last executing test programs:

12.314436302s ago: executing program 4 (id=821):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500200009078000021251514aa40ae0e97d259288b840bd264c5c980391b390e71c263a00ae5e4c2bb9c0e2c101d90cb68633d5d49726dcba7000000003400000000000000"], 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x0)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
r4 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x1, 0x3a1}, &(0x7f0000000040)=<r5=>0x0, &(0x7f0000000080)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r4, 0x47ba, 0x3e80, 0x0, 0x0, 0x0)
socket(0x18, 0x1, 0x0)
socket(0x800000018, 0x1, 0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000)
syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f00003f4000/0x2000)=nil, 0x2000, 0x5, &(0x7f0000000000)=0x9, 0xc, 0x0)

12.038287238s ago: executing program 1 (id=822):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x169a82, 0x0)
sendfile(r2, r2, 0x0, 0x7)
quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000202, 0x0, 0x0)
munlockall()
madvise(&(0x7f0000597000/0x1000)=nil, 0x1000, 0x13)
open(0x0, 0x0, 0x0)
epoll_create1(0x80000)
syz_emit_ethernet(0x0, 0x0, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = getpid()
r5 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000800)={{0x4, 0x0, 0x9, 0x8001, 'syz0\x00', 0xc22}, 0x2, 0x200, 0x9, r4, 0x0, 0x7fff, 'syz1\x00', 0x0})
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r5, 0xc0405519, &(0x7f0000000bc0)={0x5, 0x1, 0x2, 0xe2, 'syz1\x00', 0x4})
shutdown(r3, 0x2)
madvise(&(0x7f000021e000/0x2000)=nil, 0x2000, 0x15)
mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x105)
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000040)={{0x1, 0x2, 0x7ffffffd}})
ioctl$SNDRV_TIMER_IOCTL_TREAD64(r6, 0x400454a4, 0x0)
r7 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x42782, 0x0)
ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000000180))
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

10.419126549s ago: executing program 1 (id=826):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = msgget$private(0x0, 0x0)
msgsnd(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="03008000", @ANYRES64=r1], 0x8, 0x800)
msgrcv(r1, 0x0, 0x0, 0x2, 0x3800)
syz_pidfd_open(0x0, 0x0)
pipe2(&(0x7f00000000c0), 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x70bd25, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xfff1}, {0x9, 0xffff}, {0x3, 0xfffffffffffffffe}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r6 = socket(0x10, 0x3, 0x0)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x70bd27, 0x0, [@sadb_address={0x3, 0x6, 0x33, 0x0, 0x0, @in={0x2, 0x1000}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9, 0xfc, 0xe0000001}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x2, 0x8, 0x8, 0x0, '4'}]}, 0x60}, 0x1, 0x7}, 0x0)
write(r6, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14)
r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0xfffffffffffffffd, 0xfffffffffffff21d})
ioctl$SG_BLKTRACETEARDOWN(r8, 0x1276, 0x20000000)
recvmmsg(r6, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000a80)={{0x12, 0x1, 0x0, 0xa6, 0xdc, 0x34, 0x40, 0x61d, 0xc020, 0xa2bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x93, 0xb2, 0x81, 0x0, [], [{{0x9, 0x5, 0x5, 0x390998da063e1313}}]}}]}}]}}, 0x0)
r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x2d8d40)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800621060090390000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000003e0000003afcc1ef13"], 0x34}, 0x1, 0x0, 0x0, 0x24040044}, 0xc000)

9.32113536s ago: executing program 0 (id=828):
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket(0x1, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400003366"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r2}, 0x20)
sendmmsg$unix(r2, &(0x7f0000001680), 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff)
close(r5)
execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0)
r6 = openat$binfmt(0xffffffffffffff9c, r4, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x6)
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa2308004d"], 0x0)
close(r6)

8.852489311s ago: executing program 4 (id=829):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r1 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x8444, 0x13580}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0xa, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2001, 0x1, {0x1}})
io_uring_enter(r1, 0xe85, 0x0, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0], 0x1})
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2})
ioctl$VIDIOC_REQBUFS(r0, 0xc0585609, &(0x7f0000000280)={0x0, 0xa})
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000030c0), 0x0)
socket(0x11, 0x3, 0x0)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
dup(r5)
socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8)
r6 = gettid()
timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r6}, &(0x7f0000000080))
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2})
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r9 = dup3(r8, r7, 0x0)
read$FUSE(r9, &(0x7f00000008c0)={0x2020}, 0x2020)
timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0)
openat$rdma_cm(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000000240)={0x0, 0x0, 0x4, 0x1, 0x50084801})
r10 = socket$inet(0x2, 0x80001, 0x84)
setsockopt$sock_int(r10, 0x1, 0x12, &(0x7f0000000200)=0xffffffff, 0x4)
setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f0000000180)={0x87, @loopback, 0x4e21, 0x3, 'rr\x00', 0x20, 0xa82, 0x6}, 0x2c)

7.649393971s ago: executing program 4 (id=830):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback, 0xffffffff}, 0x1c)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000200)=0x3fd0, 0x4)
gettid()
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0)
ftruncate(r4, 0x8800000)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x53)
close(r5)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
setsockopt$inet_tcp_int(r6, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4)
connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f00000000c0)=0x6, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3)
recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
sendfile(r5, r4, 0x0, 0x578410ed)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x83, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8800)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x3, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)

7.511894656s ago: executing program 0 (id=831):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50)
syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x20)
dup2(r2, r0)
flock(r0, 0x6)

7.018117038s ago: executing program 0 (id=833):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback, 0xffffffff}, 0x1c)
gettid()
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0)
ftruncate(r5, 0x8800000)
r6 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x53)
close(r6)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4)
connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
setsockopt$sock_int(r7, 0x1, 0x7, &(0x7f00000000c0)=0x6, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3)
recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
sendfile(r6, r5, 0x0, 0x578410ed)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x83, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8800)
socket$tipc(0x1e, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)

6.364791168s ago: executing program 3 (id=834):
syz_open_dev$loop(&(0x7f0000000240), 0x825, 0x8a280)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000015000100000000000000000001000000", @ANYRESDEC], 0x1c}}, 0x4004081)
epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
rmdir(0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xc)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c)
r5 = gettid()
timer_create(0x7, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x304}, "480ca6eda49ed6a6", "3a2cc8b276a753b0e23e2a8436b0e1d53d11b70c57abe2e932240e766d3aebfd", "a0eb068e", "e96e232f2004a832"}, 0x38)
recvfrom$inet6(r4, &(0x7f0000000240)=""/169, 0xa9, 0x40010002, 0x0, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r4, 0x0, r6, 0x0, 0x7ffd, 0xe)
setpriority(0x1, 0xffffffffffffffff, 0x2)
ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r6, 0x4068aea3, &(0x7f0000000000)={0xdb, 0x0, 0x8})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
syz_open_dev$video4linux(&(0x7f0000000140), 0x400, 0x40)

5.969445657s ago: executing program 1 (id=835):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x169a82, 0x0)
sendfile(r2, r2, 0x0, 0x7)
quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000202, 0x0, 0x0)
munlockall()
madvise(&(0x7f0000597000/0x1000)=nil, 0x1000, 0x13)
open(0x0, 0x0, 0x0)
epoll_create1(0x80000)
syz_emit_ethernet(0x0, 0x0, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = getpid()
r5 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000800)={{0x4, 0x0, 0x9, 0x8001, 'syz0\x00', 0xc22}, 0x2, 0x200, 0x9, r4, 0x0, 0x7fff, 'syz1\x00', 0x0})
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r5, 0xc0405519, &(0x7f0000000bc0)={0x5, 0x1, 0x2, 0xe2, 'syz1\x00', 0x4})
shutdown(r3, 0x2)
madvise(&(0x7f000021e000/0x2000)=nil, 0x2000, 0x15)
mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x105)
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000040)={{0x1, 0x2, 0x7ffffffd}})
ioctl$SNDRV_TIMER_IOCTL_TREAD64(r6, 0x400454a4, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x42782, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

5.940831583s ago: executing program 2 (id=836):
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x358, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x30}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x9}, @NL80211_ATTR_FILS_ERP_REALM={0x98, 0xfa, "ef46f809296ab80426fc9db50b38c36eb30a862e50683fc573ea870b40054adc092c4c1742b02312dffcda2dea4a8211fe8713b5c11fadacc1b382afd86fa654d0b85f5d5cdf11600e17769d5c7c9e2a92409feedce793276a2938e8ffa101e621af363cd66651955386dbcbca99d93dbdfb382508f5be68286e39d4aac1bf077911a1efeff5f4c4295a095ab53a5d9499909f1b"}, @NL80211_ATTR_FILS_ERP_RRK={0x5, 0xfc, "e6"}, @NL80211_ATTR_FILS_ERP_RRK={0xd9, 0xfc, "6ef8fa6f9e6549bf85c0c3d1fe7bb3d8cc2b6d91ae03ecfad69ae92318c6a1dd1bd45afd5c568e0497a34593572b7f901db4e825e69cb6e2620394dc0bc2d0fa44e62f940b1bdd38df80797699f32adff71c2e7446dbe36b88519960bd1ec21fca89b739e0297b7157f3633f55f041af4f7ea35008421766770aa8b41de0283a9bf0727e3167907404970e3a6f52028621de34b3a0246b20b4e973f9173e5b9b000ee854a7d488365f792680a086c1f53708a4c7e67b47cd8ead07b644df1d857b80a16dd7052c9907d46d28077d049312321bb9d9"}, @NL80211_ATTR_FILS_ERP_REALM={0xfa, 0xfa, "e4e0ec2d869fe2d94e21be10b8070022573407386f38b2d2a0847a61c7338f6be1dd97528d963dab3338ee6fe6060934645f684da6f096c76d3993ab1c62757e5d0f88e9a69eddd846c02b0b619398309a455e9212995f83e6656d9a1bdd49fbf3cbd9377e8cd0d16ce4f07d73c2efafedb516bf57e2c4f946bc09cfea7dbb87d0e477a17170508b5debe618c120fc41a2104c42fd941c67d115d9e4599946e3a9d4883cee1012d28ab665682318f434797cff59c104a4695d37e0dae77cb7d778326cf29335593f53f6a57c64b62c00c116babe8495183626fe7ac92c77d083198742f399559ca01997249708000000000000000000"}], @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x4}], @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x72, 0xfc, "17251f9d1e1a923a44ef372a4ec732a9f9229cdfe0362f3fc9ef5e9ff9827987e958f92d1b7b7f93a015f2d49fa624b828054906984b34762b1320ebb17567d73edd0bdd7046b08628054f01ca4f0a9517a40f144eaa4a0031c0a6d19dff6354bc0a969e59ad8a8735a18f612e83"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}, @NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "16b8e3bc81"}, @NL80211_ATTR_FILS_ERP_REALM={0x1d, 0xfa, "3fd1b536b5e57ae1fc7821f936ee5a1e6eefa806d610b54d0f"}]]}, 0x358}, 0x1, 0x0, 0x0, 0x24040041}, 0x11)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0xfffffffe, 0x0, 0x0, 0x40, 0x2, 0x0, 0x0, 0x0, 0x10, 0x66}}, 0x50)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_int(r2, 0x29, 0x11, &(0x7f0000000000)=0x102, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14008051}}, {{&(0x7f00000000c0)=@file={0x1, './file0/file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40080}}], 0x2, 0x0)
syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000440))
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
r6 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e24, 0x7043, @empty, 0x7}}, 0xffff, 0x51d}, 0x90)
ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000080)=0x200000000)
fcntl$setstatus(r4, 0x4, 0x42800)
read$FUSE(0xffffffffffffffff, &(0x7f0000004d80)={0x2020}, 0x2020)

5.448153333s ago: executing program 4 (id=837):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000040)={0x1a, 0x6, 0xfe})
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback, 0xffffffff}, 0x1c)
gettid()
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0)
ftruncate(r3, 0x8800000)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x53)
close(r4)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
recvfrom$inet(r5, 0x0, 0x0, 0x720, 0x0, 0x0)
sendfile(r4, r3, 0x0, 0x578410ed)

5.086085547s ago: executing program 3 (id=838):
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
syz_open_dev$loop(&(0x7f0000000080), 0x45ffffa, 0x281)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500004000002020207b1af8ff00001e00bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x3d, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x5, 0x20000}, 0x10}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800800000000000850a602200000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (fail_nth: 8)

5.007081787s ago: executing program 0 (id=839):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500200009078000021251514aa40ae0e97d259288b840bd264c5c980391b390e71c263a00ae5e4c2bb9c0e2c101d90cb68633d5d49726dcba7000000003400000000000000"], 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x0)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
r4 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x1, 0x3a1}, &(0x7f0000000040)=<r5=>0x0, &(0x7f0000000080)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r4, 0x47ba, 0x3e80, 0x0, 0x0, 0x0)
socket(0x18, 0x1, 0x0)
socket(0x800000018, 0x1, 0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f00003f4000/0x2000)=nil, 0x2000, 0x5, &(0x7f0000000000)=0x9, 0xc, 0x0)

4.899181885s ago: executing program 2 (id=840):
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r2 = shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffc000/0x2000)=nil)
shmctl$SHM_STAT_ANY(r2, 0xf, &(0x7f0000000000)=""/206)
shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ffe000/0x2000)=nil)
shmctl$SHM_LOCK(r2, 0xb)
shmctl$IPC_RMID(0x0, 0x0)
syz_open_dev$usbfs(0x0, 0x76, 0x101301)
openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c5840, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000e00)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000680)=""/144, 0x90}], 0x5}}], 0x1, 0x20, 0x0)
sendmmsg$unix(r6, &(0x7f0000000680), 0x4924924924925c6, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02})
readv(r4, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4)
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1})
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local})
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000180)=@multiplanar_fd={0x593, 0x0, 0x4, 0x4, 0x1, {}, {0x5, 0x0, 0x6, 0xb7, 0xe, 0xf8, "48b3dafa"}, 0xe0ed, 0x4, {&(0x7f0000000240)=[{0x81, 0x5e4a, {}, 0x6}, {0x81, 0xa, {}, 0x1ff}]}, 0x30d})

4.329174818s ago: executing program 3 (id=841):
r0 = syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b34000000000000000000000924030000000000000924050000f8211cfd0924030500000004000724050401"], 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x85, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcd6, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$USBDEVFS_FREE_STREAMS(r2, 0x802c550a, &(0x7f0000000000)=ANY=[])
ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550c, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="006faa7c7eb24f128432"]}, 0x0)

4.190535337s ago: executing program 4 (id=842):
r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862)
msgctl$IPC_RMID(0x0, 0x0)
sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x10)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000)
setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, '\a\x00', "9ce66ebc3914e20b330f88d190ef00", '\x00', "f8dde5bf3eba23db"}, 0x28)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0022220000009623130600000b53740f6ad51b71c608cabf8ed027983ff62a9000070900be00830000000057a90da1f60b00000800"], 0x0}, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xfd048e9f94b856fd, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_int(r3, 0x1, 0x3c, 0x0, &(0x7f00000005c0))
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="b4e3476c014f103400005015eaeb3ef28e360000"], 0x0, 0x5}, 0x94)
r4 = syz_io_uring_setup(0xcaf, &(0x7f0000000100)={0x0, 0xb601, 0x1, 0x5, 0x9c3}, &(0x7f0000000280)=<r5=>0x0, &(0x7f00000000c0))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x44, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x18, 0x0, {0x1}})
io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0)
r6 = getpid()
sched_setscheduler(r6, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000080)='4', 0xfee1}, {&(0x7f0000000100)="a7", 0x1}, {&(0x7f0000000240)="9f", 0x1}, {&(0x7f0000000300)='b', 0x1}], 0x10000000000000e0, 0x1)
openat$ttyprintk(0xffffff9c, &(0x7f0000000340), 0x44120, 0x0)
ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e, 0xfffe, 0x3}})
r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0xa0000)
ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000000100)=""/101)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))

4.072757207s ago: executing program 1 (id=843):
r0 = creat(&(0x7f0000000280)='./file0\x00', 0x96ab9c7d55edd554)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000001080)={0x200000, 0x200000})
r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
lsetxattr$security_capability(&(0x7f0000000340)='./file0\x00', &(0x7f00000000c0), &(0x7f00000002c0)=@v2={0x2000000, [{0x2, 0xee9}, {0xe8000000, 0xffbfc000}]}, 0x14, 0x1)
lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0)
setsockopt$inet_mreq(r1, 0x0, 0x20, &(0x7f0000000700)={@private=0xa010100, @dev={0xac, 0x14, 0x14, 0xc}}, 0x8)
write$binfmt_elf32(r0, &(0x7f0000000540)=ANY=[@ANYRESHEX=r1], 0x78)
close(r0)
r2 = msgget$private(0x0, 0x11)
msgsnd(r2, &(0x7f0000000740)={0x0, "55ebea1bab16891b004c92356088d8de7fe0e1f2302db0200e4d2e17eb844e37bcb7b34193bc7b3d76973ab352cc361fe44aca084661beaaffab0c1c99f973cc218ad6d3b0d3ec87f729b37ce540afd9be"}, 0x55, 0x800)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#Y?0W\xb3W\xd2\xbfP\xee'}, 0x30)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
rmdir(&(0x7f0000000000)='./file0\x00')
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x5, 0x2}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000180)="c1c142e1ec361dcdfec89d3bf0d6473d1b9dda7655021d3336e9b762af8d0c57cc494e2d2af192a035a4ed4f5e07b68c6ec6029fae8b97c29fd28866deb108a924972d82e2199c076e58b98e399115368f495180f2df4e7bfa381117d93f093a18b347f3d0419b6b0afeb7ec2bd0d4c6aab23e3b763f43ddc2ada522fc6075285f3dc56c9de6cdfd9ba8cf087ed5f3976f7a454308035dda476c09153ae6fb00f3fc4b8cb22528f2dcbe85e454f7cd7a03f15a80080e8a4fb2fa7f6f3b85803317a8f61d62eaa3c15dbad0d85cd54940", 0xd0}, {&(0x7f0000000380)="52c56f9cfc4eb379d8309b81bfe21f2d086bf8c2e448e71dbe17ee7e3beb41cf941bb7ac4c7abd0792eca1e57e99c53ef367cc9075897d274564533be88b4298ed30fa8d3693964409cf1fd404a2842d6ca56bdbbe944a0310457deaf3ef85a320b38b2d27676446aba0b21f094d292559cef84285e3031d8116bd21150a0cd9db8c3070ad37a7e020a73e76944af5991c0d0bc1a52d05d02a23ccad87c21975a249226096f30d7a918c973a9ea6110255e4fba665cd6bfd22b53a045a6ba99ddcb7b67e0736e5530b8ba1cce02a", 0xce}, {&(0x7f0000000040)="7236f4e03d97fbef7ec5e0032215716f238e5bc0e290b0bdace1a6d8e2054dfda7a5bcadd43b", 0x26}, {&(0x7f0000000480)="8ef513640e4edb04b542ef91d6708440a0d3407d81a249a6af4653780b1ed277d23a5f833c9b041caa6969c9c47853113a5eac60ba9efa2026b79e117c32c3be8dd05799a7bacfe8a7c8b93475cc897b1d68ef3a7fed7101259c72271e917f3540f467d4dd9db6746b22ac5a44dbb01dedf4fd254acd03964ffc056287029e5960e5d289456744115a452c997b", 0x8d}, {&(0x7f0000000580)="848ee3d74cedc511a9fe6f76d5e2d1f7ef7c9232256bee1e2a3ef78fe46780b72f2479d010469f93dbc3963be15dd9994324a8", 0x33}, {&(0x7f00000005c0)="b0e17cbe463755d2dcd3bde429f1982b80f653bdec5fef738d9ca1d75b2a7b9c8505c0b1ef184eaed42e8700f8b66a0842b0bff966be997ddc8d80a7518b2141c43ceb827e5b7a5e888a02b65551297becc1d2b3de9761deee5a333742bac2c4aa4d038a8ec0812159b873d22d5bcfc94e2a459d46284ea8cc4adfb5629dba3aa609ab76699990eb6d483ec1e8ff90c51db98b692674044d295ec55e006209d2b3e09e21eb25a1f7c21bb600d78602e509", 0xb1}], 0x6, &(0x7f0000002600)=[{0x19c, 0x101, 0x2, "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"}, {0x40, 0x116, 0x7, "05dc810453796327f199f644746e9456158314220702b418a0182e0bca142efd48899adeefff0e71e1adf3f52dd87d1195"}, {0x58, 0x6, 0x8, "3c086c5fa79813e13c425c1108b1983a14f3e433c8fdb416067c7ca643171d42129af29f485ecc77c84a27c665b1fe20e65e718bd6b738cf13d9ee509a1dcf060a6d27d8aa3b238f8561"}, {0x54, 0x111, 0x65, "bbb1b7d4cfbef4c35c693001c655dfd258cb9f2c28a890ced112c44d987084f6143e58a17e2988a6bc3470d1a7b84dba2a6ffc86602c39d93678090b68823eddfad4eef89230fc"}, {0x100c, 0x84, 0x7fffffff, "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"}, {0xf0, 0x102, 0x1000, "09603e1cfd5b35ad8d334e8c8f01382b98ac2a9118019da9785d85026d964557f589820ec823c8ae1e2e7a988f49dae0a9b3cac5ad424dc7d63631a9af9abdb5291e6a312dace65365048eee8a24ccb39a74ac7e7f729a17fbb7a3357e9ee959f6a0cca75dca8ba142b83495c7a866aee0a805a1e5c7c079ed74140b4636b219707e664e6dadd2e0dc77a9626c0c413a9c840f5990f0403abd9968c7404fb6c9718f36bd3071377f2c813681454dfb38e39da7d6172bf8f085e5d5d1b000325d2b2a912cdc17081080ffeff2ed59e9ed18e1e617cdbef41d6e9183086b6ef0b95cdb1f83"}, {0xf0, 0x110, 0x3ff, "be998a6984bdd6d6ca463eecfb993683c912a9f4bdb94662d7f0070d5fbc52275f0e7cb6b0f53b6d186e58d69ef28d3a435db85b2749b0f53b454f74f7e1fdb8c049b4616dbaf1097dc8941aa9864c9f01379e7b90741c22fb11e4ee6c382599a36dc0bc296f235725a086b7ee4fb49a2553bbe8668f0e7490dc841cd5d348b84637fad06e83f2fa6987e2833cd9761092a0112009043c974c41f739e3f5fc4bbd2e421ff7bb05cdf3b0f73ca1549e4bcc9baffe1415a7b8f3c08de20ee746b23f1b2ff827d6ed213966013646da6c1e1843aec2fc659454e27da2f5df98b5b2bc20d5"}, {0x58, 0x0, 0x80000001, "b35718057c8e06ccbc30bfb5b20b8bfd624387fc17bbfc52440f8ef0b51cbfc68a9cda94d549e2c0f59e86c2e10196c297d793b9e772aea61396b1cd3c3be73b5024754aeba28a33a359"}], 0x14cc}, 0x40000)
execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

3.924106477s ago: executing program 1 (id=844):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback, 0xffffffff}, 0x1c)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000200)=0x3fd0, 0x4)
gettid()
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0)
ftruncate(r4, 0x8800000)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x53)
close(r5)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
setsockopt$inet_tcp_int(r6, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4)
connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f00000000c0)=0x6, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3)
recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
sendfile(r5, r4, 0x0, 0x578410ed)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x83, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8800)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x3, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)

3.786945275s ago: executing program 0 (id=845):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r0, 0x1, 0x5, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000100001005d2f0000000000000500000a60000000060a0b0400000000000000000200000234000480300001800b00010074617267657400002000028008000240000000010800030002b511ff0c0001004e465155455545000900010073797a30000000000900020073797a32"], 0x88}, 0x1, 0x0, 0x0, 0x4880}, 0x0) (fail_nth: 8)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00')
pwritev(r2, &(0x7f0000000500)=[{&(0x7f0000000540)="30467648b3b0cf471e6faa00000000000018069a6cdb0cb5d155270960841c853d9a6ccf762ecb153c6481cb8fb3c25c147ac14007b4529b2abbbf98ff8b86f61ac81cfaebbf4eebb9fe348bf7d51c210107c540cebc45a9c6bbfda9a9afb17916bcf2c209eea112efc0069c02e4e8c24a1e381dbd5f1d7ec8d279a7da4217e1d65b554067a2cf4143f8ccec1ed2f3e069bef144b34a6ece06ac8e4a70d2c752d8c3e3ddd268f93ab8e3cd01353640ca2632f442fe3184a7f97c83318726336d2e9c8f4c0547ce74a276c2cf8220648bebe0ff4e22fb4dd7a6b01c9381883fff5f1f50", 0xe3}], 0x1, 0x0, 0xfffffffe)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
msgrcv(0x0, &(0x7f0000000640)={0x0, ""/171}, 0xaf, 0x3, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20044040}, 0x24008004)
ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000340)={0x60, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0xd0000000000000, &(0x7f0000000300), 0x0, 0x0, 0x4, 0x10, 0x21, 0x2})
r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
syz_usb_connect(0x5, 0x51, &(0x7f0000000040)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905ee63000000000009050300000000000009050cf2000002060209050f000000400000090507"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0})
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="28d3f3f07d3d394e7cdcd50000", @ANYRES16=r5, @ANYBLOB="010000000000fddbdf255500000008000300", @ANYRES32=r6, @ANYBLOB="0c0099000800000004000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000014}, 0x2404c088)
sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80010410}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0xfffffffffffffe5c, r5, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x44100}, 0x80a0)
ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f0000000480)={0x3, 0x0, [{0x80000019, 0x3, 0x2f272775020e091c, 0x96, 0x3, 0x7, 0x6}, {0xb, 0x1, 0x1, 0x4, 0x4, 0x7fff, 0x7}, {0xd, 0xfdc, 0x5, 0xe, 0x800, 0x80, 0xffff}]})

3.677104638s ago: executing program 3 (id=846):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001c00357428bd7000fcdbdf25020000", @ANYRES32=r2, @ANYBLOB="1000a206080001000000000008000f0005"], 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x200080c0)
r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008d7460001"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, r4}, 0x38)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000000)={0x1})
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x4020565b, &(0x7f00000001c0)={0x8000000, 0x0, 0x2})
r5 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x28880, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x4000000000005)
ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000094}]})
ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x2, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}})
ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000100)=0x1)
r9 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r9, &(0x7f00000005c0), 0x10)
recvmmsg(r9, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000340)=""/97, 0x38}], 0x2}, 0x7f}], 0x1, 0x10103, 0x0)
sendmsg$can_bcm(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0)
ioctl$FITRIM(r9, 0xc0185879, &(0x7f0000000200)={0x0, 0x5, 0x1})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)

2.3552294s ago: executing program 2 (id=847):
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x358, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x30}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x9}, @NL80211_ATTR_FILS_ERP_REALM={0x98, 0xfa, "ef46f809296ab80426fc9db50b38c36eb30a862e50683fc573ea870b40054adc092c4c1742b02312dffcda2dea4a8211fe8713b5c11fadacc1b382afd86fa654d0b85f5d5cdf11600e17769d5c7c9e2a92409feedce793276a2938e8ffa101e621af363cd66651955386dbcbca99d93dbdfb382508f5be68286e39d4aac1bf077911a1efeff5f4c4295a095ab53a5d9499909f1b"}, @NL80211_ATTR_FILS_ERP_RRK={0x5, 0xfc, "e6"}, @NL80211_ATTR_FILS_ERP_RRK={0xd9, 0xfc, "6ef8fa6f9e6549bf85c0c3d1fe7bb3d8cc2b6d91ae03ecfad69ae92318c6a1dd1bd45afd5c568e0497a34593572b7f901db4e825e69cb6e2620394dc0bc2d0fa44e62f940b1bdd38df80797699f32adff71c2e7446dbe36b88519960bd1ec21fca89b739e0297b7157f3633f55f041af4f7ea35008421766770aa8b41de0283a9bf0727e3167907404970e3a6f52028621de34b3a0246b20b4e973f9173e5b9b000ee854a7d488365f792680a086c1f53708a4c7e67b47cd8ead07b644df1d857b80a16dd7052c9907d46d28077d049312321bb9d9"}, @NL80211_ATTR_FILS_ERP_REALM={0xfa, 0xfa, "e4e0ec2d869fe2d94e21be10b8070022573407386f38b2d2a0847a61c7338f6be1dd97528d963dab3338ee6fe6060934645f684da6f096c76d3993ab1c62757e5d0f88e9a69eddd846c02b0b619398309a455e9212995f83e6656d9a1bdd49fbf3cbd9377e8cd0d16ce4f07d73c2efafedb516bf57e2c4f946bc09cfea7dbb87d0e477a17170508b5debe618c120fc41a2104c42fd941c67d115d9e4599946e3a9d4883cee1012d28ab665682318f434797cff59c104a4695d37e0dae77cb7d778326cf29335593f53f6a57c64b62c00c116babe8495183626fe7ac92c77d083198742f399559ca01997249708000000000000000000"}], @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x4}], @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x72, 0xfc, "17251f9d1e1a923a44ef372a4ec732a9f9229cdfe0362f3fc9ef5e9ff9827987e958f92d1b7b7f93a015f2d49fa624b828054906984b34762b1320ebb17567d73edd0bdd7046b08628054f01ca4f0a9517a40f144eaa4a0031c0a6d19dff6354bc0a969e59ad8a8735a18f612e83"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}, @NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "16b8e3bc81"}, @NL80211_ATTR_FILS_ERP_REALM={0x1d, 0xfa, "3fd1b536b5e57ae1fc7821f936ee5a1e6eefa806d610b54d0f"}]]}, 0x358}, 0x1, 0x0, 0x0, 0x24040041}, 0x11)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0xfffffffe, 0x0, 0x0, 0x40, 0x2, 0x0, 0x0, 0x0, 0x10, 0x66}}, 0x50)
r2 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_int(r2, 0x29, 0x11, &(0x7f0000000000)=0x102, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14008051}}, {{&(0x7f00000000c0)=@file={0x1, './file0/file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40080}}], 0x2, 0x0)
syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000440))
socket$inet_sctp(0x2, 0x5, 0x84)
r5 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
r6 = dup2(r4, r4)
fcntl$setstatus(r4, 0x4, 0x42800)
read$FUSE(r6, &(0x7f0000004d80)={0x2020}, 0x2020)

2.095861471s ago: executing program 3 (id=848):
syz_open_dev$loop(&(0x7f0000000240), 0x825, 0x8a280)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000007000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000070000000900010073797a310000000028000000000a010800000000000000000a00000008000240000000010900010073797a300000000028000000000a030000000000000000000a00000008000240000000000911800665c2699c56000000140000001100010000000000000000000000000a"], 0x98}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000015000100000000000000000001000000", @ANYRESDEC], 0x1c}}, 0x4004081)
epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
rmdir(0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xc)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c)
r5 = gettid()
timer_create(0x7, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x304}, "480ca6eda49ed6a6", "3a2cc8b276a753b0e23e2a8436b0e1d53d11b70c57abe2e932240e766d3aebfd", "a0eb068e", "e96e232f2004a832"}, 0x38)
recvfrom$inet6(r4, &(0x7f0000000240)=""/169, 0xa9, 0x40010002, 0x0, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r4, 0x0, r6, 0x0, 0x7ffd, 0xe)
setpriority(0x1, 0xffffffffffffffff, 0x2)
ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r6, 0x4068aea3, &(0x7f0000000000)={0xdb, 0x0, 0x8})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
syz_open_dev$video4linux(&(0x7f0000000140), 0x400, 0x40)

1.821237997s ago: executing program 1 (id=849):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000040)={0x1a, 0x6, 0xfe})
bind$inet6(0xffffffffffffffff, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback, 0xffffffff}, 0x1c)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000200)=0x3fd0, 0x4)
gettid()
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0)
ftruncate(r3, 0x8800000)
r4 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x53)
close(r4)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f00000000c0)=0x6, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3)
recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
sendfile(r4, r3, 0x0, 0x578410ed)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x83, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8800)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x3, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)

1.212303173s ago: executing program 0 (id=850):
r0 = socket$nl_route(0x10, 0x3, 0x0)
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0xfffffffc)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0)
sendmsg$nl_route(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x30}}, 0x44890)
r1 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x0, 0x70bd28, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0x10, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0xcf2b6a0eb8c6ed4a}, 0x44080)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x8, 0x4, 0x4, 0xdf, 0x0, 0x1}, 0x48)
bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000006c0)={r2, 0x58, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000340)={0x0, 0x6, 0x8e, "fbcf64b61465c1f55e1db1d6267c5527b966ea88adc6ae83e85cca8489eeba7a903469d598307b9f487ce48768fa9c1b67b0c80eee3625c3be40acdab1b6ffb5a42dd1bb22a16f2bf125aa48f99ac2c39f348459fae2f3cd9cc076e8079a6025c8dcae7c00b7a52535ce279978832df8dc54a23474d34a1def59b5bcae1aa1afc09a34c6301c14c521d00acf2ce0"}, 0x96)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000040)={0x1, 'ip6gretap0\x00', {}, 0xff})
r6 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x936, 0x80100)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r6, 0xc25c4110, &(0x7f0000000c00)={0xffff, [[0x0, 0x1, 0xfffffff7, 0x7, 0xc89d, 0x1, 0x1, 0x7], [0x6, 0x1, 0x2, 0x4, 0x5, 0x7f, 0x400, 0x1000], [0x5, 0xb, 0x4, 0x8, 0x3, 0xceb, 0x4, 0x7]], '\x00', [{0x8, 0xfffffffe, 0x1, 0x1}, {0x7fffffff, 0x9, 0x0, 0x0, 0x1, 0x1}, {0xe70c, 0xfffffff8, 0x0, 0x1}, {0x7, 0x1e1, 0x0, 0x0, 0x0, 0x1}, {0x7, 0x6, 0x0, 0x0, 0x0, 0x1}, {0x1f5, 0x6a4, 0x1, 0x1, 0x0, 0x1}, {0x4, 0x200, 0x1, 0x0, 0x1}, {0xbdf0, 0x2a5b, 0x1}, {0x401, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x3, 0xc, 0x1, 0x0, 0x0, 0x1}, {0x2, 0xfffff264, 0x1, 0x0, 0x1}, {0x0, 0x401, 0x1, 0x1}], '\x00', 0x6})
r7 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0)
r8 = syz_usb_connect(0x0, 0x2da, &(0x7f0000000800)={{0x12, 0x1, 0x201, 0x13, 0x67, 0x82, 0x8, 0x4ad, 0x306, 0xb73d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2c8, 0x1, 0x0, 0x2, 0x10, 0x7f, [{{0x9, 0x4, 0xeb, 0x94, 0xa, 0x39, 0x90, 0x7c, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x1000, 0x80}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x304, 0x5, 0x4, 0x4}, @extension_unit={0xb, 0x24, 0x8, 0x5, 0x5, 0x1, "1febca16"}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x301, 0x3, 0x1, 0x3}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x0, 0x6, 0x2, 0xb1, 0x4, 0x80}, @selector_unit={0x5, 0x24, 0x5, 0x4, 0x5}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x306, 0x4, 0x3, 0x8}]}], [{{0x9, 0x5, 0xe, 0x3, 0x3ff, 0x5, 0x0, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x3}]}}, {{0x9, 0x5, 0x5, 0x4, 0x400, 0xfd, 0x5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xc, 0x5}]}}, {{0x9, 0x5, 0x5, 0x1, 0x400, 0x5, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x7, 0x3f}]}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x8, 0x97, 0x2, [@generic={0x100, 0x680c0c690e047d1e, "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"}]}}, {{0x9, 0x5, 0x6, 0x2, 0x40, 0x8, 0x4, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x1}]}}, {{0x9, 0x5, 0x6, 0x10, 0x200, 0xfe, 0x9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0x7}]}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x40, 0x2, 0x9}}, {{0x9, 0x5, 0x6, 0x1, 0x200, 0xf, 0xc, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x9}, @generic={0xe4, 0x23, "a5a4596e43ac7934d98652525e806b60ab568997663109bd94d3049bcf077ad7200159e1f5260a4d7193d405e5efd28aec68cbb2f664257378de6e5671c2a823ef1b2a5787c6210c41fb750582a12aa59132c7bd90bc0e2a6a3f7d2dd21c4c2470075e1956ad181f1e41683037c8d2c6c489fa5ad8eb52aba291103f014e1066d13823b763279d6907c05985a9a331d96e78ae3631057e22d0937565ef5a00957cbe43d30262edace619e13b610834080b1929daf845a42894c96b519d0c7b80b757b06a74a9d8e4bee6cfe902846e95bfe524ccbba53a980c40feed1e327917d542"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0xb, 0x2, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x7, 0x3}]}}, {{0x9, 0x5, 0x0, 0x1, 0x200, 0xff, 0x80, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xad, 0xffff}]}}]}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x310, 0x3, 0x5, 0x9, 0x20, 0x2}, 0x5, &(0x7f0000000bc0)={0x5, 0xf, 0x5}, 0x1, [{0x35, &(0x7f0000000500)=@string={0x35, 0x3, "8ca1323facd0a7c09adaca3ab4f4f34e16af307b78c8d8369e1e3a3a3da6869484edd855d1ec92dc2f05aa68976ff671b85424"}}]})
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f00000000c0))
syz_usb_disconnect(r8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0x8008af26, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'})
r9 = dup2(r6, r1)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r7, 0xc0c09425, &(0x7f0000000200)={"ab934c355e54fe753c3e6ec2762dca77", 0x0, <r10=>0x0, {0xffffffffffffe55c, 0x1}, {0x40, 0x7fffffff}, 0x6f0e47, [0x0, 0x7, 0x5, 0xfffffffffffffff9, 0xffffffffffffffff, 0xffffffffffffffff, 0xf, 0x2, 0x6, 0x2, 0xffffffffffffffff, 0x8001, 0x7fffffff, 0x7, 0x3, 0x5]})
r11 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r12, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r13, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x20009805}, 0x4000080)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r9, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="02002abd7000fbdbdf251500000014000180080003000000000008000100", @ANYRES32=r3, @ANYBLOB="2000018008000100", @ANYRES32=r3, @ANYBLOB="14000200760000000000000000626f6e6400000020000180080003000200000014004b1bc3a00200767863616e31000000000000"], 0x68}}, 0x40044)
write$binfmt_register(r11, &(0x7f00000000c0)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x1000, 0x3a, '/dev/bus/usb/00#/00\\\x00', 0x3a, '/dev/bus/usb/00#/00#\x00', 0x3a, './file0'}, 0x51)
ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, &(0x7f0000000e80)={{r11}, r10, 0x12, @unused=[0x4, 0x30, 0x0, 0x12], @subvolid=0x100})
syz_usb_connect(0x2, 0xf, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0xd2, 0xa1, 0xb4, 0x8, 0x403, 0xf068, 0x2da6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x5}}]}}, 0x0)

1.156559156s ago: executing program 2 (id=851):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r2, @ANYBLOB="040046000a003400"], 0x3c}, 0x1, 0x0, 0x700, 0x4010}, 0x0)

984.056236ms ago: executing program 4 (id=852):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x169a82, 0x0)
sendfile(r2, r2, 0x0, 0x7)
quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000202, 0x0, 0x0)
munlockall()
madvise(&(0x7f0000597000/0x1000)=nil, 0x1000, 0x13)
open(0x0, 0x0, 0x0)
epoll_create1(0x80000)
syz_emit_ethernet(0x0, 0x0, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = getpid()
r5 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000800)={{0x4, 0x0, 0x9, 0x8001, 'syz0\x00', 0xc22}, 0x2, 0x200, 0x9, r4, 0x0, 0x7fff, 'syz1\x00', 0x0})
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r5, 0xc0405519, &(0x7f0000000bc0)={0x5, 0x1, 0x2, 0xe2, 'syz1\x00', 0x4})
shutdown(r3, 0x2)
madvise(&(0x7f000021e000/0x2000)=nil, 0x2000, 0x15)
mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x105)
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000040)={{0x1, 0x2, 0x7ffffffd}})
ioctl$SNDRV_TIMER_IOCTL_TREAD64(r6, 0x400454a4, 0x0)
r7 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x42782, 0x0)
ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000000180))
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

921.742907ms ago: executing program 3 (id=853):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x169a82, 0x0)
sendfile(r2, r2, 0x0, 0x7)
quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000202, 0x0, 0x0)
munlockall()
madvise(&(0x7f0000597000/0x1000)=nil, 0x1000, 0x13)
open(0x0, 0x0, 0x0)
epoll_create1(0x80000)
syz_emit_ethernet(0x0, 0x0, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = getpid()
r5 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000800)={{0x4, 0x0, 0x9, 0x8001, 'syz0\x00', 0xc22}, 0x2, 0x200, 0x9, r4, 0x0, 0x7fff, 'syz1\x00', 0x0})
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r5, 0xc0405519, &(0x7f0000000bc0)={0x5, 0x1, 0x2, 0xe2, 'syz1\x00', 0x4})
shutdown(r3, 0x2)
madvise(&(0x7f000021e000/0x2000)=nil, 0x2000, 0x15)
mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x105)
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000040)={{0x1, 0x2, 0x7ffffffd}})
ioctl$SNDRV_TIMER_IOCTL_TREAD64(r6, 0x400454a4, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x42782, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

521.570858ms ago: executing program 2 (id=854):
r0 = creat(&(0x7f0000000280)='./file0\x00', 0x96ab9c7d55edd554)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000001080)={0x200000, 0x200000})
r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
lsetxattr$security_capability(&(0x7f0000000340)='./file0\x00', &(0x7f00000000c0), &(0x7f00000002c0)=@v2={0x2000000, [{0x2, 0xee9}, {0xe8000000, 0xffbfc000}]}, 0x14, 0x1)
lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0)
setsockopt$inet_mreq(r1, 0x0, 0x20, &(0x7f0000000700)={@private=0xa010100, @dev={0xac, 0x14, 0x14, 0xc}}, 0x8)
write$binfmt_elf32(r0, &(0x7f0000000540)=ANY=[@ANYRESHEX=r1], 0x78)
close(r0)
r2 = msgget$private(0x0, 0x11)
msgsnd(r2, &(0x7f0000000740)={0x0, "55ebea1bab16891b004c92356088d8de7fe0e1f2302db0200e4d2e17eb844e37bcb7b34193bc7b3d76973ab352cc361fe44aca084661beaaffab0c1c99f973cc218ad6d3b0d3ec87f729b37ce540afd9be"}, 0x55, 0x800)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#Y?0W\xb3W\xd2\xbfP\xee'}, 0x30)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
rmdir(&(0x7f0000000000)='./file0\x00')
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x5, 0x2}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000180)="c1c142e1ec361dcdfec89d3bf0d6473d1b9dda7655021d3336e9b762af8d0c57cc494e2d2af192a035a4ed4f5e07b68c6ec6029fae8b97c29fd28866deb108a924972d82e2199c076e58b98e399115368f495180f2df4e7bfa381117d93f093a18b347f3d0419b6b0afeb7ec2bd0d4c6aab23e3b763f43ddc2ada522fc6075285f3dc56c9de6cdfd9ba8cf087ed5f3976f7a454308035dda476c09153ae6fb00f3fc4b8cb22528f2dcbe85e454f7cd7a03f15a80080e8a4fb2fa7f6f3b85803317a8f61d62eaa3c15dbad0d85cd54940", 0xd0}, {&(0x7f0000000380)="52c56f9cfc4eb379d8309b81bfe21f2d086bf8c2e448e71dbe17ee7e3beb41cf941bb7ac4c7abd0792eca1e57e99c53ef367cc9075897d274564533be88b4298ed30fa8d3693964409cf1fd404a2842d6ca56bdbbe944a0310457deaf3ef85a320b38b2d27676446aba0b21f094d292559cef84285e3031d8116bd21150a0cd9db8c3070ad37a7e020a73e76944af5991c0d0bc1a52d05d02a23ccad87c21975a249226096f30d7a918c973a9ea6110255e4fba665cd6bfd22b53a045a6ba99ddcb7b67e0736e5530b8ba1cce02a", 0xce}, {&(0x7f0000000040)="7236f4e03d97fbef7ec5e0032215716f238e5bc0e290b0bdace1a6d8e2054dfda7a5bcadd43b", 0x26}, {&(0x7f0000000480)="8ef513640e4edb04b542ef91d6708440a0d3407d81a249a6af4653780b1ed277d23a5f833c9b041caa6969c9c47853113a5eac60ba9efa2026b79e117c32c3be8dd05799a7bacfe8a7c8b93475cc897b1d68ef3a7fed7101259c72271e917f3540f467d4dd9db6746b22ac5a44dbb01dedf4fd254acd03964ffc056287029e5960e5d289456744115a452c997b", 0x8d}, {&(0x7f0000000580)="848ee3d74cedc511a9fe6f76d5e2d1f7ef7c9232256bee1e2a3ef78fe46780b72f2479d010469f93dbc3963be15dd9994324a8", 0x33}, {&(0x7f00000005c0)="b0e17cbe463755d2dcd3bde429f1982b80f653bdec5fef738d9ca1d75b2a7b9c8505c0b1ef184eaed42e8700f8b66a0842b0bff966be997ddc8d80a7518b2141c43ceb827e5b7a5e888a02b65551297becc1d2b3de9761deee5a333742bac2c4aa4d038a8ec0812159b873d22d5bcfc94e2a459d46284ea8cc4adfb5629dba3aa609ab76699990eb6d483ec1e8ff90c51db98b692674044d295ec55e006209d2b3e09e21eb25a1f7c21bb600d78602e509", 0xb1}], 0x6, &(0x7f0000002600)=[{0x19c, 0x101, 0x2, "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"}, {0x40, 0x116, 0x7, "05dc810453796327f199f644746e9456158314220702b418a0182e0bca142efd48899adeefff0e71e1adf3f52dd87d1195"}, {0x58, 0x6, 0x8, "3c086c5fa79813e13c425c1108b1983a14f3e433c8fdb416067c7ca643171d42129af29f485ecc77c84a27c665b1fe20e65e718bd6b738cf13d9ee509a1dcf060a6d27d8aa3b238f8561"}, {0x54, 0x111, 0x65, "bbb1b7d4cfbef4c35c693001c655dfd258cb9f2c28a890ced112c44d987084f6143e58a17e2988a6bc3470d1a7b84dba2a6ffc86602c39d93678090b68823eddfad4eef89230fc"}, {0x100c, 0x84, 0x7fffffff, "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"}, {0xf0, 0x102, 0x1000, "09603e1cfd5b35ad8d334e8c8f01382b98ac2a9118019da9785d85026d964557f589820ec823c8ae1e2e7a988f49dae0a9b3cac5ad424dc7d63631a9af9abdb5291e6a312dace65365048eee8a24ccb39a74ac7e7f729a17fbb7a3357e9ee959f6a0cca75dca8ba142b83495c7a866aee0a805a1e5c7c079ed74140b4636b219707e664e6dadd2e0dc77a9626c0c413a9c840f5990f0403abd9968c7404fb6c9718f36bd3071377f2c813681454dfb38e39da7d6172bf8f085e5d5d1b000325d2b2a912cdc17081080ffeff2ed59e9ed18e1e617cdbef41d6e9183086b6ef0b95cdb1f83"}, {0xf0, 0x110, 0x3ff, "be998a6984bdd6d6ca463eecfb993683c912a9f4bdb94662d7f0070d5fbc52275f0e7cb6b0f53b6d186e58d69ef28d3a435db85b2749b0f53b454f74f7e1fdb8c049b4616dbaf1097dc8941aa9864c9f01379e7b90741c22fb11e4ee6c382599a36dc0bc296f235725a086b7ee4fb49a2553bbe8668f0e7490dc841cd5d348b84637fad06e83f2fa6987e2833cd9761092a0112009043c974c41f739e3f5fc4bbd2e421ff7bb05cdf3b0f73ca1549e4bcc9baffe1415a7b8f3c08de20ee746b23f1b2ff827d6ed213966013646da6c1e1843aec2fc659454e27da2f5df98b5b2bc20d5"}, {0x58, 0x0, 0x80000001, "b35718057c8e06ccbc30bfb5b20b8bfd624387fc17bbfc52440f8ef0b51cbfc68a9cda94d549e2c0f59e86c2e10196c297d793b9e772aea61396b1cd3c3be73b5024754aeba28a33a359"}], 0x14cc}, 0x40000)
execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

0s ago: executing program 2 (id=855):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = msgget$private(0x0, 0x0)
msgsnd(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="03008000", @ANYRES64=r1], 0x8, 0x800)
msgrcv(r1, 0x0, 0x0, 0x2, 0x3800)
syz_pidfd_open(0x0, 0x0)
pipe2(&(0x7f00000000c0), 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x70bd25, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xfff1}, {0x9, 0xffff}, {0x3, 0xfffffffffffffffe}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r6 = socket(0x10, 0x3, 0x0)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x70bd27, 0x0, [@sadb_address={0x3, 0x6, 0x33, 0x0, 0x0, @in={0x2, 0x1000}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9, 0xfc, 0xe0000001}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x2, 0x8, 0x8, 0x0, '4'}]}, 0x60}, 0x1, 0x7}, 0x0)
write(r6, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14)
r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0xfffffffffffffffd, 0xfffffffffffff21d})
ioctl$SG_BLKTRACETEARDOWN(r8, 0x1276, 0x20000000)
recvmmsg(r6, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000a80)={{0x12, 0x1, 0x0, 0xa6, 0xdc, 0x34, 0x40, 0x61d, 0xc020, 0xa2bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x93, 0xb2, 0x81, 0x0, [], [{{0x9, 0x5, 0x5, 0x390998da063e1313}}]}}]}}]}}, 0x0)
r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x2d8d40)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800621060090390000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000003e0000003afcc1ef1314a098"], 0x34}, 0x1, 0x0, 0x0, 0x24040044}, 0xc000)

kernel console output (not intermixed with test programs):

b 1-1: Using ep0 maxpacket: 8
[  173.463527][ T5919] usb 1-1: config 1 interface 0 has no altsetting 0
[  173.474838][ T5919] usb 1-1: New USB device found, idVendor=056a, idProduct=0012, bcdDevice= 0.40
[  173.509646][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.517708][ T5919] usb 1-1: Product: syz
[  173.549563][ T5919] usb 1-1: SerialNumber: syz
[  173.870235][ T5919] usbhid 1-1:1.0: can't add hid device: -71
[  173.879501][ T5919] usbhid 1-1:1.0: probe with driver usbhid failed with error -71
[  173.918609][ T5919] usb 1-1: USB disconnect, device number 9
[  173.931717][ T5846] usb 2-1: USB disconnect, device number 10
[  174.106508][ T7001] binder: 6999:7001 ioctl c0306201 800003c0 returned -14
[  174.469474][ T5968] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  174.629711][ T5968] usb 4-1: Using ep0 maxpacket: 32
[  174.641503][ T5968] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  174.651013][ T5968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.731304][ T5968] usb 4-1: Product: syz
[  174.739824][ T5968] usb 4-1: Manufacturer: syz
[  174.745834][ T5968] usb 4-1: SerialNumber: syz
[  174.761616][ T5968] usb 4-1: config 0 descriptor??
[  174.779213][ T5968] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  174.953556][ T7006] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  175.024370][ T7009] tipc: Started in network mode
[  175.029340][ T7009] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711
[  175.034548][ T7006] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.308'.
[  175.097910][ T7009] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  175.175073][ T7007] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  175.263063][ T7012] program syz.1.309 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  175.729753][ T5968] gspca_stk1135: reg_w 0x3 err -110
[  175.736089][ T5968] gspca_stk1135: serial bus timeout: status=0x00
[  175.769137][ T5968] gspca_stk1135: Sensor write failed
[  175.792602][ T5968] gspca_stk1135: serial bus timeout: status=0x00
[  175.811904][ T5968] gspca_stk1135: Sensor write failed
[  175.817767][ T5968] gspca_stk1135: serial bus timeout: status=0x00
[  175.824932][ T5968] gspca_stk1135: Sensor read failed
[  175.835489][ T5968] gspca_stk1135: serial bus timeout: status=0x00
[  175.846837][ T5968] gspca_stk1135: Sensor read failed
[  175.856366][ T5968] gspca_stk1135: Detected sensor type unknown (0x0)
[  175.868620][ T5968] gspca_stk1135: serial bus timeout: status=0x00
[  175.909498][ T5968] gspca_stk1135: Sensor read failed
[  175.926542][ T5968] gspca_stk1135: serial bus timeout: status=0x00
[  175.949651][ T5968] gspca_stk1135: Sensor read failed
[  175.968794][ T5968] gspca_stk1135: serial bus timeout: status=0x00
[  175.990196][ T5968] gspca_stk1135: Sensor write failed
[  176.007623][ T5968] gspca_stk1135: serial bus timeout: status=0x00
[  176.026030][ T7007] syz.4.308 (7007) used greatest stack depth: 17248 bytes left
[  176.027082][ T5968] gspca_stk1135: Sensor write failed
[  176.069320][ T5968] stk1135 4-1:0.0: probe with driver stk1135 failed with error -110
[  176.200369][ T5968] usb 4-1: USB disconnect, device number 20
[  176.240681][ T5920] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  176.419656][ T5920] usb 3-1: Using ep0 maxpacket: 16
[  176.437969][ T5920] usb 3-1: config 15 has an invalid interface number: 3 but max is 0
[  176.446420][ T5920] usb 3-1: config 15 has no interface number 0
[  176.472951][ T5920] usb 3-1: config 15 interface 3 altsetting 255 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[  176.509466][ T5920] usb 3-1: config 15 interface 3 has no altsetting 0
[  176.536463][ T5920] usb 3-1: New USB device found, idVendor=19d2, idProduct=0019, bcdDevice=29.c8
[  176.558192][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.608923][ T5920] usb 3-1: Product: 쇧橿嚁媕ᇩ⤟譐眚⃂ƚ乶㝰똻⃶羨꒛鋋娘䴒ꑋ૘沊篓䓙ﳎ∁ს볟휫ꚍ㒍⮨錴톞長ঙ鿤뵋횥Ꝭ脾̶㕚밇鷗⵨ࢶ軵㴯뫇
[  176.696736][ T5920] usb 3-1: Manufacturer: ᐄ
[  176.725414][ T5920] usb 3-1: SerialNumber: syz
[  177.376926][ T7043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  177.416295][ T7043] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  177.777775][ T5920] usb 3-1: USB disconnect, device number 14
[  178.497320][ T7053] fuse: Unknown parameter 'group_id00000000000000000000'
[  178.519583][ T5920] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  178.699098][ T5920] usb 2-1: Using ep0 maxpacket: 32
[  178.730353][ T5920] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  178.755103][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.875128][ T5920] usb 2-1: config 0 descriptor??
[  178.922238][ T5920] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  179.116887][ T7064] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  179.123659][ T7064] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  179.131321][ T5920] gspca_vc032x: reg_r err -32
[  179.132264][ T7063] erspan0: entered promiscuous mode
[  179.153226][ T7063] erspan0: left promiscuous mode
[  179.202923][ T7064] vhci_hcd vhci_hcd.0: Device attached
[  179.210826][ T5920] gspca_vc032x: I2c Bus Busy Wait 00
[  179.263996][ T7064] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20004
[  179.344668][ T7065] vhci_hcd: connection closed
[  179.346440][ T3490] vhci_hcd vhci_hcd.2: stop threads
[  179.363451][ T5920] gspca_vc032x: I2c Bus Busy Wait 00
[  179.370496][ T3490] vhci_hcd vhci_hcd.2: release socket
[  179.379548][ T5968] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  179.390867][ T5920] gspca_vc032x: I2c Bus Busy Wait 00
[  179.406720][ T3490] vhci_hcd vhci_hcd.2: disconnect device
[  179.458156][ T5968] usb 37-1: new full-speed USB device number 2 using vhci_hcd
[  179.478514][ T5920] gspca_vc032x: I2c Bus Busy Wait 00
[  179.478672][ T5968] usb 37-1: enqueue for inactive port 0
[  179.498158][ T5920] gspca_vc032x: I2c Bus Busy Wait 00
[  179.519664][ T5920] gspca_vc032x: I2c Bus Busy Wait 00
[  179.529492][ T5920] gspca_vc032x: I2c Bus Busy Wait 00
[  179.534998][ T5920] gspca_vc032x: I2c Bus Busy Wait 00
[  179.582075][ T5920] gspca_vc032x: I2c Bus Busy Wait 00
[  179.615436][ T5920] gspca_vc032x: I2c Bus Busy Wait 00
[  179.621349][ T5968] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  179.627138][ T5920] gspca_vc032x: I2c Bus Busy Wait 00
[  179.653340][ T5920] gspca_vc032x: I2c Bus Busy Wait 00
[  179.658733][ T5920] gspca_vc032x: I2c Bus Busy Wait 00
[  179.681986][ T5920] gspca_vc032x: I2c Bus Busy Wait 00
[  179.723086][ T5920] gspca_vc032x: I2c Bus Busy Wait 00
[  179.738650][ T5920] gspca_vc032x: I2c Bus Busy Wait 00
[  179.752340][ T5920] gspca_vc032x: I2c Bus Busy Wait 00
[  179.765176][ T5920] gspca_vc032x: I2c Bus Busy Wait 00
[  179.786096][ T5920] gspca_vc032x: Unknown sensor...
[  179.798489][ T5920] vc032x 2-1:0.0: probe with driver vc032x failed with error -22
[  179.960944][ T5920] usb 2-1: USB disconnect, device number 11
[  180.347476][ T7087] fuse: Bad value for 'user_id'
[  180.375541][ T7087] fuse: Bad value for 'user_id'
[  180.929658][ T5920] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  181.209768][ T7101] netlink: 12 bytes leftover after parsing attributes in process `syz.0.333'.
[  181.329147][ T5920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  181.343464][ T5920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  181.593953][ T5920] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=a2.bf
[  181.632860][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.683012][ T5920] usb 5-1: Product: syz
[  181.693410][ T5920] usb 5-1: Manufacturer: syz
[  181.700291][ T5920] usb 5-1: SerialNumber: syz
[  181.700770][ T5967] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  181.722325][ T5846] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  181.745861][ T5920] usb 5-1: config 0 descriptor??
[  181.770976][ T5920] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  181.889516][ T5846] usb 1-1: Using ep0 maxpacket: 32
[  181.899089][ T5967] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  181.906664][ T5846] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  181.910620][ T5967] usb 2-1: config 0 has no interface number 0
[  181.928934][ T5846] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.951421][ T5967] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  181.978320][ T5967] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.998761][ T5967] usb 2-1: Product: syz
[  182.069486][ T5967] usb 2-1: Manufacturer: syz
[  182.077262][ T5846] usb 1-1: config 0 descriptor??
[  182.100337][ T5920] ssu100 5-1:0.0: probe with driver ssu100 failed with error -110
[  182.108179][ T5967] usb 2-1: SerialNumber: syz
[  182.136759][ T5967] usb 2-1: config 0 descriptor??
[  182.165524][ T5846] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  182.264763][ T7108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.337'.
[  182.345607][ T5846] gspca_vc032x: reg_r err -32
[  182.365702][ T5846] gspca_vc032x: I2c Bus Busy Wait 00
[  182.375237][ T5846] gspca_vc032x: I2c Bus Busy Wait 00
[  182.377938][ T5967] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  182.383560][ T5846] gspca_vc032x: I2c Bus Busy Wait 00
[  182.394915][ T5846] gspca_vc032x: I2c Bus Busy Wait 00
[  182.400905][ T5846] gspca_vc032x: I2c Bus Busy Wait 00
[  182.419501][ T5846] gspca_vc032x: I2c Bus Busy Wait 00
[  182.468109][ T7112] loop0: detected capacity change from 0 to 2560
[  182.488473][ T7112] buffer_io_error: 310 callbacks suppressed
[  182.488494][ T7112] Buffer I/O error on dev loop0, logical block 0, lost async page write
[  182.504200][ T6280] Buffer I/O error on dev loop0, logical block 256, lost async page write
[  182.513361][ T5846] gspca_vc032x: I2c Bus Busy Wait 00
[  182.518790][ T5846] gspca_vc032x: I2c Bus Busy Wait 00
[  182.525124][ T7112] Buffer I/O error on dev loop0, logical block 1, lost async page write
[  182.533595][ T5846] gspca_vc032x: I2c Bus Busy Wait 00
[  182.540541][ T5846] gspca_vc032x: I2c Bus Busy Wait 00
[  182.546082][ T5846] gspca_vc032x: I2c Bus Busy Wait 00
[  182.552108][ T5846] gspca_vc032x: I2c Bus Busy Wait 00
[  182.560472][ T5846] gspca_vc032x: I2c Bus Busy Wait 00
[  182.561158][ T5967] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  182.565970][ T5846] gspca_vc032x: I2c Bus Busy Wait 00
[  182.582641][ T5920] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  182.590343][ T6280] Buffer I/O error on dev loop0, logical block 257, lost async page write
[  182.598900][ T6280] Buffer I/O error on dev loop0, logical block 258, lost async page write
[  182.662061][ T7112] Buffer I/O error on dev loop0, logical block 2, lost async page write
[  182.690133][ T5967] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  182.699185][ T6280] Buffer I/O error on dev loop0, logical block 259, lost async page write
[  182.709957][ T5846] gspca_vc032x: I2c Bus Busy Wait 00
[  182.715292][ T5846] gspca_vc032x: I2c Bus Busy Wait 00
[  182.718387][ T7112] Buffer I/O error on dev loop0, logical block 3, lost async page write
[  182.720679][ T6280] Buffer I/O error on dev loop0, logical block 260, lost async page write
[  182.720706][ T6280] Buffer I/O error on dev loop0, logical block 261, lost async page write
[  182.729617][ T5967] usb 2-1: media controller created
[  182.799566][ T5846] gspca_vc032x: I2c Bus Busy Wait 00
[  182.806599][ T5846] gspca_vc032x: I2c Bus Busy Wait 00
[  182.848525][ T5846] gspca_vc032x: Unknown sensor...
[  182.878331][ T5967] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  182.886977][ T5920] usb 3-1: Using ep0 maxpacket: 16
[  182.894918][ T5920] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8
[  182.915536][ T5846] vc032x 1-1:0.0: probe with driver vc032x failed with error -22
[  182.959706][ T5920] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  182.994850][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.020215][ T5920] usb 3-1: Product: syz
[  183.031171][ T5920] usb 3-1: Manufacturer: syz
[  183.040390][ T5920] usb 3-1: SerialNumber: syz
[  183.076312][ T5920] usb 3-1: config 0 descriptor??
[  183.158650][ T5920] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[  183.214576][ T5920] usb 3-1: Detected FT232R
[  183.354915][ T5920] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  183.578096][ T5920] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  183.783079][ T5920] usb 3-1: USB disconnect, device number 15
[  183.833557][ T5920] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  183.866196][ T7120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  183.875631][ T5920] ftdi_sio 3-1:0.0: device disconnected
[  183.920261][ T7120] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  184.007975][ T5919] usb 5-1: USB disconnect, device number 9
[  184.105750][ T5967] i2c i2c-1: ec100: i2c rd failed=-110 reg=33
[  184.248963][ T7127] fuse: Bad value for 'user_id'
[  184.257571][ T7127] fuse: Bad value for 'user_id'
[  184.321611][ T5919] usb 1-1: USB disconnect, device number 10
[  184.962717][ T7148] loop0: detected capacity change from 0 to 2560
[  185.060231][ T5920] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  185.235779][ T5920] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  185.264589][ T5920] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  185.306620][ T5920] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  185.449567][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.527221][ T7141] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  185.551434][ T5920] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  185.768112][ T7141] fuse: Unknown parameter '0x000000000000000c'
[  185.946905][ T5920] usb 3-1: USB disconnect, device number 16
[  188.202188][ T7177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.354'.
[  188.215533][ T7177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.354'.
[  188.472165][ T7187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.358'.
[  188.634957][ T7189] loop0: detected capacity change from 0 to 2560
[  188.646318][ T7192] fuse: Bad value for 'fd'
[  188.848729][ T7188] buffer_io_error: 640 callbacks suppressed
[  188.848751][ T7188] Buffer I/O error on dev loop0, logical block 0, lost async page write
[  188.966603][ T6280] Buffer I/O error on dev loop0, logical block 256, lost async page write
[  189.005194][ T7188] Buffer I/O error on dev loop0, logical block 1, lost async page write
[  189.020782][ T6280] Buffer I/O error on dev loop0, logical block 257, lost async page write
[  189.052113][ T7188] Buffer I/O error on dev loop0, logical block 2, lost async page write
[  189.069674][ T6280] Buffer I/O error on dev loop0, logical block 258, lost async page write
[  189.108803][ T6280] Buffer I/O error on dev loop0, logical block 259, lost async page write
[  189.194850][ T7188] Buffer I/O error on dev loop0, logical block 3, lost async page write
[  189.203732][ T6280] Buffer I/O error on dev loop0, logical block 260, lost async page write
[  189.265233][ T6280] Buffer I/O error on dev loop0, logical block 261, lost async page write
[  189.849513][ T5846] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  189.999482][ T5846] usb 4-1: device descriptor read/64, error -71
[  190.249498][ T5846] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  190.379519][ T5846] usb 4-1: device descriptor read/64, error -71
[  190.499943][ T5846] usb usb4-port1: attempt power cycle
[  190.832647][ T7220] bond1: option miimon: invalid value (18446744073709551615)
[  190.877114][ T7220] bond1: option miimon: allowed values 0 - 2147483647
[  190.877763][ T5846] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  190.909007][ T7220] bond1 (unregistering): Released all slaves
[  190.920192][ T5846] usb 4-1: device descriptor read/8, error -71
[  191.095158][ T7229] netlink: 12 bytes leftover after parsing attributes in process `syz.0.371'.
[  191.156418][ T7231] netlink: 12 bytes leftover after parsing attributes in process `syz.2.372'.
[  191.166672][ T5846] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  191.190705][ T5846] usb 4-1: device descriptor read/8, error -71
[  191.300796][ T5846] usb usb4-port1: unable to enumerate USB device
[  192.241645][ T7250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  192.256527][ T7250] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  192.317317][ T7252] netlink: 12 bytes leftover after parsing attributes in process `syz.2.378'.
[  192.331905][ T7250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.373'.
[  192.354673][ T7250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.373'.
[  192.363682][ T7250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.373'.
[  192.372592][ T7250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.373'.
[  193.112053][ T7267] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[  193.129279][ T7267] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[  193.143796][ T7267] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[  193.669568][ T6106] usb 4-1: new full-speed USB device number 25 using dummy_hcd
[  193.747758][ T7279] fuse: Bad value for 'fd'
[  193.885493][ T6106] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  193.904489][ T6106] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  193.944832][ T7281] __nla_validate_parse: 106 callbacks suppressed
[  193.944854][ T7281] netlink: 12 bytes leftover after parsing attributes in process `syz.0.386'.
[  193.949681][ T6106] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[  193.986370][ T6106] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  194.025711][ T6106] usb 4-1: SerialNumber: syz
[  194.042358][ T6106] usb 4-1: 0:2 : does not exist
[  194.216953][ T7277] netlink: set zone limit has 4 unknown bytes
[  194.287776][ T7275] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  194.314048][ T6663] usb 3-1: new full-speed USB device number 17 using dummy_hcd
[  194.341830][ T6106] usb 4-1: USB disconnect, device number 25
[  194.454490][ T6280] udevd[6280]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  194.565800][ T6663] usb 3-1: config 8 has an invalid interface number: 207 but max is 0
[  194.592269][ T6663] usb 3-1: config 8 has an invalid descriptor of length 56, skipping remainder of the config
[  194.631591][ T6663] usb 3-1: config 8 has no interface number 0
[  194.725619][ T6663] usb 3-1: config 8 interface 207 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  194.794084][ T6663] usb 3-1: New USB device found, idVendor=b0da, idProduct=7458, bcdDevice=2d.4d
[  194.830374][ T6663] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.852912][ T6663] usb 3-1: Product: syz
[  194.857257][ T6663] usb 3-1: Manufacturer: syz
[  194.875758][ T6663] usb 3-1: SerialNumber: syz
[  194.954115][ T7291] FAULT_INJECTION: forcing a failure.
[  194.954115][ T7291] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  194.969665][ T7291] CPU: 1 UID: 0 PID: 7291 Comm: syz.0.390 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  194.969702][ T7291] Tainted: [L]=SOFTLOCKUP
[  194.969710][ T7291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  194.969723][ T7291] Call Trace:
[  194.969731][ T7291]  <TASK>
[  194.969739][ T7291]  dump_stack_lvl+0xe8/0x150
[  194.969772][ T7291]  should_fail_ex+0x414/0x560
[  194.969810][ T7291]  _copy_from_user+0x2d/0xb0
[  194.969838][ T7291]  get_compat_msghdr+0xad/0x4a0
[  194.969871][ T7291]  ? __pfx_get_compat_msghdr+0x10/0x10
[  194.969901][ T7291]  ? kstrtouint+0x6e/0xe0
[  194.969946][ T7291]  ___sys_sendmsg+0x193/0x2a0
[  194.969975][ T7291]  ? __pfx____sys_sendmsg+0x10/0x10
[  194.970001][ T7291]  ? get_pid_task+0x20/0x1f0
[  194.970026][ T7291]  ? get_pid_task+0x20/0x1f0
[  194.970061][ T7291]  ? get_pid_task+0x20/0x1f0
[  194.970109][ T7291]  ? __fget_files+0x2a/0x420
[  194.970133][ T7291]  ? __fget_files+0x3a0/0x420
[  194.970167][ T7291]  __sys_sendmsg+0x164/0x220
[  194.970193][ T7291]  ? __pfx___sys_sendmsg+0x10/0x10
[  194.970225][ T7291]  ? __pfx_ksys_write+0x10/0x10
[  194.970253][ T7291]  __do_fast_syscall_32+0x1dc/0x570
[  194.970275][ T7291]  ? lockdep_hardirqs_on+0x7b/0x110
[  194.970294][ T7291]  ? do_fast_syscall_32+0x34/0x80
[  194.970316][ T7291]  ? irqentry_exit+0x10f/0x670
[  194.970340][ T7291]  do_fast_syscall_32+0x34/0x80
[  194.970364][ T7291]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  194.970388][ T7291] RIP: 0023:0xf706d539
[  194.970405][ T7291] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  194.970421][ T7291] RSP: 002b:00000000f545d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  194.970442][ T7291] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000340
[  194.970455][ T7291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  194.970466][ T7291] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  194.970477][ T7291] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  194.970488][ T7291] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  194.970513][ T7291]  </TASK>
[  195.227770][ T6663] usb 3-1: USB disconnect, device number 17
[  195.481657][ T7300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.394'.
[  195.519291][ T7300] netlink: 4 bytes leftover after parsing attributes in process `syz.3.394'.
[  195.546964][ T7301] netlink: 12 bytes leftover after parsing attributes in process `syz.1.392'.
[  195.779018][ T7310] fuse: Bad value for 'fd'
[  196.090440][ T7319] FAULT_INJECTION: forcing a failure.
[  196.090440][ T7319] name failslab, interval 1, probability 0, space 0, times 0
[  196.113679][ T7319] CPU: 0 UID: 0 PID: 7319 Comm: syz.2.400 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  196.113703][ T7319] Tainted: [L]=SOFTLOCKUP
[  196.113708][ T7319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  196.113716][ T7319] Call Trace:
[  196.113722][ T7319]  <TASK>
[  196.113728][ T7319]  dump_stack_lvl+0xe8/0x150
[  196.113751][ T7319]  should_fail_ex+0x414/0x560
[  196.113778][ T7319]  should_failslab+0xa8/0x100
[  196.113797][ T7319]  kmem_cache_alloc_node_noprof+0x8c/0x720
[  196.113821][ T7319]  ? __alloc_skb+0x1dc/0x3a0
[  196.113835][ T7319]  ? __local_bh_enable_ip+0xd0/0x130
[  196.113851][ T7319]  ? __alloc_skb+0x198/0x3a0
[  196.113866][ T7319]  __alloc_skb+0x1dc/0x3a0
[  196.113884][ T7319]  netlink_ack+0x146/0xa50
[  196.113901][ T7319]  ? __pfx_genl_rcv_msg+0x10/0x10
[  196.113917][ T7319]  ? __asan_memcpy+0x40/0x70
[  196.113938][ T7319]  ? __pfx_ref_tracker_free+0x10/0x10
[  196.113958][ T7319]  netlink_rcv_skb+0x28c/0x470
[  196.113977][ T7319]  ? __pfx_genl_rcv_msg+0x10/0x10
[  196.113991][ T7319]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  196.114008][ T7319]  ? genl_rcv+0x19/0x40
[  196.114031][ T7319]  ? down_read+0x274/0x2e0
[  196.114048][ T7319]  ? genl_rcv+0xd/0x40
[  196.114072][ T7319]  genl_rcv+0x28/0x40
[  196.114083][ T7319]  netlink_unicast+0x82f/0x9e0
[  196.114104][ T7319]  ? __pfx_netlink_unicast+0x10/0x10
[  196.114119][ T7319]  ? __alloc_skb+0x198/0x3a0
[  196.114133][ T7319]  ? netlink_sendmsg+0x642/0xb30
[  196.114150][ T7319]  ? skb_put+0x11b/0x210
[  196.114166][ T7319]  netlink_sendmsg+0x805/0xb30
[  196.114190][ T7319]  ? __pfx_netlink_sendmsg+0x10/0x10
[  196.114209][ T7319]  ? __import_iovec+0x5d4/0x7f0
[  196.114225][ T7319]  ? aa_sock_msg_perm+0xf1/0x1b0
[  196.114243][ T7319]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  196.114255][ T7319]  ? __pfx_netlink_sendmsg+0x10/0x10
[  196.114277][ T7319]  __sock_sendmsg+0x21c/0x270
[  196.114299][ T7319]  ____sys_sendmsg+0x505/0x820
[  196.114319][ T7319]  ? __pfx_____sys_sendmsg+0x10/0x10
[  196.114339][ T7319]  ? kstrtouint+0x6e/0xe0
[  196.114381][ T7319]  ___sys_sendmsg+0x21f/0x2a0
[  196.114400][ T7319]  ? __pfx____sys_sendmsg+0x10/0x10
[  196.114417][ T7319]  ? get_pid_task+0x20/0x1f0
[  196.114434][ T7319]  ? get_pid_task+0x20/0x1f0
[  196.114450][ T7319]  ? get_pid_task+0x20/0x1f0
[  196.114486][ T7319]  ? __fget_files+0x2a/0x420
[  196.114503][ T7319]  ? __fget_files+0x3a0/0x420
[  196.114527][ T7319]  __sys_sendmsg+0x164/0x220
[  196.114546][ T7319]  ? __pfx___sys_sendmsg+0x10/0x10
[  196.114569][ T7319]  ? __pfx_ksys_write+0x10/0x10
[  196.114596][ T7319]  __do_fast_syscall_32+0x1dc/0x570
[  196.114613][ T7319]  ? lockdep_hardirqs_on+0x7b/0x110
[  196.114627][ T7319]  ? do_fast_syscall_32+0x34/0x80
[  196.114642][ T7319]  ? irqentry_exit+0x10f/0x670
[  196.114659][ T7319]  do_fast_syscall_32+0x34/0x80
[  196.114675][ T7319]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  196.114693][ T7319] RIP: 0023:0xf702d539
[  196.114704][ T7319] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  196.114717][ T7319] RSP: 002b:00000000f541d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  196.114732][ T7319] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140
[  196.114741][ T7319] RDX: 00000000200488c0 RSI: 0000000000000000 RDI: 0000000000000000
[  196.114750][ T7319] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  196.114758][ T7319] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  196.114766][ T7319] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  196.114785][ T7319]  </TASK>
[  196.550136][ T5919] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  196.810091][ T5919] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  196.820227][ T5919] usb 1-1: config 0 has no interface number 0
[  196.883496][ T5919] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  196.893302][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.901978][ T5919] usb 1-1: Product: syz
[  196.906179][ T5919] usb 1-1: Manufacturer: syz
[  196.910929][ T5919] usb 1-1: SerialNumber: syz
[  196.921909][ T5919] usb 1-1: config 0 descriptor??
[  197.259027][ T5919] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  197.642715][ T5919] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  197.668668][ T5919] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  197.789507][ T5919] usb 1-1: media controller created
[  197.825312][ T5919] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  197.979934][ T5919] i2c i2c-2: ec100: i2c rd failed=-71 reg=33
[  198.213828][ T5919] usb 1-1: USB disconnect, device number 11
[  198.963061][ T7332] loop0: detected capacity change from 0 to 2560
[  199.013098][ T6280] buffer_io_error: 315 callbacks suppressed
[  199.013118][ T6280] Buffer I/O error on dev loop0, logical block 0, async page read
[  199.055115][ T6280] Buffer I/O error on dev loop0, logical block 0, async page read
[  199.101364][ T6280] Buffer I/O error on dev loop0, logical block 0, async page read
[  199.169961][ T6280] Buffer I/O error on dev loop0, logical block 0, async page read
[  199.287627][ T6280] Buffer I/O error on dev loop0, logical block 0, async page read
[  199.400156][ T7351] netlink: 16 bytes leftover after parsing attributes in process `syz.2.410'.
[  199.412976][ T7355] fuse: Bad value for 'fd'
[  199.458725][ T7353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.411'.
[  199.477656][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  199.484072][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  199.515492][ T7353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.411'.
[  199.597883][ T7357] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  199.997923][ T7367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  200.040969][ T7367] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  200.717140][ T5919] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  200.879815][ T5920] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  200.919772][ T5919] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  200.927935][ T5919] usb 3-1: config 0 has no interface number 0
[  200.943149][ T5919] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  200.962177][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.979618][ T5919] usb 3-1: Product: syz
[  201.001091][ T5919] usb 3-1: Manufacturer: syz
[  201.013802][ T5919] usb 3-1: SerialNumber: syz
[  201.026001][ T5919] usb 3-1: config 0 descriptor??
[  201.059639][ T5920] usb 1-1: Using ep0 maxpacket: 16
[  201.078026][ T5920] usb 1-1: unable to read config index 0 descriptor/start: -61
[  201.097306][ T5920] usb 1-1: can't read configurations, error -61
[  201.129476][ T6106] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  201.242145][ T5919] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  201.257401][ T5919] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  201.260886][ T5920] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  201.293001][ T5919] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  201.303769][ T6106] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  201.321174][ T6106] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  201.331391][ T5919] usb 3-1: media controller created
[  201.344801][ T6106] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=a2.bf
[  201.357487][ T6106] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.368427][ T6106] usb 5-1: Product: syz
[  201.373569][ T6106] usb 5-1: Manufacturer: syz
[  201.378926][ T6106] usb 5-1: SerialNumber: syz
[  201.411679][ T6106] usb 5-1: config 0 descriptor??
[  201.425659][ T5919] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  201.436838][ T6106] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  201.450011][ T5920] usb 1-1: Using ep0 maxpacket: 16
[  201.472875][ T5920] usb 1-1: unable to read config index 0 descriptor/start: -61
[  201.519446][ T5920] usb 1-1: can't read configurations, error -61
[  201.534456][ T5920] usb usb1-port1: attempt power cycle
[  201.545667][ T5919] i2c i2c-2: ec100: i2c rd failed=-71 reg=33
[  201.650697][ T7377] netlink: 'syz.4.419': attribute type 2 has an invalid length.
[  201.679948][ T7377] !: entered promiscuous mode
[  201.706053][ T5919] usb 3-1: USB disconnect, device number 18
[  201.788464][ T6106] ssu100 5-1:0.0: probe with driver ssu100 failed with error -110
[  201.918577][ T5920] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  201.929614][ T7387] netlink: 88 bytes leftover after parsing attributes in process `syz.1.423'.
[  201.960123][ T5920] usb 1-1: Using ep0 maxpacket: 16
[  201.967383][ T5920] usb 1-1: unable to read config index 0 descriptor/start: -61
[  201.981784][ T5920] usb 1-1: can't read configurations, error -61
[  202.129967][ T5920] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  202.149447][ T7393] fuse: Bad value for 'fd'
[  202.174548][ T5920] usb 1-1: Using ep0 maxpacket: 16
[  202.186388][ T5920] usb 1-1: unable to read config index 0 descriptor/start: -61
[  202.209440][ T5920] usb 1-1: can't read configurations, error -61
[  202.228967][ T5920] usb usb1-port1: unable to enumerate USB device
[  202.369140][ T7395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.426'.
[  202.424725][ T7395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.426'.
[  202.912364][ T7407] netlink: 4 bytes leftover after parsing attributes in process `syz.2.431'.
[  202.945056][ T7407] FAULT_INJECTION: forcing a failure.
[  202.945056][ T7407] name failslab, interval 1, probability 0, space 0, times 0
[  202.991423][ T7407] CPU: 1 UID: 0 PID: 7407 Comm: syz.2.431 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  202.991449][ T7407] Tainted: [L]=SOFTLOCKUP
[  202.991455][ T7407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  202.991465][ T7407] Call Trace:
[  202.991472][ T7407]  <TASK>
[  202.991478][ T7407]  dump_stack_lvl+0xe8/0x150
[  202.991502][ T7407]  should_fail_ex+0x414/0x560
[  202.991530][ T7407]  should_failslab+0xa8/0x100
[  202.991551][ T7407]  kmem_cache_alloc_noprof+0x88/0x710
[  202.991575][ T7407]  ? skb_clone+0x212/0x3a0
[  202.991599][ T7407]  skb_clone+0x212/0x3a0
[  202.991621][ T7407]  __netlink_deliver_tap+0x404/0x850
[  202.991651][ T7407]  ? netlink_deliver_tap+0x2e/0x1b0
[  202.991672][ T7407]  netlink_deliver_tap+0x19c/0x1b0
[  202.991692][ T7407]  netlink_sendskb+0x68/0x140
[  202.991715][ T7407]  netlink_unicast+0x397/0x9e0
[  202.991731][ T7407]  ? __asan_memcpy+0x40/0x70
[  202.991759][ T7407]  ? __pfx_netlink_unicast+0x10/0x10
[  202.991784][ T7407]  netlink_rcv_skb+0x28c/0x470
[  202.991804][ T7407]  ? __pfx_genl_rcv_msg+0x10/0x10
[  202.991820][ T7407]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  202.991837][ T7407]  ? genl_rcv+0x19/0x40
[  202.991862][ T7407]  ? down_read+0x274/0x2e0
[  202.991880][ T7407]  ? genl_rcv+0xd/0x40
[  202.991894][ T7407]  genl_rcv+0x28/0x40
[  202.991907][ T7407]  netlink_unicast+0x82f/0x9e0
[  202.991931][ T7407]  ? __pfx_netlink_unicast+0x10/0x10
[  202.991948][ T7407]  ? __alloc_skb+0x198/0x3a0
[  202.991964][ T7407]  ? netlink_sendmsg+0x642/0xb30
[  202.991988][ T7407]  ? skb_put+0x11b/0x210
[  202.992007][ T7407]  netlink_sendmsg+0x805/0xb30
[  202.992034][ T7407]  ? __pfx_netlink_sendmsg+0x10/0x10
[  202.992056][ T7407]  ? __import_iovec+0x5d4/0x7f0
[  202.992075][ T7407]  ? aa_sock_msg_perm+0xf1/0x1b0
[  202.992096][ T7407]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  202.992110][ T7407]  ? __pfx_netlink_sendmsg+0x10/0x10
[  202.992132][ T7407]  __sock_sendmsg+0x21c/0x270
[  202.992158][ T7407]  ____sys_sendmsg+0x505/0x820
[  202.992180][ T7407]  ? __pfx_____sys_sendmsg+0x10/0x10
[  202.992202][ T7407]  ? kstrtouint+0x6e/0xe0
[  202.992231][ T7407]  ___sys_sendmsg+0x21f/0x2a0
[  202.992251][ T7407]  ? __pfx____sys_sendmsg+0x10/0x10
[  202.992269][ T7407]  ? get_pid_task+0x20/0x1f0
[  202.992288][ T7407]  ? get_pid_task+0x20/0x1f0
[  202.992305][ T7407]  ? get_pid_task+0x20/0x1f0
[  202.992345][ T7407]  ? __fget_files+0x2a/0x420
[  202.992363][ T7407]  ? __fget_files+0x3a0/0x420
[  202.992389][ T7407]  __sys_sendmsg+0x164/0x220
[  202.992409][ T7407]  ? __pfx___sys_sendmsg+0x10/0x10
[  202.992434][ T7407]  ? __pfx_ksys_write+0x10/0x10
[  202.992457][ T7407]  __do_fast_syscall_32+0x1dc/0x570
[  202.992475][ T7407]  ? lockdep_hardirqs_on+0x7b/0x110
[  202.992490][ T7407]  ? do_fast_syscall_32+0x34/0x80
[  202.992506][ T7407]  ? irqentry_exit+0x10f/0x670
[  202.992525][ T7407]  do_fast_syscall_32+0x34/0x80
[  202.992542][ T7407]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  202.992560][ T7407] RIP: 0023:0xf702d539
[  202.992573][ T7407] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  202.992586][ T7407] RSP: 002b:00000000f541d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  202.992603][ T7407] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000400
[  202.992613][ T7407] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  202.992622][ T7407] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  202.992631][ T7407] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  202.992640][ T7407] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  202.992661][ T7407]  </TASK>
[  203.450844][ T7412] netlink: 12 bytes leftover after parsing attributes in process `syz.3.433'.
[  203.553274][ T7414] loop0: detected capacity change from 0 to 2560
[  203.570015][ T7414] Buffer I/O error on dev loop0, logical block 0, lost async page write
[  203.578446][ T7414] Buffer I/O error on dev loop0, logical block 1, lost async page write
[  203.590514][ T7414] Buffer I/O error on dev loop0, logical block 2, lost async page write
[  203.599771][ T6280] Buffer I/O error on dev loop0, logical block 256, lost async page write
[  203.608618][ T7414] Buffer I/O error on dev loop0, logical block 3, lost async page write
[  204.163261][ T5919] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  204.463395][ T5919] usb 1-1: Using ep0 maxpacket: 32
[  204.499710][ T5919] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  204.529314][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.535582][ T5846] usb 5-1: USB disconnect, device number 10
[  204.592087][ T5919] usb 1-1: config 0 descriptor??
[  204.620231][ T5919] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  204.817841][ T5919] gspca_vc032x: reg_r err -32
[  204.843541][ T5919] gspca_vc032x: I2c Bus Busy Wait 00
[  204.857906][ T7426] fuse: Invalid rootmode
[  204.865749][ T5919] gspca_vc032x: I2c Bus Busy Wait 00
[  204.893292][ T5919] gspca_vc032x: I2c Bus Busy Wait 00
[  204.915047][ T5919] gspca_vc032x: I2c Bus Busy Wait 00
[  204.935365][ T5919] gspca_vc032x: I2c Bus Busy Wait 00
[  204.955676][ T5919] gspca_vc032x: I2c Bus Busy Wait 00
[  204.985179][ T5919] gspca_vc032x: I2c Bus Busy Wait 00
[  205.009438][ T5919] gspca_vc032x: I2c Bus Busy Wait 00
[  205.014855][ T5919] gspca_vc032x: I2c Bus Busy Wait 00
[  205.049454][ T5919] gspca_vc032x: I2c Bus Busy Wait 00
[  205.054874][ T5919] gspca_vc032x: I2c Bus Busy Wait 00
[  205.084869][ T5919] gspca_vc032x: I2c Bus Busy Wait 00
[  205.119425][ T5919] gspca_vc032x: I2c Bus Busy Wait 00
[  205.124759][ T5919] gspca_vc032x: I2c Bus Busy Wait 00
[  205.158396][ T5919] gspca_vc032x: I2c Bus Busy Wait 00
[  205.179471][ T5919] gspca_vc032x: I2c Bus Busy Wait 00
[  205.189436][ T5919] gspca_vc032x: I2c Bus Busy Wait 00
[  205.212242][ T5919] gspca_vc032x: I2c Bus Busy Wait 00
[  205.244561][ T5919] gspca_vc032x: Unknown sensor...
[  205.265947][ T5919] vc032x 1-1:0.0: probe with driver vc032x failed with error -22
[  205.512242][ T5919] usb 1-1: USB disconnect, device number 16
[  205.575476][ T7434] netlink: 156 bytes leftover after parsing attributes in process `syz.3.438'.
[  205.714187][ T7437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.442'.
[  205.734939][ T7437] netlink: 4 bytes leftover after parsing attributes in process `syz.4.442'.
[  205.836493][ T7434] netlink: 4 bytes leftover after parsing attributes in process `syz.3.438'.
[  206.093690][ T7439] netlink: 72 bytes leftover after parsing attributes in process `syz.3.438'.
[  206.815598][ T7459] netlink: 76 bytes leftover after parsing attributes in process `syz.4.446'.
[  206.835412][ T7459] netlink: 72 bytes leftover after parsing attributes in process `syz.4.446'.
[  206.877359][ T7459] netlink: 'syz.4.446': attribute type 3 has an invalid length.
[  206.928182][ T7459] netlink: 11 bytes leftover after parsing attributes in process `syz.4.446'.
[  207.019321][ T7461] 
: renamed from bridge_slave_0 (while UP)
[  208.956248][ T7484] rtc_cmos 00:00: Alarms can be up to one day in the future
[  209.465259][ T5846] rtc_cmos 00:00: Alarms can be up to one day in the future
[  209.495105][ T5846] rtc_cmos 00:00: Alarms can be up to one day in the future
[  209.531997][ T5846] rtc_cmos 00:00: Alarms can be up to one day in the future
[  209.559726][ T5846] rtc_cmos 00:00: Alarms can be up to one day in the future
[  209.585263][ T5846] rtc rtc0: __rtc_set_alarm: err=-22
[  210.309507][   T24] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  210.380110][ T6106] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  210.460179][   T24] usb 4-1: Using ep0 maxpacket: 16
[  210.469080][   T24] usb 4-1: config 0 has no interfaces?
[  210.489013][   T24] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55
[  210.498566][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.510389][   T24] usb 4-1: Product: syz
[  210.522664][   T24] usb 4-1: Manufacturer: syz
[  210.535299][   T24] usb 4-1: SerialNumber: syz
[  210.550988][ T6106] usb 1-1: Using ep0 maxpacket: 32
[  210.567609][   T24] usb 4-1: config 0 descriptor??
[  210.579975][ T6106] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  210.607639][ T6106] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.671147][ T6106] usb 1-1: config 0 descriptor??
[  210.708056][ T6106] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  210.841292][ T7519] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1
[  210.998807][ T6106] gspca_vc032x: reg_r err -32
[  211.016701][ T6106] gspca_vc032x: I2c Bus Busy Wait 00
[  211.054978][ T6106] gspca_vc032x: I2c Bus Busy Wait 00
[  211.073611][ T6106] gspca_vc032x: I2c Bus Busy Wait 00
[  211.085744][ T6106] gspca_vc032x: I2c Bus Busy Wait 00
[  211.127589][ T6106] gspca_vc032x: I2c Bus Busy Wait 00
[  211.150830][ T6106] gspca_vc032x: I2c Bus Busy Wait 00
[  211.186195][ T6106] gspca_vc032x: I2c Bus Busy Wait 00
[  211.218179][ T6106] gspca_vc032x: I2c Bus Busy Wait 00
[  211.257099][ T6106] gspca_vc032x: I2c Bus Busy Wait 00
[  211.291881][ T6106] gspca_vc032x: I2c Bus Busy Wait 00
[  211.328072][ T6106] gspca_vc032x: I2c Bus Busy Wait 00
[  211.349432][ T6106] gspca_vc032x: I2c Bus Busy Wait 00
[  211.363948][ T6106] gspca_vc032x: I2c Bus Busy Wait 00
[  211.371494][ T7528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  211.390347][ T6106] gspca_vc032x: I2c Bus Busy Wait 00
[  211.401097][ T7528] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  211.421498][ T6106] gspca_vc032x: I2c Bus Busy Wait 00
[  211.440777][ T6106] gspca_vc032x: I2c Bus Busy Wait 00
[  211.462038][ T6106] gspca_vc032x: I2c Bus Busy Wait 00
[  211.479529][ T6106] gspca_vc032x: I2c Bus Busy Wait 00
[  211.499024][ T6106] gspca_vc032x: Unknown sensor...
[  211.517780][ T6106] vc032x 1-1:0.0: probe with driver vc032x failed with error -22
[  212.275050][ T5846] usb 1-1: USB disconnect, device number 17
[  212.283389][ T7545] FAULT_INJECTION: forcing a failure.
[  212.283389][ T7545] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  212.306843][ T7545] CPU: 1 UID: 0 PID: 7545 Comm: syz.4.464 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  212.306882][ T7545] Tainted: [L]=SOFTLOCKUP
[  212.306890][ T7545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  212.306914][ T7545] Call Trace:
[  212.306923][ T7545]  <TASK>
[  212.306932][ T7545]  dump_stack_lvl+0xe8/0x150
[  212.306965][ T7545]  should_fail_ex+0x414/0x560
[  212.307004][ T7545]  prepare_alloc_pages+0x22b/0x650
[  212.307037][ T7545]  __alloc_frozen_pages_noprof+0x123/0x370
[  212.307067][ T7545]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  212.307108][ T7545]  alloc_pages_bulk_noprof+0x560/0x710
[  212.307135][ T7545]  ? trace_kmalloc+0x1f/0xb0
[  212.307155][ T7545]  ? copy_splice_read+0x143/0xa50
[  212.307185][ T7545]  copy_splice_read+0x173/0xa50
[  212.307224][ T7545]  ? __pfx_copy_splice_read+0x10/0x10
[  212.307253][ T7545]  ? look_up_lock_class+0x57/0x110
[  212.307277][ T7545]  ? register_lock_class+0x31/0x2e0
[  212.307303][ T7545]  ? file_end_write+0xd8/0x250
[  212.307331][ T7545]  ? direct_splice_actor+0x10c/0x160
[  212.307361][ T7545]  ? __pfx_copy_splice_read+0x10/0x10
[  212.307386][ T7545]  splice_direct_to_actor+0x4a9/0xcc0
[  212.307433][ T7545]  ? __pfx_direct_splice_actor+0x10/0x10
[  212.307461][ T7545]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  212.307506][ T7545]  do_splice_direct+0x181/0x270
[  212.307536][ T7545]  ? __pfx_do_splice_direct+0x10/0x10
[  212.307561][ T7545]  ? common_file_perm+0x1b5/0x220
[  212.307589][ T7545]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  212.307621][ T7545]  ? bpf_lsm_file_permission+0x9/0x20
[  212.307643][ T7545]  ? security_file_permission+0x75/0x290
[  212.307666][ T7545]  ? rw_verify_area+0x255/0x4d0
[  212.307703][ T7545]  do_sendfile+0x4da/0x7e0
[  212.307739][ T7545]  ? __pfx_do_sendfile+0x10/0x10
[  212.307765][ T7545]  ? __pfx_ksys_write+0x10/0x10
[  212.307789][ T7545]  ? __ia32_compat_sys_sendfile+0x180/0x1d0
[  212.307819][ T7545]  __do_fast_syscall_32+0x1dc/0x570
[  212.307862][ T7545]  ? lockdep_hardirqs_on+0x7b/0x110
[  212.307883][ T7545]  ? do_fast_syscall_32+0x34/0x80
[  212.307908][ T7545]  ? irqentry_exit+0x10f/0x670
[  212.307934][ T7545]  do_fast_syscall_32+0x34/0x80
[  212.307971][ T7545]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  212.307995][ T7545] RIP: 0023:0xf70bd539
[  212.308010][ T7545] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  212.308028][ T7545] RSP: 002b:00000000f54ad55c EFLAGS: 00000206 ORIG_RAX: 00000000000000bb
[  212.308049][ T7545] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000004
[  212.308062][ T7545] RDX: 0000000000000000 RSI: 0000000000010046 RDI: 0000000000000000
[  212.308074][ T7545] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  212.308085][ T7545] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  212.308097][ T7545] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  212.308125][ T7545]  </TASK>
[  212.689910][ T7543] fuse: Invalid rootmode
[  213.271517][ T6106] usb 3-1: new full-speed USB device number 19 using dummy_hcd
[  213.810451][ T6106] usb 3-1: config 0 has an invalid interface number: 133 but max is 0
[  213.819636][ T6106] usb 3-1: config 0 has no interface number 0
[  213.865872][ T6106] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  214.028021][ T6106] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.093966][ T6106] usb 3-1: Product: syz
[  214.106374][ T6106] usb 3-1: Manufacturer: syz
[  214.249513][ T6106] usb 3-1: SerialNumber: syz
[  214.290727][ T6106] usb 3-1: config 0 descriptor??
[  214.482098][    T9] usb 4-1: USB disconnect, device number 26
[  214.600532][   T24] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  214.779897][   T24] usb 5-1: Using ep0 maxpacket: 32
[  214.802536][   T24] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[  214.817692][   T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  214.859701][   T24] usb 5-1: config 0 has no interface number 0
[  214.866140][   T24] usb 5-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10
[  214.882231][   T24] usb 5-1: config 0 interface 8 has no altsetting 0
[  214.906224][   T24] usb 5-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb
[  214.916705][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.925251][   T24] usb 5-1: Product: syz
[  214.929620][   T24] usb 5-1: Manufacturer: syz
[  214.934260][   T24] usb 5-1: SerialNumber: syz
[  214.969228][ T6106] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected
[  215.001946][ T6106] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81
[  215.020416][ T6106] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1
[  215.028225][ T6106] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2
[  215.097636][   T24] usb 5-1: config 0 descriptor??
[  215.160245][ T6106] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  215.336601][ T7565] input: syz1 as /devices/virtual/input/input6
[  215.394406][   T24] ath6kl: Failed to submit usb control message: -71
[  215.427406][   T24] ath6kl: unable to send the bmi data to the device: -71
[  215.459913][   T24] ath6kl: Unable to send get target info: -71
[  215.508397][   T24] ath6kl: Failed to init ath6kl core: -71
[  215.531281][   T24] ath6kl_usb 5-1:0.8: probe with driver ath6kl_usb failed with error -71
[  215.554783][ T5920] usb 3-1: USB disconnect, device number 19
[  215.575095][ T5920] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  215.604138][   T24] usb 5-1: USB disconnect, device number 11
[  215.629094][ T5920] keyspan 3-1:0.133: device disconnected
[  216.318659][ T7598] netlink: 16 bytes leftover after parsing attributes in process `syz.2.475'.
[  216.658313][ T7601] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  216.901165][   T53] Bluetooth: hci1: command 0x0406 tx timeout
[  216.907512][   T53] Bluetooth: hci2: command 0x0406 tx timeout
[  216.913627][ T5833] Bluetooth: hci3: command 0x0406 tx timeout
[  216.928037][   T53] Bluetooth: hci4: command 0x0406 tx timeout
[  216.934807][ T5833] Bluetooth: hci0: command 0x0406 tx timeout
[  216.989546][ T6106] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  217.049681][ T7608] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  217.159723][ T6106] usb 5-1: Using ep0 maxpacket: 16
[  217.175180][ T6106] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  217.188033][ T7608] program syz.1.478 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  217.208239][ T6106] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  217.248927][ T6106] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  217.277381][ T6106] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  217.292034][ T6106] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  217.332382][ T6106] usb 5-1: config 0 descriptor??
[  217.797152][ T6106] microsoft 0003:045E:07DA.0003: unknown global tag 0xd
[  217.828000][ T6106] microsoft 0003:045E:07DA.0003: item 0 1 1 13 parsing failed
[  217.850713][ T6106] microsoft 0003:045E:07DA.0003: parse failed
[  217.873369][ T6106] microsoft 0003:045E:07DA.0003: probe with driver microsoft failed with error -22
[  217.916504][ T7625] netlink: 20 bytes leftover after parsing attributes in process `syz.3.483'.
[  217.946438][ T7625] netlink: 4 bytes leftover after parsing attributes in process `syz.3.483'.
[  218.239519][ T6106] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  218.517227][ T6106] usb 1-1: unable to get BOS descriptor or descriptor too short
[  218.531744][ T6106] usb 1-1: config 160 has an invalid interface number: 19 but max is 0
[  218.557612][ T6106] usb 1-1: config 160 has no interface number 0
[  218.567761][ T6106] usb 1-1: config 160 interface 19 has no altsetting 0
[  218.621946][ T6106] usb 1-1: New USB device found, idVendor=1199, idProduct=68aa, bcdDevice=31.f3
[  218.636743][ T6106] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.662297][ T6106] usb 1-1: Product: syz
[  218.675697][ T6106] usb 1-1: Manufacturer: syz
[  218.689442][ T6106] usb 1-1: SerialNumber: syz
[  219.032920][ T7637] loop0: detected capacity change from 0 to 2560
[  219.053184][ T7637] buffer_io_error: 325 callbacks suppressed
[  219.053215][ T7637] Buffer I/O error on dev loop0, logical block 0, lost async page write
[  219.068064][ T7637] Buffer I/O error on dev loop0, logical block 1, lost async page write
[  219.076636][ T7637] Buffer I/O error on dev loop0, logical block 2, lost async page write
[  219.085149][ T7637] Buffer I/O error on dev loop0, logical block 3, lost async page write
[  219.111553][ T6280] Buffer I/O error on dev loop0, logical block 256, lost async page write
[  219.157395][ T6280] Buffer I/O error on dev loop0, logical block 257, lost async page write
[  219.182911][ T6280] Buffer I/O error on dev loop0, logical block 258, lost async page write
[  219.230366][ T7637] Buffer I/O error on dev loop0, logical block 4, lost async page write
[  219.245445][ T7637] Buffer I/O error on dev loop0, logical block 5, lost async page write
[  219.256129][ T7637] Buffer I/O error on dev loop0, logical block 6, lost async page write
[  219.603644][ T6663] usb 5-1: USB disconnect, device number 12
[  220.771263][ T7645] netlink: 24 bytes leftover after parsing attributes in process `syz.3.486'.
[  220.933689][ T7646] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  221.184947][ T6106] usb 1-1: USB disconnect, device number 18
[  221.736006][ T7658] FAULT_INJECTION: forcing a failure.
[  221.736006][ T7658] name failslab, interval 1, probability 0, space 0, times 0
[  221.913804][ T7658] CPU: 1 UID: 0 PID: 7658 Comm: syz.0.488 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  221.913840][ T7658] Tainted: [L]=SOFTLOCKUP
[  221.913847][ T7658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  221.913860][ T7658] Call Trace:
[  221.913868][ T7658]  <TASK>
[  221.913877][ T7658]  dump_stack_lvl+0xe8/0x150
[  221.913909][ T7658]  should_fail_ex+0x414/0x560
[  221.913947][ T7658]  should_failslab+0xa8/0x100
[  221.913975][ T7658]  __kmalloc_cache_noprof+0x84/0x700
[  221.913997][ T7658]  ? _copy_from_user+0x94/0xb0
[  221.914023][ T7658]  ? __se_sys_mount+0x166/0x410
[  221.914047][ T7658]  ? memdup_user+0x99/0xd0
[  221.914075][ T7658]  __se_sys_mount+0x166/0x410
[  221.914107][ T7658]  ? __pfx___se_sys_mount+0x10/0x10
[  221.914138][ T7658]  ? __ia32_sys_mount+0x20/0xc0
[  221.914163][ T7658]  __do_fast_syscall_32+0x1dc/0x570
[  221.914187][ T7658]  ? lockdep_hardirqs_on+0x7b/0x110
[  221.914206][ T7658]  ? do_fast_syscall_32+0x34/0x80
[  221.914229][ T7658]  ? irqentry_exit+0x10f/0x670
[  221.914254][ T7658]  do_fast_syscall_32+0x34/0x80
[  221.914280][ T7658]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  221.914306][ T7658] RIP: 0023:0xf706d539
[  221.914324][ T7658] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  221.914342][ T7658] RSP: 002b:00000000f543c55c EFLAGS: 00000206 ORIG_RAX: 0000000000000015
[  221.914362][ T7658] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000040
[  221.914377][ T7658] RDX: 0000000080000080 RSI: 0000000000800000 RDI: 0000000080000540
[  221.914392][ T7658] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  221.914406][ T7658] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  221.914419][ T7658] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  221.914451][ T7658]  </TASK>
[  222.306544][ T7661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  222.329603][ T7661] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  222.362262][ T7661] netlink: 'syz.1.490': attribute type 2 has an invalid length.
[  222.460788][ T7661] !: entered promiscuous mode
[  222.525059][ T7662] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  222.673076][ T7665] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1
[  223.396767][ T7675] tipc: Started in network mode
[  223.406461][ T7675] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711
[  223.446274][ T7675] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  223.544960][ T7680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.497'.
[  223.949476][    T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  224.071600][ T7685] tipc: Started in network mode
[  224.091531][ T7685] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711
[  224.119831][ T7685] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  224.163354][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  224.179049][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  224.214204][    T9] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=a2.bf
[  224.224131][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.238502][    T9] usb 1-1: Product: syz
[  224.243009][    T9] usb 1-1: Manufacturer: syz
[  224.247819][    T9] usb 1-1: SerialNumber: syz
[  224.624156][    T9] usb 1-1: config 0 descriptor??
[  224.720428][    T9] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  224.757220][ T7695] veth0: entered promiscuous mode
[  224.773388][ T7695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.502'.
[  224.847962][ T7696] loop1: detected capacity change from 0 to 7
[  225.067241][    T9] ssu100 1-1:0.0: probe with driver ssu100 failed with error -110
[  225.226255][ T7696]  loop1: [CUMANA/ADFS] p1 [ADFS] p1
[  225.232454][ T7696] loop1: partition table partially beyond EOD, truncated
[  225.240255][ T7696] loop1: p1 size 2989602745 extends beyond EOD, truncated
[  225.275122][ T7679] netlink: 16 bytes leftover after parsing attributes in process `syz.0.495'.
[  225.368423][ T6280] udevd[6280]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  226.535856][ T5918] usb 1-1: USB disconnect, device number 19
[  226.698360][ T7719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.508'.
[  226.717872][ T7715] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  226.956768][ T7722] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  227.052105][ T7724] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1
[  227.333324][ T7729] fuse: Unknown parameter ''
[  227.353116][ T7729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  227.367835][ T7731] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  227.390498][ T7729] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  228.825582][ T7748] netlink: 12 bytes leftover after parsing attributes in process `syz.2.518'.
[  228.852646][ T6106] usb 5-1: new full-speed USB device number 13 using dummy_hcd
[  229.026443][ T6106] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  229.079521][ T6106] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  229.111602][ T6106] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[  229.139547][ T6106] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  229.163003][ T6106] usb 5-1: SerialNumber: syz
[  229.192771][ T6106] usb 5-1: 0:2 : does not exist
[  229.513473][ T7755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.520'.
[  229.531442][ T7745] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  229.648103][ T6106] usb 5-1: USB disconnect, device number 13
[  230.096336][ T7764] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1
[  231.197781][ T7767] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  231.381795][ T7773] fuse: Unknown parameter 'user00000000000000000000'
[  231.408446][ T7775] bridge0: port 3(syz_tun) entered disabled state
[  231.415273][ T7775] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.423175][ T7775] bridge0: port 1(
) entered disabled state
[  231.611782][ T7782] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  232.583839][ T7796] netlink: 12 bytes leftover after parsing attributes in process `syz.2.531'.
[  234.120661][ T7801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.532'.
[  235.476679][ T7813] netlink: 16 bytes leftover after parsing attributes in process `syz.2.534'.
[  235.741292][ T7820] netlink: 'syz.1.536': attribute type 1 has an invalid length.
[  235.750052][ T7820] netlink: 'syz.1.536': attribute type 1 has an invalid length.
[  236.048604][ T7823] fuse: Unknown parameter 'user00000000000000000000'
[  236.314557][ T7832] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1
[  236.860104][ T7845] 
: renamed from bridge_slave_0 (while UP)
[  237.919462][ T6106] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  238.079474][ T6106] usb 3-1: Using ep0 maxpacket: 32
[  238.086397][ T6106] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  238.099526][ T6106] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.155190][ T6106] usb 3-1: config 0 descriptor??
[  238.182736][ T6106] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  238.382176][ T6106] gspca_vc032x: reg_r err -32
[  238.386891][ T6106] gspca_vc032x: I2c Bus Busy Wait 00
[  238.449885][ T6106] gspca_vc032x: I2c Bus Busy Wait 00
[  238.479461][ T6106] gspca_vc032x: I2c Bus Busy Wait 00
[  238.484818][ T6106] gspca_vc032x: I2c Bus Busy Wait 00
[  238.525304][ T6106] gspca_vc032x: I2c Bus Busy Wait 00
[  238.553011][ T6106] gspca_vc032x: I2c Bus Busy Wait 00
[  238.558370][ T6106] gspca_vc032x: I2c Bus Busy Wait 00
[  238.589649][ T7851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.544'.
[  238.603931][ T6106] gspca_vc032x: I2c Bus Busy Wait 00
[  238.609285][ T6106] gspca_vc032x: I2c Bus Busy Wait 00
[  238.640805][ T6106] gspca_vc032x: I2c Bus Busy Wait 00
[  238.653151][ T6106] gspca_vc032x: I2c Bus Busy Wait 00
[  238.678985][ T6106] gspca_vc032x: I2c Bus Busy Wait 00
[  238.686671][ T6106] gspca_vc032x: I2c Bus Busy Wait 00
[  238.705522][ T6106] gspca_vc032x: I2c Bus Busy Wait 00
[  238.719597][ T6106] gspca_vc032x: I2c Bus Busy Wait 00
[  238.735114][ T6106] gspca_vc032x: I2c Bus Busy Wait 00
[  238.765692][ T6106] gspca_vc032x: I2c Bus Busy Wait 00
[  238.811880][ T6106] gspca_vc032x: I2c Bus Busy Wait 00
[  238.840251][ T6106] gspca_vc032x: Unknown sensor...
[  238.845410][ T6106] vc032x 3-1:0.0: probe with driver vc032x failed with error -22
[  238.949685][ T7858] netlink: 12 bytes leftover after parsing attributes in process `syz.0.546'.
[  239.355099][ T7861] bridge0: port 3(syz_tun) entered blocking state
[  239.361715][ T7861] bridge0: port 3(syz_tun) entered listening state
[  239.368479][ T7861] bridge0: port 2(bridge_slave_1) entered blocking state
[  239.375693][ T7861] bridge0: port 2(bridge_slave_1) entered listening state
[  239.383190][ T7861] bridge0: port 1(
) entered blocking state
[  239.389241][ T7861] bridge0: port 1(
) entered listening state
[  239.477508][ T7861] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  239.855282][ T7874] fuse: Unknown parameter 'user_i00000000000000000000'
[  240.098629][ T7878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.553'.
[  240.149109][ T7878] netlink: 4 bytes leftover after parsing attributes in process `syz.4.553'.
[  240.159448][ T6106] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  240.330180][ T6106] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  240.345732][ T6106] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  240.356409][ T6106] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  240.369844][ T6106] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  240.379016][ T6106] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.391323][ T6106] usb 1-1: config 0 descriptor??
[  240.479566][ T5921] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  240.570563][ T5885] usb 3-1: USB disconnect, device number 20
[  240.675769][ T5921] usb 4-1: Using ep0 maxpacket: 16
[  240.683066][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  241.384777][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  241.384814][ T5921] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  241.384864][ T5921] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  241.384898][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  241.391110][ T5921] usb 4-1: config 0 descriptor??
[  241.672286][ T6106] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x5
[  241.672347][ T6106] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  241.672369][ T6106] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  241.672683][ T6106] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  241.672779][ T6106] plantronics 0003:047F:FFFF.0004: unknown global tag 0xe
[  241.672799][ T6106] plantronics 0003:047F:FFFF.0004: item 0 0 1 14 parsing failed
[  241.680210][ T6106] plantronics 0003:047F:FFFF.0004: parse failed
[  241.680323][ T6106] plantronics 0003:047F:FFFF.0004: probe with driver plantronics failed with error -22
[  241.883869][ T5921] microsoft 0003:045E:07DA.0005: unknown global tag 0xd
[  241.883890][ T5921] microsoft 0003:045E:07DA.0005: item 0 1 1 13 parsing failed
[  241.884353][ T5921] microsoft 0003:045E:07DA.0005: parse failed
[  241.884421][ T5921] microsoft 0003:045E:07DA.0005: probe with driver microsoft failed with error -22
[  242.796027][ T7898] netlink: 12 bytes leftover after parsing attributes in process `syz.1.556'.
[  243.270748][ T6106] usb 1-1: USB disconnect, device number 20
[  243.426999][ T5919] usb 4-1: USB disconnect, device number 27
[  243.726399][ T7912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  243.750784][ T7912] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  243.803506][ T5921] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  243.989606][ T5921] usb 1-1: Using ep0 maxpacket: 16
[  244.016050][ T5921] usb 1-1: config 0 has no interfaces?
[  244.025578][ T7916] netlink: 12 bytes leftover after parsing attributes in process `syz.2.562'.
[  244.059891][ T5921] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55
[  244.081544][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  244.089779][ T5921] usb 1-1: Product: syz
[  244.108323][ T5921] usb 1-1: Manufacturer: syz
[  244.114463][ T5921] usb 1-1: SerialNumber: syz
[  244.140212][ T5921] usb 1-1: config 0 descriptor??
[  244.207299][ T7919] fuse: Unknown parameter 'user_i00000000000000000000'
[  244.388636][ T7924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.564'.
[  244.412959][ T7924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.564'.
[  245.133135][ T7932] loop0: detected capacity change from 0 to 2560
[  245.230629][ T6280] buffer_io_error: 315 callbacks suppressed
[  245.230648][ T6280] Buffer I/O error on dev loop0, logical block 0, async page read
[  245.321716][ T7932] Buffer I/O error on dev loop0, logical block 0, lost async page write
[  245.480867][ T7932] Buffer I/O error on dev loop0, logical block 1, lost async page write
[  245.489659][ T7932] Buffer I/O error on dev loop0, logical block 2, lost async page write
[  245.498152][ T7932] Buffer I/O error on dev loop0, logical block 3, lost async page write
[  245.506736][ T7932] Buffer I/O error on dev loop0, logical block 4, lost async page write
[  245.515314][ T7932] Buffer I/O error on dev loop0, logical block 5, lost async page write
[  245.523797][ T7932] Buffer I/O error on dev loop0, logical block 6, lost async page write
[  245.533056][ T7932] Buffer I/O error on dev loop0, logical block 7, lost async page write
[  245.544166][ T7932] Buffer I/O error on dev loop0, logical block 8, lost async page write
[  245.649475][ T6106] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  245.869471][ T6106] usb 3-1: Using ep0 maxpacket: 16
[  245.905089][ T6106] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  245.935926][ T6106] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  245.966964][ T6106] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  246.011138][ T6106] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  246.037589][ T6106] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.078047][ T6106] usb 3-1: config 0 descriptor??
[  246.520342][ T6106] microsoft 0003:045E:07DA.0006: unknown global tag 0xd
[  246.533394][ T6106] microsoft 0003:045E:07DA.0006: item 0 1 1 13 parsing failed
[  246.567819][ T6106] microsoft 0003:045E:07DA.0006: parse failed
[  246.597189][ T6106] microsoft 0003:045E:07DA.0006: probe with driver microsoft failed with error -22
[  247.089590][ T7942] netlink: 12 bytes leftover after parsing attributes in process `syz.4.568'.
[  247.175885][ T6106] usb 1-1: USB disconnect, device number 21
[  247.485660][ T7952] FAULT_INJECTION: forcing a failure.
[  247.485660][ T7952] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  247.510769][ T7952] CPU: 0 UID: 0 PID: 7952 Comm: syz.0.571 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  247.510806][ T7952] Tainted: [L]=SOFTLOCKUP
[  247.510815][ T7952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  247.510840][ T7952] Call Trace:
[  247.510848][ T7952]  <TASK>
[  247.510858][ T7952]  dump_stack_lvl+0xe8/0x150
[  247.510892][ T7952]  should_fail_ex+0x414/0x560
[  247.510933][ T7952]  _copy_to_user+0x31/0xb0
[  247.510961][ T7952]  simple_read_from_buffer+0xe1/0x170
[  247.510991][ T7952]  proc_fail_nth_read+0x1b3/0x220
[  247.511017][ T7952]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  247.511041][ T7952]  ? rw_verify_area+0x2a6/0x4d0
[  247.511073][ T7952]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  247.511102][ T7952]  vfs_read+0x200/0xa30
[  247.511120][ T7952]  ? fdget_pos+0x247/0x320
[  247.511164][ T7952]  ? __pfx___mutex_lock+0x10/0x10
[  247.511189][ T7952]  ? __pfx_vfs_read+0x10/0x10
[  247.511210][ T7952]  ? __fget_files+0x2a/0x420
[  247.511238][ T7952]  ? __fget_files+0x3a0/0x420
[  247.511262][ T7952]  ? __fget_files+0x2a/0x420
[  247.511295][ T7952]  ksys_read+0x145/0x250
[  247.511316][ T7952]  ? __pfx_ksys_read+0x10/0x10
[  247.511346][ T7952]  __do_fast_syscall_32+0x1dc/0x570
[  247.511371][ T7952]  ? lockdep_hardirqs_on+0x7b/0x110
[  247.511391][ T7952]  ? do_fast_syscall_32+0x34/0x80
[  247.511414][ T7952]  ? irqentry_exit+0x10f/0x670
[  247.511439][ T7952]  do_fast_syscall_32+0x34/0x80
[  247.511462][ T7952]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  247.511486][ T7952] RIP: 0023:0xf706d539
[  247.511504][ T7952] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  247.511523][ T7952] RSP: 002b:00000000f545d590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003
[  247.511544][ T7952] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 00000000f545d620
[  247.511559][ T7952] RDX: 000000000000000f RSI: 00000000f7406ff4 RDI: 0000000000000000
[  247.511573][ T7952] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[  247.511584][ T7952] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  247.511598][ T7952] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  247.511629][ T7952]  </TASK>
[  247.810126][ T7956] fuse: Unknown parameter 'user_i00000000000000000000'
[  248.063640][ T7967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.576'.
[  248.159257][ T7967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.576'.
[  248.939863][ T5920] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  249.239676][ T5846] usb 3-1: USB disconnect, device number 21
[  249.750617][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  249.778100][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  250.080669][ T5920] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=a2.bf
[  250.102520][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  250.172830][ T5920] usb 4-1: Product: syz
[  250.201211][ T5920] usb 4-1: Manufacturer: syz
[  250.221516][ T5920] usb 4-1: SerialNumber: syz
[  250.258851][ T5920] usb 4-1: config 0 descriptor??
[  250.396826][ T5920] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  250.783646][ T7975] netlink: 'syz.3.586': attribute type 2 has an invalid length.
[  250.929083][ T7975] !: entered promiscuous mode
[  251.164550][ T5920] ssu100 4-1:0.0: probe with driver ssu100 failed with error -110
[  252.302243][ T6663] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  252.399700][ T5846] usb 4-1: USB disconnect, device number 28
[  252.428679][ T8013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.585'.
[  252.451340][ T8014] fuse: Unknown parameter 'user_id00000000000000000000'
[  252.479406][ T6663] usb 1-1: Using ep0 maxpacket: 16
[  252.498664][ T6663] usb 1-1: config 0 has no interfaces?
[  252.513699][ T6663] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55
[  252.523597][ T8013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.585'.
[  252.549450][ T6663] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.580527][ T6663] usb 1-1: Product: syz
[  252.584764][ T6663] usb 1-1: Manufacturer: syz
[  252.613037][ T6663] usb 1-1: SerialNumber: syz
[  252.621805][ T6663] usb 1-1: config 0 descriptor??
[  253.094890][ T5968] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  253.259492][ T5968] usb 3-1: Using ep0 maxpacket: 16
[  253.269294][ T5968] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  253.280511][ T5968] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  253.338792][ T5968] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  253.434363][ T5968] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  253.509764][ T5968] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  253.619931][ T5968] usb 3-1: config 0 descriptor??
[  254.042098][ T5968] microsoft 0003:045E:07DA.0007: unknown global tag 0xd
[  254.049261][ T5968] microsoft 0003:045E:07DA.0007: item 0 1 1 13 parsing failed
[  254.070964][ T5968] microsoft 0003:045E:07DA.0007: parse failed
[  254.092438][ T5968] microsoft 0003:045E:07DA.0007: probe with driver microsoft failed with error -22
[  254.713990][ T8050] netlink: 12 bytes leftover after parsing attributes in process `syz.3.597'.
[  255.007568][ T8055] fuse: Bad value for 'group_id'
[  255.016314][ T8055] fuse: Bad value for 'group_id'
[  255.386095][ T8055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  255.410710][ T8055] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  255.733612][ T5920] usb 1-1: USB disconnect, device number 22
[  255.868466][ T8060] fuse: Unknown parameter 'user_id00000000000000000000'
[  256.175021][ T8071] IPVS: sh: FWM 3 0x00000003 - no destination available
[  256.186074][ T5919] IPVS: starting estimator thread 0...
[  256.279527][ T5968] usb 1-1: new low-speed USB device number 23 using dummy_hcd
[  256.302238][ T8072] IPVS: using max 34 ests per chain, 81600 per kthread
[  256.446425][ T5968] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  256.672865][ T5968] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  256.695076][ T5968] usb 1-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47
[  256.707318][ T5968] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  256.743471][ T5968] usb 1-1: config 0 descriptor??
[  256.910147][ T5919] usb 3-1: USB disconnect, device number 22
[  257.167218][ T5968] usb 1-1: string descriptor 0 read error: -71
[  257.210370][ T5968] qmi_wwan 1-1:0.0: probe with driver qmi_wwan failed with error -22
[  257.223165][ T5968] usb 1-1: USB disconnect, device number 23
[  258.063048][ T8092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.607'.
[  258.134176][ T8092] netlink: 'syz.1.607': attribute type 13 has an invalid length.
[  258.311983][ T8080] loop0: detected capacity change from 0 to 2560
[  258.495684][ T8092] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  258.957254][ T8098] netlink: 12 bytes leftover after parsing attributes in process `syz.0.609'.
[  259.320995][ T5968] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  259.479541][ T5968] usb 5-1: Using ep0 maxpacket: 16
[  259.486470][ T5968] usb 5-1: config 0 has no interfaces?
[  259.495494][ T5968] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55
[  259.531715][ T5968] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  259.564740][ T5968] usb 5-1: Product: syz
[  259.577849][ T5968] usb 5-1: Manufacturer: syz
[  259.589710][ T5968] usb 5-1: SerialNumber: syz
[  259.607974][ T5968] usb 5-1: config 0 descriptor??
[  259.669052][ T8106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.612'.
[  259.699141][ T8106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.612'.
[  259.829483][ T5968] usb 4-1: new full-speed USB device number 29 using dummy_hcd
[  260.208234][ T5968] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  260.233322][ T5968] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  260.261667][ T5968] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[  260.273927][ T5968] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  260.287581][ T5968] usb 4-1: SerialNumber: syz
[  260.346725][ T5968] usb 4-1: 0:2 : does not exist
[  260.473307][ T8117] bridge0: port 3(syz_tun) entered blocking state
[  260.480164][ T8117] bridge0: port 3(syz_tun) entered disabled state
[  260.487877][ T8117] syz_tun: entered allmulticast mode
[  260.496028][ T8117] syz_tun: entered promiscuous mode
[  260.502063][ T8117] bridge0: port 3(syz_tun) entered blocking state
[  260.508667][ T8117] bridge0: port 3(syz_tun) entered forwarding state
[  260.543452][ T6663] usb 1-1: new full-speed USB device number 24 using dummy_hcd
[  260.558135][ T8104] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  260.717424][ T5968] usb 4-1: USB disconnect, device number 29
[  260.726299][ T6663] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  260.737279][ T6663] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  260.762447][ T6663] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[  260.785375][ T6663] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  260.854209][ T6280] udevd[6280]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  260.904196][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  260.910714][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  260.989454][ T6663] usb 1-1: SerialNumber: syz
[  261.028429][ T6663] usb 1-1: 0:2 : does not exist
[  261.310885][ T8113] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  261.398918][ T6663] usb 1-1: USB disconnect, device number 24
[  261.717094][ T5919] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  261.891951][ T5919] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  261.900139][ T5919] usb 4-1: config 0 has no interface number 0
[  261.908931][ T5919] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  261.928287][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  261.953389][ T5919] usb 4-1: Product: syz
[  261.971102][ T5919] usb 4-1: Manufacturer: syz
[  261.988928][ T5919] usb 4-1: SerialNumber: syz
[  262.224907][ T5919] usb 4-1: config 0 descriptor??
[  262.435909][ T5919] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  262.485983][ T5919] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  262.499965][ T5919] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  262.508130][ T5919] usb 4-1: media controller created
[  262.613935][ T5919] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  262.614085][ T5846] usb 5-1: USB disconnect, device number 14
[  262.769872][ T5968] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  262.929561][ T5968] usb 3-1: Using ep0 maxpacket: 16
[  262.943736][ T5968] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  262.966282][ T5968] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  262.987681][ T5968] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  263.001677][ T5968] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  263.011087][ T5968] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.026760][ T5968] usb 3-1: config 0 descriptor??
[  263.069133][ T8146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  263.080570][ T8146] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  263.169637][ T5918] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  263.290823][ T8148] netlink: 12 bytes leftover after parsing attributes in process `syz.3.623'.
[  263.332187][ T5918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  263.343750][ T5918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  263.363417][ T5918] usb 1-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00
[  263.383023][ T5918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.403001][ T5918] usb 1-1: config 0 descriptor??
[  263.484163][ T5968] microsoft 0003:045E:07DA.0008: unknown global tag 0xd
[  263.492670][ T5968] microsoft 0003:045E:07DA.0008: item 0 1 1 13 parsing failed
[  263.501962][ T5968] microsoft 0003:045E:07DA.0008: parse failed
[  263.508663][ T5968] microsoft 0003:045E:07DA.0008: probe with driver microsoft failed with error -22
[  263.790215][ T5919] i2c i2c-2: ec100: i2c rd failed=-110 reg=33
[  263.932786][ T8158] FAULT_INJECTION: forcing a failure.
[  263.932786][ T8158] name failslab, interval 1, probability 0, space 0, times 0
[  263.949045][ T8158] CPU: 0 UID: 0 PID: 8158 Comm: syz.1.625 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  263.949082][ T8158] Tainted: [L]=SOFTLOCKUP
[  263.949090][ T8158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  263.949107][ T8158] Call Trace:
[  263.949116][ T8158]  <TASK>
[  263.949125][ T8158]  dump_stack_lvl+0xe8/0x150
[  263.949159][ T8158]  should_fail_ex+0x414/0x560
[  263.949199][ T8158]  should_failslab+0xa8/0x100
[  263.949227][ T8158]  __kmalloc_noprof+0xdf/0x800
[  263.949249][ T8158]  ? tomoyo_encode2+0x27f/0x530
[  263.949276][ T8158]  ? tomoyo_check_unix_address+0x15a/0x7b0
[  263.949311][ T8158]  tomoyo_encode2+0x27f/0x530
[  263.949346][ T8158]  tomoyo_check_unix_address+0x3c3/0x7b0
[  263.949381][ T8158]  ? tomoyo_check_unix_address+0x15a/0x7b0
[  263.949408][ T8158]  ? __pfx_tomoyo_check_unix_address+0x10/0x10
[  263.949460][ T8158]  tomoyo_socket_sendmsg_permission+0x1da/0x300
[  263.949501][ T8158]  security_socket_sendmsg+0x9b/0x2b0
[  263.949533][ T8158]  __sock_sendmsg+0x49/0x270
[  263.949564][ T8158]  ? ____sys_sendmsg+0x519/0x820
[  263.949592][ T8158]  ____sys_sendmsg+0x52d/0x820
[  263.949623][ T8158]  ? __pfx_____sys_sendmsg+0x10/0x10
[  263.949654][ T8158]  ? rcu_is_watching+0x15/0xb0
[  263.949679][ T8158]  ? ___sys_sendmsg+0x22f/0x2a0
[  263.949712][ T8158]  ___sys_sendmsg+0x21f/0x2a0
[  263.949741][ T8158]  ? __pfx____sys_sendmsg+0x10/0x10
[  263.949764][ T8158]  ? kstrtoull+0x12f/0x1d0
[  263.949798][ T8158]  ? kstrtouint+0x6e/0xe0
[  263.949871][ T8158]  __sys_sendmmsg+0x28e/0x430
[  263.949905][ T8158]  ? __pfx___sys_sendmmsg+0x10/0x10
[  263.949929][ T8158]  ? __mutex_unlock_slowpath+0x1a1/0x730
[  263.949987][ T8158]  ? ksys_write+0x22a/0x250
[  263.950010][ T8158]  ? __pfx_ksys_write+0x10/0x10
[  263.950038][ T8158]  __ia32_compat_sys_sendmmsg+0xa2/0xc0
[  263.950072][ T8158]  __do_fast_syscall_32+0x1dc/0x570
[  263.950097][ T8158]  ? lockdep_hardirqs_on+0x7b/0x110
[  263.950118][ T8158]  ? do_fast_syscall_32+0x34/0x80
[  263.950142][ T8158]  ? irqentry_exit+0x10f/0x670
[  263.950168][ T8158]  do_fast_syscall_32+0x34/0x80
[  263.950193][ T8158]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  263.950219][ T8158] RIP: 0023:0xf704d539
[  263.950236][ T8158] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  263.950254][ T8158] RSP: 002b:00000000f543d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000159
[  263.950275][ T8158] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080002d80
[  263.950289][ T8158] RDX: 0000000000000002 RSI: 0000000040008004 RDI: 0000000000000000
[  263.950303][ T8158] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  263.950316][ T8158] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  263.950346][ T8158] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  263.950377][ T8158]  </TASK>
[  264.521139][ T8162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  264.530096][ T8162] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  264.573957][ T8162] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  264.720966][ T8167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  264.735505][ T8167] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  265.055878][ T8170] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1
[  265.848395][ T5885] usb 3-1: USB disconnect, device number 23
[  265.965593][ T5918] usbhid 1-1:0.0: can't add hid device: -71
[  265.976525][ T5919] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  265.999523][ T5918] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  266.031935][ T5918] usb 1-1: USB disconnect, device number 25
[  266.179645][ T5919] usb 5-1: Using ep0 maxpacket: 16
[  266.217250][ T5919] usb 5-1: config 0 has no interfaces?
[  266.236451][ T5919] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55
[  266.246679][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  266.258571][ T5919] usb 5-1: Product: syz
[  266.263725][ T5919] usb 5-1: Manufacturer: syz
[  266.268442][ T5919] usb 5-1: SerialNumber: syz
[  266.307318][ T5919] usb 5-1: config 0 descriptor??
[  266.564960][ T8192] netlink: 12 bytes leftover after parsing attributes in process `syz.2.636'.
[  267.100809][ T5846] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  267.237835][ T8203] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  267.322693][ T5846] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  267.375224][ T5846] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  267.485805][ T8213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.642'.
[  267.540225][ T5846] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=a2.bf
[  267.565145][ T5846] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.598988][ T5846] usb 1-1: Product: syz
[  267.606077][ T5846] usb 1-1: Manufacturer: syz
[  267.628017][ T5846] usb 1-1: SerialNumber: syz
[  267.736177][ T5846] usb 1-1: config 0 descriptor??
[  267.769857][ T5846] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  268.003014][ T8196] netlink: 'syz.0.633': attribute type 2 has an invalid length.
[  268.048625][ T8196] !: entered promiscuous mode
[  268.080421][ T5846] ssu100 1-1:0.0: probe with driver ssu100 failed with error -110
[  269.029477][    T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  269.203048][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[  269.222730][    T9] usb 3-1: config 160 has an invalid interface number: 19 but max is 0
[  269.248849][    T9] usb 3-1: config 160 has no interface number 0
[  269.264021][    T9] usb 3-1: config 160 interface 19 has no altsetting 0
[  269.288123][    T9] usb 3-1: New USB device found, idVendor=1199, idProduct=68aa, bcdDevice=31.f3
[  269.313421][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  269.342336][ T6663] usb 5-1: USB disconnect, device number 15
[  269.361836][    T9] usb 3-1: Product: syz
[  269.388341][    T9] usb 3-1: Manufacturer: syz
[  269.404245][    T9] usb 3-1: SerialNumber: syz
[  269.665271][    T9] usb 3-1: USB disconnect, device number 24
[  269.695076][ T5919] usb 1-1: USB disconnect, device number 26
[  269.818267][ T8240] netlink: 28 bytes leftover after parsing attributes in process `syz.1.651'.
[  269.870868][    C1] bridge0: port 1(
) entered learning state
[  269.877711][    C1] bridge0: port 2(bridge_slave_1) entered learning state
[  269.885076][    C1] bridge0: port 3(syz_tun) entered learning state
[  270.062631][ T8246] netlink: 12 bytes leftover after parsing attributes in process `syz.0.652'.
[  270.091956][ T8247] fuse: Unknown parameter '0x0000000000000003'
[  270.480386][ T8255] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  270.557108][ T8258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.656'.
[  270.994385][ T8269] netlink: 20 bytes leftover after parsing attributes in process `syz.1.659'.
[  271.026780][ T8269] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  271.054107][ T8270] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  271.186573][ T8270] program syz.0.661 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  271.289440][ T5919] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  271.449978][ T5919] usb 3-1: Using ep0 maxpacket: 16
[  271.470573][ T5919] usb 3-1: config 0 has no interfaces?
[  271.480869][ T5919] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55
[  271.498758][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  271.540395][ T8280] fuse: Unknown parameter '0x0000000000000003'
[  271.579669][ T5919] usb 3-1: Product: syz
[  271.594124][ T5919] usb 3-1: Manufacturer: syz
[  271.615778][ T5919] usb 3-1: SerialNumber: syz
[  271.687886][ T5919] usb 3-1: config 0 descriptor??
[  271.885212][   T30] audit: type=1326 audit(1768288777.344:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8284 comm="syz.0.666" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf706d539 code=0x0
[  274.453142][ T8314] netlink: 8 bytes leftover after parsing attributes in process `syz.3.671'.
[  274.612270][ T8313] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  274.644523][ T5920] usb 3-1: USB disconnect, device number 25
[  274.672814][ T8317] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  274.696278][ T8317] program syz.1.672 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  275.865672][ T8323] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.673'.
[  277.938309][ T8373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.686'.
[  277.978397][ T8374] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  278.019893][    T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  278.299403][    T9] usb 5-1: Using ep0 maxpacket: 16
[  278.316304][    T9] usb 5-1: config 0 has no interfaces?
[  278.328895][    T9] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55
[  278.368718][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  278.407457][    T9] usb 5-1: Product: syz
[  278.427757][    T9] usb 5-1: Manufacturer: syz
[  278.498695][    T9] usb 5-1: SerialNumber: syz
[  278.567282][    T9] usb 5-1: config 0 descriptor??
[  278.960046][ T8388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  278.969686][ T8388] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  278.982477][ T8388] netlink: 'syz.1.687': attribute type 2 has an invalid length.
[  281.101064][    T9] usb 5-1: USB disconnect, device number 16
[  281.324916][ T8403] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  281.366959][ T8398] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  281.411044][ T8398] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.692'.
[  281.424871][ T8403] program syz.4.693 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  281.587803][ T8400] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  282.229444][ T5919] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  282.381148][ T5919] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  282.389445][ T5919] usb 5-1: config 0 has no interface number 0
[  282.435941][ T5919] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  282.446494][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  282.455756][ T5919] usb 5-1: Product: syz
[  282.469112][ T5919] usb 5-1: Manufacturer: syz
[  282.480919][ T5919] usb 5-1: SerialNumber: syz
[  282.497260][ T5919] usb 5-1: config 0 descriptor??
[  282.710069][ T8419] loop0: detected capacity change from 0 to 2560
[  282.749028][ T5844] buffer_io_error: 311 callbacks suppressed
[  282.749048][ T5844] Buffer I/O error on dev loop0, logical block 0, async page read
[  282.790229][ T5919] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  282.815662][ T5919] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  282.871677][ T5919] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  282.935049][ T8419] Buffer I/O error on dev loop0, logical block 0, lost async page write
[  282.943823][ T8419] Buffer I/O error on dev loop0, logical block 1, lost async page write
[  282.952565][ T8419] Buffer I/O error on dev loop0, logical block 2, lost async page write
[  282.961192][ T8419] Buffer I/O error on dev loop0, logical block 3, lost async page write
[  282.969722][ T8419] Buffer I/O error on dev loop0, logical block 4, lost async page write
[  282.978189][ T8419] Buffer I/O error on dev loop0, logical block 5, lost async page write
[  282.986986][ T8419] Buffer I/O error on dev loop0, logical block 6, lost async page write
[  282.995495][ T8419] Buffer I/O error on dev loop0, logical block 7, lost async page write
[  283.004090][ T8419] Buffer I/O error on dev loop0, logical block 8, lost async page write
[  283.166857][ T5919] usb 5-1: media controller created
[  283.246104][ T5919] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  283.463088][ T8423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.698'.
[  284.439569][ T5919] i2c i2c-2: ec100: i2c rd failed=-110 reg=33
[  285.108942][ T8445] loop0: detected capacity change from 0 to 2560
[  285.757672][ T8451] netlink: 'syz.0.704': attribute type 29 has an invalid length.
[  285.765615][ T8451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.704'.
[  287.678444][ T8469] netlink: 16 bytes leftover after parsing attributes in process `syz.2.708'.
[  287.739256][ T8465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  287.748758][ T8465] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  287.761867][ T8465] netlink: 'syz.3.707': attribute type 2 has an invalid length.
[  288.220151][ T8475] input: syz1 as /devices/virtual/input/input7
[  288.420777][ T6106] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  288.591205][ T6106] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  288.608928][ T6106] usb 3-1: config 0 has no interface number 0
[  288.638100][ T6106] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  288.648004][ T6106] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  288.710860][ T6106] usb 3-1: Product: syz
[  288.725639][ T6106] usb 3-1: Manufacturer: syz
[  288.739416][ T6106] usb 3-1: SerialNumber: syz
[  288.762872][ T6106] usb 3-1: config 0 descriptor??
[  289.062670][ T6106] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  289.088593][ T6106] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  289.100154][ T6106] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  289.108279][ T6106] usb 3-1: media controller created
[  289.250849][ T6106] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  290.344808][ T6106] i2c i2c-2: ec100: i2c rd failed=-110 reg=33
[  290.791682][ T8511] loop0: detected capacity change from 0 to 2560
[  291.399566][ T8511] buffer_io_error: 641 callbacks suppressed
[  291.399587][ T8511] Buffer I/O error on dev loop0, logical block 0, lost async page write
[  291.486893][ T8516] Cannot find set identified by id 0 to match
[  291.495143][ T8511] Buffer I/O error on dev loop0, logical block 1, lost async page write
[  291.538264][ T8511] Buffer I/O error on dev loop0, logical block 2, lost async page write
[  291.751903][ T8511] Buffer I/O error on dev loop0, logical block 3, lost async page write
[  291.792636][ T8511] Buffer I/O error on dev loop0, logical block 4, lost async page write
[  291.824038][ T8519] sg_write: data in/out 209152/12 bytes for SCSI command 0x89-- guessing data in;
[  291.824038][ T8519]    program syz.0.718 not setting count and/or reply_len properly
[  291.852758][ T8519] netlink: 48 bytes leftover after parsing attributes in process `syz.0.718'.
[  291.861847][ T8519] netlink: 'syz.0.718': attribute type 1 has an invalid length.
[  291.881394][ T8511] Buffer I/O error on dev loop0, logical block 5, lost async page write
[  291.897968][ T8511] Buffer I/O error on dev loop0, logical block 6, lost async page write
[  291.906766][ T8511] Buffer I/O error on dev loop0, logical block 7, lost async page write
[  291.915220][ T8511] Buffer I/O error on dev loop0, logical block 8, lost async page write
[  291.924293][ T8511] Buffer I/O error on dev loop0, logical block 9, lost async page write
[  292.194373][ T5846] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  292.511566][ T5846] usb 1-1: too many endpoints for config 0 interface 0 altsetting 3: 253, using maximum allowed: 30
[  292.527559][ T5846] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  292.579732][ T5846] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0
[  292.590183][ T5846] usb 1-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  292.625191][ T5846] usb 1-1: config 0 interface 0 has no altsetting 0
[  292.634236][ T5846] usb 1-1: New USB device found, idVendor=0b05, idProduct=183d, bcdDevice= 0.00
[  292.646007][ T5846] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  292.807964][ T5846] usb 1-1: config 0 descriptor??
[  293.213291][ T8531] fuse: Unknown parameter 'fd0x0000000000000003'
[  293.321700][ T8533] netlink: 4 bytes leftover after parsing attributes in process `syz.4.723'.
[  293.360261][ T8533] netlink: 272 bytes leftover after parsing attributes in process `syz.4.723'.
[  293.388428][ T8533] netlink: 272 bytes leftover after parsing attributes in process `syz.4.723'.
[  293.434137][ T5846] usbhid 1-1:0.0: can't add hid device: -71
[  293.449523][ T5846] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  293.481094][ T5846] usb 1-1: USB disconnect, device number 27
[  293.547687][ T8537] netlink: 'syz.2.725': attribute type 5 has an invalid length.
[  293.721878][ T8537] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  293.957043][ T8545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  293.975113][ T8545] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  294.135522][ T8541] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.726'.
[  294.831307][ T8559] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1
[  295.411021][ T8565] bond1: entered allmulticast mode
[  295.417072][ T8565] 8021q: adding VLAN 0 to HW filter on device bond1
[  296.145250][ T8578] fuse: Unknown parameter 'fd0x0000000000000003'
[  296.385900][ T8586] netlink: 'syz.0.737': attribute type 5 has an invalid length.
[  296.398910][ T8585] fuse: Bad value for 'group_id'
[  296.416083][ T8585] fuse: Bad value for 'group_id'
[  296.644116][ T8590] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  297.797771][ T8611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.744'.
[  298.203454][ T8621] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1
[  298.298737][ T8625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  298.323074][ T8625] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  298.345486][ T8604] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.742'.
[  298.372308][ T8625] vlan2: entered promiscuous mode
[  298.381165][ T8625] bond0: entered promiscuous mode
[  298.386243][ T8625] bond_slave_0: entered promiscuous mode
[  298.402242][ T8625] bond_slave_1: entered promiscuous mode
[  298.719612][ T8630] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  299.047959][ T8634] netlink: 16 bytes leftover after parsing attributes in process `syz.0.752'.
[  299.131848][ T8638] fuse: Bad value for 'group_id'
[  299.144802][ T8638] fuse: Bad value for 'group_id'
[  299.251411][ T8634] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  299.315232][ T8627] tipc: Resetting bearer <eth:syzkaller0>
[  299.547615][ T8649] loop0: detected capacity change from 0 to 2560
[  299.583010][ T6280] buffer_io_error: 310 callbacks suppressed
[  299.583031][ T6280] Buffer I/O error on dev loop0, logical block 0, async page read
[  299.674022][ T6280] Buffer I/O error on dev loop0, logical block 0, async page read
[  299.682876][ T6280] Buffer I/O error on dev loop0, logical block 0, async page read
[  299.692457][ T6280] Buffer I/O error on dev loop0, logical block 0, async page read
[  299.939418][    C1] bridge0: port 3(syz_tun) entered forwarding state
[  299.945745][ T8649] Buffer I/O error on dev loop0, logical block 0, lost async page write
[  299.946069][    C1] bridge0: topology change detected, propagating
[  299.955351][ T8649] Buffer I/O error on dev loop0, logical block 1, lost async page write
[  299.962156][    C1] bridge0: port 2(bridge_slave_1) entered forwarding state
[  299.976494][    C1] bridge0: topology change detected, propagating
[  299.983020][    C1] bridge0: port 1(
) entered forwarding state
[  299.989178][    C1] bridge0: topology change detected, propagating
[  300.029636][ T8649] Buffer I/O error on dev loop0, logical block 2, lost async page write
[  300.276917][ T8649] Buffer I/O error on dev loop0, logical block 3, lost async page write
[  300.286449][ T8649] Buffer I/O error on dev loop0, logical block 4, lost async page write
[  300.296587][ T8649] Buffer I/O error on dev loop0, logical block 5, lost async page write
[  300.355304][ T8660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.758'.
[  300.720354][ T8671] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1
[  301.043590][ T8680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  301.070502][ T8680] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  302.096167][ T8627] tipc: Disabling bearer <eth:syzkaller0>
[  302.109155][ T5920] tipc: Node number set to 503316566
[  302.675996][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  302.899506][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  303.064142][ T8712] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  303.092491][ T8713] netlink: 196 bytes leftover after parsing attributes in process `syz.3.770'.
[  303.139705][ T8712] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  303.381261][ T5968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  303.609490][ T5885] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  303.700685][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  303.939466][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  304.084784][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  304.097088][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  304.156386][ T5885] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=a2.bf
[  304.175759][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  304.196037][ T5885] usb 1-1: Product: syz
[  304.204718][ T5885] usb 1-1: Manufacturer: syz
[  304.217384][ T5885] usb 1-1: SerialNumber: syz
[  304.232970][ T5885] usb 1-1: config 0 descriptor??
[  304.256170][ T5885] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  304.466291][ T8716] netlink: 'syz.0.772': attribute type 2 has an invalid length.
[  304.520691][ T8729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  304.550141][ T8729] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  304.560907][ T8732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.777'.
[  304.570390][ T5885] ssu100 1-1:0.0: probe with driver ssu100 failed with error -110
[  304.740188][ T5846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  304.989709][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  305.480377][ T8747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  305.489149][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  305.782080][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  306.019481][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  306.383518][ T5968] usb 1-1: USB disconnect, device number 28
[  306.447011][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  306.820547][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  307.059465][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  307.059816][ T5921] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  307.240064][ T5921] usb 1-1: device descriptor read/64, error -71
[  307.489503][ T5921] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  307.539178][ T8781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  307.541590][ T8781] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  307.660653][ T5921] usb 1-1: device descriptor read/64, error -71
[  307.880581][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  308.043390][ T5921] usb usb1-port1: attempt power cycle
[  308.373348][ T8788] netlink: 12 bytes leftover after parsing attributes in process `syz.2.791'.
[  308.479502][ T5921] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  308.501538][ T5921] usb 1-1: device descriptor read/8, error -71
[  308.749765][ T5921] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  308.770555][ T5921] usb 1-1: device descriptor read/8, error -71
[  308.821701][ T8801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  308.833694][ T8801] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  308.889853][ T5921] usb usb1-port1: unable to enumerate USB device
[  309.952138][ T5846] net_ratelimit: 4 callbacks suppressed
[  309.952160][ T5846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  310.179437][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  311.165339][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  311.377251][ T8826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  311.385797][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  311.399738][ T8826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  311.882953][ T8830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  311.901942][ T8830] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  311.929862][ T8830] netlink: 'syz.3.801': attribute type 2 has an invalid length.
[  312.208102][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  312.371760][ T8813] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.798'.
[  312.414130][ T8845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  312.419704][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  312.425064][ T8845] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  312.519573][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  313.221171][ T5846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  313.316561][ T8857] netlink: 16 bytes leftover after parsing attributes in process `syz.4.807'.
[  314.996397][ T8876] net_ratelimit: 4 callbacks suppressed
[  314.996412][ T8876] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1
[  315.300167][ T6663] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  315.539443][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  315.547586][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  315.934556][ T8878] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.813'.
[  316.345929][ T6663] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  316.579565][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  316.609714][ T8902] netlink: 16 bytes leftover after parsing attributes in process `syz.1.819'.
[  317.053085][ T8905] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  317.385577][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  318.341743][ T8928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  318.369260][ T8928] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  318.420078][ T5846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  318.582982][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  319.821213][ T8941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  319.834695][ T8941] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  319.868891][ T8941] netlink: 'syz.1.826': attribute type 2 has an invalid length.
[  320.579605][ T6663] net_ratelimit: 1 callbacks suppressed
[  320.579628][ T6663] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  320.897175][ T8955] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20001
[  321.103984][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  321.620150][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  321.629585][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  322.179457][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  322.385246][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  322.399461][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  322.410611][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  322.636266][ T8968] netlink: 16 bytes leftover after parsing attributes in process `syz.2.832'.
[  322.661858][ T6663] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  323.125378][ T8968] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  323.219660][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  323.700380][ T5846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  324.516562][ T8994] FAULT_INJECTION: forcing a failure.
[  324.516562][ T8994] name failslab, interval 1, probability 0, space 0, times 0
[  324.555035][ T8994] CPU: 0 UID: 0 PID: 8994 Comm: syz.3.838 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  324.555071][ T8994] Tainted: [L]=SOFTLOCKUP
[  324.555080][ T8994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  324.555095][ T8994] Call Trace:
[  324.555104][ T8994]  <TASK>
[  324.555113][ T8994]  dump_stack_lvl+0xe8/0x150
[  324.555148][ T8994]  should_fail_ex+0x414/0x560
[  324.555188][ T8994]  should_failslab+0xa8/0x100
[  324.555218][ T8994]  __kmalloc_cache_noprof+0x84/0x700
[  324.555241][ T8994]  ? inet6_rtm_newroute+0x7f3/0x18c0
[  324.555271][ T8994]  inet6_rtm_newroute+0x7f3/0x18c0
[  324.555299][ T8994]  ? kasan_quarantine_put+0xbb/0x1f0
[  324.555320][ T8994]  ? lockdep_hardirqs_on+0x7b/0x110
[  324.555348][ T8994]  ? __pfx_inet6_rtm_newroute+0x10/0x10
[  324.555370][ T8994]  ? kmem_cache_free+0x197/0x620
[  324.555391][ T8994]  ? nlmon_xmit+0xb0/0x100
[  324.555484][ T8994]  ? lockdep_hardirqs_on+0x7b/0x110
[  324.555537][ T8994]  ? __pfx_inet6_rtm_newroute+0x10/0x10
[  324.555561][ T8994]  rtnetlink_rcv_msg+0x7cf/0xb70
[  324.555591][ T8994]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  324.555615][ T8994]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  324.555639][ T8994]  ? ref_tracker_free+0x63a/0x7d0
[  324.555662][ T8994]  ? __asan_memcpy+0x40/0x70
[  324.555693][ T8994]  ? __pfx_ref_tracker_free+0x10/0x10
[  324.555713][ T8994]  ? __skb_clone+0x63/0x7a0
[  324.555749][ T8994]  netlink_rcv_skb+0x208/0x470
[  324.555780][ T8994]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  324.555806][ T8994]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  324.555845][ T8994]  ? netlink_deliver_tap+0x2e/0x1b0
[  324.555882][ T8994]  netlink_unicast+0x82f/0x9e0
[  324.555916][ T8994]  ? __pfx_netlink_unicast+0x10/0x10
[  324.555941][ T8994]  ? __alloc_skb+0x198/0x3a0
[  324.555965][ T8994]  ? netlink_sendmsg+0x642/0xb30
[  324.555991][ T8994]  ? skb_put+0x11b/0x210
[  324.556019][ T8994]  netlink_sendmsg+0x805/0xb30
[  324.556062][ T8994]  ? __pfx_netlink_sendmsg+0x10/0x10
[  324.556095][ T8994]  ? __import_iovec+0x5d4/0x7f0
[  324.556119][ T8994]  ? aa_sock_msg_perm+0xf1/0x1b0
[  324.556150][ T8994]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  324.556170][ T8994]  ? __pfx_netlink_sendmsg+0x10/0x10
[  324.556200][ T8994]  __sock_sendmsg+0x21c/0x270
[  324.556236][ T8994]  ____sys_sendmsg+0x52d/0x820
[  324.556269][ T8994]  ? __pfx_____sys_sendmsg+0x10/0x10
[  324.556312][ T8994]  ___sys_sendmsg+0x21f/0x2a0
[  324.556343][ T8994]  ? __pfx____sys_sendmsg+0x10/0x10
[  324.556369][ T8994]  ? kstrtoull+0x12f/0x1d0
[  324.556405][ T8994]  ? kstrtouint+0x6e/0xe0
[  324.556473][ T8994]  ? __fget_files+0x2a/0x420
[  324.556500][ T8994]  ? __fget_files+0x3a0/0x420
[  324.556538][ T8994]  __sys_sendmmsg+0x28e/0x430
[  324.556572][ T8994]  ? __pfx___sys_sendmmsg+0x10/0x10
[  324.556597][ T8994]  ? __mutex_unlock_slowpath+0x1a1/0x730
[  324.556646][ T8994]  ? ksys_write+0x22a/0x250
[  324.556670][ T8994]  ? __pfx_ksys_write+0x10/0x10
[  324.556697][ T8994]  __ia32_compat_sys_sendmmsg+0xa2/0xc0
[  324.556732][ T8994]  __do_fast_syscall_32+0x1dc/0x570
[  324.556757][ T8994]  ? lockdep_hardirqs_on+0x7b/0x110
[  324.556778][ T8994]  ? do_fast_syscall_32+0x34/0x80
[  324.556803][ T8994]  ? irqentry_exit+0x10f/0x670
[  324.556829][ T8994]  do_fast_syscall_32+0x34/0x80
[  324.556854][ T8994]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  324.556881][ T8994] RIP: 0023:0xf70bd539
[  324.556900][ T8994] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  324.556919][ T8994] RSP: 002b:00000000f54ad55c EFLAGS: 00000206 ORIG_RAX: 0000000000000159
[  324.556942][ T8994] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000800002c0
[  324.556958][ T8994] RDX: 000000000000009f RSI: 0000000000000000 RDI: 0000000000000000
[  324.556970][ T8994] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  324.556995][ T8994] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  324.557008][ T8994] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  324.557038][ T8994]  </TASK>
[  325.134472][ T9001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  325.149771][ T9001] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  325.169197][ T9001] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  325.443787][ T9009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  325.463212][ T9009] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  325.827317][ T9018] FAULT_INJECTION: forcing a failure.
[  325.827317][ T9018] name failslab, interval 1, probability 0, space 0, times 0
[  325.841858][ T9018] CPU: 1 UID: 0 PID: 9018 Comm: syz.0.845 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  325.841893][ T9018] Tainted: [L]=SOFTLOCKUP
[  325.841901][ T9018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  325.841914][ T9018] Call Trace:
[  325.841924][ T9018]  <TASK>
[  325.841933][ T9018]  dump_stack_lvl+0xe8/0x150
[  325.841966][ T9018]  should_fail_ex+0x414/0x560
[  325.842006][ T9018]  should_failslab+0xa8/0x100
[  325.842035][ T9018]  __kmalloc_cache_noprof+0x84/0x700
[  325.842058][ T9018]  ? nft_target_select_ops+0x2dc/0x5d0
[  325.842094][ T9018]  nft_target_select_ops+0x2dc/0x5d0
[  325.842129][ T9018]  nf_tables_expr_parse+0x71e/0xa70
[  325.842167][ T9018]  ? nf_tables_expr_parse+0x15a/0xa70
[  325.842204][ T9018]  ? __pfx_nf_tables_expr_parse+0x10/0x10
[  325.842239][ T9018]  ? __kvmalloc_node_noprof+0x5f5/0x920
[  325.842261][ T9018]  ? nft_pernet+0x23/0x240
[  325.842285][ T9018]  ? nla_strcmp+0x106/0x140
[  325.842314][ T9018]  nf_tables_newrule+0x12e5/0x28a0
[  325.842363][ T9018]  ? __pfx_nf_tables_newrule+0x10/0x10
[  325.842383][ T9018]  ? nfnl_pernet+0x23/0x240
[  325.842407][ T9018]  ? nfnl_pernet+0x23/0x240
[  325.842444][ T9018]  ? __nla_parse+0x40/0x60
[  325.842473][ T9018]  nfnetlink_rcv+0x11d9/0x2590
[  325.842532][ T9018]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  325.842574][ T9018]  ? ref_tracker_free+0x63a/0x7d0
[  325.842624][ T9018]  ? __netlink_deliver_tap+0x807/0x850
[  325.842661][ T9018]  ? netlink_deliver_tap+0x2e/0x1b0
[  325.842705][ T9018]  netlink_unicast+0x82f/0x9e0
[  325.842739][ T9018]  ? __pfx_netlink_unicast+0x10/0x10
[  325.842764][ T9018]  ? __alloc_skb+0x198/0x3a0
[  325.842788][ T9018]  ? netlink_sendmsg+0x642/0xb30
[  325.842814][ T9018]  ? skb_put+0x11b/0x210
[  325.842842][ T9018]  netlink_sendmsg+0x805/0xb30
[  325.842881][ T9018]  ? __pfx_netlink_sendmsg+0x10/0x10
[  325.842913][ T9018]  ? __import_iovec+0x5d4/0x7f0
[  325.842937][ T9018]  ? aa_sock_msg_perm+0xf1/0x1b0
[  325.842966][ T9018]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  325.842986][ T9018]  ? __pfx_netlink_sendmsg+0x10/0x10
[  325.843016][ T9018]  __sock_sendmsg+0x21c/0x270
[  325.843051][ T9018]  ____sys_sendmsg+0x505/0x820
[  325.843084][ T9018]  ? __pfx_____sys_sendmsg+0x10/0x10
[  325.843116][ T9018]  ? kstrtouint+0x6e/0xe0
[  325.843175][ T9018]  ___sys_sendmsg+0x21f/0x2a0
[  325.843206][ T9018]  ? __pfx____sys_sendmsg+0x10/0x10
[  325.843233][ T9018]  ? get_pid_task+0x20/0x1f0
[  325.843260][ T9018]  ? get_pid_task+0x20/0x1f0
[  325.843286][ T9018]  ? get_pid_task+0x20/0x1f0
[  325.843346][ T9018]  ? __fget_files+0x2a/0x420
[  325.843373][ T9018]  ? __fget_files+0x3a0/0x420
[  325.843411][ T9018]  __sys_sendmsg+0x164/0x220
[  325.843442][ T9018]  ? __pfx___sys_sendmsg+0x10/0x10
[  325.843479][ T9018]  ? __pfx_ksys_write+0x10/0x10
[  325.843513][ T9018]  __do_fast_syscall_32+0x1dc/0x570
[  325.843540][ T9018]  ? lockdep_hardirqs_on+0x7b/0x110
[  325.843561][ T9018]  ? do_fast_syscall_32+0x34/0x80
[  325.843587][ T9018]  ? irqentry_exit+0x10f/0x670
[  325.843611][ T9018]  do_fast_syscall_32+0x34/0x80
[  325.843632][ T9018]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  325.843660][ T9018] RIP: 0023:0xf706d539
[  325.843676][ T9018] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  325.843691][ T9018] RSP: 002b:00000000f545d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  325.843710][ T9018] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000100
[  325.843723][ T9018] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  325.843733][ T9018] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  325.843754][ T9018] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  325.843764][ T9018] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  325.843787][ T9018]  </TASK>
[  326.292689][ T9022] netlink: 16 bytes leftover after parsing attributes in process `syz.3.846'.
[  326.339470][    C0] net_ratelimit: 6 callbacks suppressed
[  326.339495][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  326.456341][ T6663] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  326.755804][ T9024] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  326.771669][ T5968] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  326.972750][ T5968] usb 1-1: Using ep0 maxpacket: 8
[  327.081782][ T5968] usb 1-1: unable to get BOS descriptor or descriptor too short
[  327.101383][ T5968] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E
[  327.156220][ T5968] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[  327.172386][ T5968] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  327.182710][ T5968] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  327.199011][ T5968] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0
[  327.210913][ T5968] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0
[  327.222948][ T5968] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  327.259487][ T5968] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  327.284763][ T5968] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[  327.324535][ T5968] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  327.344856][ T5968] usb 1-1: Product: syz
[  327.372749][ T5968] usb 1-1: Manufacturer: syz
[  327.377432][ T5968] usb 1-1: SerialNumber: syz
[  327.382465][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  327.436120][ T5968] usb 1-1: config 0 descriptor??
[  327.461811][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  327.472725][ T5968] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  327.659717][ T5968] usb 1-1: USB disconnect, device number 33
[  328.419483][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  328.501410][ T6106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  328.513799][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  328.848138][ T6106] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  329.040983][ T6106] usb 1-1: Using ep0 maxpacket: 8
[  329.063874][ T6106] usb 1-1: config 0 has an invalid interface number: 235 but max is 0
[  329.194166][ T6106] usb 1-1: config 0 has an invalid descriptor of length 216, skipping remainder of the config
[  329.259403][ T6106] usb 1-1: config 0 has no interface number 0
[  329.279416][ T6106] usb 1-1: config 0 interface 235 altsetting 148 has 0 endpoint descriptors, different from the interface descriptor's value: 10
[  329.354678][ T6106] usb 1-1: config 0 interface 235 has no altsetting 0
[  329.400414][ T6106] usb 1-1: New USB device found, idVendor=04ad, idProduct=0306, bcdDevice=b7.3d
[  329.419516][ T6106] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  329.459463][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  329.477866][ T6106] usb 1-1: Product: syz
[  329.483686][ T6106] usb 1-1: Manufacturer: syz
[  329.488327][ T6106] usb 1-1: SerialNumber: syz
[  329.543487][ T6106] usb 1-1: config 0 descriptor??
[  329.608441][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  329.773427][ T6106] usb 1-1: USB disconnect, device number 34
[  329.965175][ T9065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  329.977666][ T9065] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  329.987445][ T9065] netlink: 'syz.2.855': attribute type 2 has an invalid length.
[  330.026251][ T9065] !: entered promiscuous mode
[  330.031457][   T31] INFO: task kworker/0:7:5967 blocked for more than 143 seconds.
[  330.107479][   T31]       Tainted: G             L      syzkaller #0
[  330.156405][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  330.188185][   T31] task:kworker/0:7     state:D stack:21376 pid:5967  tgid:5967  ppid:2      task_flags:0x4208060 flags:0x00080000
[  330.251122][   T31] Workqueue: usb_hub_wq hub_event
[  330.256765][   T31] Call Trace:
[  330.268843][   T31]  <TASK>
[  330.275863][   T31]  __schedule+0x149b/0x4fd0
[  330.292316][   T31]  ? __schedule+0x14b1/0x4fd0
[  330.304723][   T31]  ? __pfx___schedule+0x10/0x10
[  330.320604][   T31]  ? schedule+0x91/0x360
[  330.406916][   T31]  schedule+0x165/0x360
[  330.419245][   T31]  schedule_timeout+0x9a/0x270
[  330.448818][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  330.466934][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  330.477035][   T31]  ? preempt_schedule_common+0x83/0xd0
[  330.498517][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  330.565854][   T31]  ? wait_for_completion+0x267/0x5d0
[  330.595306][   T31]  wait_for_completion+0x2bf/0x5d0
[  330.606598][   T31]  ? __pfx_wait_for_completion+0x10/0x10
[  330.621821][   T31]  i2c_del_adapter+0x591/0x760
[  330.629364][   T31]  ? lockdep_hardirqs_on+0x7b/0x110
[  330.634647][   T31]  ? kfree+0x1c0/0x660
[  330.638759][   T31]  ? __pfx_i2c_del_adapter+0x10/0x10
[  330.644404][   T31]  ? dvb_usbv2_exit+0x949/0xb90
[  330.649388][   T31]  dvb_usbv2_probe+0x497/0x3c20
[  330.656558][   T31]  ? __pfx_dvb_usbv2_probe+0x10/0x10
[  330.669067][   T31]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  330.679505][   T31]  ? __pm_runtime_set_status+0x785/0xa50
[  330.771343][   T31]  usb_probe_interface+0x668/0xc90
[  330.783811][   T31]  ? __pfx_usb_probe_interface+0x10/0x10
[  330.799394][   T31]  really_probe+0x26d/0xad0
[  330.809475][   T31]  __driver_probe_device+0x18c/0x320
[  330.824374][   T31]  driver_probe_device+0x4f/0x240
[  330.843739][   T31]  __device_attach_driver+0x279/0x430
[  330.858039][   T31]  bus_for_each_drv+0x251/0x2e0
[  330.881447][   T31]  ? __pfx___device_attach_driver+0x10/0x10
[  330.908314][   T31]  ? __pfx_bus_for_each_drv+0x10/0x10
[  330.921756][   T31]  ? lockdep_hardirqs_on+0x7b/0x110
[  330.927128][   T31]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  330.935192][   T31]  __device_attach+0x2b8/0x430
[  330.940527][   T31]  ? __pfx___device_attach+0x10/0x10
[  330.950110][   T31]  ? _raw_spin_unlock+0x28/0x50
[  330.955322][   T31]  device_initial_probe+0xa1/0xd0
[  330.961279][   T31]  bus_probe_device+0x12a/0x220
[  330.966386][   T31]  ? device_add+0x726/0xb80
[  330.971262][   T31]  device_add+0x7b6/0xb80
[  330.975888][   T31]  usb_set_configuration+0x1a87/0x2110
[  330.983076][   T31]  usb_generic_driver_probe+0x8d/0x150
[  330.988961][   T31]  usb_probe_device+0x1c4/0x3c0
[  330.994528][   T31]  ? __pfx_usb_probe_device+0x10/0x10
[  331.000430][   T31]  really_probe+0x26d/0xad0
[  331.005263][   T31]  __driver_probe_device+0x18c/0x320
[  331.011694][   T31]  driver_probe_device+0x4f/0x240
[  331.017506][   T31]  __device_attach_driver+0x279/0x430
[  331.023128][   T31]  bus_for_each_drv+0x251/0x2e0
[  331.028129][   T31]  ? __pfx___device_attach_driver+0x10/0x10
[  331.034656][   T31]  ? __pfx_bus_for_each_drv+0x10/0x10
[  331.041611][   T31]  ? lockdep_hardirqs_on+0x7b/0x110
[  331.047082][   T31]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  331.053160][   T31]  __device_attach+0x2b8/0x430
[  331.059055][   T31]  ? __pfx___device_attach+0x10/0x10
[  331.064715][   T31]  ? _raw_spin_unlock+0x28/0x50
[  331.071950][   T31]  device_initial_probe+0xa1/0xd0
[  331.077170][   T31]  bus_probe_device+0x12a/0x220
[  331.082245][   T31]  ? device_add+0x726/0xb80
[  331.086941][   T31]  device_add+0x7b6/0xb80
[  331.091784][   T31]  usb_new_device+0xa39/0x1720
[  331.097231][   T31]  ? __pfx_usb_new_device+0x10/0x10
[  331.102683][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  331.108837][   T31]  hub_event+0x29b1/0x4ef0
[  331.114963][   T31]  ? __pfx_hub_event+0x10/0x10
[  331.119975][   T31]  ? process_scheduled_works+0x9ef/0x1770
[  331.125923][   T31]  ? process_scheduled_works+0x9ef/0x1770
[  331.132958][   T31]  ? process_scheduled_works+0x9ef/0x1770
[  331.141173][   T31]  process_scheduled_works+0xad1/0x1770
[  331.147748][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[  331.154189][   T31]  ? do_raw_spin_lock+0x121/0x290
[  331.161683][   T31]  worker_thread+0x8a0/0xda0
[  331.166453][   T31]  ? __kthread_parkme+0x7b/0x200
[  331.173093][   T31]  kthread+0x711/0x8a0
[  331.177318][   T31]  ? __pfx_worker_thread+0x10/0x10
[  331.182696][   T31]  ? __pfx_kthread+0x10/0x10
[  331.187634][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  331.193482][   T31]  ? __pfx_kthread+0x10/0x10
[  331.198203][   T31]  ret_from_fork+0x510/0xa50
[  331.203026][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  331.208286][   T31]  ? __switch_to+0xc9e/0x1480
[  331.213979][   T31]  ? __pfx_kthread+0x10/0x10
[  331.219531][   T31]  ret_from_fork_asm+0x1a/0x30
[  331.224980][   T31]  </TASK>
[  331.228209][   T31] 
[  331.228209][   T31] Showing all locks held in the system:
[  331.237189][   T31] 1 lock held by khungtaskd/31:
[  331.243759][   T31]  #0: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  331.255275][   T31] 2 locks held by getty/5589:
[  331.260265][   T31]  #0: ffff8880341780a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  331.273666][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460
[  331.286514][   T31] 4 locks held by udevd/5839:
[  331.292908][   T31]  #0: ffff88807e071540 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe20
[  331.304329][   T31]  #1: ffff88807e163488 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420
[  331.314707][   T31]  #2: ffff888078a501e8 (kn->active#26){.+.+}-{0:0}, at: kernfs_seq_start+0xb2/0x420
[  331.326890][   T31]  #3: ffff888058001198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0
[  331.337625][   T31] 5 locks held by kworker/0:7/5967:
[  331.344279][   T31]  #0: ffff88801f6e7548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770
[  331.356330][   T31]  #1: ffffc900047bfbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770
[  331.369526][   T31]  #2: ffff88802878e198 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4ef0
[  331.379616][   T31]  #3: ffff888058001198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x430
[  331.390358][   T31]  #4: ffff88801ef20160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x430
[  331.400703][   T31] 1 lock held by syz.2.855/9063:
[  331.406616][   T31] 
[  331.409101][   T31] =============================================
[  331.409101][   T31] 
[  331.431333][   T31] NMI backtrace for cpu 1
[  331.431357][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  331.431387][   T31] Tainted: [L]=SOFTLOCKUP
[  331.431395][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  331.431408][   T31] Call Trace:
[  331.431417][   T31]  <TASK>
[  331.431425][   T31]  dump_stack_lvl+0xe8/0x150
[  331.431458][   T31]  nmi_cpu_backtrace+0x274/0x2d0
[  331.431490][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  331.431527][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  331.431561][   T31]  sys_info+0x135/0x170
[  331.431587][   T31]  watchdog+0xf95/0xfe0
[  331.431621][   T31]  ? watchdog+0x20a/0xfe0
[  331.431657][   T31]  kthread+0x711/0x8a0
[  331.431687][   T31]  ? __pfx_watchdog+0x10/0x10
[  331.431714][   T31]  ? __pfx_kthread+0x10/0x10
[  331.431743][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  331.431763][   T31]  ? __pfx_kthread+0x10/0x10
[  331.431792][   T31]  ret_from_fork+0x510/0xa50
[  331.431814][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  331.431833][   T31]  ? __switch_to+0xc9e/0x1480
[  331.431866][   T31]  ? __pfx_kthread+0x10/0x10
[  331.431895][   T31]  ret_from_fork_asm+0x1a/0x30
[  331.431940][   T31]  </TASK>
[  331.431949][   T31] Sending NMI from CPU 1 to CPUs 0:
[  331.539749][    C0] net_ratelimit: 2 callbacks suppressed
[  331.539803][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  331.541557][    C0] NMI backtrace for cpu 0
[  331.541572][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  331.541597][    C0] Tainted: [L]=SOFTLOCKUP
[  331.541604][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  331.541615][    C0] RIP: 0010:io_serial_in+0x77/0xc0
[  331.541639][    C0] Code: e8 9e c7 a6 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 ff e9 0c fd 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 4a 6f 42 06 cc 44 89 f9 80 e1 07
[  331.541655][    C0] RSP: 0018:ffffc90000006f90 EFLAGS: 00000002
[  331.541671][    C0] RAX: 1ffffffff3381400 RBX: 00000000000003fd RCX: 0000000000000000
[  331.541683][    C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020
[  331.541694][    C0] RBP: ffffffff99c0a550 R08: ffff888024a58237 R09: 1ffff1100494b046
[  331.541708][    C0] R10: dffffc0000000000 R11: ffffffff851a3050 R12: dffffc0000000000
[  331.541732][    C0] R13: 0000000000000000 R14: ffffffff99c0a2c0 R15: 0000000000000000
[  331.541743][    C0] FS:  0000000000000000(0000) GS:ffff888125e1f000(0000) knlGS:0000000000000000
[  331.541756][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  331.541768][    C0] CR2: 000000008019e018 CR3: 0000000075d84000 CR4: 00000000003526f0
[  331.541782][    C0] Call Trace:
[  331.541789][    C0]  <IRQ>
[  331.541796][    C0]  wait_for_lsr+0x1a1/0x2f0
[  331.541821][    C0]  serial8250_console_write+0x1301/0x1b60
[  331.541847][    C0]  ? __pfx_serial8250_console_write+0x10/0x10
[  331.541865][    C0]  ? console_flush_all+0x11a/0xb00
[  331.541892][    C0]  ? do_raw_spin_unlock+0x122/0x240
[  331.541916][    C0]  ? console_flush_all+0x11a/0xb00
[  331.541938][    C0]  console_flush_all+0x713/0xb00
[  331.541980][    C0]  ? console_flush_all+0x11a/0xb00
[  331.542007][    C0]  ? __pfx_console_flush_all+0x10/0x10
[  331.542033][    C0]  ? is_printk_cpu_sync_owner+0x32/0x40
[  331.542062][    C0]  console_unlock+0xbb/0x190
[  331.542083][    C0]  ? vprintk_emit+0x2c5/0x550
[  331.542109][    C0]  ? __pfx_console_unlock+0x10/0x10
[  331.542130][    C0]  ? vprintk_emit+0x280/0x550
[  331.542151][    C0]  ? vprintk_emit+0x44b/0x550
[  331.542171][    C0]  ? vprintk_emit+0x2c5/0x550
[  331.542191][    C0]  ? vprintk_emit+0x2c5/0x550
[  331.542212][    C0]  vprintk_emit+0x47b/0x550
[  331.542235][    C0]  ? __pfx_vprintk_emit+0x10/0x10
[  331.542256][    C0]  ? _printk_deferred+0xdd/0x130
[  331.542286][    C0]  _printk+0xcf/0x120
[  331.542313][    C0]  ? __pfx__printk+0x10/0x10
[  331.542338][    C0]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  331.542356][    C0]  ? ___ratelimit+0x5a0/0x900
[  331.542374][    C0]  gred_dequeue+0x4e6/0x6f0
[  331.542398][    C0]  __qdisc_run+0x23f/0x1510
[  331.542426][    C0]  qdisc_run+0xc7/0x300
[  331.542443][    C0]  __dev_queue_xmit+0x18e3/0x31c0
[  331.542470][    C0]  ? __local_bh_enable_ip+0xd0/0x130
[  331.542491][    C0]  ? __dev_queue_xmit+0x289/0x31c0
[  331.542522][    C0]  ? __pfx___dev_queue_xmit+0x10/0x10
[  331.542550][    C0]  ? arpt_do_table+0x238/0x1fd0
[  331.542571][    C0]  ? __pfx_arpt_do_table+0x10/0x10
[  331.542591][    C0]  ? kmem_cache_alloc_node_noprof+0x48c/0x720
[  331.542622][    C0]  ? NF_HOOK+0x9e/0x3a0
[  331.542643][    C0]  ? lock_acquire+0x107/0x340
[  331.542664][    C0]  ? NF_HOOK+0x9e/0x3a0
[  331.542687][    C0]  NF_HOOK+0x310/0x3a0
[  331.542710][    C0]  ? __pfx_arp_xmit_finish+0x10/0x10
[  331.542732][    C0]  ? NF_HOOK+0x9e/0x3a0
[  331.542752][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  331.542773][    C0]  ? lock_acquire+0x107/0x340
[  331.542790][    C0]  ? __pfx_arp_xmit_finish+0x10/0x10
[  331.542818][    C0]  arp_xmit+0x16c/0x270
[  331.542839][    C0]  ? arp_xmit+0x23/0x270
[  331.542863][    C0]  arp_solicit+0xbbd/0xe10
[  331.542889][    C0]  ? arp_solicit+0xfc/0xe10
[  331.542913][    C0]  ? __pfx_arp_solicit+0x10/0x10
[  331.542942][    C0]  ? __pfx_arp_solicit+0x10/0x10
[  331.542964][    C0]  neigh_timer_handler+0x8f9/0x1130
[  331.542993][    C0]  call_timer_fn+0x16e/0x590
[  331.543013][    C0]  ? __pfx_neigh_timer_handler+0x10/0x10
[  331.543035][    C0]  ? call_timer_fn+0xbe/0x590
[  331.543054][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  331.543079][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  331.543100][    C0]  ? __pfx_neigh_timer_handler+0x10/0x10
[  331.543124][    C0]  __run_timer_base+0x61a/0x860
[  331.543148][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  331.543164][    C0]  ? clockevents_program_event+0x247/0x350
[  331.543188][    C0]  ? sched_clock_cpu+0x74/0x430
[  331.543209][    C0]  run_timer_softirq+0xb7/0x180
[  331.543228][    C0]  handle_softirqs+0x22b/0x7c0
[  331.543247][    C0]  ? __irq_exit_rcu+0x60/0x150
[  331.543269][    C0]  __irq_exit_rcu+0x60/0x150
[  331.543286][    C0]  irq_exit_rcu+0x9/0x30
[  331.543302][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  331.543321][    C0]  </IRQ>
[  331.543326][    C0]  <TASK>
[  331.543333][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  331.543352][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  331.543371][    C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 91 0e 00 f3 0f 1e fa fb f4 <e9> 08 e3 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  331.543386][    C0] RSP: 0018:ffffffff8dc07dc0 EFLAGS: 000002c6
[  331.543400][    C0] RAX: 00000000003b9d95 RBX: ffffffff8197142e RCX: 0000000080000001
[  331.543412][    C0] RDX: 0000000000000001 RSI: ffffffff8d792d26 RDI: ffffffff8bc08660
[  331.543425][    C0] RBP: ffffffff8dc07eb0 R08: ffff8880b86336db R09: 1ffff110170c66db
[  331.543438][    C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8f822470
[  331.543452][    C0] R13: 1ffffffff1b92a68 R14: 0000000000000000 R15: 0000000000000000
[  331.543465][    C0]  ? do_idle+0x1be/0x4d0
[  331.543489][    C0]  default_idle+0x13/0x20
[  331.543510][    C0]  default_idle_call+0x73/0xb0
[  331.543532][    C0]  do_idle+0x1be/0x4d0
[  331.543549][    C0]  ? lockdep_hardirqs_on+0x7b/0x110
[  331.543570][    C0]  ? __pfx_do_idle+0x10/0x10
[  331.543593][    C0]  cpu_startup_entry+0x44/0x60
[  331.543612][    C0]  rest_init+0x2de/0x300
[  331.543636][    C0]  start_kernel+0x381/0x3d0
[  331.543655][    C0]  x86_64_start_reservations+0x24/0x30
[  331.543679][    C0]  x86_64_start_kernel+0x143/0x1c0
[  331.543704][    C0]  common_startup_64+0x13e/0x147
[  331.543734][    C0]  </TASK>
[  331.545014][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  331.545065][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  331.545140][   T31] Tainted: [L]=SOFTLOCKUP
[  331.545162][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  331.545202][   T31] Call Trace:
[  331.545236][   T31]  <TASK>
[  331.545273][   T31]  vpanic+0x1e0/0x670
[  331.545367][   T31]  panic+0xb9/0xc0
[  331.545431][   T31]  ? __pfx_panic+0x10/0x10
[  331.545508][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  331.545582][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  331.545678][   T31]  watchdog+0xfdf/0xfe0
[  331.545775][   T31]  ? watchdog+0x20a/0xfe0
[  331.545892][   T31]  kthread+0x711/0x8a0
[  331.545986][   T31]  ? __pfx_watchdog+0x10/0x10
[  331.546061][   T31]  ? __pfx_kthread+0x10/0x10
[  331.546155][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  331.546210][   T31]  ? __pfx_kthread+0x10/0x10
[  331.546286][   T31]  ret_from_fork+0x510/0xa50
[  331.546351][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  331.546411][   T31]  ? __switch_to+0xc9e/0x1480
[  331.546498][   T31]  ? __pfx_kthread+0x10/0x10
[  331.546573][   T31]  ret_from_fork_asm+0x1a/0x30
[  331.546709][   T31]  </TASK>
[  331.547089][   T31] Kernel Offset: disabled