last executing test programs:

4m32.870030182s ago: executing program 3 (id=1412):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f091ccf68a710300f23c58140000ffffffffffffffdf00", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)
shutdown(r0, 0x1) (fail_nth: 1)

4m32.725359668s ago: executing program 3 (id=1414):
r0 = syz_open_dev$video4linux(&(0x7f00000005c0), 0x7ffffffbfffffffd, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000240)={0x0, 0x0, {0xfffffffe, 0x8, 0x100b, 0x7, 0x0, 0x6}})
r1 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x8001, 0x2)
ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r1, 0x80184132, &(0x7f0000000080))
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r2, &(0x7f0000001d80)=[{{&(0x7f00000002c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)=""/174}, {&(0x7f0000000400)=""/37}, {&(0x7f0000000440)=""/118}], 0x0, &(0x7f0000001680)=""/138}, 0x9}, {{&(0x7f0000001740)=@in6={0xa, 0x0, 0x0, @remote}, 0x0, &(0x7f0000001c40)=[{&(0x7f00000017c0)=""/254}, {&(0x7f00000018c0)=""/10}, {&(0x7f0000001900)=""/159}, {&(0x7f00000019c0)=""/255}, {&(0x7f0000001ac0)=""/137}, {&(0x7f0000001b80)=""/157}], 0x0, &(0x7f0000001cc0)=""/169}, 0xe}], 0x1, 0x0, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f0000000600)={'security\x00', 0x1000, "5f62b66e1389279b88df283b6d61b5d647f5ae24555461d925def0fc7b110e697a1856302b6f3a637986b7ca200733b5072f18c667385b12551322f12fca4994a5413f42f26d943b3d1562682f6ffe24339c93d51e6a9b91898b8d7b8e73d3aad77358e38371633d76b102ddda4430918018c84b5381796a7b356f84d40d17b17c625675c47980e666bdd11cbd0baa1a5f79c8c2651bf0543ec80df28fda0f53cc497536c1c93d56a3d27657bc238939d17912562a339ae2d7ae42f5ff5ca27f01d22038a02148075e5733032cc959562b6b21d6cc035cfa322d21da981f5bc177f95855599609bdd7ead1952f6061d0adb89a6758ba68aa0cc2e0890cbd1ed3126d2bdcf939827f761f46552da808192a9c9033dd45ba0f9159aa2f75aa92ae944fd0501482db54c008c2602df1c25a97b6bc860cbef45833085f35d431a07823698bcfbfb2fa58582d371fec01516f7ca69d6f58c5ec85682f9590f9cf3042e8d2fa0855906752dc12423430392b50b7d7478e37ceed387c4cc4df50622fddc742749012a42576b974f28049eb00072dca7cbce812d27ba36e08818385c5ab4600df04a5fe9b21ae14744095555e9ab9078b386f69dc5df19020243e74af5434db61413132f901f344ede3cd1fbe55568b5fbda00863481265862d6a8bab217ad039d042d77b0bffa0b0c79ef4e72723868fe8a803182ca56a34c5803b334c6a9227e90bee341c4ea2c397e561edcb77f641a6483234ec4616f2854530502b0f48679c6192add8e928388ad68c2526773d5ec3ddbec7e81e81b9f093a6d611fa3e07f101a7682ac514867b11617e3dfe02ae737ed9d07238df51bebc3709b0d23214b1f880617564906a02f2aea6783797f7505db66a8d30cd0fbd463fa3a6690d0872fe713167bf3416e5e68318360de008dcc96db67a8adb66214b9380a5486c0c6f297d4e109105d738f082a9f848dad5fd6e408f24ac3c9002b46900360e12eb0ea9d2a7530ef46dfb686e05306dfc27b4c2ab9d743763c9c2f1e4d03bb8ac01233621eec906e482443814a50a9a42939eec322cbad40d923fa2ad47b37198bc50b1e55abcff1cc1f1e8097505c57ce9511da5d00cca9098c2f387e1ee9d972fe1c89039934379191e4f9f867c96301e33a0be8ddf060b02d0aa314d9d1fcf92b85ae67c9ed2f016e851f57683c995a560ac695175eca59d93382f3591ab2adea7ad005946927f347f66c550344d6265f2f7b390f2ce0fbfe0ac855d3ac707e70bd2380b2b96f32d3daf09993a5c25941430f3ca656f1e6aeb1687fb3ca099afc88ec4c60fa7c2fb52239c02fc4ce6db65341603b63f2796d10720c492cb42e22b8ed5926c37ee70c13cdfb9b70d55a122dd960b249fd3d3be5e974ccd72e18d3959e72256e92ae312aef1ebfd053469ea36099d92380e6606c9fdc0ec0b7a46389d8853dbce484d2795014701bbfcd02cba8d434c4c2040ff66985ea9e126bd1a8316a7c350b87465e2b2dd377afd55d0ea2cd94cf9caa684a9fac1004dd001600b1cc98c7fb6d3a0c591597123afb73bbb7313210807b596248541e015f07fb04ee1869f17b03d83f526fbac88ecd026dae2ec9f5d84047aafb7f0607db4ffc784a48c791a069a956cd1acd47826cbc4ca99212aac4fe3c1e4851a9478641795bb991d8f7af59a7b4c95c5fa3e4e0c2ea25e36feeef980b88a2c4dd52f6197d4e5958b6746aa29887fad98fc29c3923fe1f963c33947acb700df8623c415c79f940efdca59b6b8b94176ce5aad7bbd56a70f62ac324f4c2ea52f97346a12a39267841a2e981046568873f608c6e178b4792dadff175f4b029095375513a70b79fe62e15140ba1ba86e6cc8cba609db7fc6208ade261a7b6649b2ed95e47b218bf1d9f5df317b0ede994f055c43e06eed9338d69e9912f6754e0c45ca09e0006921162f133ecaf89ea0998a065dfe429c561fed5130b072310bd6159843b8ce99b61375301877a3541a353387919be8a085128493841cd644c7ba6fcca40bde26ab4637f41ac33834b65a09e4291dc5c3ff0d0e0a351889d3aa822670241cf6ba2efba5c87d2378e77dda619b3895538f8775875977058bd50edde8600411ce6478ed24f9b667845bc09a19e349592af8925f746ce9c3a1cf413db36ef35d434b1b6d1f0a6e2da16fcba82be31a4578d7a86a3b5a562ee14e774d05c14ba80c068a0c99e5ee882088e24a4c45abb4c9e8100a87802513787940ba393bac33423467e87673080a2c295735b0f3ca4d6557958e6b2eee9781d8dc593b11d689190c76e613a5e6e73a8b76960e00c7da0dbbf664627c337ec95e36ff436c2d1b19c5b2fde33e0aa41554e4e90d8f959988b8c590606efabffb4d4edb36805792fcf3bc4f9e044957bd9bd5202b927b5c479a9abe6840fbd05a5dbaf83b1fd5a8ce14a585ac26ba739c7ef9a52eaf5cf543d09c1b9b024d829d289e6d3bde4f375cd83314efa25f119af7a7bab16186d0d599fe9a17d0499a2869e1db2e924860efe692b0efef62833eee640637f2bd008be5aa516b0e03efe52b9b187e5b44b21a5e6d34d281057fb761fc104a2e84dee8ee00eecfd22c9b3f2167686e115b73535ef70dd4e037decdbaf00e14e6b66a8aea44ca95a9c35438d259ef6a1b066de0cddcafbd033e35ee0a4bd26201f24e3e923923e62a0432e9ca21aeec21a7d2530c1dd7b6a2364f2738caffcae975099be0e63ddc0a58850b5f07d17ef10bb6257a92bb7092ea099e959c54387a61c6808f2c93ed38163fcc0ba81aea34737cc568b0c9d2a60af46ffaf645fe991d1745253392d6ddd62da5a7540e3e72672b8efae4124bb47af0d6b75ed2f4cc7a38d7e1eab8a773bf365562b11686566d64f681df358e329481cfdec4eabf57b00d24eef3a0ba2407eb56e9708b765c0eb3babae14f1ae9317cd66306fdb4b6f09841a1d3f58d49879055c53fe4704e3f534361dc24e78639b1f700bb814bb76b856be6bd6b7abda3d9ad0ef7a47d0844f9b6a55763d404d664c3037b84d285607e458938170a1332208366575194aeaaff55c99fd208d5b225bacb156df397d671ba6316a458dbb6aec967f3043a771db83e03c95db1e41485af6295b8c5493f700eba08fde95f2a6be17beed7650e037bd2f6763f39d32050cb43a1b71bb10e8037bccd12450625d452a5fa3ab12cb537ddf82316d1e182eb828990629ed40bf0e4548a45814573763d259395534b5f762c943089bcf1cb7cd22b82dda901b2b4fe904048768902eedf89d6ff0994007e21c974a0c67498a36a508f9e3ad351528457d57c52686ccfa574d041db04ed4d7075b6c397ed5b2287fc7ff146f61e15ec41fbf3f53120621ad8dbe91393185a6cfd96ad5bdd40e1c811142f963a08cfdf60f7c371d8f4bc905f1cfae017377adcb2bd0a990f92e9817f76a180188c93ee55b76fa53471f2472134837f4f0a2ad0b171ea8490b98368ba7507eaf0e2a8a282cd5f0674394c580852ffd3ccb61f3eea6ac601289418752d4e51d9585d420e0b1a5d6a3e060a1becf18ed9c384628c549483b47b554c0c1da4c52327365118c335ff202a668d4b895b0f54a98b306b760ffbd76b4e120bda7acb0fb412e00658281ec1d33098887b466d121d7d781caf5a12ef807d72e8d6ced59927ac45a4555c4b7d9da13d4bbf5fcd10a2ffe04c69692030cd5943870347c50e563cc52e5a2e5d375624b18439130647b35b1597cc768a2589b3ef41dec39a41c4a13c495f9e51d262c997ca389c8b8ba5eec289c0b012aca355ca1f965cd0b0d0af791cb0a84a54209fe7afc064e6f0c06bcff5ca7a9ff5dfe668f202a37f3bebd476108e1deca728696792605ef30f2eea984efae6a264dcd9fc4fd48d2584344afca8760275d93348187fcd7fe2ff8457b30cadde22331d63c0d5315ae425af353ec6a2f8ed5f6b2a1fb30021de3c41e07454e120e7e434af16f0e0422058931a99eb7474f85a01d7308dfab1dfda132fe4d77c9761f2e224fcdb2a32611f209eb534e9c19f181455d017e2107f024f5f893dc76c2e2c008924c7db21fda11c93e334d7aeea66a44397691a989a116ecd685a5fe4ea4e02d3f7dc0617bd08fa675aa5d715ed132877927918decc2f4143c306beff65c56a0633e75ad7d75fdcf773195e3c037b1972fa3ff0d838d49e1e20efd3743f38b04227e42eb2aadc0ed65810f1bd70d116410041ceecb71353454074a73b78c9e8093178a78ff52e18fec9f945bd587b5899695c6bce6d3cbcaf27af65809b846c1dca98f56ffffa8c174508c41c8457a40faae20ab4d93330da05f0378d7d7d19ee93da29070ccf1fe983f72240265b1d81071e42e016ed0fb25884553a7521ee1a4d5edb4b8b3737553df0f1da029ff8ec40e8ccb80c25a3832a09c86d761b6e6162eebca833a739a0774c73c78d58938dd4ad22eb75a72d4cfe5a43d28555b5b64e71e3e6a74e234ed3c0827da6be7f9a5b73227329da8572830900e9046d919a606847ee78f4dc87e719630a7d0267a852f24727e87a5ebd44dc837f6dd0d45cf9fd86b5e78e10644d7b1d30ab965c61c661f834f95e37236d24877be3f9840682df04692d7bb5908fa012f80ddb927fd46a15331b9a1cda8889aa5869fbd022b800b93c7e3eec36ccd857b0d5bb2454cc8bfddb5fc0665c0c10836312633d0d02ad858af0c408a6eb930d2334a5e78081f3391d173bb9b8377ddec5a403341ad0dcac67654a370b5ace87ca14a96907991addbd4b0f8fea62ebcf140d1f03b9c27143b1debb5ae149cd02b6cce1458d1562109be57487aef5596d5aabc207a97db5f0434308c1c73772ce3c2c872de5434823c3c0ba7e08265058e37088e27b7685a584924a783aa66dca9f0119c361b24378c7f0c75365c4ae8591367d8c8b6f2d1444c9040e41f11b8a6de511136cc5149620c7555b78beac5f087fad69543dcc78b53cf3c591c94439758e0c71167f9bbdd1986ebe78964ea077be77e2c6672e42ed92f8928ff4e6c6add3826eca61a9d8f1101d5c0c269f4c97e885fe4c39fb3da8b86d96be6dfdcef33428a53e4ed0993d9d430a491a92cf86ed1daf19f928832e4b2f3a83b27d3a3640fd9c9d763caa1aa421f95fbabf4f224f81c634a08e89ddb8d826d5f32607536bb12ead9bcc261de50e9560d2815b7f33e5d0d8683e6a1d6b045e0ba6189994b6c8430fc8c096063052ba194c8dad445d1ba27a441f94aefbf810bcf8172a5a8268742264423eb2a936cda3446fda41bb6f7a25506febac6f2a68cbb2387512e9ca0b6039911989ebf6500c9b35ed10c39ac762dda9fa3e6feaa42f39402a05c7fe48c5c75f40a28fc265499bc92d3ee220a6d27fc78936c675f5a591f9581e7a262034b8af562a68f0b5d66c7766337ea8df67c8e75fbf802181a98744cff72d45e6c4ae31303706f09103e3f579b1ecb92e281d5339c6b853d39aea2d8adc617f9d84830e5c9ec9670ac20d5cd5a431101f559e2f7829599058c538117024de73d593c09d6ae99d1f3433e5768919b6a9be315b215616e1eeb580f4dfa590251b6651cca15c815824bc958884dd3e98eae314eb7527fb50685e15e7d357c1edc7233b9522dcdfbd8ae272a7c82b387985213794a7f41c6d041817714626a72201fd8f87600ad021f6d85d241f9221d5f17389162ad55c92adbd887f6a711998f0800baa006cbbf8eef3ca7f91239a8da97abe4b6de4d3ec08fd0cb765692f57a6825915f88e7afd1ada"}, &(0x7f0000001640)=0x1024)
setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x1}, {0x1, 0x1, 0x1}}, {{0x4, 0x1, 0x1}, {0x4, 0x0, 0x1, 0x1}}], 0x10)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
getpeername$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, &(0x7f0000000100)=0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'bond0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf2500000000", @ANYRES32=r5, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES64=r4], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000)

4m31.901714102s ago: executing program 3 (id=1420):
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r3 = accept(r0, 0x0, 0x0)
sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x454}}, 0x0)

4m31.806349516s ago: executing program 3 (id=1421):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x900800, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x8, 0x7}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x26044028}, 0x800)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[])
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00')
sendfile(r5, r5, &(0x7f0000000000)=0x2eb4, 0x2000007ff)

4m30.774454412s ago: executing program 3 (id=1427):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r3 = socket$isdn(0x22, 0x3, 0x26)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x20, 0xffffffff}, 0x0)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000002500)={&(0x7f0000000400)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000480)="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", 0xfe}, {&(0x7f0000000580)="0db9b8705e6b2b5965ade7d308ef8735f50471df924f0d786c9e5fddcf977a", 0x1f}], 0x2, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000280000000000000001000000010000009ffbe390f6497b58ee5747db6d85bfd2e26083cc0b1c9c710f27bbccbd643f1c7236a800206001d8619f18e233425ddaeb74ef1d77e88917e5960daefb8731cbed94e542cce33887d516a6e3786477006086c8d5b68fe1a17f0000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32, @ANYRES32=r2, @ANYBLOB="34000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=<r5=>r3, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c00000000000000010000000200", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x138, 0xc0}, 0x80)
ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x15)
ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000340)={0x400000100002f})
write$uinput_user_dev(r4, &(0x7f0000000800)={'syz0\x00', {0x2, 0x10, 0x2, 0x4}, 0x48, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x1, 0x0, 0x0, 0x0, 0x2000, 0xfa, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x80, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x200, 0x7, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x9, 0x0, 0x200, 0x0, 0x2, 0x0, 0x3, 0x5, 0xfffffffd, 0x4000000, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x2aa6, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x4, 0xfffffffe, 0x0, 0x0, 0x0, 0xb, 0x1, 0x4000000, 0x0, 0x1, 0x4, 0x1000, 0x80, 0x0, 0x200, 0x0, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x4, 0x0, 0x6, 0x1, 0x0, 0xbda6, 0xe, 0x0, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x40000000, 0x0, 0x74e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x40, 0x0, 0x0, 0xbd, 0x0, 0xff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x101, 0x80000020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5cb9, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', <r8=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001400090a0000000000000000021f4800", @ANYRES32=r8, @ANYRES16=r5], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r8, {}, {}, {0xfff1}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x4000800)
ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3)
r9 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r9, 0x0, 0x0, 0x0)
shutdown(r9, 0x1)
getsockopt$bt_hci(r9, 0x84, 0x80, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f)
ioctl$UI_DEV_CREATE(r4, 0x5501)
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
socket(0x28, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000340)={0x80, 0x40000094, 0x0, 0x0})
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)

4m30.485418596s ago: executing program 3 (id=1429):
r0 = inotify_init()
set_mempolicy(0x3, &(0x7f0000000040)=0xe3, 0x8)
open(&(0x7f00000001c0)='./bus\x00', 0x143bc2, 0x1c0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
fallocate(r0, 0x57, 0x7, 0x6)
setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000400)=0x2, 0x4)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0)
r2 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x30})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB="120100005fb8e520cd0c8000834a0102030109021b00020000000009046f0000aad823000904"], 0x0)
syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, &(0x7f0000000bc0)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="e01506"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000640)={0x40, 0xb}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x20, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r3)
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$rtl8150(r3, &(0x7f0000000100)={0x14, &(0x7f0000000080)={0x40, 0x23, 0x16, {0x16, 0x31, "d0c41d65c4afbc55baab997333ff6190f1d1cf93"}}, &(0x7f00000000c0)={0x0, 0x3, 0x26, @lang_id={0x4, 0x3, 0x2009}}}, &(0x7f0000000380)={0x2c, &(0x7f00000001c0)={0x0, 0xd, 0xf7, "31db99aadd09f1377154c3b6b0df94db9b9af7547fced921731be933336c8037eb1eb71f94e3dd1bde5dad271cb2e524ff86711419032f8642768f037e1540adb7cb044af9aace365d2c57d964d11cae7970fb1073aa62df84e21841a77df6c1ea19f19f4d2e2a420f650732f8d1a88328c8dc29eb5bf7c639f25feeee674f490c39ccb5f5c69a4cfeefe81a1069260b5c1fa801d9ca5bd0f9d7f6aaa5f258a6c31ffaedb3e2b0bac9ceb67724450ea3e69c15850fe1d30cbe4359a696a6dc84292c921d92de97f7960cc5af3050572d8d8eb6aef4586173edd7978c192a3f7c8ff3917e1eb8d34226932cf18a5b9878a7d1088a6a4bd6"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x9b}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000300)={0xc0, 0x5, 0x1, "8a"}, &(0x7f0000000340)={0x40, 0x5, 0x4, "da3b78e8"}})
syz_usb_control_io$printer(r5, &(0x7f0000000000)={0x14, &(0x7f0000000440)={0x20, 0xd, 0x57, {0x57, 0x1, "59167e1d031b4bbfc015b51f62f82fdded90c0e76ac5458dffe6c78678df4ea989e2bd98f7b3299a02d1b0fac1bc8e8e481c6da0945731d99638651e189148ea28bc5272299420469e73e823555c80f908b09ef2cf"}}, &(0x7f00000004c0)={0x0, 0x3, 0x87, @string={0x87, 0x3, "41e80fcddbb2ede78aa50737cd02fc930d5f34d8af655eef26da7c2ab31fed9002eb67ee71fb8ff449ffc8f713671ea6b0c2c5c88e4fdca496a4cb10f54d3f612dde59d1b1d0c7677e82ecef35a09bf30c77528a98636c82142c897fcfac7f93549ba2f46525670943db130cad571d99646f7a3e808daa71fc94c2d3943b5b195ada3dd291"}}}, &(0x7f0000000840)={0x34, &(0x7f00000005c0)={0x40, 0x3b, 0xe, "f53407c87a85b1b6cf4eef1ab3a4"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0xd}, 0x0, 0x0, &(0x7f0000000800)={0x20, 0x0, 0x1, 0x8}})
ioctl$EVIOCRMFF(r4, 0x550c, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000001200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000040), 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
ftruncate(r0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004580)={0x1, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000010000000000009f09000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b703000000002d85000000b2000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200000000000085000000d4000000b70000020064000095000000000000000e8209997be8be8809a7a022cdc8fc61000000"], &(0x7f0000004380)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)

4m30.190183116s ago: executing program 32 (id=1429):
r0 = inotify_init()
set_mempolicy(0x3, &(0x7f0000000040)=0xe3, 0x8)
open(&(0x7f00000001c0)='./bus\x00', 0x143bc2, 0x1c0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
fallocate(r0, 0x57, 0x7, 0x6)
setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000400)=0x2, 0x4)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0)
r2 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x30})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB="120100005fb8e520cd0c8000834a0102030109021b00020000000009046f0000aad823000904"], 0x0)
syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, &(0x7f0000000bc0)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="e01506"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000640)={0x40, 0xb}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x20, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r3)
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$rtl8150(r3, &(0x7f0000000100)={0x14, &(0x7f0000000080)={0x40, 0x23, 0x16, {0x16, 0x31, "d0c41d65c4afbc55baab997333ff6190f1d1cf93"}}, &(0x7f00000000c0)={0x0, 0x3, 0x26, @lang_id={0x4, 0x3, 0x2009}}}, &(0x7f0000000380)={0x2c, &(0x7f00000001c0)={0x0, 0xd, 0xf7, "31db99aadd09f1377154c3b6b0df94db9b9af7547fced921731be933336c8037eb1eb71f94e3dd1bde5dad271cb2e524ff86711419032f8642768f037e1540adb7cb044af9aace365d2c57d964d11cae7970fb1073aa62df84e21841a77df6c1ea19f19f4d2e2a420f650732f8d1a88328c8dc29eb5bf7c639f25feeee674f490c39ccb5f5c69a4cfeefe81a1069260b5c1fa801d9ca5bd0f9d7f6aaa5f258a6c31ffaedb3e2b0bac9ceb67724450ea3e69c15850fe1d30cbe4359a696a6dc84292c921d92de97f7960cc5af3050572d8d8eb6aef4586173edd7978c192a3f7c8ff3917e1eb8d34226932cf18a5b9878a7d1088a6a4bd6"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x9b}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000300)={0xc0, 0x5, 0x1, "8a"}, &(0x7f0000000340)={0x40, 0x5, 0x4, "da3b78e8"}})
syz_usb_control_io$printer(r5, &(0x7f0000000000)={0x14, &(0x7f0000000440)={0x20, 0xd, 0x57, {0x57, 0x1, "59167e1d031b4bbfc015b51f62f82fdded90c0e76ac5458dffe6c78678df4ea989e2bd98f7b3299a02d1b0fac1bc8e8e481c6da0945731d99638651e189148ea28bc5272299420469e73e823555c80f908b09ef2cf"}}, &(0x7f00000004c0)={0x0, 0x3, 0x87, @string={0x87, 0x3, "41e80fcddbb2ede78aa50737cd02fc930d5f34d8af655eef26da7c2ab31fed9002eb67ee71fb8ff449ffc8f713671ea6b0c2c5c88e4fdca496a4cb10f54d3f612dde59d1b1d0c7677e82ecef35a09bf30c77528a98636c82142c897fcfac7f93549ba2f46525670943db130cad571d99646f7a3e808daa71fc94c2d3943b5b195ada3dd291"}}}, &(0x7f0000000840)={0x34, &(0x7f00000005c0)={0x40, 0x3b, 0xe, "f53407c87a85b1b6cf4eef1ab3a4"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0xd}, 0x0, 0x0, &(0x7f0000000800)={0x20, 0x0, 0x1, 0x8}})
ioctl$EVIOCRMFF(r4, 0x550c, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000001200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000040), 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
ftruncate(r0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004580)={0x1, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000010000000000009f09000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b703000000002d85000000b2000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200000000000085000000d4000000b70000020064000095000000000000000e8209997be8be8809a7a022cdc8fc61000000"], &(0x7f0000004380)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)

14.653217627s ago: executing program 1 (id=2550):
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x4, 0x36, &(0x7f00000002c0)=ANY=[], 0x0)
writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$EVIOCRMFF(r0, 0x40085507, &(0x7f0000000100)=0xb)

13.816686917s ago: executing program 1 (id=2555):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x10001, 0x0)
ioctl$PPPIOCGIDLE32(r0, 0x8008743f, &(0x7f0000000100))
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa0800060006"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r2, 0x1ff)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r4 = accept(r2, 0x0, 0x0)
sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[], 0x454}, 0x1, 0x0, 0x0, 0x4c841}, 0x0)
syz_open_procfs(0x0, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000005d0d3087d07aa04d85b0102030109021b000f000000000904"], 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_WOL_SET(r4, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000001b40)={0x14, 0x0, 0x400, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x44894}, 0x8000)

10.685400724s ago: executing program 1 (id=2578):
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00')
writev(r0, &(0x7f00000000c0), 0x0)
mount_setattr(r0, 0x0, 0x800, &(0x7f0000000080)={0x8, 0x100088, 0xb32b5337c03bd301}, 0x20)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_netfilter(0x10, 0x3, 0xc)
listen(r1, 0xfffffffc)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, 0x0, 0x4)
connect$rxrpc(0xffffffffffffffff, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
close(r6)
recvmsg(r5, 0x0, 0x2)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10)

9.858195179s ago: executing program 1 (id=2587):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050)
sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x510}}, 0x0) (fail_nth: 2)

9.741232915s ago: executing program 1 (id=2589):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000004e00)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='@', 0x1}], 0x1, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
recvmsg$can_j1939(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/20, 0x14}], 0x1}, 0x2142) (fail_nth: 1)

8.929546351s ago: executing program 1 (id=2590):
r0 = syz_open_dev$usbfs(&(0x7f0000000200), 0x200, 0xa401)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000400)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x0, 0x60, 0x0, 0x0, 0xc, 0x0, 0x0, 0x5, 0x5f8480, 0x0})
r1 = syz_io_uring_setup(0x450, &(0x7f0000000040)={0x0, 0x9398, 0x40, 0x3, 0xd1}, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_MEM_REGION(r1, 0x22, &(0x7f0000000240)={&(0x7f0000000200)={&(0x7f0000000140)="4a52227213", 0x5, 0x1, 0xfff}, 0x1}, 0x1)
mprotect(&(0x7f00001ae000/0x3000)=nil, 0x3000, 0x2000001)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)
preadv2(r2, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r3, &(0x7f00000000c0), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', <r4=>0x0})
sendmsg$can_bcm(r3, &(0x7f0000000000)={&(0x7f0000000040)={0x1d, r4, 0x2000000}, 0x10, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=r4, @ANYBLOB="00000000010000000000000084"], 0x48}}, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)

6.437230435s ago: executing program 5 (id=2599):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_open_dev$radio(&(0x7f0000000940), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_QUERYMENU(r2, 0xc02c5625, &(0x7f0000000040)={0x98f904, 0x2, @value=0x5})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0xfffffe0000000001, 0xfa0f, 0xffffffff}, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0)
ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000000280))
connect$tipc(0xffffffffffffffff, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x2710, 0x2, 0x58000, 0x2000, &(0x7f0000ffc000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r4, 0x4138ae84, 0x0)
r5 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000", @ANYBLOB], 0x0)
r6 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f00000000c0)='asymmetric\x00', &(0x7f00000015c0)=@secondary)
keyctl$clear(0x7, r6)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
syz_usb_disconnect(r5)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_usb_connect(0x1, 0x0, 0x0, &(0x7f0000000b00)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x7b, 0x0, 0x1, 0x10, 0x6}, 0x5, &(0x7f0000000980)=ANY=[@ANYBLOB]})

5.307266379s ago: executing program 2 (id=2602):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]})
r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x10020004, r0})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r2 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7})
prctl$PR_SCHED_CORE(0x4d, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x2d, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)

4.486515805s ago: executing program 4 (id=2609):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
syz_open_dev$ttys(0xc, 0x2, 0x1)
r3 = syz_open_dev$ptys(0xc, 0x3, 0x1)
ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000080)={0xf83, 0xffff, 0x80, 0x5, 0x15})
writev(r3, &(0x7f0000000000)=[{&(0x7f0000000180)="b9972c8ef2fceca87edd6b3335ceb02b5c5d70a3ab5b52d10186a5dcb63b79a055d731f1ec68b711e56cc662b292206ba8743de0829656d904442fd6430d", 0x3e}], 0x1)
syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @remote}, {{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, {[@exp_fastopen={0x1d, 0x4}, @mptcp=@generic={0x0, 0xd, "5f75fc0d16907cbac1e505"}]}}}}}}}, 0x0)
sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000040), 0x0, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0xff}}, @ip_retopts={{0xec, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0xa5, 0x0, 0x4, [0x6, 0x3, 0x6a]}, @timestamp_addr={0x44, 0x4c, 0x97, 0x1, 0xc, [{@broadcast, 0x99}, {@loopback, 0xfffffff8}, {@rand_addr=0x64010102, 0x400}, {@private=0xa010100, 0xb0}, {@private=0xa010102, 0x7147}, {@private=0xa010100, 0x6}, {@rand_addr=0x64010102, 0xa86}, {@multicast2, 0xf2}, {@local, 0xce}]}, @cipso={0x86, 0x31, 0x3, [{0x7, 0xd, "33e73cec27e0bc1de6ad5d"}, {0x0, 0x5, "d4faf2"}, {0x1, 0xb, "baa0caa892764871a8"}, {0x5, 0xe, "58e3f9d4147918ba2f706e01"}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x4, 0x81, 0x1, 0x3}, @timestamp_prespec={0x44, 0x44, 0x13, 0x3, 0x5, [{@loopback, 0x4}, {@broadcast, 0x6}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x6}, {@remote, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@remote, 0xb}, {@broadcast, 0xe1b}, {@empty, 0x9}]}]}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0xd}, @private=0xa010100}}}, @ip_retopts={{0x48, 0x0, 0x7, {[@rr={0x7, 0x13, 0xe7, [@remote, @dev={0xac, 0x14, 0x14, 0x41}, @private=0xa010102, @local]}, @ssrr={0x89, 0x23, 0xb7, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2, @local, @local, @rand_addr=0x64010102, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @rand_addr=0x64010101}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0x210}, 0x4000)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x1, 0x2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004804}, 0x4000)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff3, 0xc}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x2c, 0x2, [@TCA_CGROUP_EMATCHES={0x28, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x18, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x84}, 0x40010)

4.333503841s ago: executing program 4 (id=2610):
syz_open_dev$sndpcmc(0x0, 0x0, 0x4c8380)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902120001000000000904"], 0x0)
r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2)
ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000000)={0xbcad, [0x0, 0x8001, 0x4, 0xc000, 0x94c, 0x100, 0x1, 0xfde8, 0x6, 0x8, 0x83, 0x400, 0x6, 0x4, 0x5, 0x16, 0x204, 0x2, 0x52, 0x0, 0x7fff, 0x4, 0x80, 0x9, 0x5, 0x5, 0xfff, 0xb12, 0x8, 0x8, 0x0, 0x1000, 0xe, 0xffff, 0x3, 0x10, 0x2, 0xb5e, 0x3, 0x2, 0x3, 0x203, 0x8000, 0x48, 0x8, 0x4, 0x9, 0x4], 0x7})
r1 = syz_open_dev$I2C(&(0x7f00000004c0), 0xfffffffffffff4ed, 0xae00)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000140)={&(0x7f0000000580)=[{0x0, 0x5800, 0x0, 0x0}, {0x9, 0x8001, 0x0, 0x0}], 0x2})

4.097419958s ago: executing program 2 (id=2611):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)

4.090613318s ago: executing program 2 (id=2612):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_open_dev$radio(&(0x7f0000000940), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_QUERYMENU(r2, 0xc02c5625, &(0x7f0000000040)={0x98f904, 0x2, @value=0x5})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0xfffffe0000000001, 0xfa0f, 0xffffffff}, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0)
ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000000280))
connect$tipc(0xffffffffffffffff, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x2710, 0x2, 0x58000, 0x2000, &(0x7f0000ffc000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r4, 0x4138ae84, 0x0)
r5 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000", @ANYBLOB], 0x0)
r6 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f00000000c0)='asymmetric\x00', &(0x7f00000015c0)=@secondary)
keyctl$clear(0x7, r6)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
syz_usb_disconnect(r5)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_usb_connect(0x1, 0x0, 0x0, &(0x7f0000000b00)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x7b, 0x0, 0x1, 0x10, 0x6}, 0x5, &(0x7f0000000980)=ANY=[@ANYBLOB]})

3.688836439s ago: executing program 0 (id=2613):
r0 = socket$pppoe(0x18, 0x1, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000001701000002000000fdffffff00000000"], 0x18, 0x1}], 0x1, 0x40800)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x55)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r2, 0xffffffffffffffff, 0x10, 0x0, @void}, 0x10)
ioctl$PPPOEIOCSFWD(r0, 0x40047452, 0x0)
r3 = fsopen(&(0x7f00000000c0)='9p\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000280)='port', &(0x7f00000002c0)='0', 0x0)
read(r3, &(0x7f0000000000)=""/158, 0x9e)
socket$pppoe(0x18, 0x1, 0x0) (async)
socket$alg(0x26, 0x5, 0x0) (async)
bind$alg(r1, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000001701000002000000fdffffff00000000"], 0x18, 0x1}], 0x1, 0x40800) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x55) (async)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r2, 0xffffffffffffffff, 0x10, 0x0, @void}, 0x10) (async)
ioctl$PPPOEIOCSFWD(r0, 0x40047452, 0x0) (async)
fsopen(&(0x7f00000000c0)='9p\x00', 0x0) (async)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000280)='port', &(0x7f00000002c0)='0', 0x0) (async)
read(r3, &(0x7f0000000000)=""/158, 0x9e) (async)

3.6215025s ago: executing program 0 (id=2614):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020bd289400000000000001090224"], 0x0)
kcmp(r0, r0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff)

3.280336976s ago: executing program 5 (id=2615):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x22a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x0, 0x8, "", [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x1, 0x2, 0x9, {0x9, 0x21, 0x3, 0x5, 0x1, {0x22, 0x73d}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0x6, 0x2}}}}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x13, &(0x7f0000000440)={0x5, 0xf, 0x13, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x7, 0xf, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x4, 0x9}]}})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000010902240001000040000904000000092105000001220500090581"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070d0000002a940183"], 0x0}, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00')
read$FUSE(r1, 0x0, 0x0)
ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0x200, 0xffff, 0x400, 0x404, 0xb, "02e0ef692c0d43b6"})

3.029627018s ago: executing program 4 (id=2616):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write$binfmt_misc(r0, &(0x7f0000000080)="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", 0x147)
ioctl$GIO_CMAP(r0, 0x4b70, 0x0)

2.920759564s ago: executing program 4 (id=2617):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={<r1=>0x0, 0x10001}, &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)={r1, 0x8000}, &(0x7f0000000180)=0x8)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={0x0, 0x1, r0, 0x4, 0x80000})
fsopen(&(0x7f00000002c0)='ocfs2_dlmfs\x00', 0x1)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000240)={0x8, @loopback, 0x4e22, 0x4, 'wlc\x00', 0x1, 0x401, 0x25}, 0x2c)
r2 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0xd040, 0x0, 0x6, 0x0, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x89901)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80000, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00')
sendfile(r5, r5, &(0x7f0000000000)=0x2eb4, 0x2000007ff)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc2604110, &(0x7f0000000040)={0x0, [[0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90000], [0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000008]], '\x00', [{0x2, 0x3}, {0x0, 0x62a0000}, {}, {0x0, 0x1, 0x0, 0x1}, {}, {0x0, 0xa}, {0x3}, {}, {}, {}, {0x0, 0x2}], '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000})
ioctl$IMDELTIMER(0xffffffffffffffff, 0x80044941, &(0x7f0000000000)=0x2)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r6)
sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r7, @ANYBLOB="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", @ANYRES32, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40)

2.79270217s ago: executing program 4 (id=2618):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0xfffffffd, {0xa, 0x10, 0x14, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1000e}, [@FRA_SRC={0x14, 0x2, @private2}, @FIB_RULE_POLICY=@FRA_GOTO={0x8}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}}, 0x8040)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0)
r3 = syz_open_dev$vim2m(0x0, 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000000f4cb85200000400", 0x30314442})
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00')
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r4 = socket$netlink(0x10, 0x3, 0x9)
r5 = dup(r4)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r6 = open(&(0x7f0000000040)='./file1\x00', 0x185142, 0x14c)
ftruncate(r6, 0x200004)
sendfile(r5, r6, 0x0, 0x1d00c0ce)

2.247590977s ago: executing program 0 (id=2619):
openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$kcm(0x10, 0x400000002, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$alg(0x26, 0x5, 0x0)
syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2840)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
memfd_secret(0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000001000030400"/18, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x4000000)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x24040084)

2.17919856s ago: executing program 0 (id=2620):
r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x138)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0)
ioctl$FBIOPUTCMAP(r3, 0x4605, &(0x7f0000000280)={0x983, 0x8251d54a38b53ba1, 0x0, 0x0, 0x0, 0x0})
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0xfffffffffffffe78, 0x0}, 0x4000014)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50)
socket(0x1000000010, 0x80002, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c)
bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000040000000000000000a20000000000a01030000000000000000010000060900010073797a300000000040000000030a01020000000000000000011300000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000008000b40000000000900010073797a30000000004800048044000180090001007866726d000000003400028008000240000000050500030001000000080001400000000d080004"], 0xf8}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r4, 0x2)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), 0x0, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB, @ANYRESHEX=r6, @ANYBLOB="2c726f6f746d6f64653d30300300303030303030303030303030303034303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0xee01, <r7=>0xee00}}, './file0\x00'})
fchownat(r0, &(0x7f0000000100)='./file0\x00', 0x0, r7, 0x400)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
bind$inet(r8, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87ac3ae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0)
recvmmsg(r8, &(0x7f00000033c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0)

1.478618188s ago: executing program 4 (id=2621):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0])
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r3, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x2, 0x1, "fa"}, 0x9)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x2}, 0x8)
read$FUSE(r2, &(0x7f0000004100)={0x2020}, 0x2020)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="a7ffa88800000000200012800900010069706970000000fa0f000280040013000500090000000008f33a5798cb485f3a9776f093ab3e544599d87862ad961fa67f7215b55c42d37b9a100eb2ec063287898534c013c8f11d376156badd398f094e0e3b0cae09b813a27158392211de2312f2526854a5a004cb08dad59319ee0f21d26b"], 0x40}}, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff48700000020000005c0000000000000095000000000000002ba728041598d6fbd307ce99e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f071326bd9174842fa9e09000000000000000a0e168c1884d005d94f204e345c652fbc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc84e974a42a550d6f97181980400003e05df3ceb9f1feae5737ecaa81d666963c474c2a175e04ad6ee1cbf9b0a4def23d410f6296b32ae343881dcc7b1b85f3c3d44aeaced3641110bec4e90a634196508000000000000f0f4ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d4dcecb0c005d2a1bcf9436c101040000f73902ebcf0200822775985b231f000000ccb0ecf31b715f5888b2a858ab3f11afc9bd08c676d2b89432fb465b3dad9d2aa7f1521b3ebb0cc52f49129b204eb99b6150e320c9901de2eb879a15943b6dc8ea15aab9dd6968698e3095c4c5c7a156cec33a7bb727667d81ff2757ca1e6bfdd4c968dacf81e65998b9091957d1d11a5730baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba165d876defd3541772f26e27c44cfd7bb5097379cf1756869cebc7b0b2d85d6d29983e830a9cdd1d0a017c100344c52a6f387a1340a1c8889464f90c284a4db539621fbb70f01a2c02dec4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae610afd01409d9a337ac5d58bcb5e5fc231514952c5255f22bd8b325d9b76e57f041b665ab0249886c0a65cc99d5893521372c8d8b7bacac24000020a4a24d8dbd75062e1daef9dead619cc6e7baa72706287793c3d2a2661edcd3545236c204682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b993508000000e480cd9d4850a049ee19b67d17ef0477aeb12b1d255be1ed66d9051f22614d1f62734d6780393e783df8b8a17e3aa9fe9c502f9acee4f1b56e1f231200743792cead3c058a5b700d64d160abe33df726608510136ce8bf239414a1d98ea93e3d35dbb6c23b90cf36e83b8a4309b402d264b09f2779a0bcd7cd6dfc06b02e69d384146056d125cf4aadd80800000000000000e88d10acd06864eac44c42fbe334bdc3e9768fc360b130dc6111fe3293e8e02f819a2aa34dba1c25be27945507a3477b437525b81aef2f0b4c4f63483026b5e34d44705b76ef29f7f6e0a2be625eae975e02069fbff63a06578d6d184f5de7bfb6aa800016996d536256c02294cb1d3a6fb8eae87691fae365a70c3f15871565bba8dd8a8ca049f798abe646f738bebdfc9d8a5edd7a19ca6a42bc3f1db37c17f22a287c6d31a13db5dfef409eb1d3c91c6e6f80d215c9e16e0c4736c81936315418f26770cca4e2f89800d18c89d7f46f679df6c9e7005f209dda94302a30003b952ae1ebfd0ca88368ee6ce139e8b5822422cf4c9dde943d34c432e1001171792c65986146666a549092398af45ba38c41df7e0fffeac41824ca1fd0eb68aa243c9035c788d5480e5aee9c9e5f2e5a3628995b1531bd20360d33d8f9ffffff5f4bf6ea8a1850c4f83306dbca02ee3686da707b6d85db491ba0cc33f6be92c55969a2b52a25419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9bc31f09834b4788be2a442aa81b259e9eb1bf5314844051f3a642aca9ff98c9036471ccff0522903e7bcf62e18f7796bbc280b95e8e0d6fd5644b0ebde3885b06548862de809d3dae3cccf109f7c78e8479a345e805e47dfa82caed44b11a443c5ba92a326dd10921aa79c62800844c7a59f55ee205a11ab50fb402e7da6ada561ec1117cc186b01fd5c2061d22156b1bfeb51f5c65a907f2217d5f80c580dc31b0963ff953ce09148e8dfe3a61bbd2bb173518507a3cd0e37c4da0a71eee31071d5d642498181c69cee3b2e414ddd6a12ff4bdf6e97c247b6025d4376067e25357d3b521a5b927d3392a7503718aea24179528f6a0c6de4e61b49cad1e4d6b000000000000005b2d16877299acefc0655bc1422c3d425d988eedebcf242b780a687c9acae2a5a71c2a16a32ceb377f5d54f9b2fa90b2905925e611be56e9ebe20cab20ab2b5baa1b07b16e81f278e54a479f1a068658e3656cfa196d6c050000000000000000814955c62a7d72b317399e572a7f6a4657b741eb66c9179ffd097d61fcfd0fa1d46cfb110e3e8cff5579e83f2820f95eaa0c609f666950c24311740e36de8f65708cfffce798c99ef8f62fd2398e999b220125da8eb07947512365abbc5b84ef524bdf184727c67910051f204662264607d548dbdffe14b41dd0843cf3d85bb820656a88a9e52a4cd7b3eeadfe00007267f226019ef0a25bc15da71e893856a2182c3167d8ba73f7c6294b159a426ce44cd73f000000a66fc501eae0c3504c1400697ba69fd9b7eaf49aff6a6aea529610db8dfef86c3cc698e9fddf1b13287615b972281a90c3a4cf415df25fbcdd35cf8368f068c4481844bdd0dda553e1cb0966d5686013d382956d50055dce0d1bc225c1d77612b1ec52e743dbc51f25cc07a202b704577316913cf067fa65e476f688de2d6c54ea192a569eed05d0d7536b3205c68d4ee0fe318ed3112c76dcf128a1d5595b773ef4c8a7ba4e10381de8808ff02dd0a7b996ecf1c65e6d9db90c87123d9cb3945330f7a270ee0cca35b1331ca8fec0b2f39f505140751b60f29a83e4bc0ef2ffea443e4aa221cc38a503add16a2c98cb589e1dac1912b4142a3be30f50b2d9479c5bde0beb38030d0c0ce0590000130000000000000000000000554361e1628ee0017ad19ca787f2c078aa260701ce0800000080623902000000000000000000003d118a04fa6a80c4928c01ccab57b5f4eb265ad15004f967543fe6e6ddc2a12165fe3a08bf9475ee0eee3539369b0e566fedbd215a6ddd4fe03dcc7a922e16410d820747b7e806c0f3b6f14c884d150a0ff07f2e0000bfb083c56d3bed0a61fab880f8885c612ebff8523d14cfb12aca274c000000005e5155611969f6e67dd83b20206207cb8b2cd2fab6fa6d7fdaed6a27a2e4db1d5adc80c4014ff11d9dbceba41d8dfce410333a054e82b1d050331c5bc4acb843b94d67f69f49eb4dd3b1b85b018359c32df01db8ebce0dbc36cade09c6b44f6b93d28db8ae4db5624d8a02f7be91bec65e4b3373059587dd6528bbc48e3379d477d482faff738c39c61cac1195043bd5b70cea5fc1083a169a82632ff3a9a48ff805202ae9aec56b9f7795fa27634a7f06359e3058d2dd69c4e5cc11b36d9ed9c4b2867f583de6fc582f789722bd1500e64c495abdb72de2c739d38c72f6f4fb1946081dcc825d5b5b747e9fa1b5226cd31e131263f1fcd7d45a630b46d04af906f0be464d829dd2dfcf7400002b7827f6d957e51bb1f1b44a50200c9dfadfaff2e32baa9c0edaac7144e174dba582a951d2b03c27219cec4fbc7b6e99c3f00188941e3fbf008cbace177ae250fd757a22e21ec05aa45c91e1345ca936184c3fc28153283e13654123cfaf4e661f4b6d430adad1e2116bc385f888405d48f0d386da0cc6747b33395772a68f2ea3fb7e7207000000b24088014c8e64f03d053c4e02ddd08b262e422eff1c9f124b892b0a9462b07d4f88c0693bd9c54ad2ab5227aa59ef2b53ac528c0800000000000000ebfde0c4a37c2d55c176680c4207000000e4aa467f995c9bc99e60441d4dbebead3b436427762618810bac7308c6d3298ea932b66572825e62d18462d3b2342ba48c145ff4674a94fa078cc552d064da2bb69a0d269076f8955076578f44ffb8895f11bd5e06840f8848df72230a28e0304569bfa0350b6dde9e96273de1758505aa1ba89dfb12be7a7c6dae1028d1bc68b6336eb1a5d18f6148354df7e60a489dc543ccdee1fff9d8f8d78844f0c6a77ef1181d5055c2a193a5763ed7749a17296c76818b60426082c86619dacc8a884c4de8572a044faf0c8e4377776c8703ecf2e3f1c3d6410000000000008369f062639e3ddcf725be54f626448fb7bfc74c183b26e31b71a390ccea4be07278dd12fa16848797397b76908fa03613cd961b98b26a0879ccba4a78c82958764bce07a7f70df1cef6d4db1ddbda1db18e4f41c390fd3cb862216ece39a9ec60bd3be5f9329dcaf33bf2c87cc510557460d14421e1d26322ab64388f2cea0d6269ffc8580a01e9acd2ec3ece39f3b4ffdc4dfea3da6ddb002512e2313253801044e751168eabe977c503c30ef7c489e5ea1fff041e54de54cfeb258f2387dad096b72a78d91134927492cfc773c731cca9b13b3f6e7760ab0929c46f51ea5643f3df4f4044f3ad0a6ba739e72d8b8b2835d81534bea8372bc590c111d573e04280659a096eaa495a4154daae7d1800c130d920964845c50c8ba4763b19b6008f6d7a5091895c7a4b7816ab706503be879b18b778b0f61ecfde2f8bbb32cfeb766ec4430ee0ad45a0a263ddc4b2f47680c8d53439f8d388dab87112c83997c83e178be287eb6e8c95bad8f8ed85cd5b03a7352a0fb83398566d1bc133582ce2d95636cd23eba4432180b2d5c3019879cd949a5be1b241b3d0d0d52a3529cc9e704a9d8d54f4f7b776a969a4505e18fe5284985ca7d112c397d776e3baba918b7df456bd970e761e00f3b0efa5ce4246d9f08ba60da3be556c518a1f19504c7cea1491a9eadd27d747ca9cc5f92e30b2ca3cf0b142a8554c87e8026d4e586cf5f7c9d412e6eb4f66a076c8bca6b294305969dabb6c932b57a5dd4234bf1ed3bd095229ee3cbb86883d574c5af4bb78370561de3fbf55bfcd2db3979eb1be120b5795443324023353bdd9fc87c862c247e140379ef098c7b3fa79a6638a245b6a74f14dde9bd4ee48e62cdc70f486ce38641e4e4309aa9f4bd097fa1530db966d9919544ab4890301e51f9525436f5d9591460340f5093161a78a249783945407f2576d6f35a99e3521d7991e3fdfde5ee7f6a8ff8181a68ef15a2ebfe9e22d7c745949ab5cc15b9f5659799b5e00debbf9f623f75bfd4d83c4859ca9b652cea33daeeef47b60c78a21965bcf91919071c7ded19317dc0b7587d9322f8cec9e32675a187465bdfa101bcd9ac680839b375af12c160247dd960e70eb7ee60c52a900440aa9bd9a6b15a4a34dc73c3c4936d8986300fdc264b28537df387e6442c32f5fa2a31d24c1ed888a57fcc50400a084a38a3630ffc465f36a4b770fab0946148161184be39134542e934f3a538bccd48a0325aa9b151855c800000000881d4361e7fbd1fc2331b4e34733480bc497662a8234a7eeab3e65d6b0f5d92edff04416eedcd15b9ddbcb3cf9228afda6b17d44a276b205eabd0069f7e26aea50f537dc77b683ed83d2f9110e00a705f48e9d13378cf09bca22e8f45c4f360d5fff8ba35f21c4513bcc0800000000000000dc5cc7ad7290c60bc609bff9be7cd922f474c3faa78fd42cba7c78d6d912656b6313497625e2f9afaba05b17ca242b7ca8d6556175aee38142a8aac5f677c2f8a6967f2cb5e97aae97a5e5579a706243688ac4d38a4601b4aadb2d319fe7d6bf1272fa3fa701338d7bce390e8bf959081ed39e63a431901d615a26ff95e1620a6c26eda4f92d83499a173e7217001f58ed5406bdb59acbc997e8fd3d53b4c2c2a1b3145bf54a851f3c08931d4c2c32bfe611e5958458af7b3c5319fdb4c40b8d01365fdee93af6fad7c7a8da86460f45c9e99d43264c929e7de4e9620000000000000000000000000000007cf90000008f8a9da7a8a167815c6ffcd1b6863cde9ab45ecd8f06423198bb00cdf76877f407be46b000000000afbb4cb3a8de259a8beb2223f28b855e2bdf4b31b91e5062a42a55bd95e93f77f2499391cf0000000000000000000000000000195007ad27d1d61dc4d5512f117f0ed554c2c88c1713000000000000bb1ff447d6e12da208e9f0422a84f361684861169f498909c4841f4d5a0f5807a3b7d833075fdcd9c1d169b03d7df7f4150fad8b9e92eaf86992adbda360dd91de51c6df335445492608162fb0804dabdeac6fb71042f906eefd37f1d190a1c8a0d9de7f34dcc8cbd7b565fc675f3bf7aac559411808ee703ec3ad461c6ddc571994cb504c46eabbc2ff4b97df394bc75b5e7f45a4450753b5d2b8b8414a7fe6a17661bdb5b1d080cfd974811e1d60763d8d9509c75aa729a334b55ee76b0c2d50270a1deec1a6d7441d0b5b8d7a4d048d156ebcff102e45c15d2a73b40d74807f5182a319d50edbf430f00b1c29a9e4bd92111caacbb1d4541545c2d262646070da42f76e3f3c6d139eed89cc9300000000000000000000000000000000000072d7e605eb8e978d76796d9d3a728c51a3145da8e1ca4973aa8fed855328e9d2509335c5386cac74e862eac50e9ba95b6a2a29e8ef08a9ae29792e77fb9952b1ac5c816db5c23a656db528f81f6a9465d2c94d701ee8646b30650c84b9510a337e82702baf368d29281d3d54b39014756ca5a1be1881000000000000006fbac0b9c9f97c920dfac7e2379ef6bb076118aa9bb24ee12e64aa530f852bf4f970a08a55531934e39fbae483129949a918115571d76740ca6a1cea59df290f2e63675ca30a289775825fe3e5d6f206f3f395346c0738035dc74368bb035fc65a40f8124369b8950ded31af64855c5c95ef5c83b18b23517ca935a0fa1b630d70c4ca4029a90d47701102045fff90675adb3c83983d125ae730b9497c681a912a6bb70300a2d7fba051f82b9d6f710426b5bd0d0bc0b08a0f801276789613da406905011bd6ebbac91ff17a21d1ed0882e73394025772f31dc8a3048789c703f920c55746f6fc955046f9332d72150be23c26cbb08d1b438e84b83fefc6a16958fd46dc7b8cbea1da2d541324e373e9157696d698a0b4bc84d7cc2fdb069db8a5a491a9d2bbc0a61b73f75d81d07d778a1577db3b06d20a21b19ea17e0000815a42318151feaad37f7abf9bfa0bcac3c1934854b3f6dc6de835952ebdda297dd3b29c07c69888cf029271449e035edc8a4459705f222bda537481e66ce3c665129f9829524eca8b5bef27adde96bd3ee95da4a176deff3408da050fe8d512e5a19379b403ee11d010bf86d0af4ac5c2057709b18cff438d0d58810670b222dfeb317bb935f925d2a070e68a701fd4316a677bb513c9476f25969097c165ca1705473341ea03f259dc5bee6a2d2e05176965192941abfae36b3a1e30784e6532c96ab971c5706a88b6f66860e31098b5b788788aad67507ffab2184a950065c1337259b63135fa060fc5ce3e4f6cdfb64f40e1a90351a01fd3d70f9dde03c335a931e58b8570316590ae22c7de567260849049e963ee15db15f592abb24111a219f0d128ceaf19764d92755abc9c313f65e7a220e64bb0d7139ce59da85bc710cea0c6553b336763bd3e39c2374b86885a32cdfae817196a7850257ead09f3e30e676b51062bb9000000000000000000000000000000000000000000000000000000aefb12dd3507c8dd24490bf9de062cd166a4dad6b9f2e53bad342546e546f6dece81d53cf717bd91ad72f4da82018f43259899e53e0b69a92180f1345699045fd23689e66d21d13be1a2d20eb1ce23eda84a63855173ca7f51d436306c"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r6, 0xffffffffffffffff, 0x9, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7ff, 0x0, 0x1}}, 0x40)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x2b)
r7 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, 0x0, 0x5}, 0x94)
syz_usb_control_io$uac2(r7, 0x0, 0x0)
syz_usb_control_io$hid(r7, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="40084f0000003a45444db441ba8f87f2de0e4872fc8bf45a40f05ee2dd90695e964d4c32c89580d16e26665c3cb71de602a74a933006000000000000009e550e6cce756bd0fcb4d76e82557a2a3105786e85061901"], 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="200161000000627ef1902ebfb2621bef4473a0c6e742e3d7c1a18625c9a1488ee33453c98223f55b9b15befe76ec06ba7847f6090192f8b0525be72bfc6827f34a3d0ce68bd2dc9d7fa19d72545b396850603090d93ddb251154d521d35b8dc0255500000000006c21e54af4484730622c1b8d05e4aa70ed5093ea73f1c921d725f752004f6068d4384fe9baeda6c331f0b66051619e1ca28c9c2db6ec249a74234c6bcca949575a74a5242f433331a099f4347f2ee2fee3a35c95acbcaf0606171df70a0980d44c284c0d61d691ffe245891448f3f4441386cfdea1879e0f208addc69330cd225de732345a203ee301c578030f90cc"], &(0x7f0000000480)={0x20, 0x3, 0x1, 0x8}})
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r2)

1.02639882s ago: executing program 2 (id=2622):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)

921.611252ms ago: executing program 2 (id=2623):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$xdp(0x2c, 0x3, 0x0)
bind$xdp(r2, 0x0, 0x0)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000100)=0x405, 0x4)
bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @local, 0x6}, 0x1c)
listen(r3, 0x200b)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'macvlan1\x00', <r6=>0x0})
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14)
setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000080)={@remote, r6}, 0x14)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r8, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x7})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10)
socket(0x840000000002, 0x3, 0xff)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680))
get_robust_list(0x0, &(0x7f0000000400)=0x0, &(0x7f0000000580))
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000070000000900010073797a300000000080000000090a010400000000000000000700000008000a400000000008000840000000000900010073797a3000000000080005400000002133000d4039b3aa29eb87dafbc3f48a6d4875017f8b5a2190bf7fdc697438fdecc81b80554500002e5aaf000900020073797a3100000000080007400000003820000000120a00000000000000000000030000070900010073797a3000000000140000001000010000004000000000000084000a"], 0xe8}}, 0x0)

914.510938ms ago: executing program 5 (id=2624):
socket$unix(0x1, 0x5, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x40)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000400))
mmap$snddsp_control(&(0x7f0000ffc000/0x4000)=nil, 0x1020, 0x100000c, 0x11, 0xffffffffffffffff, 0x81000000)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0)
r3 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r3, 0xfffffffd)
r4 = accept4(r3, 0x0, 0x0, 0x0)
recvmmsg(r4, &(0x7f0000001000), 0x581, 0x40000000, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x9, 0x8, 0x0, 0x4, 0x2, 0x20}, 0xe)
close_range(r1, 0xffffffffffffffff, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x4553, 0x4)
syz_open_dev$dvb_frontend(0x0, 0x86, 0x220802)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r5 = io_uring_setup(0xc, &(0x7f0000000040)={0x0, 0xc8a1, 0xdb00, 0x8, 0x29})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
io_uring_enter(r5, 0x2219, 0x7721, 0x1f, 0x0, 0x0)
sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x38, r8, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x22, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x143c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000)

690.465018ms ago: executing program 0 (id=2625):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000000000000000a000000fbffff"], 0x50)
close(r3)

561.73982ms ago: executing program 0 (id=2626):
syz_open_dev$sndpcmc(0x0, 0x0, 0x4c8380)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902120001000000000904"], 0x0)
r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2)
ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000000)={0xbcad, [0x0, 0x8001, 0x4, 0xc000, 0x94c, 0x100, 0x1, 0xfde8, 0x6, 0x8, 0x83, 0x400, 0x6, 0x4, 0x5, 0x16, 0x204, 0x2, 0x52, 0x0, 0x7fff, 0x4, 0x80, 0x9, 0x5, 0x5, 0xfff, 0xb12, 0x8, 0x8, 0x0, 0x1000, 0xe, 0xffff, 0x3, 0x10, 0x2, 0xb5e, 0x3, 0x2, 0x3, 0x203, 0x8000, 0x48, 0x8, 0x4, 0x9, 0x4], 0x7})
r1 = syz_open_dev$I2C(&(0x7f00000004c0), 0xfffffffffffff4ed, 0xae00)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000140)={&(0x7f0000000580)=[{0x0, 0x5800, 0x0, 0x0}, {0x9, 0x8001, 0x0, 0x0}], 0x2})

540.4926ms ago: executing program 5 (id=2627):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbf9, {0x0, 0x0, 0x0, r2, {0xfff3, 0xffe0}, {0x0, 0xfff1}, {0xc, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008849}, 0x30004440) (fail_nth: 2)

447.951497ms ago: executing program 5 (id=2628):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x101241, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000005580)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a01020000000000000000020000090900010073797a300000000074000000160a030000000000000000000200000a4000038008000140000000002c00038014000100776c616e3000000000000000000000001400010070696d367265673100000000e1ff000008000240000000020900020073797a31000000000900010073797a30000000000800074000000001"], 0xbc}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000100)="b800008ec0650f21980f18d6dbe0baf80c66b8c497458066efbafc0ced0f01ca440f20c066350d000000440f22c02664660ff83af20f1b893b00f3a7", 0x3c}], 0x1, 0x15, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f0000000180)={0x24, 0x1})
futex(&(0x7f0000000000), 0x1, 0x2, &(0x7f0000000040)={0x77359400}, &(0x7f00000000c0), 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000001340)={0x0, 0x23ad697ddad057f0})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

133.600238ms ago: executing program 5 (id=2629):
rseq(0x0, 0x0, 0x10000, 0x0)
r0 = io_uring_setup(0x937, &(0x7f00000002c0)={0x0, 0x32b6, 0x80, 0x0, 0x35d})
r1 = socket(0xa, 0x5, 0x0)
sendmsg$inet_sctp(r1, &(0x7f00000001c0)={&(0x7f0000000240)=@in6={0xa, 0x4e23, 0xf, @mcast1, 0x8}, 0x1c, &(0x7f0000000440)=[{&(0x7f00000003c0)="e3a6455dc76d440a76788a84f284d5a8af2389dea23122b0b88921289abda6eb09165f4c65992c839d46ffcaba2c3a857d93247a12b1c0bfaaee07a9c0d2b715d6a252f51ba16e08cb3a4dbef9d92af1", 0x50}], 0x1, &(0x7f00000006c0)=[@init={0x18, 0x84, 0x0, {0xffff, 0x7, 0x7, 0x4}}], 0x18}, 0x20008000)
getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x29, 0x0, &(0x7f0000000040)=0x29)
syz_open_dev$hidraw(&(0x7f0000000080), 0x7fff, 0x400)
syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
write$char_usb(r2, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x4000)
close_range(r0, 0xffffffffffffffff, 0x0)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x30}}, 0x0)
syz_usb_connect(0x1, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000700300801280102d52a000000010902"], 0x0)
msgget$private(0x0, 0x2)
r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f003, 0x1})
r5 = socket(0x10, 0x2, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56)
pipe2(&(0x7f0000000100), 0x80000)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0)
futex(&(0x7f00000040c0), 0x6, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)

0s ago: executing program 2 (id=2630):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000002400)={0x20, 0xe, 0x2, "02cf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000580)={0x0, 0x16, 0x2, "f610"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f00000001c0)={0x0, 0x5, 0x1, 'D'}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, &(0x7f0000000cc0)={0x14, 0x0, 0x0}, 0x0)

kernel console output (not intermixed with test programs):

Product=0, SerialNumber=0
[  599.223399][T10335] usb 6-1: config 0 descriptor??
[  599.262710][  T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  599.300969][ T1543] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  599.403480][T13380] bridge_slave_0: left allmulticast mode
[  599.409323][ T1543] usb 3-1: USB disconnect, device number 35
[  599.441959][T13380] bridge_slave_0: left promiscuous mode
[  599.453649][ T5834] Bluetooth: hci3: ISO packet for unknown connection handle 0
[  599.462767][T13380] bridge0: port 1(bridge_slave_0) entered disabled state
[  599.472592][ T5905] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  599.474178][   T29] usb 6-1: USB disconnect, device number 58
[  599.507802][ T5965] udevd[5965]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  599.547218][T13380] bridge_slave_1: left allmulticast mode
[  599.564875][T13380] bridge_slave_1: left promiscuous mode
[  599.570694][T13380] bridge0: port 2(bridge_slave_1) entered disabled state
[  599.684964][ T5905] usb 5-1: Using ep0 maxpacket: 32
[  599.698381][ T5905] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  599.707680][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  599.715954][ T5905] usb 5-1: Product: syz
[  599.720418][ T5905] usb 5-1: Manufacturer: syz
[  599.725165][ T5905] usb 5-1: SerialNumber: syz
[  599.735978][T13380] bond0: (slave bond_slave_0): Releasing backup interface
[  599.750606][ T5905] usb 5-1: config 0 descriptor??
[  599.810123][T13380] bond0: (slave bond_slave_1): Releasing backup interface
[  599.918853][T13380] team0: Port device C removed
[  599.954728][T13380] team0: Port device team_slave_1 removed
[  599.976421][T13380] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  600.013225][T13380] batman_adv: batadv0: Removing interface: batadv_slave_1
[  600.119434][T13394] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2420'.
[  600.129519][T13394] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2420'.
[  600.189211][T13380] net_ratelimit: 1 callbacks suppressed
[  600.189234][T13380] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  600.258410][T13387] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2422'.
[  600.268097][ T1543] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  600.281114][T13395] input: syz0 as /devices/virtual/input/input87
[  600.307089][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  600.459963][ T1543] usb 3-1: Using ep0 maxpacket: 32
[  600.477861][ T1543] usb 3-1: config 0 has an invalid interface number: 188 but max is 0
[  600.489589][ T1543] usb 3-1: config 0 has no interface number 0
[  600.621971][ T1543] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  600.668987][ T1543] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  600.679587][ T1543] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  600.692068][ T1543] usb 3-1: Product: syz
[  600.701316][ T1543] usb 3-1: Manufacturer: syz
[  600.718873][ T1543] usb 3-1: SerialNumber: syz
[  600.799215][ T1543] usb 3-1: config 0 descriptor??
[  600.806647][T13400] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2425'.
[  600.818957][T13390] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  601.031961][T13390] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  601.262587][  T795] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  601.343017][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  601.418479][  T795] usb 2-1: config 0 has an invalid interface number: 117 but max is 0
[  601.430032][  T795] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  601.441314][  T795] usb 2-1: config 0 has no interface number 0
[  601.447753][  T795] usb 2-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30
[  601.461558][  T795] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  601.474395][  T795] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 239
[  601.491734][  T795] usb 2-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46
[  601.501562][  T795] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  601.517712][  T795] usb 2-1: Product: syz
[  601.537279][  T795] usb 2-1: Manufacturer: syz
[  601.542094][  T795] usb 2-1: SerialNumber: syz
[  601.579268][  T795] usb 2-1: config 0 descriptor??
[  601.596880][  T795] HFC-S_USB 2-1:0.117: probe with driver HFC-S_USB failed with error -5
[  601.826644][ T5905] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: failure sending bit rate
[  601.837238][ T5905] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -110
[  601.897848][  T795] usb 2-1: USB disconnect, device number 24
[  602.133713][ T1543] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  602.144552][ T1543] asix 3-1:0.188: probe with driver asix failed with error -32
[  602.169722][  T795] IPVS: starting estimator thread 0...
[  602.273050][T13423] IPVS: using max 37 ests per chain, 88800 per kthread
[  602.302672][  T795] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  602.384038][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  602.392458][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  602.462809][  T795] usb 1-1: Using ep0 maxpacket: 32
[  602.471680][  T795] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config
[  602.482333][  T795] usb 1-1: config 5 has 0 interfaces, different from the descriptor's value: 1
[  602.497402][  T795] usb 1-1: New USB device found, idVendor=19ab, idProduct=1000, bcdDevice= 4.5e
[  602.507966][  T795] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  602.517628][  T795] usb 1-1: Product: syz
[  602.522700][  T795] usb 1-1: Manufacturer: syz
[  602.528529][  T795] usb 1-1: SerialNumber: syz
[  602.682678][ T1543] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  602.770407][  T795] usb 1-1: USB disconnect, device number 28
[  602.864514][ T1543] usb 2-1: config 0 has no interfaces?
[  602.873666][ T1543] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  602.892741][ T1543] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  602.903878][ T1543] usb 2-1: config 0 descriptor??
[  603.114714][ T5834] Bluetooth: hci2: ISO packet for unknown connection handle 3840
[  603.115899][  T795] usb 2-1: USB disconnect, device number 25
[  603.180350][   T29] usb 3-1: USB disconnect, device number 36
[  603.225530][ T1543] usb 5-1: USB disconnect, device number 12
[  603.425031][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  603.524334][T13446] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2436'.
[  603.684023][T13445] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2440'.
[  603.932866][T10335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  604.092626][ T5905] usb 2-1: new full-speed USB device number 26 using dummy_hcd
[  604.266309][ T5905] usb 2-1: unable to get BOS descriptor or descriptor too short
[  604.288931][ T5905] usb 2-1: not running at top speed; connect to a high speed hub
[  604.372094][ T5905] usb 2-1: config 17 has an invalid interface number: 8 but max is 1
[  604.380685][ T5905] usb 2-1: config 17 has 1 interface, different from the descriptor's value: 2
[  604.419812][ T5905] usb 2-1: config 17 has no interface number 0
[  604.444784][ T5905] usb 2-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 86, changing to 4
[  604.464253][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  604.464775][ T5905] usb 2-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid maxpacket 62603, setting to 1023
[  604.491916][T13458] FAULT_INJECTION: forcing a failure.
[  604.491916][T13458] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  604.513793][ T5905] usb 2-1: config 17 interface 8 has no altsetting 0
[  604.524549][T13458] CPU: 0 UID: 0 PID: 13458 Comm: syz.4.2445 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  604.524573][T13458] Tainted: [L]=SOFTLOCKUP
[  604.524577][T13458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  604.524594][T13458] Call Trace:
[  604.524600][T13458]  <TASK>
[  604.524606][T13458]  dump_stack_lvl+0xe8/0x150
[  604.524628][T13458]  should_fail_ex+0x412/0x560
[  604.524651][T13458]  _copy_from_user+0x2d/0xb0
[  604.524673][T13458]  __sys_sendto+0x2b0/0x710
[  604.524689][T13458]  ? __pfx___sys_sendto+0x10/0x10
[  604.524716][T13458]  ? exc_page_fault+0x6a/0xc0
[  604.524731][T13458]  ? do_user_addr_fault+0xc6f/0x1340
[  604.524748][T13458]  __x64_sys_sendto+0xde/0x100
[  604.524762][T13458]  do_syscall_64+0x14d/0xf80
[  604.524776][T13458]  ? trace_irq_disable+0x3b/0x150
[  604.524785][T13458]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  604.524796][T13458]  ? clear_bhb_loop+0x40/0x90
[  604.524809][T13458]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  604.524819][T13458] RIP: 0033:0x7faab6d5d04e
[  604.524830][T13458] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  604.524839][T13458] RSP: 002b:00007faab7ce9e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  604.524852][T13458] RAX: ffffffffffffffda RBX: 00007faab7ceb6c0 RCX: 00007faab6d5d04e
[  604.524859][T13458] RDX: 0000000000000020 RSI: 00007faab7cea000 RDI: 0000000000000004
[  604.524866][T13458] RBP: 0000000000000000 R08: 00007faab7ce9f04 R09: 000000000000000c
[  604.524872][T13458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  604.524878][T13458] R13: 00007faab7ce9f58 R14: 00007faab7cea000 R15: 0000000000000000
[  604.524893][T13458]  </TASK>
[  604.744634][ T5905] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff
[  604.747481][T13460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  604.753818][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  604.770354][ T5905] usb 2-1: Product: syz
[  604.774583][ T5905] usb 2-1: Manufacturer: syz
[  604.779274][ T5905] usb 2-1: SerialNumber: syz
[  604.796512][T13460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  605.009562][ T5905] usb 2-1: selecting invalid altsetting 0
[  605.057236][ T5905] usb 2-1: 8:6 : no UAC_FORMAT_TYPE desc
[  605.065376][ T5905] usb 2-1: selecting invalid altsetting 0
[  605.091900][T13466] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2444'.
[  605.203084][ T1543] usb 6-1: new high-speed USB device number 59 using dummy_hcd
[  605.256255][ T5905] usb 2-1: USB disconnect, device number 26
[  605.442622][T10335] net_ratelimit: 13 callbacks suppressed
[  605.442637][T10335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  605.495923][ T1543] usb 6-1: Using ep0 maxpacket: 32
[  605.503066][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  605.523557][ T1543] usb 6-1: config 0 has an invalid interface number: 188 but max is 0
[  605.540074][ T1543] usb 6-1: config 0 has no interface number 0
[  605.546401][ T1543] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  605.579512][ T1543] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  605.608191][ T1543] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  605.739316][ T1543] usb 6-1: Product: syz
[  605.760819][ T1543] usb 6-1: Manufacturer: syz
[  605.772832][ T1543] usb 6-1: SerialNumber: syz
[  605.803393][ T1543] usb 6-1: config 0 descriptor??
[  605.812752][T13464] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  605.876656][ T5905] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  606.012620][T10335] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  606.038762][T13464] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  606.046683][   T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  606.083212][ T5905] usb 1-1: Using ep0 maxpacket: 32
[  606.095039][ T5905] usb 1-1: config 0 has an invalid interface number: 89 but max is 0
[  606.103984][ T5905] usb 1-1: config 0 has no interface number 0
[  606.112896][ T5905] usb 1-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68
[  606.123282][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  606.131487][ T5905] usb 1-1: Product: syz
[  606.135987][ T5905] usb 1-1: Manufacturer: syz
[  606.140653][ T5905] usb 1-1: SerialNumber: syz
[  606.182179][ T5905] usb 1-1: config 0 descriptor??
[  606.188054][T10335] usb 2-1: Using ep0 maxpacket: 32
[  606.195169][ T5905] hub 1-1:0.89: bad descriptor, ignoring hub
[  606.204086][ T5905] hub 1-1:0.89: probe with driver hub failed with error -5
[  606.213555][T10335] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config
[  606.231320][   T10] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  606.241682][   T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  606.245189][T13477] FAULT_INJECTION: forcing a failure.
[  606.245189][T13477] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  606.253621][ T5905] option 1-1:0.89: GSM modem (1-port) converter detected
[  606.273165][T10335] usb 2-1: config 5 has 0 interfaces, different from the descriptor's value: 1
[  606.282206][   T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  606.295191][   T10] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  606.312661][T13477] CPU: 1 UID: 0 PID: 13477 Comm: syz.2.2451 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  606.312692][T13477] Tainted: [L]=SOFTLOCKUP
[  606.312699][T13477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  606.312710][T13477] Call Trace:
[  606.312717][T13477]  <TASK>
[  606.312726][T13477]  dump_stack_lvl+0xe8/0x150
[  606.312754][T13477]  should_fail_ex+0x412/0x560
[  606.312784][T13477]  _copy_from_iter+0x1d3/0x1670
[  606.312802][T13477]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  606.312819][T13477]  ? __lock_acquire+0x6b5/0x2cf0
[  606.312852][T13477]  ? __pfx__copy_from_iter+0x10/0x10
[  606.312873][T13477]  ? dev_get_by_index+0x22/0x2e0
[  606.312897][T13477]  ? dev_get_by_index+0x22/0x2e0
[  606.312926][T13477]  packet_sendmsg+0x30b2/0x50f0
[  606.312952][T13477]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  606.312980][T13477]  ? __lock_acquire+0x6b5/0x2cf0
[  606.313012][T13477]  ? __lock_acquire+0x6b5/0x2cf0
[  606.313050][T13477]  ? aa_sk_perm+0x6d5/0x900
[  606.313072][T13477]  ? __pfx_packet_sendmsg+0x10/0x10
[  606.313099][T13477]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  606.313133][T13477]  ? aa_sock_msg_perm+0xf1/0x1b0
[  606.313160][T13477]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  606.313181][T13477]  ? __pfx_packet_sendmsg+0x10/0x10
[  606.313201][T13477]  __sys_sendto+0x672/0x710
[  606.313225][T13477]  ? __pfx___sys_sendto+0x10/0x10
[  606.313244][T13477]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  606.313280][T13477]  ? __fget_files+0x3a0/0x420
[  606.313305][T13477]  ? ksys_write+0x242/0x270
[  606.313326][T13477]  ? __pfx_ksys_write+0x10/0x10
[  606.313351][T13477]  __x64_sys_sendto+0xde/0x100
[  606.313374][T13477]  do_syscall_64+0x14d/0xf80
[  606.313397][T13477]  ? trace_irq_disable+0x3b/0x150
[  606.313413][T13477]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  606.313430][T13477]  ? clear_bhb_loop+0x40/0x90
[  606.313452][T13477]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  606.313470][T13477] RIP: 0033:0x7f2cdcd9c819
[  606.313486][T13477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  606.313506][T13477] RSP: 002b:00007f2cddbdc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  606.313527][T13477] RAX: ffffffffffffffda RBX: 00007f2cdd015fa0 RCX: 00007f2cdcd9c819
[  606.313542][T13477] RDX: ffffffffffffff8d RSI: 0000200000000440 RDI: 0000000000000005
[  606.313553][T13477] RBP: 00007f2cddbdc090 R08: 0000200000000140 R09: 0000000000000014
[  606.313565][T13477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  606.313577][T13477] R13: 00007f2cdd016038 R14: 00007f2cdd015fa0 R15: 00007f2cdd13fa48
[  606.313605][T13477]  </TASK>
[  606.317819][T10335] usb 2-1: New USB device found, idVendor=19ab, idProduct=1000, bcdDevice= 4.5e
[  606.543252][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  606.549865][T10335] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  606.618841][ T5905] usb 1-1: GSM modem (1-port) converter now attached to ttyUSB0
[  606.632127][   T10] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  606.652988][   T10] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  606.683182][   T10] usb 5-1: Product: syz
[  606.688610][   T10] usb 5-1: Manufacturer: syz
[  606.726112][   T10] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22
[  606.764912][T10335] usb 2-1: Product: syz
[  606.772332][T10335] usb 2-1: Manufacturer: syz
[  606.777318][T10335] usb 2-1: SerialNumber: syz
[  606.864608][   T10] usb 1-1: USB disconnect, device number 29
[  606.874372][   T10] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0
[  606.886543][   T10] option 1-1:0.89: device disconnected
[  606.988162][   T10] usb 5-1: USB disconnect, device number 13
[  607.026592][T10335] usb 2-1: USB disconnect, device number 27
[  607.084113][ T1543] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  607.094786][ T1543] asix 6-1:0.188: probe with driver asix failed with error -32
[  607.297967][T13488] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2455'.
[  607.582924][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  607.621104][T13492] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  608.163219][  T795] usb 6-1: USB disconnect, device number 59
[  608.360806][T13504] FAULT_INJECTION: forcing a failure.
[  608.360806][T13504] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  608.396345][T13504] CPU: 0 UID: 0 PID: 13504 Comm: syz.5.2459 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  608.396366][T13504] Tainted: [L]=SOFTLOCKUP
[  608.396371][T13504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  608.396377][T13504] Call Trace:
[  608.396383][T13504]  <TASK>
[  608.396388][T13504]  dump_stack_lvl+0xe8/0x150
[  608.396407][T13504]  should_fail_ex+0x412/0x560
[  608.396426][T13504]  _copy_from_iter+0x1d3/0x1670
[  608.396438][T13504]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  608.396454][T13504]  ? __pfx_policy_nodemask+0x10/0x10
[  608.396469][T13504]  ? __pfx__copy_from_iter+0x10/0x10
[  608.396483][T13504]  ? set_page_refcounted+0xa0/0x1e0
[  608.396496][T13504]  ? page_copy_sane+0x4e/0x270
[  608.396507][T13504]  copy_page_from_iter+0xdd/0x170
[  608.396520][T13504]  tun_get_user+0x1d4b/0x3dd0
[  608.396532][T13504]  ? tun_get_user+0x6ff/0x3dd0
[  608.396551][T13504]  ? aa_file_perm+0x50e/0x15e0
[  608.396562][T13504]  ? __pfx_tun_get_user+0x10/0x10
[  608.396573][T13504]  ? aa_file_perm+0x192/0x15e0
[  608.396591][T13504]  ? ref_tracker_alloc+0x35c/0x4c0
[  608.396603][T13504]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  608.396615][T13504]  ? tun_get+0x1c/0x2f0
[  608.396629][T13504]  ? tun_get+0x1c/0x2f0
[  608.396640][T13504]  ? tun_get+0x1c/0x2f0
[  608.396653][T13504]  tun_chr_write_iter+0x113/0x200
[  608.396666][T13504]  vfs_write+0x61d/0xb90
[  608.396683][T13504]  ? __pfx_vfs_write+0x10/0x10
[  608.396699][T13504]  ? __fget_files+0x2a/0x420
[  608.396712][T13504]  ksys_write+0x150/0x270
[  608.396725][T13504]  ? __pfx_ksys_write+0x10/0x10
[  608.396741][T13504]  do_syscall_64+0x14d/0xf80
[  608.396755][T13504]  ? trace_irq_disable+0x3b/0x150
[  608.396765][T13504]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  608.396775][T13504]  ? clear_bhb_loop+0x40/0x90
[  608.396788][T13504]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  608.396798][T13504] RIP: 0033:0x7f3ebcb5d04e
[  608.396810][T13504] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  608.396825][T13504] RSP: 002b:00007f3ebda07fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  608.396837][T13504] RAX: ffffffffffffffda RBX: 00007f3ebda086c0 RCX: 00007f3ebcb5d04e
[  608.396845][T13504] RDX: 0000000000000036 RSI: 0000200000000080 RDI: 00000000000000c8
[  608.396852][T13504] RBP: 00007f3ebda08090 R08: 0000000000000000 R09: 0000000000000000
[  608.396858][T13504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  608.396864][T13504] R13: 00007f3ebce16038 R14: 00007f3ebce15fa0 R15: 00007f3ebcf3fa48
[  608.396879][T13504]  </TASK>
[  608.660714][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  608.677464][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  608.953441][T13514] FAULT_INJECTION: forcing a failure.
[  608.953441][T13514] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  608.963551][T13516] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2465'.
[  609.012732][T13514] CPU: 0 UID: 0 PID: 13514 Comm: syz.5.2462 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  609.012760][T13514] Tainted: [L]=SOFTLOCKUP
[  609.012767][T13514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  609.012778][T13514] Call Trace:
[  609.012786][T13514]  <TASK>
[  609.012794][T13514]  dump_stack_lvl+0xe8/0x150
[  609.012832][T13514]  should_fail_ex+0x412/0x560
[  609.012865][T13514]  _copy_from_user+0x2d/0xb0
[  609.012889][T13514]  kstrtouint_from_user+0xd6/0x180
[  609.012911][T13514]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  609.012946][T13514]  proc_fail_nth_write+0x8e/0x210
[  609.012973][T13514]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  609.013003][T13514]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  609.013031][T13514]  vfs_write+0x29a/0xb90
[  609.013061][T13514]  ? __pfx_vfs_write+0x10/0x10
[  609.013083][T13514]  ? __fget_files+0x2a/0x420
[  609.013105][T13514]  ? __fget_files+0x3a0/0x420
[  609.013121][T13514]  ? __fget_files+0x2a/0x420
[  609.013145][T13514]  ksys_write+0x150/0x270
[  609.013169][T13514]  ? __pfx_ksys_write+0x10/0x10
[  609.013199][T13514]  do_syscall_64+0x14d/0xf80
[  609.013220][T13514]  ? trace_irq_disable+0x3b/0x150
[  609.013235][T13514]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  609.013252][T13514]  ? clear_bhb_loop+0x40/0x90
[  609.013272][T13514]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  609.013291][T13514] RIP: 0033:0x7f3ebcb5d04e
[  609.013309][T13514] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  609.013324][T13514] RSP: 002b:00007f3ebd9e6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  609.013343][T13514] RAX: ffffffffffffffda RBX: 00007f3ebd9e76c0 RCX: 00007f3ebcb5d04e
[  609.013355][T13514] RDX: 0000000000000001 RSI: 00007f3ebd9e70a0 RDI: 0000000000000005
[  609.013365][T13514] RBP: 00007f3ebd9e7090 R08: 0000000000000000 R09: 0000000000000000
[  609.013374][T13514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  609.013382][T13514] R13: 00007f3ebce16128 R14: 00007f3ebce16090 R15: 00007f3ebcf3fa48
[  609.013408][T13514]  </TASK>
[  609.250476][T13500] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2458'.
[  609.348680][T13521] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2466'.
[  609.358431][T13521] 8021q: VLANs not supported on ip6gre0
[  609.378343][T10335] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  609.542671][   T10] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  609.562988][T10335] usb 5-1: Using ep0 maxpacket: 8
[  609.584803][T10335] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  609.592287][T10335] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  609.604122][T10335] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  609.632572][T10335] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  609.657431][T10335] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  609.679058][T10335] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  609.690825][  T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  609.712869][   T10] usb 3-1: config 0 has no interfaces?
[  609.718428][   T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  609.741564][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  609.750207][T10335] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  609.766472][T10335] usb 5-1: config 168 interface 0 has no altsetting 0
[  609.776378][   T10] usb 3-1: config 0 descriptor??
[  609.799083][T10335] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  609.806670][T10335] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  609.818054][ T5827] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  609.818399][T10335] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  609.837501][T10335] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  609.857787][T10335] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  609.883848][T10335] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  609.895762][T10335] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  609.922533][T10335] usb 5-1: config 168 interface 0 has no altsetting 0
[  609.930562][T10335] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  609.938110][T10335] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  609.949455][T10335] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  609.960998][T10335] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  609.973027][T10335] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  609.987190][T10335] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  609.989065][  T795] usb 3-1: USB disconnect, device number 37
[  609.999256][ T5834] Bluetooth: hci1: ISO packet for unknown connection handle 3840
[  610.013162][T10335] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  610.015170][ T5827] usb 1-1: Using ep0 maxpacket: 32
[  610.027470][T10335] usb 5-1: config 168 interface 0 has no altsetting 0
[  610.042010][T10335] usb 5-1: string descriptor 0 read error: -22
[  610.048614][T10335] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  610.058200][T10335] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  610.072147][ T5827] usb 1-1: config 0 has an invalid interface number: 188 but max is 0
[  610.091807][ T5827] usb 1-1: config 0 has no interface number 0
[  610.110214][ T5827] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  610.124110][T13530] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2470'.
[  610.140204][T10335] adutux 5-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  610.149970][ T5827] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  610.159568][ T5827] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  610.168133][ T5827] usb 1-1: Product: syz
[  610.248446][ T5827] usb 1-1: Manufacturer: syz
[  610.263407][ T5827] usb 1-1: SerialNumber: syz
[  610.278012][ T5827] usb 1-1: config 0 descriptor??
[  610.292978][T13525] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  610.501715][T10335] usb 5-1: USB disconnect, device number 14
[  610.651377][T13525] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  610.702993][  T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  610.897608][T13539] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2472'.
[  610.911431][T13539] netlink: 12296 bytes leftover after parsing attributes in process `syz.2.2472'.
[  610.924031][T13539] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2472'.
[  610.938997][T13542] FAULT_INJECTION: forcing a failure.
[  610.938997][T13542] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  610.956773][T13542] CPU: 0 UID: 0 PID: 13542 Comm: syz.5.2475 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  610.956805][T13542] Tainted: [L]=SOFTLOCKUP
[  610.956812][T13542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  610.956822][T13542] Call Trace:
[  610.956830][T13542]  <TASK>
[  610.956838][T13542]  dump_stack_lvl+0xe8/0x150
[  610.956867][T13542]  should_fail_ex+0x412/0x560
[  610.956897][T13542]  _copy_from_user+0x2d/0xb0
[  610.956919][T13542]  copy_clone_args_from_user+0x5dc/0x740
[  610.956947][T13542]  ? __pfx_copy_clone_args_from_user+0x10/0x10
[  610.956983][T13542]  __se_sys_clone3+0x142/0x360
[  610.957011][T13542]  ? __pfx___se_sys_clone3+0x10/0x10
[  610.957063][T13542]  ? __pfx_ksys_write+0x10/0x10
[  610.957093][T13542]  do_syscall_64+0x14d/0xf80
[  610.957115][T13542]  ? trace_irq_disable+0x3b/0x150
[  610.957131][T13542]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  610.957149][T13542]  ? clear_bhb_loop+0x40/0x90
[  610.957168][T13542]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  610.957186][T13542] RIP: 0033:0x7f3ebcb9c819
[  610.957204][T13542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  610.957219][T13542] RSP: 002b:00007f3ebda07ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  610.957239][T13542] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f3ebcb9c819
[  610.957252][T13542] RDX: 00007f3ebda07f10 RSI: 0000000000000058 RDI: 00007f3ebda07f10
[  610.957264][T13542] RBP: 00007f3ebda08090 R08: 0000000000000000 R09: 0000000000000058
[  610.957275][T13542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  610.957285][T13542] R13: 00007f3ebce16038 R14: 00007f3ebce15fa0 R15: 00007f3ebcf3fa48
[  610.957322][T13542]  </TASK>
[  611.251829][T13549] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2477'.
[  611.262832][  T795] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  611.305474][   T30] kauditd_printk_skb: 155 callbacks suppressed
[  611.305493][   T30] audit: type=1326 audit(1775764456.591:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13550 comm="syz.2.2479" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2cdcd9c819 code=0x0
[  611.424672][  T795] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  611.433444][   T30] audit: type=1326 audit(1775764456.721:1804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13550 comm="syz.2.2479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cdcd9c819 code=0x7ffc0000
[  611.433652][  T795] usb 2-1: config 0 has no interface number 0
[  611.459188][   T30] audit: type=1326 audit(1775764456.721:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13550 comm="syz.2.2479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cdcd9c819 code=0x7ffc0000
[  611.489365][T10335] usb 6-1: new high-speed USB device number 60 using dummy_hcd
[  611.494922][  T795] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  611.497490][   T30] audit: type=1326 audit(1775764456.741:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13550 comm="syz.2.2479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cdcd9c819 code=0x7ffc0000
[  611.576256][   T30] audit: type=1326 audit(1775764456.741:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13550 comm="syz.2.2479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cdcd9c819 code=0x7ffc0000
[  611.604547][  T795] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  611.613218][  T795] usb 2-1: Product: syz
[  611.617558][  T795] usb 2-1: Manufacturer: syz
[  611.622195][  T795] usb 2-1: SerialNumber: syz
[  611.631253][  T795] usb 2-1: config 0 descriptor??
[  611.714010][T13557] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2480'.
[  611.738810][   T30] audit: type=1326 audit(1775764456.761:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13550 comm="syz.2.2479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f2cdcd9c819 code=0x7ffc0000
[  611.742732][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  611.769655][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  611.778895][T10335] usb 6-1: Using ep0 maxpacket: 16
[  611.785768][   T30] audit: type=1326 audit(1775764456.811:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13550 comm="syz.2.2479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2cdcd5d04e code=0x7ffc0000
[  611.809465][   T30] audit: type=1326 audit(1775764456.821:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13550 comm="syz.2.2479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2cdcd5d04e code=0x7ffc0000
[  611.832438][T10335] usb 6-1: config 0 has an invalid interface number: 41 but max is 0
[  611.841197][ T5827] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  611.846463][T10335] usb 6-1: config 0 has no interface number 0
[  611.852642][ T5827] asix 1-1:0.188: probe with driver asix failed with error -32
[  611.858889][T10335] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  611.877439][T10335] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  611.887919][T10335] usb 6-1: config 0 interface 41 has no altsetting 0
[  611.894873][   T30] audit: type=1326 audit(1775764456.821:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13550 comm="syz.2.2479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2cdcd5d04e code=0x7ffc0000
[  611.926851][T10335] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[  611.936352][T10335] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  611.945358][T10335] usb 6-1: Product: syz
[  611.949911][T10335] usb 6-1: Manufacturer: syz
[  611.950144][  T795] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state
[  611.955041][   T30] audit: type=1326 audit(1775764456.821:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13550 comm="syz.2.2479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2cdcd5d04e code=0x7ffc0000
[  611.967577][  T795] usb 2-1: Direct firmware load for dvb-usb-ec168.fw failed with error -2
[  611.986792][T10335] usb 6-1: SerialNumber: syz
[  612.009103][T10335] usb 6-1: config 0 descriptor??
[  612.022803][T13547] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  612.030329][T13547] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  612.092295][  T795] usb 2-1: Falling back to sysfs fallback for: dvb-usb-ec168.fw
[  612.291705][T13547] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  612.299456][T13547] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  612.435116][T13565] FAULT_INJECTION: forcing a failure.
[  612.435116][T13565] name failslab, interval 1, probability 0, space 0, times 0
[  612.537393][T13565] CPU: 1 UID: 0 PID: 13565 Comm: syz.1.2481 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  612.537424][T13565] Tainted: [L]=SOFTLOCKUP
[  612.537431][T13565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  612.537443][T13565] Call Trace:
[  612.537450][T13565]  <TASK>
[  612.537458][T13565]  dump_stack_lvl+0xe8/0x150
[  612.537488][T13565]  should_fail_ex+0x412/0x560
[  612.537520][T13565]  should_failslab+0xa8/0x100
[  612.537545][T13565]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  612.537566][T13565]  ? __alloc_skb+0x186/0x7d0
[  612.537586][T13565]  ? __alloc_skb+0x1d0/0x7d0
[  612.537604][T13565]  ? __local_bh_enable_ip+0xd0/0x130
[  612.537630][T13565]  __alloc_skb+0x1d0/0x7d0
[  612.537655][T13565]  netlink_sendmsg+0x5d4/0xb40
[  612.537684][T13565]  ? __pfx_netlink_sendmsg+0x10/0x10
[  612.537706][T13565]  ? aa_sock_msg_perm+0xf1/0x1b0
[  612.537726][T13565]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  612.537741][T13565]  ____sys_sendmsg+0x972/0x9f0
[  612.537754][T13565]  ? __lock_acquire+0x6b5/0x2cf0
[  612.537774][T13565]  ? __pfx_____sys_sendmsg+0x10/0x10
[  612.537804][T13565]  ? import_iovec+0x73/0xa0
[  612.537828][T13565]  ___sys_sendmsg+0x2a5/0x360
[  612.537856][T13565]  ? __pfx____sys_sendmsg+0x10/0x10
[  612.537876][T13565]  ? kstrtouint+0x6e/0xe0
[  612.537919][T13565]  ? __fget_files+0x2a/0x420
[  612.537934][T13565]  ? __fget_files+0x3a0/0x420
[  612.537958][T13565]  __sys_sendmmsg+0x27c/0x4e0
[  612.537984][T13565]  ? __pfx___sys_sendmmsg+0x10/0x10
[  612.538002][T13565]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  612.538044][T13565]  ? ksys_write+0x242/0x270
[  612.538066][T13565]  ? __pfx_ksys_write+0x10/0x10
[  612.538092][T13565]  __x64_sys_sendmmsg+0xa0/0xc0
[  612.538117][T13565]  do_syscall_64+0x14d/0xf80
[  612.538139][T13565]  ? trace_irq_disable+0x3b/0x150
[  612.538163][T13565]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  612.538176][T13565]  ? clear_bhb_loop+0x40/0x90
[  612.538189][T13565]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  612.538199][T13565] RIP: 0033:0x7fe576d9c819
[  612.538210][T13565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  612.538219][T13565] RSP: 002b:00007fe574ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  612.538236][T13565] RAX: ffffffffffffffda RBX: 00007fe577015fa0 RCX: 00007fe576d9c819
[  612.538249][T13565] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003
[  612.538262][T13565] RBP: 00007fe574ff6090 R08: 0000000000000000 R09: 0000000000000000
[  612.538273][T13565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  612.538284][T13565] R13: 00007fe577016038 R14: 00007fe577015fa0 R15: 00007fe57713fa48
[  612.538313][T13565]  </TASK>
[  612.717463][T10335] sr9700 6-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address
[  612.782821][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  612.869946][T10335] usb 1-1: USB disconnect, device number 30
[  612.882589][ T5827] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  612.911680][T13573] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  612.923298][T13573] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  612.931663][T13573] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  612.953643][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  612.961853][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  612.970006][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  613.020944][   T10] usb 6-1: USB disconnect, device number 60
[  613.057126][T13573] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2484'.
[  613.112566][ T5827] usb 3-1: Using ep0 maxpacket: 16
[  613.120681][ T5827] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  613.139584][ T5827] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  613.150534][ T5827] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  613.158802][ T5827] usb 3-1: Product: syz
[  613.163469][ T5827] usb 3-1: Manufacturer: syz
[  613.169194][ T5827] usb 3-1: SerialNumber: syz
[  613.176215][ T5827] usb 3-1: config 0 descriptor??
[  613.452690][ T5827] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  613.609226][ T5827] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  613.621571][ T5827] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  613.638837][ T5827] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  613.648592][ T5827] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  613.656895][ T5827] usb 5-1: Manufacturer: syz
[  613.664048][ T5827] usb 5-1: config 0 descriptor??
[  613.702415][T13580] FAULT_INJECTION: forcing a failure.
[  613.702415][T13580] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  613.715860][T13580] CPU: 1 UID: 0 PID: 13580 Comm: syz.1.2487 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  613.715883][T13580] Tainted: [L]=SOFTLOCKUP
[  613.715887][T13580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  613.715894][T13580] Call Trace:
[  613.715899][T13580]  <TASK>
[  613.715904][T13580]  dump_stack_lvl+0xe8/0x150
[  613.715924][T13580]  should_fail_ex+0x412/0x560
[  613.715943][T13580]  _copy_from_user+0x2d/0xb0
[  613.715957][T13580]  __copy_msghdr+0x3c5/0x5b0
[  613.715973][T13580]  ___sys_sendmsg+0x213/0x360
[  613.715988][T13580]  ? __pfx____sys_sendmsg+0x10/0x10
[  613.716004][T13580]  ? kstrtouint+0x6e/0xe0
[  613.716031][T13580]  ? __fget_files+0x2a/0x420
[  613.716042][T13580]  ? __fget_files+0x3a0/0x420
[  613.716056][T13580]  __sys_sendmmsg+0x27c/0x4e0
[  613.716072][T13580]  ? __pfx___sys_sendmmsg+0x10/0x10
[  613.716084][T13580]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  613.716111][T13580]  ? ksys_write+0x242/0x270
[  613.716124][T13580]  ? __pfx_ksys_write+0x10/0x10
[  613.716138][T13580]  __x64_sys_sendmmsg+0xa0/0xc0
[  613.716152][T13580]  do_syscall_64+0x14d/0xf80
[  613.716165][T13580]  ? trace_irq_disable+0x3b/0x150
[  613.716175][T13580]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  613.716185][T13580]  ? clear_bhb_loop+0x40/0x90
[  613.716198][T13580]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  613.716209][T13580] RIP: 0033:0x7fe576d9c819
[  613.716220][T13580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  613.716229][T13580] RSP: 002b:00007fe574ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  613.716247][T13580] RAX: ffffffffffffffda RBX: 00007fe577015fa0 RCX: 00007fe576d9c819
[  613.716260][T13580] RDX: 0000000000000001 RSI: 000020000000fc40 RDI: 0000000000000003
[  613.716270][T13580] RBP: 00007fe574ff6090 R08: 0000000000000000 R09: 0000000000000000
[  613.716289][T13580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  613.716299][T13580] R13: 00007fe577016038 R14: 00007fe577015fa0 R15: 00007fe57713fa48
[  613.716323][T13580]  </TASK>
[  613.992820][ T5912] usb 6-1: new high-speed USB device number 61 using dummy_hcd
[  614.059413][T13585] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2489'.
[  614.149776][ T5912] usb 6-1: Using ep0 maxpacket: 32
[  614.158788][ T5827] pyra 0003:1E7D:2CF6.0024: unknown main item tag 0x0
[  614.165905][ T5827] pyra 0003:1E7D:2CF6.0024: unknown main item tag 0x0
[  614.178039][ T5827] pyra 0003:1E7D:2CF6.0024: unknown main item tag 0x0
[  614.185106][ T5827] pyra 0003:1E7D:2CF6.0024: unknown main item tag 0x0
[  614.192022][ T5827] pyra 0003:1E7D:2CF6.0024: unknown main item tag 0x0
[  614.199060][ T5827] pyra 0003:1E7D:2CF6.0024: unknown main item tag 0x0
[  614.268717][ T5827] pyra 0003:1E7D:2CF6.0024: unknown main item tag 0x0
[  614.276267][ T5912] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  614.307655][ T5912] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  614.316681][ T5827] pyra 0003:1E7D:2CF6.0024: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0
[  614.353786][ T5912] usb 6-1: config 0 descriptor??
[  614.383003][ T5912] as10x_usb: device has been detected
[  614.388908][ T5912] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  614.411157][ T5912] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  614.435257][ T5912] as10x_usb: error during firmware upload part1
[  614.442028][ T5912] Registered device nBox DVB-T Dongle
[  614.561171][T13578] FAULT_INJECTION: forcing a failure.
[  614.561171][T13578] name failslab, interval 1, probability 0, space 0, times 0
[  614.580205][T13578] CPU: 1 UID: 0 PID: 13578 Comm: syz.5.2486 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  614.580225][T13578] Tainted: [L]=SOFTLOCKUP
[  614.580230][T13578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  614.580237][T13578] Call Trace:
[  614.580242][T13578]  <TASK>
[  614.580248][T13578]  dump_stack_lvl+0xe8/0x150
[  614.580267][T13578]  should_fail_ex+0x412/0x560
[  614.580288][T13578]  should_failslab+0xa8/0x100
[  614.580304][T13578]  __kmalloc_noprof+0xe8/0x760
[  614.580317][T13578]  ? tomoyo_encode+0x28b/0x550
[  614.580331][T13578]  tomoyo_encode+0x28b/0x550
[  614.580344][T13578]  tomoyo_realpath_from_path+0x58d/0x5d0
[  614.580360][T13578]  ? tomoyo_path_number_perm+0x219/0x630
[  614.580374][T13578]  tomoyo_path_number_perm+0x246/0x630
[  614.580390][T13578]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  614.580405][T13578]  ? __lock_acquire+0x6b5/0x2cf0
[  614.580424][T13578]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  614.580449][T13578]  ? __fget_files+0x2a/0x420
[  614.580460][T13578]  ? __fget_files+0x2a/0x420
[  614.580469][T13578]  ? __fget_files+0x3a0/0x420
[  614.580477][T13578]  ? __fget_files+0x2a/0x420
[  614.580488][T13578]  security_file_ioctl+0xc3/0x2a0
[  614.580504][T13578]  __se_sys_ioctl+0x47/0x170
[  614.580518][T13578]  do_syscall_64+0x14d/0xf80
[  614.580532][T13578]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  614.580543][T13578]  ? clear_bhb_loop+0x40/0x90
[  614.580557][T13578]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  614.580567][T13578] RIP: 0033:0x7f3ebcb9c819
[  614.580578][T13578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  614.580587][T13578] RSP: 002b:00007f3ebda08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  614.580599][T13578] RAX: ffffffffffffffda RBX: 00007f3ebce15fa0 RCX: 00007f3ebcb9c819
[  614.580607][T13578] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000005
[  614.580614][T13578] RBP: 00007f3ebda08090 R08: 0000000000000000 R09: 0000000000000000
[  614.580621][T13578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  614.580626][T13578] R13: 00007f3ebce16038 R14: 00007f3ebce15fa0 R15: 00007f3ebcf3fa48
[  614.580642][T13578]  </TASK>
[  614.580923][T13578] ERROR: Out of memory at tomoyo_realpath_from_path.
[  614.814958][ T5912] usb 6-1: USB disconnect, device number 61
[  614.886837][ T5912] Unregistered device nBox DVB-T Dongle
[  614.891483][ T5912] as10x_usb: device has been disconnected
[  615.217130][T13576] input: syz0 as /devices/virtual/input/input88
[  615.239343][T13576] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2485'.
[  615.283498][ T5827] pyra 0003:1E7D:2CF6.0024: couldn't init struct pyra_device
[  615.291034][ T5827] pyra 0003:1E7D:2CF6.0024: couldn't install mouse
[  615.305136][ T5827] pyra 0003:1E7D:2CF6.0024: probe with driver pyra failed with error -71
[  615.318315][ T5827] usb 5-1: USB disconnect, device number 15
[  615.367524][T13603] fido_id[13603]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  615.452659][ T1224] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  615.517885][ T5827] usb 3-1: USB disconnect, device number 38
[  615.622622][ T1224] usb 1-1: Using ep0 maxpacket: 32
[  615.628566][T13611] IPVS: length: 4096 != 8
[  615.629688][ T1224] usb 1-1: config 0 has an invalid interface number: 188 but max is 0
[  615.699390][T13613] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2495'.
[  615.718211][ T1224] usb 1-1: config 0 has no interface number 0
[  615.724599][ T1224] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  615.754112][ T1224] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  615.763318][ T1224] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  615.771691][ T1224] usb 1-1: Product: syz
[  615.777199][ T1224] usb 1-1: Manufacturer: syz
[  615.782085][ T1224] usb 1-1: SerialNumber: syz
[  615.790254][ T1224] usb 1-1: config 0 descriptor??
[  615.796524][T13601] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  615.985708][ T5827] net_ratelimit: 12 callbacks suppressed
[  615.985733][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  616.010545][T13601] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  616.218529][T13621] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2498'.
[  616.722558][ T5827] usb 6-1: new high-speed USB device number 62 using dummy_hcd
[  616.924165][ T5827] usb 6-1: config 0 has no interfaces?
[  616.930007][ T5827] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  616.942718][   T10] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  616.946816][ T5827] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  616.994724][ T5827] usb 6-1: config 0 descriptor??
[  617.025871][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  617.059540][ T1224] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  617.070249][ T1224] asix 1-1:0.188: probe with driver asix failed with error -61
[  617.083115][   T10] usb 3-1: device descriptor read/64, error -71
[  617.204770][ T5834] Bluetooth: hci3: ISO packet for unknown connection handle 3840
[  617.205653][ T1224] usb 6-1: USB disconnect, device number 62
[  617.282934][ T5827] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  617.324390][   T10] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  617.432864][ T5827] usb 5-1: Using ep0 maxpacket: 32
[  617.439886][ T5827] usb 5-1: unable to get BOS descriptor or descriptor too short
[  617.448621][ T5827] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  617.458839][ T5827] usb 5-1: config 7 has 0 interfaces, different from the descriptor's value: 1
[  617.470058][ T5827] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[  617.472639][   T10] usb 3-1: device descriptor read/64, error -71
[  617.479562][ T5827] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  617.494187][ T5827] usb 5-1: Product: syz
[  617.498400][ T5827] usb 5-1: Manufacturer: syz
[  617.503080][ T5827] usb 5-1: SerialNumber: syz
[  617.592999][   T10] usb usb3-port1: attempt power cycle
[  617.825284][T10335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  617.942808][   T10] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  617.974128][   T10] usb 3-1: device descriptor read/8, error -71
[  617.992584][ T5827] usb 6-1: new low-speed USB device number 63 using dummy_hcd
[  618.062791][ T1224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  618.144355][ T5827] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  618.161606][ T5827] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  618.179401][ T5827] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8
[  618.201942][ T5827] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  618.213525][ T5827] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  618.228901][T13641] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  618.236622][   T10] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  618.249535][ T5827] hub 6-1:1.0: bad descriptor, ignoring hub
[  618.256688][ T5827] hub 6-1:1.0: probe with driver hub failed with error -5
[  618.264980][ T5827] cdc_wdm 6-1:1.0: skipping garbage
[  618.270306][ T5827] cdc_wdm 6-1:1.0: skipping garbage
[  618.273502][   T10] usb 3-1: device descriptor read/8, error -71
[  618.292937][ T1224] usb 1-1: USB disconnect, device number 31
[  618.305064][ T5827] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  618.312770][ T5827] cdc_wdm 6-1:1.0: Unknown control protocol
[  618.383574][   T10] usb usb3-port1: unable to enumerate USB device
[  618.652704][ T1224] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  618.804038][ T1224] usb 1-1: config 0 has no interfaces?
[  618.809593][ T1224] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  618.818970][ T1224] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  618.828900][ T1224] usb 1-1: config 0 descriptor??
[  619.039776][ T5834] Bluetooth: hci0: ISO packet for unknown connection handle 0
[  619.049022][   T10] usb 1-1: USB disconnect, device number 32
[  619.112986][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  619.253107][T13641] usb 6-1: reset low-speed USB device number 63 using dummy_hcd
[  619.453692][T10335] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  619.543546][T13641] usb 6-1: device firmware changed
[  619.549384][ T5827] usb 6-1: USB disconnect, device number 63
[  619.603717][T10335] usb 3-1: Using ep0 maxpacket: 16
[  619.610768][T10335] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  619.624607][T10335] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  619.634283][T10335] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  619.642285][T10335] usb 3-1: Product: syz
[  619.647067][T10335] usb 3-1: Manufacturer: syz
[  619.651798][T10335] usb 3-1: SerialNumber: syz
[  619.658637][T10335] usb 3-1: config 0 descriptor??
[  619.703524][ T5827] usb 6-1: new low-speed USB device number 64 using dummy_hcd
[  619.842633][ T5912] usb 1-1: new full-speed USB device number 33 using dummy_hcd
[  619.874250][ T5827] usb 6-1: config 0 has no interfaces?
[  619.879866][ T5827] usb 6-1: New USB device found, idVendor=2801, idProduct=0201, bcdDevice=2a.d5
[  619.889245][ T5827] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  619.900099][ T5827] usb 6-1: config 0 descriptor??
[  619.972655][ T5912] usb 1-1: device descriptor read/64, error -71
[  620.010139][ T5827] usb 5-1: USB disconnect, device number 16
[  620.124453][ T1224] usb 6-1: USB disconnect, device number 64
[  620.143774][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  620.222756][ T5912] usb 1-1: new full-speed USB device number 34 using dummy_hcd
[  620.362560][ T5912] usb 1-1: device descriptor read/64, error -71
[  620.493855][ T5912] usb usb1-port1: attempt power cycle
[  620.842572][ T5912] usb 1-1: new full-speed USB device number 35 using dummy_hcd
[  620.912646][T10335] usb 6-1: new high-speed USB device number 65 using dummy_hcd
[  621.004621][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  621.037224][ T5912] usb 1-1: device descriptor read/8, error -71
[  621.225472][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  621.392594][T10335] usb 6-1: Using ep0 maxpacket: 32
[  621.400821][T10335] usb 6-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[  621.410274][T10335] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  621.419167][T10335] usb 6-1: Product: syz
[  621.426817][T13670] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2511'.
[  621.435933][T10335] usb 6-1: Manufacturer: syz
[  621.435940][ T5912] usb 1-1: new full-speed USB device number 36 using dummy_hcd
[  621.448962][T10335] usb 6-1: SerialNumber: syz
[  621.455981][T10335] usb 6-1: config 0 descriptor??
[  621.463521][ T5912] usb 1-1: device descriptor read/8, error -71
[  621.465938][T10335] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state.
[  621.477830][T10335] dvb-usb: bulk message failed: -22 (2/0)
[  621.486467][T10335] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  621.496418][T10335] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold)
[  621.504807][T10335] usb 6-1: media controller created
[  621.518726][T10335] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  621.538390][T10335] usb 6-1: selecting invalid altsetting 7
[  621.544282][T10335] cxusb: set interface failed
[  621.549151][T10335] dvb-usb: bulk message failed: -22 (1/0)
[  621.572896][ T5912] usb usb1-port1: unable to enumerate USB device
[  621.580509][T10335] DVB: Unable to find symbol lgdt330x_attach()
[  621.586800][T10335] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold'
[  621.663441][T10335] rc_core: IR keymap rc-dvico-portable not found
[  621.675005][T10335] Registered IR keymap rc-empty
[  621.681216][T13658] dvb-usb: bulk message failed: -22 (3/0)
[  621.681313][T10335] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0
[  621.705859][T10335] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input89
[  621.717930][T10335] dvb-usb: schedule remote query interval to 100 msecs.
[  621.725204][T10335] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected.
[  621.737814][T10335] usb 6-1: USB disconnect, device number 65
[  621.811750][T10335] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected.
[  622.251815][T10335] usb 3-1: USB disconnect, device number 43
[  622.303553][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  622.325305][T13681] FAULT_INJECTION: forcing a failure.
[  622.325305][T13681] name failslab, interval 1, probability 0, space 0, times 0
[  622.346011][T13681] CPU: 1 UID: 0 PID: 13681 Comm: syz.5.2514 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  622.346042][T13681] Tainted: [L]=SOFTLOCKUP
[  622.346049][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  622.346059][T13681] Call Trace:
[  622.346066][T13681]  <TASK>
[  622.346074][T13681]  dump_stack_lvl+0xe8/0x150
[  622.346102][T13681]  should_fail_ex+0x412/0x560
[  622.346130][T13681]  should_failslab+0xa8/0x100
[  622.346152][T13681]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  622.346172][T13681]  ? __alloc_skb+0x186/0x7d0
[  622.346189][T13681]  ? __alloc_skb+0x1d0/0x7d0
[  622.346207][T13681]  ? __local_bh_enable_ip+0xd0/0x130
[  622.346232][T13681]  __alloc_skb+0x1d0/0x7d0
[  622.346265][T13681]  netlink_sendmsg+0x5d4/0xb40
[  622.346292][T13681]  ? __pfx_netlink_sendmsg+0x10/0x10
[  622.346314][T13681]  ? aa_sock_msg_perm+0xf1/0x1b0
[  622.346341][T13681]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  622.346364][T13681]  ____sys_sendmsg+0x972/0x9f0
[  622.346392][T13681]  ? __pfx_____sys_sendmsg+0x10/0x10
[  622.346418][T13681]  ? import_iovec+0x73/0xa0
[  622.346439][T13681]  ___sys_sendmsg+0x2a5/0x360
[  622.346463][T13681]  ? __pfx____sys_sendmsg+0x10/0x10
[  622.346510][T13681]  ? __fget_files+0x2a/0x420
[  622.346525][T13681]  ? __fget_files+0x3a0/0x420
[  622.346550][T13681]  __x64_sys_sendmsg+0x1bd/0x2a0
[  622.346571][T13681]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  622.346600][T13681]  ? __pfx_ksys_write+0x10/0x10
[  622.346628][T13681]  do_syscall_64+0x14d/0xf80
[  622.346650][T13681]  ? trace_irq_disable+0x3b/0x150
[  622.346664][T13681]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  622.346682][T13681]  ? clear_bhb_loop+0x40/0x90
[  622.346700][T13681]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  622.346717][T13681] RIP: 0033:0x7f3ebcb9c819
[  622.346733][T13681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  622.346747][T13681] RSP: 002b:00007f3ebda08028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  622.346766][T13681] RAX: ffffffffffffffda RBX: 00007f3ebce15fa0 RCX: 00007f3ebcb9c819
[  622.346777][T13681] RDX: 0000000000000010 RSI: 0000200000000240 RDI: 0000000000000003
[  622.346788][T13681] RBP: 00007f3ebda08090 R08: 0000000000000000 R09: 0000000000000000
[  622.346798][T13681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  622.346807][T13681] R13: 00007f3ebce16038 R14: 00007f3ebce15fa0 R15: 00007f3ebcf3fa48
[  622.346832][T13681]  </TASK>
[  622.705918][T13689] netlink: 'syz.2.2515': attribute type 7 has an invalid length.
[  622.874555][T13689] netlink: 'syz.2.2515': attribute type 8 has an invalid length.
[  622.938228][T13689] netlink: 'syz.2.2515': attribute type 13 has an invalid length.
[  623.000598][T13693] FAULT_INJECTION: forcing a failure.
[  623.000598][T13693] name failslab, interval 1, probability 0, space 0, times 0
[  623.054753][T13693] CPU: 0 UID: 0 PID: 13693 Comm: syz.5.2517 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  623.054773][T13693] Tainted: [L]=SOFTLOCKUP
[  623.054777][T13693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  623.054784][T13693] Call Trace:
[  623.054789][T13693]  <TASK>
[  623.054795][T13693]  dump_stack_lvl+0xe8/0x150
[  623.054814][T13693]  should_fail_ex+0x412/0x560
[  623.054833][T13693]  should_failslab+0xa8/0x100
[  623.054849][T13693]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  623.054861][T13693]  ? __alloc_skb+0x186/0x7d0
[  623.054874][T13693]  ? __alloc_skb+0x1d0/0x7d0
[  623.054884][T13693]  ? __local_bh_enable_ip+0xd0/0x130
[  623.054900][T13693]  __alloc_skb+0x1d0/0x7d0
[  623.054911][T13693]  ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20
[  623.054927][T13693]  netlink_sendmsg+0x5d4/0xb40
[  623.054944][T13693]  ? __pfx_netlink_sendmsg+0x10/0x10
[  623.054956][T13693]  ? aa_sock_msg_perm+0xf1/0x1b0
[  623.054973][T13693]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  623.054989][T13693]  ____sys_sendmsg+0x972/0x9f0
[  623.055007][T13693]  ? __pfx_____sys_sendmsg+0x10/0x10
[  623.055024][T13693]  ? import_iovec+0x73/0xa0
[  623.055038][T13693]  ___sys_sendmsg+0x2a5/0x360
[  623.055054][T13693]  ? __pfx____sys_sendmsg+0x10/0x10
[  623.055089][T13693]  ? __fget_files+0x2a/0x420
[  623.055099][T13693]  ? __fget_files+0x3a0/0x420
[  623.055112][T13693]  __x64_sys_sendmsg+0x1bd/0x2a0
[  623.055127][T13693]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  623.055145][T13693]  ? __pfx_ksys_write+0x10/0x10
[  623.055162][T13693]  do_syscall_64+0x14d/0xf80
[  623.055176][T13693]  ? trace_irq_disable+0x3b/0x150
[  623.055185][T13693]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  623.055195][T13693]  ? clear_bhb_loop+0x40/0x90
[  623.055208][T13693]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  623.055218][T13693] RIP: 0033:0x7f3ebcb9c819
[  623.055229][T13693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  623.055239][T13693] RSP: 002b:00007f3ebda08028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  623.055251][T13693] RAX: ffffffffffffffda RBX: 00007f3ebce15fa0 RCX: 00007f3ebcb9c819
[  623.055258][T13693] RDX: 0000000000004004 RSI: 0000200000000080 RDI: 0000000000000003
[  623.055265][T13693] RBP: 00007f3ebda08090 R08: 0000000000000000 R09: 0000000000000000
[  623.055272][T13693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  623.055278][T13693] R13: 00007f3ebce16038 R14: 00007f3ebce15fa0 R15: 00007f3ebcf3fa48
[  623.055293][T13693]  </TASK>
[  623.316017][ T5912] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  623.352633][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  623.413350][T13699] loop5: detected capacity change from 0 to 7
[  623.497157][ T5838] Dev loop5: unable to read RDB block 7
[  623.504001][ T5838]  loop5: unable to read partition table
[  623.509840][ T5838] loop5: partition table beyond EOD, truncated
[  623.596262][ T5912] usb 1-1: Using ep0 maxpacket: 32
[  623.623298][T13699] Dev loop5: unable to read RDB block 7
[  623.629063][ T5912] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  623.640805][T13699]  loop5: unable to read partition table
[  623.647305][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  623.660501][T13704] netlink: 'syz.5.2519': attribute type 1 has an invalid length.
[  623.693078][T13699] loop5: partition table beyond EOD, truncated
[  623.711049][T13699] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  623.727843][ T5912] usb 1-1: config 0 descriptor??
[  623.742820][T10335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  623.882680][ T5912] as10x_usb: device has been detected
[  623.888588][ T5912] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  623.905266][ T5912] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  623.917031][ T5912] as10x_usb: error during firmware upload part1
[  623.933154][ T5912] Registered device nBox DVB-T Dongle
[  623.998258][T10335] usb 1-1: USB disconnect, device number 37
[  624.048183][T13704] 8021q: adding VLAN 0 to HW filter on device bond1
[  624.060775][T10335] Unregistered device nBox DVB-T Dongle
[  624.072634][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  624.087433][T10335] as10x_usb: device has been disconnected
[  624.504933][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  624.513750][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  624.520086][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  624.751175][T13719] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2522'.
[  624.914632][T13728] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2523'.
[  625.033522][   T10] usb 1-1: new full-speed USB device number 38 using dummy_hcd
[  625.184504][   T10] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  625.199230][   T10] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  625.222275][   T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  625.242349][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  625.279583][   T10] hub 1-1:4.0: USB hub found
[  625.432492][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  625.492622][ T5912] usb 6-1: new full-speed USB device number 66 using dummy_hcd
[  625.492656][T13727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  625.570403][T13727] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  625.592886][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  625.609902][T13727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  625.634601][T13727] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  625.666225][ T5912] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  625.674622][ T5912] usb 6-1: config 0 has no interface number 0
[  625.738525][   T10] hub 1-1:4.0: 5 ports detected
[  625.746120][   T10] usb 1-1: selecting invalid altsetting 1
[  625.762198][   T10] hub 1-1:4.0: Using single TT (err -22)
[  625.770118][   T10] hub 1-1:4.0: insufficient power available to use all downstream ports
[  625.783957][ T5912] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  625.815075][ T5912] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  625.841745][ T5912] usb 6-1: config 0 descriptor??
[  625.858481][ T5912] usb 6-1: selecting invalid altsetting 1
[  625.870080][ T5912] dvb_ttusb_budget: ttusb_init_controller: error
[  625.880397][ T5912] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  625.939422][T13727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  625.969466][T13727] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  626.056910][T13731] FAULT_INJECTION: forcing a failure.
[  626.056910][T13731] name failslab, interval 1, probability 0, space 0, times 0
[  626.093524][ T5912] DVB: Unable to find symbol cx22700_attach()
[  626.245719][T13742] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2529'.
[  626.264900][T13731] CPU: 1 UID: 0 PID: 13731 Comm: syz.5.2525 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  626.264921][T13731] Tainted: [L]=SOFTLOCKUP
[  626.264925][T13731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  626.264932][T13731] Call Trace:
[  626.264937][T13731]  <TASK>
[  626.264943][T13731]  dump_stack_lvl+0xe8/0x150
[  626.264971][T13731]  should_fail_ex+0x412/0x560
[  626.265004][T13731]  should_failslab+0xa8/0x100
[  626.265030][T13731]  __kmalloc_noprof+0xe8/0x760
[  626.265050][T13731]  ? tomoyo_encode+0x28b/0x550
[  626.265080][T13731]  tomoyo_encode+0x28b/0x550
[  626.265102][T13731]  tomoyo_realpath_from_path+0x58d/0x5d0
[  626.265130][T13731]  ? tomoyo_path_number_perm+0x219/0x630
[  626.265153][T13731]  tomoyo_path_number_perm+0x246/0x630
[  626.265178][T13731]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  626.265204][T13731]  ? __lock_acquire+0x6b5/0x2cf0
[  626.265235][T13731]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  626.265275][T13731]  ? __fget_files+0x2a/0x420
[  626.265295][T13731]  ? __fget_files+0x2a/0x420
[  626.265309][T13731]  ? __fget_files+0x3a0/0x420
[  626.265324][T13731]  ? __fget_files+0x2a/0x420
[  626.265344][T13731]  security_file_ioctl+0xc3/0x2a0
[  626.265463][T13731]  __se_sys_ioctl+0x47/0x170
[  626.265492][T13731]  do_syscall_64+0x14d/0xf80
[  626.265516][T13731]  ? trace_irq_disable+0x3b/0x150
[  626.265532][T13731]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  626.265545][T13731]  ? clear_bhb_loop+0x40/0x90
[  626.265559][T13731]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  626.265569][T13731] RIP: 0033:0x7f3ebcb9c819
[  626.265582][T13731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  626.265595][T13731] RSP: 002b:00007f3ebda08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  626.265614][T13731] RAX: ffffffffffffffda RBX: 00007f3ebce15fa0 RCX: 00007f3ebcb9c819
[  626.265628][T13731] RDX: 00002000000000c0 RSI: 0000000000000707 RDI: 0000000000000004
[  626.265641][T13731] RBP: 00007f3ebda08090 R08: 0000000000000000 R09: 0000000000000000
[  626.265652][T13731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  626.265664][T13731] R13: 00007f3ebce16038 R14: 00007f3ebce15fa0 R15: 00007f3ebcf3fa48
[  626.265688][T13731]  </TASK>
[  626.265707][T13731] ERROR: Out of memory at tomoyo_realpath_from_path.
[  626.396096][T13744] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  626.607250][ T5912] DVB: Unable to find symbol tda10046_attach()
[  626.613702][ T5912] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  626.639326][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  626.647934][ T5912] usb 6-1: USB disconnect, device number 66
[  626.833994][   T10] hub 1-1:4.0: hub_hub_status failed (err = -71)
[  626.852923][   T10] hub 1-1:4.0: config failed, can't get hub status (err -71)
[  626.895934][   T10] usb 1-1: USB disconnect, device number 38
[  627.158251][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  627.663173][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  628.202796][T13768] netlink: 'syz.5.2535': attribute type 21 has an invalid length.
[  628.206963][   T30] kauditd_printk_skb: 89 callbacks suppressed
[  628.206981][   T30] audit: type=1326 audit(1775764473.481:1902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13762 comm="syz.5.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ebcb9c819 code=0x7ffc0000
[  628.240037][T13768] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2535'.
[  628.280379][   T30] audit: type=1326 audit(1775764473.481:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13762 comm="syz.5.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ebcb9c819 code=0x7ffc0000
[  628.325399][   T30] audit: type=1326 audit(1775764473.481:1904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13762 comm="syz.5.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3ebcb9c819 code=0x7ffc0000
[  628.362696][   T30] audit: type=1326 audit(1775764473.481:1905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13762 comm="syz.5.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ebcb9c819 code=0x7ffc0000
[  628.464167][   T30] audit: type=1326 audit(1775764473.481:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13762 comm="syz.5.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f3ebcb9c819 code=0x7ffc0000
[  628.702711][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  628.738165][T13775] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2537'.
[  628.742652][   T30] audit: type=1326 audit(1775764473.481:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13762 comm="syz.5.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ebcb9c819 code=0x7ffc0000
[  628.811654][T13781] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2536'.
[  628.846584][   T30] audit: type=1326 audit(1775764473.481:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13762 comm="syz.5.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f3ebcb9c819 code=0x7ffc0000
[  628.906768][   T30] audit: type=1326 audit(1775764473.481:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13762 comm="syz.5.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ebcb9c819 code=0x7ffc0000
[  628.940775][T13785] FAULT_INJECTION: forcing a failure.
[  628.940775][T13785] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  628.959291][T13785] CPU: 0 UID: 0 PID: 13785 Comm: syz.0.2540 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  628.959322][T13785] Tainted: [L]=SOFTLOCKUP
[  628.959329][T13785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  628.959339][T13785] Call Trace:
[  628.959346][T13785]  <TASK>
[  628.959354][T13785]  dump_stack_lvl+0xe8/0x150
[  628.959385][T13785]  should_fail_ex+0x412/0x560
[  628.959417][T13785]  _copy_from_user+0x2d/0xb0
[  628.959440][T13785]  copy_from_sockptr_offset+0x66/0xa0
[  628.959467][T13785]  tls_setsockopt+0xd2c/0x15c0
[  628.959497][T13785]  ? __pfx_tls_setsockopt+0x10/0x10
[  628.959528][T13785]  ? __fget_files+0x2a/0x420
[  628.959544][T13785]  ? aa_sock_opt_perm+0xff/0x1a0
[  628.959565][T13785]  ? sock_common_setsockopt+0x36/0xc0
[  628.959591][T13785]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  628.959612][T13785]  do_sock_setsockopt+0x17c/0x1b0
[  628.959640][T13785]  __x64_sys_setsockopt+0x13d/0x1b0
[  628.959667][T13785]  do_syscall_64+0x14d/0xf80
[  628.959691][T13785]  ? trace_irq_disable+0x3b/0x150
[  628.959707][T13785]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  628.959727][T13785]  ? clear_bhb_loop+0x40/0x90
[  628.959750][T13785]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  628.959767][T13785] RIP: 0033:0x7fa159b9c819
[  628.959783][T13785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  628.959799][T13785] RSP: 002b:00007fa15a9ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  628.959819][T13785] RAX: ffffffffffffffda RBX: 00007fa159e15fa0 RCX: 00007fa159b9c819
[  628.959832][T13785] RDX: 0000000000000002 RSI: 000000000000011a RDI: 0000000000000003
[  628.959843][T13785] RBP: 00007fa15a9ed090 R08: 0000000000000028 R09: 0000000000000000
[  628.959859][T13785] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001
[  628.959871][T13785] R13: 00007fa159e16038 R14: 00007fa159e15fa0 R15: 00007fa159f3fa48
[  628.959901][T13785]  </TASK>
[  629.156621][   T30] audit: type=1326 audit(1775764473.481:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13762 comm="syz.5.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ebcb9c819 code=0x7ffc0000
[  629.182524][   T30] audit: type=1326 audit(1775764473.481:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13762 comm="syz.5.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3ebcb9c819 code=0x7ffc0000
[  629.366948][T13789] FAULT_INJECTION: forcing a failure.
[  629.366948][T13789] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  629.380233][T13789] CPU: 0 UID: 0 PID: 13789 Comm: syz.2.2542 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  629.380262][T13789] Tainted: [L]=SOFTLOCKUP
[  629.380268][T13789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  629.380278][T13789] Call Trace:
[  629.380285][T13789]  <TASK>
[  629.380294][T13789]  dump_stack_lvl+0xe8/0x150
[  629.380323][T13789]  should_fail_ex+0x412/0x560
[  629.380356][T13789]  _copy_to_user+0x31/0xb0
[  629.380380][T13789]  simple_read_from_buffer+0xe1/0x170
[  629.380408][T13789]  proc_fail_nth_read+0x1bb/0x230
[  629.380435][T13789]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  629.380463][T13789]  ? rw_verify_area+0x2a6/0x4d0
[  629.380483][T13789]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  629.380509][T13789]  vfs_read+0x20c/0xa70
[  629.380537][T13789]  ? __pfx_isotp_getsockopt+0x10/0x10
[  629.380561][T13789]  ? __might_fault+0xaf/0x130
[  629.380580][T13789]  ? __pfx_vfs_read+0x10/0x10
[  629.380596][T13789]  ? __get_user_nocheck_8+0x20/0x20
[  629.380617][T13789]  ? isotp_getsockopt+0x98/0x240
[  629.380638][T13789]  ? __pfx_isotp_getsockopt+0x10/0x10
[  629.380663][T13789]  ? do_sock_getsockopt+0x2d3/0x3f0
[  629.380693][T13789]  ksys_read+0x150/0x270
[  629.380715][T13789]  ? __pfx_ksys_read+0x10/0x10
[  629.380733][T13789]  ? __x64_sys_getsockopt+0x1a4/0x240
[  629.380762][T13789]  do_syscall_64+0x14d/0xf80
[  629.380781][T13789]  ? trace_irq_disable+0x3b/0x150
[  629.380795][T13789]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  629.380812][T13789]  ? clear_bhb_loop+0x40/0x90
[  629.380835][T13789]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  629.380849][T13789] RIP: 0033:0x7f2cdcd5d04e
[  629.380866][T13789] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  629.380880][T13789] RSP: 002b:00007f2cddbdbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  629.380899][T13789] RAX: ffffffffffffffda RBX: 00007f2cddbdc6c0 RCX: 00007f2cdcd5d04e
[  629.380913][T13789] RDX: 000000000000000f RSI: 00007f2cddbdc0a0 RDI: 0000000000000004
[  629.380925][T13789] RBP: 00007f2cddbdc090 R08: 0000000000000000 R09: 0000000000000000
[  629.380936][T13789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  629.380947][T13789] R13: 00007f2cdd016038 R14: 00007f2cdd015fa0 R15: 00007f2cdd13fa48
[  629.380974][T13789]  </TASK>
[  629.611300][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  629.700772][T13793] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  629.747484][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  629.926970][T13806] syzkaller0: entered promiscuous mode
[  630.015599][T13812] xt_hashlimit: size too large, truncated to 1048576
[  630.182636][   T29] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  630.222805][T10335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  630.332581][   T29] usb 3-1: Using ep0 maxpacket: 32
[  630.341019][   T29] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[  630.350857][   T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  630.359114][   T29] usb 3-1: Product: syz
[  630.363434][   T29] usb 3-1: Manufacturer: syz
[  630.368053][   T29] usb 3-1: SerialNumber: syz
[  630.375528][   T29] usb 3-1: config 0 descriptor??
[  630.383359][   T29] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state.
[  630.391042][   T29] dvb-usb: bulk message failed: -22 (2/0)
[  630.400707][   T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  630.410674][   T29] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold)
[  630.418918][   T29] usb 3-1: media controller created
[  630.431607][   T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  630.448847][   T29] usb 3-1: selecting invalid altsetting 7
[  630.454738][   T29] cxusb: set interface failed
[  630.459442][   T29] dvb-usb: bulk message failed: -22 (1/0)
[  630.486038][   T29] DVB: Unable to find symbol lgdt330x_attach()
[  630.492238][   T29] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold'
[  630.555020][   T29] rc_core: IR keymap rc-dvico-portable not found
[  630.562432][   T29] Registered IR keymap rc-empty
[  630.581637][T13821] syz_tun: left allmulticast mode
[  630.589244][   T29] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0
[  630.599462][T13821] syz_tun: left promiscuous mode
[  630.613477][   T29] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input90
[  630.625179][T13821] bridge0: port 3(syz_tun) entered disabled state
[  630.637447][   T29] dvb-usb: schedule remote query interval to 100 msecs.
[  630.645525][   T29] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected.
[  630.655979][T13824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  630.658378][T13821] bridge_slave_0: left allmulticast mode
[  630.665008][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  630.683836][   T29] usb 3-1: USB disconnect, device number 44
[  630.739004][T13821] bridge_slave_0: left promiscuous mode
[  630.745565][T13821] bridge0: port 1(bridge_slave_0) entered disabled state
[  630.774147][T13821] bridge_slave_1: left allmulticast mode
[  630.790408][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  630.805344][   T29] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected.
[  630.819490][T13821] bridge_slave_1: left promiscuous mode
[  630.826382][T13821] bridge0: port 2(bridge_slave_1) entered disabled state
[  630.856687][T13821] bond0: (slave bond_slave_0): Releasing backup interface
[  630.935433][T13821] team0: Port device team_slave_0 removed
[  630.939559][T13830] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2556'.
[  630.951395][T13821] team0: Port device team_slave_1 removed
[  630.958054][T13821] batman_adv: batadv0: Removing interface: batadv_slave_1
[  631.107377][T13837] netlink: 'syz.0.2559': attribute type 6 has an invalid length.
[  631.117225][T13837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2559'.
[  631.128588][T13839] netlink: 'syz.4.2560': attribute type 1 has an invalid length.
[  631.142207][T13839] loop2: detected capacity change from 0 to 7
[  631.151178][ T5838] Dev loop2: unable to read RDB block 7
[  631.160313][ T5838]  loop2: AHDI p1 p2 p3
[  631.165015][ T5838] loop2: partition table partially beyond EOD, truncated
[  631.176590][ T5838] loop2: p1 start 1601398130 is beyond EOD, truncated
[  631.184014][ T5838] loop2: p2 start 1702059890 is beyond EOD, truncated
[  631.192608][T13839] Dev loop2: unable to read RDB block 7
[  631.207190][T13839]  loop2: AHDI p1 p2 p3
[  631.209450][T13840] binder_alloc: 13838: binder_alloc_buf size -392 failed, no address space
[  631.211429][T13839] loop2: partition table partially beyond EOD, truncated
[  631.233921][T13839] loop2: p1 start 1601398130 is beyond EOD, truncated
[  631.234818][T13840] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[  631.240978][T13839] loop2: p2 start 1702059890 is beyond EOD, truncated
[  631.322927][   T29] usb 6-1: new low-speed USB device number 67 using dummy_hcd
[  631.365872][T13843] FAULT_INJECTION: forcing a failure.
[  631.365872][T13843] name failslab, interval 1, probability 0, space 0, times 0
[  631.407108][T13843] CPU: 1 UID: 0 PID: 13843 Comm: syz.2.2561 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  631.407141][T13843] Tainted: [L]=SOFTLOCKUP
[  631.407148][T13843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  631.407159][T13843] Call Trace:
[  631.407167][T13843]  <TASK>
[  631.407175][T13843]  dump_stack_lvl+0xe8/0x150
[  631.407206][T13843]  should_fail_ex+0x412/0x560
[  631.407239][T13843]  should_failslab+0xa8/0x100
[  631.407265][T13843]  __kmalloc_noprof+0xe8/0x760
[  631.407286][T13843]  ? iovec_from_user+0x87/0x250
[  631.407311][T13843]  iovec_from_user+0x87/0x250
[  631.407344][T13843]  __import_iovec+0x163/0x7e0
[  631.407370][T13843]  import_iovec+0x73/0xa0
[  631.407393][T13843]  ___sys_sendmsg+0x255/0x360
[  631.407413][T13843]  ? get_pid_task+0x20/0x1f0
[  631.407432][T13843]  ? __pfx____sys_sendmsg+0x10/0x10
[  631.407468][T13843]  ? sb_end_write+0xe9/0x1c0
[  631.407502][T13843]  ? __pfx_vfs_write+0x10/0x10
[  631.407529][T13843]  __x64_sys_sendmsg+0x1bd/0x2a0
[  631.407554][T13843]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  631.407584][T13843]  ? __pfx_ksys_write+0x10/0x10
[  631.407610][T13843]  do_syscall_64+0x14d/0xf80
[  631.407632][T13843]  ? trace_irq_disable+0x3b/0x150
[  631.407646][T13843]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  631.407665][T13843]  ? clear_bhb_loop+0x40/0x90
[  631.407684][T13843]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  631.407701][T13843] RIP: 0033:0x7f2cdcd9c819
[  631.407718][T13843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  631.407733][T13843] RSP: 002b:00007f2cddbdc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  631.407752][T13843] RAX: ffffffffffffffda RBX: 00007f2cdd015fa0 RCX: 00007f2cdcd9c819
[  631.407765][T13843] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000006
[  631.407775][T13843] RBP: 00007f2cddbdc090 R08: 0000000000000000 R09: 0000000000000000
[  631.407786][T13843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  631.407796][T13843] R13: 00007f2cdd016038 R14: 00007f2cdd015fa0 R15: 00007f2cdd13fa48
[  631.407824][T13843]  </TASK>
[  631.642790][T13848] net_ratelimit: 14 callbacks suppressed
[  631.642811][T13848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  631.657409][T13848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  631.666529][T13848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  631.666828][T13845] "syz.4.2562" (13845) uses obsolete ecb(arc4) skcipher
[  631.676960][T13848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  631.690510][T13848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  631.721760][T13848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  631.750001][   T29] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  631.765416][   T29] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  631.774448][   T29] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8
[  631.786191][   T29] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  631.795332][   T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  631.813530][T13833] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  631.824048][   T29] hub 6-1:1.0: bad descriptor, ignoring hub
[  631.829993][   T29] hub 6-1:1.0: probe with driver hub failed with error -5
[  631.838119][   T29] cdc_wdm 6-1:1.0: skipping garbage
[  631.843562][   T29] cdc_wdm 6-1:1.0: skipping garbage
[  631.852223][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  631.862396][   T29] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  631.868504][   T29] cdc_wdm 6-1:1.0: Unknown control protocol
[  631.961740][T13861] loop2: detected capacity change from 0 to 7
[  631.968694][T13861] Dev loop2: unable to read RDB block 7
[  631.974628][T13861]  loop2: unable to read partition table
[  631.980599][T13861] loop2: partition table beyond EOD, truncated
[  631.991424][T13861] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  632.040008][ T5194] Dev loop2: unable to read RDB block 7
[  632.043802][T10335] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  632.045796][ T5194]  loop2: unable to read partition table
[  632.066954][ T5194] loop2: partition table beyond EOD, truncated
[  632.153259][    C0] wdm_int_callback: 245 callbacks suppressed
[  632.153291][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  632.165899][    C0] wdm_int_callback: 245 callbacks suppressed
[  632.165922][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  632.178422][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  632.185214][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  632.191363][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1
[  632.224374][T10335] usb 3-1: config 0 has no interfaces?
[  632.230067][T10335] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  632.264077][T10335] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  632.285486][T10335] usb 3-1: config 0 descriptor??
[  632.455532][T13867] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2569'.
[  632.500915][ T5834] Bluetooth: hci1: ISO packet for unknown connection handle 0
[  632.614126][ T5912] usb 3-1: USB disconnect, device number 45
[  632.865894][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  632.875547][T13833] usb 6-1: reset low-speed USB device number 67 using dummy_hcd
[  632.888287][T13870] FAULT_INJECTION: forcing a failure.
[  632.888287][T13870] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  632.902153][T13870] CPU: 0 UID: 0 PID: 13870 Comm: syz.0.2570 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  632.902180][T13870] Tainted: [L]=SOFTLOCKUP
[  632.902186][T13870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  632.902197][T13870] Call Trace:
[  632.902206][T13870]  <TASK>
[  632.902212][T13870]  dump_stack_lvl+0xe8/0x150
[  632.902242][T13870]  should_fail_ex+0x412/0x560
[  632.902273][T13870]  _copy_from_user+0x2d/0xb0
[  632.902295][T13870]  copy_from_sockptr_offset+0x66/0xa0
[  632.902312][T13870]  tls_setsockopt+0xd2c/0x15c0
[  632.902328][T13870]  ? __pfx_tls_setsockopt+0x10/0x10
[  632.902345][T13870]  ? __fget_files+0x2a/0x420
[  632.902354][T13870]  ? aa_sock_opt_perm+0xff/0x1a0
[  632.902365][T13870]  ? sock_common_setsockopt+0x36/0xc0
[  632.902376][T13870]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  632.902387][T13870]  do_sock_setsockopt+0x17c/0x1b0
[  632.902403][T13870]  __x64_sys_setsockopt+0x13d/0x1b0
[  632.902418][T13870]  do_syscall_64+0x14d/0xf80
[  632.902439][T13870]  ? trace_irq_disable+0x3b/0x150
[  632.902453][T13870]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  632.902471][T13870]  ? clear_bhb_loop+0x40/0x90
[  632.902491][T13870]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  632.902508][T13870] RIP: 0033:0x7fa159b9c819
[  632.902525][T13870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  632.902540][T13870] RSP: 002b:00007fa15a9ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  632.902558][T13870] RAX: ffffffffffffffda RBX: 00007fa159e15fa0 RCX: 00007fa159b9c819
[  632.902586][T13870] RDX: 0000000000000002 RSI: 000000000000011a RDI: 0000000000000003
[  632.902603][T13870] RBP: 00007fa15a9ed090 R08: 0000000000000028 R09: 0000000000000000
[  632.902614][T13870] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001
[  632.902622][T13870] R13: 00007fa159e16038 R14: 00007fa159e15fa0 R15: 00007fa159f3fa48
[  632.902637][T13870]  </TASK>
[  633.237006][T13833] usb 6-1: device firmware changed
[  633.244124][   T29] usb 6-1: USB disconnect, device number 67
[  633.263267][ T1543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  633.308574][T13876] FAULT_INJECTION: forcing a failure.
[  633.308574][T13876] name failslab, interval 1, probability 0, space 0, times 0
[  633.322153][T13876] CPU: 0 UID: 0 PID: 13876 Comm: syz.2.2573 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  633.322173][T13876] Tainted: [L]=SOFTLOCKUP
[  633.322178][T13876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  633.322185][T13876] Call Trace:
[  633.322190][T13876]  <TASK>
[  633.322195][T13876]  dump_stack_lvl+0xe8/0x150
[  633.322214][T13876]  should_fail_ex+0x412/0x560
[  633.322234][T13876]  should_failslab+0xa8/0x100
[  633.322248][T13876]  __kmalloc_cache_noprof+0x88/0x660
[  633.322262][T13876]  ? ip6_setup_cork+0x60f/0xf30
[  633.322277][T13876]  ip6_setup_cork+0x60f/0xf30
[  633.322289][T13876]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  633.322304][T13876]  ip6_append_data+0x181/0x280
[  633.322316][T13876]  ? __pfx_raw6_getfrag+0x10/0x10
[  633.322332][T13876]  rawv6_sendmsg+0x12d3/0x18e0
[  633.322362][T13876]  ? __pfx_rawv6_sendmsg+0x10/0x10
[  633.322394][T13876]  ? aa_sk_perm+0x6d5/0x900
[  633.322425][T13876]  ? __pfx_aa_sk_perm+0x10/0x10
[  633.322455][T13876]  ? sock_rps_record_flow+0x19/0x400
[  633.322480][T13876]  ? inet_sendmsg+0x2f4/0x370
[  633.322500][T13876]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  633.322521][T13876]  ? __pfx_inet_sendmsg+0x10/0x10
[  633.322542][T13876]  sock_write_iter+0x406/0x4f0
[  633.322570][T13876]  ? __pfx_sock_write_iter+0x10/0x10
[  633.322614][T13876]  do_iter_readv_writev+0x619/0x8c0
[  633.322640][T13876]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  633.322666][T13876]  ? bpf_lsm_file_permission+0x9/0x20
[  633.322687][T13876]  ? security_file_permission+0x75/0x260
[  633.322711][T13876]  ? rw_verify_area+0x255/0x4d0
[  633.322731][T13876]  vfs_writev+0x33c/0x990
[  633.322761][T13876]  ? __pfx_vfs_writev+0x10/0x10
[  633.322797][T13876]  ? __fget_files+0x2a/0x420
[  633.322818][T13876]  ? __fget_files+0x3a0/0x420
[  633.322833][T13876]  ? __fget_files+0x2a/0x420
[  633.322858][T13876]  do_writev+0x154/0x2e0
[  633.322884][T13876]  ? __pfx_do_writev+0x10/0x10
[  633.322918][T13876]  do_syscall_64+0x14d/0xf80
[  633.322940][T13876]  ? trace_irq_disable+0x3b/0x150
[  633.322957][T13876]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  633.322975][T13876]  ? clear_bhb_loop+0x40/0x90
[  633.322996][T13876]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  633.323014][T13876] RIP: 0033:0x7f2cdcd9c819
[  633.323031][T13876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  633.323047][T13876] RSP: 002b:00007f2cddbdc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  633.323067][T13876] RAX: ffffffffffffffda RBX: 00007f2cdd015fa0 RCX: 00007f2cdcd9c819
[  633.323080][T13876] RDX: 0000000000000001 RSI: 0000200000002c80 RDI: 0000000000000003
[  633.323092][T13876] RBP: 00007f2cddbdc090 R08: 0000000000000000 R09: 0000000000000000
[  633.323113][T13876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  633.323123][T13876] R13: 00007f2cdd016038 R14: 00007f2cdd015fa0 R15: 00007f2cdd13fa48
[  633.323150][T13876]  </TASK>
[  633.610602][ T1543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  633.672761][   T29] usb 6-1: new low-speed USB device number 68 using dummy_hcd
[  633.754728][T10335] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  633.854908][   T29] usb 6-1: config 0 has no interfaces?
[  633.861255][   T29] usb 6-1: New USB device found, idVendor=2801, idProduct=0201, bcdDevice=2a.d5
[  633.894469][   T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  633.912608][T10335] usb 5-1: Using ep0 maxpacket: 32
[  633.928485][T10335] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[  633.940485][T10335] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  633.946586][   T29] usb 6-1: config 0 descriptor??
[  633.948806][T10335] usb 5-1: Product: syz
[  633.957793][T10335] usb 5-1: Manufacturer: syz
[  633.962724][T10335] usb 5-1: SerialNumber: syz
[  633.970422][T10335] usb 5-1: config 0 descriptor??
[  633.979248][T10335] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state.
[  633.987331][T10335] dvb-usb: bulk message failed: -22 (2/0)
[  633.996915][T13891] program syz.0.2580 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  634.004616][T13892] loop2: detected capacity change from 0 to 7
[  634.015717][T10335] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  634.026437][T13892] Dev loop2: unable to read RDB block 7
[  634.032155][T13892]  loop2: unable to read partition table
[  634.039054][T10335] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold)
[  634.047704][T13892] loop2: partition table beyond EOD, truncated
[  634.055018][T10335] usb 5-1: media controller created
[  634.072883][T13892] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  634.082238][T10335] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  634.123000][   T10] usb 6-1: USB disconnect, device number 68
[  634.185784][T10335] usb 5-1: selecting invalid altsetting 7
[  634.191568][T10335] cxusb: set interface failed
[  634.200287][T10335] dvb-usb: bulk message failed: -22 (1/0)
[  634.261179][T10335] DVB: Unable to find symbol lgdt330x_attach()
[  634.268273][T10335] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold'
[  634.428598][T13905] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  634.484703][T10335] rc_core: IR keymap rc-dvico-portable not found
[  634.497401][T10335] Registered IR keymap rc-empty
[  634.512381][T10335] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0
[  634.538415][T10335] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input91
[  634.588703][T10335] dvb-usb: schedule remote query interval to 100 msecs.
[  634.597313][T10335] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected.
[  634.610732][T10335] usb 5-1: USB disconnect, device number 17
[  634.712754][   T29] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  634.781219][T10335] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected.
[  634.863503][   T29] usb 1-1: device descriptor read/64, error -71
[  635.223702][T13921] FAULT_INJECTION: forcing a failure.
[  635.223702][T13921] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  635.238392][T13921] CPU: 1 UID: 0 PID: 13921 Comm: syz.1.2589 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  635.238419][T13921] Tainted: [L]=SOFTLOCKUP
[  635.238423][T13921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  635.238430][T13921] Call Trace:
[  635.238435][T13921]  <TASK>
[  635.238441][T13921]  dump_stack_lvl+0xe8/0x150
[  635.238461][T13921]  should_fail_ex+0x412/0x560
[  635.238480][T13921]  _copy_from_user+0x2d/0xb0
[  635.238494][T13921]  ___sys_recvmsg+0x175/0x590
[  635.238508][T13921]  ? get_pid_task+0x20/0x1f0
[  635.238518][T13921]  ? get_pid_task+0x20/0x1f0
[  635.238529][T13921]  ? __pfx____sys_recvmsg+0x10/0x10
[  635.238553][T13921]  ? __fget_files+0x3a0/0x420
[  635.238567][T13921]  __x64_sys_recvmsg+0x1ba/0x2a0
[  635.238582][T13921]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  635.238600][T13921]  ? __pfx_ksys_write+0x10/0x10
[  635.238617][T13921]  do_syscall_64+0x14d/0xf80
[  635.238635][T13921]  ? trace_irq_disable+0x3b/0x150
[  635.238651][T13921]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  635.238669][T13921]  ? clear_bhb_loop+0x40/0x90
[  635.238686][T13921]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  635.238697][T13921] RIP: 0033:0x7fe576d9c819
[  635.238708][T13921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  635.238717][T13921] RSP: 002b:00007fe574ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  635.238729][T13921] RAX: ffffffffffffffda RBX: 00007fe577015fa0 RCX: 00007fe576d9c819
[  635.238736][T13921] RDX: 0000000000002142 RSI: 0000200000000300 RDI: 0000000000000004
[  635.238743][T13921] RBP: 00007fe574ff6090 R08: 0000000000000000 R09: 0000000000000000
[  635.238750][T13921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  635.238756][T13921] R13: 00007fe577016038 R14: 00007fe577015fa0 R15: 00007fe57713fa48
[  635.238771][T13921]  </TASK>
[  635.593669][   T29] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  635.742636][   T29] usb 1-1: device descriptor read/64, error -71
[  635.852911][   T29] usb usb1-port1: attempt power cycle
[  636.112604][ T5912] usb 5-1: new low-speed USB device number 18 using dummy_hcd
[  636.192578][T10335] usb 6-1: new full-speed USB device number 69 using dummy_hcd
[  636.192609][   T29] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  636.223669][   T29] usb 1-1: device descriptor read/8, error -71
[  636.264215][ T5912] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  636.277422][ T5912] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  636.293510][ T5912] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8
[  636.315162][ T5912] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  636.335484][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  636.343853][ T1224] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  636.360092][T10335] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  636.374752][T13933] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  636.386115][T10335] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a
[  636.392893][ T5912] hub 5-1:1.0: bad descriptor, ignoring hub
[  636.395993][T10335] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  636.401084][ T5912] hub 5-1:1.0: probe with driver hub failed with error -5
[  636.401597][ T5912] cdc_wdm 5-1:1.0: skipping garbage
[  636.409845][T10335] usb 6-1: Product: syz
[  636.433139][T10335] usb 6-1: Manufacturer: syz
[  636.444367][ T5912] cdc_wdm 5-1:1.0: skipping garbage
[  636.467200][T10335] usb 6-1: SerialNumber: syz
[  636.468729][ T5912] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  636.478029][ T5912] cdc_wdm 5-1:1.0: Unknown control protocol
[  636.489388][T10335] usb 6-1: config 0 descriptor??
[  636.501521][T10335] pegasus_notetaker 6-1:0.0: Invalid number of endpoints
[  636.502684][   T29] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  636.531002][T10335] pegasus_notetaker 6-1:0.0: probe with driver pegasus_notetaker failed with error -22
[  636.548541][   T29] usb 1-1: device descriptor read/8, error -71
[  636.557494][ T1224] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  636.566963][ T1224] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  636.577404][ T1224] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  636.592215][ T1224] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  636.610900][ T1224] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  636.620146][ T1224] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  636.648348][ T1224] usb 3-1: Product: syz
[  636.652991][ T1224] usb 3-1: Manufacturer: syz
[  636.673218][   T29] usb usb1-port1: unable to enumerate USB device
[  636.684781][ T1224] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22
[  636.707121][T10335] usb 6-1: USB disconnect, device number 69
[  636.903674][ T1224] usb 3-1: USB disconnect, device number 46
[  637.022873][   T29] net_ratelimit: 4 callbacks suppressed
[  637.022893][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  637.152630][   T10] usb 6-1: new high-speed USB device number 70 using dummy_hcd
[  637.304277][   T10] usb 6-1: config index 0 descriptor too short (expected 36, got 27)
[  637.312415][   T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  637.325090][   T10] usb 6-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=34.b1
[  637.334797][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  637.343010][   T10] usb 6-1: Product: syz
[  637.347324][   T10] usb 6-1: Manufacturer: syz
[  637.351933][   T10] usb 6-1: SerialNumber: syz
[  637.358870][   T10] usb 6-1: config 0 descriptor??
[  637.366443][   T10] bfusb 6-1:0.0: probe with driver bfusb failed with error -5
[  637.403360][T13933] usb 5-1: reset low-speed USB device number 18 using dummy_hcd
[  637.462417][T13944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  637.470950][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  637.573079][   T10] usb 6-1: USB disconnect, device number 70
[  637.703800][T13933] usb 5-1: device firmware changed
[  637.709602][T10335] usb 5-1: USB disconnect, device number 18
[  637.852604][T10335] usb 5-1: new low-speed USB device number 19 using dummy_hcd
[  637.872608][ T1224] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  638.004133][T10335] usb 5-1: config 0 has no interfaces?
[  638.009948][T10335] usb 5-1: New USB device found, idVendor=2801, idProduct=0201, bcdDevice=2a.d5
[  638.019068][T10335] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  638.030372][T10335] usb 5-1: config 0 descriptor??
[  638.037316][ T1224] usb 1-1: Using ep0 maxpacket: 32
[  638.047883][ T1224] usb 1-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[  638.058968][ T1224] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  638.067939][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  638.077335][ T1224] usb 1-1: Product: syz
[  638.081514][ T1224] usb 1-1: Manufacturer: syz
[  638.090339][ T1224] usb 1-1: SerialNumber: syz
[  638.105954][ T1224] usb 1-1: config 0 descriptor??
[  638.120108][ T1224] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state.
[  638.131159][ T1224] dvb-usb: bulk message failed: -22 (2/0)
[  638.141904][ T1224] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  638.152893][ T1224] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold)
[  638.161163][ T1224] usb 1-1: media controller created
[  638.176394][ T1224] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  638.194710][ T1224] usb 1-1: selecting invalid altsetting 7
[  638.200973][ T1224] cxusb: set interface failed
[  638.205729][ T1224] dvb-usb: bulk message failed: -22 (1/0)
[  638.348534][ T5912] usb 5-1: USB disconnect, device number 19
[  638.386272][ T1224] DVB: Unable to find symbol lgdt330x_attach()
[  638.393410][ T1224] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold'
[  638.462746][ T1224] rc_core: IR keymap rc-dvico-portable not found
[  638.469396][ T1224] Registered IR keymap rc-empty
[  638.476265][ T1224] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0
[  638.489804][ T1224] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input92
[  638.503031][ T1224] dvb-usb: schedule remote query interval to 100 msecs.
[  638.510685][ T1224] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected.
[  638.530259][ T1224] usb 1-1: USB disconnect, device number 43
[  638.552949][   T29] usb 6-1: new high-speed USB device number 71 using dummy_hcd
[  638.611526][ T1224] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected.
[  638.724461][   T29] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  638.737009][   T29] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  638.755860][   T29] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  638.772286][   T29] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  638.797858][   T29] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  638.812609][   T29] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  638.821967][   T29] usb 6-1: Product: syz
[  638.826234][   T29] usb 6-1: Manufacturer: syz
[  638.897859][   T29] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22
[  638.922443][T13957] FAULT_INJECTION: forcing a failure.
[  638.922443][T13957] name failslab, interval 1, probability 0, space 0, times 0
[  638.949520][T13957] CPU: 0 UID: 0 PID: 13957 Comm: syz.4.2601 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  638.949558][T13957] Tainted: [L]=SOFTLOCKUP
[  638.949565][T13957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  638.949576][T13957] Call Trace:
[  638.949583][T13957]  <TASK>
[  638.949592][T13957]  dump_stack_lvl+0xe8/0x150
[  638.949621][T13957]  should_fail_ex+0x412/0x560
[  638.949652][T13957]  should_failslab+0xa8/0x100
[  638.949677][T13957]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  638.949697][T13957]  ? __alloc_skb+0x186/0x7d0
[  638.949721][T13957]  ? __alloc_skb+0x1d0/0x7d0
[  638.949738][T13957]  ? __local_bh_enable_ip+0xd0/0x130
[  638.949764][T13957]  __alloc_skb+0x1d0/0x7d0
[  638.949783][T13957]  ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20
[  638.949808][T13957]  netlink_sendmsg+0x5d4/0xb40
[  638.949837][T13957]  ? __pfx_netlink_sendmsg+0x10/0x10
[  638.949859][T13957]  ? aa_sock_msg_perm+0xf1/0x1b0
[  638.949887][T13957]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  638.949910][T13957]  ____sys_sendmsg+0x972/0x9f0
[  638.949941][T13957]  ? __pfx_____sys_sendmsg+0x10/0x10
[  638.949971][T13957]  ? import_iovec+0x73/0xa0
[  638.949994][T13957]  ___sys_sendmsg+0x2a5/0x360
[  638.950020][T13957]  ? __pfx____sys_sendmsg+0x10/0x10
[  638.950066][T13957]  ? __fget_files+0x2a/0x420
[  638.950081][T13957]  ? __fget_files+0x3a0/0x420
[  638.950106][T13957]  __x64_sys_sendmsg+0x1bd/0x2a0
[  638.950130][T13957]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  638.950161][T13957]  ? __pfx_ksys_write+0x10/0x10
[  638.950190][T13957]  do_syscall_64+0x14d/0xf80
[  638.950211][T13957]  ? trace_irq_disable+0x3b/0x150
[  638.950226][T13957]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  638.950244][T13957]  ? clear_bhb_loop+0x40/0x90
[  638.950263][T13957]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  638.950281][T13957] RIP: 0033:0x7faab6d9c819
[  638.950298][T13957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  638.950314][T13957] RSP: 002b:00007faab7ceb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  638.950334][T13957] RAX: ffffffffffffffda RBX: 00007faab7015fa0 RCX: 00007faab6d9c819
[  638.950346][T13957] RDX: 0000000000000040 RSI: 0000200000000340 RDI: 0000000000000003
[  638.950358][T13957] RBP: 00007faab7ceb090 R08: 0000000000000000 R09: 0000000000000000
[  638.950369][T13957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  638.950380][T13957] R13: 00007faab7016038 R14: 00007faab7015fa0 R15: 00007faab713fa48
[  638.950408][T13957]  </TASK>
[  639.235343][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  639.297465][   T29] usb 6-1: USB disconnect, device number 71
[  639.344569][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  639.375560][T13964] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2603'.
[  639.394979][T13966] FAULT_INJECTION: forcing a failure.
[  639.394979][T13966] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  639.456055][T13964] netlink: 'syz.4.2603': attribute type 24 has an invalid length.
[  639.466233][T13966] CPU: 1 UID: 0 PID: 13966 Comm: syz.0.2604 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  639.466254][T13966] Tainted: [L]=SOFTLOCKUP
[  639.466259][T13966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  639.466265][T13966] Call Trace:
[  639.466270][T13966]  <TASK>
[  639.466275][T13966]  dump_stack_lvl+0xe8/0x150
[  639.466295][T13966]  should_fail_ex+0x412/0x560
[  639.466320][T13966]  _copy_from_user+0x2d/0xb0
[  639.466334][T13966]  ____sys_sendmsg+0x308/0x9f0
[  639.466347][T13966]  ? __lock_acquire+0x6b5/0x2cf0
[  639.466365][T13966]  ? __pfx_____sys_sendmsg+0x10/0x10
[  639.466382][T13966]  ? import_iovec+0x73/0xa0
[  639.466395][T13966]  ___sys_sendmsg+0x2a5/0x360
[  639.466410][T13966]  ? __pfx____sys_sendmsg+0x10/0x10
[  639.466426][T13966]  ? kstrtouint+0x6e/0xe0
[  639.466452][T13966]  ? __fget_files+0x2a/0x420
[  639.466462][T13966]  ? __fget_files+0x3a0/0x420
[  639.466475][T13966]  __sys_sendmmsg+0x27c/0x4e0
[  639.466497][T13966]  ? __pfx___sys_sendmmsg+0x10/0x10
[  639.466509][T13966]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  639.466535][T13966]  ? ksys_write+0x242/0x270
[  639.466548][T13966]  ? __pfx_ksys_write+0x10/0x10
[  639.466562][T13966]  __x64_sys_sendmmsg+0xa0/0xc0
[  639.466576][T13966]  do_syscall_64+0x14d/0xf80
[  639.466589][T13966]  ? trace_irq_disable+0x3b/0x150
[  639.466598][T13966]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  639.466609][T13966]  ? clear_bhb_loop+0x40/0x90
[  639.466621][T13966]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  639.466632][T13966] RIP: 0033:0x7fa159b9c819
[  639.466642][T13966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  639.466651][T13966] RSP: 002b:00007fa15a9ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  639.466664][T13966] RAX: ffffffffffffffda RBX: 00007fa159e15fa0 RCX: 00007fa159b9c819
[  639.466672][T13966] RDX: 0000000000000001 RSI: 00002000000013c0 RDI: 0000000000000003
[  639.466678][T13966] RBP: 00007fa15a9ed090 R08: 0000000000000000 R09: 0000000000000000
[  639.466684][T13966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  639.466691][T13966] R13: 00007fa159e16038 R14: 00007fa159e15fa0 R15: 00007fa159f3fa48
[  639.466706][T13966]  </TASK>
[  639.695878][T13964] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2603'.
[  639.704961][T13964] netlink: 'syz.4.2603': attribute type 24 has an invalid length.
[  639.986242][T13974] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2607'.
[  640.318393][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  640.532593][T10335] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  640.684636][T10335] usb 5-1: Using ep0 maxpacket: 32
[  640.700675][T10335] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[  640.712099][T10335] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  640.726513][T10335] usb 5-1: Product: syz
[  640.735788][T10335] usb 5-1: Manufacturer: syz
[  640.745920][T10335] usb 5-1: SerialNumber: syz
[  640.762027][T10335] usb 5-1: config 0 descriptor??
[  640.774671][T10335] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state.
[  640.782696][T10335] dvb-usb: bulk message failed: -22 (2/0)
[  640.795271][T10335] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  640.823909][T10335] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold)
[  640.832621][   T29] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  640.924758][T10335] usb 5-1: media controller created
[  640.941239][T10335] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  640.974928][T13980] dvb-usb: bulk message failed: -22 (3/0)
[  640.996459][   T29] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  641.006116][   T29] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  641.006525][T10335] usb 5-1: selecting invalid altsetting 7
[  641.027827][   T29] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  641.029689][T10335] cxusb: set interface failed
[  641.039211][   T29] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  641.092218][   T29] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  641.099668][T10335] dvb-usb: bulk message failed: -22 (1/0)
[  641.102397][   T29] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  641.118090][   T29] usb 3-1: Product: syz
[  641.123764][   T29] usb 3-1: Manufacturer: syz
[  641.152607][ T1224] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  641.178150][T10335] DVB: Unable to find symbol lgdt330x_attach()
[  641.191733][   T29] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22
[  641.207457][T10335] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold'
[  641.312566][ T1224] usb 1-1: Using ep0 maxpacket: 32
[  641.319410][ T1224] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  641.331829][ T1224] usb 1-1: config 0 has no interfaces?
[  641.332740][T10335] rc_core: IR keymap rc-dvico-portable not found
[  641.337861][ T1224] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  641.375923][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  641.384593][   T29] usb 3-1: USB disconnect, device number 47
[  641.389767][T10335] Registered IR keymap rc-empty
[  641.398208][ T1224] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  641.403053][T10335] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0
[  641.411838][ T1224] usb 1-1: config 0 descriptor??
[  641.461248][T10335] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input93
[  641.476194][T10335] dvb-usb: schedule remote query interval to 100 msecs.
[  641.485991][T10335] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected.
[  641.500490][T10335] usb 5-1: USB disconnect, device number 20
[  641.562711][T10335] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected.
[  641.632643][   T10] usb 6-1: new high-speed USB device number 72 using dummy_hcd
[  641.645431][ T5913] usb 1-1: USB disconnect, device number 44
[  641.694129][T14002] netlink: 'syz.4.2617': attribute type 3 has an invalid length.
[  641.802698][   T10] usb 6-1: Using ep0 maxpacket: 16
[  641.809948][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  641.821761][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  641.833654][   T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  641.846834][   T10] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  641.857054][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  641.889153][   T10] usb 6-1: config 0 descriptor??
[  642.105082][T13998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  642.128189][T13998] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  642.339387][T14008] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2619'.
[  642.382852][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  642.391112][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  642.447656][   T10] microsoft 0003:045E:07DA.0025: unknown main item tag 0x2
[  642.458507][   T10] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0
[  642.466227][   T10] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0
[  642.474613][   T10] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0
[  642.482574][   T10] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0
[  642.490600][   T10] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0
[  642.498925][   T10] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0
[  642.676394][   T10] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0
[  642.709237][   T10] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0
[  642.725516][   T10] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0025/input/input94
[  642.788588][T14013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  642.833518][T14013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  642.848752][T14013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  642.860713][T14013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  642.870989][T14013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  642.882241][T14013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  642.901144][T14013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  642.926118][T14013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  642.965316][   T10] microsoft 0003:045E:07DA.0025: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0
[  643.069486][   T10] usb 6-1: USB disconnect, device number 72
[  643.125479][T14016] fido_id[14016]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  643.196845][T14020] fuse: Bad value for 'fd'
[  643.228257][T14020] ipip0: entered promiscuous mode
[  643.233805][T14020] ipip0: entered allmulticast mode
[  643.662573][   T10] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  643.897500][   T10] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[  643.940255][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  643.962091][   T10] usb 5-1: Product: syz
[  643.972299][   T10] usb 5-1: Manufacturer: syz
[  644.012931][   T10] usb 5-1: SerialNumber: syz
[  644.024276][   T10] usb 5-1: config 0 descriptor??
[  644.052412][   T10] hub 5-1:0.0: bad descriptor, ignoring hub
[  644.075028][   T10] hub 5-1:0.0: probe with driver hub failed with error -5
[  644.237215][   T10] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state.
[  644.276422][   T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  644.294223][   T29] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  644.306893][   T10] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo)
[  644.315646][   T10] usb 5-1: media controller created
[  644.332115][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  644.418791][   T10] DVB: Unable to find symbol dib7000p_attach()
[  644.425827][   T10] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo'
[  644.463001][   T29] usb 1-1: Using ep0 maxpacket: 32
[  644.471848][   T29] usb 1-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[  644.490620][   T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  644.511407][   T29] usb 1-1: Product: syz
[  644.519620][   T29] usb 1-1: Manufacturer: syz
[  644.568956][   T29] usb 1-1: SerialNumber: syz
[  644.582787][   T10] rc_core: IR keymap rc-dib0700-rc5 not found
[  644.590270][   T29] usb 1-1: config 0 descriptor??
[  644.595594][   T10] Registered IR keymap rc-empty
[  644.605292][   T10] dvb-usb: could not initialize remote control.
[  644.611851][   T10] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected.
[  644.622882][ T1224] usb 6-1: new low-speed USB device number 73 using dummy_hcd
[  644.647847][   T29] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state.
[  644.662268][   T29] dvb-usb: bulk message failed: -22 (2/0)
[  644.670149][   T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  644.683958][   T29] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold)
[  644.692354][   T29] usb 1-1: media controller created
[  644.706690][   T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  644.726405][   T29] usb 1-1: selecting invalid altsetting 7
[  644.732200][   T29] cxusb: set interface failed
[  644.737300][   T29] dvb-usb: bulk message failed: -22 (1/0)
[  644.788939][ T1224] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  644.802694][ T1224] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  644.812896][T10335] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  644.819798][   T29] DVB: Unable to find symbol lgdt330x_attach()
[  644.828788][ T1224] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8
[  644.841132][T14034] ------------[ cut here ]------------
[  644.846886][T14034] usb 5-1: BOGUS control dir, pipe 80001580 doesn't match bRequestType c0
[  644.855725][T14034] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1053/0x18b0, CPU#1: syz.0.2626/14034
[  644.867039][T14034] Modules linked in:
[  644.871122][T14034] CPU: 1 UID: 0 PID: 14034 Comm: syz.0.2626 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  644.882612][T14034] Tainted: [L]=SOFTLOCKUP
[  644.886951][T14034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  644.897485][T14034] RIP: 0010:usb_submit_urb+0x1115/0x18b0
[  644.903630][T14034] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c1 f2 ff ff 89 e9
[  644.923663][T14034] RSP: 0018:ffffc90005397948 EFLAGS: 00010246
[  644.929742][T14034] RAX: 0000000000000000 RBX: ffff888020716600 RCX: 0000000080001580
[  644.938265][T14034] RDX: ffff88805c158ce0 RSI: ffffffff8c7f2a80 RDI: ffffffff901f17c0
[  644.946532][T14034] RBP: 1ffff11006830844 R08: 00000000000000c0 R09: 0000000000000000
[  644.954896][T14034] R10: ffffc90005397a40 R11: fffff52000a72f54 R12: ffff888026876100
[  644.963094][T14034] R13: ffff888034184220 R14: 0000000080001580 R15: ffff88805c158ce0
[  644.971119][T14034] FS:  00007fa15a9ed6c0(0000) GS:ffff888125554000(0000) knlGS:0000000000000000
[  644.980285][T14034] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  644.980323][T10335] usb 3-1: Using ep0 maxpacket: 32
[  644.986988][T14034] CR2: 000000110c422935 CR3: 00000000354f2000 CR4: 00000000003526f0
[  644.987035][T14034] Call Trace:
[  644.987048][T14034]  <TASK>
[  644.987065][T14034]  ? __init_swait_queue_head+0xa9/0x150
[  645.008030][T10335] usb 3-1: config 0 has an invalid interface number: 188 but max is 0
[  645.012243][T14034]  usb_start_wait_urb+0x13f/0x5b0
[  645.012287][T14034]  ? rcu_is_watching+0x15/0xb0
[  645.030581][T14034]  ? __pfx_usb_start_wait_urb+0x10/0x10
[  645.036198][T14034]  ? trace_kmalloc+0x2a/0x110
[  645.040896][T14034]  usb_control_msg+0x234/0x3e0
[  645.045727][T14034]  dib0700_i2c_xfer+0xbb2/0xf80
[  645.050608][T14034]  __i2c_transfer+0x79a/0x2020
[  645.055626][T14034]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  645.061444][T14034]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  645.067387][T14034]  ? i2c_transfer+0xc8/0x2d0
[  645.071993][T14034]  i2c_transfer+0x1cc/0x2d0
[  645.076549][T14034]  i2cdev_ioctl_rdwr+0x460/0x740
[  645.081502][T14034]  i2cdev_ioctl+0x6a5/0x880
[  645.086127][T14034]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  645.091162][T14034]  ? __fget_files+0x3a0/0x420
[  645.095958][T14034]  ? __fget_files+0x2a/0x420
[  645.100553][T14034]  ? bpf_lsm_file_ioctl+0x9/0x20
[  645.105598][T14034]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  645.110631][T14034]  __se_sys_ioctl+0xfc/0x170
[  645.115268][T14034]  do_syscall_64+0x14d/0xf80
[  645.119860][T14034]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  645.125970][T14034]  ? clear_bhb_loop+0x40/0x90
[  645.130753][T14034]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  645.136701][T14034] RIP: 0033:0x7fa159b9c819
[  645.141647][T14034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  645.161326][T14034] RSP: 002b:00007fa15a9ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  645.169778][T14034] RAX: ffffffffffffffda RBX: 00007fa159e15fa0 RCX: 00007fa159b9c819
[  645.177803][T14034] RDX: 0000200000000140 RSI: 0000000000000707 RDI: 0000000000000005
[  645.185913][T14034] RBP: 00007fa159c32c91 R08: 0000000000000000 R09: 0000000000000000
[  645.194035][T14034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  645.202012][T14034] R13: 00007fa159e16038 R14: 00007fa159e15fa0 R15: 00007fa159f3fa48
[  645.210055][T14034]  </TASK>
[  645.213226][T14034] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  645.220680][T14034] CPU: 1 UID: 0 PID: 14034 Comm: syz.0.2626 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  645.231615][T14034] Tainted: [L]=SOFTLOCKUP
[  645.235931][T14034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  645.245978][T14034] Call Trace:
[  645.249246][T14034]  <TASK>
[  645.252162][T14034]  vpanic+0x56c/0xa60
[  645.256145][T14034]  ? __pfx__printk+0x10/0x10
[  645.260728][T14034]  ? __pfx_vpanic+0x10/0x10
[  645.265221][T14034]  ? is_bpf_text_address+0x292/0x2b0
[  645.270497][T14034]  ? is_bpf_text_address+0x26/0x2b0
[  645.275684][T14034]  panic+0xc5/0xd0
[  645.279404][T14034]  ? __pfx_panic+0x10/0x10
[  645.283824][T14034]  __warn+0x315/0x4f0
[  645.287795][T14034]  ? usb_submit_urb+0x1053/0x18b0
[  645.292818][T14034]  ? usb_submit_urb+0x1053/0x18b0
[  645.297919][T14034]  __report_bug+0x29a/0x540
[  645.302419][T14034]  ? usb_submit_urb+0x1053/0x18b0
[  645.307540][T14034]  ? __pfx___report_bug+0x10/0x10
[  645.312679][T14034]  ? lockdep_hardirqs_on+0x7a/0x110
[  645.317883][T14034]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  645.323687][T14034]  report_bug_entry+0x19a/0x290
[  645.328529][T14034]  ? usb_submit_urb+0x1115/0x18b0
[  645.333541][T14034]  ? usb_submit_urb+0x111a/0x18b0
[  645.338561][T14034]  handle_bug+0xce/0x200
[  645.342798][T14034]  exc_invalid_op+0x1a/0x50
[  645.347466][T14034]  asm_exc_invalid_op+0x1a/0x20
[  645.352303][T14034] RIP: 0010:usb_submit_urb+0x1115/0x18b0
[  645.357921][T14034] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c1 f2 ff ff 89 e9
[  645.377824][T14034] RSP: 0018:ffffc90005397948 EFLAGS: 00010246
[  645.383892][T14034] RAX: 0000000000000000 RBX: ffff888020716600 RCX: 0000000080001580
[  645.392008][T14034] RDX: ffff88805c158ce0 RSI: ffffffff8c7f2a80 RDI: ffffffff901f17c0
[  645.400026][T14034] RBP: 1ffff11006830844 R08: 00000000000000c0 R09: 0000000000000000
[  645.408041][T14034] R10: ffffc90005397a40 R11: fffff52000a72f54 R12: ffff888026876100
[  645.416086][T14034] R13: ffff888034184220 R14: 0000000080001580 R15: ffff88805c158ce0
[  645.424078][T14034]  ? usb_submit_urb+0x10a4/0x18b0
[  645.429453][T14034]  ? __init_swait_queue_head+0xa9/0x150
[  645.435182][T14034]  usb_start_wait_urb+0x13f/0x5b0
[  645.440306][T14034]  ? rcu_is_watching+0x15/0xb0
[  645.445087][T14034]  ? __pfx_usb_start_wait_urb+0x10/0x10
[  645.450644][T14034]  ? trace_kmalloc+0x2a/0x110
[  645.455367][T14034]  usb_control_msg+0x234/0x3e0
[  645.460228][T14034]  dib0700_i2c_xfer+0xbb2/0xf80
[  645.465275][T14034]  __i2c_transfer+0x79a/0x2020
[  645.470060][T14034]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  645.475885][T14034]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  645.481742][T14034]  ? i2c_transfer+0xc8/0x2d0
[  645.486350][T14034]  i2c_transfer+0x1cc/0x2d0
[  645.490982][T14034]  i2cdev_ioctl_rdwr+0x460/0x740
[  645.496044][T14034]  i2cdev_ioctl+0x6a5/0x880
[  645.500649][T14034]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  645.505829][T14034]  ? __fget_files+0x3a0/0x420
[  645.510578][T14034]  ? __fget_files+0x2a/0x420
[  645.515183][T14034]  ? bpf_lsm_file_ioctl+0x9/0x20
[  645.520120][T14034]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  645.525164][T14034]  __se_sys_ioctl+0xfc/0x170
[  645.529746][T14034]  do_syscall_64+0x14d/0xf80
[  645.534322][T14034]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  645.540373][T14034]  ? clear_bhb_loop+0x40/0x90
[  645.545044][T14034]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  645.550942][T14034] RIP: 0033:0x7fa159b9c819
[  645.555537][T14034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  645.575157][T14034] RSP: 002b:00007fa15a9ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  645.583580][T14034] RAX: ffffffffffffffda RBX: 00007fa159e15fa0 RCX: 00007fa159b9c819
[  645.591767][T14034] RDX: 0000200000000140 RSI: 0000000000000707 RDI: 0000000000000005
[  645.599760][T14034] RBP: 00007fa159c32c91 R08: 0000000000000000 R09: 0000000000000000
[  645.607769][T14034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  645.615826][T14034] R13: 00007fa159e16038 R14: 00007fa159e15fa0 R15: 00007fa159f3fa48
[  645.623809][T14034]  </TASK>
[  645.627228][T14034] Kernel Offset: disabled
[  645.631544][T14034] Rebooting in 86400 seconds..