last executing test programs:

10m3.158526201s ago: executing program 0 (id=951):
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x20d43, 0xa, 0xfffffffffffffffa, 0x4, 0x4000002, 0x0, 0x1000, 0xfffffffffffffff2, 0x4bfb, 0x40000000004, 0x7ff, 0x2, 0x20003, 0x5, 0x9, 0x100000090], 0x25000, 0xa8657})
r0 = syz_clone(0x800011, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
socket$nl_route(0x10, 0x3, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x7, 0x7fffffffffffe, 0x5, 0x4, 0x9, 0x7f, 0x800000000f4a, 0x100000000, 0xbdb], 0xc000, 0x4000})
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1})
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
accept4$unix(0xffffffffffffffff, &(0x7f00000002c0)=@abs, &(0x7f0000000340)=0x6e, 0x100000)
syz_clone(0x102c8000, 0x0, 0xfffffffffffffef7, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0xa}], 0x1)
ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180))
ptrace$cont(0x21, r0, 0x5, 0x4)

10m2.432431019s ago: executing program 0 (id=953):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffe3e)
sendmmsg$inet(r1, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000400)="1d", 0x20}], 0x20}}], 0x1, 0x40003)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x10000, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x12, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
timerfd_create(0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(r0, 0x5, &(0x7f0000000040)={0x0, 0x0, 0xfffc, 0x7})
remap_file_pages(&(0x7f00007b7000/0x4000)=nil, 0x4000, 0x4, 0x1, 0x8000)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)

10m1.304564547s ago: executing program 0 (id=958):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={<r1=>0x0, 0x0, &(0x7f0000000440)}, &(0x7f0000000040)=0x10)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000001c0)={r1, 0x9, 0x101}, &(0x7f0000000200)=0x8)

10m1.235526144s ago: executing program 0 (id=959):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00)
r2 = socket(0x400000000010, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$unix(0x1, 0x5, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000605000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045)
r3 = io_uring_setup(0x1191, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xcb})
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
read$FUSE(r4, &(0x7f00000005c0)={0x2020}, 0x2020)
r5 = socket$netlink(0x10, 0x3, 0x8)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002b80)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="f2a1000000000000280012800b00010062726964676500001800028006000900030000000c001e0008000000000000000800040000050000"], 0x50}, 0x1, 0x0, 0x0, 0x20040001}, 0x4000000)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x149a82, 0x0)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
r7 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x88101)
move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x10)
r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r8, &(0x7f0000004200)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
fcntl$setsig(r2, 0xa, 0x2b)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1)
io_uring_enter(r3, 0x2219, 0xcf74, 0x16, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)

10m0.457875183s ago: executing program 0 (id=963):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0)
syz_emit_ethernet(0x1b6, &(0x7f00000001c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x3, 0x6, "d4192b", 0x180, 0x2f, 0x1, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, {[@srh={0x29, 0x2, 0x4, 0x1, 0xb5, 0x20, 0xe6, [@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x26}}]}, @fragment={0x87, 0x0, 0x7, 0x0, 0x0, 0x6, 0x66}, @routing={0x1d, 0x4, 0x0, 0x0, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00']}, @fragment={0x32, 0x0, 0x2, 0x0, 0x0, 0x0, 0x64}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x6d, 0x2, [0x978], "76c7a75183408ec64dfe9addfe4d015ffd61455f977b2738495313863fffd41e942075329d28cd80ffdaf392c18e641da256bc90a3687cd0e54ac23f6ee33f5d8c84f7b24779763067ccd36bb067b1b0858e1971dde8bad90d9ddd06c9a6e9a11b7fc368f4d5e0b87a4b704ec2"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [], "fa149dccde5290dd0a28f638c0e908346faa02670c87bc28d8dac63bc5077176ab26a5a550e42fb07abc83174a6fc09af917ca4e726ea1f89a06e7dad2e883e21022a4dbbad77e3c4c882a59ca102724b607adfd557901af8076b0b8584bd93a0a6a8813c7fcc99501447e56d1772b5c88b9f6"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [], "e5404e318ca92cd440dc"}, {0x8, 0x88be, 0x0, {{0xa, 0x1, 0xff, 0x2, 0x1, 0x2, 0x3}, 0x1, {0x5}}}, {0x8, 0x22eb, 0x0, {{0x8, 0x2, 0x3, 0x3, 0x1, 0x1, 0x1}, 0x2, {0xa, 0x2, 0x2, 0x8, 0x0, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x9}}}}}}}, 0x0)
r7 = socket$inet6(0xa, 0x3, 0x3c)
setsockopt$inet6_IPV6_RTHDR(r7, 0x29, 0x39, &(0x7f0000000f00)=ANY=[@ANYBLOB="000202"], 0x18)

10m0.111107763s ago: executing program 0 (id=965):
unshare(0x22020600)
pipe(&(0x7f0000019480)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
fcntl$lock(r0, 0x26, &(0x7f0000000040)={0x2, 0x0, 0x10001, 0x8000})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
r1 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00004d1000/0x400000)=nil)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000100)='wg0\x00', 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wg0\x00', <r4=>0x0})
bind$xdp(r3, &(0x7f00000001c0)={0x2c, 0x6, r4, 0x24}, 0x10)
r5 = userfaultfd(0x80001)
socket$packet(0x11, 0x2, 0x300)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5)
sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000400)='scalable', 0x8)
sendmsg(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000004c0)="e7b2", 0x2}, {&(0x7f0000000500)="1f6975845713bd56a9a43f70be098f7f1a2819d888be0c9e38cbe6a62bbc3d56171f6d083c7095a37aa5902b6985da301293c0617500d19f70fc8dff82fffb7fb1a1d4f50586b92a9bc9210cb3c025a7a0e17e54ccb92eb399d20deb13e12fbf405d7ad88150dc6d4308766d974e39d21110aa978522d1c15b0448ac3d208d44f19ea1079dec94daf28061b2d0dbb7b2037507f3131069fa100e2d89ee48981a559e717d6cb562be3e6d24bfcc46ee4e90ace211fa9021446bfb", 0xba}], 0x2}, 0x98)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x7}, 0x4)
timer_create(0x7, &(0x7f0000000240)={0x0, 0x3c, 0x4, @thr={&(0x7f0000000140)="f206ef5d9dc1e1dc829ec6640cfab3d20f9a90d512c8cf7ae1afe59897094a6c28c239e6a1c21a4d2bf99b286cfda156cc52ecae11206f3a1be7d1a884ac1e290393db8d2a206c2faa6cab69a635e8815b5be8a2ec7c47b9eadfb43827ce9ebb8ae6f57d435b889d9b83e382b5cc54f9d60e0d2dde8a2543efd13b1f71", &(0x7f00000001c0)="3e18acb79cec8d1f91b4b509cd6bc538ee37029de4628ead01785dbcdde0991ae065198b1d6509edb516733e031d5b23cbbe5d644c8a19e282f606373ed16bde1a03220934a80f91aad37856d22bddfa050d9dcaad7ea41c51a2edc1ecaa9b5fcd05eaf7b5fd4b"}}, &(0x7f0000000280))
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5})
ioctl$UFFDIO_REGISTER(r5, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2})
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4)
syz_kvm_add_vcpu$x86(r1, &(0x7f0000000100)={0x0, 0x0})

9m59.137727484s ago: executing program 32 (id=965):
unshare(0x22020600)
pipe(&(0x7f0000019480)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
fcntl$lock(r0, 0x26, &(0x7f0000000040)={0x2, 0x0, 0x10001, 0x8000})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
r1 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00004d1000/0x400000)=nil)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000100)='wg0\x00', 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wg0\x00', <r4=>0x0})
bind$xdp(r3, &(0x7f00000001c0)={0x2c, 0x6, r4, 0x24}, 0x10)
r5 = userfaultfd(0x80001)
socket$packet(0x11, 0x2, 0x300)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5)
sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000400)='scalable', 0x8)
sendmsg(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000004c0)="e7b2", 0x2}, {&(0x7f0000000500)="1f6975845713bd56a9a43f70be098f7f1a2819d888be0c9e38cbe6a62bbc3d56171f6d083c7095a37aa5902b6985da301293c0617500d19f70fc8dff82fffb7fb1a1d4f50586b92a9bc9210cb3c025a7a0e17e54ccb92eb399d20deb13e12fbf405d7ad88150dc6d4308766d974e39d21110aa978522d1c15b0448ac3d208d44f19ea1079dec94daf28061b2d0dbb7b2037507f3131069fa100e2d89ee48981a559e717d6cb562be3e6d24bfcc46ee4e90ace211fa9021446bfb", 0xba}], 0x2}, 0x98)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x7}, 0x4)
timer_create(0x7, &(0x7f0000000240)={0x0, 0x3c, 0x4, @thr={&(0x7f0000000140)="f206ef5d9dc1e1dc829ec6640cfab3d20f9a90d512c8cf7ae1afe59897094a6c28c239e6a1c21a4d2bf99b286cfda156cc52ecae11206f3a1be7d1a884ac1e290393db8d2a206c2faa6cab69a635e8815b5be8a2ec7c47b9eadfb43827ce9ebb8ae6f57d435b889d9b83e382b5cc54f9d60e0d2dde8a2543efd13b1f71", &(0x7f00000001c0)="3e18acb79cec8d1f91b4b509cd6bc538ee37029de4628ead01785dbcdde0991ae065198b1d6509edb516733e031d5b23cbbe5d644c8a19e282f606373ed16bde1a03220934a80f91aad37856d22bddfa050d9dcaad7ea41c51a2edc1ecaa9b5fcd05eaf7b5fd4b"}}, &(0x7f0000000280))
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5})
ioctl$UFFDIO_REGISTER(r5, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2})
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4)
syz_kvm_add_vcpu$x86(r1, &(0x7f0000000100)={0x0, 0x0})

7.499634244s ago: executing program 3 (id=3287):
landlock_create_ruleset(&(0x7f0000000080)={0x40, 0x3, 0x0, 0x200}, 0x30, 0x0)
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x5, 0x402)
writev(r1, &(0x7f0000000300)=[{&(0x7f00000005c0)="6e9e", 0x2}], 0x1)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r2, 0x6, 0x24, &(0x7f0000006e00)=0x6, 0x4)
r3 = syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB="06"], 0x0)
syz_usb_control_io$sierra_net(r3, &(0x7f0000000340)={0x14, &(0x7f0000000140)={0x0, 0x6, 0x92, {0x92, 0x31, "186e4596da9ad3e56d5c64c67264ef9da54fa19649fefabf7c3731fe4651487126ade2e06b3cfc05388eb339d640b0a42c69cd3754092c8551536b1fed76ad209cc87a6e851cfac2c7e81888c0771c0a6036403786774d239f9a53ce26ed6d791fcc9eae1195a0a0b8d7bb37200f497ff4b32ae49636b6cce8830cd65611776aac74fea8d18b3ef8bd26d327b518d5fb"}}, &(0x7f0000000200)={0x0, 0x3, 0xde, @string={0xde, 0x3, "32bd34f7bff735482cd08f1f26faea6a58db12b2f05b0d077a2496b381227e7696f986c3a501e0be44feeb153bbb0fab40e2a5bf43e629b50710ab63f3f3cc9baf2d10c1861f1b8dd983eaa17e4aea456dd75ce0ace6673b05e7825fd0d0b7bed4a2def2298d76bc7d3403df9da7c04c561a0fa00ef5e0fc34e2153f29ad29951f7d2385173dc782552287508ba2aac2c84dee59073c3c0e1da88ab90911a6b19b16c9af12eb82357f628dfb2d7ab131a75197f114525121503e4202b19179a7ade6405a9ccd03af132b1b7aa2cc74cec36d07bd4080440f22ba331e"}}}, &(0x7f0000000a80)={0x1c, &(0x7f0000000380)={0x20, 0x16, 0x8e, "0b3dcc3346e527da519152883bd21ff720113eacc0e848a9acc2c3b29e3c01a62cdfdedaa28999866cfcb4ed4f8e73f2c3554b8dc7256696d09fc4717c0d24c50311af3b45115be864c564981bcb69edc5dc368ddea6919e4601bda2890bbbbe04c536792df6273a10d48358b49c0b91898c44266f1b912c258a37182d10a07f015024ccc78097eb88661583fe54"}, &(0x7f0000000600)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000a40)})

5.944729959s ago: executing program 4 (id=3295):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
r2 = fcntl$dupfd(r0, 0x406, r0)
ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000040)={0x0, 0x0})
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})

5.747601309s ago: executing program 4 (id=3297):
recvmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40000063, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffb, 0x6, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000000)="46a1a0995a02", 0x0, 0x0, 0x14, 0x0, 0x0})
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x3, 0xb, 0x8, 0x7de5}, 0x20)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00')
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(0xffffffffffffffff, 0x0, 0x36)
read$FUSE(r2, &(0x7f00000059c0)={0x2020}, 0x2020)
r3 = socket$inet6(0xa, 0x2, 0x0)
ftruncate(0xffffffffffffffff, 0x1000)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
read$FUSE(r2, &(0x7f00000000c0)={0x2020}, 0x2020)

5.665745012s ago: executing program 3 (id=3298):
openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000fea000/0x1000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0xffffffffffffff8e, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x29, 0xfa00, {0x1, 0x0, 0x111, 0x9}}, 0x20)
r1 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50)
r2 = syz_io_uring_setup(0xf00, &(0x7f00000002c0)={0x0, 0x57b0, 0x80, 0xfffffffd, 0x80025b}, &(0x7f0000000140)=<r3=>0x0, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000040)=<r5=>0x0)
syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f00000003c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x9, 0x40, 0x81, "", [{{0x9, 0x4, 0x0, 0xcc, 0x3, 0x2, 0x6, 0x0, 0x29, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x9, 0xdf, 0x100, 0x2}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x8, 0x6, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x1, 0x4, 0x2}}}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x110, 0x8, 0xa, 0x3d, 0xff, 0xf}, 0x5, &(0x7f0000000480)={0x5, 0xf, 0x5}, 0x4, [{0x4e, &(0x7f00000004c0)=@string={0x4e, 0x3, "be59c540b0873070ffa5172c94f2476b6d17cf37ad9056f7ed108515024ab29b27a8b1eea9e0be17160690d6b61e4fd7b2f6029a7147cef75bf240658fc6ea588445d14a521dfb14e5477b52"}}, {0x0, 0x0}, {0x0, 0x0}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x44b}}]})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r6, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r6, &(0x7f0000000380)='N', 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2)
shutdown(r6, 0x1)
ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000))
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000057010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r2, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0)

5.616264295s ago: executing program 4 (id=3299):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="020500020a0000002abd7000fbdbdf25030006000000000000004e22ac14140a0000000000000000020001000000000001000c0001000008000005000000000002004e24ac1414bb0000000000000000"], 0x50}, 0x1, 0x7}, 0x4004010)
r1 = syz_io_uring_setup(0x6713, &(0x7f00000001c0)={0x0, 0x4009838, 0x800, 0x3, 0x21e}, &(0x7f0000000140), 0x0, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000204355450000000000000109022400010000e000090403000103000200092105000a0122280009058103"], 0x0)
r3 = socket(0x10, 0x803, 0x0)
bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000006c0), 0x8201, 0x0)
ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000000))
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000014001b053cbd7000ffdbdf2510"], 0x24}, 0x1, 0x0, 0x0, 0x2000a051}, 0x44800)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f00000004c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB=' !('], 0x0, 0x0, 0x0, 0x0}, 0x0)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x20400, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r6, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r7, 0x0, 0x97, 0x8000000})
ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r7, 0x0, &(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x1})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f00000003c0)={'syztnl0\x00', <r8=>0x0, 0x4, 0x5, 0x0, 0x6, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x1, 0x80000000, 0x3}})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
bind$netlink(r10, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r10, &(0x7f0000000600)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, r11, 0x60046}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
sendmsg$nl_route(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="00000000e300020008000a00", @ANYRES32=r11, @ANYBLOB="08001b", @ANYRES64=r6, @ANYRESDEC=r1, @ANYRES64=0x0, @ANYRESOCT=r7], 0x30}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000600)={'gre0\x00', &(0x7f0000000540)={'erspan0\x00', <r12=>0x0, 0x20, 0x718, 0x100, 0x8, {{0x28, 0x4, 0x1, 0x36, 0xa0, 0x65, 0x0, 0x1, 0x4, 0x0, @loopback, @remote, {[@ssrr={0x89, 0xb, 0xe9, [@local, @rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x3c, 0xdc, 0x1, 0x0, [{@empty, 0xffffffff}, {@broadcast, 0x4}, {@multicast2, 0x1}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0xfffffffd}, {@empty}, {@rand_addr=0x64010102, 0xfffffc01}, {@remote, 0x5}]}, @lsrr={0x83, 0xf, 0x74, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @end, @end, @timestamp_prespec={0x44, 0x24, 0x41, 0x3, 0x1, [{@rand_addr=0x64010101, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@local, 0x2}, {@private=0xa010101, 0x6}]}, @end, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0xb, 0x5, [@multicast1, @rand_addr=0x64010102]}]}}}}})
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000640)={<r13=>0x0, @remote, @private}, &(0x7f0000000680)=0xc)
sendmsg$ETHTOOL_MSG_EEE_GET(r3, &(0x7f0000000800)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xa8, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x1)
ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r7, 0x0, &(0x7f0000ff8000/0x1000)=nil, 0x1000})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r7, 0x0, 0x0, 0x0, 0x0, 0x1})
ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r6, 0x3b72, &(0x7f00000002c0)={0x69, 0x5, 0x6, 0x9, "5fea14b9808327d8c197826821677862400cc9cc29158193758d670e1adc4b4ab43ced3a9fc370538d76c616161f37a07cee94996c5c6b8c4753586ac755e53eb274142ba960e0f4bb5947c1a69da55a0e"})

4.838674897s ago: executing program 1 (id=3302):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x40000fff, @local, 0x8}, 0x1c) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r1, 0x89f6, &(0x7f0000000080)={'team0\x00', 0x0})
ioctl$TUNSETLINK(r0, 0x400454cc, 0x201)

4.662647306s ago: executing program 1 (id=3303):
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
writev(r1, &(0x7f0000000300)=[{&(0x7f00000005c0)}], 0x1)
socket$kcm(0x29, 0x5, 0x0)

4.367137492s ago: executing program 3 (id=3305):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x2, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000003, 0x10, r0, 0x42795000)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
mknod$loop(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x0)
r2 = open(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x11)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x6, 0xfffe})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0xa9525000)
link(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
close_range(r1, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$video(&(0x7f0000000040), 0x8, 0x101840)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r4, 0x0, 0x0, 0x0, <r5=>0x0})
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x10, 0x2}}, [@qdisc_kind_options=@q_drr]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040054)
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r4, 0x0, &(0x7f0000564000/0x8000)=nil, 0x8000, 0x1004000})
ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f0000000140)={0x28, 0x3, r5, r4, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000100)})
socket$nl_generic(0x10, 0x3, 0x10)

3.748407041s ago: executing program 2 (id=3308):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="200000001200010027bd70fa78dd030010c300000c000000fdffffff00000000"], 0x20}], 0x1}, 0x4000800)

3.630597517s ago: executing program 4 (id=3309):
syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x400202)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[<r0=>0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x5, 0x6})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0)
r1 = syz_io_uring_setup(0xf00, &(0x7f0000000440)={0x0, 0x5961, 0x10000, 0x2, 0x4d}, &(0x7f0000000540)=<r2=>0x0, &(0x7f0000000400)=<r3=>0x0, &(0x7f0000000500)=<r4=>0x0)
r5 = socket(0x1d, 0x2, 0x6)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r5, 0x0, 0x0, 0x0, 0x40000000, 0x0, {0x0, r6}})
io_uring_enter(r1, 0x248e, 0xf8b8, 0x28, 0x0, 0x0)
r7 = syz_open_dev$dri(0x0, 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f00000000c0)=[<r8=>0x0], 0x0, 0x0, 0x0, 0x1})
socket(0x10, 0x803, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r9 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r9, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e22, @broadcast}, 0x2, 0x0, 0x4, 0x1}}, 0x2e)
r10 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c000f"], 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20)
r12 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r12, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32)
sendmmsg(r12, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r13)
sendmsg$L2TP_CMD_SESSION_GET(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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", @ANYRES16=r14, @ANYBLOB="010000000000ffdbdf25070000000500130081000000140008"], 0x38}, 0x1, 0x0, 0x0, 0x4004800}, 0x4002)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[<r15=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r15, r0, 0x1, 0x800, 0xa1, 0x3, {0xc, 0xfacd, 0xd, 0xffff, 0xfff9, 0x4007, 0x8, 0x81, 0xff, 0x0, 0x1000, 0x7, 0x7, 0x6, "0bcc13d30df5fd54520c2e0db22142cf8957703ef62a79518b9d7ff3a31faf87"}})
ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f00000002c0)={0x0, 0xfffffffffffffc7c, r8})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
r16 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r16, 0xc0285628, 0x0)

3.427772051s ago: executing program 2 (id=3310):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f00000c2000/0x2000)=nil, 0x2000, 0x5, &(0x7f00000000c0)=0x9, 0x8, 0x2)
get_mempolicy(0x0, 0x0, 0x2000000205, &(0x7f000055b000/0x2000)=nil, 0x3)
r0 = open_tree(0xffffffffffffffff, &(0x7f0000000100)='\x00', 0x89901)
fchdir(r0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1)
unshare(0x8040480)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4)
r2 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000040)={0x0, 0x10002, 0x6, 0x0, 0x9})
unshare(0x6a040000)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000002a40)={"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"})
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000182000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0xaaaaaaaaaaaab19, 0x4f, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000340)={[0x3ffff9, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x213f85ff, 0x101, 0x0, 0x0, 0x0, 0x1, 0x5, 0x5, 0x101, 0x100000002], 0x0, 0x290fc4})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x1000)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x100004)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f0000000140)={0x0, 0x4, 0x1, {0xa, @meta={0x44564956, 0x3a6343a1, 0x745f, 0xabd9, 0x20b5d06e}}})
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x0)

3.296686915s ago: executing program 4 (id=3312):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x17)
syz_emit_ethernet(0x119, &(0x7f00000006c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0xe3, 0x3a, 0x0, @remote, @mcast2, {[@hopopts={0x52, 0x8, '\x00', [@pad1, @ra={0x5, 0x2, 0x7}, @ra={0x5, 0x2, 0xffff}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @remote}, @enc_lim={0x4, 0x1, 0x80}, @hao={0xc9, 0x10, @loopback}, @jumbo={0xc2, 0x4, 0x7}]}, @fragment={0x29, 0x0, 0x7, 0x1, 0x0, 0x9, 0x65}], @echo_reply={0x81, 0x0, 0x0, 0x6, 0xff, "69a77fd0fa7e6114a54dc56cf5c051fab8f56d001e02b8b343625442a041b5c1ae35b245051f864e72921f0cb7fbe69da0bcbd50c7867c968811a0997378ff76f83e740dd34b59614a55df0f33189c876f675f392f6465425b50d3d189db7cd868afcf63fa4fdf2f2dd4fb560cd0a5963c815dfc29980e4dce17fa37e03b8cd3712e63"}}}}}}, 0x0)
epoll_create1(0x0)
mknodat(0xffffffffffffff9c, 0x0, 0x21c0, 0x103)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001c00210729bd7000ffdbdf2507000000", @ANYRES32=r2, @ANYBLOB="4000000a0a000200aaaaaaaaaa09"], 0x34}, 0x1, 0x0, 0x0, 0x44801}, 0x840)
socket$inet6(0xa, 0x80002, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000400)={{0x1, 0x1, 0x18, <r3=>r0, {0x7}}, './file0\x00'})
syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), r3)
socket$kcm(0x29, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
socket(0x2b, 0x1, 0x4)
r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000005c0), 0x20080, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000200)=0x9)
r5 = dup2(r4, r4)
read$FUSE(r5, &(0x7f00000063c0)={0x2020}, 0x2020)
read$FUSE(r5, &(0x7f0000003680)={0x2020}, 0x2020)
clock_gettime(0x2, &(0x7f0000000580)={<r6=>0x0, <r7=>0x0})
write$evdev(r5, &(0x7f0000000080)=[{{0x0, 0x2710}, 0x14, 0xc, 0x4}, {{0x0, 0xea60}, 0x10, 0x4, 0x5}, {{r6, r7/1000+60000}, 0x37dacf5bb2dd06dc, 0x6, 0x6}, {{0x77359400}, 0x14, 0x4, 0x3}, {{}, 0x4, 0xd, 0xc}], 0x78)
r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x200)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r8, 0xc0f85403, &(0x7f0000000480)={{0x1, 0x0, 0x5, 0x3, 0x230}, 0x0, 0xfac, 'id1\x00', 'timer1\x00', 0x0, 0x9061, 0x99c, 0x3, 0xffffffff})
r9 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r9, 0x29, 0x1000000000021, &(0x7f0000000000)=0x5, 0x4)
r10 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0)
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r10, 0xc034564b, &(0x7f00000000c0)={0x7, 0x3631564e, 0x780, 0x0, 0x3, @discrete={0x3, 0x7f}})
sendmsg$inet6(r9, &(0x7f0000000340)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000940)=[@flowinfo={{0x14, 0x29, 0xb, 0xffff0000}}], 0x18}, 0xc4)
syz_usb_connect(0x3, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010102afbf8c08450c0180e7510102030109001200010870100709042d0400862800017f5ebbc5419b80477562015979ba8d833d5b8353e1aa1730855c949f52eb204cd62f286ac9e26365b5840c527b3c315ce9fe45485a8c610ceb381a8210e9564913883d0f9e4e8f0c39d5963ffd39be244cf2febfb98681e1ab05e22a127ad210d407bad5c873899509c3942790d20ba8739de7"], &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0})
sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2cfaffffffffffffff00000000000000000000090900010073797a30000000000c0002400000000000000004"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0)

2.932663081s ago: executing program 5 (id=3315):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x15)
r1 = signalfd4(r0, &(0x7f0000000040), 0x8, 0x80000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1)

2.901571898s ago: executing program 1 (id=3316):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1)
ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000000)={'team_slave_0\x00'})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x24, 0x2f, 0x9, 0x70bd27, 0x25dfdbfb, {0x4}, [@typed={0xc, 0x17, 0x0, 0x0, @u64=0x2}, @typed={0x4, 0x19}]}, 0x24}, 0x1, 0x0, 0x0, 0x42914}, 0x20044014)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r2)

2.722775517s ago: executing program 5 (id=3317):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
write$binfmt_register(r1, &(0x7f0000000140)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x5, 0x3a, '/-:-^:', 0x3a, '1\xaf', 0x3a, './file0'}, 0x2f)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000001000ffff2dbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="30050500b5a10500440012800b000100697036746e6c00003400028008010001001400030000000000000000000000ffff0000000014000200fc010000000000000000000000000001132f86b23afcb4389680c8d4e549bb31824c19d4e56d770321f2c9dbc0c941ee128bbfef9f10ddb8c01bfd5791c616a1aba8a9449222ab1a189f9fff5590fd51c04125fa5522c76e3bbda38bd4cec475a74cc10970819cf212296be9cdb8f5ffa45f97f78c93a44a4ce416bdf32af51dabe8c818b4070675f488eea93626b40b6c6cd64c141d78826bb4c461fd205e4e097f61d28bff51000000"], 0x64}, 0x1, 0x0, 0x0, 0x24004804}, 0x40000)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_SIGNAL_INFO(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f2, 0x2, 0x70bd2b, 0x25dfdbff, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x44854}, 0x4000)

2.497735883s ago: executing program 5 (id=3318):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
r2 = fcntl$dupfd(r0, 0x406, r0)
ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000040)={0x0, 0x0})
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})

2.461878449s ago: executing program 1 (id=3319):
unshare(0x2c020400)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000002000000a00300000500000000000000", @ANYRES32, @ANYBLOB="0000000000000000405d86327c0001"], 0x48)
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000004500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
syz_fuse_handle_req(r0, &(0x7f0000006180)="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", 0x2000, &(0x7f0000001ec0)={&(0x7f00000021c0)={0x50, 0x0, 0x8, {0x7, 0x29, 0x9f50, 0x1, 0x1000, 0x48e, 0x1, 0x7ffb, 0x0, 0x0, 0x9f7b0001e068234a, 0xfffffffa}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f00000000c0)={0xc, r2})
ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000100)={0xc})
syz_fuse_handle_req(r0, &(0x7f0000000000)="d2c113c29ca1f0329c09333c4e57bb838cfea716579dab7d1cbdce058b04b86cd2573f5a46ec9ad1bb3c276903ebcad8758f3bdb0ea994c5ea01d7771c5b21040018c812e3b3d2c92d14193a28633e7a06c3239d8e97c69f11a821f535082d74ee0c1925c46bfba566d8c9647889a9dde67089b24871471415a695730085f81a0b7c8dc2eae85ccd015b85d7d1fecd2528f2a8369ee0315327ba0d506a583c716ea4fa23575566c8cf1a2a844691717179b82f10998b7d540188e57e864820665ab70db2d483c4fdcb115ea6bbd4a888f9d383f6fea063635b69686590f540c638a77fe8e8cb266cf72667e61871faf1d1810c749c30c5a7b61609d81114f7aa0355967a7513f659d021338ddb687b0f7372386170902b612c56f58dc73a1ccecb389ccd39f926ee91220a5c053dc277919ed4e32b63da14781cb46227a71388f2aeb37e8971d4a554824bb05f7e6861a916c94204feae48f115680a40b7b2da6ec3af295979016cb78ee53d347a2a8de81c26d0468db8b59df449513e109f26ccdff64403180deba17211813b69ef3f0c42f498a6f3d05a4e7f47f99a8b9ff6bb375fcd1cf444a794a7c2a274f2786c8c220b1f80f2d0c1f311960b37357e31198a44f1e25aaa320f6daad7a42c0367de29a2d0d5567098dfc4ac2b0393a7accfaed79afeec5c9d526503e8fbbd3d1f6365c698775999e5109bada3ec51a9d4b884631086bcfa4fe99135a7c482d9e3d2cbd0a58a42f8cd737a812c21185d909bab234d412bd450da975be70eac2a8db479f7030ff5f41817cd798d59a2db9d8d829765459531044ba3bfa6fc89d046c75e707133e5211fd05d20f63d4f493b23bcd966e3f4314a512451b761fb3b3ed815da07c604f71d2a86937142ede6fce427766dbde15f74f2c45d4c3c08e815b507bb05ee97ddf7ed79ea2ddd5c6ef057d455d84c79bdfd6e68ba6f5cd806a6b9dfd5ed65e394554fb59df7aba2676779a547cf8a7c97379abc760e94e01264a2a23c8c63296ec0d9a4e0aa5c9c470fe46beb8db8322372f3649b7d2ad0b8d09e77e4757a2f40835860b56d41382fabc35d891deedd2168ff3b20f3345ec3238ce795fd9b0311fbd7cf10bbefe4e9349bdf7ea5294f3fc3ded1203c01c9a057641ea122eea48e30b942fdebdc4e7263353361dfcf3562eb3f7eb491fe5394ac1e9af734950b3de71b557bd1baf334d39c5dd9e6842a3ef24004eafc5eb85fbdad5c1e49f60f565da146b119f27ec9077774e21300edf2883f34e299ae0465779ab80ba2d097f5d791a72785f35090dbc369864476c33d3279382a49ac45be1706211659d6fac1ae12d772fa270eb3746a69082e67664f4be335f2d172d52f5083a0768e5d4332352be40eb41e3406de4498e740a470141032ea251c144cdb5352d8049281898c72f13a5d3509c9c77308fe45016abfd7d42b1a022a60b9a5bbcece7c0a10bf9f157995465729b38fdcadd0d977574636206982a6b4e8f24bc75e3eb054fb9ae81e878afd24cfa9756f053bb89f0e4a42e195bd2af8a91a6dd5c9fbccd938681a7387ed22a0e3a8284d3182aa7ef1905a267850fc405494d7079f6d0364287cf7b16dc2310b15bc49fb68d1a96075cb5f30f4fc2ec0c51d0b7e806e78f108f4060a55b8c23b3c89a2f2fa321d5138019c417a504d230ec496583933daba2998e20d8f9a2e6798f681e1d4df88fa4e084513d3648ed4f6624d8b894470cf325e837ad177a634bf58d21378fa0d3370bcb724fa88314bbd0749bbe6ff9dd5d7826701891c180278833c3327a8b1500c3e86fbdaacaaba0e0f708052ddecaae4fe142689c812aeccc7211f61159e0787a8f639d1f0a4db373c17317fea5d3ca1c6060fc44a2d02502f0230334acb69861f0cdb82220827f5887a14e7eab133ce4ecd9a414b2a6b31d8c631325319bbb65ad01aaea7e157fea6cbb434c67f4582028c32f5890ceb243dc972e61e122cb36840d5838dff32d4b613ae1909f3970404fb1973f1e80b0e388141b2e24d47276be045880a4ac18fd136c08cf266b35c75e9b796f6210817439833b613195fe4688b22127a978d20f8b32e3df3297e09a565e659857d8052bf69c5006c5870bd25e6c3aeb411553924d06ccb849cdeca659448cb220d259b4ee20d256d44149814b5e13ab365c448369a43553e01874acded99d24da7d1c9c283dae95b0b5311344af85c7c9a8483fb18a5bfd7a4fb4bbade211edfa4c30f3d1b5bc9672a02adb5d638faea66424e2c82540937dc4cf21392fe16e05811f1bcfb83132deb1cf2a522f9b543758b25d6949400af5d2a7a566f4ab0f5fe0b0a8e8379850e3ed78cb823f5b59b3df4de700427b197720ec69b86c76080b2cfdc4a2619e9d2a901e247e591d79dea91257c0d4a3c7ebb86af42de6833aaaa2d69b71e684236705744b79c62079236759def4a37a0b97742dcdc1af8e54385ad496af31cffe7539e4a69d65ae28845439e5e3eea34785e6065c32f3c7b71ef4edfdb16ca9ee9d5d4e066a60f9919461ce932a61c4100276dad7a22447c681bfebac9186f23dd38509090e0c0fd60219d33174d0d1f5a2b3eb194ae1c7003b159dd560e909fcd0b14b803ded8a94f2a61ca59f9015a673c018515b7605512ecdec58b60aafcba88e88b790e6dabc09a6721613d4e60ffd8d01b07ccacc1c7f2415347f5f5aab1b7e5d27090403a55d0364721bf0363e34bdf9d92c8e83fe39e8d23e0a038717c00f82dd27709ea69a7a857575f0e039b067750b0e226dd01091b6aecae409d563a72e0805c8c101401a9d4356c532ec27cf25ad0ea92eb137e5bb367623155b3e62baa1cb29d86e4765a635d180d26f37f58a24683494cca93547b1f9ff0cc81c085cc4509b746c5327f1f169ca3bd059d324ac91e3c05bb225e5f81655d2f5b5f0cd6389d35be14f63cf76ef856634c5c42f5f6763a457be1745d9ddc4e7a77cbe86398585dd18159eb7dadc2da143cabd5794c4caafab774c5b0ad661f6f9e7bd5163af6f214bbd6351560cfb5e9fe42d3b67912e0bb52926429a43c27aa6c52e904660029285c4b763d6becb5cd4e9a029fb092ae20df18e073627d896a8de5f89474cbc2d2a525edbaa635a9704ec9f30bc0d18dea437a986553da723befb7f91d73a9976a528d2ff2ff80aef0fb80b4c84fca0d810e1f0c3857aef2616c9908aa7dc6a02e28085ccbb88e13c8c8c1acc631e4121e39b453a5897602dfcff5629f88d75ae7375cb9d08969dc6e870870c7aaad3c62f1f39c363d7edfda2d5ce1e9e62b25cf3b31bf4da9b90616a79d3be8f031837844c13fa6ea8af83db6eaa6abcb5158c38abe7fd39b8710c7d8d830ac93d5d3cec1d038c7947861c4ea118b3c205be5c441d35ef856c9a81f970c2850397e735a2fb991fe2dd0f293224ed263963a1041dcefc67b77b25b82d6ab047eb282702ddab528cc4bfb8c82d86352057e893bfd4b41e3396d64d7f1a78f6a0d4cd420d4bf84eb791a513163f837556c1a2e7c4e84ab9bfaa3a23a7114bfd301ea1f6b5e5c94e076e8f42a4da7e05224589005625245672ef85a11d6ac4b379b72660583ccb62b3d6cf00090c9c0ef7f3e3bce7bc6e10baa0498799de647451281afb45cf053c7a57eca0732a8f9e9f02437be51649bc7d1a391aca1561fb6b2d47817394e97e426afda0fb9fdd248579b8eb768ef9e249dbef8b0ebbd0e8dec2f149e2356df3a9f728b5392875ea476b54a1c990040ef4e63373566611c5b555b5d60a0e69f32e05db3f9047ea3e261ee6e3d87516bb0fff783333eef6444c8d9d17f8b23514d6358c62cd34dbf0e9dd60f54f286c533d68f2610c82eaedd9e512884f37211f190a08cd3766c7ca6a5043ee9dbabf5994c48d03a2fa5ccedce7ffbe9cee1e9d54036ca4ca7c4fdc339011448c7aad3d14b639dc179e7a97f03b606b0e47a32b8c9ab82c59fbba5e0ab663538aba9ba71d27216614f59bdccb050cc2512f65f465e8476d36855df64b8bb181907e91f45c6262dba02b35dc238bb32b9cc7070d31f7f95f2193b5fca347874a64041ab629cb5c3a3d77ba999793badacf01c4244ae13c0d77fe01fae16c489fcd58010afc3084ffadb9bf7264f23f1ad0e8d9d762dcc431163c343054181812c9cd1a6ecdc9964caa0a2ba8cd29271e6824891129b89efc1ea2996100f1932940a49a324e8eb688d05ac7d6ba273aade15c2be8cc74ef1eafad9b9ebfdfa36edc5c6d109485a48ac6a8395ccdf23779919953cf3c61c3a635c7e782f84098f3cc6bea7644cf3924c2352c97c76bc7141227dd29f1d47ef209adc3aaefd8cf204fb265e6b262e83736c2f26b22d80870af83095338c23a47a5a86af2ae7decd1aaabd925ae900bfe8e82728e14fd82677769bc9962dbb507a61e206821ac9c0940b12d79ecb7a916b9f6573fa3d9a7ef773f66de8cf8db6536d986a29d7b50a2973d228ec48468c5ebec6253130c578e5ec2848b62e8e1082a3d584e84b86e24211a9546e1abf79e568827af5d9ba98ba7b33b5cd9cb7a81dc873ea11276049d9d6206d2ed0933ada7ef9b6823f24b756ebea834297743ffb146350f320ec9044df55b20df0ff84584c16350f465b5ad7d364f9b166fb534c2a0e65f6bb4d61feeb84463ceb4a4f7853c0c2410955881a60170b0bbc131f6699e2616752851063c7e8b0a82e4357b84e48bad8002610e5770c17ee0cb301f9dfe8d5cbb66c6962b5edcae17b5c5dd42026737ea9e2c79bfb9392d290b44d66ade6eb62e26321ee214a6d15facb7cca610b6209392179a50f3dcba1494d3f302745461f6172d329a12d68405be5ee05ad2a641a7aa3da1d1fd3198671bf1af5b39e2bdeed49df80cf0c6e0edc5c4812350097bda47d3fafb3827d73eeb0b29320c74dae0104000000000000835f5a7f98710c644dd50d3af618651b41916bbabb9ea7cc46c8208dd7fb99474be66e1a970c899f17129a9ed17ccce0d93411e71b8f1c7790c787f7a97a50d54acbc6f4eee49a38882c34e3477c97e1c6da0b39a1e9d0d25a3cea9364033bf4f625a02412174d03dafd642526867578f71f2e52920833b8d23713d5ac48165f49545f6c7c75b5b4ef2e0682f8f2e191fdb6c0ba529856f887391f8d5aa3f7dfc5230170b97662611e53a4436bf4e98a5ceaeb16a79bb95f960b2675cb6da9f1cfcdc1ab604ef7749fe87ccb5a3660f463ff5f488b5c544cf847be84dab22d038730a7021cdc7f7ab714c1561c98a39cc92cd6aaf53c82b28665114ac18b2149ee7f1b52f894c28a49eb45d4cf6a0e65df39b3c717039ae41958fe810c1e05ad62ceef2980e0cfd891bfae0db61fb1c8d65b6812ef1bf5d426f955ab4826eae69f531979699685f5312882032a5f47ed8cf2e98e67d9e6c299d2060a04b4aa677500b48a33586b10f71293d57de846d2683621b588630a6ef06a41437bd99366787b787a68c71779132d0ee73aa5f97d5b9ca18a7ae26b7002512df1073e2eccdb4d2f137a15d9604e10547fa465aeb4f2e5899b531adeb5e72fb76c2c1c9d18ceb4a23a5f6174ba86a7119d82e35cb5a5d1c6a093351aaee0094b32b92417dc50c1d3806fffdafd2ec0e3ba176d84bdb7d59755e9083e61ded802e2a089ae9d6746f738b55845bcd4ff0a21888c2c6b972db043973fb323fd1c15e70137aa6a4bce3f60f27c1d1488f3751e5425a5776c7cc3a3c8acbfbd2171407e1a242e8e241e6e9e1287d8995265a8092ec59ad99652e63a41b744f34392017f29c1b1ca4ce7728200743d4497a70cfd2369d0ecf9e0ba6f28da25b2d918a06ad1173091b8d750b8c2120321818a0912bf47b96c9a8962930a843ea8419b24b8618b7b43482291906e151bf39d3634756d9e1ff5a6e787d1fc4be7349c38a3b882e059a5da930a9cb2a01eb8b24b54def200009538fc063542921947f1997dbee59842a50a043d431649ea0adde68c43259ab51592107b2618c5f761364d4d3d5d0f4d4ae1b94650cb4b695db5831c6dd789140b87525d9ed46fb8dce8fa75d68f317dfc3858d810928fb3530b7ae8701d622b0e69ab16cbbd46c8165c467850d081292da8147fe07f472776d1e2c75c17bdc0f8bafbc964da953a5efe64af69944f0f8858b2a4dece04428ede8967d0e93827910400af8a859b59579d9628191b291732bae90a3b50f8b2b7728725568a83e006ed21e940d4b7e7291ad6365138aa2d59c0b303cc298f7a70d0c39e4f17a878083631b1f96a65d7b4c5a4403929180694f55b71ba29685bdf472f0e21a1c8b3c2dbfc4892ffbc0f0f23f38ed0b785080c11b0766ffc5a0c2c750080b764df159e42ac8eb82681baec5b0ad7948153679162c223f63bf22545718accf2a30bc4402f6b54996baa00508c6def488975a2e2bf2a8dbcff49293e83f998f8baebe722cdfef96c46ac3d945d56ada194353f7cd03d2b86cb9844f7d63f008fbe553fe0023f6968e8bea9054ed3c567e5c55b283fb2337fbd20510e5e098537f5c1baa6b509f63b1e812840aaf470690894a2725f4460a106a3b0e14b12b47c3fc1a083ae7e8cd2e710b5d428b2063f7bb91105255cc0fcc8ac51398ec3df6416d283c4aba6ed44846e82be02d242c710c973c5f0a9b3b16da8a96f5cd2a164a3fa040075b0cb99944f1b34f7e79ae039d15a6c992cb40aa423de90992c064e1771f2a396734480f43b024dc799b8e242df235dc0d33cfdce41755722907f4533a1480d78e99320412326c27e15434fd3fdb19ed33a07063a8a62b39ce14be2ea1e0adadec65fcf4f19901bd801b87e90fc91f1270b420fb530b71b7aea9ad23c4a4ad28d4b63444bc2fa7b44247d5e9f0ca0209a489035b4521b5e886a419df1f9d0e27b9c5007ee75fd3909d4e0156973bdf2ff8d1a88cad1d534ba93648ecb34a30b1e760f1ee8cfb90c27c36385fd68ee48982e5f0c190e8786bf2eb5dd386d3f1600efc19a92020b509d3e2c74b4265bdc765085bc49c6fc61476aa22cff375a78c59f33394cc6ff460584ebbd8dba2cbfe97feb1c9147068dbc1d3e25631ad8478d826d88c28b2cf967d07d3ff845cbb25699406d106eabd31066e9cf8abbe7598f71cca663a6f63bfb63caa95d3a363e69e9a3bc889d026df28c37e41786bf8c9a1ccc06c3499986a72bb10367f32b1b8a55365c2a5b46061b58b81c5da69ad39db6c468906f1c1225527f1b26a3dbad94b1419f3671086b061117206a634cd08beee1fcdfb4a3a7cc78b3cb1293dc900d0859505018b38033a1cc9a0051960200000000000000328b6834f9c30bb1734949fcdab62cc6904b285322da3d49f188019648cac314d65a7c57f4e25864f17e346e7ebbe411695a237622356ecc10e66c8ba33e7106a756b8d3abc1a1aababc26413adcfda74a59b9002a7e2e3edb3e7551d32c461c2e40c25cb9de751ffda44d7f353513c5bbbc473594127c09775844dec5dc922caea5532dfa98fe80d80243233a4f0c15520d9dc76da3623aabef3582380ca4d2f9558d6c71b672f259b94f26710aa1d933b3ad79c8755a96c18fcfd62a972ca80ea0d33afbfc80045ba7dab492aa06c73ea3a598b2bc6eb1549627d183c25c3486814960eb1e1b02200a92f51b8642683f88185a9ee91c6dbb576dd8a869e1338b81ec205d979242bd963308af90ec23e01d253a70440edd3ebfac8e489db0a70bb5c887f22e7a5de33918374a9ae5229d419b1948eeb23bdf8dce3c5df3b81d1a3e3b38e095f261cb9e00f5567413a5c13abb469fdf64adc830cc442a099609cf0ebd3ffe936d77d6099d816be2b4cdd31e4fdf5af5904120ec65e81138416462f9e9bbe9ba6d5980c7de01288bd9f4741848802c32f3774678367c70014e531ad7f95b5527d022232ada51148012328f1693b2d08b8eba80dc26d8e9fc369b410331ed720e410ded5bd03ce69942ffb97489a2c5b6e4da93cc73811738a141c3a16d4ff6edf2ad1b3d3ae45a21c5ca2613b92e7871dea89d3cd699b86520c80f6a391cc2911538f8108dc90203b0e74ee43a087e033265e0745a9c991facff49339c40601420bb72ef014bc4b9a51cad1dcde9f1567b4ae9d11b1416ff3d8dee15f4672bdbca4348e7e71f8d75a73851bc0ad539312b7d52c498602a5eda4630296fb40aaa90d8f6122da7fb56d02755f861df193bdc5effd8a0e54c2ef78a284f7543c2b25a81bf545be3a3f549aabe86700bf058877e3fec53813f9992814a2cebf341cedcad346dba70596da899add4d723d98366ab60997cae7e5b9d417252734d9145ab8c5ece5b5b0efdc2f2578838c500ee17b866323a951979c6f1a50da2833bc437bcddd6efaed0244df44e6069daf359289d9c50c073f0fef4be1fb3802be5ea643761ed6347a35a3f537cbde402911c28d7c7c7e6b8612facbe87221f3505ff078d0dbb28ec469fe6eba2efcb4efdcfc5745299c0850e21ee2c9ef77db8070d589c547cc7379b58677d16077093514849869ab5bf8f896fa933ba3edc676dcb73e91386cc48f01782ba635564e0f91988cf98a3a17544abfedcdc1d80540e9499bf98180feb80325194cbc369be3275ed390f8e91b8d75b1364e9fabe50a1e3b9531c3fe1aaf6523e54bb05738bd3a67ca5de01b2e479ef7678a86b13d6b747fb3cb5fe1be8913228705fc232ce422186cb79c3b66c944f6124eb414322806d47978044336221f26d3a09ed8dceb52e3c7e3413535faf1f7868cb47bbbf02b36650b673a4e51387c64d44daf58057adaa5610d22a15329804cd51a42f663311c4e5ece9d99b5a813c4025e8e0a98c0f3ec13cf07de0b18d7e1ba7d3eb143f5825f62ae5b5f6d92b167f9dbb2177e84f23322566814296277fc2933956f818f5475b6aa031545e6e2265679d16cbedff96c4f419d5fabe99ee652feac8acf9a90771ab8ade8291b42d25ebbdc03faac02b9599fdb83621f6ae1e2e7f946520f3cff881cd600c17b4a00c08d0996f7d2bb97d35647f72b80ba8ad3b4a16cb71094b2d1193a5fa1456e4671788bc51c0d506f4809ca34620d4a75a62ddfa20ab5c4d347a08eb8784d4c572fcb473b766f5e1ce9d92db70ebee83accd58b8253da36b9542686edce545261f309144a3d64900f796620003b36ee3d44a06cc4d088f73aa45288b90476d2e1e461795d473d59500aa23a6b7724a2f0d6473dc2f0af6ea311a648e193072016e199b920bc8c0830ae18f1c17e33d73badadc0f9d34cd52b54f4d3d480a7ddfe0f140f8de1a382a4c5a722d3e0f875b69054d88b8bab94e9394ba8d28937f1ffd871d1666a377620e7f032633fe58ebc87e533bd6461b537cdde38352ece085378dd7b24fa3fd5a3dc3f5b77492e4fc91238a8bfcc4e20bb396bd3317155981ec593926f2e9f15e5ac1aa533e122441649a681d88142a93386a6ed6b2d5b18d7fb57541e31a69acee17345b08c6667ebbc53a082fbcd980b4751937ba729dd2fd9b43d06091517922dd3ea524db002db7525902a465081843191d2d7ac76adb7724ac2bb88e4cb2f3188dbf0cd47acf5011b4519ec100a44b2ee6a1dacac5aade2cdcdca777c6b5edf596b05691d247f671491f68bf2e04007e8674309ea98ab794d05c664ade246288796270e10f4a308420a62bf0df1d1636330e88bf4cc78051e5f715c8f97b8a83119b3fb5129ac6d0733256bec96d8cf435fa005e14d88884a0ca24266a4e78e25e2519796ba31971e4d0cb44ea58c5ddf54a15e3b449642e395679fc5ba600cc6bb7f2b004bfb0d621e51f9cf16309e4a02ce4f23f4a2d225aa8c84840bf2d3522a5f7a983cfbbfe4adb62d6ea622ebb784072bc6673878c5eaa865a7657b619f48cf0c51a4b0d47b20f426adc7f8ab68238b97abf68443f0eaac3796bfd99e0bc644e4f6fc43e551eccd615db802dfb031444e09aedcb04846bb894a2cf42dd0a578dc94d727736e502194ae25bf8556373969cb7f27788b6edf5b2bf25a79c7f89289f827ed4be611d65f6bd89698b130aaadd0f2d914819f41a0185dfc73adcea80d2ee592bf32d15010cb32a95ef112bccb2b780b461637ffa1641d34e1b114cdd3dd1ceb365933efef1781f9ec620a73097594c945969c2ea036e36b2380b33599c3e1d4eb2b7f210324aee3bba5a944b71cf0246ceed878897fe00e30d0bd32b3dde08c8805e30efe39cbc9d11b97491d82fbb5d93b1997e5f3128252472ecd256b9f79611175b6f686629ee744d0ba2494607a4476ea5f934c936403509c14bddbc2403ad5d97bfed0da36707b66f39ffdcee7ab39602e740c1ca9761570cdbab5f56b2060db428921457445b15c4c92b9c4b0ebb0746936bc3053836fa884e97c96e44d18a5a52feca033ec4caf950927bf9a281ea1aacb2a8b1a1f74b20de25ad5f3e459ab8b61ba5d00eaedcb6b5467dcd8608cfd48cc8c1a01f2c9f68bc9ef9adf2fd81cb3e28277c52d58f42ea87c8896383c2fa88dd15dba7172990893fe28ad1b50095b2ca20856de64693f3a663be6e34a9ccbb09add5724c5599495d0c95d2b900444651048bf418070b324016678d694b82565931159ffc37d3eefd7b482c41637cdd69b8f7051b6e88cf87a01d26d0689057ca0f66f65a2c3fbca608f7dec52d8e41ea98d21be162eeb38b27e9465d5525e0ffac3bd989adae19bdcf98edc48ff9d9d2a2f0850fa2cac8421ee6e211b1930f9fe9cb7138e8058ae476aa93c0ca49b170eb4ebbbb6fb4020d000eae537b4dd4bdfc63e3fb281848c057b900c14dc12f8833d5ada50c8f0178137964c3b1524c59eae7ae19066a8003b9f4036b0be91f6f24baf6839f360473907135a8eb777dfe4dcf18d15fb8e16d069c48c5a128f046667f66bb22d36e986c73d2ebaa1a9638a9e8c049d0c766e2008fb19c4aabd96e3443c48377214b01dec0f73538fa5a882553a60664e549030fc9cc21a74a73cf79cfdbbfa3676a474910a295044d804b9f6a30104fc8250da4efcfddc379c3a1b84a2050ee78b18ba84ec5cb4db62540ea7be026b48d2b9294f06aa48e44087dbc494d92fe3e8648792c2b9f5d0d580afac814f8fc74208239b5f8fa6c20fc75c9d73fbe448a4fd1eb1af10165c37e7aa72c83c47dbb92bf3203bc0bea3b3ae261636b9a6b621725aed16de5c33502f152ca3704b1e83a60cfc5807177d9e561b12f43c3ded0951c4ec7af0ab29f55e3745df0f10bedcdcee2d443c0023d7547018c94e2cbb04a5c67a81d33df4dda99f80777b1db00f91bf8abb96ca360353c08b8979d00860ee3af86988171d6739a0f546f64ec34c045afd1be790176228204782836484f6d118d734c8e1b302788aa20e704502da74cd11bc5a22bb717a1d10d5176a4426e88cc132479aa7e8370772b9776ea38d5bd217b08c50f94072acbdf93e732e6ce41f92159b626e59e39925b458465ec3b0191a56d8e1c3a76110200e38380ccfcc1a05f85608bc3ea0bdbbf326bfe003158c8c9e01e90a7b1164cc20de5b23146baa978611100", 0x2000, &(0x7f0000004b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000002300)="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", 0x2000, &(0x7f0000004440)={&(0x7f0000004300)={0x50, 0xffffffffffffffda, 0x8, {0x7, 0x29, 0x4, 0xb069a97334577756, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x80, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0}, 0xfc00)
r3 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00Y'], 0xfe33)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@rand_addr=0x64010101, 0xfffb, 0xfffe, 0x0, 0x0, 0x2, 0x20}, {0x0, 0x0, 0x5, 0xfffffffffffffffd, 0xffffffffffff235b, 0x0, 0x9, 0x1000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4d5, 0x6c}, 0x2, @in=@loopback, 0x0, 0x2, 0x0, 0x0, 0xffdffffc, 0x1000000}}, 0xe8)
unshare(0x20000600)
syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0)
r4 = mq_open(&(0x7f00000019c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0)
mq_getsetattr(r4, 0x0, &(0x7f0000000180))
r5 = socket$nl_route(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000280)='0', 0x1)
ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000002000)='syz0\x00')
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x200000, {0x0, 0x0, 0x0, 0x0, 0x90, 0x800}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4000880)
r6 = syz_open_dev$vim2m(&(0x7f0000000100), 0xd3b, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000004b40)={0x4, @raw_data="01075aa03070fd691c9c153c72f9b9ff3a2c096afa998f1b17310db04015c7b055b84b75a0daccf2020ea84733cc4f8735edb89af18c29f3fee599df1ccd350289365a213020ed716455e4386f9542130bc82535df4e71cb941acca3ff25ccbd5a30ffc1c4747add16738afdafff7f65ebc708621a1bf1284cb36651a748a8a3416c15700800000058b0bc065264cbd10e346c406b6ad71f1054d49d452d54518a282c134c3f96579f020000008c3680516675b09907af7a37e93a86cdc0443ab700"})
r7 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x458483, 0x0)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
unshare(0x2a000000)
unshare(0x20000600)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r3, r7})

2.263528372s ago: executing program 5 (id=3320):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
unshare(0x4000400)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
fchdir(r0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x93cf}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x3d0000, 0x1, 0x0, r0, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}})
bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x25, 0x1, @val=@tcx={@void, @value=r0}}, 0x1c)

2.095073103s ago: executing program 5 (id=3321):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
syz_extract_tcp_res$synack(&(0x7f0000000040)={0x41424344, <r1=>0x41424344}, 0x1, 0x0)
syz_emit_ethernet(0xaf, &(0x7f0000000140)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0xa1, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, r1, 0x0, 0x0, 0x5, 0x4, 0x2, 0x0, 0xe7}, {"f1ab9b0e510d2d73f52171080000000000000024cc522530fb37a71c932ef62ec287ccd7983dda145b839e135b3d296472a9ecdd9f16699a94a7406c75e1104dce9d8f9ecef49936c088ed23914b087a38eeedb12bea70799d88833a720f0a36b142a5d09cd407744c80b6203e16b2829e0d5d7440a52255ea"}}}}}}, 0x0)

1.854280829s ago: executing program 3 (id=3322):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x80000000001, 0x4)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000580)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3000, 0x0, @private1, 0x8}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup3(r0, r1, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, 0x0, {0xd, 0x8}, {0x5, 0xe}, {0xa}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x7, [0x4, 0x7, 0x45, 0x10, 0xff, 0x1d, 0x9, 0x8, 0xc, 0x5, 0xf, 0xc, 0xf, 0x6, 0xc, 0xd], 0x1, [0x1fc, 0xc, 0x101, 0x7, 0xa, 0x40, 0x8, 0x5, 0x8, 0x2a, 0x2, 0x134e, 0xfffc, 0x6, 0x8, 0xba], [0x3, 0x9, 0x3, 0x0, 0x3, 0x0, 0xc5d4, 0x3, 0x3, 0x48aa, 0xffff, 0x7, 0x5, 0x4, 0x6, 0x6]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc004841}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a40001402000", 0x3a}], 0x1}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4095, 0xfff, 0x0, 0x0}, &(0x7f0000000080)=0x40)

1.795655459s ago: executing program 1 (id=3323):
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00')
socket(0x10, 0x3, 0x0)
fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8)
epoll_create1(0x80000)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a18213", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES16=r0], 0x3c}, 0x1, 0x8000a0ffffffff, 0x0, 0x8086}, 0x0)

1.676743748s ago: executing program 3 (id=3324):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$sock_int(r0, 0x1, 0x55, &(0x7f0000000080)=0x1, 0x4)
landlock_create_ruleset(&(0x7f0000000080)={0x808, 0x0, 0x2, 0x2002, 0x1}, 0x30, 0x2)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000543000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x4000})
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x66)

1.554642541s ago: executing program 3 (id=3325):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000180))
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574"], 0x5c}}, 0x0)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000003a40), 0x2, 0x0)
preadv(r2, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/60, 0x3c}], 0x1, 0x5e4, 0x8001)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe800000"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000008, 0x40812, r3, 0x18717000)
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x2}, &(0x7f0000000000))
sysfs$2(0x2, 0x40000000000, &(0x7f00000002c0)=""/51)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000)
futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, &(0x7f0000048000)=0x2, 0x1)
r4 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000001c0)='iocharset', &(0x7f0000000040)='io#harSet', 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x20, 0x0, 0x7}]})
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0)
socket$inet(0x2, 0x3, 0x0)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0)
r5 = socket$netlink(0x10, 0x3, 0xc)
sendmmsg(r5, &(0x7f00000002c0), 0x0, 0x4040010)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x8811)
r6 = dup(r0)
r7 = syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007e9eb4104c053800f516010203010902120001000000000904"], 0x0)
syz_usb_control_io$sierra_net(r7, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000380)=ANY=[@ANYBLOB="0030c4000000447cfb541f71a84b7e05ef50a810f4868ddaedef8b3be84b4d2aab7c24b13170664544f3df23d9878353c0a0b4f1c2445685f684f1508d318be165569c5fb83e0e71ef443f6ebe3bc30860dc3c7db863f8eef637e3cad74f5200d6f51e5bec63a84902f01e6be5c5c253181dc204d4c304240c73ac11f257d27466e6351b2afe316f2ca4631750a9a69a7897d4a85fac2f83545d14687b82e1a40b1057e96c48e2fefbb0e4aeca116ff88f66141ecc41d13f0194e4d6ff9f4be6088a227fef6b8170256c"], 0x0, 0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r6)

1.476303405s ago: executing program 1 (id=3326):
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
writev(r1, &(0x7f0000000300)=[{&(0x7f00000005c0)='n', 0x1}], 0x1)
socket$kcm(0x29, 0x5, 0x0)

1.423777259s ago: executing program 2 (id=3327):
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wg0\x00'})
userfaultfd(0x80001)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmsg(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000004c0)="e7", 0x1}, {0x0}], 0x2}, 0x98)

1.274289341s ago: executing program 2 (id=3328):
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wg0\x00'})
userfaultfd(0x80001)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmsg(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000004c0)="e7", 0x1}, {0x0}], 0x2}, 0x98) (fail_nth: 1)

1.130064954s ago: executing program 5 (id=3329):
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wg0\x00'})
userfaultfd(0x81003)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
unshare(0x8000000)
semget$private(0x0, 0x4000, 0x0)
semctl$SETALL(0x0, 0x0, 0x14, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={<r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000808000400", @ANYRES32=r4, @ANYBLOB="06001500070000000c0016"], 0x38}}, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000480)='coredump_filter\x00')
ioctl$int_out(0xffffffffffffffff, 0x5460, &(0x7f0000000000))
readv(r7, &(0x7f0000000800)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x1e}, {0x0}], 0x9)
unshare(0x6020400)
r8 = socket$xdp(0x2c, 0x3, 0x0)
bind$xdp(r8, &(0x7f00000001c0)={0x2c, 0x20, 0x0, 0x29, r8}, 0x10)
read$FUSE(r7, &(0x7f0000001400)={0x2020}, 0x2020)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r9 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r9, 0xc06864b8, &(0x7f0000000580)={0x0, 0x8c1, 0x80, 0x8, 0x3, [0x2], [0x810003, 0xfffffffe, 0x200000], [0x5, 0x20, 0x3ff, 0x47], [0x8ac2, 0x0, 0x5, 0xfffffffffffffffc]})

1.060246996s ago: executing program 2 (id=3330):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
r2 = fcntl$dupfd(r0, 0x406, r0)
ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000040)={&(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, 0x0, 0x4000})
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, 0x0)

86.637709ms ago: executing program 2 (id=3331):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
unshare(0x4000400)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
fchdir(r0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x93cf}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x25, 0x1, @val=@tcx={@void, @value=r0}}, 0x1c)

0s ago: executing program 4 (id=3332):
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000c40), 0x0, 0x0)
ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000c80)={0x1})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000408c0d0260aac325000001090224000180000000090481f4c309608a97e9e7583f0000010300000009210000000122050009058e03"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000600), 0x6828, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="fea033688e345774a6000000000000bb0000000032000000fe8000000000000000000000000000aa0000000000000000000000000000000008000000000000000a000000000000000600000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000200000000000000f8ffffffffffffff0c00000000"], 0x144}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'hsr0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14}, 0x94)
r5 = socket$rds(0x15, 0x5, 0x0)
getsockopt$sock_buf(r5, 0x1, 0x2b, &(0x7f0000002380)=""/4096, &(0x7f0000003380)=0x1000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2000)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r7, 0x4004ae99, &(0x7f0000000040)=0x3)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x13, r7, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x7, 0x100000008, 0x6, 0x1, 0xfffffffffffffffd, 0x2, 0x0, 0x9, 0x400000000, 0x0, 0x80, 0x5, 0xfffffffffffffffe, 0x13, 0x9], 0xdddd1000, 0xcd3d0})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0xd)
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
syz_open_dev$dvb_frontend(&(0x7f00000000c0), 0x3, 0x4281)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
r8 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb10000000010200090502", @ANYRES32], 0x0)
syz_usb_control_io$cdc_ecm(r8, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r8, 0x82, 0xc38, &(0x7f00000000c0)=ANY=[])
ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000000)=""/147)

kernel console output (not intermixed with test programs):

ging to 7
[  793.080906][T12760] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  793.080929][T12760] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  793.080968][T12760] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  793.113065][T12760] usb 6-1: config 0 descriptor??
[  793.147363][T20759] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22
[  793.318199][T20788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  793.329154][T20788] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  793.344520][T20789] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  793.351875][T20789] syzkaller0: entered allmulticast mode
[  793.364872][T20789] tipc: Resetting bearer <eth:syzkaller0>
[  793.390592][T20787] tipc: Disabling bearer <eth:syzkaller0>
[  793.483959][T20798] cifs: Unknown parameter '������'
[  793.557169][T20801] FAULT_INJECTION: forcing a failure.
[  793.557169][T20801] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  793.557238][T20801] CPU: 1 UID: 0 PID: 20801 Comm: syz.1.3018 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  793.557262][T20801] Tainted: [L]=SOFTLOCKUP
[  793.557267][T20801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  793.557276][T20801] Call Trace:
[  793.557283][T20801]  <TASK>
[  793.557290][T20801]  dump_stack_lvl+0xe8/0x150
[  793.557315][T20801]  should_fail_ex+0x410/0x560
[  793.557340][T20801]  _copy_from_iter+0x1d3/0x1660
[  793.557372][T20801]  ? __lock_acquire+0x6df/0x2e50
[  793.557391][T20801]  ? __pfx__copy_from_iter+0x10/0x10
[  793.557421][T20801]  tun_get_user+0x52f/0x44d0
[  793.557573][T20801]  ? aa_file_perm+0x18b/0x15f0
[  793.557597][T20801]  ? aa_file_perm+0x4ed/0x15f0
[  793.557615][T20801]  ? __pfx_tun_get_user+0x10/0x10
[  793.557641][T20801]  ? __lock_acquire+0x6df/0x2e50
[  793.557662][T20801]  ? kstrtoull+0x137/0x1d0
[  793.557691][T20801]  ? ref_tracker_alloc+0x341/0x4b0
[  793.557715][T20801]  ? lock_acquire+0x115/0x350
[  793.557733][T20801]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  793.557762][T20801]  ? lock_acquire+0x115/0x350
[  793.557780][T20801]  ? tun_get+0x1c/0x2f0
[  793.557808][T20801]  ? tun_get+0x1c/0x2f0
[  793.557830][T20801]  ? tun_get+0x1c/0x2f0
[  793.557857][T20801]  tun_chr_write_iter+0x113/0x200
[  793.557884][T20801]  vfs_write+0x612/0xba0
[  793.557916][T20801]  ? __pfx_vfs_write+0x10/0x10
[  793.557949][T20801]  ? __fget_files+0x2a/0x420
[  793.557980][T20801]  ksys_write+0x150/0x270
[  793.558007][T20801]  ? __pfx_ksys_write+0x10/0x10
[  793.558041][T20801]  do_syscall_64+0x166/0x520
[  793.558064][T20801]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  793.558083][T20801]  ? clear_bhb_loop+0x70/0xc0
[  793.558105][T20801]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  793.558123][T20801] RIP: 0033:0x7f53fdf9e159
[  793.558141][T20801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  793.558157][T20801] RSP: 002b:00007f53feef4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  793.558176][T20801] RAX: ffffffffffffffda RBX: 00007f53fe225fa0 RCX: 00007f53fdf9e159
[  793.558190][T20801] RDX: 000000000000004a RSI: 0000200000000200 RDI: 0000000000000003
[  793.558202][T20801] RBP: 00007f53feef4090 R08: 0000000000000000 R09: 0000000000000000
[  793.558214][T20801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  793.558232][T20801] R13: 00007f53fe226038 R14: 00007f53fe225fa0 R15: 00007f53fe34fa48
[  793.558260][T20801]  </TASK>
[  793.575604][T12760] usbhid 6-1:0.0: can't add hid device: -71
[  793.575719][T12760] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  793.582512][T12760] usb 6-1: USB disconnect, device number 110
[  793.809652][ T5705] usb 5-1: 6:0: failed to get current value for ch 1 (-22)
[  793.824438][ T5705] usb 5-1: 6:0: failed to get current value for ch 0 (-22)
[  793.942922][T20823] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  793.943672][T20823] syzkaller0: entered promiscuous mode
[  793.943691][T20823] syzkaller0: entered allmulticast mode
[  793.945213][ T5705] usb 5-1: USB disconnect, device number 31
[  793.958759][T20823] tipc: Resetting bearer <eth:syzkaller0>
[  793.973224][T20822] tipc: Resetting bearer <eth:syzkaller0>
[  794.018902][T20822] tipc: Disabling bearer <eth:syzkaller0>
[  794.043816][   T10] vmk80xx 4-1:8.188: driver 'vmk80xx' failed to auto-configure device.
[  794.055873][   T10] vmk80xx 4-1:8.188: probe with driver vmk80xx failed with error -22
[  794.069803][   T10] usb 4-1: USB disconnect, device number 127
[  794.154064][T20845] tipc: Resetting bearer <eth:syzkaller0>
[  794.188537][T20851] xt_TCPMSS: Only works on TCP SYN packets
[  794.190212][T20843] tipc: Resetting bearer <eth:syzkaller0>
[  794.407960][ T7773] tipc: Resetting bearer <eth:syzkaller0>
[  794.435101][T12760] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  794.565101][T12760] usb 2-1: device descriptor read/64, error -71
[  794.605714][ T5705] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  794.755930][ T5705] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  794.757326][ T5705] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  794.757372][ T5705] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  794.757399][ T5705] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  794.759999][ T5705] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  794.760093][ T5705] usb 5-1: Product: syz
[  794.760112][ T5705] usb 5-1: Manufacturer: syz
[  794.760130][ T5705] usb 5-1: SerialNumber: syz
[  794.767458][ T5705] hub 5-1:1.0: bad descriptor, ignoring hub
[  794.767481][ T5705] hub 5-1:1.0: probe with driver hub failed with error -5
[  794.805788][T12760] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  794.930545][T20881] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3026'.
[  794.937575][T12760] usb 2-1: device descriptor read/64, error -71
[  794.971557][ T5705] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 32 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  795.045393][T12760] usb usb2-port1: attempt power cycle
[  795.174423][T20868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  795.174931][T20868] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  795.177704][T20868] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3024'.
[  795.371010][ T5704] usb 3-1: USB disconnect, device number 7
[  795.386795][T12760] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  795.413456][T12760] usb 2-1: device descriptor read/8, error -71
[  795.433169][ T5704] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  795.458051][ T5705] usb 5-1: reset high-speed USB device number 32 using dummy_hcd
[  795.501781][ T5704] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  795.502612][ T5704] keyspan 3-1:0.11: device disconnected
[  795.607599][ T5705] usb 5-1: device firmware changed
[  795.608252][ T5705] usb 5-1: USB disconnect, device number 32
[  795.626120][ T5705] usblp0: removed
[  795.646023][T12760] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  795.666103][T12760] usb 2-1: device descriptor read/8, error -71
[  795.775349][T12760] usb usb2-port1: unable to enumerate USB device
[  795.870622][T20942] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  795.871293][T20942] syzkaller0: entered promiscuous mode
[  795.871312][T20942] syzkaller0: entered allmulticast mode
[  795.871772][T20942] tipc: Resetting bearer <eth:syzkaller0>
[  795.926314][ T5705] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  796.015206][T12760] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  796.076645][ T5705] usb 5-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00
[  796.077814][ T5705] usb 5-1: config index 0 descriptor too short (expected 8192, got 141)
[  796.077837][ T5705] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  796.077854][ T5705] usb 5-1: config 0 has no interfaces?
[  796.077880][ T5705] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  796.087462][ T5705] usb 5-1: config 0 descriptor??
[  796.165225][ T5704] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  796.166057][T12760] usb 3-1: Using ep0 maxpacket: 8
[  796.166959][T12760] usb 3-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67
[  796.168443][T12760] usb 3-1: config 8 has an invalid interface number: 188 but max is 0
[  796.168464][T12760] usb 3-1: config 8 has no interface number 0
[  796.168527][T12760] usb 3-1: config 8 interface 188 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D
[  796.168550][T12760] usb 3-1: config 8 interface 188 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  796.168573][T12760] usb 3-1: config 8 interface 188 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0
[  796.171469][T12760] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  796.171491][T12760] usb 3-1: Product: syz
[  796.171504][T12760] usb 3-1: Manufacturer: syz
[  796.171589][T12760] usb 3-1: SerialNumber: syz
[  796.296741][ T5705] usb 5-1: string descriptor 0 read error: -71
[  796.309281][ T5705] usb 5-1: USB disconnect, device number 33
[  796.329627][ T5704] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  796.341289][ T5704] usb 4-1: config index 0 descriptor too short (expected 45, got 36)
[  796.341352][ T5704] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  796.341374][ T5704] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  796.341422][ T5704] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  796.341446][ T5704] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  796.341483][ T5704] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  796.351635][ T5704] usb 4-1: config 0 descriptor??
[  796.354340][T20944] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22
[  796.775238][ T5704] usbhid 4-1:0.0: can't add hid device: -71
[  796.775367][ T5704] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  796.788127][ T5704] usb 4-1: USB disconnect, device number 2
[  796.975537][T12760] vmk80xx 3-1:8.188: driver 'vmk80xx' failed to auto-configure device.
[  796.978327][T12760] vmk80xx 3-1:8.188: probe with driver vmk80xx failed with error -22
[  796.992624][T12760] usb 3-1: USB disconnect, device number 8
[  797.269320][T21017] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  797.278363][T21017] syzkaller0: entered promiscuous mode
[  797.278389][T21017] syzkaller0: entered allmulticast mode
[  797.291911][T21017] tipc: Resetting bearer <eth:syzkaller0>
[  797.298614][T21016] tipc: Resetting bearer <eth:syzkaller0>
[  797.339691][T21016] tipc: Disabling bearer <eth:syzkaller0>
[  797.367425][ T5665] usb 5-1: new full-speed USB device number 34 using dummy_hcd
[  797.423335][T21024] FAULT_INJECTION: forcing a failure.
[  797.423335][T21024] name failslab, interval 1, probability 0, space 0, times 0
[  797.437534][T21024] CPU: 1 UID: 0 PID: 21024 Comm: syz.3.3043 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  797.437564][T21024] Tainted: [L]=SOFTLOCKUP
[  797.437571][T21024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  797.437583][T21024] Call Trace:
[  797.437591][T21024]  <TASK>
[  797.437600][T21024]  dump_stack_lvl+0xe8/0x150
[  797.437633][T21024]  should_fail_ex+0x410/0x560
[  797.437665][T21024]  should_failslab+0xa8/0x100
[  797.437690][T21024]  __kvmalloc_node_noprof+0x176/0x820
[  797.437715][T21024]  ? __rhashtable_init_noprof+0x545/0xaf0
[  797.437742][T21024]  ? __rhashtable_init_noprof+0x545/0xaf0
[  797.437775][T21024]  __rhashtable_init_noprof+0x545/0xaf0
[  797.437806][T21024]  __rhltable_init_noprof+0x26/0x70
[  797.437835][T21024]  nf_tables_newtable+0x6a7/0x1990
[  797.437894][T21024]  nfnetlink_rcv+0x1288/0x28c0
[  797.437958][T21024]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  797.438003][T21024]  ? ref_tracker_free+0x689/0x830
[  797.438056][T21024]  ? skb_clone+0x246/0x3a0
[  797.438081][T21024]  ? __netlink_deliver_tap+0x811/0x860
[  797.438112][T21024]  ? netlink_deliver_tap+0x2e/0x1b0
[  797.438133][T21024]  ? netlink_deliver_tap+0x2e/0x1b0
[  797.438163][T21024]  netlink_unicast+0x7bd/0x940
[  797.438203][T21024]  netlink_sendmsg+0x813/0xb40
[  797.438233][T21024]  ? __pfx_netlink_sendmsg+0x10/0x10
[  797.438263][T21024]  ? apparmor_socket_sendmsg+0x98/0x360
[  797.438293][T21024]  ? __pfx_netlink_sendmsg+0x10/0x10
[  797.438314][T21024]  sock_sendmsg_nosec+0x13a/0x180
[  797.438340][T21024]  ____sys_sendmsg+0x54e/0x850
[  797.438364][T21024]  ? __pfx_____sys_sendmsg+0x10/0x10
[  797.438391][T21024]  ? import_iovec+0x73/0xa0
[  797.438422][T21024]  ___sys_sendmsg+0x2a5/0x360
[  797.438441][T21024]  ? __lock_acquire+0x6df/0x2e50
[  797.438465][T21024]  ? __pfx____sys_sendmsg+0x10/0x10
[  797.438518][T21024]  ? __fget_files+0x2a/0x420
[  797.438542][T21024]  ? __fget_files+0x3a2/0x420
[  797.438576][T21024]  __x64_sys_sendmsg+0x1b1/0x290
[  797.438599][T21024]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  797.438638][T21024]  do_syscall_64+0x166/0x520
[  797.438663][T21024]  ? trace_irq_disable+0x3b/0x140
[  797.438682][T21024]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  797.438702][T21024]  ? clear_bhb_loop+0x70/0xc0
[  797.438726][T21024]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  797.438745][T21024] RIP: 0033:0x7fc33d39e159
[  797.438763][T21024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  797.438781][T21024] RSP: 002b:00007fc33b5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  797.438803][T21024] RAX: ffffffffffffffda RBX: 00007fc33d625fa0 RCX: 00007fc33d39e159
[  797.438818][T21024] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  797.438831][T21024] RBP: 00007fc33b5f6090 R08: 0000000000000000 R09: 0000000000000000
[  797.438852][T21024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  797.438865][T21024] R13: 00007fc33d626038 R14: 00007fc33d625fa0 R15: 00007fc33d74fa48
[  797.438898][T21024]  </TASK>
[  797.666564][ T5665] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  797.713785][ T5665] usb 5-1: config 0 has an invalid interface number: 214 but max is 0
[  797.713811][ T5665] usb 5-1: config 0 has no interface number 0
[  797.713859][ T5665] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  797.759416][ T5665] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3
[  797.759444][ T5665] usb 5-1: Manufacturer: syz
[  797.759459][ T5665] usb 5-1: SerialNumber: syz
[  797.807777][ T5665] usb 5-1: config 0 descriptor??
[  797.875451][   T10] usb 6-1: new high-speed USB device number 111 using dummy_hcd
[  798.023149][ T5665] usb 5-1: USB disconnect, device number 34
[  798.036147][   T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  798.037341][   T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  798.037365][   T10] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  798.037387][   T10] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  798.043245][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  798.043267][   T10] usb 6-1: Product: syz
[  798.043288][   T10] usb 6-1: Manufacturer: syz
[  798.043302][   T10] usb 6-1: SerialNumber: syz
[  798.135930][   T10] hub 6-1:1.0: bad descriptor, ignoring hub
[  798.135981][   T10] hub 6-1:1.0: probe with driver hub failed with error -5
[  798.209746][T21065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3049'.
[  798.358953][   T10] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 111 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  798.436475][T19281] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  798.445298][ T5704] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  798.562728][T21033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  798.564651][T21033] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  798.565865][T21033] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3046'.
[  798.595402][ T5704] usb 4-1: Using ep0 maxpacket: 16
[  798.598333][T19281] usb 3-1: Using ep0 maxpacket: 8
[  798.602164][T19281] usb 3-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67
[  798.605895][T19281] usb 3-1: config 8 has an invalid interface number: 188 but max is 0
[  798.605917][T19281] usb 3-1: config 8 has no interface number 0
[  798.605958][T19281] usb 3-1: config 8 interface 188 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D
[  798.605981][T19281] usb 3-1: config 8 interface 188 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  798.606005][T19281] usb 3-1: config 8 interface 188 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0
[  798.616332][T19281] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  798.616354][T19281] usb 3-1: Product: syz
[  798.616372][T19281] usb 3-1: Manufacturer: syz
[  798.616386][T19281] usb 3-1: SerialNumber: syz
[  798.663276][ T5704] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  798.697676][ T5704] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  798.697716][ T5704] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  798.697764][ T5704] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  798.732997][ T5704] usb 4-1: config 0 descriptor??
[  798.761351][T21087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3050'.
[  798.773759][T21087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3050'.
[  798.845361][  T992] usb 6-1: reset high-speed USB device number 111 using dummy_hcd
[  798.997836][  T992] usb 6-1: device firmware changed
[  798.998523][  T992] usb 6-1: USB disconnect, device number 111
[  799.020159][  T992] usblp0: removed
[  799.171374][ T5704] microsoft 0003:045E:07DA.001C: unknown main item tag 0x0
[  799.182448][ T5704] microsoft 0003:045E:07DA.001C: unknown global tag 0xe
[  799.189804][ T5704] microsoft 0003:045E:07DA.001C: item 0 0 1 14 parsing failed
[  799.190372][ T5704] microsoft 0003:045E:07DA.001C: parse failed
[  799.190435][ T5704] microsoft 0003:045E:07DA.001C: probe with driver microsoft failed with error -22
[  799.380407][  T992] usb 6-1: new high-speed USB device number 112 using dummy_hcd
[  799.416763][   T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  799.425410][   T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  799.434504][   T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  799.449442][   T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  799.457045][   T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  799.530274][T19281] vmk80xx 3-1:8.188: driver 'vmk80xx' failed to auto-configure device.
[  799.540920][T19281] vmk80xx 3-1:8.188: probe with driver vmk80xx failed with error -22
[  799.562090][T19281] usb 3-1: USB disconnect, device number 9
[  799.575909][  T992] usb 6-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00
[  799.590217][  T992] usb 6-1: config index 0 descriptor too short (expected 8192, got 141)
[  799.590263][  T992] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  799.590282][  T992] usb 6-1: config 0 has no interfaces?
[  799.590308][  T992] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  799.611268][  T992] usb 6-1: config 0 descriptor??
[  799.685077][ T5704] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  799.836097][ T5704] usb 5-1: Using ep0 maxpacket: 16
[  799.837169][  T992] usb 6-1: string descriptor 0 read error: -71
[  799.847929][ T5704] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  799.851420][  T992] usb 6-1: USB disconnect, device number 112
[  799.874855][ T5704] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  799.898795][ T5704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  799.898833][ T5704] usb 5-1: Product: syz
[  799.898862][ T5704] usb 5-1: Manufacturer: syz
[  799.898880][ T5704] usb 5-1: SerialNumber: syz
[  799.937443][ T5704] usb 5-1: config 0 descriptor??
[  799.950353][ T5704] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  799.960148][ T5704] em28xx 5-1:0.0: DVB interface 0 found: bulk
[  800.491826][ T7773] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  800.562779][T21133] bridge0: port 1(bridge_slave_0) entered blocking state
[  800.562961][T21133] bridge0: port 1(bridge_slave_0) entered disabled state
[  800.563086][T21133] bridge_slave_0: entered allmulticast mode
[  800.564873][T21133] bridge_slave_0: entered promiscuous mode
[  800.567725][T21133] bridge0: port 2(bridge_slave_1) entered blocking state
[  800.567855][T21133] bridge0: port 2(bridge_slave_1) entered disabled state
[  800.567972][T21133] bridge_slave_1: entered allmulticast mode
[  800.569782][T21133] bridge_slave_1: entered promiscuous mode
[  800.582562][ T5704] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[  800.623278][T21133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  800.632369][T21133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  800.692659][T21133] team0: Port device team_slave_0 added
[  800.701802][T21133] team0: Port device team_slave_1 added
[  800.746311][T21133] batman_adv: batadv0: Adding interface: batadv_slave_0
[  800.753385][T21133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  800.753897][T21133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  800.814726][ T7773] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  800.826169][T21133] batman_adv: batadv0: Adding interface: batadv_slave_1
[  800.833185][T21133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  800.833211][T21133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  800.917223][T21133] hsr_slave_0: entered promiscuous mode
[  800.918321][T21133] hsr_slave_1: entered promiscuous mode
[  800.919053][T21133] debugfs: 'hsr0' already exists in 'hsr'
[  800.919071][T21133] Cannot create hsr debugfs directory
[  800.974842][ T7773] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  801.017945][ T5704] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  801.030219][ T5704] em28xx 5-1:0.0: board has no eeprom
[  801.074409][ T7773] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  801.227323][  T992] usb 4-1: USB disconnect, device number 3
[  801.331525][T21436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3055'.
[  801.364041][T21436] bridge_slave_1: left allmulticast mode
[  801.364071][T21436] bridge_slave_1: left promiscuous mode
[  801.364794][T21436] bridge0: port 2(bridge_slave_1) entered disabled state
[  801.471634][T21436] bridge_slave_0: left allmulticast mode
[  801.472454][T21436] bridge_slave_0: left promiscuous mode
[  801.472779][T21436] bridge0: port 1(bridge_slave_0) entered disabled state
[  801.492600][   T52] Bluetooth: hci2: command tx timeout
[  801.753653][T21463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3064'.
[  801.753726][T21463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3064'.
[  801.816456][ T7773] team0: left allmulticast mode
[  801.816495][ T7773] team_slave_0: left allmulticast mode
[  801.816529][ T7773] team_slave_1: left allmulticast mode
[  801.832050][ T7773] team0: left promiscuous mode
[  801.832071][ T7773] team_slave_0: left promiscuous mode
[  801.832311][ T7773] team_slave_1: left promiscuous mode
[  801.833013][ T7773] bridge0: port 3(team0) entered disabled state
[  801.898784][ T7773] bridge_slave_1: left allmulticast mode
[  801.898859][ T7773] bridge_slave_1: left promiscuous mode
[  801.902635][ T7773] bridge0: port 2(bridge_slave_1) entered disabled state
[  801.953826][T21471] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3066'.
[  801.953860][T21471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3066'.
[  801.958624][ T7773] bridge_slave_0: left allmulticast mode
[  801.958647][ T7773] bridge_slave_0: left promiscuous mode
[  801.958843][ T7773] bridge0: port 1(bridge_slave_0) entered disabled state
[  802.187346][ T5704] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  802.188183][ T5704] em28xx 5-1:0.0: dvb set to bulk mode.
[  802.192035][T12760] em28xx 5-1:0.0: Binding DVB extension
[  802.244757][ T5704] usb 5-1: USB disconnect, device number 35
[  802.261123][ T5704] em28xx 5-1:0.0: Disconnecting em28xx
[  802.401714][T12760] em28xx 5-1:0.0: Registering input extension
[  802.406701][  T863] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  802.424843][ T5704] em28xx 5-1:0.0: Closing input extension
[  802.558351][  T863] usb 3-1: Using ep0 maxpacket: 8
[  802.559530][  T863] usb 3-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67
[  802.561524][  T863] usb 3-1: config 8 has an invalid interface number: 188 but max is 0
[  802.561546][  T863] usb 3-1: config 8 has no interface number 0
[  802.561584][  T863] usb 3-1: config 8 interface 188 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D
[  802.561620][  T863] usb 3-1: config 8 interface 188 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  802.561645][  T863] usb 3-1: config 8 interface 188 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0
[  802.570328][  T863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  802.570351][  T863] usb 3-1: Product: syz
[  802.570364][  T863] usb 3-1: Manufacturer: syz
[  802.570378][  T863] usb 3-1: SerialNumber: syz
[  802.842521][ T5704] em28xx: Freeing device
[  802.906503][T21506] netlink: 'syz.4.3067': attribute type 1 has an invalid length.
[  803.205068][    T9] usb 6-1: new high-speed USB device number 113 using dummy_hcd
[  803.225237][ T7773] team0: Port device bridge1 removed
[  803.279138][ T7773] bond0 (unregistering): Released all slaves
[  803.291634][ T7773] bond1 (unregistering): (slave vlan0): Releasing active interface
[  803.301611][ T7773] bond1 (unregistering): Released all slaves
[  803.368757][    T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  803.369861][    T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  803.369885][    T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  803.369905][    T9] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  803.375235][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  803.375258][    T9] usb 6-1: Product: syz
[  803.375271][    T9] usb 6-1: Manufacturer: syz
[  803.375285][    T9] usb 6-1: SerialNumber: syz
[  803.388988][    T9] hub 6-1:1.0: bad descriptor, ignoring hub
[  803.389010][    T9] hub 6-1:1.0: probe with driver hub failed with error -5
[  803.491716][  T863] vmk80xx 3-1:8.188: driver 'vmk80xx' failed to auto-configure device.
[  803.531891][  T863] vmk80xx 3-1:8.188: probe with driver vmk80xx failed with error -22
[  803.551629][  T863] usb 3-1: USB disconnect, device number 10
[  803.565116][   T52] Bluetooth: hci2: command tx timeout
[  803.606479][ T5279] 8021q: adding VLAN 0 to HW filter on device eth5
[  803.613546][ T7773] tipc: Left network mode
[  803.635707][    T9] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 113 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  803.850912][T21512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  803.851358][T21512] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  803.854681][T21512] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3068'.
[  803.895079][  T863] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  804.047171][  T863] usb 3-1: Using ep0 maxpacket: 16
[  804.054491][  T863] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d
[  804.065290][  T863] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  804.065337][  T863] usb 3-1: config 0 interface 0 has no altsetting 0
[  804.090105][  T863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  804.090143][  T863] usb 3-1: Product: syz
[  804.090176][  T863] usb 3-1: Manufacturer: syz
[  804.090194][  T863] usb 3-1: SerialNumber: syz
[  804.117178][  T863] usb 3-1: config 0 descriptor??
[  804.134735][  T863] hub 3-1:0.0: bad descriptor, ignoring hub
[  804.143762][  T863] hub 3-1:0.0: probe with driver hub failed with error -5
[  804.159725][  T863] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  804.209511][ T7771] usb 3-1: Failed to submit usb control message: -71
[  804.209565][ T7771] usb 3-1: unable to send the bmi data to the device: -71
[  804.209582][ T7771] usb 3-1: unable to get target info from device
[  804.209593][ T7771] usb 3-1: could not get target info (-71)
[  804.209606][ T7771] usb 3-1: could not probe fw (-71)
[  804.232020][  T992] usb 6-1: reset high-speed USB device number 113 using dummy_hcd
[  804.242933][ T7773] hsr_slave_0: left promiscuous mode
[  804.258339][ T7773] hsr_slave_1: left promiscuous mode
[  804.259170][ T7773] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  804.259197][ T7773] batman_adv: batadv0: Removing interface: batadv_slave_0
[  804.283845][ T7773] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  804.283883][ T7773] batman_adv: batadv0: Removing interface: batadv_slave_1
[  804.313940][ T7773] veth1_macvtap: left promiscuous mode
[  804.314064][ T7773] veth0_macvtap: left promiscuous mode
[  804.314178][ T7773] veth1_vlan: left promiscuous mode
[  804.314245][ T7773] veth0_vlan: left promiscuous mode
[  804.406033][  T992] usb 6-1: device firmware changed
[  804.406574][  T992] usb 6-1: USB disconnect, device number 113
[  804.414077][  T992] usblp0: removed
[  804.566481][  T992] usb 6-1: new high-speed USB device number 114 using dummy_hcd
[  804.670164][T21602] fuse: Bad value for 'fd'
[  804.739117][  T992] usb 6-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00
[  804.740320][  T992] usb 6-1: config index 0 descriptor too short (expected 8192, got 141)
[  804.740343][  T992] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  804.740361][  T992] usb 6-1: config 0 has no interfaces?
[  804.740387][  T992] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  804.743101][  T992] usb 6-1: config 0 descriptor??
[  804.950829][  T992] usb 6-1: string descriptor 0 read error: -71
[  804.961822][  T992] usb 6-1: USB disconnect, device number 114
[  805.291838][ T7773] team0 (unregistering): Port device team_slave_1 removed
[  805.439494][ T7773] team0 (unregistering): Port device team_slave_0 removed
[  805.646075][   T52] Bluetooth: hci2: command tx timeout
[  805.796333][T21628] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3074'.
[  805.807400][T21628] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3074'.
[  806.288044][  T992] usb 3-1: USB disconnect, device number 11
[  806.471308][ T7773] IPVS: stop unused estimator thread 0...
[  806.545236][T19281] usb 6-1: new high-speed USB device number 115 using dummy_hcd
[  806.695502][T19281] usb 6-1: Using ep0 maxpacket: 32
[  806.699174][T19281] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  806.703336][T19281] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  806.703359][T19281] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  806.703405][T19281] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  806.711781][T19281] usb 6-1: config 0 descriptor??
[  807.118506][T21689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3078'.
[  807.134211][T21133] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  807.155823][T21133] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  807.158219][T21133] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  807.187233][T21133] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  807.189076][T21133] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  807.204491][T21133] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  807.207533][T21133] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  807.227941][T21133] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  807.525637][T21133] 8021q: adding VLAN 0 to HW filter on device bond0
[  807.560478][T21133] 8021q: adding VLAN 0 to HW filter on device team0
[  807.598191][ T7771] bridge0: port 1(bridge_slave_0) entered blocking state
[  807.598313][ T7771] bridge0: port 1(bridge_slave_0) entered forwarding state
[  807.636764][ T7771] bridge0: port 2(bridge_slave_1) entered blocking state
[  807.636910][ T7771] bridge0: port 2(bridge_slave_1) entered forwarding state
[  807.725067][   T52] Bluetooth: hci2: command tx timeout
[  807.892093][T21133] 8021q: adding VLAN 0 to HW filter on device batadv0
[  808.014159][T21133] veth0_vlan: entered promiscuous mode
[  808.039711][T21133] veth1_vlan: entered promiscuous mode
[  808.126853][T21133] veth0_macvtap: entered promiscuous mode
[  808.146298][T21133] veth1_macvtap: entered promiscuous mode
[  808.198358][T21133] batman_adv: batadv0: Interface activated: batadv_slave_0
[  808.207525][T21133] batman_adv: batadv0: Interface activated: batadv_slave_1
[  808.248260][ T7773] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  808.248583][ T7773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  808.248693][ T7773] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  808.305687][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  808.479769][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  808.479808][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  808.527902][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  808.527978][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  808.584319][ T7773] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  808.584360][ T7773] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  809.065167][ T5665] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  809.195509][T19281] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  809.225781][ T5665] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  809.237305][ T5665] usb 2-1: config index 0 descriptor too short (expected 45, got 36)
[  809.237369][ T5665] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  809.237414][ T5665] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  809.237441][ T5665] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  809.237469][ T5665] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  809.237509][ T5665] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  809.308540][ T5665] usb 2-1: config 0 descriptor??
[  809.314442][T21735] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  809.319639][T17288] usb 6-1: USB disconnect, device number 115
[  809.368372][T19281] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  809.374543][T19281] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  809.374568][T19281] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  809.374590][T19281] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  809.378649][T19281] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  809.378672][T19281] usb 3-1: Product: syz
[  809.378686][T19281] usb 3-1: Manufacturer: syz
[  809.378699][T19281] usb 3-1: SerialNumber: syz
[  809.390960][T19281] hub 3-1:1.0: bad descriptor, ignoring hub
[  809.390998][T19281] hub 3-1:1.0: probe with driver hub failed with error -5
[  809.489278][T21769] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3084'.
[  809.489348][T21769] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3084'.
[  809.610572][T19281] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  809.659056][T21784] sctp: [Deprecated]: syz.5.3087 (pid 21784) Use of int in max_burst socket option deprecated.
[  809.659056][T21784] Use struct sctp_assoc_value instead
[  809.740893][ T5665] usbhid 2-1:0.0: can't add hid device: -71
[  809.741030][ T5665] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  809.774658][ T5665] usb 2-1: USB disconnect, device number 6
[  809.795443][  T863] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  809.822748][T21745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  809.841489][T21745] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  809.848435][T21745] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3082'.
[  809.955595][T19281] usb 6-1: new low-speed USB device number 116 using dummy_hcd
[  809.963976][  T863] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  809.977323][  T863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  809.985654][  T863] usb 4-1: Product: syz
[  809.989889][  T863] usb 4-1: Manufacturer: syz
[  809.995098][  T863] usb 4-1: SerialNumber: syz
[  810.056395][ T1799] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  810.108671][T19281] usb 6-1: unable to get BOS descriptor or descriptor too short
[  810.108749][T19281] usb 6-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40
[  810.110065][T19281] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 16, setting to 8
[  810.110092][T19281] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  810.110112][T19281] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 32, setting to 8
[  810.110135][T19281] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[  810.110156][T19281] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 8
[  810.115086][T19281] usb 6-1: string descriptor 0 read error: -22
[  810.115207][T19281] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  810.132903][T19281] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  810.211974][  T992] usb 3-1: reset high-speed USB device number 12 using dummy_hcd
[  810.227500][ T1799] usb 5-1: Using ep0 maxpacket: 32
[  810.229310][ T1799] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  810.236033][ T1799] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[  810.236068][ T1799] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  810.236102][ T1799] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 103, changing to 10
[  810.236126][ T1799] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 26217, setting to 1024
[  810.236151][ T1799] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  810.236174][ T1799] usb 5-1: config 0 interface 0 has no altsetting 0
[  810.240976][ T1799] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  810.240998][ T1799] usb 5-1: Product: syz
[  810.241011][ T1799] usb 5-1: Manufacturer: syz
[  810.241025][ T1799] usb 5-1: SerialNumber: syz
[  810.362318][ T1799] usb 5-1: config 0 descriptor??
[  810.367506][T21794] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  810.378768][  T992] usb 3-1: device firmware changed
[  810.381033][  T992] usb 3-1: USB disconnect, device number 12
[  810.398902][  T992] usblp0: removed
[  810.457653][T21831] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3089'.
[  810.472839][  T863] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  810.478454][ T1799] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  810.501400][ T1799] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  810.509745][  T863] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  810.572156][T21847] FAULT_INJECTION: forcing a failure.
[  810.572156][T21847] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  810.588654][T21847] CPU: 1 UID: 0 PID: 21847 Comm: syz.1.3090 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  810.588683][T21847] Tainted: [L]=SOFTLOCKUP
[  810.588691][T21847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  810.588702][T21847] Call Trace:
[  810.588713][T21847]  <TASK>
[  810.588721][T21847]  dump_stack_lvl+0xe8/0x150
[  810.588751][T21847]  should_fail_ex+0x410/0x560
[  810.588784][T21847]  strncpy_from_user+0x36/0x2c0
[  810.588811][T21847]  do_getname+0x77/0x250
[  810.588835][T21847]  do_sys_openat2+0xcc/0x200
[  810.588858][T21847]  ? __pfx_do_sys_openat2+0x10/0x10
[  810.588880][T21847]  ? ksys_write+0x242/0x270
[  810.588907][T21847]  ? __pfx_ksys_write+0x10/0x10
[  810.588933][T21847]  __x64_sys_openat+0x138/0x170
[  810.588958][T21847]  do_syscall_64+0x166/0x520
[  810.588980][T21847]  ? trace_irq_disable+0x3b/0x140
[  810.588998][T21847]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  810.589017][T21847]  ? clear_bhb_loop+0x70/0xc0
[  810.589040][T21847]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  810.589058][T21847] RIP: 0033:0x7f6c5c79e159
[  810.589076][T21847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  810.589091][T21847] RSP: 002b:00007f6c5d6a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  810.589110][T21847] RAX: ffffffffffffffda RBX: 00007f6c5ca25fa0 RCX: 00007f6c5c79e159
[  810.589122][T21847] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 00000000ffffff9c
[  810.589134][T21847] RBP: 00007f6c5d6a4090 R08: 0000000000000000 R09: 0000000000000000
[  810.589144][T21847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  810.589153][T21847] R13: 00007f6c5ca26038 R14: 00007f6c5ca25fa0 R15: 00007f6c5cb4fa48
[  810.589179][T21847]  </TASK>
[  810.620971][ T1799] usb 5-1: USB disconnect, device number 36
[  810.640097][T19281] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -12
[  810.658850][ T1799] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[  810.765077][  T992] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  810.916885][  T992] usb 3-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00
[  810.919246][  T992] usb 3-1: config index 0 descriptor too short (expected 8192, got 141)
[  810.919269][  T992] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  810.919287][  T992] usb 3-1: config 0 has no interfaces?
[  810.919314][  T992] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  810.923694][  T992] usb 3-1: config 0 descriptor??
[  811.136364][  T992] usb 3-1: string descriptor 0 read error: -71
[  811.143792][  T992] usb 3-1: USB disconnect, device number 13
[  811.368584][   T52] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  811.368626][   T52] CPU: 0 UID: 0 PID: 52 Comm: kworker/u9:0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  811.368654][   T52] Tainted: [L]=SOFTLOCKUP
[  811.368662][   T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  811.368675][   T52] Workqueue: hci2 hci_rx_work
[  811.368796][   T52] Call Trace:
[  811.368808][   T52]  <TASK>
[  811.368817][   T52]  dump_stack_lvl+0xe8/0x150
[  811.368848][   T52]  sysfs_create_dir_ns+0x271/0x2a0
[  811.368900][   T52]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  811.368932][   T52]  ? do_raw_spin_unlock+0xf5/0x200
[  811.368963][   T52]  kobject_add_internal+0x622/0xcd0
[  811.369043][   T52]  kobject_add+0x163/0x240
[  811.369075][   T52]  ? __pfx_kobject_add+0x10/0x10
[  811.369108][   T52]  ? get_device_parent+0x366/0x3a0
[  811.369210][   T52]  device_add+0x3fa/0xb80
[  811.369238][   T52]  hci_conn_add_sysfs+0xd5/0x210
[  811.369291][   T52]  le_conn_complete_evt+0xfb7/0x1690
[  811.369379][   T52]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  811.369408][   T52]  ? __mutex_unlock_slowpath+0x731/0x900
[  811.369438][   T52]  ? skb_pull_data+0xf0/0x200
[  811.369464][   T52]  hci_le_enh_conn_complete_evt+0x189/0x490
[  811.369492][   T52]  ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10
[  811.369521][   T52]  hci_event_packet+0x67a/0xf10
[  811.369578][   T52]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  811.369603][   T52]  ? __pfx_hci_event_packet+0x10/0x10
[  811.369632][   T52]  ? audit_init_watch+0xb0/0x170
[  811.369660][   T52]  ? hci_send_to_monitor+0xe2/0x590
[  811.369718][   T52]  hci_rx_work+0x3ee/0x1020
[  811.369748][   T52]  ? process_scheduled_works+0x97a/0x1630
[  811.369775][   T52]  process_scheduled_works+0xc3d/0x1630
[  811.369830][   T52]  ? __pfx_process_scheduled_works+0x10/0x10
[  811.369861][   T52]  ? assign_work+0x3cf/0x5d0
[  811.369891][   T52]  worker_thread+0xa47/0xfb0
[  811.369942][   T52]  kthread+0x38b/0x480
[  811.369961][   T52]  ? __pfx_worker_thread+0x10/0x10
[  811.369985][   T52]  ? __pfx_kthread+0x10/0x10
[  811.370011][   T52]  ret_from_fork+0x514/0xb70
[  811.370034][   T52]  ? __pfx_ret_from_fork+0x10/0x10
[  811.370052][   T52]  ? __switch_to+0xc89/0x1420
[  811.370081][   T52]  ? __pfx_kthread+0x10/0x10
[  811.370101][   T52]  ret_from_fork_asm+0x1a/0x30
[  811.370144][   T52]  </TASK>
[  811.375892][   T52] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  811.375934][   T52] Bluetooth: hci2: failed to register connection device
[  811.461253][T21915] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  811.461851][T21915] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  811.500594][ T1799] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  811.521510][T21915] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  811.532859][T21915] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  811.532948][T21915] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  811.544370][T21915] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  811.556052][T21915] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  811.556198][T21915] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  811.570341][T21915] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  811.575548][T21915] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  811.732059][T21926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3096'.
[  811.742239][ T1799] usb 5-1: Using ep0 maxpacket: 32
[  811.747976][ T1799] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  811.760468][ T1799] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  811.760506][ T1799] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  811.760560][ T1799] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  811.804475][ T1799] usb 5-1: config 0 descriptor??
[  812.011305][T21936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3097'.
[  812.505393][  T863] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO
[  812.506695][  T863] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO
[  812.510565][  T863] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  812.510661][  T863] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  812.512634][  T863] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  812.525747][  T863] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71
[  812.546511][  T863] usb 4-1: USB disconnect, device number 4
[  812.714164][    T9] usb 6-1: USB disconnect, device number 116
[  812.722116][ T1799] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  812.918700][ T1799] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  812.935940][ T1799] usb 3-1: config index 0 descriptor too short (expected 45, got 36)
[  812.938600][ T1799] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  812.942247][ T1799] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  812.945095][ T1799] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  812.948401][ T1799] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  812.951986][ T1799] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  813.026464][ T1799] usb 3-1: config 0 descriptor??
[  813.036811][T21941] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  813.124457][T21968] FAULT_INJECTION: forcing a failure.
[  813.124457][T21968] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  813.124561][T21968] CPU: 1 UID: 0 PID: 21968 Comm: syz.1.3100 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  813.124584][T21968] Tainted: [L]=SOFTLOCKUP
[  813.124590][T21968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  813.124601][T21968] Call Trace:
[  813.124608][T21968]  <TASK>
[  813.124617][T21968]  dump_stack_lvl+0xe8/0x150
[  813.124649][T21968]  should_fail_ex+0x410/0x560
[  813.124679][T21968]  _copy_to_user+0x31/0xb0
[  813.124700][T21968]  simple_read_from_buffer+0xe1/0x170
[  813.124727][T21968]  proc_fail_nth_read+0x1bb/0x230
[  813.124754][T21968]  ? common_file_perm+0x20e/0x2b0
[  813.124784][T21968]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  813.124812][T21968]  ? rw_verify_area+0x24a/0x4c0
[  813.124839][T21968]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  813.124864][T21968]  vfs_read+0x213/0xa80
[  813.124894][T21968]  ? __pfx___mutex_lock+0x10/0x10
[  813.124919][T21968]  ? __pfx_vfs_read+0x10/0x10
[  813.124944][T21968]  ? __fget_files+0x2a/0x420
[  813.124971][T21968]  ? __fget_files+0x3a2/0x420
[  813.124993][T21968]  ? __fget_files+0x2a/0x420
[  813.125023][T21968]  ksys_read+0x150/0x270
[  813.125050][T21968]  ? __pfx_ksys_read+0x10/0x10
[  813.125084][T21968]  do_syscall_64+0x166/0x520
[  813.125107][T21968]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  813.125126][T21968]  ? clear_bhb_loop+0x70/0xc0
[  813.125147][T21968]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  813.125166][T21968] RIP: 0033:0x7f6c5c75e98e
[  813.125183][T21968] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  813.125199][T21968] RSP: 002b:00007f6c5d6a3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  813.125219][T21968] RAX: ffffffffffffffda RBX: 00007f6c5d6a46c0 RCX: 00007f6c5c75e98e
[  813.125232][T21968] RDX: 000000000000000f RSI: 00007f6c5d6a40a0 RDI: 0000000000000004
[  813.125243][T21968] RBP: 00007f6c5d6a4090 R08: 0000000000000000 R09: 0000000000000000
[  813.125255][T21968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  813.125266][T21968] R13: 00007f6c5ca26038 R14: 00007f6c5ca25fa0 R15: 00007f6c5cb4fa48
[  813.125295][T21968]  </TASK>
[  813.485247][T17260] Bluetooth: hci5: command 0x0c1a tx timeout
[  813.499320][ T1799] usbhid 3-1:0.0: can't add hid device: -71
[  813.500220][ T1799] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  813.517556][ T1799] usb 3-1: USB disconnect, device number 14
[  813.567373][T17260] Bluetooth: hci2: command 0x0c1a tx timeout
[  813.567505][T17260] Bluetooth: hci6: command 0x0c1a tx timeout
[  813.772287][T21987] netlink: 184 bytes leftover after parsing attributes in process `syz.1.3103'.
[  814.007160][   T30] kauditd_printk_skb: 2 callbacks suppressed
[  814.007228][   T30] audit: type=1800 audit(1787866835.048:6149): pid=21992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3105" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=78 res=0 errno=0
[  814.307074][  T992] usb 5-1: USB disconnect, device number 37
[  814.452372][T22016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3108'.
[  814.475089][ T1799] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  814.625738][ T1799] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  814.626738][ T1799] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  814.626763][ T1799] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  814.626784][ T1799] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  814.628792][ T1799] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  814.628814][ T1799] usb 3-1: Product: syz
[  814.628827][ T1799] usb 3-1: Manufacturer: syz
[  814.628841][ T1799] usb 3-1: SerialNumber: syz
[  814.639706][ T1799] hub 3-1:1.0: bad descriptor, ignoring hub
[  814.639730][ T1799] hub 3-1:1.0: probe with driver hub failed with error -5
[  814.854364][ T1799] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  815.073324][T21997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  815.079156][T21997] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  815.082758][T21997] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3107'.
[  815.406050][ T1799] usb 3-1: reset high-speed USB device number 15 using dummy_hcd
[  815.556229][ T1799] usb 3-1: device firmware changed
[  815.556800][ T1799] usb 3-1: USB disconnect, device number 15
[  815.561076][ T1799] usblp0: removed
[  815.570706][   T52] Bluetooth: hci5: command 0x0c1a tx timeout
[  815.645196][   T52] Bluetooth: hci6: command 0x0c1a tx timeout
[  815.645251][   T52] Bluetooth: hci2: command 0x0c1a tx timeout
[  815.894044][ T1799] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  816.037904][ T1799] usb 3-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00
[  816.039082][ T1799] usb 3-1: config index 0 descriptor too short (expected 8192, got 141)
[  816.039124][ T1799] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  816.039146][ T1799] usb 3-1: config 0 has no interfaces?
[  816.039178][ T1799] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  816.043098][ T1799] usb 3-1: config 0 descriptor??
[  816.250580][ T1799] usb 3-1: string descriptor 0 read error: -71
[  816.265466][ T1799] usb 3-1: USB disconnect, device number 16
[  817.305376][ T1799] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  817.456470][ T1799] usb 2-1: Using ep0 maxpacket: 32
[  817.457278][ T1799] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  817.458219][ T1799] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  817.458240][ T1799] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  817.458271][ T1799] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  817.462526][ T1799] usb 2-1: config 0 descriptor??
[  817.661505][T17260] Bluetooth: hci5: command 0x0c1a tx timeout
[  817.725704][T17260] Bluetooth: hci2: command 0x0c1a tx timeout
[  817.727653][T17260] Bluetooth: hci6: command 0x0c1a tx timeout
[  817.824847][T22127] loop5: detected capacity change from 0 to 7
[  817.827773][T22127] Dev loop5: unable to read RDB block 7
[  817.827797][T22127]  loop5: AHDI p1
[  817.827815][T22127] loop5: partition table partially beyond EOD, truncated
[  818.075377][ T1799] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  818.173410][ T4984] Dev loop5: unable to read RDB block 7
[  818.179891][ T4984]  loop5: AHDI p1
[  818.179918][ T4984] loop5: partition table partially beyond EOD, truncated
[  818.236304][ T1799] usb 5-1: Using ep0 maxpacket: 32
[  818.237151][ T1799] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  818.238499][ T1799] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[  818.238556][ T1799] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  818.238591][ T1799] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 103, changing to 10
[  818.238615][ T1799] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 26217, setting to 1024
[  818.238638][ T1799] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  818.238662][ T1799] usb 5-1: config 0 interface 0 has no altsetting 0
[  818.240960][ T1799] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  818.240982][ T1799] usb 5-1: Product: syz
[  818.240995][ T1799] usb 5-1: Manufacturer: syz
[  818.241008][ T1799] usb 5-1: SerialNumber: syz
[  818.249540][ T1799] usb 5-1: config 0 descriptor??
[  818.250197][T22127] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  818.257273][ T1799] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  818.261684][ T1799] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  818.521222][    T9] usb 5-1: USB disconnect, device number 38
[  818.521279][    C0] ldusb 5-1:0.0: usb_submit_urb failed (-19)
[  818.543510][    T9] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[  819.109250][    T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  819.282994][    T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  819.294719][    T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  819.294751][    T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  819.294789][    T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  819.315509][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  819.315538][    T9] usb 4-1: Product: syz
[  819.315567][    T9] usb 4-1: Manufacturer: syz
[  819.315585][    T9] usb 4-1: SerialNumber: syz
[  819.338389][    T9] hub 4-1:1.0: bad descriptor, ignoring hub
[  819.338413][    T9] hub 4-1:1.0: probe with driver hub failed with error -5
[  819.389907][T22178] FAULT_INJECTION: forcing a failure.
[  819.389907][T22178] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  819.389941][T22178] CPU: 0 UID: 0 PID: 22178 Comm: syz.2.3128 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  819.389965][T22178] Tainted: [L]=SOFTLOCKUP
[  819.389973][T22178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  819.389984][T22178] Call Trace:
[  819.389992][T22178]  <TASK>
[  819.389999][T22178]  dump_stack_lvl+0xe8/0x150
[  819.390033][T22178]  should_fail_ex+0x410/0x560
[  819.390065][T22178]  _copy_from_user+0x2d/0xb0
[  819.390084][T22178]  input_event_from_user+0xb1/0x290
[  819.390230][T22178]  ? __pfx_input_event_from_user+0x10/0x10
[  819.390259][T22178]  ? _raw_spin_unlock_irq_enable+0x4f/0xa0
[  819.390292][T22178]  evdev_write+0x2c7/0x4c0
[  819.390347][T22178]  ? __lock_acquire+0x6df/0x2e50
[  819.390370][T22178]  ? __pfx_evdev_write+0x10/0x10
[  819.390394][T22178]  ? bpf_lsm_file_permission+0x9/0x20
[  819.390417][T22178]  ? security_file_permission+0x75/0x260
[  819.390444][T22178]  ? rw_verify_area+0x203/0x4c0
[  819.390472][T22178]  ? __pfx_evdev_write+0x10/0x10
[  819.390494][T22178]  vfs_write+0x296/0xba0
[  819.390526][T22178]  ? __pfx_vfs_write+0x10/0x10
[  819.390553][T22178]  ? __fget_files+0x2a/0x420
[  819.390578][T22178]  ? __fget_files+0x2a/0x420
[  819.390599][T22178]  ? __fget_files+0x3a2/0x420
[  819.390621][T22178]  ? __fget_files+0x2a/0x420
[  819.390651][T22178]  ksys_write+0x150/0x270
[  819.390679][T22178]  ? __pfx_ksys_write+0x10/0x10
[  819.390714][T22178]  do_syscall_64+0x166/0x520
[  819.390735][T22178]  ? trace_irq_disable+0x3b/0x140
[  819.390752][T22178]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  819.390771][T22178]  ? clear_bhb_loop+0x70/0xc0
[  819.390792][T22178]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  819.390811][T22178] RIP: 0033:0x7fc52999e159
[  819.390828][T22178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  819.390844][T22178] RSP: 002b:00007fc52a8d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  819.390864][T22178] RAX: ffffffffffffffda RBX: 00007fc529c26090 RCX: 00007fc52999e159
[  819.390878][T22178] RDX: 0000000000000918 RSI: 0000200000000040 RDI: 0000000000000003
[  819.390890][T22178] RBP: 00007fc52a8d5090 R08: 0000000000000000 R09: 0000000000000000
[  819.390901][T22178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  819.390913][T22178] R13: 00007fc529c26128 R14: 00007fc529c26090 R15: 00007fc529d4fa48
[  819.390942][T22178]  </TASK>
[  819.698840][    T9] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  819.815588][   T52] Bluetooth: hci2: command 0x0c1a tx timeout
[  819.945889][T22165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  819.952028][T22165] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  819.955527][T22165] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3126'.
[  820.157539][    T9] usb 2-1: USB disconnect, device number 7
[  820.277029][ T1799] usb 4-1: USB disconnect, device number 5
[  820.300798][ T1799] usblp0: removed
[  820.340734][T22205] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3131'.
[  820.676536][ T1799] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  820.846950][ T1799] usb 4-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00
[  820.862510][ T1799] usb 4-1: config index 0 descriptor too short (expected 8192, got 141)
[  820.862554][ T1799] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  820.862588][ T1799] usb 4-1: config 0 has no interfaces?
[  820.862615][ T1799] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  820.871502][ T1799] usb 4-1: config 0 descriptor??
[  821.013757][T22240] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3137'.
[  821.111291][ T1799] usb 4-1: string descriptor 0 read error: -71
[  821.114002][ T1799] usb 4-1: USB disconnect, device number 6
[  821.267160][  T992] usb 6-1: new full-speed USB device number 117 using dummy_hcd
[  821.415704][  T992] usb 6-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11
[  821.427143][  T992] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  821.442427][  T992] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7
[  821.442470][  T992] usb 6-1: Product: syz
[  821.442499][  T992] usb 6-1: Manufacturer: syz
[  821.442521][  T992] usb 6-1: SerialNumber: syz
[  821.452333][  T992] usb 6-1: config 0 descriptor??
[  821.482129][  T992] usb 6-1: no audio or video endpoints found
[  821.680864][T22240] netlink: 1 bytes leftover after parsing attributes in process `syz.5.3137'.
[  821.700758][ T5705] usb 6-1: USB disconnect, device number 117
[  822.063102][T22303] openvswitch: netlink: Duplicate or invalid key (type 0).
[  822.063172][T22303] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  822.157643][ T1799] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  822.329188][ T1799] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00
[  822.330539][ T1799] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  822.330580][ T1799] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  822.705755][  T992] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  822.855437][  T992] usb 3-1: Using ep0 maxpacket: 16
[  822.859835][  T992] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  822.862875][  T992] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  822.862905][  T992] usb 3-1: config 0 has no interface number 0
[  822.890987][  T992] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  822.891052][  T992] usb 3-1: Product: syz
[  822.891066][  T992] usb 3-1: Manufacturer: syz
[  822.891079][  T992] usb 3-1: SerialNumber: syz
[  822.908928][  T992] usb 3-1: config 0 descriptor??
[  822.944192][  T992] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  822.957206][ T1799] input: HID 04d8:c002 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:04D8:C002.001D/input/input83
[  823.208914][T22324] netlink: 'syz.3.3143': attribute type 2 has an invalid length.
[  823.350091][ T1799] rc_core: IR keymap rc-rc6-mce not found
[  823.350149][ T1799] Registered IR keymap rc-empty
[  823.374085][ T1799] rc rc0: HID 04d8:c002 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:04D8:C002.001D/rc/rc0
[  823.429004][T22324] bridge0: port 3(vlan3) entered disabled state
[  823.429236][T22324] bridge0: port 2(bridge_slave_1) entered disabled state
[  823.429443][T22324] bridge0: port 1(bridge_slave_0) entered disabled state
[  823.462416][T22340] netlink: 11 bytes leftover after parsing attributes in process `syz.3.3143'.
[  823.519489][ T1799] input: HID 04d8:c002 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:04D8:C002.001D/rc/rc0/input84
[  823.558150][T22316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  823.560459][T22316] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  823.588185][ T1799] hid-picolcd 0003:04D8:C002.001D: No report with id 0x92 found
[  823.858198][  T992] gspca_spca1528: reg_w err -110
[  823.874984][    T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!!
[  823.879449][  T992] spca1528 3-1:0.1: probe with driver spca1528 failed with error -110
[  824.112453][T22366] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3143'.
[  824.112525][T22366] tipc: Enabling of bearer <u�:sy> rejected, media not registered
[  824.206945][ T1799] usb 2-1: USB disconnect, device number 8
[  824.422364][    T9] usb 3-1: USB disconnect, device number 17
[  824.636004][ T1799] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  824.806648][ T1799] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  824.807816][ T1799] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  824.807841][ T1799] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  824.807863][ T1799] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  824.809758][ T1799] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  824.809780][ T1799] usb 2-1: Product: syz
[  824.809793][ T1799] usb 2-1: Manufacturer: syz
[  824.809807][ T1799] usb 2-1: SerialNumber: syz
[  824.817397][ T1799] hub 2-1:1.0: bad descriptor, ignoring hub
[  824.817418][ T1799] hub 2-1:1.0: probe with driver hub failed with error -5
[  825.030070][ T1799] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  825.148963][T22412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3155'.
[  825.149007][T22412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3155'.
[  825.241294][T22380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  825.241753][T22380] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  825.250854][T22380] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3150'.
[  825.279266][    C0] Dropped outbound packet type=f6
[  825.426696][T22424] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3157'.
[  825.450965][T22424] netlink: 'syz.2.3157': attribute type 16 has an invalid length.
[  825.451002][T22424] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3157'.
[  825.535420][ T1799] usb 2-1: reset high-speed USB device number 9 using dummy_hcd
[  825.686407][ T1799] usb 2-1: device firmware changed
[  825.687469][ T1799] usb 2-1: USB disconnect, device number 9
[  825.694671][ T1799] usblp0: removed
[  826.015352][ T1799] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  826.170840][ T1799] usb 2-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00
[  826.173402][ T1799] usb 2-1: config index 0 descriptor too short (expected 8192, got 141)
[  826.173426][ T1799] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  826.173443][ T1799] usb 2-1: config 0 has no interfaces?
[  826.173470][ T1799] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  826.201232][ T1799] usb 2-1: config 0 descriptor??
[  826.419379][ T1799] usb 2-1: string descriptor 0 read error: -71
[  826.433188][ T1799] usb 2-1: USB disconnect, device number 10
[  826.745682][T22455] tipc: Started in network mode
[  826.751902][T22455] tipc: Node identity a2b11412d0a7, cluster identity 4711
[  826.763432][T22455] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  826.773228][T22455] syzkaller0: entered promiscuous mode
[  826.780971][T22455] syzkaller0: entered allmulticast mode
[  826.864554][T22455] tipc: Resetting bearer <eth:syzkaller0>
[  826.905170][ T5705] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  826.919122][T22454] tipc: Resetting bearer <eth:syzkaller0>
[  827.055213][ T5705] usb 3-1: device descriptor read/64, error -71
[  827.069559][T22454] tipc: Disabling bearer <eth:syzkaller0>
[  827.315259][ T5705] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  827.466980][ T5705] usb 3-1: device descriptor read/64, error -71
[  827.586198][ T5705] usb usb3-port1: attempt power cycle
[  827.945556][ T5705] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  827.967003][ T5705] usb 3-1: device descriptor read/8, error -71
[  828.084295][T22490] netlink: 'syz.5.3169': attribute type 10 has an invalid length.
[  828.205142][ T5705] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  828.236559][ T5705] usb 3-1: device descriptor read/8, error -71
[  828.335347][T19281] usb 6-1: new high-speed USB device number 118 using dummy_hcd
[  828.345684][ T5705] usb usb3-port1: unable to enumerate USB device
[  828.485298][T19281] usb 6-1: Using ep0 maxpacket: 32
[  828.491177][T19281] usb 6-1: New USB device found, idVendor=19ab, idProduct=1000, bcdDevice= 0.5e
[  828.505406][T19281] usb 6-1: config 5 has an invalid interface number: 132 but max is 0
[  828.505446][T19281] usb 6-1: config 5 has no interface number 0
[  828.505501][T19281] usb 6-1: config 5 interface 132 has no altsetting 0
[  828.535200][T19281] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  828.535239][T19281] usb 6-1: Product: syz
[  828.535267][T19281] usb 6-1: Manufacturer: syz
[  828.535286][T19281] usb 6-1: SerialNumber: syz
[  829.276234][    T9] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  829.457850][    T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0023, bcdDevice= 0.40
[  829.476047][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  829.476086][    T9] usb 5-1: Product: syz
[  829.476115][    T9] usb 5-1: Manufacturer: syz
[  829.476157][    T9] usb 5-1: SerialNumber: syz
[  829.795147][    T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  829.796496][ T5705] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[  829.814609][    T9] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2
[  829.868041][    T9] usb 5-1: USB disconnect, device number 39
[  830.222862][T22550] Cannot find add_set index 2 as target
[  830.629632][T22559] tipc: Resetting bearer <eth:syzkaller0>
[  830.642115][T22558] tipc: Resetting bearer <eth:syzkaller0>
[  830.785177][    T9] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  830.935342][    T9] usb 5-1: Using ep0 maxpacket: 8
[  830.941209][    T9] usb 5-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=c0.0a
[  830.952772][    T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 3
[  830.966697][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  830.975530][    T9] usb 5-1: Product: syz
[  830.979868][    T9] usb 5-1: Manufacturer: syz
[  830.979887][    T9] usb 5-1: SerialNumber: syz
[  830.996158][    T9] usb 5-1: config 0 descriptor??
[  831.032453][ T7769] tipc: Resetting bearer <eth:syzkaller0>
[  831.244326][T19281] uvcvideo 6-1:5.132: Found UVC 0.00 device syz (19ab:1000)
[  831.244415][T19281] uvcvideo 6-1:5.132: No valid video chain found.
[  831.270878][T19281] usb 6-1: USB disconnect, device number 118
[  831.618552][    T9] usb 5-1: USB disconnect, device number 40
[  831.690435][T22598] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3185'.
[  832.115233][ T5665] usb 6-1: new high-speed USB device number 119 using dummy_hcd
[  832.297296][ T5665] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  832.321555][ T5665] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  832.321649][ T5665] usb 6-1: Product: syz
[  832.321737][ T5665] usb 6-1: Manufacturer: syz
[  832.321772][ T5665] usb 6-1: SerialNumber: syz
[  832.352616][ T5665] usb 6-1: config 0 descriptor??
[  833.214349][T22656] io-wq is not configured for unbound workers
[  833.435922][ T5705] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  833.575945][ T5665] usb 6-1: f81604_read: reg: 105 failed: -EPROTO
[  833.576140][ T5665] f81604 6-1:0.0: Setting termination of CH#1 failed: -EPROTO
[  833.576180][ T5665] f81604 6-1:0.0: probe with driver f81604 failed with error -71
[  833.595187][ T5705] usb 2-1: Using ep0 maxpacket: 8
[  833.610945][ T5705] usb 2-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67
[  833.617731][ T5705] usb 2-1: config 8 has an invalid interface number: 188 but max is 0
[  833.617785][ T5705] usb 2-1: config 8 has no interface number 0
[  833.617857][ T5705] usb 2-1: config 8 interface 188 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D
[  833.617896][ T5705] usb 2-1: config 8 interface 188 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  833.617949][ T5705] usb 2-1: config 8 interface 188 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0
[  833.626809][ T5665] usb 6-1: USB disconnect, device number 119
[  833.641641][ T5705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  833.641680][ T5705] usb 2-1: Product: syz
[  833.641709][ T5705] usb 2-1: Manufacturer: syz
[  833.641740][ T5705] usb 2-1: SerialNumber: syz
[  834.629102][ T5705] vmk80xx 2-1:8.188: driver 'vmk80xx' failed to auto-configure device.
[  834.647691][ T5705] vmk80xx 2-1:8.188: probe with driver vmk80xx failed with error -22
[  834.698011][ T5705] usb 2-1: USB disconnect, device number 12
[  837.659271][T22727] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3206'.
[  838.034915][T22734] FAULT_INJECTION: forcing a failure.
[  838.034915][T22734] name failslab, interval 1, probability 0, space 0, times 0
[  838.040694][T22734] CPU: 1 UID: 0 PID: 22734 Comm: syz.4.3207 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  838.040720][T22734] Tainted: [L]=SOFTLOCKUP
[  838.040726][T22734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  838.040737][T22734] Call Trace:
[  838.040745][T22734]  <TASK>
[  838.040753][T22734]  dump_stack_lvl+0xe8/0x150
[  838.040785][T22734]  should_fail_ex+0x410/0x560
[  838.040815][T22734]  should_failslab+0xa8/0x100
[  838.040838][T22734]  __kmalloc_noprof+0xfe/0x720
[  838.040865][T22734]  ? ip_options_get+0x51/0x570
[  838.040883][T22734]  ? ip_options_get+0x51/0x570
[  838.040904][T22734]  ip_options_get+0x51/0x570
[  838.040930][T22734]  ip_cmsg_send+0x591/0xa70
[  838.040963][T22734]  udp_sendmsg+0xc09/0x2140
[  838.041070][T22734]  ? __pfx_udp_sendmsg+0x10/0x10
[  838.041100][T22734]  ? ip4_datagram_release_cb+0x976/0xbe0
[  838.041124][T22734]  ? reacquire_held_locks+0x117/0x1a0
[  838.041145][T22734]  ? release_sock+0x2f/0x260
[  838.041177][T22734]  ? inet_sendmsg+0x10d/0x320
[  838.041198][T22734]  ? inet_sendmsg+0x10d/0x320
[  838.041217][T22734]  ? __local_bh_enable_ip+0xd6/0x140
[  838.041240][T22734]  ? lockdep_hardirqs_on+0x7b/0x110
[  838.041262][T22734]  ? inet_sendmsg+0x10d/0x320
[  838.041282][T22734]  ? inet_sendmsg+0x23e/0x320
[  838.041303][T22734]  ? __pfx_inet_sendmsg+0x10/0x10
[  838.041322][T22734]  sock_sendmsg_nosec+0x10e/0x180
[  838.041346][T22734]  ____sys_sendmsg+0x54e/0x850
[  838.041369][T22734]  ? __pfx_____sys_sendmsg+0x10/0x10
[  838.041404][T22734]  ? import_iovec+0x73/0xa0
[  838.041434][T22734]  ___sys_sendmsg+0x2a5/0x360
[  838.041451][T22734]  ? __lock_acquire+0x6df/0x2e50
[  838.041473][T22734]  ? __pfx____sys_sendmsg+0x10/0x10
[  838.041521][T22734]  ? __fget_files+0x2a/0x420
[  838.041544][T22734]  ? __fget_files+0x3a2/0x420
[  838.041575][T22734]  __sys_sendmmsg+0x273/0x4d0
[  838.041598][T22734]  ? __pfx___sys_sendmmsg+0x10/0x10
[  838.041624][T22734]  ? __pfx_xfrm_dev_backlog+0x10/0x10
[  838.041693][T22734]  ? __irq_exit_rcu+0xcb/0x220
[  838.041715][T22734]  ? lockdep_softirqs_on+0x11e/0x190
[  838.041741][T22734]  __x64_sys_sendmmsg+0xa0/0xc0
[  838.041761][T22734]  do_syscall_64+0x166/0x520
[  838.041783][T22734]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  838.041802][T22734]  ? clear_bhb_loop+0x70/0xc0
[  838.041824][T22734]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  838.041842][T22734] RIP: 0033:0x7f633419e159
[  838.041859][T22734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  838.041875][T22734] RSP: 002b:00007f6334fd1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  838.041895][T22734] RAX: ffffffffffffffda RBX: 00007f6334425fa0 RCX: 00007f633419e159
[  838.041908][T22734] RDX: 0000000000000001 RSI: 0000200000000780 RDI: 0000000000000005
[  838.041920][T22734] RBP: 00007f6334fd1090 R08: 0000000000000000 R09: 0000000000000000
[  838.041932][T22734] R10: 000000002402c004 R11: 0000000000000246 R12: 0000000000000001
[  838.041944][T22734] R13: 00007f6334426038 R14: 00007f6334425fa0 R15: 00007f633454fa48
[  838.041972][T22734]  </TASK>
[  838.325949][T19281] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  838.485306][T19281] usb 2-1: Using ep0 maxpacket: 16
[  838.486028][T19281] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  838.486973][T19281] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  838.486994][T19281] usb 2-1: config 0 has no interface number 0
[  838.487031][T19281] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  838.487054][T19281] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  838.487087][T19281] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  838.531628][T19281] usb 2-1: config 0 descriptor??
[  838.765792][T22751] bond0: (slave bond_slave_1): Releasing backup interface
[  838.908271][ T5665] usb 6-1: new high-speed USB device number 120 using dummy_hcd
[  839.096969][ T5665] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  839.112265][ T5665] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  839.125167][ T5665] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  839.138940][ T5665] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  839.139002][ T5665] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  839.180681][ T5665] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  839.180748][ T5665] usb 6-1: Manufacturer: syz
[  839.200559][T19281] input: HID 28bd:0071 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0071.001E/input/input85
[  839.240620][ T5665] usb 6-1: config 0 descriptor??
[  839.304325][T19281] input: HID 28bd:0071 Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0071.001E/input/input86
[  839.372960][T19281] uclogic 0003:28BD:0071.001E: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.1-1/input1
[  839.418710][T19281] usb 2-1: USB disconnect, device number 13
[  839.748974][T22778] fido_id[22778]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory
[  839.791765][ T5665] appleir 0003:05AC:8243.001F: unknown main item tag 0x0
[  839.835111][ T5665] appleir 0003:05AC:8243.001F: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0
[  840.195835][ T1799] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  840.237133][T22754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  840.248770][T22754] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  840.267148][    T9] usb 6-1: USB disconnect, device number 120
[  840.346366][ T1799] usb 4-1: Using ep0 maxpacket: 8
[  840.348641][ T1799] usb 4-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb
[  840.351495][ T1799] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  840.367484][ T1799] usb 4-1: Product: syz
[  840.367503][ T1799] usb 4-1: Manufacturer: syz
[  840.367516][ T1799] usb 4-1: SerialNumber: syz
[  840.896580][ T1799] mxuport 4-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71)
[  840.896684][ T1799] mxuport 4-1:254.0: probe with driver mxuport failed with error -5
[  840.909571][ T1799] usb 4-1: USB disconnect, device number 7
[  841.869068][ T1799] usb 6-1: new full-speed USB device number 121 using dummy_hcd
[  842.019566][ T1799] usb 6-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[  842.020675][ T1799] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  842.020729][ T1799] usb 6-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4
[  842.030103][ T1799] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  842.030126][ T1799] usb 6-1: Product: syz
[  842.030139][ T1799] usb 6-1: Manufacturer: syz
[  842.030152][ T1799] usb 6-1: SerialNumber: syz
[  842.078076][    T9] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  842.225121][    T9] usb 5-1: Using ep0 maxpacket: 32
[  842.225886][    T9] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00
[  842.228157][    T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  842.228204][    T9] usb 5-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  842.228230][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[  842.228281][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  842.238910][    T9] usb 5-1: config 0 descriptor??
[  842.262123][    T9] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  842.466102][    C0] usb 6-1: received EP1 urb->status = -2
[  842.467764][ T1799] usb 6-1: unable to init card! (ret=-110)
[  842.468141][ T1799] snd-usb-caiaq 6-1:1.0: probe with driver snd-usb-caiaq failed with error -110
[  842.612714][T22855] fuse: root generation should be zero
[  842.622192][ T1799] usb 6-1: USB disconnect, device number 121
[  842.721845][T22889] Cannot find add_set index 0 as target
[  843.030186][T22861] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  843.130497][T22861] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  843.426274][T22861] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  843.724589][   T30] audit: type=1326 audit(1787866864.758:6150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22908 comm="syz.1.3226" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c5c79e159 code=0x0
[  843.770342][T22861] tipc: Resetting bearer <eth:syzkaller0>
[  843.783915][T22861] syzkaller0: left promiscuous mode
[  843.790235][T22861] syzkaller0: left allmulticast mode
[  843.798198][T22861] vti0: left promiscuous mode
[  843.844767][T22861] bond0: left promiscuous mode
[  843.851385][T22861] bond0: left allmulticast mode
[  843.871854][T22861] geneve2: left promiscuous mode
[  843.898670][T22906] FAULT_INJECTION: forcing a failure.
[  843.898670][T22906] name failslab, interval 1, probability 0, space 0, times 0
[  843.898728][T22906] CPU: 0 UID: 0 PID: 22906 Comm: syz.5.3225 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  843.898755][T22906] Tainted: [L]=SOFTLOCKUP
[  843.898762][T22906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  843.898773][T22906] Call Trace:
[  843.898780][T22906]  <TASK>
[  843.898787][T22906]  dump_stack_lvl+0xe8/0x150
[  843.898814][T22906]  should_fail_ex+0x410/0x560
[  843.898842][T22906]  should_failslab+0xa8/0x100
[  843.898862][T22906]  __kmalloc_cache_noprof+0xa3/0x600
[  843.898886][T22906]  ? __kmalloc_cache_noprof+0x14d/0x600
[  843.898912][T22906]  ? vlan_vid_add+0x303/0x750
[  843.899050][T22906]  ? vlan_vid_add+0x303/0x750
[  843.899076][T22906]  vlan_vid_add+0x303/0x750
[  843.899105][T22906]  register_vlan_dev+0x9f/0x850
[  843.899129][T22906]  ? vlan_changelink+0x4ac/0x560
[  843.899158][T22906]  vlan_newlink+0x4b2/0x610
[  843.899185][T22906]  ? __pfx_vlan_newlink+0x10/0x10
[  843.899212][T22906]  rtnl_newlink_create+0x305/0x7b0
[  843.899272][T22906]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  843.899294][T22906]  ? __pfx___mutex_lock+0x10/0x10
[  843.899334][T22906]  ? ns_capable+0x89/0xe0
[  843.899361][T22906]  rtnl_newlink+0x166d/0x1c30
[  843.899429][T22906]  ? __pfx_rtnl_newlink+0x10/0x10
[  843.899455][T22906]  ? __lock_acquire+0x6df/0x2e50
[  843.899480][T22906]  ? __lock_acquire+0x6df/0x2e50
[  843.899512][T22906]  ? lock_acquire+0x115/0x350
[  843.899537][T22906]  ? lock_acquire+0x115/0x350
[  843.899563][T22906]  ? is_bpf_text_address+0x26/0x2b0
[  843.899590][T22906]  ? __lock_acquire+0x6df/0x2e50
[  843.899611][T22906]  ? kernel_text_address+0xa5/0xe0
[  843.899632][T22906]  ? __kernel_text_address+0xd/0x30
[  843.899651][T22906]  ? unwind_get_return_address+0x4d/0x90
[  843.899672][T22906]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  843.899700][T22906]  ? arch_stack_walk+0xfb/0x150
[  843.899731][T22906]  ? lock_acquire+0x115/0x350
[  843.899762][T22906]  ? __pfx_rtnl_newlink+0x10/0x10
[  843.899786][T22906]  rtnetlink_rcv_msg+0x802/0xc00
[  843.899810][T22906]  ? netlink_sendmsg+0x5d4/0xb40
[  843.899832][T22906]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  843.899858][T22906]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  843.899884][T22906]  ? __lock_acquire+0x6df/0x2e50
[  843.899913][T22906]  netlink_rcv_skb+0x226/0x4a0
[  843.899933][T22906]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  843.899961][T22906]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  843.899993][T22906]  ? netlink_deliver_tap+0x2e/0x1b0
[  843.900010][T22906]  ? netlink_deliver_tap+0x2e/0x1b0
[  843.900035][T22906]  netlink_unicast+0x7bd/0x940
[  843.900072][T22906]  netlink_sendmsg+0x813/0xb40
[  843.900101][T22906]  ? __pfx_netlink_sendmsg+0x10/0x10
[  843.900128][T22906]  ? apparmor_socket_sendmsg+0x98/0x360
[  843.900156][T22906]  ? __pfx_netlink_sendmsg+0x10/0x10
[  843.900175][T22906]  sock_sendmsg_nosec+0x13a/0x180
[  843.900201][T22906]  ____sys_sendmsg+0x54e/0x850
[  843.900224][T22906]  ? __pfx_____sys_sendmsg+0x10/0x10
[  843.900251][T22906]  ? import_iovec+0x73/0xa0
[  843.900281][T22906]  ___sys_sendmsg+0x2a5/0x360
[  843.900299][T22906]  ? __lock_acquire+0x6df/0x2e50
[  843.900320][T22906]  ? __pfx____sys_sendmsg+0x10/0x10
[  843.900379][T22906]  ? __fget_files+0x2a/0x420
[  843.900401][T22906]  ? __fget_files+0x3a2/0x420
[  843.900433][T22906]  __x64_sys_sendmsg+0x1b1/0x290
[  843.900454][T22906]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  843.900492][T22906]  do_syscall_64+0x166/0x520
[  843.900514][T22906]  ? trace_irq_disable+0x3b/0x140
[  843.900532][T22906]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  843.900551][T22906]  ? clear_bhb_loop+0x70/0xc0
[  843.900573][T22906]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  843.900592][T22906] RIP: 0033:0x7fde0219e159
[  843.900609][T22906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  843.900625][T22906] RSP: 002b:00007fde030db028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  843.900645][T22906] RAX: ffffffffffffffda RBX: 00007fde02425fa0 RCX: 00007fde0219e159
[  843.900658][T22906] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 000000000000000c
[  843.900669][T22906] RBP: 00007fde030db090 R08: 0000000000000000 R09: 0000000000000000
[  843.900681][T22906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  843.900691][T22906] R13: 00007fde02426038 R14: 00007fde02425fa0 R15: 00007fde0254fa48
[  843.900721][T22906]  </TASK>
[  843.965915][T17154] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  843.965955][T17154] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  843.965986][T17154] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  843.966016][T17154] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  844.880067][ T5665] usb 5-1: USB disconnect, device number 41
[  845.135299][    T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  845.286626][    T9] usb 2-1: Using ep0 maxpacket: 8
[  845.295817][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[  845.295886][    T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[  845.318810][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  845.318877][    T9] usb 2-1: config 1 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  845.318902][    T9] usb 2-1: config 1 interface 0 has no altsetting 0
[  845.351172][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  845.351204][    T9] usb 2-1: Product: syz
[  845.351217][    T9] usb 2-1: Manufacturer: syz
[  845.351231][    T9] usb 2-1: SerialNumber: syz
[  846.394976][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[  847.906670][    T9] usb 2-1: No union descriptors
[  847.907721][    T9] usbtest 2-1:1.0: couldn't get endpoints, -22
[  847.907790][    T9] usbtest 2-1:1.0: probe with driver usbtest failed with error -22
[  847.935537][    T9] usb 2-1: USB disconnect, device number 14
[  848.695313][T22986] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3239'.
[  849.229166][T23001] tipc: Started in network mode
[  849.229218][T23001] tipc: Node identity 862d5809e403, cluster identity 4711
[  849.229392][T23001] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  849.235762][T23001] syzkaller0: entered promiscuous mode
[  849.235781][T23001] syzkaller0: entered allmulticast mode
[  849.329699][T23001] tipc: Resetting bearer <eth:syzkaller0>
[  849.352736][T23000] tipc: Resetting bearer <eth:syzkaller0>
[  849.407503][T23000] tipc: Disabling bearer <eth:syzkaller0>
[  849.496051][T23015] FAULT_INJECTION: forcing a failure.
[  849.496051][T23015] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  849.496108][T23015] CPU: 0 UID: 0 PID: 23015 Comm: syz.4.3246 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  849.496134][T23015] Tainted: [L]=SOFTLOCKUP
[  849.496141][T23015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  849.496151][T23015] Call Trace:
[  849.496157][T23015]  <TASK>
[  849.496164][T23015]  dump_stack_lvl+0xe8/0x150
[  849.496192][T23015]  should_fail_ex+0x410/0x560
[  849.496222][T23015]  _copy_from_user+0x2d/0xb0
[  849.496241][T23015]  video_usercopy+0x359/0x1430
[  849.496269][T23015]  ? hook_file_ioctl+0x1f2/0x600
[  849.496295][T23015]  ? __pfx___video_do_ioctl+0x10/0x10
[  849.496327][T23015]  ? __pfx_video_usercopy+0x10/0x10
[  849.496359][T23015]  ? __fget_files+0x2a/0x420
[  849.496392][T23015]  ? __fget_files+0x2a/0x420
[  849.496413][T23015]  ? __fget_files+0x3a2/0x420
[  849.496438][T23015]  v4l2_ioctl+0x18d/0x1e0
[  849.496460][T23015]  ? __pfx_v4l2_ioctl+0x10/0x10
[  849.496480][T23015]  __se_sys_ioctl+0xfc/0x170
[  849.496501][T23015]  do_syscall_64+0x166/0x520
[  849.496523][T23015]  ? trace_irq_disable+0x3b/0x140
[  849.496539][T23015]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  849.496558][T23015]  ? clear_bhb_loop+0x70/0xc0
[  849.496580][T23015]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  849.496599][T23015] RIP: 0033:0x7f633419e159
[  849.496616][T23015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  849.496632][T23015] RSP: 002b:00007f6334fd1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  849.496651][T23015] RAX: ffffffffffffffda RBX: 00007f6334425fa0 RCX: 00007f633419e159
[  849.496665][T23015] RDX: 0000200000000140 RSI: 00000000c0cc5615 RDI: 0000000000000003
[  849.496678][T23015] RBP: 00007f6334fd1090 R08: 0000000000000000 R09: 0000000000000000
[  849.496690][T23015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  849.496701][T23015] R13: 00007f6334426038 R14: 00007f6334425fa0 R15: 00007f633454fa48
[  849.496729][T23015]  </TASK>
[  849.504145][T23016] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3245'.
[  849.996216][T23036] loop9: detected capacity change from 0 to 7
[  850.015610][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  850.015720][    C0] buffer_io_error: 173 callbacks suppressed
[  850.015734][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  850.039919][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  850.039992][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  850.050036][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  850.050107][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  850.062673][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  850.062771][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  850.066558][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  850.066624][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  850.066805][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  850.066863][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  850.067008][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  850.067066][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  850.074855][T23036] ldm_validate_partition_table(): Disk read failed.
[  850.075216][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  850.075296][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  850.106802][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  850.106888][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  850.114607][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  850.114697][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  850.118406][T23036] Dev loop9: unable to read RDB block 0
[  850.134357][T23036]  loop9: unable to read partition table
[  850.134540][T23036] loop9: partition table beyond EOD, truncated
[  850.134572][T23036] loop_reread_partitions: partition scan of loop9 (��) failed (rc=-5)
[  850.277385][T23045] FAULT_INJECTION: forcing a failure.
[  850.277385][T23045] name failslab, interval 1, probability 0, space 0, times 0
[  850.277437][T23045] CPU: 0 UID: 0 PID: 23045 Comm: syz.5.3252 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  850.277463][T23045] Tainted: [L]=SOFTLOCKUP
[  850.277471][T23045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  850.277481][T23045] Call Trace:
[  850.277489][T23045]  <TASK>
[  850.277495][T23045]  dump_stack_lvl+0xe8/0x150
[  850.277523][T23045]  should_fail_ex+0x410/0x560
[  850.277553][T23045]  should_failslab+0xa8/0x100
[  850.277578][T23045]  __kmalloc_cache_node_noprof+0xaa/0x620
[  850.277609][T23045]  ? __get_vm_area_node+0x155/0x2f0
[  850.277630][T23045]  ? __get_vm_area_node+0x155/0x2f0
[  850.277658][T23045]  __get_vm_area_node+0x155/0x2f0
[  850.277687][T23045]  __vmalloc_node_range_noprof+0x343/0x1540
[  850.277713][T23045]  ? bpf_prog_alloc_no_stats+0x47/0x560
[  850.277734][T23045]  ? __lock_acquire+0x6df/0x2e50
[  850.277773][T23045]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  850.277807][T23045]  ? bpf_prog_alloc_no_stats+0x47/0x560
[  850.277826][T23045]  __vmalloc_noprof+0xd2/0x120
[  850.277849][T23045]  ? bpf_prog_alloc_no_stats+0x47/0x560
[  850.277872][T23045]  bpf_prog_alloc_no_stats+0x47/0x560
[  850.277891][T23045]  ? bpf_prog_alloc+0x2a/0x1a0
[  850.277913][T23045]  bpf_prog_alloc+0x3c/0x1a0
[  850.277935][T23045]  bpf_prog_load+0x7f8/0x1c20
[  850.277966][T23045]  ? __pfx_bpf_prog_load+0x10/0x10
[  850.278008][T23045]  __sys_bpf+0xd0d/0xd90
[  850.278035][T23045]  ? __pfx___sys_bpf+0x10/0x10
[  850.278063][T23045]  ? __fget_files+0x2a/0x420
[  850.278102][T23045]  ? ksys_write+0x242/0x270
[  850.278130][T23045]  ? __pfx_ksys_write+0x10/0x10
[  850.278158][T23045]  __x64_sys_bpf+0xba/0xd0
[  850.278179][T23045]  do_syscall_64+0x166/0x520
[  850.278201][T23045]  ? trace_irq_disable+0x3b/0x140
[  850.278218][T23045]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  850.278237][T23045]  ? clear_bhb_loop+0x70/0xc0
[  850.278266][T23045]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  850.278284][T23045] RIP: 0033:0x7fde0219e159
[  850.278302][T23045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  850.278318][T23045] RSP: 002b:00007fde030db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  850.278337][T23045] RAX: ffffffffffffffda RBX: 00007fde02425fa0 RCX: 00007fde0219e159
[  850.278350][T23045] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005
[  850.278362][T23045] RBP: 00007fde030db090 R08: 0000000000000000 R09: 0000000000000000
[  850.278374][T23045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  850.278385][T23045] R13: 00007fde02426038 R14: 00007fde02425fa0 R15: 00007fde0254fa48
[  850.278414][T23045]  </TASK>
[  850.292884][T23045] syz.5.3252: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1
[  850.292953][T23045] CPU: 0 UID: 0 PID: 23045 Comm: syz.5.3252 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  850.292978][T23045] Tainted: [L]=SOFTLOCKUP
[  850.292985][T23045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  850.292996][T23045] Call Trace:
[  850.293004][T23045]  <TASK>
[  850.293013][T23045]  dump_stack_lvl+0xe8/0x150
[  850.293044][T23045]  warn_alloc+0x24d/0x270
[  850.293072][T23045]  ? __kasan_kmalloc+0x22/0xb0
[  850.293096][T23045]  ? __pfx_warn_alloc+0x10/0x10
[  850.293122][T23045]  ? __get_vm_area_node+0x155/0x2f0
[  850.293153][T23045]  ? __get_vm_area_node+0x2a9/0x2f0
[  850.293184][T23045]  __vmalloc_node_range_noprof+0x36b/0x1540
[  850.293211][T23045]  ? __lock_acquire+0x6df/0x2e50
[  850.293258][T23045]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  850.293293][T23045]  ? bpf_prog_alloc_no_stats+0x47/0x560
[  850.293313][T23045]  __vmalloc_noprof+0xd2/0x120
[  850.293339][T23045]  ? bpf_prog_alloc_no_stats+0x47/0x560
[  850.293362][T23045]  bpf_prog_alloc_no_stats+0x47/0x560
[  850.293382][T23045]  ? bpf_prog_alloc+0x2a/0x1a0
[  850.293404][T23045]  bpf_prog_alloc+0x3c/0x1a0
[  850.293427][T23045]  bpf_prog_load+0x7f8/0x1c20
[  850.293459][T23045]  ? __pfx_bpf_prog_load+0x10/0x10
[  850.293503][T23045]  __sys_bpf+0xd0d/0xd90
[  850.293531][T23045]  ? __pfx___sys_bpf+0x10/0x10
[  850.293561][T23045]  ? __fget_files+0x2a/0x420
[  850.293600][T23045]  ? ksys_write+0x242/0x270
[  850.293627][T23045]  ? __pfx_ksys_write+0x10/0x10
[  850.293657][T23045]  __x64_sys_bpf+0xba/0xd0
[  850.293678][T23045]  do_syscall_64+0x166/0x520
[  850.293701][T23045]  ? trace_irq_disable+0x3b/0x140
[  850.293718][T23045]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  850.293738][T23045]  ? clear_bhb_loop+0x70/0xc0
[  850.293760][T23045]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  850.293779][T23045] RIP: 0033:0x7fde0219e159
[  850.293797][T23045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  850.293814][T23045] RSP: 002b:00007fde030db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  850.293833][T23045] RAX: ffffffffffffffda RBX: 00007fde02425fa0 RCX: 00007fde0219e159
[  850.293847][T23045] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005
[  850.293859][T23045] RBP: 00007fde030db090 R08: 0000000000000000 R09: 0000000000000000
[  850.293871][T23045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  850.293883][T23045] R13: 00007fde02426038 R14: 00007fde02425fa0 R15: 00007fde0254fa48
[  850.293913][T23045]  </TASK>
[  850.293920][T23045] Mem-Info:
[  850.293929][T23045] active_anon:32949 inactive_anon:11 isolated_anon:0
[  850.293929][T23045]  active_file:92 inactive_file:18612 isolated_file:0
[  850.293929][T23045]  unevictable:0 dirty:428 writeback:0
[  850.293929][T23045]  slab_reclaimable:6538 slab_unreclaimable:138378
[  850.293929][T23045]  mapped:31500 shmem:19283 pagetables:1646
[  850.293929][T23045]  sec_pagetables:0 bounce:0
[  850.293929][T23045]  kernel_misc_reclaimable:0
[  850.293929][T23045]  free:1265659 free_pcp:17448 free_cma:0
[  850.294782][T23045] Node 0 active_anon:131796kB inactive_anon:44kB active_file:368kB inactive_file:74204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:125912kB dirty:1712kB writeback:0kB shmem:77132kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12548kB pagetables:6432kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  850.294834][T23045] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:244kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:88kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  850.294878][T23045] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  850.304136][T23045] lowmem_reserve[]: 0 2487 2487 2487 2487
[  850.304175][T23045] Node 0 DMA32 free:1137684kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:131796kB inactive_anon:44kB active_file:368kB inactive_file:74204kB unevictable:0kB writepending:1712kB zspages:924kB present:3129332kB managed:2546816kB mlocked:0kB bounce:0kB free_pcp:33024kB local_pcp:16136kB free_cma:0kB
[  850.304230][T23045] lowmem_reserve[]: 0 0 0 0 0
[  850.304269][T23045] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  850.304318][T23045] lowmem_reserve[]: 0 0 0 0 0
[  850.304349][T23045] Node 1 Normal free:3909592kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:244kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:36764kB local_pcp:30552kB free_cma:0kB
[  850.304401][T23045] lowmem_reserve[]: 0 0 0 0 0
[  850.304432][T23045] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  850.304535][T23045] Node 0 DMA32: 956*4kB (UME) 735*8kB (UE) 440*16kB (UME) 412*32kB (UME) 796*64kB (UME) 516*128kB (UME) 228*256kB (UME) 93*512kB (UME) 60*1024kB (UME) 8*2048kB (UM) 197*4096kB (UM) = 1137640kB
[  850.304676][T23045] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  850.304762][T23045] Node 1 Normal: 9*4kB (UM) 9*8kB (UM) 12*16kB (UM) 9*32kB (UM) 9*64kB (UM) 9*128kB (UM) 9*256kB (UM) 3*512kB (M) 2*1024kB (M) 3*2048kB (UM) 951*4096kB (UM) = 3909644kB
[  850.304901][T23045] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  850.304917][T23045] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  850.309911][T23045] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  850.309930][T23045] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  850.309945][T23045] 37987 total pagecache pages
[  850.309953][T23045] 4 pages in swap cache
[  850.309960][T23045] Free swap  = 124336kB
[  850.309967][T23045] Total swap = 124996kB
[  850.309975][T23045] 2097051 pages RAM
[  850.309982][T23045] 0 pages HighMem/MovableOnly
[  850.309989][T23045] 428731 pages reserved
[  850.309996][T23045] 0 pages cma reserved
[  851.135090][    T9] usb 6-1: new high-speed USB device number 122 using dummy_hcd
[  851.375471][    T9] usb 6-1: device descriptor read/64, error -71
[  851.615045][    T9] usb 6-1: new high-speed USB device number 123 using dummy_hcd
[  851.749528][    T9] usb 6-1: device descriptor read/64, error -71
[  851.858042][    T9] usb usb6-port1: attempt power cycle
[  851.894241][T23062] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3256'.
[  852.053778][T23060] CUSE: unknown device info "n��|�zQC*�"
[  852.053819][T23060] CUSE: unknown device info ">2���a"�� V��|�#�y�S�io�L�����8�9�I��ܥѮ�Ç�[�<^�Q��>�nHw���'0KV�,��${\�d�
+"
[  852.053848][T23060] CUSE: unknown device info "����"
[  852.053858][T23060] CUSE: unknown device info "�L�P����t|%��I���O���Ku	G���Ǫ|�Q�U˜Dv�F��,*p�(o9�{u���[�赨���gI�P��YV"
[  852.053868][T23060] CUSE: DEVNAME unspecified
[  852.195449][    T9] usb 6-1: new high-speed USB device number 124 using dummy_hcd
[  852.215831][    T9] usb 6-1: device descriptor read/8, error -71
[  852.455060][    T9] usb 6-1: new high-speed USB device number 125 using dummy_hcd
[  852.475741][    T9] usb 6-1: device descriptor read/8, error -71
[  852.586173][    T9] usb usb6-port1: unable to enumerate USB device
[  853.761030][   T52] Bluetooth: hci2: unexpected event for opcode 0x0401
[  853.798866][T23088] kAFS: unable to lookup cell '���(,c��L'
[  854.312290][T23126] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  854.525391][ T5705] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  854.596507][T23145] binder: 23144:23145 ioctl c0306201 200000000380 returned -14
[  854.632681][T23145] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3269'.
[  854.671833][ T5705] usb 3-1: device descriptor read/64, error -71
[  854.905412][ T5705] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  855.035824][ T5705] usb 3-1: device descriptor read/64, error -71
[  855.145603][ T5705] usb usb3-port1: attempt power cycle
[  855.497333][ T5705] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  855.538688][ T5705] usb 3-1: device descriptor read/8, error -71
[  855.775100][ T5705] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  855.807472][ T5705] usb 3-1: device descriptor read/8, error -71
[  855.915741][ T5705] usb usb3-port1: unable to enumerate USB device
[  856.325527][ T1799] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  856.465311][ T1799] usb 5-1: device descriptor read/64, error -71
[  856.705539][ T1799] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  856.835072][ T1799] usb 5-1: device descriptor read/64, error -71
[  856.945363][ T1799] usb usb5-port1: attempt power cycle
[  857.285361][ T1799] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  857.308270][ T1799] usb 5-1: device descriptor read/8, error -71
[  857.326810][    T9] usb 6-1: new high-speed USB device number 126 using dummy_hcd
[  857.482063][    T9] usb 6-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64
[  857.486832][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  857.486857][    T9] usb 6-1: Product: syz
[  857.486871][    T9] usb 6-1: Manufacturer: syz
[  857.486885][    T9] usb 6-1: SerialNumber: syz
[  857.495309][    T9] usb 6-1: config 0 descriptor??
[  857.499057][    T9] hub 6-1:0.0: bad descriptor, ignoring hub
[  857.499080][    T9] hub 6-1:0.0: probe with driver hub failed with error -5
[  857.503786][    T9] f81232 6-1:0.0: f81534a converter detected
[  857.565493][ T1799] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  857.592685][ T1799] usb 5-1: device descriptor read/8, error -71
[  857.695602][ T1799] usb usb5-port1: unable to enumerate USB device
[  857.713628][    T9] usb 6-1: f81534a converter now attached to ttyUSB0
[  858.015387][    T9] usb 6-1: USB disconnect, device number 126
[  858.029843][    T9] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0
[  858.030745][    T9] f81232 6-1:0.0: device disconnected
[  858.625419][    T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  858.775123][ T5665] usb 6-1: new high-speed USB device number 127 using dummy_hcd
[  858.775262][    T9] usb 2-1: Using ep0 maxpacket: 16
[  858.776064][    T9] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  858.779481][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  858.779503][    T9] usb 2-1: Product: syz
[  858.779516][    T9] usb 2-1: Manufacturer: syz
[  858.779529][    T9] usb 2-1: SerialNumber: syz
[  858.782230][    T9] usb 2-1: config 0 descriptor??
[  858.945828][ T5665] usb 6-1: Using ep0 maxpacket: 8
[  858.953943][ T5665] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  858.965354][ T1799] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  858.998748][ T5665] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  858.998836][ T5665] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  858.998932][ T5665] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  858.998975][ T5665] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  858.999068][ T5665] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  859.117994][ T1799] usb 4-1: Using ep0 maxpacket: 16
[  859.140191][ T1799] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  859.151937][ T1799] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  859.151981][ T1799] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  859.156957][ T1799] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  859.156979][ T1799] usb 4-1: Product: syz
[  859.156992][ T1799] usb 4-1: Manufacturer: syz
[  859.157006][ T1799] usb 4-1: SerialNumber: syz
[  859.195714][    T9] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  859.209755][    T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  859.214352][    T9] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  859.214408][    T9] usb 2-1: media controller created
[  859.240103][ T1799] usb 4-1: 0:2 : does not exist
[  859.281078][ T5665] usb 6-1: GET_CAPABILITIES returned 0
[  859.287446][ T5665] usbtmc 6-1:16.0: can't read capabilities
[  859.300799][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  859.432436][    T9] zl10353_read_register: readreg error (reg=127, ret==0)
[  859.432517][    T9] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  859.432532][    T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  859.452758][    T9] usb 2-1: USB disconnect, device number 15
[  859.574826][T23242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  859.579480][T23242] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  859.652415][    T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  859.796735][ T1799] usb 4-1: USB disconnect, device number 8
[  859.925710][T14635] udevd[14635]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  860.685382][ T1799] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  860.835982][ T1799] usb 3-1: Using ep0 maxpacket: 16
[  860.842369][ T1799] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40
[  860.860491][ T1799] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  860.860540][ T1799] usb 3-1: Product: syz
[  860.860570][ T1799] usb 3-1: Manufacturer: syz
[  860.860588][ T1799] usb 3-1: SerialNumber: syz
[  860.935070][    T9] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  861.105020][    T9] usb 5-1: Using ep0 maxpacket: 32
[  861.106041][    T9] usb 5-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.00
[  861.108539][    T9] usb 5-1: config 0 has an invalid interface number: 3 but max is 0
[  861.108584][    T9] usb 5-1: config 0 has no interface number 0
[  861.108633][    T9] usb 5-1: config 0 interface 3 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  861.108656][    T9] usb 5-1: config 0 interface 3 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  861.108722][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  861.114013][    T9] usb 5-1: config 0 descriptor??
[  861.234133][T23361] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3300'.
[  861.560447][    T9] uclogic 0003:5543:0045.0020: interface is invalid, ignoring
[  861.583372][  T992] usb 6-1: USB disconnect, device number 127
[  861.649050][ T1799] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71
[  861.663229][ T1799] usb 3-1: USB disconnect, device number 26
[  861.890031][T23347] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  861.916948][T19281] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  861.923270][ T1799] usb 5-1: USB disconnect, device number 46
[  862.065168][T19281] usb 2-1: Using ep0 maxpacket: 16
[  862.065870][T19281] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  862.069652][T19281] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  862.069675][T19281] usb 2-1: Product: syz
[  862.069688][T19281] usb 2-1: Manufacturer: syz
[  862.069702][T19281] usb 2-1: SerialNumber: syz
[  862.076292][T19281] usb 2-1: config 0 descriptor??
[  862.489908][T19281] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  862.500383][T19281] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  862.508918][T19281] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  862.513087][T19281] usb 2-1: media controller created
[  862.575211][T19281] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  862.585443][T23451] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  862.721006][T19281] zl10353_read_register: readreg error (reg=127, ret==0)
[  862.721084][T19281] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  862.721098][T19281] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  862.731625][T23469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3309'.
[  862.808353][T19281] usb 2-1: USB disconnect, device number 16
[  862.879577][T23480] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3311'.
[  862.948209][T19281] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  863.031298][T23493] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3312'.
[  863.418665][T23512] netlink: 'syz.1.3316': attribute type 23 has an invalid length.
[  863.435332][T19281] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  863.560079][T23533] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3317'.
[  863.595361][T19281] usb 5-1: Using ep0 maxpacket: 8
[  863.599285][T19281] usb 5-1: unable to get BOS descriptor or descriptor too short
[  863.599329][T19281] usb 5-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=51.e7
[  863.606153][T19281] usb 5-1: unable to read config index 0 descriptor/start: -61
[  863.606185][T19281] usb 5-1: can't read configurations, error -61
[  863.725235][T19281] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  863.829031][T23549] fuse: Bad value for 'fd'
[  863.840791][T23549] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.3319'.
[  863.881067][T23549] bridge_slave_0: left allmulticast mode
[  863.885893][T19281] usb 5-1: Using ep0 maxpacket: 8
[  863.890632][T19281] usb 5-1: unable to get BOS descriptor or descriptor too short
[  863.890676][T19281] usb 5-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=51.e7
[  863.898569][T19281] usb 5-1: unable to read config index 0 descriptor/start: -61
[  863.898600][T19281] usb 5-1: can't read configurations, error -61
[  863.899101][T19281] usb usb5-port1: attempt power cycle
[  863.928296][T23549] bridge_slave_0: left promiscuous mode
[  863.928508][T23549] bridge0: port 1(bridge_slave_0) entered disabled state
[  863.982387][T23549] bridge_slave_1: left allmulticast mode
[  863.982421][T23549] bridge_slave_1: left promiscuous mode
[  863.982628][T23549] bridge0: port 2(bridge_slave_1) entered disabled state
[  864.024144][T23549] bond0: (slave bond_slave_0): Releasing backup interface
[  864.077576][T23549] bond0: (slave bond_slave_1): Releasing backup interface
[  864.146850][T23549] team0: Port device team_slave_0 removed
[  864.168191][T23549] team0: Port device team_slave_1 removed
[  864.168973][T23549] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  864.168992][T23549] batman_adv: batadv0: Removing interface: batadv_slave_0
[  864.177202][T23549] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  864.177220][T23549] batman_adv: batadv0: Removing interface: batadv_slave_1
[  864.194048][T23549] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  864.245575][T19281] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  864.272039][T19281] usb 5-1: Using ep0 maxpacket: 8
[  864.276099][T19281] usb 5-1: unable to get BOS descriptor or descriptor too short
[  864.276148][T19281] usb 5-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=51.e7
[  864.278404][T19281] usb 5-1: unable to read config index 0 descriptor/start: -61
[  864.278436][T19281] usb 5-1: can't read configurations, error -61
[  864.407087][T19281] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  864.429913][T19281] usb 5-1: Using ep0 maxpacket: 8
[  864.431759][T19281] usb 5-1: unable to get BOS descriptor or descriptor too short
[  864.431803][T19281] usb 5-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=51.e7
[  864.435869][T19281] usb 5-1: unable to read config index 0 descriptor/start: -61
[  864.435899][T19281] usb 5-1: can't read configurations, error -61
[  864.436193][T19281] usb usb5-port1: unable to enumerate USB device
[  864.474410][T23562] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3322'.
[  864.474429][T23562] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  864.605803][T23565] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3323'.
[  864.668229][T23568] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3325'.
[  864.684094][   T30] audit: type=1326 audit(1787866885.718:6151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23567 comm="syz.3.3325" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fc33d397ed7 code=0x0
[  864.859560][T23578] ip_tables: iptables: counters copy to user failed while replacing table
[  864.952531][T23582] ip_tables: iptables: counters copy to user failed while replacing table
[  864.954452][T23582] FAULT_INJECTION: forcing a failure.
[  864.954452][T23582] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  864.954482][T23582] CPU: 0 UID: 0 PID: 23582 Comm: syz.2.3328 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  864.954510][T23582] Tainted: [L]=SOFTLOCKUP
[  864.954517][T23582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  864.954528][T23582] Call Trace:
[  864.954535][T23582]  <TASK>
[  864.954543][T23582]  dump_stack_lvl+0xe8/0x150
[  864.954574][T23582]  should_fail_ex+0x410/0x560
[  864.954605][T23582]  _copy_from_user+0x2d/0xb0
[  864.954623][T23582]  ___sys_sendmsg+0x1c6/0x360
[  864.954643][T23582]  ? __lock_acquire+0x6df/0x2e50
[  864.954666][T23582]  ? __pfx____sys_sendmsg+0x10/0x10
[  864.954714][T23582]  ? __fget_files+0x2a/0x420
[  864.954737][T23582]  ? __fget_files+0x3a2/0x420
[  864.954769][T23582]  __x64_sys_sendmsg+0x1b1/0x290
[  864.954789][T23582]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  864.954825][T23582]  do_syscall_64+0x166/0x520
[  864.954847][T23582]  ? trace_irq_disable+0x3b/0x140
[  864.954864][T23582]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  864.954883][T23582]  ? clear_bhb_loop+0x70/0xc0
[  864.954905][T23582]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  864.954922][T23582] RIP: 0033:0x7fc52999e159
[  864.954939][T23582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  864.954954][T23582] RSP: 002b:00007fc52a8f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  864.954974][T23582] RAX: ffffffffffffffda RBX: 00007fc529c25fa0 RCX: 00007fc52999e159
[  864.954988][T23582] RDX: 0000000000000098 RSI: 0000200000000440 RDI: 0000000000000006
[  864.955000][T23582] RBP: 00007fc52a8f6090 R08: 0000000000000000 R09: 0000000000000000
[  864.955012][T23582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  864.955023][T23582] R13: 00007fc529c26038 R14: 00007fc529c25fa0 R15: 00007fc529d4fa48
[  864.955052][T23582]  </TASK>
[  865.085905][T19281] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  865.235944][T19281] usb 2-1: Using ep0 maxpacket: 16
[  865.237195][T19281] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  865.241828][T19281] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  865.241916][T19281] usb 2-1: Product: syz
[  865.241929][T19281] usb 2-1: Manufacturer: syz
[  865.241943][T19281] usb 2-1: SerialNumber: syz
[  865.279020][T19281] usb 2-1: config 0 descriptor??
[  865.465250][ T5665] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  865.699834][T19281] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  865.712039][T19281] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  865.721495][T19281] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  865.721546][T19281] usb 2-1: media controller created
[  865.768309][T19281] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  866.355703][T19281] zl10353_read_register: readreg error (reg=127, ret==0)
[  866.355778][T19281] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  866.355809][T19281] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  866.398925][T23571] ------------[ cut here ]------------
[  866.398961][T23571] usb 2-1: BOGUS control dir, pipe 80001180 doesn't match bRequestType c0
[  866.399002][T23571] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1057/0x18b0, CPU#0: syz.1.3326/23571
[  866.423579][T23571] Modules linked in:
[  866.427940][T23571] CPU: 0 UID: 0 PID: 23571 Comm: syz.1.3326 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  866.439642][T23571] Tainted: [L]=SOFTLOCKUP
[  866.444401][T23571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  866.454801][T23571] RIP: 0010:usb_submit_urb+0x1100/0x18b0
[  866.460681][T23571] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89
[  866.480745][T23571] RSP: 0018:ffffc9000931f718 EFLAGS: 00010246
[  866.486879][T23571] RAX: 0000000000000000 RBX: ffff88805f48fb00 RCX: 0000000080001180
[  866.494856][T23571] RDX: ffff8880754bf180 RSI: ffffffff8cc50b20 RDI: ffffffff9087eaa0
[  866.502882][T23571] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000
[  866.511303][T23571] R10: ffffc9000931f800 R11: fffff52001263f0c R12: 1ffff1100561d3a4
[  866.519352][T23571] R13: ffff88802b0e9d20 R14: ffff8880754bf180 R15: 0000000080001180
[  866.527455][T23571] FS:  00007f6c5d6a46c0(0000) GS:ffff888124cde000(0000) knlGS:0000000000000000
[  866.537349][T23571] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  866.543943][T23571] CR2: 0000200000000100 CR3: 0000000049b9c000 CR4: 00000000003526f0
[  866.552383][T23571] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000460
[  866.560407][T23571] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  866.568732][T23571] Call Trace:
[  866.572022][T23571]  <TASK>
[  866.574991][T23571]  usb_start_wait_urb+0x13f/0x5b0
[  866.580043][T23571]  ? __pfx_usb_start_wait_urb+0x10/0x10
[  866.585663][T23571]  usb_control_msg+0x234/0x3e0
[  866.590452][T23571]  dtv5100_i2c_msg+0x231/0x2f0
[  866.595782][T23571]  dtv5100_i2c_xfer+0x1a5/0x610
[  866.600710][T23571]  __i2c_transfer+0x7bf/0x1fe0
[  866.605749][T23571]  ? rt_mutex_lock_nested+0x167/0x1c0
[  866.611147][T23571]  ? i2c_transfer+0xc7/0x2d0
[  866.615806][T23571]  i2c_transfer+0x1cb/0x2d0
[  866.620338][T23571]  i2c_transfer_buffer_flags+0x10d/0x1a0
[  866.626318][T23571]  ? __pfx_i2c_transfer_buffer_flags+0x10/0x10
[  866.632503][T23571]  ? _copy_from_user+0x94/0xb0
[  866.637923][T23571]  i2cdev_write+0x113/0x1e0
[  866.642532][T23571]  vfs_writev+0x4bb/0x990
[  866.647346][T23571]  ? __pfx_i2cdev_write+0x10/0x10
[  866.652394][T23571]  ? __pfx_vfs_writev+0x10/0x10
[  866.657715][T23571]  ? __fget_files+0x2a/0x420
[  866.662347][T23571]  ? __fget_files+0x3a2/0x420
[  866.667078][T23571]  ? __fget_files+0x2a/0x420
[  866.671689][T23571]  do_writev+0x154/0x2e0
[  866.675995][T23571]  ? __pfx_do_writev+0x10/0x10
[  866.680780][T23571]  do_syscall_64+0x166/0x520
[  866.685767][T23571]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  866.691864][T23571]  ? clear_bhb_loop+0x70/0xc0
[  866.696637][T23571]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  866.702572][T23571] RIP: 0033:0x7f6c5c79e159
[  866.707022][T23571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  866.726994][T23571] RSP: 002b:00007f6c5d6a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  866.735489][T23571] RAX: ffffffffffffffda RBX: 00007f6c5ca25fa0 RCX: 00007f6c5c79e159
[  866.744113][T23571] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000004
[  866.752989][T23571] RBP: 00007f6c5c835024 R08: 0000000000000000 R09: 0000000000000000
[  866.761791][T23571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  866.771309][T23571] R13: 00007f6c5ca26038 R14: 00007f6c5ca25fa0 R15: 00007f6c5cb4fa48
[  866.779898][T23571]  </TASK>
[  866.782947][T23571] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  866.790232][T23571] CPU: 0 UID: 0 PID: 23571 Comm: syz.1.3326 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  866.801171][T23571] Tainted: [L]=SOFTLOCKUP
[  866.805493][T23571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  866.815534][T23571] Call Trace:
[  866.818820][T23571]  <TASK>
[  866.821755][T23571]  vpanic+0x56d/0xa60
[  866.825759][T23571]  ? __pfx__printk+0x10/0x10
[  866.830358][T23571]  ? __pfx_vpanic+0x10/0x10
[  866.834872][T23571]  ? is_bpf_text_address+0x292/0x2b0
[  866.840172][T23571]  ? is_bpf_text_address+0x26/0x2b0
[  866.845397][T23571]  panic+0xc5/0xd0
[  866.849142][T23571]  ? __pfx_panic+0x10/0x10
[  866.853591][T23571]  __warn+0x315/0x4c0
[  866.857604][T23571]  ? usb_submit_urb+0x1057/0x18b0
[  866.862647][T23571]  ? usb_submit_urb+0x1057/0x18b0
[  866.867685][T23571]  __report_bug+0x276/0x570
[  866.872288][T23571]  ? usb_submit_urb+0x1057/0x18b0
[  866.877330][T23571]  ? __pfx___report_bug+0x10/0x10
[  866.882366][T23571]  ? stack_trace_save+0xa9/0x100
[  866.887335][T23571]  ? kasan_save_track+0x4f/0x80
[  866.892202][T23571]  report_bug_entry+0x19b/0x290
[  866.897065][T23571]  ? usb_submit_urb+0x1100/0x18b0
[  866.902106][T23571]  ? usb_submit_urb+0x1105/0x18b0
[  866.907146][T23571]  handle_bug+0xce/0x200
[  866.911408][T23571]  exc_invalid_op+0x1a/0x50
[  866.915927][T23571]  asm_exc_invalid_op+0x1a/0x20
[  866.920790][T23571] RIP: 0010:usb_submit_urb+0x1100/0x18b0
[  866.926444][T23571] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89
[  866.946061][T23571] RSP: 0018:ffffc9000931f718 EFLAGS: 00010246
[  866.952133][T23571] RAX: 0000000000000000 RBX: ffff88805f48fb00 RCX: 0000000080001180
[  866.960108][T23571] RDX: ffff8880754bf180 RSI: ffffffff8cc50b20 RDI: ffffffff9087eaa0
[  866.968082][T23571] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000
[  866.976057][T23571] R10: ffffc9000931f800 R11: fffff52001263f0c R12: 1ffff1100561d3a4
[  866.984030][T23571] R13: ffff88802b0e9d20 R14: ffff8880754bf180 R15: 0000000080001180
[  866.992028][T23571]  ? usb_submit_urb+0x1091/0x18b0
[  866.997085][T23571]  usb_start_wait_urb+0x13f/0x5b0
[  867.002132][T23571]  ? __pfx_usb_start_wait_urb+0x10/0x10
[  867.007706][T23571]  usb_control_msg+0x234/0x3e0
[  867.012487][T23571]  dtv5100_i2c_msg+0x231/0x2f0
[  867.017269][T23571]  dtv5100_i2c_xfer+0x1a5/0x610
[  867.022149][T23571]  __i2c_transfer+0x7bf/0x1fe0
[  867.026936][T23571]  ? rt_mutex_lock_nested+0x167/0x1c0
[  867.032318][T23571]  ? i2c_transfer+0xc7/0x2d0
[  867.036917][T23571]  i2c_transfer+0x1cb/0x2d0
[  867.041433][T23571]  i2c_transfer_buffer_flags+0x10d/0x1a0
[  867.047078][T23571]  ? __pfx_i2c_transfer_buffer_flags+0x10/0x10
[  867.053243][T23571]  ? _copy_from_user+0x94/0xb0
[  867.058011][T23571]  i2cdev_write+0x113/0x1e0
[  867.062539][T23571]  vfs_writev+0x4bb/0x990
[  867.066878][T23571]  ? __pfx_i2cdev_write+0x10/0x10
[  867.071917][T23571]  ? __pfx_vfs_writev+0x10/0x10
[  867.076786][T23571]  ? __fget_files+0x2a/0x420
[  867.081390][T23571]  ? __fget_files+0x3a2/0x420
[  867.086079][T23571]  ? __fget_files+0x2a/0x420
[  867.091645][T23571]  do_writev+0x154/0x2e0
[  867.095901][T23571]  ? __pfx_do_writev+0x10/0x10
[  867.100683][T23571]  do_syscall_64+0x166/0x520
[  867.105284][T23571]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  867.111353][T23571]  ? clear_bhb_loop+0x70/0xc0
[  867.116036][T23571]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  867.121932][T23571] RIP: 0033:0x7f6c5c79e159
[  867.126348][T23571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  867.145960][T23571] RSP: 002b:00007f6c5d6a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  867.154381][T23571] RAX: ffffffffffffffda RBX: 00007f6c5ca25fa0 RCX: 00007f6c5c79e159
[  867.162355][T23571] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000004
[  867.170326][T23571] RBP: 00007f6c5c835024 R08: 0000000000000000 R09: 0000000000000000
[  867.178299][T23571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  867.186270][T23571] R13: 00007f6c5ca26038 R14: 00007f6c5ca25fa0 R15: 00007f6c5cb4fa48
[  867.194258][T23571]  </TASK>
[  867.197543][T23571] Kernel Offset: disabled
[  867.201881][T23571] Rebooting in 86400 seconds..