last executing test programs:

4.403358089s ago: executing program 0 (id=2804):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0xfffffffffffffff8}, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
renameat(r1, &(0x7f00000004c0)='./cgroup.net/devices.allow\x00', r1, &(0x7f0000000500)='./cgroup.net/cgroup.procs\x00')
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@private0}, 0x0, @in6}}, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
syz_fuse_handle_req(r3, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x80000000000000, {0x0, 0x1d}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {r2}}, './file0\x00'})
r4 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0x0, 0x0, 0x1}})

4.070388693s ago: executing program 0 (id=2805):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond_slave_0\x00'})
r1 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc)
setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)

3.875808367s ago: executing program 0 (id=2806):
futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x2)
futex(0x0, 0x0, 0x2, 0x0, 0x0, 0x2)
futex(&(0x7f000000cffc)=0x3, 0x5, 0x0, 0x0, &(0x7f0000000000)=0x3, 0x5000002)

3.721549299s ago: executing program 0 (id=2807):
r0 = syz_open_procfs(0x0, &(0x7f00000022c0)='auxv\x00')
preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/83, 0x53}], 0x1, 0x8f, 0x3b16)

3.499674216s ago: executing program 0 (id=2810):
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x202, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0x5, "d52c2000000102000300ecffffff0100"})
r1 = syz_open_pts(r0, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, 0x0)
socket(0xa, 0x5, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_usb_connect(0x3, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000d3ccb510b1134200292b0102030109021b0001fc00000009040f0001e711e10009058301ff"], 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'vlan0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x2, 0xfffffffd, 0x68e463e4, 0xfffffdeb, 0x18f, 0x2, 0x2, 0x3, 0x5}}}}]}, 0x58}}, 0x0)

3.110998196s ago: executing program 1 (id=2813):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040), 0x0)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x5, 0x10}, 0xc)
r2 = dup(r0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000340)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x10000}}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c)

2.815762622s ago: executing program 4 (id=2814):
socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, <r1=>0x0}, 0x2020)
open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0)
write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x1030002}}, 0x50)
write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda}, 0x10)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0)
dup3(r2, r0, 0x0)
close(0x3)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0)
r3 = syz_io_uring_setup(0x1e1d, &(0x7f0000000200)={0x0, 0x400086fc, 0x10100}, &(0x7f0000002000)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
io_setup(0x8, &(0x7f0000004200)=<r6=>0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
io_submit(r6, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}])
syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x4, 0x0, 0x0, 0x22})
io_uring_enter(r3, 0x48ed, 0x0, 0x2, 0x0, 0x0)

2.30934616s ago: executing program 3 (id=2816):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='cdg', 0x3)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000045, 0x0, 0x0)
close(0x3)

2.248471724s ago: executing program 1 (id=2817):
futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x2)
futex(&(0x7f0000000000)=0x2, 0x0, 0x2, 0x0, 0x0, 0x2)
futex(0x0, 0x5, 0x0, 0x0, &(0x7f0000000000)=0x3, 0x5000002)

2.230361465s ago: executing program 3 (id=2818):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x3, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328)
setsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000000)=0x1, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

1.960514413s ago: executing program 3 (id=2820):
r0 = syz_io_uring_setup(0x491e, &(0x7f0000000000)={0x0, 0xb27, 0x10000, 0x3, 0xa3}, &(0x7f0000000440), &(0x7f00000003c0))
eventfd(0x73900000)
io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, 0x0, 0x0)

1.939102207s ago: executing program 4 (id=2821):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x60d})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)

1.852465456s ago: executing program 3 (id=2823):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)

1.805163335s ago: executing program 2 (id=2824):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x2120)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7)
mkdirat$cgroup(r1, &(0x7f00000000c0)='syz1\x00', 0x1ff)
sendfile(r2, r2, 0x0, 0x9)

1.753690335s ago: executing program 3 (id=2825):
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_HYPERV_EVENTFD(r1, 0x400caed0, &(0x7f0000000040)={0x8000000})

1.60374041s ago: executing program 2 (id=2826):
r0 = syz_io_uring_setup(0x495, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x1000007, 0x428b}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITE={0x17, 0x0, 0x4000, @fd_index, 0x2, &(0x7f0000001480)="2b010ed9a2708e87eed9561f0432352e1295f4c90b262faee2ffca25ff8b5270f8cc6d625f2a6627cbda7a81a206c732a17edf76dec3dba5816f4bd691270e8fec16d55a01b3edb3081cb59cb7d6469341ea46e938341854ecccff854ab569c15b380d35f0930c6d7f7607549ae92972e7d746e158a704f630b0e66cecdda1b446dfe8f0ef7bd860e3bf6d81160033ec8ffcd7ef4ebd50c6f21a3d43c7f54391bb0d8212b2e7fe61d82e1ef7a17c866dabb72ff7910cbb75abd9fb5415c5bf19c4aff0e99598f04ff9efeeda111ebbb137d6136bc684a2a72d3e2275d4bc434d6b293bd469041ddbd67cfa562b73bf07bdc5df2471716e295f0c1eb346e0ec70d39efab77ae9b547eb0ebdc409b4696f6cc45d1de6fdce488a09fcd23d151b769c9d6fcc0fb00fed72a6668fc2af0091cfc07ca12712045661bc002dc81e88f26371be78cfb6652dc70adcf4035372ebd59a9c34129a7dcdcedbaac6b530248be621964f88ae16374008284a22df5dd5b7cc53b4cba88514f5a89b8e74505ab4fa430231bf3acccbc94d80075bdc14c71e68e9ef3a35099d0a2bf67935349e94af85aee75afee6922116253eb9dc8394cd25fe6a4c18ed53a1873cacff12044b5b7f4f9a98540d6332e683e24f0c7aab1041e7fe2e7c051081e3b03e1f0039788dfd7a231159a4b43ba14755175d5baf0540ce8637accbe1bf25479565b81f783d75b2e3728763d96fc1a89c79d9408f41de5621ac8cf2e0410462c1d6915e7fc723d09fd7a553d8852599600f31a38a66623e476e9e25ab208e08a332194478e8a5a4dcc59c02ec944676dabdd634c7cb12e512d5b2f96d5b66de7d2005624c8e45282422ebf09cd10011d8d94a25ee960d50443187793b36cb5b9942ef4cbf34e2327a7f428649ef9b290ada4ae182c2892f1906193c80b97d569dbcf794eb0eb2aad336236d3db65f17c378ba7f53fe70e1e6f590ef799f8e969b450e776dbd3f0cd525dded42e428fd991fe586bbc28bb02d71955898b8ec926bffe1ec0fc62f828944883b92ca4250d1237adffcd0e3d61ecac26147d5cb7b63c82fbc1eb887a5230c8bb29d7976740ffe", 0x30d})
io_uring_enter(r0, 0x3516, 0x0, 0x1, 0x0, 0x0)

1.512901577s ago: executing program 3 (id=2827):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
ptrace$poke(0x4, r0, &(0x7f0000000000), 0xffffffff)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6(0xa, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b000000000000", @ANYBLOB="00003b2b92af3fa0a8aadf8e", @ANYRES32=0x0], 0x48)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r3)
close(0xffffffffffffffff)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

1.343101289s ago: executing program 1 (id=2828):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x24000154}, 0x20000050)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000010000090900010073797a3100000000d0000000030a030000000000000000000111000a0900010073797a31000000000900030073797a3000000000a400030062", @ANYRESDEC, @ANYRESHEX], 0x118}, 0x1, 0x0, 0x0, 0x24000144}, 0x24000054)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c000}, 0x20008800)

1.152320924s ago: executing program 1 (id=2829):
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x5, 0x8, 0x3}, 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x40080, 0x0)
ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000000c0)=0x1)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"})
splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x1)

1.057040143s ago: executing program 2 (id=2830):
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r0=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r0, 0x0, <r1=>0x0, 0x0, <r2=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r2, r0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$IOMMU_DESTROY$stdev(0xffffffffffffffff, 0x3b80, &(0x7f0000000400)={0x8, r1})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r0})

976.587955ms ago: executing program 4 (id=2831):
socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, <r1=>0x0}, 0x2020)
open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0)
write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x1030002}}, 0x50)
write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda}, 0x10)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0)
dup3(r2, r0, 0x0)
close(0x3)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0)
r3 = syz_io_uring_setup(0x1e1d, &(0x7f0000000200)={0x0, 0x400086fc, 0x10100}, &(0x7f0000002000)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
io_setup(0x8, &(0x7f0000004200)=<r6=>0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
io_submit(r6, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}])
syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x4, 0x0, 0x0, 0x22})
io_uring_enter(r3, 0x48ed, 0x0, 0x2, 0x0, 0x0)

924.319123ms ago: executing program 2 (id=2832):
r0 = socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x69801}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x1}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e24}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x7f}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
sendto$packet(r0, &(0x7f00000003c0)="11eb534b", 0x4, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r3, 0x1, 0x4, 0x6, @local}, 0x14)

817.08917ms ago: executing program 2 (id=2833):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x88, 0x4004, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, 0x0)

678.733377ms ago: executing program 4 (id=2834):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)={0xd8, r1, 0x5, 0x1, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x53, 0xe, {{{}, {}, @broadcast, @device_b, @from_mac}, 0x1, @default, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x1, [{0x60}]}, @void, @val={0x4, 0x6, {0x8, 0x80}}, @val={0x6, 0x2, 0x6}, @void, @val={0x25, 0x3, {0x0, 0x28, 0x1}}, @void, @val={0x3c, 0x4, {0x1, 0xf, 0xa1, 0x4}}, @void, @void, @val={0x71, 0x7, {0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xff}}, @void}}, @NL80211_ATTR_IE_ASSOC_RESP={0x58, 0x80, [@fast_bss_trans={0x37, 0x52, {0x3, 0x0, "b899105ed699b32bbe99525a641dc072", "9dd075c54131f21396985c558067eb443f8986fbf379aa41d21ad46555578345", "925486cbd0e1c7b9d7b8f369208ae468acf75a7a02d49fb182ecd7be7e17dd3d"}}]}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x5}]}, 0xd8}, 0x1, 0x0, 0x0, 0x84}, 0x0)

483.622413ms ago: executing program 4 (id=2835):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)

389.628091ms ago: executing program 0 (id=2836):
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, r2, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0)
writev(r3, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1)

333.133379ms ago: executing program 4 (id=2837):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
read$FUSE(r0, &(0x7f0000004280)={0x2020, 0x0, <r1=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xffffffde, 0x318145a8, 0x0, 0xfffe, 0x2, 0xfffffff6, 0x0, 0x0, 0x8, 0x100}}, 0x50)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1)

59.708144ms ago: executing program 2 (id=2838):
futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x2)
futex(&(0x7f0000000000)=0x2, 0x0, 0x2, 0x0, 0x0, 0x2)
futex(0x0, 0x5, 0x0, 0x0, &(0x7f0000000000)=0x3, 0x5000002)

59.397828ms ago: executing program 1 (id=2839):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x0, 0x0})
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_int(r0, 0x0, 0x21, 0x0, &(0x7f0000000080))

0s ago: executing program 1 (id=2840):
openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket(0x2b, 0x1, 0x1)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x5)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)

kernel console output (not intermixed with test programs):

aw-gadget: fail, usb_gadget_register_driver returned -16
[  665.497470][T12870] geneve4: entered promiscuous mode
[  665.503206][T12870] geneve4: entered allmulticast mode
[  667.276397][ T5901] usb 2-1: new high-speed USB device number 88 using dummy_hcd
[  667.420629][T12906] fuse: blksize only supported for fuseblk
[  667.606805][T12906] =======================================================
[  667.606805][T12906] WARNING: The mand mount option has been deprecated and
[  667.606805][T12906]          and is ignored by this kernel. Remove the mand
[  667.606805][T12906]          option from the mount to silence this warning.
[  667.606805][T12906] =======================================================
[  667.658728][ T5901] usb 2-1: too many configurations: 9, using maximum allowed: 8
[  667.680091][ T5901] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  667.759314][ T5901] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  667.789306][ T5901] usb 2-1: config 0 interface 0 has no altsetting 0
[  667.835382][ T5901] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  667.846444][ T5901] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  667.991319][ T5901] usb 2-1: config 0 interface 0 has no altsetting 0
[  668.030962][ T5901] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  668.063196][ T5901] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  668.103819][ T5901] usb 2-1: config 0 interface 0 has no altsetting 0
[  668.211145][ T5901] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  668.331696][ T5901] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  668.395781][ T5901] usb 2-1: config 0 interface 0 has no altsetting 0
[  668.422813][ T5901] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  668.450696][ T5901] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  668.483990][T12923] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  668.499204][ T5901] usb 2-1: config 0 interface 0 has no altsetting 0
[  668.528376][ T5901] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  668.547378][ T5901] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  668.571417][ T5901] usb 2-1: config 0 interface 0 has no altsetting 0
[  668.592023][ T5901] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  668.608480][ T5901] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  668.636128][ T5901] usb 2-1: config 0 interface 0 has no altsetting 0
[  668.653969][ T5901] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  668.678528][ T5901] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  668.703319][ T5901] usb 2-1: config 0 interface 0 has no altsetting 0
[  668.720795][ T5901] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  668.731361][ T5901] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  668.749200][ T5901] usb 2-1: Product: syz
[  668.766987][ T5901] usb 2-1: Manufacturer: syz
[  668.778318][ T5901] usb 2-1: SerialNumber: syz
[  668.807025][ T5901] usb 2-1: config 0 descriptor??
[  668.839580][ T5901] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0
[  669.215319][T12937] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1932'.
[  669.278757][T12935] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1933'.
[  669.347178][T12937] netlink: 'syz.3.1932': attribute type 13 has an invalid length.
[  669.360543][T12937] netlink: 'syz.3.1932': attribute type 17 has an invalid length.
[  669.450733][T12938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  669.467522][T12938] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  669.711040][T12937] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  669.980714][T12948] kvm: emulating exchange as write
[  670.668494][T12964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  670.680913][T12964] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  670.952754][    C0] usb 2-1: yurex_control_callback - control failed: -2
[  671.012524][ T5901] usb 2-1: USB disconnect, device number 88
[  671.056095][ T5901] yurex 2-1:0.0: USB YUREX #0 now disconnected
[  671.873002][T12984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  671.931871][T12984] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  671.996786][T12984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  672.026048][T12984] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  672.035551][T12987] netlink: 'syz.4.1950': attribute type 10 has an invalid length.
[  672.049842][T12987] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17
[  672.093610][T12987] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17
[  672.172728][T12987] 8021q: adding VLAN 0 to HW filter on device batadv0
[  672.231103][T12987] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  672.247482][T10663] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  672.317229][ T5936] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17
[  672.787266][   T12] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  672.960948][T12999] FAULT_INJECTION: forcing a failure.
[  672.960948][T12999] name failslab, interval 1, probability 0, space 0, times 0
[  673.007076][T12999] CPU: 1 UID: 0 PID: 12999 Comm: syz.3.1955 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  673.007111][T12999] Tainted: [L]=SOFTLOCKUP
[  673.007120][T12999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  673.007132][T12999] Call Trace:
[  673.007141][T12999]  <TASK>
[  673.007149][T12999]  dump_stack_lvl+0xe8/0x150
[  673.007180][T12999]  should_fail_ex+0x412/0x560
[  673.007209][T12999]  should_failslab+0xa8/0x100
[  673.007233][T12999]  kmem_cache_alloc_noprof+0x87/0x6e0
[  673.007264][T12999]  ? __kernfs_new_node+0xe9/0x8e0
[  673.007299][T12999]  __kernfs_new_node+0xe9/0x8e0
[  673.007335][T12999]  ? __pfx___kernfs_new_node+0x10/0x10
[  673.007367][T12999]  ? kernfs_root+0x1c/0x230
[  673.007401][T12999]  ? kernfs_root+0x1c/0x230
[  673.007428][T12999]  ? kernfs_root+0x1c/0x230
[  673.007455][T12999]  ? kernfs_root+0x1c/0x230
[  673.007498][T12999]  kernfs_new_node+0x102/0x210
[  673.007558][T12999]  __kernfs_create_file+0x4b/0x2e0
[  673.007584][T12999]  sysfs_add_file_mode_ns+0x238/0x300
[  673.007619][T12999]  internal_create_group+0x673/0x1180
[  673.007669][T12999]  ? __pfx_internal_create_group+0x10/0x10
[  673.007697][T12999]  ? kernfs_add_one+0x46f/0x5c0
[  673.007720][T12999]  ? up_write+0x1ab/0x410
[  673.007745][T12999]  sysfs_create_groups+0x59/0x120
[  673.007778][T12999]  device_add_attrs+0x13b/0x5b0
[  673.007803][T12999]  ? __pfx_device_add_attrs+0x10/0x10
[  673.007819][T12999]  ? kobject_put+0x516/0x560
[  673.007849][T12999]  ? device_add_class_symlinks+0x21f/0x240
[  673.007873][T12999]  device_add+0x496/0xb70
[  673.007897][T12999]  input_register_device+0x9d3/0x1160
[  673.007929][T12999]  ? input_ff_create+0x235/0x300
[  673.007956][T12999]  uinput_create_device+0x422/0x670
[  673.007989][T12999]  uinput_ioctl_handler+0x417/0x14a0
[  673.008017][T12999]  ? __pfx_uinput_ioctl_handler+0x10/0x10
[  673.008051][T12999]  ? __fget_files+0x2a/0x420
[  673.008073][T12999]  ? __fget_files+0x3a0/0x420
[  673.008101][T12999]  ? bpf_lsm_file_ioctl+0x9/0x20
[  673.008126][T12999]  ? __pfx_uinput_ioctl+0x10/0x10
[  673.008147][T12999]  __se_sys_ioctl+0xfc/0x170
[  673.008181][T12999]  do_syscall_64+0xe2/0xf80
[  673.008204][T12999]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  673.008225][T12999]  ? clear_bhb_loop+0x60/0xb0
[  673.008252][T12999]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  673.008271][T12999] RIP: 0033:0x7f97f339af79
[  673.008291][T12999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  673.008408][T12999] RSP: 002b:00007f97f4178028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  673.008434][T12999] RAX: ffffffffffffffda RBX: 00007f97f3615fa0 RCX: 00007f97f339af79
[  673.008450][T12999] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003
[  673.008462][T12999] RBP: 00007f97f4178090 R08: 0000000000000000 R09: 0000000000000000
[  673.008474][T12999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  673.008486][T12999] R13: 00007f97f3616038 R14: 00007f97f3615fa0 R15: 00007f97f373fa48
[  673.008521][T12999]  </TASK>
[  673.363540][T13000] bond3: entered promiscuous mode
[  673.369809][   T50] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  673.538108][T13000] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  673.549218][T13007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  673.578671][T13000] tipc: Resetting bearer <eth:syzkaller0>
[  673.584741][T13007] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  673.628043][T12996] tipc: Disabling bearer <eth:syzkaller0>
[  673.757237][  T797] usb 2-1: new high-speed USB device number 89 using dummy_hcd
[  673.897364][ T3017] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  673.937259][  T797] usb 2-1: Using ep0 maxpacket: 32
[  673.950832][  T797] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  673.977052][  T797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  673.985165][  T797] usb 2-1: Product: syz
[  673.996383][  T797] usb 2-1: Manufacturer: syz
[  674.001107][  T797] usb 2-1: SerialNumber: syz
[  674.029582][  T797] usb 2-1: config 0 descriptor??
[  674.040016][  T797] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  674.263289][T13021] syzkaller0: entered promiscuous mode
[  674.270563][T13021] syzkaller0: entered allmulticast mode
[  674.369998][   T30] kauditd_printk_skb: 31 callbacks suppressed
[  674.370018][   T30] audit: type=1326 audit(1770645563.821:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13017 comm="syz.0.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77bed9af79 code=0x7ffc0000
[  674.400427][   T30] audit: type=1326 audit(1770645563.821:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13017 comm="syz.0.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77bed9af79 code=0x7ffc0000
[  674.428044][   T30] audit: type=1326 audit(1770645563.821:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13017 comm="syz.0.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f77bed9af79 code=0x7ffc0000
[  674.450762][   T30] audit: type=1326 audit(1770645563.821:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13017 comm="syz.0.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77bed9af79 code=0x7ffc0000
[  674.473642][   T30] audit: type=1326 audit(1770645563.821:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13017 comm="syz.0.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f77bed9af79 code=0x7ffc0000
[  674.496202][   T50] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  674.556412][   T30] audit: type=1326 audit(1770645563.821:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13017 comm="syz.0.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77bed9af79 code=0x7ffc0000
[  674.642423][   T30] audit: type=1326 audit(1770645563.821:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13017 comm="syz.0.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77bed9af79 code=0x7ffc0000
[  674.710000][   T30] audit: type=1326 audit(1770645563.821:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13017 comm="syz.0.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f77bed9af79 code=0x7ffc0000
[  674.770691][   T30] audit: type=1326 audit(1770645563.821:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13017 comm="syz.0.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77bed9af79 code=0x7ffc0000
[  674.850974][   T30] audit: type=1326 audit(1770645563.821:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13017 comm="syz.0.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f77bed9af79 code=0x7ffc0000
[  675.122387][ T3481] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  675.402946][  T797] gspca_ov534_9: reg_w failed -110
[  675.692129][   T50] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  675.767028][  T797] gspca_ov534_9: Unknown sensor 0000
[  675.767146][  T797] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22
[  676.139568][T13040] netlink: 'syz.2.1965': attribute type 180 has an invalid length.
[  676.185905][T13040] input: syz0 as /devices/virtual/input/input43
[  676.247030][   T60] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  676.333513][ T5901] usb 2-1: USB disconnect, device number 89
[  676.448174][T13043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1967'.
[  676.769545][T13049] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1968'.
[  676.815746][ T3481] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  677.004032][T13049] macvlan0: entered promiscuous mode
[  677.136667][T13049] netlink: 'syz.4.1968': attribute type 1 has an invalid length.
[  677.338916][T13049] netlink: 'syz.4.1968': attribute type 2 has an invalid length.
[  677.361634][T13049] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1968'.
[  677.395147][   T50] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  677.949888][   T60] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  678.115911][T13071] netlink: 'syz.2.1976': attribute type 5 has an invalid length.
[  678.157198][T13072] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1975'.
[  678.178285][T13072] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1975'.
[  678.498442][ T3481] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  678.786549][ T5893] usb 3-1: new high-speed USB device number 80 using dummy_hcd
[  678.797850][T13093] netlink: 'syz.1.1984': attribute type 62 has an invalid length.
[  678.986636][ T5893] usb 3-1: Using ep0 maxpacket: 16
[  679.010953][T13101] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1984'.
[  679.020214][T13101] bridge_slave_1: left allmulticast mode
[  679.027312][T13101] bridge_slave_1: left promiscuous mode
[  679.057544][ T3481] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  679.077253][T13101] bridge0: port 2(bridge_slave_1) entered disabled state
[  679.326437][ T5893] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b
[  679.376359][T13089] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1980'.
[  679.420482][T13100] binder: BINDER_SET_CONTEXT_MGR already set
[  679.427266][T13100] binder: 13090:13100 ioctl 4018620d 200000000100 returned -16
[  679.440555][T13100] binder: BINDER_SET_CONTEXT_MGR already set
[  679.447419][T13100] binder: 13090:13100 ioctl 4018620d 200000004a80 returned -16
[  679.468602][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  679.478118][ T5893] usb 3-1: Product: syz
[  679.480162][T13101] bridge_slave_0: left allmulticast mode
[  679.513973][T13101] bridge_slave_0: left promiscuous mode
[  679.527272][ T5893] usb 3-1: SerialNumber: syz
[  679.532470][T13101] bridge0: port 1(bridge_slave_0) entered disabled state
[  679.633703][ T5893] usb 3-1: config 0 descriptor??
[  679.643914][ T3481] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  679.669872][ T5893] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  679.737029][ T5893] dvb_usb_af9015 3-1:0.0: probe with driver dvb_usb_af9015 failed with error -22
[  679.767453][ T5893] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  679.780054][ T5893] dvb_usb_af9035 3-1:0.0: probe with driver dvb_usb_af9035 failed with error -22
[  680.297791][ T3481] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  680.847523][ T3481] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  680.922282][T13116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  680.937155][T13116] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  681.367022][ T3017] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  681.531848][ T5936] usb 3-1: USB disconnect, device number 80
[  681.604045][T13126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1992'.
[  681.667960][T13123] IPVS: Scheduler module ip_vs_ not found
[  681.884890][T13123] netdevsim netdevsim4: Firmware load for './file0/../file0/file0' refused, path contains '..' component
[  681.900291][   T50] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  681.951662][T13123] bond0: (slave syz_tun): Releasing backup interface
[  681.971274][T13123] batman_adv: batadv0: Interface deactivated: dummy0
[  681.987743][T13123] batman_adv: batadv0: Removing interface: dummy0
[  682.021237][T13123] bond0: (slave batadv0): Releasing backup interface
[  682.046402][ T5893] usb 2-1: new high-speed USB device number 90 using dummy_hcd
[  682.077160][ T5936] usb 3-1: new high-speed USB device number 81 using dummy_hcd
[  682.103102][T13123] bridge_slave_0: left allmulticast mode
[  682.124505][T13123] bridge_slave_0: left promiscuous mode
[  682.136176][T13123] bridge0: port 1(bridge_slave_0) entered disabled state
[  682.218391][ T5936] usb 3-1: device descriptor read/64, error -71
[  682.236815][ T5893] usb 2-1: Using ep0 maxpacket: 8
[  682.249023][ T5893] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  682.492381][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  682.505343][T13123] bridge_slave_1: left allmulticast mode
[  682.513268][ T5893] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  682.526927][ T5936] usb 3-1: new high-speed USB device number 82 using dummy_hcd
[  682.537601][T13123] bridge_slave_1: left promiscuous mode
[  682.543634][T13123] bridge0: port 2(bridge_slave_1) entered disabled state
[  682.556038][ T5893] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  682.573811][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  682.587800][T13123] bond0: (slave bond_slave_0): Releasing backup interface
[  682.602762][ T5893] usb 2-1: config 0 descriptor??
[  682.608784][T13123] bond0: (slave bond_slave_1): Releasing backup interface
[  682.659145][ T5936] usb 3-1: device descriptor read/64, error -71
[  682.732631][T13123] batman_adv: batadv0: Removing interface: batadv_slave_0
[  682.755135][T13123] batman_adv: batadv0: Removing interface: batadv_slave_1
[  682.767341][ T5936] usb usb3-port1: attempt power cycle
[  682.780268][T13123] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  683.236472][ T5936] usb 3-1: new high-speed USB device number 83 using dummy_hcd
[  683.271836][ T5936] usb 3-1: device descriptor read/8, error -71
[  683.516993][ T5936] usb 3-1: new high-speed USB device number 84 using dummy_hcd
[  683.537704][ T5936] usb 3-1: device descriptor read/8, error -71
[  683.649568][ T5936] usb usb3-port1: unable to enumerate USB device
[  683.824471][T13151] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  684.248508][ T9676] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  684.263234][ T9676] hid-generic 0000:0000:0000.001D: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  684.280970][T13160] hid-generic 0000:0000:0000.001D: pid 13160 passed too short report
[  684.407506][T13161] fido_id[13161]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  685.040173][T13176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  685.050575][T13176] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  685.126903][ T5936] usb 3-1: new full-speed USB device number 85 using dummy_hcd
[  685.278838][ T5936] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83
[  685.291177][ T5936] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  685.301093][ T5936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  685.313983][ T5936] usb 3-1: config 0 descriptor??
[  685.321206][T13174] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  685.513071][  T797] usb 2-1: USB disconnect, device number 90
[  685.534805][ T5936] ath6kl: Failed to submit usb control message: -71
[  685.541835][ T5936] ath6kl: unable to send the bmi data to the device: -71
[  685.554021][ T5936] ath6kl: Unable to send get target info: -71
[  685.564731][ T5936] ath6kl: Failed to init ath6kl core: -71
[  685.572890][ T5936] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71
[  685.604468][ T5936] usb 3-1: USB disconnect, device number 85
[  685.873750][T13181] geneve3: entered promiscuous mode
[  685.879873][T13181] geneve3: entered allmulticast mode
[  686.398080][T13186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2007'.
[  686.639141][T13189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  686.657208][T13189] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  687.494900][T13196] netlink: 'syz.2.2010': attribute type 1 has an invalid length.
[  687.562052][T13196] bond5: entered promiscuous mode
[  687.567376][T13196] bond5: entered allmulticast mode
[  687.972855][T13213] FAULT_INJECTION: forcing a failure.
[  687.972855][T13213] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  688.017120][T13213] CPU: 1 UID: 0 PID: 13213 Comm: syz.1.2015 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  688.017148][T13213] Tainted: [L]=SOFTLOCKUP
[  688.017154][T13213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  688.017164][T13213] Call Trace:
[  688.017170][T13213]  <TASK>
[  688.017177][T13213]  dump_stack_lvl+0xe8/0x150
[  688.017201][T13213]  should_fail_ex+0x412/0x560
[  688.017225][T13213]  _copy_from_user+0x2d/0xb0
[  688.017239][T13213]  ___sys_sendmsg+0x1c6/0x360
[  688.017260][T13213]  ? __lock_acquire+0x6b5/0x2cf0
[  688.017285][T13213]  ? __pfx____sys_sendmsg+0x10/0x10
[  688.017331][T13213]  ? __fget_files+0x2a/0x420
[  688.017347][T13213]  ? __fget_files+0x3a0/0x420
[  688.017371][T13213]  __x64_sys_sendmsg+0x1bd/0x2a0
[  688.017399][T13213]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  688.017427][T13213]  ? __pfx_ksys_write+0x10/0x10
[  688.017458][T13213]  do_syscall_64+0xe2/0xf80
[  688.017474][T13213]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  688.017488][T13213]  ? trace_irq_disable+0x37/0x100
[  688.017503][T13213]  ? clear_bhb_loop+0x60/0xb0
[  688.017520][T13213]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  688.017535][T13213] RIP: 0033:0x7f547f59af79
[  688.017549][T13213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  688.017561][T13213] RSP: 002b:00007f54804f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  688.017577][T13213] RAX: ffffffffffffffda RBX: 00007f547f815fa0 RCX: 00007f547f59af79
[  688.017589][T13213] RDX: 0000000000004800 RSI: 0000200000000d80 RDI: 0000000000000003
[  688.017598][T13213] RBP: 00007f54804f7090 R08: 0000000000000000 R09: 0000000000000000
[  688.017608][T13213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  688.017616][T13213] R13: 00007f547f816038 R14: 00007f547f815fa0 R15: 00007f547f93fa48
[  688.017639][T13213]  </TASK>
[  688.314877][T13218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2014'.
[  688.348232][T13220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2017'.
[  688.379565][T13218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2014'.
[  688.394482][T13220] openvswitch: netlink: Missing key (keys=40, expected=80)
[  688.432393][T13220] netlink: 964 bytes leftover after parsing attributes in process `syz.2.2017'.
[  688.447200][T13220] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2017'.
[  688.542254][T13223] tipc: Enabled bearer <eth:caif0>, priority 14
[  689.320033][T13237] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2024'.
[  689.333322][T13237] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2024'.
[  689.351283][T13237] syzkaller0: entered promiscuous mode
[  689.357524][T13237] syzkaller0: entered allmulticast mode
[  689.368060][T13237] netlink: 'syz.2.2024': attribute type 13 has an invalid length.
[  689.449423][T13244] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2026'.
[  689.605561][T13249] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  689.759721][T13237] bridge0: port 2(bridge_slave_1) entered disabled state
[  689.767262][T13237] bridge0: port 1(bridge_slave_0) entered disabled state
[  689.767772][  T797] usb 2-1: new full-speed USB device number 91 using dummy_hcd
[  689.897648][T13237] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  689.914862][T13237] batman_adv: batadv0: Interface deactivated: 
2
6��
[  690.079076][  T797] usb 2-1: unable to get BOS descriptor or descriptor too short
[  690.094290][  T797] usb 2-1: unable to read config index 0 descriptor/start: -71
[  690.115719][  T797] usb 2-1: can't read configurations, error -71
[  690.429349][T13253] FAULT_INJECTION: forcing a failure.
[  690.429349][T13253] name failslab, interval 1, probability 0, space 0, times 0
[  690.453381][T13253] CPU: 1 UID: 0 PID: 13253 Comm: syz.4.2027 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  690.453407][T13253] Tainted: [L]=SOFTLOCKUP
[  690.453413][T13253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  690.453422][T13253] Call Trace:
[  690.453429][T13253]  <TASK>
[  690.453436][T13253]  dump_stack_lvl+0xe8/0x150
[  690.453460][T13253]  should_fail_ex+0x412/0x560
[  690.453483][T13253]  should_failslab+0xa8/0x100
[  690.453502][T13253]  __kmalloc_node_track_caller_noprof+0xe1/0x7f0
[  690.453519][T13253]  ? alloc_vfsmnt+0xeb/0x430
[  690.453545][T13253]  kstrdup+0x42/0x100
[  690.453564][T13253]  alloc_vfsmnt+0xeb/0x430
[  690.453587][T13253]  clone_mnt+0x4b/0x9a0
[  690.453609][T13253]  ? do_raw_spin_unlock+0xf5/0x210
[  690.453630][T13253]  copy_tree+0x3d4/0x930
[  690.453653][T13253]  copy_mnt_ns+0x24e/0x990
[  690.453672][T13253]  ? trace_kmem_cache_alloc+0x1f/0xb0
[  690.453693][T13253]  ? kmem_cache_alloc_noprof+0x3bd/0x6e0
[  690.453716][T13253]  ? create_new_namespaces+0x33/0x6a0
[  690.453762][T13253]  create_new_namespaces+0xcf/0x6a0
[  690.453796][T13253]  ? bpf_lsm_capable+0x9/0x20
[  690.453825][T13253]  ? security_capable+0x7e/0x2c0
[  690.453849][T13253]  unshare_nsproxy_namespaces+0x11a/0x160
[  690.453874][T13253]  ksys_unshare+0x4f4/0x900
[  690.453899][T13253]  ? __pfx_ksys_unshare+0x10/0x10
[  690.453916][T13253]  ? __pfx_ksys_write+0x10/0x10
[  690.453946][T13253]  __x64_sys_unshare+0x38/0x50
[  690.453963][T13253]  do_syscall_64+0xe2/0xf80
[  690.453980][T13253]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  690.453994][T13253]  ? trace_irq_disable+0x37/0x100
[  690.454009][T13253]  ? clear_bhb_loop+0x60/0xb0
[  690.454033][T13253]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  690.454048][T13253] RIP: 0033:0x7f73d619af79
[  690.454062][T13253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  690.454076][T13253] RSP: 002b:00007f73d6fbb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  690.454092][T13253] RAX: ffffffffffffffda RBX: 00007f73d6416090 RCX: 00007f73d619af79
[  690.454103][T13253] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020060400
[  690.454112][T13253] RBP: 00007f73d6fbb090 R08: 0000000000000000 R09: 0000000000000000
[  690.454122][T13253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  690.454131][T13253] R13: 00007f73d6416128 R14: 00007f73d6416090 R15: 00007f73d653fa48
[  690.454170][T13253]  </TASK>
[  691.066015][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  691.075856][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  691.111437][ T5936] tipc: Node number set to 3016588677
[  691.169249][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  691.180586][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  691.352285][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  691.361413][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  691.550792][T13269] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2031'.
[  691.651156][ T5936] usb 5-1: new high-speed USB device number 88 using dummy_hcd
[  691.846955][ T5936] usb 5-1: Using ep0 maxpacket: 32
[  691.877354][ T5936] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[  691.904028][ T5936] usb 5-1: too many endpoints for config 0 interface 0 altsetting 5: 69, using maximum allowed: 30
[  691.950528][ T5936] usb 5-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 69
[  692.004737][ T5936] usb 5-1: config 0 interface 0 has no altsetting 1
[  692.039683][ T5936] usb 5-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00
[  692.068854][ T5936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  692.147294][   T30] kauditd_printk_skb: 21 callbacks suppressed
[  692.147315][   T30] audit: type=1326 audit(1770645581.581:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13274 comm="syz.2.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f55f9af79 code=0x7ffc0000
[  692.321471][   T30] audit: type=1326 audit(1770645581.581:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13274 comm="syz.2.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f55f9af79 code=0x7ffc0000
[  692.338069][ T5936] usb 5-1: SerialNumber: syz
[  692.351159][   T30] audit: type=1326 audit(1770645581.581:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13274 comm="syz.2.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4f55f9af79 code=0x7ffc0000
[  692.368500][T13279] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  692.413997][ T5936] usb 5-1: config 0 descriptor??
[  692.502486][ T5936] usb-storage 5-1:0.0: USB Mass Storage device detected
[  692.568001][   T30] audit: type=1326 audit(1770645581.581:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13274 comm="syz.2.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f55f9af79 code=0x7ffc0000
[  692.597025][   T30] audit: type=1326 audit(1770645581.581:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13274 comm="syz.2.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f55f9af79 code=0x7ffc0000
[  692.728608][ T5936] usb-storage 5-1:0.0: Quirks match for vid 152d pid 0539: 4000000
[  692.776541][   T30] audit: type=1326 audit(1770645581.581:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13274 comm="syz.2.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f4f55f9af79 code=0x7ffc0000
[  692.799293][   T30] audit: type=1326 audit(1770645581.581:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13274 comm="syz.2.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f55f9af79 code=0x7ffc0000
[  692.821831][   T30] audit: type=1326 audit(1770645581.581:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13274 comm="syz.2.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f4f55f9af79 code=0x7ffc0000
[  692.846467][   T30] audit: type=1326 audit(1770645581.581:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13274 comm="syz.2.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f55f9af79 code=0x7ffc0000
[  692.886406][   T30] audit: type=1326 audit(1770645581.581:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13274 comm="syz.2.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f4f55f9af79 code=0x7ffc0000
[  692.990875][ T5936] usb 5-1: USB disconnect, device number 88
[  693.382713][T13288] sit1: entered promiscuous mode
[  694.996656][T13308] xt_SECMARK: invalid mode: 2
[  695.634897][T13315] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  695.645310][T13315] netdevsim netdevsim2: Direct firmware load for /
[  695.645310][T13315]  failed with error -2
[  695.663457][T13315] netdevsim netdevsim2: Falling back to sysfs fallback for: /
[  695.663457][T13315] 
[  696.171938][T13320] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2044'.
[  697.564933][T13350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  697.620854][T13350] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  698.116966][  T797] usb 3-1: new high-speed USB device number 86 using dummy_hcd
[  698.151228][T13362] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  698.269821][  T797] usb 3-1: config 1 has an invalid interface number: 7 but max is 0
[  698.292626][  T797] usb 3-1: config 1 has no interface number 0
[  698.408170][  T797] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  698.420721][  T797] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  698.432628][  T797] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  698.453348][  T797] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  698.503157][  T797] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  698.535249][  T797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  698.560156][  T797] usb 3-1: Product: syz
[  698.579113][  T797] usb 3-1: Manufacturer: syz
[  698.600803][  T797] usb 3-1: SerialNumber: syz
[  698.624465][  T797] usb 3-1: Error in usbnet_get_endpoints (-22)
[  698.830044][T13369] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2056'.
[  699.247299][T13375] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2058'.
[  700.207494][T13382] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  700.629682][T13392] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2065'.
[  700.865465][T13398] geneve3: entered promiscuous mode
[  700.872893][T13398] geneve3: entered allmulticast mode
[  700.923096][  T797] usb 3-1: USB disconnect, device number 86
[  701.046905][ T5936] usb 5-1: new full-speed USB device number 89 using dummy_hcd
[  701.069945][T13400] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  701.170119][   T30] kauditd_printk_skb: 88 callbacks suppressed
[  701.170163][   T30] audit: type=1400 audit(1770645590.631:1069): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=13404 comm="syz.3.2070"
[  701.293999][ T5936] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83
[  701.340828][ T5936] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  701.362220][ T5936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  701.399985][ T5936] usb 5-1: config 0 descriptor??
[  701.412386][T13396] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  701.624366][T13412] geneve4: entered promiscuous mode
[  701.629919][T13412] geneve4: entered allmulticast mode
[  701.676947][ T5936] ath6kl: Failed to submit usb control message: -71
[  701.696228][ T5936] ath6kl: unable to send the bmi data to the device: -71
[  701.730280][ T5936] ath6kl: Unable to send get target info: -71
[  701.820063][ T5936] ath6kl: Failed to init ath6kl core: -71
[  701.857799][ T5936] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71
[  701.892976][ T5936] usb 5-1: USB disconnect, device number 89
[  702.270122][T13419] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  702.313955][T13419] netdevsim netdevsim3: Direct firmware load for /
[  702.313955][T13419]  failed with error -2
[  702.325479][T13419] netdevsim netdevsim3: Falling back to sysfs fallback for: /
[  702.325479][T13419] 
[  702.599826][T13426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2074'.
[  704.229528][T13450] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2080'.
[  704.431704][T13458] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  704.445740][T13460] fuse: Bad value for 'fd'
[  704.476980][ T5936] usb 5-1: new high-speed USB device number 90 using dummy_hcd
[  704.482751][T13460] syzkaller0: entered promiscuous mode
[  704.496599][T13460] syzkaller0: entered allmulticast mode
[  704.582667][ T5894] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0
[  704.616215][   T30] audit: type=1326 audit(1770645594.051:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13462 comm="syz.3.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f339af79 code=0x7ffc0000
[  704.662597][ T5894] hid-generic 0000:0000:0000.001E: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  704.672346][   T30] audit: type=1326 audit(1770645594.051:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13462 comm="syz.3.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f339af79 code=0x7ffc0000
[  704.688524][ T5936] usb 5-1: Using ep0 maxpacket: 32
[  704.777855][ T5936] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  704.790528][ T5936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  704.807095][   T30] audit: type=1326 audit(1770645594.051:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13462 comm="syz.3.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f97f339af79 code=0x7ffc0000
[  704.841150][ T5936] usb 5-1: Product: syz
[  704.845456][ T5936] usb 5-1: Manufacturer: syz
[  704.851001][ T5936] usb 5-1: SerialNumber: syz
[  704.878045][ T5936] usb 5-1: config 0 descriptor??
[  704.887226][   T30] audit: type=1326 audit(1770645594.051:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13462 comm="syz.3.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f339af79 code=0x7ffc0000
[  705.053961][   T30] audit: type=1326 audit(1770645594.051:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13462 comm="syz.3.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f339af79 code=0x7ffc0000
[  705.487199][T13474] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2081'.
[  705.509291][ T5936] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 090
[  705.538401][   T30] audit: type=1326 audit(1770645594.051:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13462 comm="syz.3.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f97f339af79 code=0x7ffc0000
[  705.712425][   T30] audit: type=1326 audit(1770645594.051:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13462 comm="syz.3.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f339af79 code=0x7ffc0000
[  705.898415][   T30] audit: type=1326 audit(1770645594.051:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13462 comm="syz.3.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f339af79 code=0x7ffc0000
[  705.923034][T13485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2088'.
[  706.075027][   T30] audit: type=1326 audit(1770645594.051:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13462 comm="syz.3.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f97f339af79 code=0x7ffc0000
[  706.297219][ T5901] usb 3-1: new high-speed USB device number 87 using dummy_hcd
[  706.464152][T13489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2089'.
[  706.489113][T13489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2089'.
[  706.526162][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  706.536350][ T5901] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  706.687682][ T5901] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  706.723302][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  706.775660][ T5901] usb 3-1: config 0 descriptor??
[  706.831627][T13491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2090'.
[  706.845864][ T5901] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  706.885417][T13491] netlink: 'syz.3.2090': attribute type 20 has an invalid length.
[  706.918329][T13491] netlink: 'syz.3.2090': attribute type 21 has an invalid length.
[  707.013875][T13498] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  707.026093][T13498] netdevsim netdevsim1: Direct firmware load for /
[  707.026093][T13498]  failed with error -2
[  707.038327][T13498] netdevsim netdevsim1: Falling back to sysfs fallback for: /
[  707.038327][T13498] 
[  707.366939][ T5893] usb 5-1: USB disconnect, device number 90
[  707.691366][T13506] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2094'.
[  707.944835][T13511] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2095'.
[  708.370426][T13514] syzkaller0: entered promiscuous mode
[  708.389087][T13514] syzkaller0: entered allmulticast mode
[  709.135540][ T5936] usb 3-1: USB disconnect, device number 87
[  709.844256][ T5901] usb 3-1: new high-speed USB device number 88 using dummy_hcd
[  710.039198][ T5901] usb 3-1: Using ep0 maxpacket: 16
[  710.067727][ T5901] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  710.080109][ T5901] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  710.093902][ T5901] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  710.123588][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  710.144593][ T5901] usb 3-1: Product: syz
[  710.159920][ T5893] usb 2-1: new high-speed USB device number 93 using dummy_hcd
[  710.169199][ T5901] usb 3-1: Manufacturer: syz
[  710.181359][ T5901] usb 3-1: SerialNumber: syz
[  710.329873][ T5893] usb 2-1: Using ep0 maxpacket: 8
[  710.358227][ T5893] usb 2-1: unable to get BOS descriptor or descriptor too short
[  710.368232][ T5893] usb 2-1: config 7 has an invalid interface number: 142 but max is 0
[  710.376824][ T5893] usb 2-1: config 7 has no interface number 0
[  710.452414][ T5893] usb 2-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d
[  710.511293][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  710.521093][ T5901] usb 3-1: 0:2 : does not exist
[  710.531755][ T5893] usb 2-1: Product: syz
[  710.541201][ T5893] usb 2-1: Manufacturer: syz
[  710.545862][ T5893] usb 2-1: SerialNumber: syz
[  710.553143][ T5901] usb 3-1: USB disconnect, device number 88
[  710.624623][ T8617] udevd[8617]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  712.624149][T13563] binder: BINDER_SET_CONTEXT_MGR already set
[  712.631433][T13563] binder: 13555:13563 ioctl 4018620d 200000000280 returned -16
[  712.695238][T13566] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  712.709642][T13566] netdevsim netdevsim4: Direct firmware load for /
[  712.709642][T13566]  failed with error -2
[  712.720995][T13566] netdevsim netdevsim4: Falling back to sysfs fallback for: /
[  712.720995][T13566] 
[  712.798024][T13563] binder: BINDER_SET_CONTEXT_MGR already set
[  712.810514][T13563] binder: 13555:13563 ioctl 4018620d 200000000040 returned -16
[  712.840867][T13563] binder: 13555:13563 ioctl c0306201 2000000003c0 returned -14
[  712.926425][ T5894] usb 3-1: new full-speed USB device number 89 using dummy_hcd
[  713.092304][ T5894] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83
[  713.113545][ T5894] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  713.125957][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  713.160998][ T5894] usb 3-1: config 0 descriptor??
[  713.167970][T13558] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  713.381692][ T5894] ath6kl: Failed to submit usb control message: -71
[  713.388986][ T5894] ath6kl: unable to send the bmi data to the device: -71
[  713.397461][ T5894] ath6kl: Unable to send get target info: -71
[  713.466915][ T5894] ath6kl: Failed to init ath6kl core: -71
[  713.512044][ T5894] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71
[  713.686989][ T5894] usb 3-1: USB disconnect, device number 89
[  713.703617][ T5893] usb 2-1: USB disconnect, device number 93
[  713.898827][T13571] sctp: [Deprecated]: syz.3.2110 (pid 13571) Use of int in max_burst socket option.
[  713.898827][T13571] Use struct sctp_assoc_value instead
[  714.315159][   T30] kauditd_printk_skb: 30 callbacks suppressed
[  714.315178][   T30] audit: type=1326 audit(1770645603.771:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13574 comm="syz.3.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f339af79 code=0x7ffc0000
[  714.374548][T13579] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  714.434349][   T30] audit: type=1326 audit(1770645603.771:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13574 comm="syz.3.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f339af79 code=0x7ffc0000
[  714.507305][   T30] audit: type=1326 audit(1770645603.801:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13574 comm="syz.3.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f97f339af79 code=0x7ffc0000
[  714.512946][T13581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  714.587278][   T30] audit: type=1326 audit(1770645603.801:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13574 comm="syz.3.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f339af79 code=0x7ffc0000
[  714.612800][T13581] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  714.665947][   T30] audit: type=1326 audit(1770645603.811:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13574 comm="syz.3.2112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f339af79 code=0x7ffc0000
[  714.694922][T13589] FAULT_INJECTION: forcing a failure.
[  714.694922][T13589] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  714.710573][T13589] CPU: 0 UID: 0 PID: 13589 Comm: syz.2.2118 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  714.710607][T13589] Tainted: [L]=SOFTLOCKUP
[  714.710616][T13589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  714.710629][T13589] Call Trace:
[  714.710639][T13589]  <TASK>
[  714.710648][T13589]  dump_stack_lvl+0xe8/0x150
[  714.710683][T13589]  should_fail_ex+0x412/0x560
[  714.710715][T13589]  _copy_from_user+0x2d/0xb0
[  714.710737][T13589]  __copy_msghdr+0x3c5/0x5b0
[  714.710771][T13589]  ___sys_sendmsg+0x213/0x360
[  714.710799][T13589]  ? __lock_acquire+0x6b5/0x2cf0
[  714.710833][T13589]  ? __pfx____sys_sendmsg+0x10/0x10
[  714.710899][T13589]  ? __fget_files+0x2a/0x420
[  714.710922][T13589]  ? __fget_files+0x3a0/0x420
[  714.710957][T13589]  __x64_sys_sendmsg+0x1bd/0x2a0
[  714.710989][T13589]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  714.711028][T13589]  ? __pfx_ksys_write+0x10/0x10
[  714.711071][T13589]  do_syscall_64+0xe2/0xf80
[  714.711095][T13589]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  714.711115][T13589]  ? trace_irq_disable+0x37/0x100
[  714.711136][T13589]  ? clear_bhb_loop+0x60/0xb0
[  714.711162][T13589]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  714.711183][T13589] RIP: 0033:0x7f4f55f9af79
[  714.711229][T13589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  714.711247][T13589] RSP: 002b:00007f4f56e16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  714.711271][T13589] RAX: ffffffffffffffda RBX: 00007f4f56215fa0 RCX: 00007f4f55f9af79
[  714.711287][T13589] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000006
[  714.711300][T13589] RBP: 00007f4f56e16090 R08: 0000000000000000 R09: 0000000000000000
[  714.711313][T13589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  714.711327][T13589] R13: 00007f4f56216038 R14: 00007f4f56215fa0 R15: 00007f4f5633fa48
[  714.711361][T13589]  </TASK>
[  715.046915][  T797] usb 5-1: new high-speed USB device number 91 using dummy_hcd
[  715.201137][  T797] usb 5-1: Using ep0 maxpacket: 16
[  715.210952][T13593] syzkaller0: entered promiscuous mode
[  715.220269][T13593] syzkaller0: entered allmulticast mode
[  715.252856][T13595] binder: BINDER_SET_CONTEXT_MGR already set
[  715.259423][T13595] binder: 13594:13595 ioctl 4018620d 2000000002c0 returned -16
[  715.279190][  T797] usb 5-1: config 166 has an invalid interface number: 177 but max is 1
[  715.297436][  T797] usb 5-1: config 166 has an invalid interface number: 34 but max is 1
[  715.307606][  T797] usb 5-1: config 166 has no interface number 0
[  715.314002][  T797] usb 5-1: config 166 has no interface number 1
[  715.331842][  T797] usb 5-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[  715.348356][  T797] usb 5-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[  715.371715][  T797] usb 5-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping
[  715.392922][  T797] usb 5-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86
[  715.416970][  T797] usb 5-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024
[  715.446857][  T797] usb 5-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024
[  715.526006][  T797] usb 5-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  715.567440][  T797] usb 5-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0
[  715.614743][  T797] usb 5-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4
[  715.654599][  T797] usb 5-1: config 166 interface 177 has no altsetting 0
[  715.682506][  T797] usb 5-1: config 166 interface 34 has no altsetting 0
[  715.702911][T13609] FAULT_INJECTION: forcing a failure.
[  715.702911][T13609] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  715.718987][  T797] usb 5-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12
[  715.728475][  T797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  715.737501][T13609] CPU: 1 UID: 0 PID: 13609 Comm: syz.3.2124 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  715.737527][T13609] Tainted: [L]=SOFTLOCKUP
[  715.737533][T13609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  715.737568][T13609] Call Trace:
[  715.737577][T13609]  <TASK>
[  715.737586][T13609]  dump_stack_lvl+0xe8/0x150
[  715.737619][T13609]  should_fail_ex+0x412/0x560
[  715.737659][T13609]  _copy_to_user+0x31/0xb0
[  715.737676][T13609]  simple_read_from_buffer+0xe1/0x170
[  715.737696][T13609]  proc_fail_nth_read+0x1bb/0x230
[  715.737721][T13609]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  715.737745][T13609]  ? rw_verify_area+0x2a6/0x4d0
[  715.737766][T13609]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  715.737789][T13609]  vfs_read+0x20c/0xa70
[  715.737809][T13609]  ? fdget_pos+0x246/0x320
[  715.737829][T13609]  ? __pfx___mutex_lock+0x10/0x10
[  715.737847][T13609]  ? __pfx_vfs_read+0x10/0x10
[  715.737869][T13609]  ? __fget_files+0x2a/0x420
[  715.737888][T13609]  ? __fget_files+0x3a0/0x420
[  715.737904][T13609]  ? __fget_files+0x2a/0x420
[  715.737927][T13609]  ksys_read+0x150/0x270
[  715.737950][T13609]  ? __pfx_ksys_read+0x10/0x10
[  715.737979][T13609]  do_syscall_64+0xe2/0xf80
[  715.737996][T13609]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  715.738010][T13609]  ? trace_irq_disable+0x37/0x100
[  715.738024][T13609]  ? clear_bhb_loop+0x60/0xb0
[  715.738042][T13609]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  715.738056][T13609] RIP: 0033:0x7f97f335b84e
[  715.738070][T13609] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  715.738083][T13609] RSP: 002b:00007f97f15f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  715.738099][T13609] RAX: ffffffffffffffda RBX: 00007f97f15f66c0 RCX: 00007f97f335b84e
[  715.738110][T13609] RDX: 000000000000000f RSI: 00007f97f15f60a0 RDI: 0000000000000004
[  715.738120][T13609] RBP: 00007f97f15f6090 R08: 0000000000000000 R09: 0000000000000000
[  715.738130][T13609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  715.738139][T13609] R13: 00007f97f3616128 R14: 00007f97f3616090 R15: 00007f97f373fa48
[  715.738162][T13609]  </TASK>
[  715.738352][  T797] usb 5-1: Product: syz
[  715.981495][  T797] usb 5-1: Manufacturer: syz
[  715.987107][  T797] usb 5-1: SerialNumber: syz
[  716.037644][ T5936] usb 2-1: new full-speed USB device number 94 using dummy_hcd
[  716.210437][ T5936] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  716.222056][ T5936] usb 2-1: config 0 interface 0 has no altsetting 0
[  716.229479][ T5936] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00
[  716.248821][ T5936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  716.258912][  T797] ums-realtek 5-1:166.177: USB Mass Storage device detected
[  716.269337][ T5936] usb 2-1: config 0 descriptor??
[  716.275189][T13599] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  716.469744][  T797] ums-realtek 5-1:166.34: USB Mass Storage device detected
[  716.731144][  T797] ums-realtek 5-1:166.34: probe with driver ums-realtek failed with error -5
[  716.878931][T13585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  716.891597][T13585] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  716.911445][  T797] uvcvideo 5-1:166.34: Found UVC 0.00 device syz (0bda:0138)
[  716.925587][  T797] uvcvideo 5-1:166.34: No valid video chain found.
[  716.960204][  T797] usb 5-1: USB disconnect, device number 91
[  718.751813][T13623] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  718.848602][T13623] netdevsim netdevsim4: Direct firmware load for /
[  718.848602][T13623]  failed with error -2
[  718.863810][T13623] netdevsim netdevsim4: Falling back to sysfs fallback for: /
[  718.863810][T13623] 
[  718.928103][ T5936] usbhid 2-1:0.0: can't add hid device: -71
[  718.956522][ T5936] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  719.128671][ T5936] usb 2-1: USB disconnect, device number 94
[  719.263006][T13635] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  720.455571][T13645] netlink: 'syz.2.2133': attribute type 13 has an invalid length.
[  720.475702][T13645] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2133'.
[  720.518308][T13645] ipvlan2: entered promiscuous mode
[  720.740356][T13647] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2134'.
[  720.767164][T13647] ..0�: renamed from hsr0
[  720.781155][T13647] ..0�: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  720.792386][T13647] ..0�: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  720.813979][T13647] ..0�: entered allmulticast mode
[  720.829875][T13649] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2135'.
[  720.839953][T13647] hsr_slave_0: entered allmulticast mode
[  720.855735][T13647] hsr_slave_1: entered allmulticast mode
[  720.894868][T13647] A link change request failed with some changes committed already. Interface ..0� may have been left with an inconsistent configuration, please check.
[  721.106922][  T797] usb 2-1: new high-speed USB device number 95 using dummy_hcd
[  721.276854][  T797] usb 2-1: Using ep0 maxpacket: 16
[  721.313992][  T797] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  721.325920][  T797] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  721.336694][  T797] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[  721.345893][  T797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  721.359286][  T797] usb 2-1: config 0 descriptor??
[  721.714149][T13665] netlink: 'syz.2.2140': attribute type 1 has an invalid length.
[  721.829902][  T797] corsair 0003:1B1C:1B02.001F: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0
[  721.897007][   T43] usb 5-1: new high-speed USB device number 92 using dummy_hcd
[  721.985994][  T797] corsair 0003:1B1C:1B02.001F: Failed to get K90 initial state (error -32).
[  722.077407][   T43] usb 5-1: Using ep0 maxpacket: 8
[  722.085750][   T43] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  722.108455][   T43] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  722.120272][   T43] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  722.132693][  T797] usb 2-1: USB disconnect, device number 95
[  722.163959][   T43] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  722.175303][   T43] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  722.226031][   T43] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  722.243638][   T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  722.259398][T13674] fuse: Unknown parameter 'group_id00000000000000000000'
[  722.449223][ T5894] IPVS: starting estimator thread 0...
[  722.529286][   T43] usb 5-1: USB disconnect, device number 92
[  722.538029][  T797] usb 3-1: new high-speed USB device number 90 using dummy_hcd
[  722.548560][T13681] IPVS: using max 38 ests per chain, 91200 per kthread
[  722.723776][  T797] usb 3-1: Using ep0 maxpacket: 8
[  722.739729][  T797] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  722.755492][  T797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  722.768331][  T797] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  722.782743][  T797] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  722.798563][  T797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  722.848254][  T797] usb 3-1: config 0 descriptor??
[  722.853980][T13694] netlink: 'syz.1.2148': attribute type 8 has an invalid length.
[  722.986762][   T43] usb 5-1: new high-speed USB device number 93 using dummy_hcd
[  723.180154][   T43] usb 5-1: config 0 has an invalid interface number: 33 but max is 0
[  723.190449][   T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  723.213774][   T43] usb 5-1: config 0 has no interface number 0
[  723.264210][   T43] usb 5-1: config 0 interface 33 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023
[  723.301184][   T43] usb 5-1: config 0 interface 33 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  723.347019][   T43] usb 5-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=68.64
[  723.362691][   T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  723.387638][   T43] usb 5-1: Product: syz
[  723.394433][   T43] usb 5-1: Manufacturer: syz
[  723.404603][   T43] usb 5-1: SerialNumber: syz
[  723.428344][   T43] usb 5-1: config 0 descriptor??
[  723.440748][T13691] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  723.461737][   T43] hdpvr 5-1:0.33: Could not find bulk-in endpoint
[  723.475773][   T43] hdpvr 5-1:0.33: probe with driver hdpvr failed with error -12
[  723.677598][T13691] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  723.817998][ T5894] usb 5-1: USB disconnect, device number 93
[  724.974914][T13721] bond4: entered promiscuous mode
[  724.996470][ T5894] usb 3-1: USB disconnect, device number 90
[  725.028541][T13727] fuse: Unknown parameter 'group_id00000000000000000000'
[  725.104696][T13726] can: request_module (can-proto-0) failed.
[  725.397376][T13721] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  725.488909][T13745] tipc: Resetting bearer <eth:syzkaller0>
[  725.632220][T13719] tipc: Disabling bearer <eth:syzkaller0>
[  725.638260][  T797] usb 3-1: new high-speed USB device number 91 using dummy_hcd
[  725.796945][  T797] usb 3-1: Using ep0 maxpacket: 16
[  725.804199][  T797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  725.816947][  T797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  725.839589][  T797] usb 3-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00
[  725.913953][  T797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  725.952102][  T797] usb 3-1: config 0 descriptor??
[  726.435883][  T797] gt683r_led 0003:1770:FF00.0020: unbalanced delimiter at end of report description
[  726.447939][  T797] gt683r_led 0003:1770:FF00.0020: hid parsing failed
[  726.470780][  T797] gt683r_led 0003:1770:FF00.0020: probe with driver gt683r_led failed with error -22
[  726.630188][  T797] usb 3-1: USB disconnect, device number 91
[  726.662219][T13759] dlm: non-version read from control device 8224
[  726.697018][T13758] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10)
[  726.703705][T13758] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  726.744612][T13758] vhci_hcd vhci_hcd.0: Device attached
[  726.931484][T13760] vhci_hcd: connection closed
[  726.932230][   T13] vhci_hcd vhci_hcd.3: stop threads
[  726.948325][   T13] vhci_hcd vhci_hcd.3: release socket
[  726.953983][   T13] vhci_hcd vhci_hcd.3: disconnect device
[  727.326215][T13773] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  727.619796][T13779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2167'.
[  728.431118][T13787] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  728.525412][T13787] tipc: Resetting bearer <eth:syzkaller0>
[  729.415411][T13789] bond4: entered promiscuous mode
[  729.607900][T13789] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  730.007296][ T5894] usb 3-1: new high-speed USB device number 92 using dummy_hcd
[  730.146793][ T5894] usb 3-1: device descriptor read/64, error -71
[  730.194438][T13812] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2178'.
[  730.428296][ T5894] usb 3-1: new high-speed USB device number 93 using dummy_hcd
[  730.496340][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  730.856368][ T5894] usb 3-1: device descriptor read/64, error -71
[  730.967600][ T5894] usb usb3-port1: attempt power cycle
[  730.994920][T13825] IPVS: Scheduler module ip_vs_ not found
[  731.436373][ T5894] usb 3-1: new high-speed USB device number 94 using dummy_hcd
[  731.513075][ T5894] usb 3-1: device descriptor read/8, error -71
[  731.536371][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  731.697892][T13837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2182'.
[  731.776674][ T5894] usb 3-1: new high-speed USB device number 95 using dummy_hcd
[  731.807263][ T5894] usb 3-1: device descriptor read/8, error -71
[  731.917060][ T5894] usb usb3-port1: unable to enumerate USB device
[  732.186391][ T5894] usb 2-1: new full-speed USB device number 96 using dummy_hcd
[  732.377802][ T5894] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  732.426438][ T5894] usb 2-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  732.523378][ T5894] usb 2-1: config 0 interface 0 has no altsetting 0
[  732.558594][ T5894] usb 2-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00
[  732.576355][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  732.636864][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  732.670855][T13845] bond5: entered promiscuous mode
[  732.670877][ T5894] usb 2-1: config 0 descriptor??
[  733.107537][ T5894] holtek 0003:1241:5015.0021: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.1-1/input0
[  733.131071][ T5894] holtek 0003:1241:5015.0021: no inputs found
[  733.144254][T13850] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  733.217500][T13847] tipc: Resetting bearer <eth:syzkaller0>
[  733.267203][T13844] tipc: Disabling bearer <eth:syzkaller0>
[  733.295937][ T9676] usb 2-1: USB disconnect, device number 96
[  733.360960][T13862] fido_id[13862]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  733.616403][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  734.522164][T13897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  734.540324][T13897] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  734.656357][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  734.722205][T13902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  734.737602][T13902] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  735.230504][T13912] dvmrp0: entered allmulticast mode
[  735.264141][T13912] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2204'.
[  735.696349][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  736.073857][T13921] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  736.736345][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  736.799108][T13951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  736.870524][T13951] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  737.776414][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  738.067241][T13967] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2216'.
[  738.337174][T13973] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2217'.
[  738.629072][T13983] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2220'.
[  738.639918][T13983] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2220'.
[  738.733802][T13985] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  738.816349][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  738.979217][T13990] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2222'.
[  739.015475][T13990] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2222'.
[  739.083851][T13990] tipc: Cannot configure node identity twice
[  739.162572][T13994] No such timeout policy "syz1"
[  739.485381][T13998] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2227'.
[  739.609660][T14001] xt_TCPMSS: Only works on TCP SYN packets
[  739.829913][T14008] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2229'.
[  739.856407][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  739.930047][T14008] libceph: resolve '0..' (ret=-3): failed
[  740.896344][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  741.441992][T14031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  741.500311][T14033] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  741.510183][T14031] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  741.549445][T14031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  741.570688][T14031] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  741.882383][T14042] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2239'.
[  741.937138][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  742.170419][T14053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2242'.
[  742.277146][T14057] FAULT_INJECTION: forcing a failure.
[  742.277146][T14057] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  742.310927][T14057] CPU: 0 UID: 0 PID: 14057 Comm: syz.1.2235 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  742.310967][T14057] Tainted: [L]=SOFTLOCKUP
[  742.310975][T14057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  742.310988][T14057] Call Trace:
[  742.310997][T14057]  <TASK>
[  742.311015][T14057]  dump_stack_lvl+0xe8/0x150
[  742.311061][T14057]  should_fail_ex+0x412/0x560
[  742.311093][T14057]  _copy_from_iter+0x1d3/0x1670
[  742.311136][T14057]  ? __pfx__copy_from_iter+0x10/0x10
[  742.311165][T14057]  ? alloc_pages_noprof+0xbd/0x190
[  742.311193][T14057]  ? skb_page_frag_refill+0x199/0x310
[  742.311232][T14057]  kcm_sendmsg+0xf0d/0x2b00
[  742.311304][T14057]  ? __pfx_kcm_sendmsg+0x10/0x10
[  742.311334][T14057]  ? aa_sock_msg_perm+0xf1/0x1b0
[  742.311362][T14057]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  742.311386][T14057]  ? __pfx_kcm_sendmsg+0x10/0x10
[  742.311415][T14057]  ____sys_sendmsg+0xa68/0xad0
[  742.311442][T14057]  ? __might_fault+0xaf/0x130
[  742.311480][T14057]  ? __pfx_____sys_sendmsg+0x10/0x10
[  742.311516][T14057]  ? import_iovec+0x73/0xa0
[  742.311556][T14057]  ___sys_sendmsg+0x2a5/0x360
[  742.311583][T14057]  ? __lock_acquire+0x6b5/0x2cf0
[  742.311614][T14057]  ? __pfx____sys_sendmsg+0x10/0x10
[  742.311678][T14057]  ? __fget_files+0x2a/0x420
[  742.311699][T14057]  ? __fget_files+0x3a0/0x420
[  742.311728][T14057]  __x64_sys_sendmsg+0x1bd/0x2a0
[  742.311754][T14057]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  742.311787][T14057]  ? __pfx_ksys_write+0x10/0x10
[  742.311824][T14057]  do_syscall_64+0xe2/0xf80
[  742.311843][T14057]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  742.311861][T14057]  ? trace_irq_disable+0x37/0x100
[  742.311878][T14057]  ? clear_bhb_loop+0x60/0xb0
[  742.311899][T14057]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  742.311916][T14057] RIP: 0033:0x7f547f59af79
[  742.311934][T14057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  742.311950][T14057] RSP: 002b:00007f54804b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  742.311998][T14057] RAX: ffffffffffffffda RBX: 00007f547f816180 RCX: 00007f547f59af79
[  742.312013][T14057] RDX: 0000000000000000 RSI: 0000200000002080 RDI: 0000000000000006
[  742.312024][T14057] RBP: 00007f54804b5090 R08: 0000000000000000 R09: 0000000000000000
[  742.312036][T14057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  742.312047][T14057] R13: 00007f547f816218 R14: 00007f547f816180 R15: 00007f547f93fa48
[  742.312076][T14057]  </TASK>
[  742.717510][  T797] usb 3-1: new full-speed USB device number 96 using dummy_hcd
[  742.976996][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  743.060336][T14065] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  743.074739][T14065] netdevsim netdevsim3: Direct firmware load for /
[  743.074739][T14065]  failed with error -2
[  743.098693][T14065] netdevsim netdevsim3: Falling back to sysfs fallback for: /
[  743.098693][T14065] 
[  743.147944][  T797] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83
[  743.220706][  T797] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  743.253854][  T797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  743.284589][  T797] usb 3-1: config 0 descriptor??
[  743.311284][T14055] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  743.623588][  T797] ath6kl: Failed to submit usb control message: -71
[  743.631325][  T797] ath6kl: unable to send the bmi data to the device: -71
[  743.639735][  T797] ath6kl: Unable to send get target info: -71
[  743.662382][  T797] ath6kl: Failed to init ath6kl core: -71
[  743.877625][  T797] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71
[  743.892273][  T797] usb 3-1: USB disconnect, device number 96
[  744.016943][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  745.056351][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  745.129777][T14077] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  745.202302][T14079] fuse: Bad value for 'fd'
[  745.600853][T14100] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2253'.
[  746.096561][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  746.400605][T14119] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  746.482732][T14126] fuse: Bad value for 'fd'
[  746.801626][T14127] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2259'.
[  747.137152][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  747.552984][T14143] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2266'.
[  748.176357][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  748.878385][T14165] fuse: Bad value for 'fd'
[  749.186995][T14171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  749.216349][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  749.233125][T14171] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  749.258909][ T5936] usb 3-1: new high-speed USB device number 97 using dummy_hcd
[  749.396810][ T5936] usb 3-1: device descriptor read/64, error -71
[  749.436436][ T5893] usb 2-1: new high-speed USB device number 97 using dummy_hcd
[  749.598959][ T5893] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  749.616522][ T5893] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  749.632222][ T5893] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  749.639146][ T5936] usb 3-1: new high-speed USB device number 98 using dummy_hcd
[  749.656923][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  749.681821][T14173] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[  749.694867][ T5893] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  749.799001][ T5936] usb 3-1: device descriptor read/64, error -71
[  749.907311][ T5936] usb usb3-port1: attempt power cycle
[  750.108842][ T5893] usb 2-1: USB disconnect, device number 97
[  750.256333][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  750.268230][ T5936] usb 3-1: new high-speed USB device number 99 using dummy_hcd
[  750.318049][ T5936] usb 3-1: device descriptor read/8, error -71
[  750.597119][ T5936] usb 3-1: new high-speed USB device number 100 using dummy_hcd
[  750.629756][ T5936] usb 3-1: device descriptor read/8, error -71
[  750.740213][ T5936] usb usb3-port1: unable to enumerate USB device
[  750.798988][T14189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2281'.
[  751.246768][ T9676] usb 5-1: new full-speed USB device number 94 using dummy_hcd
[  751.296391][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  751.399269][ T9676] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  751.420519][ T9676] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  751.457149][ T9676] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  751.477061][ T9676] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  751.489501][ T9676] usb 5-1: config 0 descriptor??
[  752.183772][T14193] tipc: Invalid UDP bearer configuration
[  752.183863][T14193] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  752.237618][ T9676] usbhid 5-1:0.0: can't add hid device: -71
[  752.249714][ T9676] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  752.280438][ T9676] usb 5-1: USB disconnect, device number 94
[  752.336343][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  752.502223][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  752.509494][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  752.556360][ T5893] usb 2-1: new high-speed USB device number 98 using dummy_hcd
[  752.686448][ T5893] usb 2-1: device descriptor read/64, error -71
[  752.774929][T14205] fuse: Bad value for 'fd'
[  752.900381][T14208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  752.915050][T14208] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  752.956396][ T5893] usb 2-1: new high-speed USB device number 99 using dummy_hcd
[  753.096691][ T5893] usb 2-1: device descriptor read/64, error -71
[  753.206956][ T5893] usb usb2-port1: attempt power cycle
[  753.335328][T14217] netdevsim netdevsim2: Direct firmware load for /
[  753.335328][T14217]  failed with error -2
[  753.346954][T14217] netdevsim netdevsim2: Falling back to sysfs fallback for: /
[  753.346954][T14217] 
[  753.376347][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  753.573932][ T5893] usb 2-1: new high-speed USB device number 100 using dummy_hcd
[  753.607278][ T5893] usb 2-1: device descriptor read/8, error -71
[  753.966479][ T5893] usb 2-1: new high-speed USB device number 101 using dummy_hcd
[  753.997138][ T5893] usb 2-1: device descriptor read/8, error -71
[  754.106847][ T5893] usb usb2-port1: unable to enumerate USB device
[  754.426407][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  754.472773][T14223] netlink: 'syz.2.2292': attribute type 10 has an invalid length.
[  754.490533][T14223] team0: Port device dummy0 added
[  754.636400][ T5829] usb 5-1: new full-speed USB device number 95 using dummy_hcd
[  754.788442][ T5829] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  754.799878][ T5829] usb 5-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00
[  754.810354][ T5829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  754.822585][ T5829] usb 5-1: config 0 descriptor??
[  755.031729][T14220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  755.042259][T14220] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  755.055867][T14220] FAULT_INJECTION: forcing a failure.
[  755.055867][T14220] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  755.070749][T14220] CPU: 1 UID: 0 PID: 14220 Comm: syz.4.2291 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  755.070785][T14220] Tainted: [L]=SOFTLOCKUP
[  755.070792][T14220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  755.070801][T14220] Call Trace:
[  755.070808][T14220]  <TASK>
[  755.070816][T14220]  dump_stack_lvl+0xe8/0x150
[  755.070865][T14220]  should_fail_ex+0x412/0x560
[  755.070897][T14220]  _copy_from_iter+0x1d3/0x1670
[  755.070942][T14220]  ? __pfx__copy_from_iter+0x10/0x10
[  755.070966][T14220]  ? rcu_is_watching+0x15/0xb0
[  755.070982][T14220]  ? trace_kmalloc+0x1f/0xb0
[  755.071013][T14220]  ? __kmalloc_noprof+0x42d/0x7e0
[  755.071033][T14220]  ? kernfs_fop_write_iter+0x158/0x540
[  755.071062][T14220]  kernfs_fop_write_iter+0x19b/0x540
[  755.071098][T14220]  vfs_write+0x61d/0xb90
[  755.071127][T14220]  ? __pfx_vfs_write+0x10/0x10
[  755.071175][T14220]  ? __fget_files+0x2a/0x420
[  755.071209][T14220]  ksys_write+0x150/0x270
[  755.071243][T14220]  ? __pfx_ksys_write+0x10/0x10
[  755.071285][T14220]  do_syscall_64+0xe2/0xf80
[  755.071310][T14220]  ? rcu_is_watching+0x15/0xb0
[  755.071341][T14220]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  755.071362][T14220]  ? clear_bhb_loop+0x60/0xb0
[  755.071394][T14220]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  755.071414][T14220] RIP: 0033:0x7f73d619af79
[  755.071435][T14220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  755.071448][T14220] RSP: 002b:00007f73d6fdc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  755.071465][T14220] RAX: ffffffffffffffda RBX: 00007f73d6415fa0 RCX: 00007f73d619af79
[  755.071491][T14220] RDX: 000000000000007c RSI: 0000200000000880 RDI: 0000000000000005
[  755.071505][T14220] RBP: 00007f73d6fdc090 R08: 0000000000000000 R09: 0000000000000000
[  755.071519][T14220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  755.071531][T14220] R13: 00007f73d6416038 R14: 00007f73d6415fa0 R15: 00007f73d653fa48
[  755.071564][T14220]  </TASK>
[  755.288212][ T5829] acrux 0003:1A34:F705.0022: unexpected long global item
[  755.305623][ T5829] acrux 0003:1A34:F705.0022: parse failed
[  755.318558][ T5829] acrux 0003:1A34:F705.0022: probe with driver acrux failed with error -22
[  755.456427][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  755.551563][   T30] audit: type=1326 audit(1770645645.011:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14225 comm="syz.1.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547f59af79 code=0x7ffc0000
[  755.575608][   T30] audit: type=1326 audit(1770645645.031:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14225 comm="syz.1.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547f59af79 code=0x7ffc0000
[  755.600945][   T30] audit: type=1326 audit(1770645645.031:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14225 comm="syz.1.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f547f59af79 code=0x7ffc0000
[  755.631828][   T30] audit: type=1326 audit(1770645645.091:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14225 comm="syz.1.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547f59af79 code=0x7ffc0000
[  755.655555][   T30] audit: type=1326 audit(1770645645.091:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14225 comm="syz.1.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f547f59af79 code=0x7ffc0000
[  755.678408][T14231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  755.678844][T14231] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  755.853482][   T30] audit: type=1326 audit(1770645645.091:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14225 comm="syz.1.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547f59af79 code=0x7ffc0000
[  755.907204][ T5829] usb 5-1: USB disconnect, device number 95
[  755.921809][   T30] audit: type=1326 audit(1770645645.091:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14225 comm="syz.1.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f547f59af79 code=0x7ffc0000
[  755.949505][   T30] audit: type=1326 audit(1770645645.091:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14225 comm="syz.1.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547f59af79 code=0x7ffc0000
[  755.979403][   T30] audit: type=1326 audit(1770645645.171:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14225 comm="syz.1.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f547f59af79 code=0x7ffc0000
[  756.007318][   T30] audit: type=1326 audit(1770645645.171:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14225 comm="syz.1.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547f59af79 code=0x7ffc0000
[  756.172623][T14238] syzkaller0: entered promiscuous mode
[  756.201621][T14238] syzkaller0: entered allmulticast mode
[  756.496349][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  757.536508][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  758.387961][ T5829] usb 5-1: new high-speed USB device number 96 using dummy_hcd
[  758.536981][ T5936] usb 2-1: new high-speed USB device number 102 using dummy_hcd
[  758.546386][ T5829] usb 5-1: device descriptor read/64, error -71
[  758.576368][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  758.698249][ T5936] usb 2-1: Using ep0 maxpacket: 8
[  758.711709][ T5936] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  758.723687][ T5936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  758.747014][ T5936] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  758.787428][ T5936] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  758.805814][ T5936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  758.820418][ T5829] usb 5-1: new high-speed USB device number 97 using dummy_hcd
[  758.859230][ T5936] usb 2-1: config 0 descriptor??
[  759.016389][ T5829] usb 5-1: device descriptor read/64, error -71
[  759.128925][ T5829] usb usb5-port1: attempt power cycle
[  759.514938][ T5829] usb 5-1: new high-speed USB device number 98 using dummy_hcd
[  759.616354][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  759.625185][ T5829] usb 5-1: device descriptor read/8, error -71
[  759.875271][ T5829] usb 5-1: new high-speed USB device number 99 using dummy_hcd
[  759.946111][ T5829] usb 5-1: device descriptor read/8, error -71
[  760.049094][T14278] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2310'.
[  760.209683][ T5829] usb usb5-port1: unable to enumerate USB device
[  760.656357][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  761.696350][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  761.813034][   T30] kauditd_printk_skb: 31 callbacks suppressed
[  761.813053][   T30] audit: type=1326 audit(1770645651.201:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14289 comm="syz.0.2314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77bed9af79 code=0x7ffc0000
[  761.862309][ T5829] usb 2-1: USB disconnect, device number 102
[  761.943561][   T30] audit: type=1326 audit(1770645651.251:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14289 comm="syz.0.2314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77bed9af79 code=0x7ffc0000
[  761.973132][   T30] audit: type=1326 audit(1770645651.261:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14289 comm="syz.0.2314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f77bed9af79 code=0x7ffc0000
[  762.165736][   T30] audit: type=1326 audit(1770645651.261:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14289 comm="syz.0.2314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77bed9af79 code=0x7ffc0000
[  762.318617][   T30] audit: type=1326 audit(1770645651.261:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14289 comm="syz.0.2314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f77bed9af79 code=0x7ffc0000
[  762.398092][   T30] audit: type=1326 audit(1770645651.261:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14289 comm="syz.0.2314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77bed9af79 code=0x7ffc0000
[  762.482147][   T30] audit: type=1326 audit(1770645651.261:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14289 comm="syz.0.2314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f77bed9af79 code=0x7ffc0000
[  762.514565][   T30] audit: type=1326 audit(1770645651.261:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14289 comm="syz.0.2314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77bed9af79 code=0x7ffc0000
[  762.579215][   T30] audit: type=1326 audit(1770645651.261:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14289 comm="syz.0.2314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f77bed9af79 code=0x7ffc0000
[  762.639754][   T30] audit: type=1326 audit(1770645651.261:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14289 comm="syz.0.2314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77bed9af79 code=0x7ffc0000
[  762.681020][T14313] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  762.736810][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  763.776358][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  764.816345][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  765.856339][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  765.960550][T14371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  765.988282][T14371] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  766.007969][T14372] netlink: 'syz.4.2341': attribute type 10 has an invalid length.
[  766.015959][T14372] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2341'.
[  766.074254][T14372] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  766.896362][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  767.936320][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  768.976358][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  770.016336][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  770.929243][T14456] input: syz1 as /devices/virtual/input/input44
[  771.056333][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  772.096327][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  772.414926][T14486] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2382'.
[  773.136463][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  773.850419][T14519] QAT: failed to copy from user cfg_data.
[  773.953850][T14525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  773.969615][T14525] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  773.997371][T14530] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2386'.
[  774.075744][T14528] xt_CT: No such helper "netbios-ns"
[  774.176326][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  775.216332][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  776.256745][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  777.296330][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  777.493174][T14581] syz_tun: entered allmulticast mode
[  778.052798][ T5901] usb 2-1: new high-speed USB device number 103 using dummy_hcd
[  778.226395][ T5901] usb 2-1: Using ep0 maxpacket: 32
[  778.336363][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  778.500008][ T5901] usb 2-1: config 0 has an invalid interface number: 188 but max is 0
[  778.524560][ T5901] usb 2-1: config 0 has no interface number 0
[  778.534520][ T5901] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  778.660548][ T5901] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  778.702646][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  778.733406][ T5901] usb 2-1: Product: syz
[  778.745877][ T5901] usb 2-1: Manufacturer: syz
[  778.765992][ T5901] usb 2-1: SerialNumber: syz
[  778.804688][ T5901] usb 2-1: config 0 descriptor??
[  778.817200][T14596] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  779.045968][T14596] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  779.376334][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  780.066077][T14624] binder: 14619:14624 ioctl 4018620d 0 returned -22
[  780.416328][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  780.911289][ T5901] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  780.921827][ T5901] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  780.963374][ T5901] asix 2-1:0.188: probe with driver asix failed with error -71
[  781.002147][ T5901] usb 2-1: USB disconnect, device number 103
[  781.456354][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  782.496335][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  783.276923][ T9676] usb 3-1: new full-speed USB device number 101 using dummy_hcd
[  783.468993][ T9676] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4
[  783.483382][ T9676] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023
[  783.527448][ T9676] usb 3-1: config 0 interface 0 has no altsetting 0
[  783.536398][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  783.548673][ T9676] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  783.560405][ T9676] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  783.590456][ T9676] usb 3-1: Product: syz
[  783.605749][ T9676] usb 3-1: Manufacturer: syz
[  783.640263][ T9676] usb 3-1: SerialNumber: syz
[  783.670224][ T9676] usb 3-1: config 0 descriptor??
[  783.722026][ T9676] usb 3-1: selecting invalid altsetting 0
[  783.953716][T14659] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled
[  783.989575][ T9676] usb 3-1: USB disconnect, device number 101
[  784.111252][T14674] udevd[14674]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  784.576317][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  785.616329][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  785.710373][T14695] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2453'.
[  786.656377][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  787.696325][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  787.788458][T14721] input: syz1 as /devices/virtual/input/input45
[  788.736347][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  789.776344][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  790.816342][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  791.856330][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  792.896378][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  793.616921][   T30] kauditd_printk_skb: 33 callbacks suppressed
[  793.616937][   T30] audit: type=1804 audit(1770645683.061:1198): pid=14812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2499" name="/newroot/493/file1" dev="fuse" ino=1 res=1 errno=0
[  793.936327][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  794.319992][T14821] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2502'.
[  794.521205][T14822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  794.551042][T14822] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  794.976343][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  795.181248][T14842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2510'.
[  795.190629][T14842] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2510'.
[  795.243959][T14842] ip6gretap0: entered promiscuous mode
[  795.258836][T14842] ip6gretap0: left promiscuous mode
[  795.782378][T14848] xt_CT: No such helper "netbios-ns"
[  796.016329][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  797.056338][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  797.514762][T14878] Dead loop on virtual device ipvlan1, fix it urgently!
[  798.068223][   T30] audit: type=1326 audit(1770645687.291:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14882 comm="syz.2.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f55f9af79 code=0x7ffc0000
[  798.096574][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  798.317533][T14878] syz.3.2523 (14878) used greatest stack depth: 14984 bytes left
[  798.471364][   T30] audit: type=1326 audit(1770645687.511:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14882 comm="syz.2.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f4f55f9af79 code=0x7ffc0000
[  798.501907][   T30] audit: type=1326 audit(1770645687.511:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14882 comm="syz.2.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f55f9af79 code=0x7ffc0000
[  798.602062][   T30] audit: type=1326 audit(1770645687.511:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14882 comm="syz.2.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f55f9af79 code=0x7ffc0000
[  798.696529][   T30] audit: type=1326 audit(1770645687.511:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14882 comm="syz.2.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f4f55f9af79 code=0x7ffc0000
[  798.765792][T14889] xt_CT: No such helper "netbios-ns"
[  798.792324][   T30] audit: type=1326 audit(1770645687.511:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14882 comm="syz.2.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f55f9af79 code=0x7ffc0000
[  798.878017][   T30] audit: type=1326 audit(1770645687.511:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14882 comm="syz.2.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f4f55f9af79 code=0x7ffc0000
[  798.939995][   T30] audit: type=1326 audit(1770645687.511:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14882 comm="syz.2.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4f55f94d97 code=0x7ffc0000
[  799.001142][   T30] audit: type=1326 audit(1770645687.511:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14882 comm="syz.2.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4f55f3c399 code=0x7ffc0000
[  799.052389][   T30] audit: type=1326 audit(1770645687.511:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14882 comm="syz.2.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f55f9af79 code=0x7ffc0000
[  799.105779][   T30] audit: type=1326 audit(1770645687.511:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14882 comm="syz.2.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4f55f9af79 code=0x7ffc0000
[  799.136380][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  799.216747][   T30] audit: type=1326 audit(1770645687.701:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14882 comm="syz.2.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f55f9af79 code=0x7ffc0000
[  799.326414][   T30] audit: type=1326 audit(1770645687.701:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14882 comm="syz.2.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f55f9af79 code=0x7ffc0000
[  800.176318][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  800.291547][T14916] xt_CT: No such helper "netbios-ns"
[  800.530680][T14929] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  800.670926][T14932] bond5: (slave ip6gretap1): making interface the new active one
[  800.725293][T14932] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link
[  800.755163][T14941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  800.831798][T14941] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  801.216486][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  801.943845][T14960] xt_CT: No such helper "netbios-ns"
[  802.256949][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  803.297195][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  803.977089][ T5901] usb 3-1: new high-speed USB device number 102 using dummy_hcd
[  804.146915][ T5901] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  804.192866][ T5901] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  804.217540][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  804.248342][ T5901] usb 3-1: Product: syz
[  804.266088][ T5901] usb 3-1: Manufacturer: syz
[  804.286571][ T5901] usb 3-1: SerialNumber: syz
[  804.336329][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  804.728710][T14998] xt_CT: No such helper "netbios-ns"
[  805.376308][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  805.468057][ T5901] cdc_ncm 3-1:1.0: bind() failure
[  805.540792][ T5901] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  805.553266][ T5901] cdc_ncm 3-1:1.1: bind() failure
[  805.567776][ T5901] usb 3-1: USB disconnect, device number 102
[  805.627093][T15014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2571'.
[  805.646563][T15014] netlink: 'syz.0.2571': attribute type 7 has an invalid length.
[  805.654360][T15014] netlink: 'syz.0.2571': attribute type 8 has an invalid length.
[  805.686434][ T5893] usb 2-1: new high-speed USB device number 104 using dummy_hcd
[  805.747060][T15014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2571'.
[  805.876347][ T5893] usb 2-1: Using ep0 maxpacket: 16
[  805.896544][ T5893] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  805.926435][ T5893] usb 2-1: config 0 has no interfaces?
[  805.934474][ T5893] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  805.954150][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  805.974421][ T5893] usb 2-1: Product: syz
[  805.984552][ T5893] usb 2-1: Manufacturer: syz
[  805.994693][ T5893] usb 2-1: SerialNumber: syz
[  806.004170][ T5893] usb 2-1: config 0 descriptor??
[  806.416323][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  806.513849][T15026] loop4: detected capacity change from 0 to 7
[  806.537904][T15013] buffer_io_error: 25 callbacks suppressed
[  806.537922][T15013] Buffer I/O error on dev loop4, logical block 0, async page read
[  806.600922][T15013] Buffer I/O error on dev loop4, logical block 0, async page read
[  806.633506][T15013] Buffer I/O error on dev loop4, logical block 0, async page read
[  806.659270][T15013] Buffer I/O error on dev loop4, logical block 0, async page read
[  806.691884][T15013] Buffer I/O error on dev loop4, logical block 0, async page read
[  806.726512][T15013] Buffer I/O error on dev loop4, logical block 0, async page read
[  806.768099][T15013] Buffer I/O error on dev loop4, logical block 0, async page read
[  806.797307][T15013] ldm_validate_partition_table(): Disk read failed.
[  806.817427][T15013] Buffer I/O error on dev loop4, logical block 0, async page read
[  806.849661][T15013] Buffer I/O error on dev loop4, logical block 0, async page read
[  806.881858][T15013] Buffer I/O error on dev loop4, logical block 0, async page read
[  806.913676][T15034] netlink: 'syz.0.2580': attribute type 1 has an invalid length.
[  806.915545][T15013] Dev loop4: unable to read RDB block 0
[  806.964244][T15013]  loop4: unable to read partition table
[  807.000441][T15013] loop4: partition table beyond EOD, truncated
[  807.049459][T15036] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  807.059579][T15038] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  807.083794][T15026] ldm_validate_partition_table(): Disk read failed.
[  807.133840][T15026] Dev loop4: unable to read RDB block 0
[  807.165196][T15026]  loop4: unable to read partition table
[  807.181553][T15026] loop4: partition table beyond EOD, truncated
[  807.203342][  T797] usb 2-1: USB disconnect, device number 104
[  807.207214][T15026] loop_reread_partitions: partition scan of loop4 (���������S�j��	���%��`��ր����5) failed (rc=-5)
[  807.338673][T15046] netlink: 'syz.4.2583': attribute type 3 has an invalid length.
[  807.437173][ T5893] usb 3-1: new high-speed USB device number 103 using dummy_hcd
[  807.456304][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  807.636308][ T5893] usb 3-1: Using ep0 maxpacket: 16
[  807.687318][ T5893] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  807.696697][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  807.704734][ T5893] usb 3-1: Product: syz
[  807.753350][ T5893] usb 3-1: Manufacturer: syz
[  807.786288][ T5893] usb 3-1: SerialNumber: syz
[  808.068911][ T5893] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  808.119572][ T5893] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  808.159364][ T5893] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  808.186593][ T5893] usb 3-1: media controller created
[  808.224810][ T5893] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  808.328052][ T5893] zl10353_read_register: readreg error (reg=127, ret==-71)
[  808.460814][ T5893] dvb_usb_gl861 3-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[  808.496317][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  808.536517][ T5893] usb 3-1: USB disconnect, device number 103
[  809.291094][T15070] syz.3.2590 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  809.317898][ T5893] usb 3-1: new full-speed USB device number 104 using dummy_hcd
[  809.496419][ T5893] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4
[  809.536316][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  809.549356][ T5893] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023
[  809.586704][ T5893] usb 3-1: config 0 interface 0 has no altsetting 0
[  809.617154][ T5893] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  809.641814][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  809.672839][ T5893] usb 3-1: Product: syz
[  809.688099][ T5893] usb 3-1: Manufacturer: syz
[  809.701939][ T5893] usb 3-1: SerialNumber: syz
[  809.724257][ T5893] usb 3-1: config 0 descriptor??
[  809.751996][ T5893] usb 3-1: selecting invalid altsetting 0
[  809.860128][ T5829] usb 5-1: new high-speed USB device number 100 using dummy_hcd
[  809.979929][T15068] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled
[  810.007789][  T797] usb 3-1: USB disconnect, device number 104
[  810.096604][ T5829] usb 5-1: config 220 has an invalid interface number: 76 but max is 2
[  810.106954][ T5829] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  810.146346][ T5829] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  810.189340][ T5829] usb 5-1: config 220 has no interface number 2
[  810.212100][ T5829] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  810.311672][ T5829] usb 5-1: config 220 interface 0 has no altsetting 0
[  810.359971][ T5829] usb 5-1: config 220 interface 76 has no altsetting 0
[  810.542993][ T5829] usb 5-1: config 220 interface 1 has no altsetting 0
[  810.567913][ T5829] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  810.576542][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  810.585983][ T5829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  810.604591][ T5829] usb 5-1: Product: syz
[  810.614750][ T5829] usb 5-1: Manufacturer: syz
[  810.624917][ T5829] usb 5-1: SerialNumber: syz
[  810.897594][ T5829] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  811.027587][ T5829] uvcvideo 5-1:220.0: No valid video chain found.
[  811.035700][ T5829] usb 5-1: selecting invalid altsetting 0
[  811.121732][ T5829] usb 5-1: selecting invalid altsetting 0
[  811.150491][ T5829] usbtest 5-1:220.1: probe with driver usbtest failed with error -22
[  811.191621][ T5829] usb 5-1: USB disconnect, device number 100
[  811.616312][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  812.396552][T15110] random: crng reseeded on system resumption
[  812.656627][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  812.953300][T15114] netlink: 'syz.1.2604': attribute type 1 has an invalid length.
[  813.214012][T15114] 8021q: adding VLAN 0 to HW filter on device bond6
[  813.277932][T15116] bond0: (slave dummy0): Releasing backup interface
[  813.352709][T15116] bond6: (slave dummy0): making interface the new active one
[  813.391382][T15116] bond6: (slave dummy0): Enslaving as an active interface with an up link
[  813.696302][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  813.942863][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  813.949782][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  814.087704][T15117] bond6 (unregistering): (slave dummy0): Releasing active interface
[  814.125816][T15117] bond6 (unregistering): Released all slaves
[  814.448998][T15127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  814.488192][T15127] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  814.736341][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  815.085922][T15138] xt_TCPMSS: Only works on TCP SYN packets
[  815.189310][ T5894] usb 2-1: new high-speed USB device number 105 using dummy_hcd
[  815.378525][ T5894] usb 2-1: Using ep0 maxpacket: 8
[  815.394725][ T5894] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  815.451438][ T5894] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  815.482273][ T5894] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[  815.524868][ T5894] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[  815.570789][ T5894] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  815.671694][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  815.687881][ T5894] hub 2-1:1.0: bad descriptor, ignoring hub
[  815.706365][ T5894] hub 2-1:1.0: probe with driver hub failed with error -5
[  815.726946][ T5894] cdc_wdm 2-1:1.0: skipping garbage
[  815.732198][ T5894] cdc_wdm 2-1:1.0: skipping garbage
[  815.776316][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  815.788545][ T5894] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  815.794588][ T5894] cdc_wdm 2-1:1.0: Unknown control protocol
[  816.816337][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  817.856292][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  818.896308][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  819.923091][ T5829] usb 2-1: USB disconnect, device number 105
[  819.936316][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  820.100587][T15219] netlink: 'syz.4.2638': attribute type 1 has an invalid length.
[  820.279925][T15219] 8021q: adding VLAN 0 to HW filter on device bond6
[  820.382097][T15221] bond6: (slave dummy0): making interface the new active one
[  820.418831][T15221] bond6: (slave dummy0): Enslaving as an active interface with an up link
[  820.976637][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  821.119908][T15222] bond6 (unregistering): (slave dummy0): Releasing active interface
[  821.149026][T15222] bond6 (unregistering): Released all slaves
[  821.931411][ T5894] usb 3-1: new high-speed USB device number 105 using dummy_hcd
[  822.116748][ T5894] usb 3-1: Using ep0 maxpacket: 16
[  822.155166][ T5894] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  822.197269][T15262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2653'.
[  822.207127][ T5894] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 2
[  822.227073][ T5894] usb 3-1: string descriptor 0 read error: -71
[  822.241535][ T5894] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  822.281648][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  822.327714][ T5894] usb 3-1: can't set config #1, error -71
[  822.353978][ T5894] usb 3-1: USB disconnect, device number 105
[  822.457988][T15270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2656'.
[  823.435853][T15299] syz_tun: entered allmulticast mode
[  823.536987][T15299] dvmrp1: entered allmulticast mode
[  823.577743][T15297] syz_tun: left allmulticast mode
[  823.764761][T15307] random: crng reseeded on system resumption
[  826.856149][T15348] binder: 15346:15348 ioctl c0487c04 200000000240 returned -22
[  827.796326][ T5829] usb 2-1: new full-speed USB device number 106 using dummy_hcd
[  827.849531][T15365] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  827.892684][T15365] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  827.971047][ T5829] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4
[  827.998880][T15367] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  828.006283][ T5829] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023
[  828.038241][ T5829] usb 2-1: config 0 interface 0 has no altsetting 0
[  828.051486][T15367] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  828.064750][ T5829] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  828.084895][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  828.144659][ T5829] usb 2-1: Product: syz
[  828.176680][ T5829] usb 2-1: Manufacturer: syz
[  828.191836][ T5829] usb 2-1: SerialNumber: syz
[  828.208581][ T5829] usb 2-1: config 0 descriptor??
[  828.230390][ T5829] usb 2-1: selecting invalid altsetting 0
[  828.463335][T15356] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled
[  828.501187][  T797] usb 2-1: USB disconnect, device number 106
[  828.572730][T15377] udevd[15377]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  828.684843][T15384] bridge0: the hash_elasticity option has been deprecated and is always 16
[  828.711162][T15384] bridge0: port 3(syz_tun) entered disabled state
[  828.720535][T15384] bridge0: port 2(bridge_slave_1) entered disabled state
[  828.727857][T15384] bridge0: port 1(bridge_slave_0) entered disabled state
[  829.478403][T15424] xt_TCPMSS: Only works on TCP SYN packets
[  829.533366][ T5894] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[  829.558297][ T5894] hid-generic 0000:0000:0000.0023: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  829.742549][T15433] fido_id[15433]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  829.885918][T15445] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  829.918483][T15445] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  831.931049][T15483] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  831.964627][T15483] bond0: (slave ipvlan3): The slave device specified does not support setting the MAC address
[  831.989994][T15483] bond0: (slave ipvlan3): Error -95 calling set_mac_address
[  832.178535][T15491] xt_TCPMSS: Only works on TCP SYN packets
[  832.309431][T15493] batman_adv: batadv0: Removing interface: batadv_slave_0
[  832.729593][T15503] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[  832.736189][T15503] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  832.786428][T15503] vhci_hcd vhci_hcd.0: Device attached
[  832.812069][T15507] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(5)
[  832.818845][T15507] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  832.850929][T15503] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(8)
[  832.857870][T15503] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  832.886611][T15507] vhci_hcd vhci_hcd.0: Device attached
[  832.901367][T15503] vhci_hcd vhci_hcd.0: Device attached
[  832.907613][T15513] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  832.934208][T15513] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(13)
[  832.940892][T15513] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  832.983963][T15503] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  833.018843][T15503] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(16)
[  833.025519][T15503] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  833.070988][T15507] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(19)
[  833.077676][T15507] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  833.085565][   T10] usb 33-1: new low-speed USB device number 2 using vhci_hcd
[  833.103383][T15513] vhci_hcd vhci_hcd.0: Device attached
[  833.105120][T15503] vhci_hcd vhci_hcd.0: Device attached
[  833.165980][T15507] vhci_hcd vhci_hcd.0: Device attached
[  833.198900][T15510] vhci_hcd: connection closed
[  833.199371][T10619] vhci_hcd vhci_hcd.0: stop threads
[  833.210471][T15515] vhci_hcd: connection closed
[  833.211550][T15508] vhci_hcd: connection closed
[  833.217882][T15505] vhci_hcd: connection reset by peer
[  833.226053][T15519] vhci_hcd: connection closed
[  833.242257][T15524] vhci_hcd: connection closed
[  833.247871][T10619] vhci_hcd vhci_hcd.0: release socket
[  833.279365][T10619] vhci_hcd vhci_hcd.0: disconnect device
[  833.316938][T10619] vhci_hcd vhci_hcd.0: stop threads
[  833.332499][T10619] vhci_hcd vhci_hcd.0: release socket
[  833.352915][T10619] vhci_hcd vhci_hcd.0: disconnect device
[  833.381224][T10619] vhci_hcd vhci_hcd.0: stop threads
[  833.396891][T10619] vhci_hcd vhci_hcd.0: release socket
[  833.417392][T10619] vhci_hcd vhci_hcd.0: disconnect device
[  833.437970][T10619] vhci_hcd vhci_hcd.0: stop threads
[  833.443305][T10619] vhci_hcd vhci_hcd.0: release socket
[  833.476927][T10619] vhci_hcd vhci_hcd.0: disconnect device
[  833.497000][T10619] vhci_hcd vhci_hcd.0: stop threads
[  833.512649][T10619] vhci_hcd vhci_hcd.0: release socket
[  833.532953][T10619] vhci_hcd vhci_hcd.0: disconnect device
[  833.553432][T10619] vhci_hcd vhci_hcd.0: stop threads
[  833.567229][T10619] vhci_hcd vhci_hcd.0: release socket
[  833.587258][T10619] vhci_hcd vhci_hcd.0: disconnect device
[  833.905644][T15532] netlink: 'syz.0.2752': attribute type 4 has an invalid length.
[  835.536798][ T5829] usb 5-1: new full-speed USB device number 101 using dummy_hcd
[  835.718628][ T5829] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4
[  835.756485][ T5829] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023
[  835.798113][ T5829] usb 5-1: config 0 interface 0 has no altsetting 0
[  835.856165][ T5829] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  835.865619][ T5829] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  835.896298][ T5829] usb 5-1: Product: syz
[  835.900542][ T5829] usb 5-1: Manufacturer: syz
[  835.905179][ T5829] usb 5-1: SerialNumber: syz
[  835.951831][ T5829] usb 5-1: config 0 descriptor??
[  836.018329][ T5829] usb 5-1: selecting invalid altsetting 0
[  836.231212][ T5829] usb 5-1: USB disconnect, device number 101
[  837.268505][T15560] netlink: 'syz.0.2764': attribute type 4 has an invalid length.
[  838.089413][T15575] netlink: 'syz.1.2771': attribute type 1 has an invalid length.
[  838.246790][   T10] vhci_hcd vhci_hcd.0: vhci_device speed not set
[  838.314488][T15578] bond6: (slave ip6gretap2): Enslaving as a backup interface with an up link
[  839.508848][T15595] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  839.580810][T15595] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  839.983033][T15600] netlink: 'syz.4.2777': attribute type 4 has an invalid length.
[  841.368522][T15629] fuse: Bad value for 'fd'
[  841.637583][T15633] netlink: 'syz.0.2791': attribute type 4 has an invalid length.
[  841.891309][T15635] Dead loop on virtual device ipvlan1, fix it urgently!
[  842.407328][T15517] usb 2-1: new full-speed USB device number 107 using dummy_hcd
[  842.587939][T15517] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  842.635051][T15517] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  842.695042][T15517] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  842.730422][T15517] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  842.777374][T15517] usb 2-1: config 0 descriptor??
[  842.800495][T15517] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  842.829483][T15517] dvb-usb: bulk message failed: -22 (3/0)
[  842.878984][T15635] syz.3.2792 (15635) used greatest stack depth: 14312 bytes left
[  842.893119][T15517] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  842.912865][T15517] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  842.931532][T15517] usb 2-1: media controller created
[  842.945023][T15517] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  842.968971][T15517] dvb-usb: bulk message failed: -22 (6/0)
[  842.985347][T15517] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  843.016571][T15517] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input46
[  843.029139][T15646] dvb-usb: bulk message failed: -22 (2/0)
[  843.039214][T15646] dvb-usb: bulk message failed: -22 (4/0)
[  843.084566][T15517] dvb-usb: schedule remote query interval to 150 msecs.
[  843.103302][T15517] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  843.131148][T15517] usb 2-1: USB disconnect, device number 107
[  843.199540][T15517] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  843.792071][T15677] program syz.4.2809 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  843.992440][T15686] sch_tbf: burst 32855 is lower than device lo mtu (11337746) !
[  845.539495][T15721] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  847.337309][T15761] 
[  847.339723][T15761] ======================================================
[  847.346858][T15761] WARNING: possible circular locking dependency detected
[  847.353923][T15761] syzkaller #0 Tainted: G             L     
[  847.359933][T15761] ------------------------------------------------------
[  847.366981][T15761] syz.1.2840/15761 is trying to acquire lock:
[  847.373077][T15761] ffff88802cbf2fd8 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x100/0xc50
[  847.384623][T15761] 
[  847.384623][T15761] but task is already holding lock:
[  847.392035][T15761] ffff8880283c0ee0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x255/0x560
[  847.401069][T15761] 
[  847.401069][T15761] which lock already depends on the new lock.
[  847.401069][T15761] 
[  847.411510][T15761] 
[  847.411510][T15761] the existing dependency chain (in reverse order) is:
[  847.420557][T15761] 
[  847.420557][T15761] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}:
[  847.428346][T15761]        lock_sock_nested+0x48/0x100
[  847.433687][T15761]        smc_listen_out+0x109/0x3e0
[  847.438937][T15761]        smc_listen_work+0x813/0x13f0
[  847.444368][T15761]        process_scheduled_works+0xaec/0x17a0
[  847.450490][T15761]        worker_thread+0xda6/0x1360
[  847.455738][T15761]        kthread+0x726/0x8b0
[  847.460370][T15761]        ret_from_fork+0x51b/0xa40
[  847.465513][T15761]        ret_from_fork_asm+0x1a/0x30
[  847.470841][T15761] 
[  847.470841][T15761] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}:
[  847.481050][T15761]        __lock_acquire+0x15a5/0x2cf0
[  847.486469][T15761]        lock_acquire+0x106/0x330
[  847.491538][T15761]        __flush_work+0x700/0xc50
[  847.496600][T15761]        __cancel_work_sync+0xbe/0x110
[  847.502109][T15761]        smc_clcsock_release+0x60/0xf0
[  847.507610][T15761]        __smc_release+0x66b/0x7e0
[  847.512767][T15761]        smc_close_non_accepted+0xd5/0x1f0
[  847.518612][T15761]        smc_close_active+0xb67/0xf10
[  847.524043][T15761]        __smc_release+0x8d/0x7e0
[  847.529103][T15761]        smc_release+0x2ce/0x560
[  847.534075][T15761]        sock_close+0xc3/0x240
[  847.538875][T15761]        __fput+0x44f/0xa70
[  847.543420][T15761]        task_work_run+0x1d9/0x270
[  847.548590][T15761]        exit_to_user_mode_loop+0xed/0x480
[  847.554451][T15761]        do_syscall_64+0x2b7/0xf80
[  847.559608][T15761]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  847.566068][T15761] 
[  847.566068][T15761] other info that might help us debug this:
[  847.566068][T15761] 
[  847.576415][T15761]  Possible unsafe locking scenario:
[  847.576415][T15761] 
[  847.583900][T15761]        CPU0                    CPU1
[  847.589299][T15761]        ----                    ----
[  847.594699][T15761]   lock(sk_lock-AF_SMC/1);
[  847.599338][T15761]                                lock((work_completion)(&new_smc->smc_listen_work));
[  847.608830][T15761]                                lock(sk_lock-AF_SMC/1);
[  847.615901][T15761]   lock((work_completion)(&new_smc->smc_listen_work));
[  847.622878][T15761] 
[  847.622878][T15761]  *** DEADLOCK ***
[  847.622878][T15761] 
[  847.631051][T15761] 3 locks held by syz.1.2840/15761:
[  847.636305][T15761]  #0: ffff888059ad8208 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240
[  847.646550][T15761]  #1: ffff8880283c0ee0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x255/0x560
[  847.656031][T15761]  #2: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: __flush_work+0x100/0xc50
[  847.665306][T15761] 
[  847.665306][T15761] stack backtrace:
[  847.671223][T15761] CPU: 0 UID: 0 PID: 15761 Comm: syz.1.2840 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  847.671249][T15761] Tainted: [L]=SOFTLOCKUP
[  847.671256][T15761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  847.671267][T15761] Call Trace:
[  847.671274][T15761]  <TASK>
[  847.671281][T15761]  dump_stack_lvl+0xe8/0x150
[  847.671307][T15761]  print_circular_bug+0x2e1/0x300
[  847.671327][T15761]  check_noncircular+0x12e/0x150
[  847.671346][T15761]  __lock_acquire+0x15a5/0x2cf0
[  847.671372][T15761]  ? do_raw_spin_lock+0x12b/0x2f0
[  847.671392][T15761]  ? __pfx___schedule+0x10/0x10
[  847.671408][T15761]  ? irqentry_exit+0x59c/0x620
[  847.671427][T15761]  ? __flush_work+0x100/0xc50
[  847.671443][T15761]  lock_acquire+0x106/0x330
[  847.671465][T15761]  ? __flush_work+0x100/0xc50
[  847.671483][T15761]  ? preempt_schedule_thunk+0x16/0x30
[  847.671509][T15761]  ? __flush_work+0x100/0xc50
[  847.671525][T15761]  __flush_work+0x700/0xc50
[  847.671541][T15761]  ? __flush_work+0x100/0xc50
[  847.671557][T15761]  ? __flush_work+0x100/0xc50
[  847.671574][T15761]  ? __pfx___flush_work+0x10/0x10
[  847.671591][T15761]  ? __pfx_wq_barrier_func+0x10/0x10
[  847.671632][T15761]  ? __cancel_work_sync+0x5c/0x110
[  847.671650][T15761]  __cancel_work_sync+0xbe/0x110
[  847.671668][T15761]  smc_clcsock_release+0x60/0xf0
[  847.671690][T15761]  __smc_release+0x66b/0x7e0
[  847.671705][T15761]  ? __local_bh_enable_ip+0xd0/0x130
[  847.671721][T15761]  smc_close_non_accepted+0xd5/0x1f0
[  847.671739][T15761]  smc_close_active+0xb67/0xf10
[  847.671759][T15761]  ? __pfx_sock_def_readable+0x10/0x10
[  847.671778][T15761]  __smc_release+0x8d/0x7e0
[  847.671792][T15761]  ? __local_bh_enable_ip+0xd0/0x130
[  847.671808][T15761]  smc_release+0x2ce/0x560
[  847.671824][T15761]  sock_close+0xc3/0x240
[  847.671839][T15761]  ? __pfx_sock_close+0x10/0x10
[  847.671853][T15761]  __fput+0x44f/0xa70
[  847.671878][T15761]  task_work_run+0x1d9/0x270
[  847.671899][T15761]  ? __pfx_task_work_run+0x10/0x10
[  847.671923][T15761]  exit_to_user_mode_loop+0xed/0x480
[  847.671946][T15761]  ? rcu_is_watching+0x15/0xb0
[  847.671963][T15761]  do_syscall_64+0x2b7/0xf80
[  847.671981][T15761]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  847.671997][T15761]  ? trace_irq_disable+0x37/0x100
[  847.672013][T15761]  ? clear_bhb_loop+0x60/0xb0
[  847.672031][T15761]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  847.672047][T15761] RIP: 0033:0x7f547f59af79
[  847.672063][T15761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  847.672078][T15761] RSP: 002b:00007f547f93fba8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  847.672096][T15761] RAX: 0000000000000000 RBX: 00007f547f93fc90 RCX: 00007f547f59af79
[  847.672108][T15761] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  847.672118][T15761] RBP: 00000000000ced90 R08: 0000000000000001 R09: 0000000000000000
[  847.672128][T15761] R10: 0000001b2ff20000 R11: 0000000000000246 R12: 00007f547f93fcd0
[  847.672140][T15761] R13: 00007f547f815fac R14: 00000000000cedd4 R15: 00007f547f815fa0
[  847.672158][T15761]  </TASK>