save_free_info+0x46/0x50
[  502.632242][T14285]  __kasan_slab_free+0x5c/0x80
[  502.636984][T14285]  kfree+0x1c5/0x640
[  502.640851][T14285]  em28xx_v4l2_init+0x1685/0x2eb0
[  502.645845][T14285]  em28xx_init_extension+0x120/0x1c0
[  502.651116][T14285]  process_scheduled_works+0xb5d/0x1860
[  502.656634][T14285]  worker_thread+0xa53/0xfc0
[  502.661198][T14285]  kthread+0x389/0x470
[  502.665240][T14285]  ret_from_fork+0x514/0xb70
[  502.669813][T14285]  ret_from_fork_asm+0x1a/0x30
[  502.674565][T14285] 
[  502.676867][T14285] The buggy address belongs to the object at ffff88802b1f0000
[  502.676867][T14285]  which belongs to the cache kmalloc-8k of size 8192
[  502.690896][T14285] The buggy address is located 2144 bytes inside of
[  502.690896][T14285]  freed 8192-byte region [ffff88802b1f0000, ffff88802b1f2000)
[  502.704844][T14285] 
[  502.707155][T14285] The buggy address belongs to the physical page:
[  502.713555][T14285] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b1f0
[  502.722285][T14285] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  502.730753][T14285] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  502.738275][T14285] page_type: f5(slab)
[  502.742233][T14285] raw: 00fff00000000040 ffff88813fe1c280 dead000000000100 dead000000000122
[  502.750788][T14285] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000
[  502.759345][T14285] head: 00fff00000000040 ffff88813fe1c280 dead000000000100 dead000000000122
[  502.767988][T14285] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000
[  502.776632][T14285] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[  502.785286][T14285] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  502.793931][T14285] page dumped because: kasan: bad access detected
[  502.800323][T14285] page_owner tracks the page as allocated
[  502.806031][T14285] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 13482, tgid 13481 (syz.2.2514), ts 462366976445, free_ts 461853421673
[  502.826929][T14285]  post_alloc_hook+0x22d/0x280
[  502.831680][T14285]  get_page_from_freelist+0x2593/0x2610
[  502.837206][T14285]  __alloc_frozen_pages_noprof+0x18d/0x380
[  502.842991][T14285]  allocate_slab+0x77/0x660
[  502.847469][T14285]  refill_objects+0x339/0x3d0
[  502.852119][T14285]  __pcs_replace_empty_main+0x321/0x720
[  502.857637][T14285]  __kmalloc_cache_noprof+0x392/0x660
[  502.862985][T14285]  sg_open+0xd9b/0x1a40
[  502.867113][T14285]  chrdev_open+0x4cd/0x5e0
[  502.871501][T14285]  do_dentry_open+0x822/0x13a0
[  502.876237][T14285]  vfs_open+0x3b/0x340
[  502.880278][T14285]  path_openat+0x2e08/0x3860
[  502.884845][T14285]  do_file_open+0x23e/0x4a0
[  502.889323][T14285]  do_sys_openat2+0x113/0x200
[  502.893972][T14285]  __x64_sys_openat+0x138/0x170
[  502.898797][T14285]  do_syscall_64+0x174/0x580
[  502.903363][T14285] page last free pid 5652 tgid 5652 stack trace:
[  502.909658][T14285]  __free_frozen_pages+0xc1c/0xd30
[  502.914758][T14285]  __slab_free+0x274/0x2c0
[  502.919151][T14285]  qlist_free_all+0x99/0x100
[  502.923717][T14285]  kasan_quarantine_reduce+0x148/0x160
[  502.929152][T14285]  __kasan_slab_alloc+0x22/0x80
[  502.933976][T14285]  kmem_cache_alloc_noprof+0x2bc/0x650
[  502.939411][T14285]  copy_fs_struct+0x4f/0x270
[  502.943973][T14285]  copy_fs+0x6c/0x150
[  502.947927][T14285]  copy_process+0x1dc1/0x4440
[  502.952578][T14285]  kernel_clone+0x2d7/0x940
[  502.957055][T14285]  __x64_sys_clone+0x1b6/0x230
[  502.961793][T14285]  do_syscall_64+0x174/0x580
[  502.966354][T14285]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  502.972222][T14285] 
[  502.974523][T14285] Memory state around the buggy address:
[  502.980128][T14285]  ffff88802b1f0700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  502.988165][T14285]  ffff88802b1f0780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  502.996197][T14285] >ffff88802b1f0800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  503.004228][T14285]                                                        ^
[  503.011390][T14285]  ffff88802b1f0880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  503.019421][T14285]  ffff88802b1f0900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  503.027451][T14285] ==================================================================
[  503.038865][   T10] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  503.095508][T13035] usb 2-1: USB disconnect, device number 124
[  503.103983][T13035] em28xx 2-1:0.89: Disconnecting em28xx
[  503.108999][   T10] usb 4-1: device descriptor read/8, error -71
[  503.149358][T13043] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input42
[  503.204897][T14285] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  503.212144][T14285] CPU: 1 UID: 0 PID: 14285 Comm: v4l_id Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  503.222734][T14285] Tainted: [L]=SOFTLOCKUP
[  503.227055][T14285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  503.237106][T14285] Call Trace:
[  503.240381][T14285]  <TASK>
[  503.243313][T14285]  vpanic+0x56c/0xa60
[  503.247296][T14285]  ? __pfx_vpanic+0x10/0x10
[  503.251806][T14285]  ? irqentry_exit+0x218/0x8b0
[  503.256568][T14285]  panic+0xc5/0xd0
[  503.260287][T14285]  ? __pfx_panic+0x10/0x10
[  503.264712][T14285]  ? v4l2_open+0x395/0x3a0
[  503.269136][T14285]  check_panic_on_warn+0x89/0xb0
[  503.274081][T14285]  ? v4l2_open+0x395/0x3a0
[  503.278502][T14285]  end_report+0x73/0x170
[  503.282756][T14285]  ? v4l2_open+0x395/0x3a0
[  503.287179][T14285]  kasan_report+0x128/0x150
[  503.291685][T14285]  ? v4l2_open+0x395/0x3a0
[  503.296108][T14285]  v4l2_open+0x395/0x3a0
[  503.300361][T14285]  chrdev_open+0x4cd/0x5e0
[  503.304780][T14285]  ? __pfx_chrdev_open+0x10/0x10
[  503.309725][T14285]  ? fsnotify_open_perm_and_set_mode+0x135/0x6d0
[  503.316064][T14285]  ? __pfx_chrdev_open+0x10/0x10
[  503.321000][T14285]  do_dentry_open+0x822/0x13a0
[  503.325770][T14285]  vfs_open+0x3b/0x340
[  503.329842][T14285]  ? path_openat+0x2df0/0x3860
[  503.334609][T14285]  path_openat+0x2e08/0x3860
[  503.339208][T14285]  ? __pfx_stack_trace_save+0x10/0x10
[  503.344583][T14285]  ? stack_depot_save_flags+0x33/0x810
[  503.350042][T14285]  ? __pfx_path_openat+0x10/0x10
[  503.354976][T14285]  ? __x64_sys_openat+0x138/0x170
[  503.360001][T14285]  ? __lock_acquire+0x6b5/0x2cf0
[  503.364938][T14285]  do_file_open+0x23e/0x4a0
[  503.369445][T14285]  ? __pfx_do_file_open+0x10/0x10
[  503.374479][T14285]  ? _raw_spin_unlock+0x28/0x50
[  503.379329][T14285]  ? alloc_fd+0x64b/0x6c0
[  503.383657][T14285]  do_sys_openat2+0x113/0x200
[  503.388332][T14285]  ? __pfx_do_sys_openat2+0x10/0x10
[  503.393526][T14285]  ? exc_page_fault+0x6a/0xc0
[  503.398201][T14285]  ? do_user_addr_fault+0xc6f/0x1340
[  503.403485][T14285]  __x64_sys_openat+0x138/0x170
[  503.408331][T14285]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  503.414397][T14285]  do_syscall_64+0x174/0x580
[  503.418985][T14285]  ? trace_irq_disable+0x3b/0x140
[  503.424005][T14285]  ? clear_bhb_loop+0x40/0x90
[  503.428679][T14285]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  503.434564][T14285] RIP: 0033:0x7f4a82ea7407
[  503.438974][T14285] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  503.458573][T14285] RSP: 002b:00007ffcb9b1c5d0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  503.466981][T14285] RAX: ffffffffffffffda RBX: 00007f4a8362e880 RCX: 00007f4a82ea7407
[  503.474930][T14285] RDX: 0000000000000000 RSI: 00007ffcb9b1cf1c RDI: ffffffffffffff9c
[  503.482877][T14285] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[  503.490822][T14285] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[  503.498765][T14285] R13: 00007ffcb9b1c820 R14: 00007f4a83795000 R15: 000055b17686d4d8
[  503.506715][T14285]  </TASK>
[  503.510067][T14285] Kernel Offset: disabled
[  503.514377][T14285] Rebooting in 86400 seconds..