last executing test programs:

2m47.99518774s ago: executing program 4 (id=4626):
r0 = socket(0x2, 0x3, 0xff)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil)
getsockopt(r0, 0xff, 0x3af, 0x0, 0x0)
r1 = syz_open_dev$video(&(0x7f0000000000), 0x9, 0x141001)
ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f00000002c0))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="0100000000000002000005000000180001801400020073797a5f74756e000000000000000000080005000a0f00005c0003800450010054000380"], 0x90}}, 0x4000000)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r3, 0x300, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x44}}, 0x8000)
r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, &(0x7f0000000140)=@attr_pmu_init)

2m47.852296424s ago: executing program 4 (id=4628):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r0, &(0x7f0000001040)={0xfc, {"a2e3ad09ed0d09f91b5e071887f70e09d038e7ff7fc6e5539b0d670a8b089b3f363563030890e0879b0af8c6e70a9b334a959b669a9b2f0a0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d073b5d0acd3b78130daa61d8e8043f00005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669114e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813491ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eb4581f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab9640071550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c513a9177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f411254c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486229e5b2e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df7227dfdb0d2b9e935c5af3cf474bed79dfc24ab0f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78c8fa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000026347ee800", 0x1000}}, 0x1006)

2m47.598430402s ago: executing program 4 (id=4630):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=@newtfilter={0x48, 0x2c, 0xd3f, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0x183e664d62636959}, {0x4888}, {0x7, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @private1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)

2m47.41768643s ago: executing program 4 (id=4631):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r0, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffe, 0x2, 0x2, @scatter={0x0, 0x40000, 0x0}, &(0x7f00000014c0)='\x00\x00', 0x0, 0x800004, 0x10030, 0x1, 0x0})
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000004c0)={[0x8aba, 0x100d, 0x4, 0x804, 0x7ffd, 0xf, 0x120000, 0x9, 0x1, 0x5, 0x8000000000000000, 0x1, 0x1, 0xfe, 0x6, 0x1], 0x4000, 0x141200})
ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000100)=@x86={0x6, 0x2, 0x10, 0x0, 0xb, 0x7, 0x2, 0x9, 0x1, 0x51, 0x0, 0x8, 0x0, 0x4, 0x10, 0xff, 0xb, 0x2, 0x7, '\x00', 0x6, 0x4080000000000005})
ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000000040)=0x3)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00')

2m46.810625042s ago: executing program 4 (id=4634):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)={0x3c, r1, 0x801, 0x0, 0x3, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}]}, 0x3c}}, 0x40000)

2m46.523313697s ago: executing program 4 (id=4635):
r0 = syz_open_dev$usbfs(0x0, 0x1ff, 0x402)
r1 = dup(r0)
ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x2, 0x41, 0x0, 0x5, 0x0})

2m46.205690631s ago: executing program 32 (id=4635):
r0 = syz_open_dev$usbfs(0x0, 0x1ff, 0x402)
r1 = dup(r0)
ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x2, 0x41, 0x0, 0x5, 0x0})

10.961197378s ago: executing program 5 (id=5470):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
fchdir(r2)
mknod$loop(&(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, 0x1)
r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
getdents64(r4, &(0x7f0000001f80)=""/4102, 0x1006)
getdents(r3, &(0x7f0000000100)=""/155, 0x9b)
rename(&(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4)
sendmmsg$inet6(r0, &(0x7f00000009c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xffffffff, @loopback}, 0x1c, 0x0}}], 0x1, 0x40)
recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/11, 0xb}, 0x3}], 0x1, 0x12023, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x33, 0x7f, 0x20002e2e, 0x10040, 0xe, 0x3, 0x2000000, 0x0, 0x3000000}})
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00'})

10.537414132s ago: executing program 5 (id=5474):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
iopl(0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
r3 = socket$xdp(0x2c, 0x3, 0x0)
bind$xdp(r3, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14)
setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14)
quotactl_fd$Q_SYNC(r3, 0xffffffff80000100, 0x0, 0x0)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x7})
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10)
socket(0x840000000002, 0x3, 0xff)
lremovexattr(0x0, &(0x7f0000000000)=@random={'trusted.', '}{\xac){@]\\\x00'})
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000002600010316bd7000fcffbfff01"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x8c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x110}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001000000000000000000056c000a50000000090a010400000000000000000a0000040900010073797a3100000000080005400000000208000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274140000001100010000000000000000000100000a"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
syz_emit_ethernet(0x1a0, &(0x7f0000000380)={@local, @local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "a79798", 0x16a, 0x6, 0x0, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, {[@fragment={0xff, 0x0, 0x6, 0x0, 0x0, 0x1f, 0x65}, @fragment={0x3a, 0x0, 0x2, 0x0, 0x0, 0x8, 0x66}, @hopopts={0x5c, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x4}]}, @hopopts={0x33, 0x14, '\x00', [@jumbo={0xc2, 0x4, 0xffffffff}, @generic={0x1, 0x9b, "3941b6b496fe5ecd7dd535b8f9f4d9fbab2cb49a3ff5b42eacb0584da26658e6658c1508bd4fce390a8bf72a44c678584c44ea539aeeeba84f7b3bec0ac596322fbcd884701b40380e21a0ca2c49d2a440bd59a63d558c756278e1c1e2ac714e9f6641d1c3518d27fe9cecec95cd36e645ec8035248efb18eeaf2e57e0f37d72d3d4cdbfc7e7241e64a5e7164c7b814a12497de29c804fde057d24"}]}, @srh={0xff, 0x2, 0x4, 0x1, 0x2, 0x30, 0x1, [@dev={0xfe, 0x80, '\x00', 0x13}]}, @routing={0x32, 0x8, 0x0, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @ipv4={'\x00', '\xff\xff', @broadcast}, @empty, @private1={0xfc, 0x1, '\x00', 0x1}]}], @payload_mcast={{{{{{0x32, 0x0, 0x1, 0x1, 0x0, 0xb, 0x2, 0x2, 0x8, 0x0, 0x2, 0x9, 0x5, 0x1, 0xe, 0x7, 0x1ff, 0x4e24, 0x4e23}, 0x2, 0x2}, 0x1, 0x1}, 0x1}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0)

6.926808536s ago: executing program 1 (id=5491):
syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="31010000dccd5e08cb060300000000ea22010902240001000064000904340102d469e70009058acf"], 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x78, &(0x7f0000000540)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x2, 0x1, 0x3, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, 'SS4%e'}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x999, 0x101, 0x0, 0x1}, {0x6, 0x24, 0x1a, 0x1}, [@call_mgmt={0x5, 0x24, 0x1, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x210, 0xff, 0x9, 0x80}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0xc9, 0x9, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0xd44bd966dde2942e, 0x4, 0x8, 0x7}}}}}}}]}}, &(0x7f00000009c0)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x200, 0x7f, 0x3, 0x8, 0x40, 0x15}, 0x3d, &(0x7f00000005c0)={0x5, 0xf, 0x3d, 0x3, [@ssp_cap={0x24, 0x10, 0xa, 0xc, 0x6, 0xb, 0xff00, 0x5cb, [0x3fff, 0xc0, 0xc0cf, 0xc0, 0x578ff3d3004fbfb3, 0x0]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x9, 0x9, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0xfc, 0x6}]}, 0x8, [{0x81, &(0x7f0000000740)=@string={0x81, 0x3, "a907748ad544d2f86cc26ae0be10f046f17f246dc3b3cc9b9c4f27b77519339783ebbe33b7802adb7ca9bfb6b1ca4d420085c496727d6e4bda328f3ee9afc551e598de2a6e60bc932fe2dd73e72e8c6eb52f01484739ad7ba94d5525d98ac732e9b29fb0bdfc428d69b4d4e147939469c9341c09e74fc42336d1eeaadc6c8a"}}, {0xa3, &(0x7f0000000800)=@string={0xa3, 0x3, "39df282df25209586ee73f640ddcaa987f1ada5c7dc34fa9671052db0e31cce2c0ca3fa150e24e0ef9272159375f305fb44bfe53816a3d185888126829cfb734f0711f57126ca0c15b1422c67bf235a8c4cf407190a720a0b5873f26d4c7e94e993e660ddd78b96a0f9731973f3378aa539d3b771aa9fedb9af21a0599329c2cb7f1036dae5c02fc0dd571f533d2911428d7c72baebcc4c112bca830210a6c6135"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x41f}}, {0x4b, &(0x7f0000000680)=@string={0x4b, 0x3, "e9b886ebb711244236b22a84da6e69efffea7ec1de9ce4f8647faabf7ec7384cfddde2bfc20f1907c727dc9007ea9a9b10b77c25635052982239d4ac601dac10a41f7c476ac98c60c6"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x3e4f}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x26, &(0x7f0000000940)=@string={0x26, 0x3, "578e58ca6ce704ff0d6b4cbea03b796c84cde6b8ae7662958ba904f6b9de9617242d8440"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0xc01}}]})
syz_usb_control_io(r0, 0x0, 0x0)
ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=<r2=>0x0)
r3 = syz_open_procfs(r2, &(0x7f00000001c0)='net/fib_trie\x00')
write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x1, 0x80000001}}, 0x30)
write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="320000000355bea1590dec51a200000000000000000000002f6465762f76686f737400000000000000001d00000000000000"], 0x32)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r4, 0xc0096616, &(0x7f0000000380)={0x2, [0x0, 0x0]})
r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)=@generic={&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r3}, 0x14)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[<r6=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, r6, <r7=>0x0})
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_int(r8, 0x0, 0x32, 0x0, &(0x7f0000000100))
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xaf86be13, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r10 = openat$cgroup_int(r9, &(0x7f0000000440)='pids.max\x00', 0x2, 0x0)
write$cgroup_subtree(r10, &(0x7f0000000040)=ANY=[@ANYBLOB='-', @ANYRESOCT, @ANYRESDEC=r9], 0x27)
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r4, 0xc01864b0, &(0x7f0000000080)={r6, r7, 0x1, 0x0, 0xfffffffffffffffd})
ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000200)={&(0x7f0000000180)=[0x0], 0x1, 0x0, <r11=>0x0})
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r3, 0xc01864b0, &(0x7f0000000280)={r6, r11, 0x4, 0x101, 0x8})
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/148, 0x94)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40605414, 0x0)

6.851561621s ago: executing program 5 (id=5492):
r0 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000002c0)={0x6f479580, 0x0, 0x1002, 0xffffffff}, 0x10)
write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f000000000000000000000100", 0x1c)

5.573301812s ago: executing program 5 (id=5496):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x308)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
fsopen(&(0x7f0000000040)='sysfs\x00', 0x1)
r2 = socket$netlink(0x10, 0x3, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, 0x0, 0x8000000000000003, {}, 0x1}, 0x18)
r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r4, 0xc0145b0d, &(0x7f0000000040))
syz_mount_image$fuse(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES16], 0x54}}, 0x0)

4.387804652s ago: executing program 1 (id=5505):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder1\x00', 0xc04, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0})
dup3(r1, r0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x220000, 0xc, 0x0, 0x1, 0xfffffffe})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x800000000000353, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xb, 0x4000050, r1, 0xddf6d000)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff)
r5 = open(&(0x7f0000000780)='./bus\x00', 0x400141042, 0x0)
r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f00000000c0)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000040)={@host})
r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000100)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000140)={@host})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x4, 0xabc, 0x2449, 0x0, 0x0, 0x4, 0x2482})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f0000000080)={{@hyper, 0x10400000}, @hyper, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1})
ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r6, 0x7a5, &(0x7f0000000140)={{@host}, 0x1})
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r5, 0x0)

4.183441292s ago: executing program 2 (id=5509):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(r2)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x5, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x12, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x43100})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202})
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0xeeee0000, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x2e, 0x80}, {0x5000, 0xeeee6001, 0x3, 0x0, 0x42, 0x5, 0x7d, 0x6, 0x4, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0x9, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x9}, {0x1, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0x80a0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0xeeefa000, 0x3000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0xf, 0x1, 0x7}, {0x6000, 0x3000, 0x4, 0x5, 0x7, 0x5, 0x6, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x5, 0xc, 0xb0, 0x9}, {0xeeef0000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x0, 0x12024, 0x2, 0x0, 0x3000, [0x6800000000000000, 0x4, 0x3, 0x8]})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
fcntl$setpipe(r8, 0x407, 0xd25)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r3, 0x8008ae9d, &(0x7f0000000480))
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r9 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r9, &(0x7f00000004c0)="baf4d747dee9c0f0d5e518348924cdce", 0x10, 0x4c051, &(0x7f0000000240)={0x11, 0x7, r7, 0x1, 0xd8, 0x6, @local}, 0x14)
r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="73bf0f9d71f449a8b9442295b7568be48e79e096838aaa388e4f023dcb05c18f089cf2e196f381e9e5c15b8066dffacabffbb1967aea440f495d1adafe29cb7dadc8d02a77f72369c6330ada6cff9370db95714c43ceff84fca757f9afa9f57f22061c84504d0c54250e45a0b64ce50a634ebc7cbad4c7be16d304fe6c4c089a965c6920c4e0af6aec4fd8e44303d5690f79c03a586e3b51053bcabee6fff3b85a933d63b9feae82395a8ff0a2", @ANYRES16=r10, @ANYBLOB="0100000000000000000001000000400008803c00008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff1400040002004e20ac1414aa00000000000000001400020077673100"/98], 0x68}}, 0x40)

3.717800355s ago: executing program 3 (id=5511):
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0xfffffff9, @loopback, 0x4}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x4)
writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a117436c37900234e000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100050c100000000000224e0000", 0x58}], 0x1)

3.456805372s ago: executing program 2 (id=5514):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c0d5}, 0x0)

3.274860095s ago: executing program 2 (id=5516):
r0 = syz_open_dev$vim2m(&(0x7f0000001580), 0x57, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x26, 0x1, 0x0, "3a8e2ba75088c20500ca55e21f0000230000000000000000ff0000c000", 0x41414770})

3.151534669s ago: executing program 2 (id=5518):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
rename(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000001200000700ff02000000000000000000000000000100000000000000000000000000002c"], 0xfdef)

3.030763059s ago: executing program 0 (id=5519):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x40, 0x0, 0xff, 0xffffffff}, {0x5, 0xfe, 0x9}]})
timer_settime(0x0, 0x0, 0x0, 0x0)
unshare(0x40000000)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = inotify_init1(0x800)
inotify_add_watch(r1, &(0x7f0000000400)='.\x00', 0xa4000829)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000440)={0x28, 0x0, 0x2710}, 0x10)
listen(r2, 0x7ff)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r5, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4)
getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000140), &(0x7f0000000180)=0x4)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="23a83b008b4ba021c19651a7ad868793a0daf558d7e9f1b96148b97ee97eedb6f52e703af3f6aa6a3df6e85ef71d76201a52472fc20dcd07f19b6728af36f8"], 0x43)
sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
read(r1, &(0x7f0000000100)=""/208, 0xd0)
shutdown(r0, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000080)={0x0, 0xfc000000, 0x0, 0x8}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={<r8=>0x0, 0x84, &(0x7f0000000480)=[@in={0x2, 0x6e24, @remote}, @in6={0xa, 0x4e20, 0x3196, @dev={0xfe, 0x80, '\x00', 0x16}, 0x9}, @in={0x2, 0x4e23, @private=0xa010102}, @in={0x2, 0x4e21, @private=0xa010100}, @in6={0xa, 0x4e23, 0x2, @private2, 0x1}, @in6={0xa, 0x4e20, 0x800ad, @loopback, 0x4}]}, &(0x7f0000000240)=0xc)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000040)={r8, 0x72, 0x20, 0x6, 0x7}, &(0x7f0000000080)=0x18)
openat$misdntimer(0xffffff9c, 0x0, 0x40040, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, 0x0)

2.832190277s ago: executing program 3 (id=5520):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x3b, 0xa, 0x0, "05060000000006a2fd000000000000000000c000", 0x38415262})

2.747709568s ago: executing program 2 (id=5521):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES16], 0x54}}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2.597775293s ago: executing program 2 (id=5522):
unshare(0x26020480)
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x2)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000100)=[<r2=>0x0], 0x1})
sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001580)={&(0x7f00000014c0)=ANY=[@ANYBLOB="787336433db722549419d8f1a6c9fa8148f13deb24b0241132391ea6a9c60272c9", @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdbdf2564000000080001005e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
r3 = syz_io_uring_setup(0x2004aa, &(0x7f0000000380)={0x0, 0xbbcd, 0x10100, 0x10000000, 0x213b}, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000200)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8126}})
io_uring_enter(r3, 0x38c5, 0x2000000, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000300)=[<r7=>0x0], &(0x7f0000000140), 0x1, r6})
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000280)={0x401, 0x1, &(0x7f0000000440)=[r6], &(0x7f0000000600)=[0x2], &(0x7f0000000040)=[r7, r7], &(0x7f0000000580)})
r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0)
write$vga_arbiter(r8, &(0x7f00000000c0)=ANY=[@ANYBLOB='lock io'], 0xc)
write$vga_arbiter(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="756e6c6f636f206d656dde"], 0xb)
syz_emit_ethernet(0xae, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6012000800783afffe8000000000000000000000000000bbff02000000000000000000000000000186009078000000000000000000000000050aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af18030001fee9ff010ef50000000000000101fe906d26efe3d821d436348c20dff549a484e3dcb8e1e36e57992a0960d95686697e7b18ffa762f84d713035a4edf34c2f71f8d4324415cf72ff7c583237ff26eb8278cc29b3084c295e695cdb5b8382299770b0d469bcfbce7d5af783dadfd70d96b6227acd26bf34c1a8c32bbfdef9e61ee28f0531f7d6936dcae9035184368531d520de3ea907af285d71a918da8fa3356420bbe55846b3656d2c8f6f3cd7d15f09114ddb0096c6327d39"], 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000e80)=ANY=[@ANYBLOB="120100006fb68440e11d02c1087d0102030109021b000100000000090400000143da9100090504"], 0x0)
r9 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01)
ioctl$EVIOCSREP(r9, 0x40084503, &(0x7f0000000140)=[0x2, 0x9])
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000280)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000580)="02042700ea0e0000000000001eafbcf706e105000000000000001104ee1606d4b8bf4a828bda305775c43824cee81a0200", 0x31}, {&(0x7f00000025c0)="12b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f58551c3091cb88d3b2c6715134b08707e0f6d9e181e326bcac029c1252853b6d72d662462d897c6fa9ee30731", 0x62}, {&(0x7f0000000080)="088d85d1f47bac77277a2c932b326f8a3164ae439862807a1589836c736d2341f7", 0x21}, {&(0x7f0000000240)="df3b46a1330000000000000000000000000000f1", 0x14}, {&(0x7f00000005c0)="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", 0xe77}], 0x5}, 0x40000)
add_key$user(&(0x7f0000000400), &(0x7f0000000480)={'syz', 0x3}, &(0x7f00000004c0)="4778e3dc382e895e5e9b53e7bd727b9d1f3efd0a8b31606bab2fe4def5697a7a6634471f4629f0437fbc", 0x2a, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e22, 0xf548, @empty, 0x81}}, [0x8, 0x8, 0x6, 0x4, 0x7, 0x5e, 0x3dfe, 0x8, 0x5, 0x3, 0x40, 0x0, 0x0, 0x101, 0x6]}, &(0x7f0000000040)=0xfc)

2.547286316s ago: executing program 1 (id=5523):
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000100)={0x9, 0xfff, {}, {0xee00}, 0x50, 0x8})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={<r0=>0x0}, &(0x7f00000001c0)=0xc)
r1 = syz_open_procfs(r0, &(0x7f0000000140)='limits\x00')
writev(r1, &(0x7f0000000200)=[{&(0x7f0000000000)='\v0', 0x2}], 0x1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0)
add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000000)="100c0681000000ba8b0ad775b31b", 0xe, 0xfffffffffffffffc)
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"})
r6 = syz_open_pts(r5, 0x141601)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r2, &(0x7f0000000000)='(', 0xffffffffffffffc9)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x582})
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x3)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]})
ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x17, 0x6, 0x0, 0x5, 0x0})
close_range(r7, 0xffffffffffffffff, 0x0)
r8 = shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000000000/0x3000)=nil)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9, 0xffffffffffffffff, 0x6000}, 0xc)
shmat(r8, &(0x7f0000ffc000/0x3000)=nil, 0x4000)

1.831098563s ago: executing program 3 (id=5524):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]})
membarrier(0x10, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000280))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0))
io_setup(0x2, &(0x7f0000000000))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x1)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0)
syz_clone(0x22000211, 0x0, 0x0, 0x0, 0x0, 0x0)
io_setup(0x1, &(0x7f0000002500))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0500008b0000000000000600000008000300", @ANYRES32=r4, @ANYBLOB="08000500030000"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r4, @ANYBLOB="28000e0080000000ffffffffffff0802110000000802110000000000000000000000000064000100080026006c09000008000c006400000008000d"], 0x74}}, 0x0)

1.131228123s ago: executing program 0 (id=5525):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)={0x2c, r0, 0x801, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, 0x2c}}, 0x40000)

1.108242936s ago: executing program 1 (id=5526):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d5b0000000000001c001a8018000a80140007000000000000000000000000000000000214003500776731"], 0x50}}, 0x0)

909.700203ms ago: executing program 1 (id=5527):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x404c0d5}, 0x0)

777.508875ms ago: executing program 5 (id=5528):
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000003580), 0x81, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r2, 0x0)
r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r3, 0xc1205531, &(0x7f0000002680)=""/4078)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/wireless\x00')
lseek(r4, 0x289e0cb5, 0x0)
writev(r0, &(0x7f0000006040)=[{&(0x7f0000005f40)='D', 0x1}], 0x1)
write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x0, 0x3a, '/dev/full\x00', 0x3a, '', 0x3a, './file0', 0x3a, [0x43]}, 0x32)
fsetxattr$security_ima(r1, &(0x7f00000001c0), &(0x7f0000000240)=@v2={0x5, 0x3, 0x2, 0xf, 0x91, "63bdeda8c4dde47ea815407936781390918cb36c09ddb8579fc502454829cbcfc6a1992fa302a97126d39df3cec66554dbf6da2e654c9fed3a290cb22115edb896df1f2e2f692bab0ec3874e6702662e229d4676c277a966e40d245daca301e49a7cb69bf5faf01650c1e15e5bd4c8bd69d269a8c925d19dea5902af32d5f672594541ea3ba7653039d44817ac0618a347"}, 0x9a, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0xafcf}, 0x8)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@cgroup, 0xffffffffffffffff, 0x17}, 0x20)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))

557.424483ms ago: executing program 1 (id=5529):
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect(0x0, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000005bcca2023380100eb030102030109021b000100000000090400000198dc4a00090585"], 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
openat$drirender128(0xffffff9c, &(0x7f0000000100), 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0)
r0 = socket(0xa, 0x3, 0xff)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)
timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
connect$unix(r0, 0x0, 0x0)
r2 = fsopen(&(0x7f0000000200)='binder\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x40000000, 0x0, 0x0)

475.816434ms ago: executing program 0 (id=5530):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0)
landlock_restrict_self(r1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000280)='attr\x00')
fchdir(r2)
creat(&(0x7f0000000440)='./file0\x00', 0x104)
timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r2, 0x8983, &(0x7f0000000040))
r4 = openat$cgroup_ro(r3, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000c00)={0x0, 0x1, 0x4, 0x40000000000000, 0x0, 0xf0})

456.25832ms ago: executing program 3 (id=5531):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x101, 0xffffffff, 0x0, {0x2, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}}, 0x0)

378.359985ms ago: executing program 0 (id=5532):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f00000002c0)="f6eb094549002060009b8538a4ba", 0x0, 0x806, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400000010000100fffffffffffffff50000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050890)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004)
ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00')
syz_emit_ethernet(0x3e, &(0x7f0000000540)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x65, 0x0, 0x3, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x3d7, 0xfffe, 0x4, 0x0, 0x1, 0x0, @dev, @remote}}}}}}, 0x0)

234.086724ms ago: executing program 3 (id=5533):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES16], 0x54}}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

216.415611ms ago: executing program 5 (id=5534):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x4000000)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x64, r2, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x800}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x48000}, 0x20000000)
r5 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x30314442})
socket(0x1d, 0x2, 0x6)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0)
mbind(&(0x7f00001e7000/0x2000)=nil, 0x2000, 0x8003, &(0x7f0000000000)=0x9, 0x3, 0x2)
r6 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00')
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
read$FUSE(r6, &(0x7f00000007c0)={0x2020}, 0x2020)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket(0x1, 0x803, 0x0)
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x98}, {0xfff8, "6fa3afb0fe32a9e0a2696102d54d53adb8228fb2feb9c4594640e87cf00f40c291c516ed3c578604aa0b3c779c984772018ff3f3174c24ba1890d69c029e65cb06c33dbda10ebfa63098a46c209c562b225be55c36142e5c7a7abf813600b58ff9d20c11dd578325739d59085723d14e88108234a6364f50ec80ab55f867cf090d064c80fcfff33e9d96fe6aa2874d694fe60bcaf759"}}}, 0x9b)
r7 = socket(0x840000000002, 0x3, 0xfa)
sendmmsg$inet(r7, &(0x7f00000016c0)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x4, 0x6f, 0x0, 0x4}]}}}], 0x14}}], 0x1, 0x8006)

187.276222ms ago: executing program 0 (id=5535):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000200)=[{0x15, 0x0, 0x1}, {0x1}, {0x6, 0x2, 0x0, 0x7ffffdbe}]})
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x70bd26, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x3}, {0xf}, {0x6, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x0, 0x2005, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000)

86.17819ms ago: executing program 3 (id=5536):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_io_uring_setup(0x88f, &(0x7f0000000200)={0x0, 0xaedf, 0x3c00, 0x2, 0xbf5ffffe}, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a0000000000003f0007000000", @ANYRES32=r2, @ANYBLOB="000000000000000050020c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd0"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4)

0s ago: executing program 0 (id=5537):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500001b03f01f00668100000100fcff", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES64], 0x50)
unshare(0x2c040600)
bpf$BPF_GET_PROG_INFO(0x3, &(0x7f0000000340)={r0, 0x0, 0x0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect(0x0, 0x2d, &(0x7f00000006c0)=ANY=[@ANYRESOCT=r1], 0x0)
openat$drirender128(0xffffff9c, &(0x7f0000000100), 0x20000, 0x0)
r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x120)
lseek(r2, 0xff, 0x1)
getdents(r2, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000700)={"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"})
r3 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x600402)
ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000000)={0x3, 0xfc, {0x0, 0x0, 0x0, 0x20016, 0x0, 0x8000, 0x0, 0x20}})
accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0)
r4 = socket(0xa, 0x3, 0xff)
timer_create(0x0, &(0x7f0000000640)={0x0, 0x2f, 0x2, @thr={&(0x7f0000000d40)="39306cb5de97630a37ae3dc249b2106ffee7643137381ed694587e1a8a4b7641cf846a8981378e224a6731801a6eeeda8c42c37089a9109be3c0775e613a18603957d68ac525a0a10127add6219e31c049fe657fef8b4a4906d8245dec363f00e320cea68f022ee72608cb317d473afb9349f464ac695e87c0097af83764542e5428", &(0x7f0000000e00)="736db91fe0d8cd3bf6378d9e14f4209f2dc6c63de7fc44ba699b65ea6e000d0c9ff5de15324b2b586babb8ac78a831f04ae640625f776f6d165a97ae6c532dfdc316a9845c5c4d00bc5ce920459199fe29e05fed8e38146e3470109ad0dfaa13dce074dcf555e5c5d29d8b9e7c663b32fe6789725bf3b8b586c6c463b079b2e962bdf305665b1573c78e55253516794cf8290cc166e77224ec9e05dcdfb4ce104356a09cf80f0f8e93a480a4000089473623e703e99af911787535e03d9e733b0d68d6cf90890864168e5a0b0ae0adc8d0f4eb66c96b20bcbe90d1c1d4af4fdc62d8d7e2748f4e7dafd8727b"}}, &(0x7f0000000300)=<r5=>0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x5, 0xfffc}, 0x8)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r6, 0x84, 0x1c, &(0x7f0000000680), &(0x7f00000005c0)=0x4)
writev(r6, &(0x7f0000000240)=[{&(0x7f0000000140)}, {&(0x7f0000000380)="e0d10cf5208ee71198fc924c646d6618297031f8a15923fef2f99785bebd924b694ddae4ec11ed0f7af32d86321497cf2801b19d53c298a7ea027494894579a282215c1194651a7168663903b91040a5f7385248f41c025ebe4b4b33487cce94e5", 0x61}, {&(0x7f0000000400)="a72436354d1e3aa9bceed29a64828bf0edd0a6602fc16b4620e3722ce079826647c0e3951beb13e710d69d7b4d2bd276a8321551efe017dc9b351f3e4118b9139e4ecfc94e8f31d5ec725aafc043dd23a9ba2b63426304b78564ea4830de977efbcb336e9525b8", 0x67}, {&(0x7f00000001c0)="030c5871cd4fa8a7d89ec92d09ca1b98bb93b3a95b2a65994c98d0d2e2393c9d103d0a6febd992a71f", 0x29}, {&(0x7f0000000480)="058264dca3b009e1ea0df1d116e539cb3f9adf13b18a3d9096f4bda66981154ead768e562b94564e317dba75d36d4d1de781da0f63d1b791df0388fac3dad6020ab573ef29243f7df993c8641049a506988cf8ec7e4a4ebe29122ef4bd3d0d36c53e", 0x62}, {&(0x7f0000000500)="fbbf408c6ffe77e4759ce739b85286c2a5871cdff1d88d144cd7536eb0c311f603afc4067488adc436ceea66667030a349fb8dd79eec0ac93c53930704854d61a16269cf9558deed364f9f55a9fa9861282be8811403f12fe5cc27308ef70406cdfad7de16f5e82f1455e8e6201c429fb96d6ebff2696eff8fe455d6486cdb4bf587e66a8c69d93773643d8fc80adb78fb71335b9b958d2b0ddd7555fba637351ca1555b68a37e40bf96", 0xaa}], 0x6)
setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req3={0x7fff, 0x0, 0x5, 0x5, 0x40000000, 0x2, 0x7f}, 0x1c)
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)
clock_gettime(0x0, &(0x7f0000000040)={<r7=>0x0, <r8=>0x0})
writev(r6, &(0x7f0000000d00), 0x0)
timer_settime(r5, 0x1, &(0x7f0000000080)={{}, {r7, r8+10000000}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000b, 0x1010, 0xffffffffffffffff, 0xec776000)
close_range(r2, r4, 0x2)
connect$unix(r4, 0x0, 0x0)
r9 = fsopen(&(0x7f0000000200)='binder\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

nterval 1, probability 0, space 0, times 0
[  980.335412][T21493] CPU: 0 UID: 0 PID: 21493 Comm: syz.0.4864 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  980.335437][T21493] Tainted: [L]=SOFTLOCKUP
[  980.335442][T21493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  980.335448][T21493] Call Trace:
[  980.335453][T21493]  <TASK>
[  980.335458][T21493]  dump_stack_lvl+0x189/0x250
[  980.335475][T21493]  ? __pfx____ratelimit+0x10/0x10
[  980.335490][T21493]  ? __pfx_dump_stack_lvl+0x10/0x10
[  980.335501][T21493]  ? __pfx__printk+0x10/0x10
[  980.335516][T21493]  ? __pfx___might_resched+0x10/0x10
[  980.335528][T21493]  ? fs_reclaim_acquire+0x7d/0x100
[  980.335542][T21493]  should_fail_ex+0x414/0x560
[  980.335558][T21493]  should_failslab+0xa8/0x100
[  980.335571][T21493]  kmem_cache_alloc_node_noprof+0x8c/0x720
[  980.335588][T21493]  ? __alloc_skb+0x255/0x430
[  980.335605][T21493]  __alloc_skb+0x255/0x430
[  980.335618][T21493]  ? __pfx__copy_from_iter+0x10/0x10
[  980.335633][T21493]  ? __pfx___alloc_skb+0x10/0x10
[  980.335648][T21493]  ? skb_put+0x11b/0x210
[  980.335659][T21493]  tipc_buf_acquire+0x2b/0xe0
[  980.335673][T21493]  tipc_msg_build+0x785/0xcf0
[  980.335691][T21493]  ? __pfx_tipc_msg_build+0x10/0x10
[  980.335706][T21493]  ? net_generic+0x1e/0x240
[  980.335716][T21493]  ? net_generic+0x1e/0x240
[  980.335734][T21493]  ? tipc_group_bc_cong+0x15f/0x210
[  980.335750][T21493]  tipc_send_group_bcast+0x76c/0xa70
[  980.335773][T21493]  ? __pfx_tipc_send_group_bcast+0x10/0x10
[  980.335791][T21493]  ? stack_trace_save+0x9c/0xe0
[  980.335805][T21493]  ? __pfx_woken_wake_function+0x10/0x10
[  980.335821][T21493]  ? __lock_acquire+0x6b6/0x2cf0
[  980.335842][T21493]  __tipc_sendmsg+0x2d7/0x2940
[  980.335856][T21493]  ? __update_page_owner_handle+0x5a/0x570
[  980.335875][T21493]  ? __pfx___tipc_sendmsg+0x10/0x10
[  980.335889][T21493]  ? aa_label_sk_perm+0x4c4/0x610
[  980.335900][T21493]  ? __page_table_check_zero+0x6a/0x3e0
[  980.335913][T21493]  ? __page_table_check_zero+0x397/0x3e0
[  980.335923][T21493]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  980.335937][T21493]  ? __lock_acquire+0x6b6/0x2cf0
[  980.335963][T21493]  ? __local_bh_enable_ip+0x12d/0x1c0
[  980.335975][T21493]  ? lockdep_hardirqs_on+0x98/0x140
[  980.335989][T21493]  ? __local_bh_enable_ip+0x12d/0x1c0
[  980.336000][T21493]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  980.336015][T21493]  tipc_sendmsg+0x55/0x70
[  980.336027][T21493]  ? __pfx_tipc_sendmsg+0x10/0x10
[  980.336039][T21493]  __sock_sendmsg+0x21c/0x270
[  980.336053][T21493]  ____sys_sendmsg+0x52d/0x820
[  980.336067][T21493]  ? __pfx_____sys_sendmsg+0x10/0x10
[  980.336086][T21493]  ___sys_sendmsg+0x21f/0x2a0
[  980.336097][T21493]  ? __pfx____sys_sendmsg+0x10/0x10
[  980.336108][T21493]  ? kstrtoull+0x12f/0x1d0
[  980.336137][T21493]  ? __fget_files+0x2a/0x420
[  980.336150][T21493]  ? __fget_files+0x3a0/0x420
[  980.336167][T21493]  __sys_sendmmsg+0x28e/0x430
[  980.336181][T21493]  ? __pfx___sys_sendmmsg+0x10/0x10
[  980.336196][T21493]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  980.336220][T21493]  ? ksys_write+0x22a/0x250
[  980.336229][T21493]  ? exc_page_fault+0x82/0x100
[  980.336243][T21493]  ? __pfx_ksys_write+0x10/0x10
[  980.336256][T21493]  __ia32_compat_sys_sendmmsg+0xa2/0xc0
[  980.336270][T21493]  __do_fast_syscall_32+0x1f7/0x570
[  980.336280][T21493]  ? rcu_is_watching+0x15/0xb0
[  980.336292][T21493]  ? do_fast_syscall_32+0x34/0x80
[  980.336304][T21493]  do_fast_syscall_32+0x34/0x80
[  980.336313][T21493]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  980.336326][T21493] RIP: 0023:0xf7f55539
[  980.336335][T21493] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  980.336345][T21493] RSP: 002b:00000000f544655c EFLAGS: 00000206 ORIG_RAX: 0000000000000159
[  980.336357][T21493] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800030c0
[  980.336364][T21493] RDX: 0000000000000181 RSI: 0000000000000000 RDI: 0000000000000000
[  980.336370][T21493] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  980.336377][T21493] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  980.336383][T21493] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  980.336398][T21493]  </TASK>
[  980.766892][ T5918] usb 3-1: New USB device found, idVendor=0681, idProduct=0010, bcdDevice=6d.59
[  980.776207][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  980.787683][ T5918] usb 3-1: config 0 descriptor??
[  981.803927][ T6718] usb 3-1: USB disconnect, device number 49
[  982.084659][T21512] Cannot find del_set index 3 as target
[  984.696918][T21532] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4877'.
[  984.755276][T15302] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  984.856254][ T6718] hid-generic 0000:0000:0000.007C: unknown main item tag 0x0
[  984.896571][ T6718] hid-generic 0000:0000:0000.007C: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  984.918931][T15302] usb 3-1: Using ep0 maxpacket: 8
[  984.927445][T15302] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  984.939605][T15302] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  984.965438][T15302] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  984.995283][T15302] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  985.033360][T15302] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  985.047314][T15302] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  985.289081][T15302] usb 3-1: GET_CAPABILITIES returned 0
[  985.294841][T15302] usbtmc 3-1:16.0: can't read capabilities
[  985.537181][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  985.546518][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  985.555590][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  985.564647][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  985.573687][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  985.582723][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  985.595316][T15302] usb 3-1: USB disconnect, device number 50
[  986.014356][T21548] netlink: 'syz.5.4883': attribute type 10 has an invalid length.
[  986.042632][T21550] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4884'.
[  986.141862][T21554] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4887'.
[  986.177361][T21554] vlan2: entered promiscuous mode
[  986.675992][T21567] FAULT_INJECTION: forcing a failure.
[  986.675992][T21567] name failslab, interval 1, probability 0, space 0, times 0
[  986.688956][T21567] CPU: 1 UID: 0 PID: 21567 Comm: syz.2.4892 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  986.688985][T21567] Tainted: [L]=SOFTLOCKUP
[  986.688993][T21567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  986.689005][T21567] Call Trace:
[  986.689016][T21567]  <TASK>
[  986.689024][T21567]  dump_stack_lvl+0x189/0x250
[  986.689051][T21567]  ? __pfx____ratelimit+0x10/0x10
[  986.689075][T21567]  ? __pfx_dump_stack_lvl+0x10/0x10
[  986.689096][T21567]  ? __pfx__printk+0x10/0x10
[  986.689126][T21567]  ? __pfx___might_resched+0x10/0x10
[  986.689144][T21567]  ? fs_reclaim_acquire+0x7d/0x100
[  986.689168][T21567]  should_fail_ex+0x414/0x560
[  986.689197][T21567]  should_failslab+0xa8/0x100
[  986.689219][T21567]  kmem_cache_alloc_noprof+0x88/0x710
[  986.689244][T21567]  ? apparmor_socket_post_create+0x2b7/0x2e0
[  986.689268][T21567]  ? pidfs_register_pid+0xa6/0x1b0
[  986.689294][T21567]  pidfs_register_pid+0xa6/0x1b0
[  986.689317][T21567]  unix_socketpair+0xdc/0x6e0
[  986.689348][T21567]  __sys_socketpair+0x2bb/0x560
[  986.689379][T21567]  __ia32_sys_socketpair+0x9a/0xb0
[  986.689404][T21567]  __do_fast_syscall_32+0x1f7/0x570
[  986.689423][T21567]  ? rcu_is_watching+0x15/0xb0
[  986.689443][T21567]  ? do_fast_syscall_32+0x34/0x80
[  986.689465][T21567]  do_fast_syscall_32+0x34/0x80
[  986.689483][T21567]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  986.689510][T21567] RIP: 0023:0xf6ffd539
[  986.689526][T21567] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  986.689541][T21567] RSP: 002b:00000000f53ed55c EFLAGS: 00000206 ORIG_RAX: 0000000000000168
[  986.689561][T21567] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000000003
[  986.689574][T21567] RDX: 0000000000000000 RSI: 0000000080000080 RDI: 0000000000000000
[  986.689585][T21567] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  986.689596][T21567] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  986.689607][T21567] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  986.689635][T21567]  </TASK>
[  987.215274][T15302] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  987.369450][T15302] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  987.380148][T15302] usb 6-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4
[  987.391825][T15302] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  987.403466][T15302] usb 6-1: config 0 descriptor??
[  987.413377][T15302] rndis_host 6-1:0.0: skipping garbage
[  987.419812][T15302] usb 6-1: bad CDC descriptors
[  987.779626][T21592] openvswitch: netlink: Tunnel attr 152 out of range max 16
[  988.065279][T15302] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  988.148375][ T5200] Dev loop6: unable to read RDB block 1
[  988.155820][ T5200]  loop6: unable to read partition table
[  988.173990][ T5200] loop6: partition table beyond EOD, truncated
[  988.256148][T15302] usb 3-1: Using ep0 maxpacket: 16
[  988.264044][T15302] usb 3-1: config 1 interface 0 altsetting 247 has an endpoint descriptor with address 0xAF, changing to 0x8F
[  988.277004][T15302] usb 3-1: config 1 interface 0 altsetting 247 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  988.288427][T15302] usb 3-1: config 1 interface 0 altsetting 247 endpoint 0x8F has invalid wMaxPacketSize 0
[  988.298652][T15302] usb 3-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  988.311852][T15302] usb 3-1: config 1 interface 0 has no altsetting 0
[  988.358466][T15302] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.51
[  988.367579][T15302] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  988.375603][T15302] usb 3-1: Product: syz
[  988.379739][T15302] usb 3-1: Manufacturer: syz
[  988.384304][T15302] usb 3-1: SerialNumber: syz
[  989.072877][T15302] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[  989.257316][T15302] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  989.266620][T15302] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  989.286195][T15302] usb 2-1: config 0 descriptor??
[  989.296447][T15302] cp210x 2-1:0.0: cp210x converter detected
[  989.884589][T15302] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -71
[  989.898189][T15302] cp210x 2-1:0.0: failed to get vendor val 0x3711 size 2: -71
[  989.905833][T15302] cp210x 2-1:0.0: GPIO initialisation failed: -71
[  989.961073][T15302] usb 2-1: cp210x converter now attached to ttyUSB0
[  989.980143][T15302] usb 2-1: USB disconnect, device number 59
[  989.991166][T15302] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  990.002775][T15302] cp210x 2-1:0.0: device disconnected
[  990.313372][T14028] usb 6-1: USB disconnect, device number 11
[  990.536406][T21631] openvswitch: netlink: Tunnel attr 152 out of range max 16
[  990.773801][T14028] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  990.814638][T15302] usb 3-1: USB disconnect, device number 51
[  990.905414][T14028] usb 6-1: device descriptor read/64, error -71
[  991.001083][T21639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4917'.
[  991.155443][T14028] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  991.255455][T15302] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  991.285270][T14028] usb 6-1: device descriptor read/64, error -71
[  991.396170][T14028] usb usb6-port1: attempt power cycle
[  991.405258][T15302] usb 3-1: Using ep0 maxpacket: 8
[  991.414065][T15302] usb 3-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb
[  991.423227][T15302] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  991.432353][T15302] usb 3-1: Product: syz
[  991.437540][T15302] usb 3-1: Manufacturer: syz
[  991.442119][T15302] usb 3-1: SerialNumber: syz
[  991.708139][T15302] mxuport 3-1:254.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71)
[  991.721625][T15302] mxuport 3-1:254.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71)
[  991.748286][T15302] mxuport 3-1:254.0: probe with driver mxuport failed with error -71
[  991.761690][T15302] usb 3-1: USB disconnect, device number 52
[  991.767750][T14028] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  991.815924][T14028] usb 6-1: device descriptor read/8, error -71
[  992.095304][T14028] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  992.130308][T14028] usb 6-1: device descriptor read/8, error -71
[  992.142071][T21650] openvswitch: netlink: Tunnel attr 15875 out of range max 16
[  992.248598][T14028] usb usb6-port1: unable to enumerate USB device
[  992.431172][ T5200] Dev loop6: unable to read RDB block 1
[  992.441502][ T5200]  loop6: unable to read partition table
[  992.465818][ T5200] loop6: partition table beyond EOD, truncated
[  992.527366][T21657] syzkaller0: entered promiscuous mode
[  992.532870][T21657] syzkaller0: entered allmulticast mode
[  992.616682][T21652] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  992.629735][T21651] tipc: Resetting bearer <eth:syzkaller0>
[  992.691897][T21663] FAULT_INJECTION: forcing a failure.
[  992.691897][T21663] name failslab, interval 1, probability 0, space 0, times 0
[  992.692473][T21651] tipc: Disabling bearer <eth:syzkaller0>
[  992.713402][T21663] CPU: 1 UID: 0 PID: 21663 Comm: syz.2.4927 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  992.713444][T21663] Tainted: [L]=SOFTLOCKUP
[  992.713457][T21663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  992.713475][T21663] Call Trace:
[  992.713488][T21663]  <TASK>
[  992.713500][T21663]  dump_stack_lvl+0x189/0x250
[  992.713532][T21663]  ? __pfx____ratelimit+0x10/0x10
[  992.713557][T21663]  ? __pfx_dump_stack_lvl+0x10/0x10
[  992.713575][T21663]  ? __pfx__printk+0x10/0x10
[  992.713600][T21663]  ? __pfx___might_resched+0x10/0x10
[  992.713617][T21663]  ? fs_reclaim_acquire+0x7d/0x100
[  992.713638][T21663]  should_fail_ex+0x414/0x560
[  992.713664][T21663]  should_failslab+0xa8/0x100
[  992.713684][T21663]  kmem_cache_alloc_node_noprof+0x8c/0x720
[  992.713705][T21663]  ? _copy_from_iter+0x215/0x1630
[  992.713725][T21663]  ? __alloc_skb+0x255/0x430
[  992.713750][T21663]  __alloc_skb+0x255/0x430
[  992.713771][T21663]  ? __pfx___alloc_skb+0x10/0x10
[  992.713789][T21663]  ? __sk_mem_raise_allocated+0x290/0x1270
[  992.713812][T21663]  tcp_stream_alloc_skb+0x3d/0x350
[  992.713831][T21663]  tcp_sendmsg_locked+0x1ab8/0x5520
[  992.713884][T21663]  ? __pfx_tcp_sendmsg_locked+0x10/0x10
[  992.713897][T21663]  ? __local_bh_enable_ip+0x12d/0x1c0
[  992.713916][T21663]  ? __local_bh_enable_ip+0x12d/0x1c0
[  992.713939][T21663]  tcp_sendmsg+0x2f/0x50
[  992.713955][T21663]  __sock_sendmsg+0x19c/0x270
[  992.713975][T21663]  ____sys_sendmsg+0x52d/0x820
[  992.714000][T21663]  ? __pfx_____sys_sendmsg+0x10/0x10
[  992.714026][T21663]  ___sys_sendmsg+0x21f/0x2a0
[  992.714042][T21663]  ? __pfx____sys_sendmsg+0x10/0x10
[  992.714057][T21663]  ? kstrtoull+0x12f/0x1d0
[  992.714098][T21663]  ? __fget_files+0x2a/0x420
[  992.714114][T21663]  ? __fget_files+0x3a0/0x420
[  992.714139][T21663]  __sys_sendmmsg+0x28e/0x430
[  992.714158][T21663]  ? __pfx___sys_sendmmsg+0x10/0x10
[  992.714179][T21663]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  992.714212][T21663]  ? ksys_write+0x22a/0x250
[  992.714225][T21663]  ? exc_page_fault+0x82/0x100
[  992.714245][T21663]  ? __pfx_ksys_write+0x10/0x10
[  992.714262][T21663]  __ia32_compat_sys_sendmmsg+0xa2/0xc0
[  992.714281][T21663]  __do_fast_syscall_32+0x1f7/0x570
[  992.714295][T21663]  ? rcu_is_watching+0x15/0xb0
[  992.714310][T21663]  ? do_fast_syscall_32+0x34/0x80
[  992.714327][T21663]  do_fast_syscall_32+0x34/0x80
[  992.714340][T21663]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  992.714356][T21663] RIP: 0023:0xf6ffd539
[  992.714370][T21663] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  992.714383][T21663] RSP: 002b:00000000f53ed55c EFLAGS: 00000206 ORIG_RAX: 0000000000000159
[  992.714399][T21663] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800094c0
[  992.714408][T21663] RDX: 0000000000000003 RSI: 0000000004044045 RDI: 0000000000000000
[  992.714417][T21663] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  992.714425][T21663] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  992.714433][T21663] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  992.714455][T21663]  </TASK>
[  993.029274][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  993.035703][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  993.233759][T21672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  993.263709][T21672] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  993.320013][T21674] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4932'.
[  993.466638][T21678] sctp: [Deprecated]: syz.1.4934 (pid 21678) Use of struct sctp_assoc_value in delayed_ack socket option.
[  993.466638][T21678] Use struct sctp_sack_info instead
[  993.603151][T21679] sctp: [Deprecated]: syz.1.4934 (pid 21679) Use of int in max_burst socket option.
[  993.603151][T21679] Use struct sctp_assoc_value instead
[  993.640861][T21678] sctp: [Deprecated]: syz.1.4934 (pid 21678) Use of int in max_burst socket option.
[  993.640861][T21678] Use struct sctp_assoc_value instead
[  994.007186][T21697] EXT4-fs: Conflicting test_dummy_encryption options
[  994.851490][T15809] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  994.954464][T21716] fuse: Bad value for 'group_id'
[  994.959873][T21716] fuse: Bad value for 'group_id'
[  995.114828][T15809] usb 6-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= 0.00
[  995.124049][T15809] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  995.136024][T15809] usb 6-1: config 0 descriptor??
[  995.152926][T15809] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input107
[  995.326186][  T979] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  995.357461][T21725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  995.454488][T21725] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  995.505209][  T979] usb 3-1: Using ep0 maxpacket: 16
[  995.512091][  T979] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  995.525428][  T979] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  995.537209][  T979] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  995.547070][  T979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  995.555665][  T979] usb 3-1: Product: syz
[  995.560392][  T979] usb 3-1: Manufacturer: syz
[  995.565600][  T979] usb 3-1: SerialNumber: syz
[  995.808429][  T979] usb 3-1: 0:2 : does not exist
[  995.820890][  T979] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  995.866314][  T979] usb 3-1: USB disconnect, device number 53
[  995.907561][ T5830] udevd[5830]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  996.197029][T15302] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[  996.374704][T15302] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  996.411955][T15302] usb 2-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08
[  996.431695][T15302] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  996.440617][T15302] usb 2-1: Product: syz
[  996.446619][T15302] usb 2-1: Manufacturer: syz
[  996.451269][T15302] usb 2-1: SerialNumber: syz
[  996.479599][T15302] usb 2-1: config 0 descriptor??
[  996.503222][T15302] gm12u320 2-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -8
[  996.512589][T15302] gm12u320 2-1:0.0: probe with driver gm12u320 failed with error -5
[  996.527668][T15302] usb-storage 2-1:0.0: USB Mass Storage device detected
[  996.550342][T15302] usb-storage 2-1:0.0: device ignored
[  996.795286][T15302] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  996.813380][T21742] FAULT_INJECTION: forcing a failure.
[  996.813380][T21742] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  996.827064][T21742] CPU: 0 UID: 0 PID: 21742 Comm: syz.0.4956 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  996.827092][T21742] Tainted: [L]=SOFTLOCKUP
[  996.827099][T21742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  996.827108][T21742] Call Trace:
[  996.827116][T21742]  <TASK>
[  996.827124][T21742]  dump_stack_lvl+0x189/0x250
[  996.827150][T21742]  ? __pfx____ratelimit+0x10/0x10
[  996.827174][T21742]  ? __pfx_dump_stack_lvl+0x10/0x10
[  996.827194][T21742]  ? __pfx__printk+0x10/0x10
[  996.827218][T21742]  ? __might_fault+0xb0/0x130
[  996.827252][T21742]  should_fail_ex+0x414/0x560
[  996.827269][T21742]  _copy_from_user+0x2d/0xb0
[  996.827280][T21742]  get_compat_msghdr+0xad/0x4a0
[  996.827304][T21742]  ? __pfx_get_compat_msghdr+0x10/0x10
[  996.827327][T21742]  ? kstrtouint+0x6e/0xe0
[  996.827356][T21742]  ___sys_sendmsg+0x193/0x2a0
[  996.827377][T21742]  ? __pfx____sys_sendmsg+0x10/0x10
[  996.827391][T21742]  ? rcu_read_lock_any_held+0xb3/0x120
[  996.827418][T21742]  ? __fget_files+0x2a/0x420
[  996.827430][T21742]  ? __fget_files+0x3a0/0x420
[  996.827466][T21742]  __sys_sendmsg+0x164/0x220
[  996.827488][T21742]  ? __pfx___sys_sendmsg+0x10/0x10
[  996.827515][T21742]  ? __pfx_ksys_write+0x10/0x10
[  996.827531][T21742]  ? __do_fast_syscall_32+0xbe/0x570
[  996.827543][T21742]  __do_fast_syscall_32+0x1f7/0x570
[  996.827553][T21742]  ? rcu_is_watching+0x15/0xb0
[  996.827565][T21742]  ? do_fast_syscall_32+0x34/0x80
[  996.827576][T21742]  do_fast_syscall_32+0x34/0x80
[  996.827588][T21742]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  996.827609][T21742] RIP: 0023:0xf7f55539
[  996.827626][T21742] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  996.827641][T21742] RSP: 002b:00000000f544655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  996.827660][T21742] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000
[  996.827672][T21742] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  996.827679][T21742] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  996.827686][T21742] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  996.827693][T21742] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  996.827708][T21742]  </TASK>
[  997.047231][T15302] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  997.080010][T15302] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  997.091875][T15302] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  997.101177][T15302] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  997.109515][T15302] usb 3-1: Manufacturer: syz
[  997.119918][T15302] usb 3-1: config 0 descriptor??
[  997.237520][T19440] usb 2-1: USB disconnect, device number 60
[  997.373158][ T5185] bcm5974 6-1:0.0: could not read from device
[  997.424652][T15809] usb 6-1: USB disconnect, device number 16
[  997.484605][ T5823] udevd[5823]: Error opening device "/dev/input/event4": No such file or directory
[  997.526266][ T5823] udevd[5823]: Unable to EVIOCGABS device "/dev/input/event4"
[  997.555396][ T5823] udevd[5823]: Unable to EVIOCGABS device "/dev/input/event4"
[  997.571834][ T5823] udevd[5823]: Unable to EVIOCGABS device "/dev/input/event4"
[  997.580911][ T5823] udevd[5823]: Unable to EVIOCGABS device "/dev/input/event4"
[  998.018583][T21770] netlink: 176 bytes leftover after parsing attributes in process `syz.5.4963'.
[  998.134023][T15302] usbhid 3-1:0.0: can't add hid device: -71
[  998.150726][T15302] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  998.163888][T15302] usb 3-1: USB disconnect, device number 54
[  998.364780][ T5200] Dev loop6: unable to read RDB block 1
[  998.371951][ T5200]  loop6: unable to read partition table
[  998.377935][ T5200] loop6: partition table beyond EOD, truncated
[  998.426372][T21769] syzkaller0: entered promiscuous mode
[  998.490387][T21769] syzkaller0: entered allmulticast mode
[  999.215262][T19440] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  999.304092][T21797] sctp: [Deprecated]: syz.2.4973 (pid 21797) Use of struct sctp_assoc_value in delayed_ack socket option.
[  999.304092][T21797] Use struct sctp_sack_info instead
[  999.379746][T19440] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  999.391694][T19440] usb 6-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08
[  999.401378][T19440] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  999.409788][T19440] usb 6-1: Product: syz
[  999.416341][T19440] usb 6-1: Manufacturer: syz
[  999.420966][T19440] usb 6-1: SerialNumber: syz
[  999.429714][T19440] usb 6-1: config 0 descriptor??
[  999.440472][T19440] gm12u320 6-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -8
[  999.449371][T19440] gm12u320 6-1:0.0: probe with driver gm12u320 failed with error -5
[  999.461153][T19440] usb-storage 6-1:0.0: USB Mass Storage device detected
[  999.474091][T19440] usb-storage 6-1:0.0: device ignored
[  999.606041][T21806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  999.617973][T15809] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  999.638973][T21806] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  999.786395][T15809] usb 3-1: Using ep0 maxpacket: 8
[  999.797467][T15809] usb 3-1: config index 0 descriptor too short (expected 5924, got 36)
[  999.807213][T15809] usb 3-1: config 250 has an invalid interface number: 228 but max is -1
[  999.815963][T15809] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0
[  999.834492][T15809] usb 3-1: config 250 has no interface number 0
[  999.840914][T15809] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  999.852600][T15809] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  999.863212][T15809] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 65535, setting to 1024
[  999.876967][T15809] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024
[  999.890119][T15809] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  999.904174][T15809] usb 3-1: config 250 interface 228 has no altsetting 0
[  999.912889][T15809] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  999.913475][T21808] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  999.922303][T15809] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  999.922326][T15809] usb 3-1: Product: syz
[  999.922342][T15809] usb 3-1: SerialNumber: syz
[  999.930563][T15809] hub 3-1:250.228: bad descriptor, ignoring hub
[  999.930589][T15809] hub 3-1:250.228: probe with driver hub failed with error -5
[ 1000.136855][T15809] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 55 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[ 1000.142264][T21814] FAULT_INJECTION: forcing a failure.
[ 1000.142264][T21814] name failslab, interval 1, probability 0, space 0, times 0
[ 1000.164307][T21814] CPU: 1 UID: 0 PID: 21814 Comm: syz.1.4979 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1000.164334][T21814] Tainted: [L]=SOFTLOCKUP
[ 1000.164341][T21814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1000.164352][T21814] Call Trace:
[ 1000.164361][T21814]  <TASK>
[ 1000.164369][T21814]  dump_stack_lvl+0x189/0x250
[ 1000.164395][T21814]  ? __pfx____ratelimit+0x10/0x10
[ 1000.164424][T21814]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1000.164444][T21814]  ? __pfx__printk+0x10/0x10
[ 1000.164474][T21814]  ? __pfx___might_resched+0x10/0x10
[ 1000.164497][T21814]  should_fail_ex+0x414/0x560
[ 1000.164525][T21814]  should_failslab+0xa8/0x100
[ 1000.164547][T21814]  kmem_cache_alloc_noprof+0x88/0x710
[ 1000.164573][T21814]  ? fuse_get_req+0x7b9/0x10c0
[ 1000.164595][T21814]  fuse_get_req+0x7b9/0x10c0
[ 1000.164624][T21814]  ? __pfx_fuse_get_req+0x10/0x10
[ 1000.164642][T21814]  ? __pfx_autoremove_wake_function+0x10/0x10
[ 1000.164665][T21814]  ? is_bpf_text_address+0x292/0x2b0
[ 1000.164682][T21814]  ? is_bpf_text_address+0x26/0x2b0
[ 1000.164702][T21814]  ? kernel_text_address+0xa5/0xe0
[ 1000.164730][T21814]  __fuse_simple_request+0x2bb/0x1bb0
[ 1000.164749][T21814]  ? arch_stack_walk+0xfc/0x150
[ 1000.164779][T21814]  ? __pfx___fuse_simple_request+0x10/0x10
[ 1000.164797][T21814]  ? stack_trace_save+0x9c/0xe0
[ 1000.164821][T21814]  ? __pfx_stack_trace_save+0x10/0x10
[ 1000.164848][T21814]  ? stack_depot_save_flags+0x40/0x850
[ 1000.164870][T21814]  ? __asan_memset+0x22/0x50
[ 1000.164891][T21814]  ? kasan_save_track+0x4f/0x80
[ 1000.164907][T21814]  ? kasan_save_track+0x3e/0x80
[ 1000.164923][T21814]  ? kasan_save_free_info+0x46/0x50
[ 1000.164944][T21814]  ? __kasan_slab_free+0x5c/0x80
[ 1000.164960][T21814]  ? kmem_cache_free+0x197/0x620
[ 1000.164977][T21814]  ? user_path_at+0x44/0x60
[ 1000.164998][T21814]  ? __se_sys_chdir+0x91/0x280
[ 1000.165015][T21814]  ? __do_fast_syscall_32+0x1f7/0x570
[ 1000.165031][T21814]  ? do_fast_syscall_32+0x34/0x80
[ 1000.165047][T21814]  ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1000.165074][T21814]  fuse_permission+0x85e/0xdc0
[ 1000.165106][T21814]  ? __pfx_fuse_permission+0x10/0x10
[ 1000.165155][T21814]  ? kasan_quarantine_put+0xdd/0x220
[ 1000.165180][T21814]  ? kmem_cache_free+0x197/0x620
[ 1000.165198][T21814]  ? __pfx_fuse_permission+0x10/0x10
[ 1000.165220][T21814]  inode_permission+0x41f/0x5f0
[ 1000.165245][T21814]  __se_sys_chdir+0x107/0x280
[ 1000.165265][T21814]  ? __pfx___se_sys_chdir+0x10/0x10
[ 1000.165289][T21814]  ? __do_fast_syscall_32+0xbe/0x570
[ 1000.165309][T21814]  __do_fast_syscall_32+0x1f7/0x570
[ 1000.165327][T21814]  ? trace_page_fault_user+0x84/0x1c0
[ 1000.165344][T21814]  ? do_fast_syscall_32+0x34/0x80
[ 1000.165366][T21814]  do_fast_syscall_32+0x34/0x80
[ 1000.165382][T21814]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1000.165402][T21814] RIP: 0023:0xf707d539
[ 1000.165419][T21814] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1000.165436][T21814] RSP: 002b:00000000f546d55c EFLAGS: 00000206 ORIG_RAX: 000000000000000c
[ 1000.165455][T21814] RAX: ffffffffffffffda RBX: 0000000080000c80 RCX: 0000000000000000
[ 1000.165468][T21814] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1000.165479][T21814] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1000.165490][T21814] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1000.165501][T21814] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1000.165530][T21814]  </TASK>
[ 1000.569418][T21819] binder: 21818:21819 ioctl c0306201 80000080 returned -14
[ 1000.633019][T21822] netlink: 'syz.0.4982': attribute type 10 has an invalid length.
[ 1000.641368][T19440] usb 3-1: USB disconnect, device number 55
[ 1000.641818][T15809] usb 6-1: USB disconnect, device number 17
[ 1000.651845][T19440] usblp0: removed
[ 1000.655066][T21822] team0: Device wlan1 is up. Set it down before adding it as a team port
[ 1000.835302][  T979] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[ 1000.989053][  T979] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1001.025271][  T979] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1001.036376][  T979] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1001.079109][  T979] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1001.100413][  T979] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1001.110243][  T979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1001.153896][  T979] usb 2-1: config 0 descriptor??
[ 1001.651454][  T979] plantronics 0003:047F:FFFF.007D: ignoring exceeding usage max
[ 1001.709320][  T979] plantronics 0003:047F:FFFF.007D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[ 1002.285604][T21849] openvswitch: netlink: Tunnel attr 152 out of range max 16
[ 1002.532233][T21853] kAFS: unable to lookup cell '/,'
[ 1002.545359][  T979] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[ 1002.695475][  T979] usb 3-1: Using ep0 maxpacket: 16
[ 1002.737092][  T979] usb 3-1: config 1 interface 0 altsetting 247 has an endpoint descriptor with address 0xAF, changing to 0x8F
[ 1002.754623][  T979] usb 3-1: config 1 interface 0 altsetting 247 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1002.772593][  T979] usb 3-1: config 1 interface 0 altsetting 247 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1002.788231][  T979] usb 3-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1002.817486][  T979] usb 3-1: config 1 interface 0 has no altsetting 0
[ 1002.863163][  T979] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.51
[ 1002.875875][  T979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1002.887650][  T979] usb 3-1: Product: syz
[ 1002.893544][  T979] usb 3-1: Manufacturer: syz
[ 1002.902499][  T979] usb 3-1: SerialNumber: syz
[ 1003.572263][T21829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1003.582532][T21829] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1003.612026][T21856] syzkaller1: entered promiscuous mode
[ 1003.619544][T21856] syzkaller1: entered allmulticast mode
[ 1003.796763][    T9] usb 2-1: USB disconnect, device number 61
[ 1003.804908][T21863] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 1005.329165][T19440] usb 3-1: USB disconnect, device number 56
[ 1006.195247][  T979] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[ 1006.305235][T19440] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[ 1006.358403][  T979] usb 3-1: config 1 has an invalid interface number: 113 but max is 0
[ 1006.366791][  T979] usb 3-1: config 1 has no interface number 0
[ 1006.372881][  T979] usb 3-1: config 1 interface 113 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 528
[ 1006.386841][  T979] usb 3-1: config 1 interface 113 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[ 1006.398357][  T979] usb 3-1: config 1 interface 113 has no altsetting 0
[ 1006.407298][  T979] usb 3-1: New USB device found, idVendor=04e8, idProduct=662e, bcdDevice=9d.cb
[ 1006.417135][  T979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1006.425786][  T979] usb 3-1: Product: syz
[ 1006.430005][  T979] usb 3-1: Manufacturer: syz
[ 1006.434610][  T979] usb 3-1: SerialNumber: syz
[ 1006.459570][T19440] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[ 1006.471378][T21903] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1006.485379][T21903] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1006.496682][  T979] ipaq 3-1:1.113: PocketPC PDA converter detected
[ 1006.532556][T19440] usb 6-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08
[ 1006.545364][T19440] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1006.553439][T19440] usb 6-1: Product: syz
[ 1006.558689][T19440] usb 6-1: Manufacturer: syz
[ 1006.567778][T19440] usb 6-1: SerialNumber: syz
[ 1006.583726][T19440] usb 6-1: config 0 descriptor??
[ 1006.598860][T19440] gm12u320 6-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -8
[ 1006.608051][T19440] gm12u320 6-1:0.0: probe with driver gm12u320 failed with error -5
[ 1006.622551][T19440] usb-storage 6-1:0.0: USB Mass Storage device detected
[ 1006.647206][T19440] usb-storage 6-1:0.0: device ignored
[ 1006.721036][  T979] usb 3-1: PocketPC PDA converter now attached to ttyUSB0
[ 1006.749464][  T979] usb 3-1: USB disconnect, device number 57
[ 1006.760486][  T979] ipaq ttyUSB0: PocketPC PDA converter now disconnected from ttyUSB0
[ 1006.780019][  T979] ipaq 3-1:1.113: device disconnected
[ 1006.857963][   T30] kauditd_printk_skb: 30 callbacks suppressed
[ 1006.857979][   T30] audit: type=1326 audit(1765491336.973:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21926 comm="syz.2.5013" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x0
[ 1007.321025][  T979] usb 6-1: USB disconnect, device number 18
[ 1008.601952][T21964] FAULT_INJECTION: forcing a failure.
[ 1008.601952][T21964] name failslab, interval 1, probability 0, space 0, times 0
[ 1008.639348][T21964] CPU: 0 UID: 0 PID: 21964 Comm: syz.3.5025 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1008.639372][T21964] Tainted: [L]=SOFTLOCKUP
[ 1008.639376][T21964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1008.639383][T21964] Call Trace:
[ 1008.639388][T21964]  <TASK>
[ 1008.639395][T21964]  dump_stack_lvl+0x189/0x250
[ 1008.639414][T21964]  ? __pfx____ratelimit+0x10/0x10
[ 1008.639428][T21964]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1008.639440][T21964]  ? __pfx__printk+0x10/0x10
[ 1008.639455][T21964]  ? __pfx___might_resched+0x10/0x10
[ 1008.639467][T21964]  ? fs_reclaim_acquire+0x7d/0x100
[ 1008.639481][T21964]  should_fail_ex+0x414/0x560
[ 1008.639497][T21964]  should_failslab+0xa8/0x100
[ 1008.639510][T21964]  kmem_cache_alloc_node_noprof+0x8c/0x720
[ 1008.639532][T21964]  ? __alloc_skb+0x255/0x430
[ 1008.639551][T21964]  __alloc_skb+0x255/0x430
[ 1008.639565][T21964]  ? __pfx___alloc_skb+0x10/0x10
[ 1008.639585][T21964]  tipc_msg_build+0x13b/0xcf0
[ 1008.639603][T21964]  ? __pfx_tipc_msg_build+0x10/0x10
[ 1008.639614][T21964]  ? tipc_nametbl_lookup_mcast_nodes+0x2e/0x9d0
[ 1008.639627][T21964]  ? tipc_nametbl_lookup_mcast_nodes+0x4ac/0x9d0
[ 1008.639637][T21964]  ? tipc_nametbl_lookup_mcast_nodes+0x2e/0x9d0
[ 1008.639651][T21964]  __tipc_sendmsg+0x1a58/0x2940
[ 1008.639665][T21964]  ? __update_page_owner_handle+0x5a/0x570
[ 1008.639683][T21964]  ? __pfx___tipc_sendmsg+0x10/0x10
[ 1008.639703][T21964]  ? __pfx_aa_label_sk_perm+0x10/0x10
[ 1008.639714][T21964]  ? __pfx_woken_wake_function+0x10/0x10
[ 1008.639732][T21964]  ? __lock_acquire+0x6b6/0x2cf0
[ 1008.639758][T21964]  ? __local_bh_enable_ip+0x12d/0x1c0
[ 1008.639769][T21964]  ? lockdep_hardirqs_on+0x98/0x140
[ 1008.639786][T21964]  ? __local_bh_enable_ip+0x12d/0x1c0
[ 1008.639796][T21964]  ? __pfx___local_bh_enable_ip+0x10/0x10
[ 1008.639811][T21964]  tipc_sendmsg+0x55/0x70
[ 1008.639823][T21964]  ? __pfx_tipc_sendmsg+0x10/0x10
[ 1008.639834][T21964]  __sock_sendmsg+0x21c/0x270
[ 1008.639849][T21964]  ____sys_sendmsg+0x52d/0x820
[ 1008.639863][T21964]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1008.639876][T21964]  ? rcu_is_watching+0x15/0xb0
[ 1008.639888][T21964]  ? ___sys_sendmsg+0x22f/0x2a0
[ 1008.639901][T21964]  ___sys_sendmsg+0x21f/0x2a0
[ 1008.639913][T21964]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1008.639924][T21964]  ? kstrtoull+0x12f/0x1d0
[ 1008.639953][T21964]  ? __fget_files+0x2a/0x420
[ 1008.639965][T21964]  ? __fget_files+0x3a0/0x420
[ 1008.639982][T21964]  __sys_sendmmsg+0x28e/0x430
[ 1008.639995][T21964]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1008.640011][T21964]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1008.640034][T21964]  ? ksys_write+0x22a/0x250
[ 1008.640044][T21964]  ? exc_page_fault+0x82/0x100
[ 1008.640058][T21964]  ? __pfx_ksys_write+0x10/0x10
[ 1008.640070][T21964]  __ia32_compat_sys_sendmmsg+0xa2/0xc0
[ 1008.640084][T21964]  __do_fast_syscall_32+0x1f7/0x570
[ 1008.640094][T21964]  ? rcu_is_watching+0x15/0xb0
[ 1008.640104][T21964]  ? do_fast_syscall_32+0x34/0x80
[ 1008.640116][T21964]  do_fast_syscall_32+0x34/0x80
[ 1008.640126][T21964]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1008.640139][T21964] RIP: 0023:0xf70ed539
[ 1008.640154][T21964] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1008.640170][T21964] RSP: 002b:00000000f54dd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000159
[ 1008.640189][T21964] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080004400
[ 1008.640202][T21964] RDX: 0000000000000203 RSI: 00000000000101d0 RDI: 0000000000000000
[ 1008.640213][T21964] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1008.640223][T21964] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1008.640234][T21964] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1008.640261][T21964]  </TASK>
[ 1009.232434][T21968] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[ 1009.335942][T21972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5030'.
[ 1009.349524][T21972] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5030'.
[ 1009.358652][T21972] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5030'.
[ 1009.442875][T21976] syzkaller0: entered promiscuous mode
[ 1009.448615][T21976] syzkaller0: entered allmulticast mode
[ 1009.675251][ T6703] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[ 1009.693655][T21988] bridge0: port 4(wlan1) entered blocking state
[ 1009.872747][ T6703] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[ 1009.890384][ T6703] usb 2-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08
[ 1009.992913][ T6703] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1010.011050][ T6703] usb 2-1: Product: syz
[ 1010.016602][ T6703] usb 2-1: Manufacturer: syz
[ 1010.047378][ T6703] usb 2-1: SerialNumber: syz
[ 1010.289673][ T6703] usb 2-1: config 0 descriptor??
[ 1010.299550][T21988] bridge0: port 4(wlan1) entered disabled state
[ 1010.351105][ T6703] gm12u320 2-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -8
[ 1010.360446][ T6703] gm12u320 2-1:0.0: probe with driver gm12u320 failed with error -5
[ 1010.366123][T21988] mac80211_hwsim hwsim37 wlan1: entered allmulticast mode
[ 1010.394381][ T6703] usb-storage 2-1:0.0: USB Mass Storage device detected
[ 1010.435630][ T6703] usb-storage 2-1:0.0: device ignored
[ 1010.572238][T21988] mac80211_hwsim hwsim37 wlan1: entered promiscuous mode
[ 1010.618623][T21988] bridge0: port 4(wlan1) entered blocking state
[ 1010.625001][T21988] bridge0: port 4(wlan1) entered forwarding state
[ 1011.023732][T22015] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5046'.
[ 1011.186596][T15756] usb 2-1: USB disconnect, device number 62
[ 1012.135393][ T6703] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[ 1012.245406][T15302] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[ 1012.288065][ T6703] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1012.298285][ T6703] usb 2-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4
[ 1012.307435][ T6703] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1012.319910][ T6703] usb 2-1: config 0 descriptor??
[ 1012.329578][ T6703] rndis_host 2-1:0.0: probe with driver rndis_host failed with error -22
[ 1012.397804][T15302] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1012.409362][T15302] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1012.421377][T15302] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1012.431463][T15302] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1012.444459][T15302] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1012.453594][T15302] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1012.464278][T15302] usb 6-1: config 0 descriptor??
[ 1012.901861][T15302] plantronics 0003:047F:FFFF.007E: ignoring exceeding usage max
[ 1012.911944][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805d1f1400: rx timeout, send abort
[ 1012.920290][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805d1f2c00: rx timeout, send abort
[ 1012.928773][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805d1f1400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[ 1012.943148][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805d1f2c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[ 1012.994891][T15302] plantronics 0003:047F:FFFF.007E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[ 1013.031832][T22040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5055'.
[ 1013.043760][T22040] FAULT_INJECTION: forcing a failure.
[ 1013.043760][T22040] name failslab, interval 1, probability 0, space 0, times 0
[ 1013.059023][T22040] CPU: 0 UID: 0 PID: 22040 Comm: syz.2.5055 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1013.059050][T22040] Tainted: [L]=SOFTLOCKUP
[ 1013.059057][T22040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1013.059068][T22040] Call Trace:
[ 1013.059075][T22040]  <TASK>
[ 1013.059083][T22040]  dump_stack_lvl+0x189/0x250
[ 1013.059110][T22040]  ? __pfx____ratelimit+0x10/0x10
[ 1013.059133][T22040]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1013.059163][T22040]  ? __pfx__printk+0x10/0x10
[ 1013.059194][T22040]  ? __pfx___might_resched+0x10/0x10
[ 1013.059220][T22040]  should_fail_ex+0x414/0x560
[ 1013.059248][T22040]  should_failslab+0xa8/0x100
[ 1013.059271][T22040]  kmem_cache_alloc_lru_noprof+0x8d/0x6e0
[ 1013.059299][T22040]  ? __d_alloc+0x37/0x6f0
[ 1013.059326][T22040]  __d_alloc+0x37/0x6f0
[ 1013.059354][T22040]  d_alloc+0x4b/0x190
[ 1013.059374][T22040]  ? lookup_one_qstr_excl+0xc8/0x360
[ 1013.059398][T22040]  lookup_one_qstr_excl+0xdc/0x360
[ 1013.059420][T22040]  ? lookup_noperm_common+0x245/0x430
[ 1013.059446][T22040]  start_dirop+0x5c/0x90
[ 1013.059469][T22040]  simple_start_creating+0xc4/0x100
[ 1013.059494][T22040]  ? __pfx_simple_start_creating+0x10/0x10
[ 1013.059517][T22040]  ? do_raw_spin_unlock+0x122/0x240
[ 1013.059540][T22040]  ? mntput+0x65/0xc0
[ 1013.059562][T22040]  debugfs_start_creating+0xdb/0x1a0
[ 1013.059584][T22040]  __debugfs_create_file+0x6f/0x400
[ 1013.059608][T22040]  debugfs_create_file_full+0x3f/0x60
[ 1013.059630][T22040]  ref_tracker_dir_debugfs+0x14e/0x2d0
[ 1013.059655][T22040]  ? __pfx_ref_tracker_dir_debugfs+0x10/0x10
[ 1013.059705][T22040]  ? trace_kmalloc+0x1f/0xb0
[ 1013.059717][T22040]  ? __kvmalloc_node_noprof+0x5f5/0x920
[ 1013.059737][T22040]  ? __raw_spin_lock_init+0x45/0x100
[ 1013.059763][T22040]  alloc_netdev_mqs+0x272/0x11b0
[ 1013.059784][T22040]  ? __pfx_macvtap_setup+0x10/0x10
[ 1013.059812][T22040]  rtnl_create_link+0x31f/0xcf0
[ 1013.059841][T22040]  rtnl_newlink_create+0x25c/0xb00
[ 1013.059874][T22040]  ? __pfx_rtnl_newlink_create+0x10/0x10
[ 1013.059897][T22040]  ? __pfx___mutex_lock+0x10/0x10
[ 1013.059926][T22040]  ? ns_capable+0x8a/0xf0
[ 1013.059949][T22040]  rtnl_newlink+0x16e7/0x1c90
[ 1013.059983][T22040]  ? __pfx_rtnl_newlink+0x10/0x10
[ 1013.059996][T22040]  ? __do_fast_syscall_32+0x1f7/0x570
[ 1013.060015][T22040]  ? do_fast_syscall_32+0x34/0x80
[ 1013.060030][T22040]  ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1013.060084][T22040]  ? kasan_quarantine_put+0xdd/0x220
[ 1013.060103][T22040]  ? lockdep_hardirqs_on+0x98/0x140
[ 1013.060134][T22040]  ? kmem_cache_free+0x197/0x620
[ 1013.060156][T22040]  ? nlmon_xmit+0xb0/0x100
[ 1013.060185][T22040]  ? __lock_acquire+0x6b6/0x2cf0
[ 1013.060207][T22040]  ? __pfx___local_bh_enable_ip+0x10/0x10
[ 1013.060231][T22040]  ? __dev_queue_xmit+0x289/0x3140
[ 1013.060250][T22040]  ? __dev_queue_xmit+0x289/0x3140
[ 1013.060268][T22040]  ? __dev_queue_xmit+0x289/0x3140
[ 1013.060317][T22040]  ? __pfx_rtnl_newlink+0x10/0x10
[ 1013.060334][T22040]  rtnetlink_rcv_msg+0x7cf/0xb70
[ 1013.060364][T22040]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[ 1013.060387][T22040]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1013.060409][T22040]  ? ref_tracker_free+0x63a/0x7d0
[ 1013.060432][T22040]  ? __asan_memcpy+0x40/0x70
[ 1013.060448][T22040]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1013.060482][T22040]  netlink_rcv_skb+0x208/0x470
[ 1013.060504][T22040]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1013.060531][T22040]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1013.060562][T22040]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1013.060590][T22040]  netlink_unicast+0x82f/0x9e0
[ 1013.060617][T22040]  ? __pfx_netlink_unicast+0x10/0x10
[ 1013.060645][T22040]  ? netlink_sendmsg+0x642/0xb30
[ 1013.060663][T22040]  ? skb_put+0x11b/0x210
[ 1013.060683][T22040]  netlink_sendmsg+0x805/0xb30
[ 1013.060714][T22040]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1013.060737][T22040]  ? __import_iovec+0x5d4/0x7f0
[ 1013.060754][T22040]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1013.060776][T22040]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1013.060793][T22040]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1013.060815][T22040]  __sock_sendmsg+0x21c/0x270
[ 1013.060840][T22040]  ____sys_sendmsg+0x505/0x820
[ 1013.060866][T22040]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1013.060890][T22040]  ? kstrtouint+0x6e/0xe0
[ 1013.060921][T22040]  ___sys_sendmsg+0x21f/0x2a0
[ 1013.060942][T22040]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1013.060968][T22040]  ? rcu_read_lock_any_held+0xb3/0x120
[ 1013.061018][T22040]  ? __fget_files+0x2a/0x420
[ 1013.061038][T22040]  ? __fget_files+0x3a0/0x420
[ 1013.061071][T22040]  __sys_sendmsg+0x164/0x220
[ 1013.061093][T22040]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1013.061121][T22040]  ? __pfx_ksys_write+0x10/0x10
[ 1013.061144][T22040]  ? __do_fast_syscall_32+0xbe/0x570
[ 1013.061172][T22040]  __do_fast_syscall_32+0x1f7/0x570
[ 1013.061190][T22040]  ? rcu_is_watching+0x15/0xb0
[ 1013.061210][T22040]  ? do_fast_syscall_32+0x34/0x80
[ 1013.061233][T22040]  do_fast_syscall_32+0x34/0x80
[ 1013.061250][T22040]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1013.061271][T22040] RIP: 0023:0xf6ffd539
[ 1013.061287][T22040] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1013.061303][T22040] RSP: 002b:00000000f53ed55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 1013.061322][T22040] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280
[ 1013.061336][T22040] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1013.061346][T22040] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1013.061357][T22040] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1013.061368][T22040] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1013.061397][T22040]  </TASK>
[ 1013.690395][T22042] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5056'.
[ 1014.130277][ T6703] usb 3-1: new low-speed USB device number 58 using dummy_hcd
[ 1014.407621][ T6703] usb 3-1: config 7 interface 0 has no altsetting 0
[ 1015.137265][T15809] usb 2-1: USB disconnect, device number 63
[ 1015.282795][T22062] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1015.294862][T22062] syzkaller0: entered promiscuous mode
[ 1015.301254][T22062] syzkaller0: entered allmulticast mode
[ 1015.330720][T22062] tipc: Resetting bearer <eth:syzkaller0>
[ 1015.340367][T22061] tipc: Resetting bearer <eth:syzkaller0>
[ 1015.357326][T22061] tipc: Disabling bearer <eth:syzkaller0>
[ 1015.646525][T19440] usb 6-1: USB disconnect, device number 19
[ 1015.690343][T22069] tipc: Started in network mode
[ 1015.697162][T22069] tipc: Node identity ee1e0c8872db, cluster identity 4711
[ 1015.704529][T22069] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1015.741533][T22070] syzkaller0: entered promiscuous mode
[ 1015.757630][T22070] syzkaller0: entered allmulticast mode
[ 1016.062068][T22079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5070'.
[ 1016.114648][T22079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5070'.
[ 1016.327107][T22081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5071'.
[ 1016.480101][T22083] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5072'.
[ 1016.489698][T22083] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5072'.
[ 1016.575644][T19440] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[ 1016.623661][T22069] tipc: Resetting bearer <eth:syzkaller0>
[ 1016.674804][T22068] tipc: Resetting bearer <eth:syzkaller0>
[ 1016.697149][T22068] tipc: Disabling bearer <eth:syzkaller0>
[ 1016.725212][T19440] usb 2-1: Using ep0 maxpacket: 32
[ 1016.731946][T19440] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1016.742108][T19440] usb 2-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00
[ 1016.760445][T19440] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1016.803997][T19440] usb 2-1: config 0 descriptor??
[ 1016.891562][ T6703] usb 3-1: New USB device found, idVendor=0ace, idProduct=13a1, bcdDevice= 4.44
[ 1016.902181][ T6703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1016.945556][ T6703] usb 3-1: can't set config #7, error -71
[ 1016.962003][ T6703] usb 3-1: USB disconnect, device number 58
[ 1017.128382][   T30] audit: type=1326 audit(1765491347.243:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22095 comm="syz.5.5077" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff3539 code=0x0
[ 1017.182499][T22100] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[ 1017.192294][T22100] syzkaller0: entered promiscuous mode
[ 1017.198283][T22100] syzkaller0: entered allmulticast mode
[ 1017.218531][T22100] FAULT_INJECTION: forcing a failure.
[ 1017.218531][T22100] name failslab, interval 1, probability 0, space 0, times 0
[ 1017.233208][T22100] CPU: 0 UID: 0 PID: 22100 Comm: syz.2.5079 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1017.233237][T22100] Tainted: [L]=SOFTLOCKUP
[ 1017.233244][T22100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1017.233255][T22100] Call Trace:
[ 1017.233263][T22100]  <TASK>
[ 1017.233271][T22100]  dump_stack_lvl+0x189/0x250
[ 1017.233296][T22100]  ? __pfx____ratelimit+0x10/0x10
[ 1017.233320][T22100]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1017.233340][T22100]  ? __pfx__printk+0x10/0x10
[ 1017.233367][T22100]  ? __pfx___might_resched+0x10/0x10
[ 1017.233385][T22100]  ? fs_reclaim_acquire+0x7d/0x100
[ 1017.233410][T22100]  should_fail_ex+0x414/0x560
[ 1017.233438][T22100]  should_failslab+0xa8/0x100
[ 1017.233461][T22100]  kmem_cache_alloc_node_noprof+0x8c/0x720
[ 1017.233487][T22100]  ? __alloc_skb+0x255/0x430
[ 1017.233510][T22100]  ? napi_skb_cache_get+0x4a5/0x780
[ 1017.233530][T22100]  ? napi_skb_cache_get+0x151/0x780
[ 1017.233555][T22100]  __alloc_skb+0x255/0x430
[ 1017.233579][T22100]  ? __pfx___alloc_skb+0x10/0x10
[ 1017.233611][T22100]  rtmsg_ifinfo_build_skb+0x84/0x260
[ 1017.233643][T22100]  rtnetlink_event+0x1b7/0x270
[ 1017.233664][T22100]  notifier_call_chain+0x19d/0x3a0
[ 1017.233694][T22100]  netif_set_mtu_ext+0x591/0x7e0
[ 1017.233712][T22100]  ? do_fast_syscall_32+0x34/0x80
[ 1017.233728][T22100]  ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1017.233754][T22100]  ? __pfx_netif_set_mtu_ext+0x10/0x10
[ 1017.233771][T22100]  ? __mutex_trylock_common+0x153/0x260
[ 1017.233805][T22100]  ? __pfx___mutex_trylock_common+0x10/0x10
[ 1017.233831][T22100]  ? rcu_is_watching+0x15/0xb0
[ 1017.233853][T22100]  ? trace_contention_end+0x39/0x100
[ 1017.233881][T22100]  netif_set_mtu+0xa4/0x150
[ 1017.233899][T22100]  ? __pfx_netif_set_mtu+0x10/0x10
[ 1017.233930][T22100]  ? netdev_name_node_lookup+0xdf/0x120
[ 1017.233961][T22100]  dev_set_mtu+0x126/0x260
[ 1017.233984][T22100]  dev_ioctl+0x7b4/0x1150
[ 1017.234006][T22100]  sock_do_ioctl+0x22c/0x300
[ 1017.234030][T22100]  ? __pfx_sock_do_ioctl+0x10/0x10
[ 1017.234067][T22100]  compat_sock_ioctl+0xb8d/0xc80
[ 1017.234094][T22100]  ? __pfx_compat_sock_ioctl+0x10/0x10
[ 1017.234118][T22100]  ? __fget_files+0x3a0/0x420
[ 1017.234138][T22100]  ? __fget_files+0x2a/0x420
[ 1017.234163][T22100]  ? bpf_lsm_file_ioctl_compat+0x9/0x20
[ 1017.234184][T22100]  __ia32_compat_sys_ioctl+0x543/0x840
[ 1017.234207][T22100]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[ 1017.234225][T22100]  ? __fget_files+0x3a0/0x420
[ 1017.234252][T22100]  ? fput+0xa0/0xd0
[ 1017.234292][T22100]  ? ksys_write+0x22a/0x250
[ 1017.234311][T22100]  ? __pfx_ksys_write+0x10/0x10
[ 1017.234333][T22100]  ? __do_fast_syscall_32+0xbe/0x570
[ 1017.234353][T22100]  __do_fast_syscall_32+0x1f7/0x570
[ 1017.234372][T22100]  ? rcu_is_watching+0x15/0xb0
[ 1017.234390][T22100]  ? do_fast_syscall_32+0x34/0x80
[ 1017.234412][T22100]  do_fast_syscall_32+0x34/0x80
[ 1017.234429][T22100]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1017.234449][T22100] RIP: 0023:0xf6ffd539
[ 1017.234465][T22100] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1017.234480][T22100] RSP: 002b:00000000f53ed55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[ 1017.234501][T22100] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000008922
[ 1017.234514][T22100] RDX: 0000000080002280 RSI: 0000000000000000 RDI: 0000000000000000
[ 1017.234526][T22100] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1017.234536][T22100] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1017.234547][T22100] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1017.234569][T22100]  </TASK>
[ 1017.243412][T19440] magicmouse 0003:05AC:0265.007F: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.1-1/input0
[ 1017.751631][T22112] FAULT_INJECTION: forcing a failure.
[ 1017.751631][T22112] name failslab, interval 1, probability 0, space 0, times 0
[ 1017.764777][T22112] CPU: 0 UID: 0 PID: 22112 Comm: syz.2.5085 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1017.764807][T22112] Tainted: [L]=SOFTLOCKUP
[ 1017.764813][T22112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1017.764825][T22112] Call Trace:
[ 1017.764833][T22112]  <TASK>
[ 1017.764841][T22112]  dump_stack_lvl+0x189/0x250
[ 1017.764865][T22112]  ? __pfx____ratelimit+0x10/0x10
[ 1017.764890][T22112]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1017.764912][T22112]  ? __pfx__printk+0x10/0x10
[ 1017.764938][T22112]  ? __pfx___might_resched+0x10/0x10
[ 1017.764955][T22112]  ? fs_reclaim_acquire+0x7d/0x100
[ 1017.764979][T22112]  should_fail_ex+0x414/0x560
[ 1017.765006][T22112]  should_failslab+0xa8/0x100
[ 1017.765030][T22112]  __kmalloc_cache_noprof+0x84/0x700
[ 1017.765048][T22112]  ? set_page_refcounted+0xa0/0x1e0
[ 1017.765075][T22112]  ? binder_alloc_new_buf+0x1e55/0x2fa0
[ 1017.765102][T22112]  binder_alloc_new_buf+0x1e55/0x2fa0
[ 1017.765149][T22112]  ? __pfx_binder_alloc_new_buf+0x10/0x10
[ 1017.765170][T22112]  ? __kmalloc_cache_noprof+0x3e2/0x700
[ 1017.765194][T22112]  binder_transaction+0x23a4/0x6430
[ 1017.765248][T22112]  ? __lock_acquire+0x6b6/0x2cf0
[ 1017.765273][T22112]  ? __pfx_binder_transaction+0x10/0x10
[ 1017.765313][T22112]  ? __might_fault+0xb0/0x130
[ 1017.765357][T22112]  binder_ioctl_write_read+0xd5a/0x9f60
[ 1017.765399][T22112]  ? __kernel_text_address+0xd/0x40
[ 1017.765424][T22112]  ? arch_stack_walk+0xfc/0x150
[ 1017.765454][T22112]  ? __pfx_binder_ioctl_write_read+0x10/0x10
[ 1017.765476][T22112]  ? stack_trace_save+0x9c/0xe0
[ 1017.765504][T22112]  ? stack_depot_save_flags+0x40/0x850
[ 1017.765525][T22112]  ? format_decode+0x70/0xe10
[ 1017.765551][T22112]  ? __lock_acquire+0x6b6/0x2cf0
[ 1017.765572][T22112]  ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1017.765611][T22112]  ? __pfx_binder_debug+0x10/0x10
[ 1017.765631][T22112]  ? do_raw_spin_lock+0x121/0x290
[ 1017.765667][T22112]  ? _raw_spin_unlock+0x28/0x50
[ 1017.765687][T22112]  ? binder_get_thread+0x178/0x6d0
[ 1017.765714][T22112]  binder_ioctl+0x3c5/0x19d0
[ 1017.765752][T22112]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1017.765778][T22112]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1017.765802][T22112]  ? do_vfs_ioctl+0xbe8/0x1430
[ 1017.765820][T22112]  ? __pfx_binder_ioctl+0x10/0x10
[ 1017.765842][T22112]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1017.765891][T22112]  ? __fget_files+0x2a/0x420
[ 1017.765916][T22112]  ? __fget_files+0x3a0/0x420
[ 1017.765935][T22112]  ? __fget_files+0x2a/0x420
[ 1017.765958][T22112]  ? bpf_lsm_file_ioctl_compat+0x9/0x20
[ 1017.765981][T22112]  __ia32_compat_sys_ioctl+0x543/0x840
[ 1017.766000][T22112]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[ 1017.766018][T22112]  ? __fget_files+0x3a0/0x420
[ 1017.766043][T22112]  ? fput+0xa0/0xd0
[ 1017.766070][T22112]  ? ksys_write+0x22a/0x250
[ 1017.766084][T22112]  ? exc_page_fault+0x82/0x100
[ 1017.766107][T22112]  ? __pfx_ksys_write+0x10/0x10
[ 1017.766126][T22112]  ? __do_fast_syscall_32+0xbe/0x570
[ 1017.766144][T22112]  __do_fast_syscall_32+0x1f7/0x570
[ 1017.766162][T22112]  ? rcu_is_watching+0x15/0xb0
[ 1017.766181][T22112]  ? do_fast_syscall_32+0x34/0x80
[ 1017.766202][T22112]  do_fast_syscall_32+0x34/0x80
[ 1017.766219][T22112]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1017.766238][T22112] RIP: 0023:0xf6ffd539
[ 1017.766253][T22112] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1017.766268][T22112] RSP: 002b:00000000f53ed55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[ 1017.766287][T22112] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0306201
[ 1017.766301][T22112] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000
[ 1017.766313][T22112] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1017.766324][T22112] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1017.766334][T22112] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1017.766360][T22112]  </TASK>
[ 1018.241496][T22115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1018.251209][T22117] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5088'.
[ 1018.268401][T22117] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5088'.
[ 1018.278549][T22117] netlink: 'syz.2.5088': attribute type 1 has an invalid length.
[ 1018.320193][T22115] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1018.545989][T22134] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5095'.
[ 1018.557048][T22134] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5095'.
[ 1018.568334][T22134] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5095'.
[ 1018.615612][T22136] netlink: 'syz.5.5096': attribute type 4 has an invalid length.
[ 1018.696334][T19440] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[ 1018.850145][T19440] usb 3-1: Using ep0 maxpacket: 8
[ 1018.865881][T19440] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[ 1018.894111][T19440] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1018.937271][T19440] pvrusb2: Hardware description: Terratec Grabster AV400
[ 1018.947121][T19440] pvrusb2: **********
[ 1018.951111][T19440] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[ 1018.961246][T19440] pvrusb2: Important functionality might not be entirely working.
[ 1018.969457][T19440] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[ 1018.981908][T19440] pvrusb2: **********
[ 1019.138575][ T2345] pvrusb2: Invalid write control endpoint
[ 1019.201002][   T30] audit: type=1326 audit(1765491349.313:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22141 comm="syz.3.5098" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x0
[ 1019.239976][ T2345] pvrusb2: Invalid write control endpoint
[ 1019.248814][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[ 1019.260163][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[ 1019.268758][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[ 1019.280577][ T2345] pvrusb2: Device being rendered inoperable
[ 1019.290311][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[ 1019.298682][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[ 1019.317358][ T2345] pvrusb2: Attached sub-driver cx25840
[ 1019.323279][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[ 1019.335924][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[ 1019.342083][T22129] pvrusb2: Attempted to execute control transfer when device not ok
[ 1019.378002][    T9] usb 3-1: USB disconnect, device number 59
[ 1019.433107][T19440] usb 2-1: USB disconnect, device number 64
[ 1020.370362][T22169] FAULT_INJECTION: forcing a failure.
[ 1020.370362][T22169] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1020.441688][T22169] CPU: 1 UID: 0 PID: 22169 Comm: syz.3.5105 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1020.441708][T22169] Tainted: [L]=SOFTLOCKUP
[ 1020.441712][T22169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1020.441718][T22169] Call Trace:
[ 1020.441723][T22169]  <TASK>
[ 1020.441728][T22169]  dump_stack_lvl+0x189/0x250
[ 1020.441745][T22169]  ? __pfx____ratelimit+0x10/0x10
[ 1020.441763][T22169]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1020.441775][T22169]  ? __pfx__printk+0x10/0x10
[ 1020.441795][T22169]  should_fail_ex+0x414/0x560
[ 1020.441811][T22169]  _copy_to_user+0x31/0xb0
[ 1020.441823][T22169]  drm_ioctl+0x6a4/0xb10
[ 1020.441839][T22169]  ? __pfx_drm_setversion+0x10/0x10
[ 1020.441856][T22169]  ? __pfx_drm_ioctl+0x10/0x10
[ 1020.441875][T22169]  ? __fget_files+0x3a0/0x420
[ 1020.441887][T22169]  ? __fget_files+0x2a/0x420
[ 1020.441898][T22169]  ? drm_compat_ioctl+0x112/0x330
[ 1020.441908][T22169]  ? bpf_lsm_file_ioctl_compat+0x9/0x20
[ 1020.441922][T22169]  __ia32_compat_sys_ioctl+0x543/0x840
[ 1020.441934][T22169]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[ 1020.441944][T22169]  ? __fget_files+0x3a0/0x420
[ 1020.441959][T22169]  ? fput+0xa0/0xd0
[ 1020.441972][T22169]  ? ksys_write+0x22a/0x250
[ 1020.441981][T22169]  ? exc_page_fault+0x82/0x100
[ 1020.441995][T22169]  ? __pfx_ksys_write+0x10/0x10
[ 1020.442007][T22169]  ? __do_fast_syscall_32+0xbe/0x570
[ 1020.442019][T22169]  __do_fast_syscall_32+0x1f7/0x570
[ 1020.442028][T22169]  ? rcu_is_watching+0x15/0xb0
[ 1020.442040][T22169]  ? do_fast_syscall_32+0x34/0x80
[ 1020.442051][T22169]  do_fast_syscall_32+0x34/0x80
[ 1020.442061][T22169]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1020.442073][T22169] RIP: 0023:0xf70ed539
[ 1020.442083][T22169] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1020.442092][T22169] RSP: 002b:00000000f54dd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[ 1020.442104][T22169] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0106407
[ 1020.442112][T22169] RDX: 0000000080000dc0 RSI: 0000000000000000 RDI: 0000000000000000
[ 1020.442118][T22169] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1020.442124][T22169] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1020.442130][T22169] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1020.442145][T22169]  </TASK>
[ 1020.736423][T22173] FAULT_INJECTION: forcing a failure.
[ 1020.736423][T22173] name failslab, interval 1, probability 0, space 0, times 0
[ 1020.749394][T22173] CPU: 1 UID: 0 PID: 22173 Comm: syz.3.5110 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1020.749411][T22173] Tainted: [L]=SOFTLOCKUP
[ 1020.749416][T22173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1020.749422][T22173] Call Trace:
[ 1020.749427][T22173]  <TASK>
[ 1020.749432][T22173]  dump_stack_lvl+0x189/0x250
[ 1020.749450][T22173]  ? __pfx____ratelimit+0x10/0x10
[ 1020.749464][T22173]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1020.749476][T22173]  ? __pfx__printk+0x10/0x10
[ 1020.749491][T22173]  ? __pfx___might_resched+0x10/0x10
[ 1020.749503][T22173]  ? fs_reclaim_acquire+0x7d/0x100
[ 1020.749517][T22173]  should_fail_ex+0x414/0x560
[ 1020.749534][T22173]  should_failslab+0xa8/0x100
[ 1020.749548][T22173]  __kmalloc_noprof+0xdf/0x800
[ 1020.749558][T22173]  ? io_cache_alloc_new+0x40/0x100
[ 1020.749582][T22173]  io_cache_alloc_new+0x40/0x100
[ 1020.749596][T22173]  __io_prep_rw+0x23f/0xe00
[ 1020.749612][T22173]  ? __pfx___io_prep_rw+0x10/0x10
[ 1020.749622][T22173]  ? percpu_ref_get_many+0x21/0x1e0
[ 1020.749643][T22173]  ? percpu_ref_get_many+0x21/0x1e0
[ 1020.749662][T22173]  io_prep_rwv+0x91/0x3e0
[ 1020.749673][T22173]  ? __pfx___io_alloc_req_refill+0x10/0x10
[ 1020.749685][T22173]  ? __pfx_io_prep_rwv+0x10/0x10
[ 1020.749702][T22173]  io_submit_sqes+0xad3/0x2140
[ 1020.749734][T22173]  __se_sys_io_uring_enter+0x2e0/0x2b60
[ 1020.749745][T22173]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[ 1020.749761][T22173]  ? vfs_write+0x956/0xb30
[ 1020.749777][T22173]  ? ksys_write+0x1cb/0x250
[ 1020.749788][T22173]  ? __pfx___se_sys_io_uring_enter+0x10/0x10
[ 1020.749798][T22173]  ? __mutex_unlock_slowpath+0x1a1/0x730
[ 1020.749813][T22173]  ? __pfx_vfs_write+0x10/0x10
[ 1020.749824][T22173]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1020.749841][T22173]  ? __fget_files+0x3a0/0x420
[ 1020.749857][T22173]  ? fput+0xa0/0xd0
[ 1020.749870][T22173]  ? ksys_write+0x22a/0x250
[ 1020.749879][T22173]  ? exc_page_fault+0x82/0x100
[ 1020.749892][T22173]  ? __pfx_ksys_write+0x10/0x10
[ 1020.749904][T22173]  ? __ia32_sys_io_uring_enter+0x21/0xf0
[ 1020.749917][T22173]  __do_fast_syscall_32+0x1f7/0x570
[ 1020.749927][T22173]  ? rcu_is_watching+0x15/0xb0
[ 1020.749939][T22173]  ? do_fast_syscall_32+0x34/0x80
[ 1020.749951][T22173]  do_fast_syscall_32+0x34/0x80
[ 1020.749960][T22173]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1020.749972][T22173] RIP: 0023:0xf70ed539
[ 1020.749982][T22173] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1020.749991][T22173] RSP: 002b:00000000f54dd55c EFLAGS: 00000206 ORIG_RAX: 00000000000001aa
[ 1020.750003][T22173] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000047f6
[ 1020.750010][T22173] RDX: 0000000000000030 RSI: 0000000000000000 RDI: 0000000000000000
[ 1020.750016][T22173] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1020.750022][T22173] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1020.750028][T22173] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1020.750043][T22173]  </TASK>
[ 1021.465211][ T5895] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[ 1021.625420][ T5895] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1021.725404][ T5895] usb 2-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4
[ 1021.734551][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1021.757048][ T5895] usb 2-1: config 0 descriptor??
[ 1021.784537][ T5895] rndis_host 2-1:0.0: probe with driver rndis_host failed with error -22
[ 1021.990076][   T30] audit: type=1326 audit(1765491352.103:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22188 comm="syz.5.5116" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff3539 code=0x0
[ 1022.558336][T15302] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[ 1022.737877][T22208] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1022.865307][T15302] usb 3-1: device descriptor read/64, error -71
[ 1022.971276][T22210] fuse: Bad value for 'fd'
[ 1023.105640][T15302] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[ 1023.245281][T15302] usb 3-1: device descriptor read/64, error -71
[ 1023.308768][T22213] bond0: entered promiscuous mode
[ 1023.313870][T22213] bond_slave_0: entered promiscuous mode
[ 1023.319893][T22213] bond_slave_1: entered promiscuous mode
[ 1023.326800][T22213] bond1: entered promiscuous mode
[ 1023.370362][T15302] usb usb3-port1: attempt power cycle
[ 1023.788862][T15302] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[ 1023.847819][T15302] usb 3-1: device descriptor read/8, error -71
[ 1024.085336][T15302] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[ 1024.176046][T15302] usb 3-1: device descriptor read/8, error -71
[ 1024.298967][T15302] usb usb3-port1: unable to enumerate USB device
[ 1024.490547][T15302] usb 2-1: USB disconnect, device number 65
[ 1025.460903][T22236] vcan0: tx drop: invalid da for name 0x0000000000000002
[ 1026.240802][T22256] usb usb8: usbfs: process 22256 (syz.3.5136) did not claim interface 0 before use
[ 1026.271545][T22256] usb usb8: selecting invalid altsetting 3
[ 1026.311841][T22254] binder: 22253:22254 ioctl c0306201 800003c0 returned -14
[ 1026.322868][T22255] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1026.385405][ T5895] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[ 1026.480544][T22262] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1026.515398][ T5895] usb 6-1: device descriptor read/64, error -71
[ 1026.578495][T22267] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1026.585661][T22267] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1026.706321][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805d5d0800: rx timeout, send abort
[ 1026.965308][ T5895] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[ 1027.105594][ T5895] usb 6-1: device descriptor read/64, error -71
[ 1027.214611][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805d5d0800: abort rx timeout. Force session deactivation
[ 1027.225503][ T5895] usb usb6-port1: attempt power cycle
[ 1027.611616][ T5895] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[ 1027.656623][ T5895] usb 6-1: device descriptor read/8, error -71
[ 1027.915287][ T5895] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[ 1027.939670][ T5895] usb 6-1: device descriptor read/8, error -71
[ 1028.055587][ T5895] usb usb6-port1: unable to enumerate USB device
[ 1028.579908][T22306] FAULT_INJECTION: forcing a failure.
[ 1028.579908][T22306] name failslab, interval 1, probability 0, space 0, times 0
[ 1028.595580][T22306] CPU: 1 UID: 0 PID: 22306 Comm: syz.3.5152 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1028.595609][T22306] Tainted: [L]=SOFTLOCKUP
[ 1028.595617][T22306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1028.595627][T22306] Call Trace:
[ 1028.595635][T22306]  <TASK>
[ 1028.595642][T22306]  dump_stack_lvl+0x189/0x250
[ 1028.595667][T22306]  ? __pfx____ratelimit+0x10/0x10
[ 1028.595690][T22306]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1028.595709][T22306]  ? __pfx__printk+0x10/0x10
[ 1028.595736][T22306]  ? __pfx___might_resched+0x10/0x10
[ 1028.595755][T22306]  ? fs_reclaim_acquire+0x7d/0x100
[ 1028.595777][T22306]  should_fail_ex+0x414/0x560
[ 1028.595804][T22306]  should_failslab+0xa8/0x100
[ 1028.595823][T22306]  kmem_cache_alloc_node_noprof+0x8c/0x720
[ 1028.595848][T22306]  ? __alloc_skb+0x255/0x430
[ 1028.595872][T22306]  ? napi_skb_cache_get+0x4a5/0x780
[ 1028.595893][T22306]  ? napi_skb_cache_get+0x151/0x780
[ 1028.595920][T22306]  __alloc_skb+0x255/0x430
[ 1028.595944][T22306]  ? __pfx___alloc_skb+0x10/0x10
[ 1028.595966][T22306]  ? netlink_autobind+0xdb/0x300
[ 1028.595984][T22306]  ? netlink_autobind+0x2c2/0x300
[ 1028.596009][T22306]  netlink_sendmsg+0x5c6/0xb30
[ 1028.596039][T22306]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1028.596062][T22306]  ? __import_iovec+0x5d4/0x7f0
[ 1028.596080][T22306]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1028.596102][T22306]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1028.596121][T22306]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1028.596142][T22306]  __sock_sendmsg+0x21c/0x270
[ 1028.596167][T22306]  ____sys_sendmsg+0x505/0x820
[ 1028.596200][T22306]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1028.596224][T22306]  ? kstrtouint+0x6e/0xe0
[ 1028.596254][T22306]  ___sys_sendmsg+0x21f/0x2a0
[ 1028.596275][T22306]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1028.596317][T22306]  ? rcu_read_lock_any_held+0xb3/0x120
[ 1028.596363][T22306]  ? __fget_files+0x2a/0x420
[ 1028.596387][T22306]  ? __fget_files+0x3a0/0x420
[ 1028.596416][T22306]  __sys_sendmsg+0x164/0x220
[ 1028.596438][T22306]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1028.596466][T22306]  ? __pfx_ksys_write+0x10/0x10
[ 1028.596488][T22306]  ? __do_fast_syscall_32+0xbe/0x570
[ 1028.596510][T22306]  __do_fast_syscall_32+0x1f7/0x570
[ 1028.596529][T22306]  ? rcu_is_watching+0x15/0xb0
[ 1028.596548][T22306]  ? do_fast_syscall_32+0x34/0x80
[ 1028.596571][T22306]  do_fast_syscall_32+0x34/0x80
[ 1028.596589][T22306]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1028.596611][T22306] RIP: 0023:0xf70ed539
[ 1028.596627][T22306] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1028.596644][T22306] RSP: 002b:00000000f54bc55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 1028.596664][T22306] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000
[ 1028.596677][T22306] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1028.596688][T22306] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1028.596699][T22306] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1028.596711][T22306] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1028.596740][T22306]  </TASK>
[ 1029.263831][T22310] PKCS7: Unknown OID: [5] (bad)
[ 1029.269707][T22310] PKCS7: Only support pkcs7_signedData type
[ 1029.334251][T22313] bridge3: entered allmulticast mode
[ 1030.775226][ T6703] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[ 1030.905279][ T6703] usb 2-1: device descriptor read/64, error -71
[ 1030.975395][ T6718] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[ 1031.096683][T22360] __nla_validate_parse: 3 callbacks suppressed
[ 1031.096732][T22360] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5172'.
[ 1031.145340][ T6703] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[ 1031.166026][ T6718] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1031.176390][ T6718] usb 6-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4
[ 1031.185888][ T6718] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1031.199267][ T6718] usb 6-1: config 0 descriptor??
[ 1031.208009][ T6718] rndis_host 6-1:0.0: probe with driver rndis_host failed with error -22
[ 1031.275203][ T6703] usb 2-1: device descriptor read/64, error -71
[ 1031.288984][T22360] 8021q: VLANs not supported on ip6tnl0
[ 1031.385679][ T6703] usb usb2-port1: attempt power cycle
[ 1031.725302][ T6703] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[ 1031.755829][ T6703] usb 2-1: device descriptor read/8, error -71
[ 1031.998278][ T6703] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[ 1032.031827][ T6703] usb 2-1: device descriptor read/8, error -71
[ 1032.146833][ T6703] usb usb2-port1: unable to enumerate USB device
[ 1033.748423][T22390] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5181'.
[ 1033.970738][T22397] loop2: detected capacity change from 0 to 7
[ 1033.994715][T22397] Dev loop2: unable to read RDB block 7
[ 1034.007686][T22397]  loop2: unable to read partition table
[ 1034.014441][T22397] loop2: partition table beyond EOD, truncated
[ 1034.020899][T22397] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1034.286774][ T6718] usb 6-1: USB disconnect, device number 24
[ 1035.494224][T22429] bridge0: port 3(syz_tun) entered blocking state
[ 1035.627113][T22429] bridge0: port 3(syz_tun) entered disabled state
[ 1035.767772][T22429] syz_tun: entered allmulticast mode
[ 1036.140006][T22429] syz_tun: entered promiscuous mode
[ 1036.151493][T22429] bridge0: port 3(syz_tun) entered blocking state
[ 1036.158051][T22429] bridge0: port 3(syz_tun) entered forwarding state
[ 1036.605227][T15302] usb 2-1: new high-speed USB device number 70 using dummy_hcd
[ 1036.759122][T15302] usb 2-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1
[ 1036.768531][T15302] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1036.801840][T15302] usb 2-1: Product: syz
[ 1036.809365][T15302] usb 2-1: Manufacturer: syz
[ 1036.820699][T15302] usb 2-1: SerialNumber: syz
[ 1036.833336][T15302] usb 2-1: config 0 descriptor??
[ 1037.057399][T15302] int51x1 2-1:0.0: probe with driver int51x1 failed with error -22
[ 1037.105266][ T6718] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[ 1037.316960][ T6718] usb 3-1: Using ep0 maxpacket: 32
[ 1037.323658][    T9] usb 2-1: USB disconnect, device number 70
[ 1037.324659][ T6718] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[ 1037.360769][ T6718] usb 3-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb
[ 1037.375250][ T6718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1037.383422][ T6718] usb 3-1: Product: syz
[ 1037.387686][ T6718] usb 3-1: Manufacturer: syz
[ 1037.392254][ T6718] usb 3-1: SerialNumber: syz
[ 1037.400134][ T6718] usb 3-1: config 0 descriptor??
[ 1037.419095][ T6718] usbtouchscreen 3-1:0.0: probe with driver usbtouchscreen failed with error -12
[ 1037.659935][T22453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1037.676056][T22453] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1037.694020][T22453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5204'.
[ 1037.754449][ T6718] usb 3-1: USB disconnect, device number 64
[ 1037.927324][T22461] tc_dump_action: action bad kind
[ 1037.984533][T22461] [U] 
[ 1038.148165][ T6718] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[ 1038.295270][ T6718] usb 3-1: device descriptor read/64, error -71
[ 1038.467471][T22474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1038.482000][T22474] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1038.535227][ T6718] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[ 1038.696107][ T6718] usb 3-1: device descriptor read/64, error -71
[ 1038.905353][ T6718] usb usb3-port1: attempt power cycle
[ 1039.275268][ T6718] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[ 1039.297643][ T6718] usb 3-1: device descriptor read/8, error -71
[ 1039.605235][ T6718] usb 3-1: new high-speed USB device number 68 using dummy_hcd
[ 1039.626111][ T6718] usb 3-1: device descriptor read/8, error -71
[ 1039.735808][ T6718] usb usb3-port1: unable to enumerate USB device
[ 1040.425587][ T6718] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[ 1040.458420][T22497] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1040.662852][ T6718] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[ 1040.688394][ T6718] usb 6-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08
[ 1040.697793][ T6718] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1040.709376][ T6718] usb 6-1: Product: syz
[ 1040.715846][ T6718] usb 6-1: Manufacturer: syz
[ 1040.771276][ T6718] usb 6-1: SerialNumber: syz
[ 1040.789338][ T6718] usb 6-1: config 0 descriptor??
[ 1040.804598][ T6718] gm12u320 6-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -8
[ 1040.817974][ T6718] gm12u320 6-1:0.0: probe with driver gm12u320 failed with error -5
[ 1040.902692][ T6718] usb-storage 6-1:0.0: USB Mass Storage device detected
[ 1040.977357][ T6718] usb-storage 6-1:0.0: device ignored
[ 1041.635204][ T5895] usb 3-1: new high-speed USB device number 69 using dummy_hcd
[ 1041.726195][    T9] usb 6-1: USB disconnect, device number 25
[ 1041.814217][ T5895] usb 3-1: config 0 has no interfaces?
[ 1041.828252][ T5895] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1041.837742][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1041.851146][ T5895] usb 3-1: Product: syz
[ 1041.861699][ T5895] usb 3-1: Manufacturer: syz
[ 1041.876282][ T5895] usb 3-1: SerialNumber: syz
[ 1041.896977][ T5895] usb 3-1: config 0 descriptor??
[ 1042.139377][T15302] usb 3-1: USB disconnect, device number 69
[ 1042.301405][T22520] FAULT_INJECTION: forcing a failure.
[ 1042.301405][T22520] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1042.335676][T22520] CPU: 1 UID: 0 PID: 22520 Comm: syz.1.5228 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1042.335694][T22520] Tainted: [L]=SOFTLOCKUP
[ 1042.335699][T22520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1042.335705][T22520] Call Trace:
[ 1042.335710][T22520]  <TASK>
[ 1042.335716][T22520]  dump_stack_lvl+0x189/0x250
[ 1042.335733][T22520]  ? __pfx____ratelimit+0x10/0x10
[ 1042.335748][T22520]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1042.335760][T22520]  ? __pfx__printk+0x10/0x10
[ 1042.335775][T22520]  ? __might_fault+0xb0/0x130
[ 1042.335795][T22520]  should_fail_ex+0x414/0x560
[ 1042.335831][T22520]  _copy_from_user+0x2d/0xb0
[ 1042.335843][T22520]  __ia32_compat_sys_ioctl+0x2d5/0x840
[ 1042.335856][T22520]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[ 1042.335873][T22520]  ? ksys_write+0x1e1/0x250
[ 1042.335885][T22520]  ? __pfx_ksys_write+0x10/0x10
[ 1042.335896][T22520]  ? __do_fast_syscall_32+0xbe/0x570
[ 1042.335908][T22520]  __do_fast_syscall_32+0x1f7/0x570
[ 1042.335918][T22520]  ? rcu_is_watching+0x15/0xb0
[ 1042.335930][T22520]  ? do_fast_syscall_32+0x34/0x80
[ 1042.335942][T22520]  do_fast_syscall_32+0x34/0x80
[ 1042.335951][T22520]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1042.335963][T22520] RIP: 0023:0xf707d539
[ 1042.335972][T22520] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1042.335982][T22520] RSP: 002b:00000000f546d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[ 1042.335993][T22520] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000402c5828
[ 1042.336000][T22520] RDX: 0000000080001e80 RSI: 0000000000000000 RDI: 0000000000000000
[ 1042.336006][T22520] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1042.336012][T22520] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1042.336018][T22520] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1042.336033][T22520]  </TASK>
[ 1042.665326][T15302] usb 6-1: new full-speed USB device number 26 using dummy_hcd
[ 1042.837070][T15302] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[ 1042.852035][T15302] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[ 1042.862548][T15302] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1042.882006][T15302] usb 6-1: config 0 descriptor??
[ 1042.887541][T22518] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1042.925667][T22526] PKCS7: Unknown OID: [5] (bad)
[ 1042.945506][T22526] PKCS7: Only support pkcs7_signedData type
[ 1043.072061][T22532] netlink: 'syz.0.5233': attribute type 10 has an invalid length.
[ 1043.412690][T22361] syz.3.5172 (22361) used greatest stack depth: 17856 bytes left
[ 1043.466617][T22537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1043.480863][T22537] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1043.535023][T22518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1043.553970][T22518] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1043.582889][T22518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1043.649133][T22518] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1043.816851][T22558] wg1: entered promiscuous mode
[ 1043.835266][T22558] wg1: entered allmulticast mode
[ 1045.245314][    T9] usb 3-1: new high-speed USB device number 70 using dummy_hcd
[ 1045.395189][    T9] usb 3-1: Using ep0 maxpacket: 32
[ 1045.402379][    T9] usb 3-1: config 247 has an invalid interface number: 193 but max is 0
[ 1045.411150][    T9] usb 3-1: config 247 has no interface number 0
[ 1045.417489][    T9] usb 3-1: config 247 interface 193 has no altsetting 0
[ 1045.430946][    T9] usb 3-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=f1.05
[ 1045.440184][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1045.448605][    T9] usb 3-1: Product: syz
[ 1045.452965][    T9] usb 3-1: Manufacturer: syz
[ 1045.457742][    T9] usb 3-1: SerialNumber: syz
[ 1045.677526][    T9] pegasus 3-1:247.193: probe with driver pegasus failed with error -71
[ 1045.701902][    T9] usb 3-1: USB disconnect, device number 70
[ 1046.641047][T22584] loop2: detected capacity change from 0 to 7
[ 1046.648320][T22584] Dev loop2: unable to read RDB block 7
[ 1046.654668][T22584]  loop2: unable to read partition table
[ 1046.660829][T22584] loop2: partition table beyond EOD, truncated
[ 1046.685459][T22584] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1046.907040][T22590] FAULT_INJECTION: forcing a failure.
[ 1046.907040][T22590] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1047.036070][T22590] CPU: 0 UID: 0 PID: 22590 Comm: syz.3.5251 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1047.036093][T22590] Tainted: [L]=SOFTLOCKUP
[ 1047.036097][T22590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1047.036103][T22590] Call Trace:
[ 1047.036108][T22590]  <TASK>
[ 1047.036114][T22590]  dump_stack_lvl+0x189/0x250
[ 1047.036131][T22590]  ? __pfx____ratelimit+0x10/0x10
[ 1047.036152][T22590]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1047.036173][T22590]  ? __pfx__printk+0x10/0x10
[ 1047.036210][T22590]  should_fail_ex+0x414/0x560
[ 1047.036235][T22590]  _copy_from_user+0x2d/0xb0
[ 1047.036247][T22590]  sctp_setsockopt+0x1c4/0x12c0
[ 1047.036262][T22590]  ? sock_common_setsockopt+0x36/0xc0
[ 1047.036276][T22590]  ? __pfx_sock_common_setsockopt+0x10/0x10
[ 1047.036289][T22590]  do_sock_setsockopt+0x17c/0x1b0
[ 1047.036311][T22590]  __ia32_sys_setsockopt+0x13f/0x1b0
[ 1047.036335][T22590]  __do_fast_syscall_32+0x1f7/0x570
[ 1047.036353][T22590]  ? rcu_is_watching+0x15/0xb0
[ 1047.036373][T22590]  ? do_fast_syscall_32+0x34/0x80
[ 1047.036389][T22590]  do_fast_syscall_32+0x34/0x80
[ 1047.036398][T22590]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1047.036411][T22590] RIP: 0023:0xf70ed539
[ 1047.036421][T22590] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1047.036430][T22590] RSP: 002b:00000000f54dd55c EFLAGS: 00000206 ORIG_RAX: 000000000000016e
[ 1047.036444][T22590] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000084
[ 1047.036456][T22590] RDX: 0000000000000018 RSI: 0000000080000240 RDI: 0000000000000008
[ 1047.036468][T22590] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1047.036479][T22590] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1047.036489][T22590] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1047.036526][T22590]  </TASK>
[ 1048.088071][T22606] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5260'.
[ 1048.115311][T22606] openvswitch: netlink: Flow key attr not present in new flow.
[ 1048.356942][T15302] usbhid 6-1:0.0: can't add hid device: -32
[ 1048.365647][T15302] usbhid 6-1:0.0: probe with driver usbhid failed with error -32
[ 1049.092014][T22624] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5265'.
[ 1049.403653][T15302] usb 6-1: USB disconnect, device number 26
[ 1049.544236][T22618] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1049.563443][T22618] Bluetooth: hci5: Opcode 0x0406 failed: -4
[ 1049.604203][T22618] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1049.635585][T22618] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 1049.706351][T22618] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1049.713381][T22618] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 1049.843130][T22618] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1049.868117][T22618] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1049.894377][T22618] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1049.909373][T22618] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 1049.950764][T22618] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 1050.827540][ T5832] Bluetooth: hci5: command 0x0406 tx timeout
[ 1051.456727][T22652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5275'.
[ 1051.635244][ T5832] Bluetooth: hci0: command 0x0406 tx timeout
[ 1051.705582][ T5832] Bluetooth: hci4: command 0x0406 tx timeout
[ 1051.775625][T22656] IPVS: length: 218 != 24
[ 1051.785918][T22656] syz_tun: entered allmulticast mode
[ 1051.875196][ T5832] Bluetooth: hci3: command 0x0406 tx timeout
[ 1051.947049][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1052.009531][T22655] syz_tun: left allmulticast mode
[ 1052.045318][    T9] usb 3-1: new high-speed USB device number 71 using dummy_hcd
[ 1052.296187][    T9] usb 3-1: Using ep0 maxpacket: 16
[ 1052.303008][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1052.314489][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1052.348739][    T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c091, bcdDevice= 0.00
[ 1052.361233][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1052.380293][    T9] usb 3-1: config 0 descriptor??
[ 1052.600006][T22661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1052.625760][T22661] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1052.770072][T22669] netlink: 'syz.0.5282': attribute type 4 has an invalid length.
[ 1052.873445][    T9] logitech-hidpp-device 0003:046D:C091.0080: item fetching failed at offset 1/5
[ 1052.905223][ T5832] Bluetooth: hci5: command 0x0406 tx timeout
[ 1052.934161][    T9] logitech-hidpp-device 0003:046D:C091.0080: hidpp_probe:parse failed
[ 1052.942751][    T9] logitech-hidpp-device 0003:046D:C091.0080: probe with driver logitech-hidpp-device failed with error -22
[ 1053.084322][    T9] usb 3-1: USB disconnect, device number 71
[ 1053.241417][T22677] syzkaller0: entered promiscuous mode
[ 1053.246974][T22677] syzkaller0: entered allmulticast mode
[ 1053.711125][ T5832] Bluetooth: hci0: command 0x0406 tx timeout
[ 1053.731505][T22685] openvswitch: netlink: Tunnel attr 152 out of range max 16
[ 1053.785402][ T5832] Bluetooth: hci4: command 0x0406 tx timeout
[ 1053.957884][ T5832] Bluetooth: hci3: command 0x0406 tx timeout
[ 1053.975609][ T5895] usb 3-1: new high-speed USB device number 72 using dummy_hcd
[ 1054.025426][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1054.118849][T22694] PKCS7: Unknown OID: [5] (bad)
[ 1054.123727][T22694] PKCS7: Only support pkcs7_signedData type
[ 1054.166704][ T5895] usb 3-1: Using ep0 maxpacket: 16
[ 1054.173351][ T5895] usb 3-1: config 1 interface 0 altsetting 247 has an endpoint descriptor with address 0xAF, changing to 0x8F
[ 1054.189685][ T5895] usb 3-1: config 1 interface 0 altsetting 247 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1054.202353][ T5895] usb 3-1: config 1 interface 0 altsetting 247 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1054.213107][ T5895] usb 3-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1054.226469][ T5895] usb 3-1: config 1 interface 0 has no altsetting 0
[ 1054.235626][ T5895] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.51
[ 1054.244846][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1054.254186][ T5895] usb 3-1: Product: syz
[ 1054.258698][ T5895] usb 3-1: Manufacturer: syz
[ 1054.263340][ T5895] usb 3-1: SerialNumber: syz
[ 1054.350855][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.357455][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 1055.530757][T22715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1055.539613][T22715] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1056.108205][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1056.345242][ T5895] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[ 1056.516864][ T5895] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1056.527495][ T5895] usb 6-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4
[ 1056.546944][ T5895] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1056.558780][ T5895] usb 6-1: config 0 descriptor??
[ 1056.573635][ T5895] rndis_host 6-1:0.0: probe with driver rndis_host failed with error -22
[ 1056.729136][ T5895] usb 3-1: USB disconnect, device number 72
[ 1057.545431][    T9] usb 2-1: new high-speed USB device number 71 using dummy_hcd
[ 1057.707961][    T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1057.719683][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1057.731404][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1057.743909][    T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1057.758783][    T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1057.768045][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1057.778292][    T9] usb 2-1: config 0 descriptor??
[ 1058.561381][    T9] plantronics 0003:047F:FFFF.0081: ignoring exceeding usage max
[ 1058.580423][    T9] plantronics 0003:047F:FFFF.0081: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[ 1058.667426][    T9] usb 6-1: USB disconnect, device number 27
[ 1059.155312][T22757] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1059.161943][T22757] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1059.168661][T22757] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1059.175006][T22757] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1059.181734][T22757] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1059.334240][T22781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5316'.
[ 1059.343386][T22781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5316'.
[ 1059.355629][T22781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5316'.
[ 1059.797118][T22795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1059.806091][T22795] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1059.939492][T22795] 8021q: adding VLAN 0 to HW filter on device macvlan0
[ 1059.988612][T22797] 8021q: adding VLAN 0 to HW filter on device macvlan0
[ 1060.505234][ T5832] Bluetooth: hci5: command 0x0406 tx timeout
[ 1060.670582][ T5895] usb 2-1: USB disconnect, device number 71
[ 1061.236731][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1061.236754][ T5836] Bluetooth: hci3: command 0x0406 tx timeout
[ 1061.248894][ T5832] Bluetooth: hci4: command 0x0406 tx timeout
[ 1061.248910][ T5836] Bluetooth: hci0: command 0x0406 tx timeout
[ 1061.330162][T22813] PKCS7: Unknown OID: [5] (bad)
[ 1061.338009][T22813] PKCS7: Only support pkcs7_signedData type
[ 1061.728539][T22819] fuse: Unknown parameter 'rootYode'
[ 1061.806163][T22821] sctp: [Deprecated]: syz.5.5330 (pid 22821) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1061.806163][T22821] Use struct sctp_sack_info instead
[ 1062.045330][ T6718] usb 3-1: new high-speed USB device number 73 using dummy_hcd
[ 1062.115004][T22832] binder: 22831:22832 ioctl c0306201 80000080 returned -14
[ 1062.159126][T22835] netlink: 'syz.0.5335': attribute type 10 has an invalid length.
[ 1062.168757][T22835] team0: Device wlan1 is up. Set it down before adding it as a team port
[ 1062.206943][ T6718] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1062.222425][ T6718] usb 3-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4
[ 1062.239253][ T6718] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1062.257640][ T6718] usb 3-1: config 0 descriptor??
[ 1062.271428][ T6718] rndis_host 3-1:0.0: probe with driver rndis_host failed with error -22
[ 1063.855666][T22872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5344'.
[ 1064.425485][T15809] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[ 1064.695886][T15809] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[ 1064.716415][T15809] usb 6-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08
[ 1064.725705][T15809] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1064.733674][T15809] usb 6-1: Product: syz
[ 1064.765589][T15809] usb 6-1: Manufacturer: syz
[ 1064.775438][T15809] usb 6-1: SerialNumber: syz
[ 1064.827818][T15809] usb 6-1: config 0 descriptor??
[ 1064.865775][ T6703] usb 3-1: USB disconnect, device number 73
[ 1064.868501][T15809] gm12u320 6-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -8
[ 1064.905294][T15809] gm12u320 6-1:0.0: probe with driver gm12u320 failed with error -5
[ 1064.927900][T15809] usb-storage 6-1:0.0: USB Mass Storage device detected
[ 1064.970264][T15809] usb-storage 6-1:0.0: device ignored
[ 1065.117136][T22884] bond5: option lacp_rate: mode dependency failed, not supported in mode balance-tlb(5)
[ 1065.151886][T22884] bond5 (unregistering): Released all slaves
[ 1065.555039][T15809] usb 6-1: USB disconnect, device number 28
[ 1065.983858][T22909] PKCS7: Unknown OID: [5] (bad)
[ 1065.996212][T22909] PKCS7: Only support pkcs7_signedData type
[ 1066.145490][T15809] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[ 1066.320398][T15809] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1066.331299][T15809] usb 2-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4
[ 1066.341029][T15809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1066.351632][T15809] usb 2-1: config 0 descriptor??
[ 1066.360143][T15809] rndis_host 2-1:0.0: probe with driver rndis_host failed with error -22
[ 1066.529457][T22911] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5357'.
[ 1066.636388][T15809] usb 2-1: USB disconnect, device number 72
[ 1066.891857][T22918] FAULT_INJECTION: forcing a failure.
[ 1066.891857][T22918] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1066.906971][T22918] CPU: 1 UID: 0 PID: 22918 Comm: syz.5.5360 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1066.907003][T22918] Tainted: [L]=SOFTLOCKUP
[ 1066.907011][T22918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1066.907022][T22918] Call Trace:
[ 1066.907031][T22918]  <TASK>
[ 1066.907040][T22918]  dump_stack_lvl+0x189/0x250
[ 1066.907067][T22918]  ? __pfx____ratelimit+0x10/0x10
[ 1066.907090][T22918]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1066.907108][T22918]  ? __pfx__printk+0x10/0x10
[ 1066.907131][T22918]  ? __might_fault+0xb0/0x130
[ 1066.907164][T22918]  should_fail_ex+0x414/0x560
[ 1066.907192][T22918]  copy_fpstate_to_sigframe+0xa70/0xcc0
[ 1066.907222][T22918]  ? copy_fpstate_to_sigframe+0x181/0xcc0
[ 1066.907252][T22918]  ? __pfx_copy_fpstate_to_sigframe+0x10/0x10
[ 1066.907299][T22918]  ? fpu__alloc_mathframe+0xad/0x130
[ 1066.907326][T22918]  get_sigframe+0x58d/0x7d0
[ 1066.907356][T22918]  ? __pfx_get_sigframe+0x10/0x10
[ 1066.907381][T22918]  ? posixtimer_deliver_signal+0x305/0x410
[ 1066.907409][T22918]  ia32_setup_rt_frame+0x106/0xb70
[ 1066.907424][T22918]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1066.907446][T22918]  ? lockdep_hardirqs_on+0x98/0x140
[ 1066.907471][T22918]  ? _raw_spin_unlock_irq+0x2e/0x50
[ 1066.907492][T22918]  ? get_signal+0x1150/0x1340
[ 1066.907517][T22918]  ? __pfx_ia32_setup_rt_frame+0x10/0x10
[ 1066.907546][T22918]  arch_do_signal_or_restart+0x409/0x7a0
[ 1066.907572][T22918]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1066.907605][T22918]  ? exit_to_user_mode_loop+0x55/0x4f0
[ 1066.907626][T22918]  exit_to_user_mode_loop+0x87/0x4f0
[ 1066.907644][T22918]  ? rcu_is_watching+0x15/0xb0
[ 1066.907668][T22918]  ? asm_int80_emulation+0x1a/0x20
[ 1066.907685][T22918]  do_int80_emulation+0x2c6/0x410
[ 1066.907704][T22918]  ? clear_bhb_loop+0x60/0xb0
[ 1066.907720][T22918]  ? clear_bhb_loop+0x60/0xb0
[ 1066.907742][T22918]  asm_int80_emulation+0x1a/0x20
[ 1066.907759][T22918] RIP: 0023:0xf7ff3537
[ 1066.907775][T22918] Code: 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 <cd> 80 5d 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1066.907790][T22918] RSP: 002b:00000000f54e655c EFLAGS: 00000206
[ 1066.907806][T22918] RAX: 0000000000000003 RBX: 0000000000000003 RCX: 0000000080001b40
[ 1066.907821][T22918] RDX: 000000000000205c RSI: 0000000000000000 RDI: 0000000000000000
[ 1066.907832][T22918] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1066.907842][T22918] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1066.907852][T22918] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1066.907880][T22918]  </TASK>
[ 1068.512345][T22950] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[ 1068.518901][T22950] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1068.537479][T22950] vhci_hcd vhci_hcd.0: Device attached
[ 1068.582567][T22950] netdevsim netdevsim1: Direct firmware load for nel/address_bits failed with error -2
[ 1068.602053][T22950] netdevsim netdevsim1: Falling back to sysfs fallback for: nel/address_bits
[ 1068.724983][T22959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5373'.
[ 1068.798513][T22959] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5373'.
[ 1068.806321][    T9] usb 35-1: new low-speed USB device number 2 using vhci_hcd
[ 1068.808022][T22959] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5373'.
[ 1069.390375][T22951] vhci_hcd: connection reset by peer
[ 1069.399346][   T50] vhci_hcd vhci_hcd.1: stop threads
[ 1069.405054][   T50] vhci_hcd vhci_hcd.1: release socket
[ 1069.410674][   T50] vhci_hcd vhci_hcd.1: disconnect device
[ 1069.895870][T15809] usb 3-1: new high-speed USB device number 74 using dummy_hcd
[ 1070.098129][T15809] usb 3-1: Using ep0 maxpacket: 32
[ 1070.107048][T15809] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1070.115909][T15809] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[ 1070.124958][T15809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1070.133298][T15809] usb 3-1: Product: syz
[ 1070.137684][T15809] usb 3-1: Manufacturer: syz
[ 1070.142273][T15809] usb 3-1: SerialNumber: syz
[ 1070.152617][T15809] usb 3-1: config 0 descriptor??
[ 1070.389903][T15809] gs_usb 3-1:0.0: Couldn't send data format (err=-71)
[ 1070.396833][T22997] netlink: 'syz.1.5385': attribute type 4 has an invalid length.
[ 1070.406098][T15809] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71
[ 1070.417825][T15809] usb 3-1: USB disconnect, device number 74
[ 1070.495306][ T6718] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[ 1070.655830][ T6718] usb 6-1: Using ep0 maxpacket: 8
[ 1070.662796][ T6718] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 1070.678501][ T6718] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1070.689709][ T6718] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1070.699875][ T6718] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1070.713326][ T6718] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1070.722460][ T6718] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1070.953450][ T6718] usb 6-1: GET_CAPABILITIES returned 0
[ 1070.963243][ T6718] usbtmc 6-1:16.0: can't read capabilities
[ 1071.386626][T23016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1071.397939][T23016] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1071.505947][    C0] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[ 1071.631063][T23019] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1071.901206][T23022] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1072.910637][T23040] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:32)
[ 1072.976715][T23043] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5397'.
[ 1073.077394][   T30] audit: type=1326 audit(1765491403.183:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23044 comm="syz.2.5398" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x0
[ 1073.438258][ T6718] usb 6-1: USB disconnect, device number 29
[ 1073.741073][T23063] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5403'.
[ 1073.761541][T23063] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5403'.
[ 1073.915208][ T5895] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[ 1073.945348][    T9] vhci_hcd vhci_hcd.1: vhci_device speed not set
[ 1074.006318][T23068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5406'.
[ 1074.076086][ T5895] usb 2-1: config 131 has too many interfaces: 192, using maximum allowed: 32
[ 1074.085383][ T5895] usb 2-1: config 131 has an invalid descriptor of length 0, skipping remainder of the config
[ 1074.115366][ T5895] usb 2-1: config 131 has 0 interfaces, different from the descriptor's value: 192
[ 1074.126929][ T5895] usb 2-1: New USB device found, idVendor=056a, idProduct=00ee, bcdDevice= 0.00
[ 1074.137090][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1074.359549][T23059] kernel profiling enabled (shift: 11)
[ 1074.566858][ T5895] usb 2-1: string descriptor 0 read error: -71
[ 1074.584763][ T5895] usb 2-1: USB disconnect, device number 74
[ 1075.118034][T23081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5411'.
[ 1076.055241][    T9] usb 2-1: new high-speed USB device number 75 using dummy_hcd
[ 1076.237714][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1076.248106][    T9] usb 2-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4
[ 1076.257508][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1076.276854][    T9] usb 2-1: config 0 descriptor??
[ 1076.311428][    T9] rndis_host 2-1:0.0: probe with driver rndis_host failed with error -22
[ 1076.415905][T23117] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5424'.
[ 1076.431259][T23117] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5424'.
[ 1077.645532][    T9] usb 3-1: new full-speed USB device number 75 using dummy_hcd
[ 1077.829254][    T9] usb 3-1: config 0 has an invalid interface number: 231 but max is 0
[ 1077.839295][    T9] usb 3-1: config 0 has an invalid interface number: 40 but max is 0
[ 1077.848565][    T9] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 1
[ 1077.863957][    T9] usb 3-1: config 0 has no interface number 0
[ 1077.870531][    T9] usb 3-1: config 0 has no interface number 1
[ 1077.876961][    T9] usb 3-1: config 0 interface 231 altsetting 0 endpoint 0xB has invalid maxpacket 1024, setting to 64
[ 1077.889007][    T9] usb 3-1: config 0 interface 231 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1077.927390][    T9] usb 3-1: config 0 interface 231 altsetting 0 has a duplicate endpoint with address 0xB, skipping
[ 1077.938964][    T9] usb 3-1: config 0 interface 231 altsetting 0 has a duplicate endpoint with address 0x1, skipping
[ 1077.957341][    T9] usb 3-1: config 0 interface 231 altsetting 0 has a duplicate endpoint with address 0xE, skipping
[ 1077.968688][    T9] usb 3-1: config 0 interface 231 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1077.979990][    T9] usb 3-1: config 0 interface 231 altsetting 0 has 11 endpoint descriptors, different from the interface descriptor's value: 12
[ 1077.994327][    T9] usb 3-1: too many endpoints for config 0 interface 40 altsetting 56: 126, using maximum allowed: 30
[ 1078.005541][    T9] usb 3-1: config 0 interface 40 altsetting 56 has a duplicate endpoint with address 0x8, skipping
[ 1078.016783][    T9] usb 3-1: config 0 interface 40 altsetting 56 has 1 endpoint descriptor, different from the interface descriptor's value: 126
[ 1078.030948][    T9] usb 3-1: config 0 interface 40 has no altsetting 0
[ 1078.044936][    T9] usb 3-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=bf.53
[ 1078.054550][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1078.096586][    T9] usb 3-1: Product: syz
[ 1078.104826][    T9] usb 3-1: Manufacturer: syz
[ 1078.113845][    T9] usb 3-1: SerialNumber: syz
[ 1078.121752][    T9] usb 3-1: config 0 descriptor??
[ 1078.128058][T23134] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[ 1078.139917][    T9] technisat-usb2: could not set alternate setting to 0
[ 1078.354190][    T9] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in cold state, will try to load a firmware
[ 1078.369084][    T9] usb 3-1: Direct firmware load for dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw failed with error -2
[ 1078.380926][    T9] usb 3-1: Falling back to sysfs fallback for: dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw
[ 1079.010668][T23164] FAULT_INJECTION: forcing a failure.
[ 1079.010668][T23164] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1079.029737][T23164] CPU: 0 UID: 0 PID: 23164 Comm: syz.2.5439 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1079.029809][T23164] Tainted: [L]=SOFTLOCKUP
[ 1079.029815][T23164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1079.029822][T23164] Call Trace:
[ 1079.029830][T23164]  <TASK>
[ 1079.029836][T23164]  dump_stack_lvl+0x189/0x250
[ 1079.029854][T23164]  ? __pfx____ratelimit+0x10/0x10
[ 1079.029869][T23164]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1079.029897][T23164]  ? __pfx__printk+0x10/0x10
[ 1079.029918][T23164]  should_fail_ex+0x414/0x560
[ 1079.029975][T23164]  _copy_to_user+0x31/0xb0
[ 1079.029987][T23164]  simple_read_from_buffer+0xe1/0x170
[ 1079.030003][T23164]  proc_fail_nth_read+0x1b3/0x220
[ 1079.030016][T23164]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1079.030029][T23164]  ? rw_verify_area+0x2a6/0x4d0
[ 1079.030038][T23164]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1079.030049][T23164]  vfs_read+0x200/0xa30
[ 1079.030059][T23164]  ? fdget_pos+0x247/0x320
[ 1079.030073][T23164]  ? __pfx___mutex_lock+0x10/0x10
[ 1079.030083][T23164]  ? __pfx_vfs_read+0x10/0x10
[ 1079.030093][T23164]  ? __fget_files+0x2a/0x420
[ 1079.030107][T23164]  ? __fget_files+0x3a0/0x420
[ 1079.030118][T23164]  ? __fget_files+0x2a/0x420
[ 1079.030135][T23164]  ksys_read+0x145/0x250
[ 1079.030144][T23164]  ? exc_page_fault+0x82/0x100
[ 1079.030158][T23164]  ? __pfx_ksys_read+0x10/0x10
[ 1079.030169][T23164]  ? __do_fast_syscall_32+0xbe/0x570
[ 1079.030183][T23164]  __do_fast_syscall_32+0x1f7/0x570
[ 1079.030194][T23164]  ? rcu_is_watching+0x15/0xb0
[ 1079.030205][T23164]  ? do_fast_syscall_32+0x34/0x80
[ 1079.030217][T23164]  do_fast_syscall_32+0x34/0x80
[ 1079.030227][T23164]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1079.030239][T23164] RIP: 0023:0xf6ffd539
[ 1079.030250][T23164] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1079.030259][T23164] RSP: 002b:00000000f53ed590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003
[ 1079.030271][T23164] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53ed620
[ 1079.030278][T23164] RDX: 000000000000000f RSI: 00000000f7396ff4 RDI: 0000000000000000
[ 1079.030284][T23164] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[ 1079.030290][T23164] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1079.030296][T23164] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1079.030317][T23164]  </TASK>
[ 1079.839989][T14028] usb 2-1: USB disconnect, device number 75
[ 1081.271605][T23190] bridge0: port 4(wlan1) entered disabled state
[ 1081.933306][T23230] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5454'.
[ 1081.942512][T23230] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5454'.
[ 1087.143812][T23327] bridge4: entered promiscuous mode
[ 1087.721908][T23339] netdevsim netdevsim5: Firmware load for '..' refused, path contains '..' component
[ 1087.961508][T23345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1087.994250][T23345] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1088.189961][T23348] IPVS: length: 149 != 17667290688
[ 1088.819237][T23356] trusted_key: encrypted_key: keyword 'tpdate' not recognized
[ 1089.102438][T23370] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[ 1091.845448][ T6703] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[ 1092.001063][ T6703] usb 2-1: Using ep0 maxpacket: 8
[ 1092.009901][ T6703] usb 2-1: config 0 has an invalid interface number: 52 but max is 0
[ 1092.036962][ T6703] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1092.069411][ T6703] usb 2-1: config 0 has no interface number 0
[ 1092.085662][ T6703] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7
[ 1092.109154][ T6703] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0
[ 1092.119559][ T6703] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1092.139119][ T6703] usb 2-1: config 0 interface 52 has no altsetting 0
[ 1092.152306][ T6703] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00
[ 1092.161703][ T6703] usb 2-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34
[ 1092.170511][ T6703] usb 2-1: Product: syz
[ 1092.192303][ T6703] usb 2-1: SerialNumber: syz
[ 1092.217754][ T6703] usb 2-1: config 0 descriptor??
Stopping sshd: stopped /usr/sbin/sshd (pid 5584)
OK
[ 1092.655563][T23404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
Stopping crond: stopped /usr/sbin/crond (pid 5569)
OK
[ 1092.729077][T23404] misc raw-gadget: fail, usb_gadget_register_driver returned -16
Stopping dhcpcd...
stopped /sbin/dhcpcd (pid 5494)
[ 1093.085514][T23431] xt_hashlimit: invalid rate
Stopping network: [ 1093.405631][ T6703] usb 2-1: Can not set alternate setting to 1, error: -71
[ 1093.442957][ T6703] synaptics_usb 2-1:0.52: probe with driver synaptics_usb failed with error -71
[ 1093.474297][ T6703] usb 2-1: USB disconnect, device number 76
OK
Stopping iptables: [ 1094.195183][T15809] usb 6-1: new high-speed USB device number 30 using dummy_hcd
OK
Stopping system message bus: [ 1094.375309][T15809] usb 6-1: Using ep0 maxpacket: 8
[ 1094.454469][T15809] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 1094.485178][T15809] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1094.496130][T15809] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1094.515178][T15809] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1094.545251][T15809] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1094.554350][T15809] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1094.815274][T15809] usb 6-1: GET_CAPABILITIES returned 0
[ 1094.820823][T15809] usbtmc 6-1:16.0: can't read capabilities
done
[ 1094.891854][T23489] ip6gretap2: entered promiscuous mode
[ 1095.066461][    C0] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[ 1095.372233][T23497] Failed to get privilege flags for destination (handle=0x2:0x0)
[ 1095.560006][T23511] 8021q: adding VLAN 0 to HW filter on device macvlan2
Stopping klogd: OK
Stopping acpid: [ 1096.590127][T23539] PKCS7: Unknown OID: [5] (bad)
[ 1096.601855][T23539] PKCS7: Only support pkcs7_signedData type
[ 1096.892127][T23544] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5524'.
[ 1097.444640][  T979] usb 6-1: USB disconnect, device number 30
OK
Stopping syslogd: stopped /sbin/syslogd (pid 5182)
OK
[ 1098.147348][T23568] bridge0: port 5(syz_tun) entered blocking state
[ 1098.153908][T23568] bridge0: port 5(syz_tun) entered disabled state
[ 1098.166446][T23568] syz_tun: entered allmulticast mode
[ 1098.183206][T23568] syz_tun: entered promiscuous mode
[ 1098.192777][T23568] bridge0: port 5(syz_tun) entered blocking state
[ 1098.199380][T23568] bridge0: port 5(syz_tun) entered forwarding state
umount: can't remount debugfs read-only
umount: tmpfs busy - remounted read-only
[ 1098.287260][T14028] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[ 1098.483250][T14028] usb 2-1: Using ep0 maxpacket: 32
[ 1098.499102][T14028] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[ 1098.535965][T14028] usb 2-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb
umount: sysfs busy - remounted read-only[ 1098.551735][T14028] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3

umount: devtmpfs[ 1098.565185][T14028] usb 2-1: Product: syz
 busy - remounte[ 1098.571636][T14028] usb 2-1: Manufacturer: syz
d read-only
umount: can't remount /dev/root read-only
[ 1098.581703][T14028] usb 2-1: SerialNumber: syz
[ 1098.591713][T14028] usb 2-1: config 0 descriptor??
The system is going down NOW!
[ 1098.658218][T14028] usbtouchscreen 2-1:0.0: probe with driver usbtouchscreen failed with error -12
Sent SIGTERM to all processes
[ 1098.691658][ T5200] udevd[5200]: could not touch /run/udev/queue: Read-only file system
Connection to 10.128.1.29 closed by remote host.
[ 1099.514255][T19768] bridge0: port 5(syz_tun) entered disabled state
[ 1099.586856][T19768] syz_tun (unregistering): left allmulticast mode
[ 1099.593285][T19768] syz_tun (unregistering): left promiscuous mode
[ 1099.599781][T19768] bridge0: port 5(syz_tun) entered disabled state
[ 1099.665805][T15953] bridge0: port 3(syz_tun) entered disabled state
[ 1099.772984][T15953] syz_tun (unregistering): left allmulticast mode
[ 1099.782462][T15953] syz_tun (unregistering): left promiscuous mode
Sent SIGKILL to[ 1099.817221][T15953] bridge0: port 3(syz_tun) entered disabled state
 all processes
Requesting system poweroff
[ 1099.864703][T23581] bridge0: port 3(syz_tun) entered disabled state
[ 1099.896462][T23581] syz_tun (unregistering): left allmulticast mode
[ 1099.902885][T23581] syz_tun (unregistering): left promiscuous mode
[ 1099.935255][T23581] bridge0: port 3(syz_tun) entered disabled state
[ 1099.969981][T23563] bridge0: port 1(syz_tun) entered disabled state
[ 1099.996196][T14028] usb 4-1: USB disconnect, device number 104
[ 1099.997360][T23563] syz_tun (unregistering): left allmulticast mode
[ 1100.015914][T23563] syz_tun (unregistering): left promiscuous mode
[ 1100.022320][T23563] bridge0: port 1(syz_tun) entered disabled state
[ 1100.063901][ T3729] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1100.108823][T14028] usb 2-1: USB disconnect, device number 77
[ 1100.168031][ T3729] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1100.232667][ T3729] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1100.282609][ T3729] bridge0: port 3(netdevsim0) entered disabled state
[ 1100.301986][ T3729] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode
[ 1100.311933][ T3729] bridge0: port 3(netdevsim0) entered disabled state
[ 1100.327389][ T3729] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1100.403216][ T3729] bridge0: port 4(batadv0) entered disabled state
[ 1100.413790][ T3729] bridge_slave_1: left allmulticast mode
[ 1100.421019][ T3729] bridge_slave_1: left promiscuous mode
[ 1100.428573][ T3729] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1100.437986][ T3729] bridge_slave_0: left allmulticast mode
[ 1100.443626][ T3729] bridge_slave_0: left promiscuous mode
[ 1100.449772][ T3729] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1100.840622][T23582] smc: removing smcd device lo
[ 1100.849608][    T9] dvb-usb: did not find the firmware file 'dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw' (status -2). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[ 1100.898319][    T9] technisat-usb2: could not set alternate setting to 0
[ 1100.908399][    T9] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in cold state, will try to load a firmware
[ 1100.921315][    T9] usb 3-1: Direct firmware load for dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw failed with error -2
[ 1100.931991][    T9] usb 3-1: Falling back to sysfs fallback for: dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw
[ 1100.942522][    T9] ------------[ cut here ]------------
[ 1100.948084][    T9] WARNING: drivers/base/firmware_loader/fallback.c:148 at firmware_fallback_sysfs+0x746/0xa40, CPU#0: kworker/0:0/9
[ 1100.960324][    T9] Modules linked in:
[ 1100.964788][    T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1100.975850][    T9] Tainted: [L]=SOFTLOCKUP
[ 1100.980177][    T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1100.990300][    T9] Workqueue: usb_hub_wq hub_event
[ 1100.995367][    T9] RIP: 0010:firmware_fallback_sysfs+0x746/0xa40
[ 1101.002841][    T9] Code: ec fb e9 5d fc ff ff e8 e8 05 ec fb c6 05 09 69 96 09 01 48 c7 c7 60 13 e9 8b e8 05 ff 51 fb e9 85 fc ff ff e8 cb 05 ec fb 90 <0f> 0b 90 4c 89 f7 48 c7 c6 60 14 e9 8b 4c 89 e2 e8 f5 66 56 fb e9
[ 1101.023179][    T9] RSP: 0018:ffffc900000e6790 EFLAGS: 00010287
[ 1101.029353][    T9] RAX: ffffffff85d5aae5 RBX: dffffc0000000000 RCX: 0000000000100000
[ 1101.037409][    T9] RDX: ffffc9001daa7000 RSI: 000000000008b6e0 RDI: 000000000008b6e1
[ 1101.046184][    T9] RBP: 0000000000000001 R08: ffffffff8f81f777 R09: 1ffffffff1f03eee
[ 1101.054177][    T9] R10: dffffc0000000000 R11: fffffbfff1f03eef R12: ffffffff8c33d820
[ 1101.062192][    T9] R13: 0000000000001770 R14: ffff8880322d60b0 R15: 00000000fffffff5
[ 1101.070424][    T9] FS:  0000000000000000(0000) GS:ffff888125e3a000(0000) knlGS:0000000000000000
[ 1101.079453][    T9] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1101.086079][    T9] CR2: 00007fff26175f44 CR3: 000000003481a000 CR4: 00000000003526f0
[ 1101.094041][    T9] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1101.102052][    T9] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[ 1101.110043][    T9] Call Trace:
[ 1101.113313][    T9]  <TASK>
[ 1101.116285][    T9]  ? kmem_cache_free+0x197/0x620
[ 1101.121210][    T9]  ? _request_firmware+0xe69/0x1680
[ 1101.126429][    T9]  ? _request_firmware+0x5d6/0x1680
[ 1101.131615][    T9]  _request_firmware+0xfa4/0x1680
[ 1101.136694][    T9]  ? __pfx__request_firmware+0x10/0x10
[ 1101.142178][    T9]  request_firmware+0x36/0x50
[ 1101.146957][    T9]  dvb_usb_download_firmware+0xaf/0x260
[ 1101.152491][    T9]  ? __pfx__printk+0x10/0x10
[ 1101.157123][    T9]  ? __pfx_dvb_usb_download_firmware+0x10/0x10
[ 1101.163266][    T9]  ? technisat_usb2_identify_state+0x13f/0x230
[ 1101.169449][    T9]  dvb_usb_device_init+0xdd2/0x2580
[ 1101.175765][    T9]  ? do_raw_spin_lock+0x121/0x290
[ 1101.180927][    T9]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1101.186344][    T9]  ? do_raw_spin_lock+0x121/0x290
[ 1101.191365][    T9]  ? __pfx_dvb_usb_device_init+0x10/0x10
[ 1101.197037][    T9]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[ 1101.202929][    T9]  ? lockdep_hardirqs_on+0x98/0x140
[ 1101.208162][    T9]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1101.214056][    T9]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1101.220443][    T9]  technisat_usb2_probe+0x91/0x270
[ 1101.225980][    T9]  ? __pfx_technisat_usb2_probe+0x10/0x10
[ 1101.231696][    T9]  ? __pm_runtime_set_status+0x785/0xa50
[ 1101.237378][    T9]  usb_probe_interface+0x668/0xc90
[ 1101.242512][    T9]  ? __pfx_usb_probe_interface+0x10/0x10
[ 1101.248165][    T9]  really_probe+0x26d/0xad0
[ 1101.252667][    T9]  __driver_probe_device+0x18c/0x320
[ 1101.257973][    T9]  driver_probe_device+0x4f/0x240
[ 1101.262986][    T9]  __device_attach_driver+0x279/0x430
[ 1101.268372][    T9]  bus_for_each_drv+0x251/0x2e0
[ 1101.273216][    T9]  ? __pfx___device_attach_driver+0x10/0x10
[ 1101.279135][    T9]  ? __pfx_bus_for_each_drv+0x10/0x10
[ 1101.284500][    T9]  __device_attach+0x2b8/0x430
[ 1101.289301][    T9]  ? __pfx___device_attach+0x10/0x10
[ 1101.294580][    T9]  ? _raw_spin_unlock+0x28/0x50
[ 1101.299465][    T9]  device_initial_probe+0xa1/0xd0
[ 1101.304482][    T9]  bus_probe_device+0x12a/0x220
[ 1101.309356][    T9]  ? device_add+0x726/0xb80
[ 1101.313850][    T9]  device_add+0x7b6/0xb80
[ 1101.318220][    T9]  usb_set_configuration+0x1a87/0x2110
[ 1101.323705][    T9]  usb_generic_driver_probe+0x8d/0x150
[ 1101.329186][    T9]  usb_probe_device+0x1c4/0x3c0
[ 1101.334035][    T9]  ? __pfx_usb_probe_device+0x10/0x10
[ 1101.339418][    T9]  really_probe+0x26d/0xad0
[ 1101.343908][    T9]  __driver_probe_device+0x18c/0x320
[ 1101.349223][    T9]  driver_probe_device+0x4f/0x240
[ 1101.354234][    T9]  __device_attach_driver+0x279/0x430
[ 1101.359628][    T9]  bus_for_each_drv+0x251/0x2e0
[ 1101.364474][    T9]  ? __pfx___device_attach_driver+0x10/0x10
[ 1101.370379][    T9]  ? __pfx_bus_for_each_drv+0x10/0x10
[ 1101.375766][    T9]  __device_attach+0x2b8/0x430
[ 1101.380519][    T9]  ? __pfx___device_attach+0x10/0x10
[ 1101.386624][    T9]  ? _raw_spin_unlock+0x28/0x50
[ 1101.391496][    T9]  device_initial_probe+0xa1/0xd0
[ 1101.396672][    T9]  bus_probe_device+0x12a/0x220
[ 1101.401515][    T9]  ? device_add+0x726/0xb80
[ 1101.406129][    T9]  device_add+0x7b6/0xb80
[ 1101.410496][    T9]  usb_new_device+0xa39/0x1720
[ 1101.415292][    T9]  ? __pfx_usb_new_device+0x10/0x10
[ 1101.420482][    T9]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1101.425775][    T9]  ? lockdep_hardirqs_on+0x98/0x140
[ 1101.430963][    T9]  hub_event+0x29b1/0x4ef0
[ 1101.435515][    T9]  ? __pfx_hub_event+0x10/0x10
[ 1101.440267][    T9]  ? process_scheduled_works+0x9ef/0x1770
[ 1101.446010][    T9]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1101.451208][    T9]  ? process_scheduled_works+0x9ef/0x1770
[ 1101.456949][    T9]  ? process_scheduled_works+0x9ef/0x1770
[ 1101.462652][    T9]  process_scheduled_works+0xad1/0x1770
[ 1101.468610][    T9]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1101.474608][    T9]  worker_thread+0x8a0/0xda0
[ 1101.479239][    T9]  kthread+0x711/0x8a0
[ 1101.483305][    T9]  ? __pfx_worker_thread+0x10/0x10
[ 1101.488434][    T9]  ? __pfx_kthread+0x10/0x10
[ 1101.493010][    T9]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1101.498228][    T9]  ? lockdep_hardirqs_on+0x98/0x140
[ 1101.503417][    T9]  ? __pfx_kthread+0x10/0x10
[ 1101.508026][    T9]  ret_from_fork+0x599/0xb30
[ 1101.512616][    T9]  ? __pfx_ret_from_fork+0x10/0x10
[ 1101.517772][    T9]  ? __switch_to_asm+0x39/0x70
[ 1101.522534][    T9]  ? __switch_to_asm+0x33/0x70
[ 1101.527318][    T9]  ? __pfx_kthread+0x10/0x10
[ 1101.531901][    T9]  ret_from_fork_asm+0x1a/0x30
[ 1101.536714][    T9]  </TASK>
[ 1101.539726][    T9] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1101.546988][    T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1101.557648][    T9] Tainted: [L]=SOFTLOCKUP
[ 1101.561957][    T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1101.572001][    T9] Workqueue: usb_hub_wq hub_event
[ 1101.577023][    T9] Call Trace:
[ 1101.580381][    T9]  <TASK>
[ 1101.583297][    T9]  dump_stack_lvl+0x99/0x250
[ 1101.587874][    T9]  ? __asan_memcpy+0x40/0x70
[ 1101.592450][    T9]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1101.597648][    T9]  ? __pfx__printk+0x10/0x10
[ 1101.602259][    T9]  vpanic+0x237/0x6d0
[ 1101.606238][    T9]  ? __pfx_vpanic+0x10/0x10
[ 1101.610779][    T9]  ? is_bpf_text_address+0x292/0x2b0
[ 1101.616047][    T9]  ? is_bpf_text_address+0x26/0x2b0
[ 1101.621228][    T9]  panic+0xb9/0xc0
[ 1101.624933][    T9]  ? __pfx_panic+0x10/0x10
[ 1101.629337][    T9]  ? ret_from_fork_asm+0x1a/0x30
[ 1101.634266][    T9]  __warn+0x317/0x4b0
[ 1101.638231][    T9]  ? firmware_fallback_sysfs+0x746/0xa40
[ 1101.643848][    T9]  ? firmware_fallback_sysfs+0x746/0xa40
[ 1101.649465][    T9]  __report_bug+0x288/0x500
[ 1101.653961][    T9]  ? firmware_fallback_sysfs+0x746/0xa40
[ 1101.659583][    T9]  ? __pfx___report_bug+0x10/0x10
[ 1101.664591][    T9]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[ 1101.670469][    T9]  ? lockdep_hardirqs_on+0x98/0x140
[ 1101.675655][    T9]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1101.681537][    T9]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1101.687937][    T9]  ? finish_wait+0xcd/0x1f0
[ 1101.692430][    T9]  ? firmware_fallback_sysfs+0x746/0xa40
[ 1101.698050][    T9]  report_bug+0x16a/0x220
[ 1101.702372][    T9]  ? firmware_fallback_sysfs+0x746/0xa40
[ 1101.707991][    T9]  ? firmware_fallback_sysfs+0x748/0xa40
[ 1101.713606][    T9]  handle_bug+0x98/0x200
[ 1101.717829][    T9]  exc_invalid_op+0x1a/0x50
[ 1101.722313][    T9]  asm_exc_invalid_op+0x1a/0x20
[ 1101.727144][    T9] RIP: 0010:firmware_fallback_sysfs+0x746/0xa40
[ 1101.733368][    T9] Code: ec fb e9 5d fc ff ff e8 e8 05 ec fb c6 05 09 69 96 09 01 48 c7 c7 60 13 e9 8b e8 05 ff 51 fb e9 85 fc ff ff e8 cb 05 ec fb 90 <0f> 0b 90 4c 89 f7 48 c7 c6 60 14 e9 8b 4c 89 e2 e8 f5 66 56 fb e9
[ 1101.752956][    T9] RSP: 0018:ffffc900000e6790 EFLAGS: 00010287
[ 1101.759010][    T9] RAX: ffffffff85d5aae5 RBX: dffffc0000000000 RCX: 0000000000100000
[ 1101.766966][    T9] RDX: ffffc9001daa7000 RSI: 000000000008b6e0 RDI: 000000000008b6e1
[ 1101.774919][    T9] RBP: 0000000000000001 R08: ffffffff8f81f777 R09: 1ffffffff1f03eee
[ 1101.782871][    T9] R10: dffffc0000000000 R11: fffffbfff1f03eef R12: ffffffff8c33d820
[ 1101.790822][    T9] R13: 0000000000001770 R14: ffff8880322d60b0 R15: 00000000fffffff5
[ 1101.798783][    T9]  ? firmware_fallback_sysfs+0x745/0xa40
[ 1101.804466][    T9]  ? kmem_cache_free+0x197/0x620
[ 1101.809388][    T9]  ? _request_firmware+0xe69/0x1680
[ 1101.814579][    T9]  ? _request_firmware+0x5d6/0x1680
[ 1101.819763][    T9]  _request_firmware+0xfa4/0x1680
[ 1101.824778][    T9]  ? __pfx__request_firmware+0x10/0x10
[ 1101.831368][    T9]  request_firmware+0x36/0x50
[ 1101.837358][    T9]  dvb_usb_download_firmware+0xaf/0x260
[ 1101.842906][    T9]  ? __pfx__printk+0x10/0x10
[ 1101.847483][    T9]  ? __pfx_dvb_usb_download_firmware+0x10/0x10
[ 1101.853896][    T9]  ? technisat_usb2_identify_state+0x13f/0x230
[ 1101.860045][    T9]  dvb_usb_device_init+0xdd2/0x2580
[ 1101.865246][    T9]  ? do_raw_spin_lock+0x121/0x290
[ 1101.870261][    T9]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1101.875618][    T9]  ? do_raw_spin_lock+0x121/0x290
[ 1101.880632][    T9]  ? __pfx_dvb_usb_device_init+0x10/0x10
[ 1101.886248][    T9]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[ 1101.892124][    T9]  ? lockdep_hardirqs_on+0x98/0x140
[ 1101.897313][    T9]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1101.903216][    T9]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1101.909537][    T9]  technisat_usb2_probe+0x91/0x270
[ 1101.914635][    T9]  ? __pfx_technisat_usb2_probe+0x10/0x10
[ 1101.920337][    T9]  ? __pm_runtime_set_status+0x785/0xa50
[ 1101.925959][    T9]  usb_probe_interface+0x668/0xc90
[ 1101.931060][    T9]  ? __pfx_usb_probe_interface+0x10/0x10
[ 1101.936672][    T9]  really_probe+0x26d/0xad0
[ 1101.941165][    T9]  __driver_probe_device+0x18c/0x320
[ 1101.946449][    T9]  driver_probe_device+0x4f/0x240
[ 1101.951478][    T9]  __device_attach_driver+0x279/0x430
[ 1101.956837][    T9]  bus_for_each_drv+0x251/0x2e0
[ 1101.961670][    T9]  ? __pfx___device_attach_driver+0x10/0x10
[ 1101.967540][    T9]  ? __pfx_bus_for_each_drv+0x10/0x10
[ 1101.972898][    T9]  __device_attach+0x2b8/0x430
[ 1101.977649][    T9]  ? __pfx___device_attach+0x10/0x10
[ 1101.982916][    T9]  ? _raw_spin_unlock+0x28/0x50
[ 1101.987751][    T9]  device_initial_probe+0xa1/0xd0
[ 1101.992758][    T9]  bus_probe_device+0x12a/0x220
[ 1101.997588][    T9]  ? device_add+0x726/0xb80
[ 1102.002074][    T9]  device_add+0x7b6/0xb80
[ 1102.006385][    T9]  usb_set_configuration+0x1a87/0x2110
[ 1102.011838][    T9]  usb_generic_driver_probe+0x8d/0x150
[ 1102.017277][    T9]  usb_probe_device+0x1c4/0x3c0
[ 1102.022108][    T9]  ? __pfx_usb_probe_device+0x10/0x10
[ 1102.027457][    T9]  really_probe+0x26d/0xad0
[ 1102.031944][    T9]  __driver_probe_device+0x18c/0x320
[ 1102.037225][    T9]  driver_probe_device+0x4f/0x240
[ 1102.042245][    T9]  __device_attach_driver+0x279/0x430
[ 1102.047614][    T9]  bus_for_each_drv+0x251/0x2e0
[ 1102.052494][    T9]  ? __pfx___device_attach_driver+0x10/0x10
[ 1102.058373][    T9]  ? __pfx_bus_for_each_drv+0x10/0x10
[ 1102.063734][    T9]  __device_attach+0x2b8/0x430
[ 1102.068491][    T9]  ? __pfx___device_attach+0x10/0x10
[ 1102.073766][    T9]  ? _raw_spin_unlock+0x28/0x50
[ 1102.078607][    T9]  device_initial_probe+0xa1/0xd0
[ 1102.083620][    T9]  bus_probe_device+0x12a/0x220
[ 1102.088454][    T9]  ? device_add+0x726/0xb80
[ 1102.092942][    T9]  device_add+0x7b6/0xb80
[ 1102.097271][    T9]  usb_new_device+0xa39/0x1720
[ 1102.102057][    T9]  ? __pfx_usb_new_device+0x10/0x10
[ 1102.107250][    T9]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1102.112439][    T9]  ? lockdep_hardirqs_on+0x98/0x140
[ 1102.117680][    T9]  hub_event+0x29b1/0x4ef0
[ 1102.122109][    T9]  ? __pfx_hub_event+0x10/0x10
[ 1102.126860][    T9]  ? process_scheduled_works+0x9ef/0x1770
[ 1102.132570][    T9]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1102.137760][    T9]  ? process_scheduled_works+0x9ef/0x1770
[ 1102.143478][    T9]  ? process_scheduled_works+0x9ef/0x1770
[ 1102.149190][    T9]  process_scheduled_works+0xad1/0x1770
[ 1102.154741][    T9]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1102.160715][    T9]  worker_thread+0x8a0/0xda0
[ 1102.165303][    T9]  kthread+0x711/0x8a0
[ 1102.169360][    T9]  ? __pfx_worker_thread+0x10/0x10
[ 1102.174456][    T9]  ? __pfx_kthread+0x10/0x10
[ 1102.179033][    T9]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1102.184217][    T9]  ? lockdep_hardirqs_on+0x98/0x140
[ 1102.189399][    T9]  ? __pfx_kthread+0x10/0x10
[ 1102.193975][    T9]  ret_from_fork+0x599/0xb30
[ 1102.198553][    T9]  ? __pfx_ret_from_fork+0x10/0x10
[ 1102.203655][    T9]  ? __switch_to_asm+0x39/0x70
[ 1102.208405][    T9]  ? __switch_to_asm+0x33/0x70
[ 1102.213149][    T9]  ? __pfx_kthread+0x10/0x10
[ 1102.217740][    T9]  ret_from_fork_asm+0x1a/0x30
[ 1102.222495][    T9]  </TASK>
[ 1102.225848][    T9] Kernel Offset: disabled
[ 1102.230185][    T9] Rebooting in 86400 seconds..