last executing test programs:

2m34.264954159s ago: executing program 1 (id=917):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4)
sendmmsg$inet6(r0, &(0x7f0000004f00)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0x6, @local, 0x6}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000002bc0)='\br', 0x2}], 0x1}}], 0x1, 0x240c80c0) (fail_nth: 2)

2m33.774555825s ago: executing program 1 (id=919):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x50, &(0x7f0000000600)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "30b00afe4e79"}}}}}}}, 0x0)

2m33.650739101s ago: executing program 1 (id=921):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x80141, 0x0)
ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000040)=0x5ed)
ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x40)
r3 = socket$inet6(0xa, 0x3, 0x9)
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r5 = socket(0x22, 0x2, 0x3)
getsockopt$packet_buf(r5, 0x107, 0x1, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x38, r6, 0x100, 0x0, 0x0, {0x54}, [{{@pci, {0x0, 0x3, 0x2}}}, {{@nsim={{}, {0x0, 0x2, {'netdevsim', 0x0}}}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x44050)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xc, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x94)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x37}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xed}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}}, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", <r8=>0xffffffffffffffff})
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0)
ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", 0xffffffffffffffff, <r9=>0xffffffffffffffff})
ppoll(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0)
close_range(r4, r9, 0x0)

2m32.518831087s ago: executing program 1 (id=926):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0x25dfdbfd, {0x2}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_HOPLIMIT={0x5, 0x4, 0x1}}, @NHA_OIF={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4402}, 0x0) (fail_nth: 2)

2m32.423613279s ago: executing program 1 (id=927):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'veth0\x00', 0xc201})
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
openat$kvm(0x0, &(0x7f0000000100), 0x8000, 0x0) (async)
openat$kvm(0x0, &(0x7f0000000100), 0x8000, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83a00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe)

2m32.37248055s ago: executing program 1 (id=929):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0)
r1 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2)
r3 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, 0x0, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0)
syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x1, 0x20, 0x97, "", [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x7, 0x1, 0x3, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0xc, 0x5}}}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0xff, 0x6d, 0x7, 0x8, 0x3}, 0x2e, &(0x7f0000000480)={0x5, 0xf, 0x2e, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "d9da3e4e800b7e4180809e8540d664ea"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0xed, 0x2, 0x7, 0x0, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0xb, 0x8, 0xdeb4}]}, 0x4, [{0x90, &(0x7f00000004c0)=@string={0x90, 0x3, "9fcc3ba505035818b5e2ee13c409c551fa656af8d3a77df389a380751310c49ec8ba9fa7611b4fdd4c225e48161a6a67e1c3ef141b7abb6ef9f5d755ba91420c9dfe860a19cc9ee21255f503db1d8c22a57dd085e06ee9e93d60abb9bb022369acece6f5ca8201b10da6fdd0e0c1f4841b74234ff1362b33e62eaeac4892e0ee2c00ef4a13adc7e8b55ac8017c9c"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x439}}, {0x5c, &(0x7f0000000300)=@string={0x5c, 0x3, "9e3794a5acc9161b41b602ad6146533f9ebb5882e500d862d022184210cec376d84e402e3acf1639d9ee9801a5e4a312f028a43035605443c775e643512fae1b4c18333247ffffd1fae1a074b5e63fcf88c40a60a78fdb291d89"}}, {0x98, &(0x7f00000003c0)=@string={0x98, 0x3, "ebb02192058f2d91a8afa086aeaf83deda93f52576997c333be145aa7e7d522a207995a6b54269e02564eb04235078508819377624edce5f855e26797ba9d75f6f82893c54694faaae709d96bc075bed29838a1e6d4317edb4af7cbffbe70824758ad9a1333fcf44688004f9b342f978efb91f19055e6da674a64adc3e5853e985fdc385a81e9afd5ca0a8b35f4a2e44820dd6b43140"}}]})
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/user\x00')
socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x10, 0x2, 0x0)
r4 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, r4)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x224}, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020}, 0x2020)
creat(&(0x7f0000000240)='./file0\x00', 0x122)
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0)
lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000400)=@v3={0x3000000, [{0xb, 0x1}, {0x0, 0x3d9b}]}, 0x18, 0x0)
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0)
openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)

2m17.189763806s ago: executing program 32 (id=929):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0)
r1 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2)
r3 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, 0x0, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0)
syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x1, 0x20, 0x97, "", [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x7, 0x1, 0x3, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0xc, 0x5}}}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0xff, 0x6d, 0x7, 0x8, 0x3}, 0x2e, &(0x7f0000000480)={0x5, 0xf, 0x2e, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "d9da3e4e800b7e4180809e8540d664ea"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0xed, 0x2, 0x7, 0x0, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0xb, 0x8, 0xdeb4}]}, 0x4, [{0x90, &(0x7f00000004c0)=@string={0x90, 0x3, "9fcc3ba505035818b5e2ee13c409c551fa656af8d3a77df389a380751310c49ec8ba9fa7611b4fdd4c225e48161a6a67e1c3ef141b7abb6ef9f5d755ba91420c9dfe860a19cc9ee21255f503db1d8c22a57dd085e06ee9e93d60abb9bb022369acece6f5ca8201b10da6fdd0e0c1f4841b74234ff1362b33e62eaeac4892e0ee2c00ef4a13adc7e8b55ac8017c9c"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x439}}, {0x5c, &(0x7f0000000300)=@string={0x5c, 0x3, "9e3794a5acc9161b41b602ad6146533f9ebb5882e500d862d022184210cec376d84e402e3acf1639d9ee9801a5e4a312f028a43035605443c775e643512fae1b4c18333247ffffd1fae1a074b5e63fcf88c40a60a78fdb291d89"}}, {0x98, &(0x7f00000003c0)=@string={0x98, 0x3, "ebb02192058f2d91a8afa086aeaf83deda93f52576997c333be145aa7e7d522a207995a6b54269e02564eb04235078508819377624edce5f855e26797ba9d75f6f82893c54694faaae709d96bc075bed29838a1e6d4317edb4af7cbffbe70824758ad9a1333fcf44688004f9b342f978efb91f19055e6da674a64adc3e5853e985fdc385a81e9afd5ca0a8b35f4a2e44820dd6b43140"}}]})
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/user\x00')
socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x10, 0x2, 0x0)
r4 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, r4)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x224}, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020}, 0x2020)
creat(&(0x7f0000000240)='./file0\x00', 0x122)
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0)
lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000400)=@v3={0x3000000, [{0xb, 0x1}, {0x0, 0x3d9b}]}, 0x18, 0x0)
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0)
openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)

9.283624233s ago: executing program 5 (id=1670):
r0 = socket$inet(0xa, 0x801, 0x84)
sendmmsg$inet_sctp(r0, &(0x7f0000000940)=[{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x3, @loopback, 0x9}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000500)='E~', 0x2}], 0x1, &(0x7f0000001680)=ANY=[@ANYRES32=0x0, @ANYBLOB="100000008400000007000000e00000021400000084"], 0x50, 0x4004044}], 0x1, 0x0)

9.184494189s ago: executing program 0 (id=1672):
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000980)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581d3b3"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000080)="bc", 0x1}], 0x1)

9.183963058s ago: executing program 5 (id=1673):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000100)={0x0, 0x5, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480), &(0x7f0000000000), &(0x7f00000004c0)})

9.114256373s ago: executing program 5 (id=1674):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1, 0x40}, 0x20)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0)
ftruncate(r1, 0xc17a)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0)
fsopen(&(0x7f0000000580)='binder\x00', 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x68, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r4 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
modify_ldt$write2(0x11, &(0x7f0000000200)={0x1, 0x20000800, 0x1000, 0x0, 0x3, 0x1, 0x1, 0x1}, 0x10)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000200)={0x48})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0x42, 0x4, 0x308, 0xffffffff, 0x1b8, 0x0, 0x1b8, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xc8, 0xec, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x2c}, {0x0, 0x0, 0x3, 0x0, 0xf}}, @common=@unspec=@connmark={{0x2c}, {0x5}}]}, @REJECT={0x24}}, {{@uncond, 0x0, 0x70, 0x94}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xb4, 0xf4, 0x0, {}, [@common=@unspec=@connlabel={{0x24}, {0xf, 0x2}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x364)
r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0)
ioctl$FBIOBLANK(r6, 0x4611, 0x3)
ioctl$FBIO_WAITFORVSYNC(r6, 0x40044620, 0x0)
dup(0xffffffffffffffff)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r8 = socket(0x10, 0x803, 0x0)
r9 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x34, 0x2c, 0xe27, 0xfffffff9, 0x0, {0x0, 0x0, 0x0, r10, {0xc, 0xc}, {}, {0x5, 0xa}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x20040054)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4000800)

8.084527414s ago: executing program 5 (id=1681):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_usb_connect(0x0, 0x3e, &(0x7f0000001100)=ANY=[@ANYBLOB="1201000020dafb2099041010f5050102030109022c00010000000009040000016f2bae000824020100000000092402020000000000090585da20"], 0x0)
syz_open_dev$sndctrl(&(0x7f0000000240), 0x805, 0x88400)
syz_open_dev$sndctrl(&(0x7f0000000000), 0x3, 0x40002)
r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) (fail_nth: 3)
close_range(r0, 0xffffffffffffffff, 0x0)

6.138807677s ago: executing program 0 (id=1690):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0x7fffdffff000, 0x0, 0x13, r2, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a000007080002400000000209"], 0x7c}, 0x1, 0x0, 0x0, 0x2004c05c}, 0x0) (async)
r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async)
r4 = fsmount(r3, 0x0, 0x0)
r5 = openat$cgroup_pressure(r4, &(0x7f0000000140)='memory.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r5, &(0x7f0000000300)={'some', 0x25, 0x1ff, 0x20, 0x5}, 0x2f)
ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0)
syz_usb_connect(0x2, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd50000000109022400010000800009040bfd0233776100090507dfff038140060905", @ANYBLOB="8e80435035593b3bcd305f94fcb41e1456a39f3328a293d751da5fd89bb5875f517cbf32b7ea58e72238e5bc2e9a91731f1bc63396c1957a262857f52edc21e8ce2f4caf989470633e5ff437cdc3c0694629e0728e3bb4627451f8ea6a5e4814ba763a9ed8be57883ff3031a913dca4b8f3d80df4cbfd26455d3995122c15e630f8ed540997928c6e65f0bab9a347d7c133e2eedd0329f3dbd38870f47bb5bfb19657a3efaaa3fcde14c277cc1af2c4d71e2edb7aa1ec1c9afb87f2667da2e098a8435d21b35a1c83edf0973142142e1e437bda39ee5782d83c36056c73a6d9c326bc1611810dbbc7faae7cd51df40519837a9d1303a654269eae53b1f5dbf6a9609a11612a5cc0429bcf58e7f86f3451425bb49298c07cf7184c7620b7d4fd422c09f5061710b298122e4af75852538e69543aa9034f9c99aecfc25c8c00e7de6b0cd332f050f49d055bbd9270445d82e0651441682a1ab20ebd3f2792006838f743cf3a578b2446041ac1dce5dc6e9651737aa"], 0x0) (async)
request_key(&(0x7f0000000300)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='\x99^\x00\x00\x00\xbf\xa6\x00'/18, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x7})
ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000200))
close(r1)

4.926834706s ago: executing program 5 (id=1693):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_usb_connect(0x0, 0x3e, &(0x7f0000001100)=ANY=[@ANYBLOB="1201000020dafb2099041010f5050102030109022c00010000000009040000016f2bae000824020100000000092402020000000000090585da20"], 0x0)
syz_open_dev$sndctrl(&(0x7f0000000240), 0x805, 0x88400)
syz_open_dev$sndctrl(&(0x7f0000000000), 0x3, 0x40002)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)="89000000120081ae08060cdc03007f03000000d0c01c73450d0dc7124b6a4a0000000001ffca1b1f0000000024c00e72f750375ed08aa4abf656331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed", 0x7b}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210", 0xe}], 0x2}, 0x4000000)
r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041)
r3 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x800, 0x0, 0x3, 0x1}, 0x20)
r4 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r5)
sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r6, 0xe01, 0x70bd2d, 0x25dfdbfc}, 0x1c}}, 0x24048800)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@loopback={0xfec0ffffffffffff}, 0x800, 0x0, 0x3, 0x0, 0x0, 0x7}, 0x20)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"})
close_range(r0, 0xffffffffffffffff, 0x0)

4.573331231s ago: executing program 2 (id=1694):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) (async)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000000214010026bd7000ffdbdf250800010002000000718080688b52983b14c41413efa7bfccc05f0247c29dc6e7ab0597d9605a087de828263fff728837e07cf8ada5abc47d1551bade52c56fcfccc898e572bc7d3052f61ffa2744e7049c8cb1a4e91ea7c826eb7bafb7d08c0f9004af7eebd12720d7"], 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x48080) (async)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) (async)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e21, 0x5, @private1={0xfc, 0x1, '\x00', 0x7c}, 0x6}, 0x1c)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) (async)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x1, 0xdf6, 0x3, 0x0, 0xfffffffffffffffe, 0x8, 0x940a48a2}, 0x0) (async)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async)
socket$netlink(0x10, 0x3, 0xa)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}}}, 0x84) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'macvtap0\x00', <r6=>0x0}) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001c81000000be00000000000007000000", @ANYRES32=r6, @ANYBLOB="8000b2000a0002000180c200000200000600050002000000"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40800) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a4000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b400000095"], &(0x7f0000000880)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) (async)
ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc01c586a, &(0x7f0000000480)={r0, &(0x7f0000000240)='tls', 0x480, &(0x7f0000000340)={@_ha_fsid={[0x80000000, 0xf993]}, {0x3, 0x0, 0xfff, 0x16d8}}, 0xffe, &(0x7f0000000380)={@_ha_fsid}, &(0x7f0000000440)=0x3})

3.619391718s ago: executing program 2 (id=1697):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000206050000000000000000000700000014000780080008400000009808000640200000000500010006000000050005000200000005000400000000000900020073797a310000000010000300686173683a69"], 0x5c}}, 0x20000010)

3.583185714s ago: executing program 2 (id=1698):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x880, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}]}, @NFT_MSG_NEWSETELEM={0x68, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3c, 0x3, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x34, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2d, 0x1, "fefe807eb37bc2a7a6110a370abbe10adf32aa848edc90232d4665de2ae1583b710c20da833679ebe6"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xec}}, 0x0)
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1})
poll(&(0x7f00000001c0)=[{r2, 0x1000}], 0x1, 0x4)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000140)=0x1, 0x4)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
syz_emit_ethernet(0x4a, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00fcff", 0x14, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0)
r5 = syz_open_dev$vcsn(0x0, 0x1, 0x1)
write$UHID_INPUT(r5, &(0x7f0000000d00)={0x8, {"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", 0x1000}}, 0x1006)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0xc001001b}]})
r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x48, 0x0, 0x9}]})
r10 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
r11 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r11, &(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'macvtap0\x00', <r12=>0x0})
sendto$packet(r10, &(0x7f0000000180)="0b031407e0ff640f020047540f68a13bb1000e00080089064803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r12}, 0x14)

3.395745626s ago: executing program 2 (id=1699):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0)
r3 = add_key$keyring(&(0x7f00000005c0), &(0x7f0000001100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300e308002", 0x1001, r3)
r4 = socket(0x10, 0x2, 0x0)
write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r6=>0x0})
r7 = openat$ttynull(0xffffff9c, &(0x7f0000000140), 0x200000, 0x0)
ioctl$TIOCSSOFTCAR(r7, 0x541a, &(0x7f0000000180))
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000ffff27bd7000f7dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fda45d0521860000140012800c0001006d616376746170000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @random="7c44a8d5ef31", @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x1, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@ra={0x94, 0x4}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0)
unshare(0x62040200)
syz_usb_connect(0x2, 0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000084a48e08d112f74247aa000000010902"], 0x0)
r9 = socket$inet(0xa, 0x801, 0x84)
r10 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0)
r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r14 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r13, 0xae04)
mmap$KVM_VCPU(&(0x7f00005e1000/0x3000)=nil, r14, 0x2000009, 0x213011, r12, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, r14, 0x5, 0x11, r2, 0x0)
getsockopt$IPT_SO_GET_INFO(r9, 0x0, 0x40, &(0x7f00000000c0)={'filter\x00', 0x0, [0x8, 0x0, 0x7, 0x4, 0x8b32]}, &(0x7f0000000200)=0x54)

3.038790931s ago: executing program 0 (id=1700):
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16)
syz_open_dev$vim2m(&(0x7f0000000580), 0x407, 0x2)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
r3 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0xfffffff9, @loopback, 0x4}, 0x1c)
r4 = socket$netlink(0x10, 0x3, 0x4)
writev(r4, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100050c100000000000224e0000", 0x58}], 0x1)
r5 = memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x0)
write$binfmt_script(r5, &(0x7f0000000200)={'#! ', './file0', [{0x20, '0|\xee\xdcCh\x1e\x88\nk\xa8\xdf\x89{\xaf\x12B\xfa\x1a:/Fi\x83\xb2\x95\xbb\x02&x!\xf0q\xaa\x02\xaf\x8c\xb4\x90\xf5\xd4\x9b\xfa\x83\x9f\xd5\xe66\xdc\xbb\n'}, {0x20, 'x#L;\xf6\xbf\xba'}, {0x20, ':,'}, {0x20, '\x00'}]}, 0x4c)
execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
socket$nl_generic(0x10, 0x3, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000id=\x00'/41, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x3e, 0x0, 0x0)
syz_fuse_handle_req(r6, &(0x7f00000020c0)="c6cfdab7e6f83fe5e44dd3a8d886a720a29cfb7e50ef99fcf38be6c3b9a9f8c9fdb7b1332c99b85247977ad2d66a577e6f0853366c7561476cb35cf07e6fc1c21d33853a21771a8835a50d941d35a4ccb511cb67ed64259c99811f0e6f176fba1e0fa45fefe030a588f0cf64895fb12a794fd0bd176a38440328d3c6c24c85f50e95c5190eb03fb04f1eb34cae287ed75c8ca8fab2c04dc1fafa14ef93e2a721a12238700dfdabd057e94e697534e1af81921756270313d22a185c146852a5e94300bc8de9904e8c6948d5d2aed05337b9572ee74b77209c6b4710e87fa6661b19283079a46f70a538d96f484b63171bdc3622fcbab6d9bafeaacd755923209c07b8c2f39c04ea713020bcd9e6f1120ea3fbc8dd0b55986c05aa0c0b13ad52f250e9505ba53a887ed7c857e0f56282d6dd5932930efe384bbb198c50aae4b9a65e6a6ccc2904a9121a28df865011c39a54fb0f890cc1f7ef5f5172754f1c2aa8e8acf8c754f22efa88ffea91f2a14133e0a7a8a06bc80d042ce1affa2ebc74b49b48169404b33c62915e54c554d10bc432ec988f7081a8690335d58d0a819d33296db1377af876d84fd557f9a2018ee91f7d39819fc72b0a9bbdd05d6efe6cc459cd42e16f955dcb1a6a2b8b2a71b3a7e1bfa82816abf8c7d3688d53decbc480eaa3821cef557290284d9c504a63768852e15b39841ef3648f14c7edab006a30c7bd518f300df6ff307c0740150dddfdab1e408edb96b2e6ed612b0bc2fca570fa1813d86160a766fe6c11cdbc7a67014fa7645b4b1d3aad378bcce27aa4725ecf7675b2682cc5a15673136e7181ed5ef122017dc72df65af147dcb9ac702f8a6a2eb3f6824ba7db3c32fa4bfbf63dcd45e42a49b6edee22856fc2a43aeb6a3eea91dbd53a231b559ca7b38564853be3bdee7f820966faa916ed4fd335159328f8b727ba068b0ade0e11c9f2c2af4d5244f5d49f9c9f94105a6fe4c71112bcacf9c3dd2861d06cb3fa6b2159bc2028e513298b594ca7da60f4ed30edd7b066c23ca7d9b7d9555b47e687b43b7b5ca3210d939e34dd3d176d8b3d3d2f32f28518aa8b5169362fee4a4ede7d3d218db0ecc3de14789344df20188d907093bbf621fe67ab2a1f29221b2ec334dadc15345fc829005f4f81fc13ad0f5590742295812a7f2108cbbbc37387a7d4174592bf4f94f272306942e6c44b23e96d92911ef416b4159e81b19f267aad20c2aabf7fd285330cbf4c1bb8ac86493e0ef84de88eb7953fcf833e6cc5ebdd50b706bcc148971d24e9d3736ed66e28f75e6a1e2c9a4e2abba887b27815d2f5739fe5f8afe7240841337bfe7a69308186180fed5736fe3cbc2892cb991d0f4400d66952459c54a16448f06fd49995aa65501631d5c42e2abd8f0d890a6bbe49b384bfe27599afd536493981be5f7dbb15bfbc198fcd8ebfca182c53156742e237df31c1dca495e40cf030623a8a081e3bec3b8e5109ba05c0830ef00ff98a4419bae14762d8e0a790c1d517f1f683bb1712a6a0951f024a46efb5c2122460495fa0f4ebaae86286b8a626be2052874f947f18b0c2860ce681a33d5f4217415363fe7a6f8fca125742f03433988d88a5b8e2bf4f3079eb990b6e1ff381b7199717fb885f4f37351bf18bedbeeca351b7bfca5b791b91be0dcf8d169914c449829669e0577d1ebc4fa783d57e0c695cafae201014831a16d8fec47f22d9b79c2acc820f4dba9d1a2986731681ed1f8dd1e83bc2d491302d2f769e6b0bc470404930cad6511492b3adadc6f5073220590d1ce89a520b6d51d6903dd54360cd7047aed76e0a6cd3c3625e67b7c1636fd627aa48f1ee6dd567730c6ec19d1634f62a77f70c64736532455f0d2ae85003e7bb32f06b480a9f7fba5e6917305fd77e38f6936e49c1a3b2a07e242ccc2f9d629d7992937a035574b3efefd515096e30058cb60cc89d8565205f15e71d805ba5d1c4f7b971918e32bd81611a574fc651bc8094f7f3aef8a3ebf95aef1c062ec66e288b1d1ee17ab75723bc46b031744a25cf055c1bc8b083313e38d0fd5d60e832ef28fbff4c93d2d2ed283575a486167c7158e08fe7094d23984bdf38cf6000db39c5d0f7db72325af909b18247d8fddd89eff8831c294d52194a11dae2339938a79ae903eb63bc6e5535796e1c0416cdad01e1493a3075930a0b3b50ad904ff760bec5c6406b10808bf13251df73b4d6fd149a378ac277ccbbfddd9536abdf5c7a8d29e128a290f0d56c9635540f4c9a3ff1d3e0e2b974b50497ebd690dc9393f8b3acfd1650627db8ab784233727f997dab536f1e993980a41f510fa0128d6bf2c8445ed1578b25a36e05f7170b9fbe8ca63e1b4a7235c27f56790c4dd38168ce26358d12b143e9dbae1d01406778250f1c77c80643016ffd4a7a6703b9c3dfa4e7b51fa1d59605d57c9712159eb34c306a988ac95eeb15c3225ccd022d2ccf5f31a81009d2a25891b83e60efe8f718d6c124202f108d23e5e6c89e269890bda8e5681315db361cdf30e4269f2cb530a188f26621a8b263f22bb385d779b3c4eebd16656451087457892e15074abb1c796f0b7f635b9496f3a17220716c449c11c0e82b67b8f1ee6a2709a20676f40f2751df3d74db503db6cb73c955ae1d6983da44de4d349004f3d9db4ba40124416a67bd18d1d9b3c1e4706ddbb2099a2ae16e99c144860d46ef66bc6844963c0563fe2cb8c4049dea32ce5656fbfec6d1aff7ef48bac92c932c9787d9e4cb0c78fc3d70f730c452c20d077b4d9ea304f1b8a2967b1e7af7f05fd35f84d633bf5095b1af53a506f6f61abc99186eba707843e9db2a18fc1c6c77dd79ab9353eaad6457245709acbe9cb381d4458eb5571fa4f4df069ae668b1df2c97f91271be5fc2040031c3980c7555af2d4186875ea4599c873ffaf47aa08c27a0580ceef6251dce4cfd6eb175a1bf36c1fd750826f4e14966e6f196b68da0a524baf86f49ce8c09430554b50a0b387c02ebd59fae9caa1054cba1304aa6732f3990ce6b7bca6b65237f0fc3c79a102e2989dcf3f884002f2efe83e25a3fb217c24c4f66e0973e7ca62483bb52c943ccfbf31324f2b7938de0555a54f47256c903ab65489906c382d7d1022f7f302b186d18b5775e042ba83b874793420a6d854aaec01e3c819d0b11b51558fb9c10b1e2ff96639fb119d90f80aa302c9a6420b4b1230d79fd1e8105259c4ebf9cc3f1eac67f15bcb9d49ae537084c96994ad08214ac07db663c1bbce6499b5665fb5a949ab3d65062467824a2065a9de2f1edc243e03ad38f0ef227519de50a3dc2e8f4a38538be5557c5de56d0110a0759fe96b0e66d20fcb6066995f77fba9c7468434a53ffffffff000000008bd2ea3b1da2a1178acf50249d77757353943cd126b511098230698782ca88d018381f233f4331d3980f72f30caf915a18794de1253734b89303f25826a80ddd75a9bdf14c6f01690833190872ca5431ab92ab3dca92595983b11de0076125059234720906641119dab9c96be9c10d60fb54267bda61fcb85a491df037cd563b229eea02cd192796d36803b04691d385471a5f68bb76afafe9df28f50dcabfefc8e2eb334bcace928b8eb8f6449116fb5a0fa4a0c51e21b8b1f99308d396db60418cb5385bdf6bce7227e514f6cbc9a9fc50b79e8b0530fd51b21679ea1c404dba52811b3c9487f670e622ac7b1ce8028eadbd882d4325663d8dc4f0960c047c5f3099c90c6256bc11e8eef6b325e0f1ed00279a695f2828762f28ecacdc726aedf42064727ec100ffa74d38d47f383946b9f856e53cb939f98df1bb5af2a12810a619f205e030a302628ffb9b2cfcc2e881e239f33844a118a4de2a5c3d6b857c5105db775a61c5d54d1d82048670e8cd2c44a032904005125eb9f999e845efba3a063e3e26b06298f28799975b51118eece2b7fec02d4b888bfb90919bec287aba71296c66dcf749efa3abcddfccee6ef80d03a1638045f18fb96131cbd9a93e657c29eb74de40f433969e1988ac335bdd9c671b5b75ce6e2440be247775f9d597b4d8523c283e774ed0987e10b88e0c5616720502149db329babc91b225359927f88e0b42f02d41a4c9e0ad7c55a0d2c52cf45da6152c0c742f661b562c3a8ecff1145cac3f63fc053e1a14fe7a57742ab709581604fabe54ff13172b5049434d12f6ed9623265af643f725efea21e2ac1b82365033b9cff4158318f40c8894d2bcffdc954fcf7068c97ca2d2b1bf19b9232b918864e3f63fd59f4c8c578821ec5083e46363d9158451c5a92b425e68081b2c7572df44658a4aae41a439c6bb4bdd2f26ff2a357fa2946e5be5cd97ba25f73bbcc6c05fa966d0aa0cf2e45f22e0021468b37d5afebbfba3233e2cd4fd64e1578be72c38891224cd6c70c4cfd146df6a8142f1493772d48650f8fcbd1435ff704e02ec121e9f43de623eff8070f88a623cd395a02b6b1ffe4ea7ae7f443dc8bdac2cfaa126d4ac9d7788dc972c88fd87d3c8758853f1882532e4ff298b466e7d198daa9015127f2937544b34aaf545f39ee00d74e0e1017a30ff2edff701d53f3a13fc61b31fe7d9032a6c4a517c7527e48c0c44a2beebc9a9f9e6f989bc6c255e05bec5ff99547658143d9eb43a1d96aa5288638b4477aa1f84c59d41194335c09d9d5d660640acb84b53520482fb200ca616e1a6f486e6da3e6721479e85d0676ba142d95ecdf1acc76a49e9bf016f951d8b95adc7e8d4317ddbb28b678135a4a9b98fb8b8b5948b682ee70e04a31f7e3c49c52a11acbb29bd8152bbb4fedd2aae8e7ad5330365213d207677855e6cd72bf93502c14b11bd2f2d6e797efc2cc5bc198730e5cc51c92751ece5c167b3328a6deed4bd73c62623bb3874c9ef18e24997e3ac93b0ad9ca7ddd4c0401ec1b942cb21dfe6abfd3aefe2588ac1684bf6b37dc09d9b9d932d5534c707ef8fe0812a403e057d00955559ca3e0f7e70d3cdfab918b8d125061fd53374c97bd0c9d19e68bacb3db46974d36cb1c96b4475acaf4d46b88a578ed570ce09eb540f30cce4c3f853a9fd669ca36c36ff1f0432713f60e6d6bc789fdae7c7fcf4049e6166b63a12aaa3da6fc35d8783020ceb92f7f90082d4826735618905fc9fdbeb65990882ce130a7e5ebfcdc796ef293019925e80af5074bfed5f62833d9d98e324dd54e30e1d69a15e4beed5da9c6ec01a32978aa29cd26c5703a28e504e7c9264e0421718422b88ef90f6fb4e51c619f29b5fc2f600f88be036eaf28d7f5433715bd493ce55811901a59964f20ac0b06dc3a555eac123c40d3b397053501523a51e8b53a92bbd99ec3bdcd57904cfac3c0d7bcc6613b11a771d32f0f6c60c05449b42820c0a41f757ea1efebebb37f8ea567b2f7dcc4a67ebbdc00716a70f5fe255b9232e27ba05888e034fc50ac0934a43c84577183b83019008edbeb27546e8be7d8402a4c1852198c0e050b96129fd66247c39abff19338300fc3cbe20a395e5805d8bc64c2d87ba27264716e211ab023765e8d454b637aa1320cb18eb4a3dbfa94027a4d75a9a2cc784cbdc22694a8f7e97bd6cea5a4e26b538be9a9dde5637be2d386a85a79ed4df541ab7d0b1370d99d2cfd1f7bf1458bedd0a53f5e6972ee424ed08acb4b49db83cae427d315d1fea4e680258e73b3fc50fdb77692c8798bcda57ac0c34823d69a8ead14c41e9613813838ef80f63138cc9ba3a6b83dfc77b6aa1248678409bd96b64c0b625e88e33262fa0bbee94fec8f3bffedaf8b12d229d0f637848a1dba01892d80f5a5596d37ac1c9c54d32dec3ca56b49aa1157583074af418d0d95a5a46fc3c234814e377963dd4c9c8a5f7cc35aacc892afb9bcede477760688e06f0b2c5a702954f4532c715151eda02f78830129b2612de8fc62fb992d1ba52da164920eb1d1dbc7d1f8f16e31c763581f4c478cf7a84cf01ca904160475a1eabae393bcb852fd550374002bad1ba0827dadcf3f6a2354a3f8f67e6da4f567fe21f55cc34840e79f6af947561c79a141721f6da4625a20fb203f96bd1a3b7322a14a0ab4a38835e1f235f772a18643824cbb9f76664b1212c785055ae17e89f590fdb1b81535e1e3e8a726a9aaf67ae2a8e67eab8f32781bc21027cb1babd932d63bafe7faf48bc57820c5e32288583db4cf369a7fbb479e1e97ca67f63b1880fb33ccf2661d7af9041ea1afc0e90ee0b4b510d094268e4576584a17fcb21b3c3f68bf1e1c4748177cb4cab92df4c254e0d0759d507e5eb096861efcf1aa66805474e3bd32f7055a7d53d47f416d24a5ac7d5fc953206db3a012234d8693e0ff662457ddaf9407a7ade1fa8eaf85b6e1b1456aec3064ee858742f4e22f2d6084e3881a4783b3a9086009202eb6eb77fc1ce2236d6384cbc62c7db9cecd2fdb06f328d49c066562cf1dee863d33b48288fbb1d4d5bcafcd1b6391879e670c7189bbebafe48214d6e2b405e36192e1067eb8d0363777a174e630467673ca968ea51476b0b8a04d598f6fc593d3f3267ab37e17831dab86a67aac3ec8336c5b6e9e416b1f46d0a9e8ec6c515d86e773baa409e2afae30ea1744f2bc777af11c42f2bf6177e95245c6d601f7cb7b589ccda76a2a314dab023da8128c667a0df682f5c7bbf842a2bb51d4d842cd09d02d67444e5d8ae1f3260c4ef2da5a1c4121fdd47e953d03ff6fea10e35db2c0c110704f513b9d1c57c9da80881ced16d92faf1be60471dc4d82529ea50fd6060be18e8e6deffb15e0a0df4e36117dc22d78bd43b3fedb24cba54c2f2e3bba015bc4c817f70fc1e8b21adb04a9d8c229e9ec178fee0f35d4f169bb7dadd14f46ddc13fc62da4e21e42270a4ed0d60b4034db31ee1e13c97d8d941b2627b255d4283cf0af9044a65765ba88dcb2010fae98a6aeb0a5605d8a904d1cfa0cf8fa67a9d29670a108f014a1b21862e20d4f0f3f0cb99c97f289c657dbd08237aba2f616804ebb0e71819fa46df1a018d8336b534391596cd24b0720dd8a95e5c74b9d047da1da93d653b2aa98e67a65c3868a0c464ad24d427c3c81b41f0b2fb78f6aecd5487c29f4fd871bec21f54d22b661eeed67c866cdf057d585beace568ed52a4399dfdcc8c9a80c94f3cb92f0974b9b33ed893e8db33cf95220e03f3d28edd8b80991b0754010e7252392d1e846011defb6c46c73ee015bcb9b288f6945771af90ddd8c548eb6649efff32b0a2b36e743e46135e47fc65d1eb3f7a580104c22bbcc75ec041813cf2496a4793d17112f40333e3c874e0bcbcd889a6bb484e43632b2f9a628a461a2a5d58808b848751642b5c426c50fd82398894dc78c56ed1f0358b626cde2a0167dcb210c8ae2f6d9c95356331cf2a21ed0dfd5165bcac2681ce070f60ffffe69dd75836c4be0aa7f8630bf345a32d246c838552cbb35a6dfdb6ea54c4ecf0ad16990901b7a72280872fc807eda1de4fdce2c223fd089e0f0eac84c1e2980b9b5a032dd1294bd2eb49372f55b9b4cf4d3c1b14050bec1344d71a8316e173bd36f5917100de4dfedfff896517a04468006e5c632c8ad15521324f3abd72545b47df874a4a95d3bb30915ebcc3ed371528f89c7e943286a8cf4ff2cca3f3496ded16b139658bd5d3323ae9007b4dab665cd24e7888735de2cce7bc1b3af39a6d92d787dd237f8d72283f7aab1d99985f3783e5cb0661cadb552293f189f75e7f3fa933c775a27415a3ad22239986364ba7a582f2d9c31e7247aa8d44d5a7e8169fec65daaf62756b34dd307ebc7fbe8a8023aac1553fbf15b48a8ee3bd0c35c7ced684f667500ab2997aa75382475eb35888e72b30ad5aad3910c5ead6797f4182adce92dafc2073f1529ff5f1a42daf3c78e499039864e8e768fb11b33c0d7779e6128579d882761f9b21fcc0696da03eeb049c90b86da8dba548058f0caddb83ec9051a04f3133341e9a17a17b72ac20cd9e242fb383365f6a2f5c795087c7ee682555adadb7305bfe2886a57f3718f30f24b52d481aa35eb2c40417df5ea9d8af1b7b871ce37fb1c84402d269e3a01a5c9a00d3c7d6ff21c90d437066850ea92773288ba925294f9368b74fd1f3c4512800000006b73641507480f3db07634df10fca86bb4431664ade710d5a8894c368660c95f7a0b8ce5ffcdae136b5c8b4ed8c3b4cd9b71079dfd6d1501df9b7f1477b516f3cceecb2def619c05061502b253af7e3deccc839de56292c95a3912e809b100897a85705cf59af66e194143d13c12b6dc1a31cd15a74fe57666931e3fd6b75512d22f063c68576b1bd6a1ab6d7f4065447daee300b7d4fe330daeda866beb44eb8ed4041d0a36bfa49871e0623eb6f5d7b967e8f969985063e2fcc6e0e847025936b36eaa2e817ebb45c375f18350247f6586214a200f2f17536b52b8fa196d4a6a77317807075d130a77badf745a6076b1241e47942501cba893fd0db02545e49f559e9712a60ffce9f3154459c69984de49e11192266196497c81b7c5b45997c1369c8e8490b1a748985fd4c9ab8929d17a51c331dc160c8ae8d2961351ef103e3427299e4f28faff6ac1905be2816a172511472c7232bd104ac438d846b4a727df2ed24364e061f157c2447e7d5265b1cd75797603e220a9d2e280868f3c2c56befbc6b1b1a07be1070b293adf324b3aee5140ef5f643c952726d9b770989b07f2cdea2e1d6951027e8b386faccff07b2547dd78aa85cc113b599ab168ef602e40fc097396341a8e5b97b59032110ddf114129feaed96e85237bb4bb886b287279b96234c18947ce7d2d5e92dd5c68829edd271bfccff21b87f6a061c9b43b51252add291c8f59be1a222d00fb7719664a8b89c452e78cf1d491a036107f0a521545fd96d2548735847e278065c196153028b91f59c7b70f9883f14cfb3343bb230f4af9bd51132cc62ee5459e34f57bb2983d30e65e65ab769fa0a0578bed01f33c76f4138208659a97fbbf380f1321336c14d21012f3cc4ee2101d42321f0123d51377e319e4ff4551f7f83ca62ff9448a28b6134da582f609be7dea5d70370772ef2552f12e97cf390ee2697022168d622ae0c813d86a43c25c758162ab0aadf25c84c790fb32a459997068be01325e473871cb024ff030070434d197558b8df442e1d2ad0c7b33fe021fa6cd57b7477dd76c6a802ddf405e909d48d23321e986d791b44d32d417d63638246fcdd661e6a1453d1411ec85fa0b750354aecdd4f4b90a420d2d4f67c514f15a8fe590735f660dc5eaa7f2873c7841edaf2c0d46a92fc07c6cd22fc978f74bac72e468d96ba370fb88f9a629d4de0a8a83d43c1949aae33fe24859c1bbf8663adc6936e305cf9c56aacc84e7515caf18d0d049bec2f0a484b75a8c2c23abbca66b039a52e606f08df0a3cdd2dc6449e84ce463206d2878de0e4d0f438764a0fe360e95494e9e61581001785b081254971197024460a68ec029052f2d8841dac7e714798027696067e739cd1525df28ac9514c02e25f8ea1146e356fc5941e4661cd244dccee4a1450e4334a20cb572b842d44a8431abf4d5bb82ac6b78ce3c6d394e5969c6fe8216805f6e2db2889f27849e0dd26a5a387958a36c833a8b3d861033c00ffef267e4b09350ca1b819d5c83025e4ad69328970db92520e6ce569d5632caeb6dc42c8f6f8759256ad9c1ffe8c30a92b795bf00544714c957d5d982a4e91ec7a30dfdcacbd41ceb61f208e5442f7f7ce19ba2f0dddf50020ed1c271afe5007277e2496c3bc7f3101d6fa7f0ea2627a99de0c441a11c6afbb721037dcfc897fc5d9e0ed644b9c3aee328bc2beb3801d2bf43b1e360759c1056c74a63aa33cb6e5933b7a0b4f654113ea5830de7e8374e939e4c794be77f1f0c1e1bcedc8f584a56db0c38b6c8da60bad62b41d754d9b6cbf3379374a6126db0ef1ee2da5862acaf117408ad26c66ec8ee4f9f1844fb4cc64bc61212b303c7c622f05d29b7fd540bdc253bc948d373886e5cd4dc9bc1b551dfc514f12cc64ecc3b276ab43a4adc2142fea9c5ecf983b0841729d1771b51c2ff787ac2439f305ca3fe31cdbe24f034fcd3d41141cc0ed5cdd82e3171be1381ad4f0bf81b3be200524c98cad5a3dee3ee618c97d0678c7b4fbf729dbc2baaa2385fb63e6b906b08681c19d55200924c0edb4c3b48463fd9c2ac86510ce1e0a641def11e9e7b7fa74a629895221b06a15c995cafe55dee6c06e01b34f4f18e5ffeb76ffb412277bdfa4cee10823a1e55832c3d1d19ba5b84560668b33fafc672cfba1a85c60c61c45bd562506d9d28542c4b4795ed011a8005862f7add9dc2533dd29d0ddd534eb0a3b537b391c423b527b3ae4ce0c829a6efcf8671e9e5224df6ed6c1f20452cb46cd578a620788f9af325d45825ced3043ef3693ffebf7b881518ba2c71587251edf150772ae1e24f4415f9d9307151b8fbcb83d0da908f4b6c762b777dc406991353e962f181bc06e892ff9e49e557639dafd09b291f79720b866e46bcf14d5bd1ed15a468a8996ecec8ce3d9890fb45c96804dddfe5b7280c0e30934f129e14b344506f70d484eea40baac63b89dc71b030a6c8149ffca2434c773bffe76bbf2e778f0034666970a96bf336ee5240e765ea3715382bd8fe19c5ce5a8814717d87d4d6304a3b0d6581a6fed44975ef8a8186c19a513f5c6c0610acbd31fd58e2cb683162464cf7f50ade879461ee91f433b09d1febe058c101a0ff96cbffd547c2beab15ca343cfe592ea435f980ff03e0aeadcc80d64383d287997a6a937fc22221cec2a1aa6e8dfc1dc6e0f2e02060a18c09957376a72e165728acddf73873a958f43bcd2e9c6c71a83f744bf14c75f5e8308523a7d39bcbfd832c6597b2928b07630ae50540bb71b44b5b4040a1d172fabe8dbfb96a99e7498b12dcc8ed9e43fb36c202d019b4fbe11f715f5de76bede175c22d8355323eb004c5021d892fbe48fa7b6bf382eb03d0e447a38c63bb7fa1154c2cdf08a1cf5fa95ec75a5aa9037ebf8916cb78e6da650016a0c7ed34290e25e2122be24e4373c49c4fc81c39ec1a1ce4b658e1b80562bf911a1f6a5fc2e69d2554d4abf5ad79d9c9b7d9ac8c4122c11f590a35dcee3fbe185027832b4e2a71ebc591a60bb874b36b415b455bd942fe1a69a92b70ce1a1c867c85138449529cab5f63feab609a2ba3344191c416d8409b59962bcee1c4a40874069e28432fcade20f07c9259dec75fb978a6b84b6e8f50fdb341c7c19f55a8fa389cf085f44661c9618d56d32be0bdb3b2928fc2c372e86ea109afaee022bb832e80e869c7cb1053921b862b27599d3665f7fabfd6436743ea893ec43e4e4daa598127df8ee3249be4668d717117a038f0e734a894457df4c64dd76a9d9d42efc29f2311085c9e6fcef385f40af94f283edca078797e96b79719875aed3900252c3acc6a92e23083b3fa24057d9ebf7886df99d652e7d18cbd445560a0afc81bf7c011777837f94b32094fa1bc99472cc2a40bff245abb27d3f628b1b649fd00", 0x2000, &(0x7f0000000700)={&(0x7f00000005c0)={0x50, 0x0, 0x10, {0x7, 0x2b, 0x7ff7ffff, 0x2188000a, 0x2, 0x6, 0xe9f, 0xffffffff, 0x0, 0x0, 0x0, 0x102}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r6, &(0x7f00000060c0)="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", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)={0x19, 0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x10)
ioctl$KVM_SET_IRQCHIP(r8, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @ioapic={0x54000, 0x3, 0x7, 0x1, 0x0, [{0x9, 0x4, 0xe, '\x00', 0x3}, {0x1a, 0xf, 0x31, '\x00', 0xbc}, {0x40, 0x2, 0x8, '\x00', 0x9}, {0x4, 0x5, 0x1f, '\x00', 0x9}, {0x0, 0x4, 0x3, '\x00', 0x3}, {0x0, 0x0, 0x9, '\x00', 0xf}, {0x8d, 0x7, 0xfe, '\x00', 0x7}, {0x10, 0x2}, {0x9, 0x3, 0x40, '\x00', 0x40}, {0x9, 0x6, 0x7f, '\x00', 0x7}, {0x3, 0x4, 0x0, '\x00', 0xba}, {0x7, 0xe, 0x5, '\x00', 0x80}, {0x8, 0x2, 0x43, '\x00', 0x3}, {0x0, 0x9, 0x8, '\x00', 0x3}, {0x7, 0x55, 0x1, '\x00', 0x8}, {0x7, 0xfe, 0xd, '\x00', 0x6}, {0x0, 0x4, 0x6, '\x00', 0x9}, {0x8, 0xff, 0x4, '\x00', 0x4}, {0xff, 0x6, 0x2, '\x00', 0x5}, {0x8, 0x9, 0x9, '\x00', 0x45}, {0x2, 0x9, 0x8, '\x00', 0x9f}, {0x4, 0x8, 0xff, '\x00', 0x2}, {0xc5, 0xc, 0x7, '\x00', 0x3}, {0x0, 0x6, 0x3, '\x00', 0x5}]}})
syz_fuse_handle_req(r6, &(0x7f0000019380)="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", 0x2000, &(0x7f000001fec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000001d600)={0x90, 0x0, 0x5, {0x4, 0x3, 0x7ff, 0x6, 0x96, 0x2, {0x6, 0x800, 0x8, 0x4, 0x5, 0x1, 0xff, 0x4, 0x3, 0x6000, 0x5, 0x0, 0x0, 0x3119, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0})

2.935372791s ago: executing program 3 (id=1701):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x40010}, 0x0)

2.445729533s ago: executing program 3 (id=1702):
r0 = io_uring_setup(0xa71, &(0x7f0000000240)={0x0, 0x86a1, 0x8, 0x3, 0x377})
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000580)={0x1, @vbi={0x3, 0x100, 0x0, 0x3231564e, [0x101, 0x9], [0x1fe, 0x101], 0x13a}})
sendmmsg$inet(r1, &(0x7f00000027c0)=[{{&(0x7f0000000080)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000500)=[{&(0x7f00000000c0)="518664", 0x3}], 0x1}}, {{&(0x7f00000006c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000700)="6d1a9c", 0x3}], 0x1}}], 0x2, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

2.188078317s ago: executing program 3 (id=1703):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32=r0, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40004010)

1.893020605s ago: executing program 3 (id=1704):
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
mremap(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x40000000, 0x3, &(0x7f000063c000/0x3000)=nil)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r5 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_INIT(r5, 0x29, 0xc8, &(0x7f00000001c0), 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r6 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000740)='bridge0\x00', 0x10)
bind$inet(r6, &(0x7f00000001c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
connect$inet(r6, &(0x7f0000000140)={0x2, 0xc000, @multicast1}, 0x10)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0)
r7 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0xffffffffffffffa5)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd700000dcdf25070000cc1584d20e58c6562bf3000300", @ANYRES32=r8, @ANYBLOB="0c009900ff070000560000001400040073797a6b616c6c657230000000000000080005000a000000"], 0x4c}, 0x1, 0x0, 0x0, 0x91}, 0x24044884)

1.808926075s ago: executing program 5 (id=1705):
r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a000301000000090400000001"], 0x0)
syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x2, 0x20, 0x1, "", [{{0x9, 0x4, 0x0, 0x8e, 0x2, 0x7, 0x1, 0x1, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x80, 0x6, 0x3}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
openat$nullb(0xffffff9c, &(0x7f0000000e80), 0x600000, 0x0)
syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
syz_io_uring_setup(0x186, &(0x7f0000000200)={0x0, 0xc2d3, 0x10100, 0x2, 0x3}, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f0000000000))
openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x140400, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, 0x0, &(0x7f0000005b00))
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00]'], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

1.587846213s ago: executing program 0 (id=1706):
r0 = socket$inet(0xa, 0x801, 0x84)
sendmmsg$inet_sctp(r0, &(0x7f0000000940)=[{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x3, @loopback, 0x9}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000500)='E~', 0x2}], 0x1, &(0x7f0000001680)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="100000008400000007000000e00000021400000084"], 0x50, 0x4004044}], 0x1, 0x0)

1.52774129s ago: executing program 0 (id=1707):
r0 = socket(0x10, 0x80002, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="48b0c5c99c", 0x5}], 0x1)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, <r7=>0x0}, &(0x7f0000000280)=0x5)
setuid(r7)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x46, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x48c, 0x0, 0x81}]})
r9 = dup2(r1, r2)
write$FUSE_INIT(r9, 0x0, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@getchain={0x34, 0x66, 0x3523ad93bb3d228b, 0x0, 0x0, {}, [{0x8}, {0x7}]}, 0x34}}, 0x0)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r12 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r12, 0xc008551a, &(0x7f0000000240)={0x1, 0x10, [0x0, 0x0, 0x0, 0x0]})
write$tun(r11, &(0x7f0000001640)=ANY=[@ANYBLOB="6d6ff169010011fffe880000000000000000000000000001fc0100000000000000000000000000004e254e2101009078ee373935ef0f8da10b47000507b0025a9001e6cc07085584f840507e8bd26f3ca1d633ec368e2be6a38e100ad79a38fb5c1436b5988215e096f64a843aafad7b82e65587c030411aefc61cb5c51b9788796ac34f4a8e455dd1d07d4684c7b2e91b6fd3fbaeffe77e10e2bd1d0cde2e814806120485b4b6f5c6d14b2304b00be5fe8ca59610a206c47126484462b109828cae2dbbdd69bf1f853a"], 0x128)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r11, 0x0)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000000c0)={'vlan1\x00', 0x2})

1.357765041s ago: executing program 4 (id=1708):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000206050000000000000000000700000014000780080008400000009808000640200000000500010006000000050005000200000005000400000000000900020073797a310000000010000300686173683a69"], 0x5c}}, 0x20000010)

1.239805483s ago: executing program 4 (id=1709):
r0 = socket(0x28, 0x5, 0x0)
sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x20000081)

1.170382431s ago: executing program 0 (id=1710):
r0 = socket(0x28, 0x5, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0)
syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xc, &(0x7f0000000480)=@string={0xc, 0x3, "70a9db45d0d105a9b0ab"}}]})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)
sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x20000081)

1.111825149s ago: executing program 4 (id=1711):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @private=0xa010101}]}, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f00000004c0)=0x27)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000140)={r2, 0xf, 0x1, 'Z'}, 0x9) (fail_nth: 3)

965.343454ms ago: executing program 4 (id=1712):
syz_usb_connect$uac2(0xe274c9d524d1deae, 0x8b, &(0x7f0000000080)=ANY=[@ANYBLOB="1201110100000020cc172110400001020301090279000301009009080b01010102202e09040000000101200009240104000b19000f102402020302070403ed2a0000b60902090401", @ANYRES64=0x0], 0x0)

785.426954ms ago: executing program 3 (id=1713):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x880, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}]}, @NFT_MSG_NEWSETELEM={0x68, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3c, 0x3, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x34, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2d, 0x1, "fefe807eb37bc2a7a6110a370abbe10adf32aa848edc90232d4665de2ae1583b710c20da833679ebe6"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xec}}, 0x0)
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1})
poll(&(0x7f00000001c0)=[{r2, 0x1000}], 0x1, 0x4)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000140)=0x1, 0x4)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
syz_emit_ethernet(0x4a, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00fcff", 0x14, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0)
r5 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x1)
write$UHID_INPUT(r5, 0x0, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0xc001001b}]})
r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x48, 0x0, 0x9}]})
r10 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
r11 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r11, &(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'macvtap0\x00', <r12=>0x0})
sendto$packet(r10, &(0x7f0000000180)="0b031407e0ff640f020047540f68a13bb1000e00080089064803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r12}, 0x14)

612.372513ms ago: executing program 3 (id=1714):
pipe(&(0x7f00000045c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000000c0)=';', 0x1}], 0x1, 0x0)
socket$inet(0x2, 0x3, 0x7f)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1000000}, 0x6e)
prctl$PR_MCE_KILL(0x21, 0x1, 0x1)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000b32000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x40)
timer_delete(0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x5, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000180)=@attr_arm64={0x0, 0x1, 0x2, &(0x7f0000000140)=0x9})
ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r4, 0x80845663, 0x0)
madvise(&(0x7f0000735000/0x1000)=nil, 0x1000, 0x15)
ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0)
msync(&(0x7f000013d000/0x4000)=nil, 0x4000, 0x2)
io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0)
r6 = syz_io_uring_setup(0x4c79, &(0x7f0000000000)={0x0, 0x1f4b, 0x40, 0x3, 0x3e}, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000000))
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r6, 0x13, &(0x7f0000000140)=[0x9, 0xf], 0x2)
r7 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f0000000480)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x80, 0x0, 0x3, 0x8, {{0x7, 0x4, 0x0, 0x33, 0x1c, 0x65, 0x0, 0x4, 0x29, 0x0, @multicast2, @multicast1, {[@timestamp_prespec={0x44, 0x4, 0x3c, 0x3, 0x2}, @noop]}}}}})
r8 = add_key(&(0x7f00000002c0)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9)
keyctl$dh_compute(0x17, &(0x7f0000000200)={0x0, r8, r8}, 0x0, 0x0, 0x0)

264.99162ms ago: executing program 2 (id=1715):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x10000})
setrlimit(0x40000000000008, &(0x7f0000000000))
setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000600)={0x200000000000001, 0x3}, 0x8)
sendto$inet6(r1, 0x0, 0x0, 0xc880, &(0x7f0000000540)={0xa, 0x4e20, 0x6, @local, 0x4}, 0x1c)
sendmmsg$inet6(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1}}], 0x2, 0x404c484)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x400000ff, 0x0, 0x67c7}]})
r3 = dup3(r2, r0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mlockall(0x2)
io_setup(0x202, &(0x7f0000000200))
bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendto$inet(r4, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000340)="bfb9", 0x2}], 0x1}, 0x5)
sendmsg$sock(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="a2", 0x1}], 0x1}, 0x0)
setsockopt$sock_attach_bpf(r5, 0x1, 0x10, &(0x7f0000000100), 0x4)
recvmsg$unix(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2082)
sendto$inet(r4, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0)

196.146179ms ago: executing program 4 (id=1716):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000007c0)={0x144, 0x20, 0x8, 0x70bd25, 0x25dfdbfc, "", [@nested={0x134, 0xf2, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @fd=r0}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private2}, @generic="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"]}]}, 0x144}], 0x1}, 0x0)
write$tun(r0, &(0x7f0000000800)=ANY=[], 0x141)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r1, 0x28, 0x6, &(0x7f0000000100)={0x0, 0xea60}, 0x10)

36.022432ms ago: executing program 2 (id=1717):
r0 = socket$inet(0xa, 0x801, 0x84)
sendmmsg$inet_sctp(r0, &(0x7f0000000940)=[{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x3, @loopback, 0x9}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000500)='E~', 0x2}], 0x1, &(0x7f0000001680)=ANY=[@ANYBLOB="2c000000840000000100000002006e0000000000", @ANYRES32=0x0, @ANYBLOB="100000008400000007000000e00000021400000084"], 0x50, 0x4004044}], 0x1, 0x0)

0s ago: executing program 4 (id=1718):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xc4}}, 0x4c050)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) (fail_nth: 3)

kernel console output (not intermixed with test programs):

vent_notify_change+0xc6/0x3a0
[  427.098342][T10484]  ? __pfx_kvm_vm_release+0x10/0x10
[  427.098428][T10484]  kvm_put_kvm+0xaa/0xa80
[  427.098507][T10484]  ? _raw_spin_unlock_irq+0x23/0x50
[  427.098593][T10484]  ? _raw_spin_unlock_irq+0x2e/0x50
[  427.098669][T10484]  ? __pfx_kvm_vm_release+0x10/0x10
[  427.098777][T10484]  kvm_vm_release+0x43/0x50
[  427.098854][T10484]  __fput+0x44f/0xa70
[  427.098971][T10484]  fput_close_sync+0x11f/0x240
[  427.099050][T10484]  ? __pfx_fput_close_sync+0x10/0x10
[  427.099138][T10484]  ? do_raw_spin_unlock+0xf5/0x210
[  427.099217][T10484]  __ia32_sys_close+0x7e/0x110
[  427.099273][T10484]  __do_fast_syscall_32+0x20d/0x640
[  427.099364][T10484]  ? do_fast_syscall_32+0x33/0x70
[  427.099439][T10484]  ? asm_int80_emulation+0x1a/0x20
[  427.099494][T10484]  ? do_int80_emulation+0x274/0x4d0
[  427.099579][T10484]  ? trace_irq_disable+0x3b/0x150
[  427.099644][T10484]  do_fast_syscall_32+0x33/0x70
[  427.099720][T10484]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  427.099787][T10484] RIP: 0023:0xf709ef6c
[  427.099840][T10484] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  427.099886][T10484] RSP: 002b:00000000f548d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000006
[  427.099942][T10484] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000000
[  427.099984][T10484] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  427.100009][T10484] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  427.100049][T10484] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  427.100097][T10484] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  427.100188][T10484]  </TASK>
[  427.339827][   T43] cdc_ncm 5-1:1.1: bind() failure
[  427.352178][   T24] usb 4-1: Manufacturer: syz
[  427.357031][   T24] usb 4-1: SerialNumber: syz
[  427.364224][   T29] kauditd_printk_skb: 40 callbacks suppressed
[  427.364238][   T29] audit: type=1804 audit(1774945504.684:63): pid=10486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1237" name="/newroot/242/file1" dev="tmpfs" ino=1266 res=1 errno=0
[  427.443073][   T24] usb 4-1: config 0 descriptor??
[  427.460017][   T24] garmin_gps 4-1:0.0: Garmin GPS usb/tty converter detected
[  427.475421][   T24] garmin_gps ttyUSB0: failed to submit interrupt urb: -90
[  427.484204][   T24] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -90
[  427.494975][   T43] usb 5-1: USB disconnect, device number 51
[  427.681844][  T796] usb 4-1: USB disconnect, device number 60
[  427.691337][  T796] garmin_gps 4-1:0.0: device disconnected
[  427.827073][T10495] trusted_key: syz.2.1241 sent an empty control message without MSG_MORE.
[  427.853832][T10498] fuse: Unknown parameter 'group_i00000000000000000000'
[  427.930019][T10501] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  427.937866][T10501] syzkaller0: entered promiscuous mode
[  427.943520][T10501] syzkaller0: entered allmulticast mode
[  427.990450][T10501] tipc: Resetting bearer <eth:syzkaller0>
[  428.745294][T10500] tipc: Resetting bearer <eth:syzkaller0>
[  428.813247][T10500] tipc: Disabling bearer <eth:syzkaller0>
[  429.186053][T10518] trusted_key: encrypted_key: insufficient parameters specified
[  429.237092][T10520] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1250'.
[  429.626468][T10534] netlink: 'syz.0.1256': attribute type 10 has an invalid length.
[  429.637411][T10534] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  429.650330][T10534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1256'.
[  429.715637][   T43] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  429.803404][T10536] KVM: debugfs: duplicate directory 10536-5
[  429.885602][   T43] usb 5-1: Using ep0 maxpacket: 8
[  429.897345][   T43] usb 5-1: config 3 has an invalid interface number: 45 but max is 0
[  429.905472][   T43] usb 5-1: config 3 contains an unexpected descriptor of type 0x1, skipping
[  429.925854][   T43] usb 5-1: config 3 has no interface number 0
[  429.932503][   T43] usb 5-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  429.947160][   T43] usb 5-1: config 3 interface 45 has no altsetting 0
[  429.956973][   T43] usb 5-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b
[  429.966242][   T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  429.974304][   T43] usb 5-1: Product: syz
[  429.981421][   T43] usb 5-1: Manufacturer: syz
[  429.986408][   T43] usb 5-1: SerialNumber: syz
[  430.077000][T10540] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  430.084974][T10540] syzkaller0: entered promiscuous mode
[  430.091038][T10540] syzkaller0: entered allmulticast mode
[  430.135222][T10540] tipc: Resetting bearer <eth:syzkaller0>
[  430.213712][T10529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  430.239151][T10529] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  430.305139][T10546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  430.331698][T10546] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  430.376294][T10546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  430.387471][T10546] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  430.602275][   T43] usb 5-1: USB disconnect, device number 52
[  430.900489][T10539] tipc: Resetting bearer <eth:syzkaller0>
[  430.928119][T10539] tipc: Disabling bearer <eth:syzkaller0>
[  430.964058][T10564] FAULT_INJECTION: forcing a failure.
[  430.964058][T10564] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  430.978720][T10564] CPU: 0 UID: 0 PID: 10564 Comm: syz.4.1265 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  430.978744][T10564] Tainted: [L]=SOFTLOCKUP
[  430.978749][T10564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  430.978759][T10564] Call Trace:
[  430.978765][T10564]  <TASK>
[  430.978772][T10564]  dump_stack_lvl+0xe8/0x150
[  430.978798][T10564]  should_fail_ex+0x412/0x560
[  430.978825][T10564]  _copy_to_user+0x31/0xb0
[  430.978845][T10564]  simple_read_from_buffer+0xe1/0x170
[  430.978872][T10564]  proc_fail_nth_read+0x1bb/0x230
[  430.978898][T10564]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  430.978923][T10564]  ? rw_verify_area+0x2a6/0x4d0
[  430.978939][T10564]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  430.978963][T10564]  vfs_read+0x20c/0xa70
[  430.978978][T10564]  ? fdget_pos+0x246/0x320
[  430.978995][T10564]  ? __pfx___mutex_lock+0x10/0x10
[  430.979017][T10564]  ? __pfx_vfs_read+0x10/0x10
[  430.979034][T10564]  ? __fget_files+0x2a/0x420
[  430.979051][T10564]  ? __fget_files+0x3a0/0x420
[  430.979063][T10564]  ? __fget_files+0x2a/0x420
[  430.979085][T10564]  ksys_read+0x150/0x270
[  430.979103][T10564]  ? __pfx_ksys_read+0x10/0x10
[  430.979123][T10564]  ? asm_int80_emulation+0x1a/0x20
[  430.979143][T10564]  do_int80_emulation+0x173/0x4d0
[  430.979163][T10564]  ? trace_irq_disable+0x3b/0x150
[  430.979177][T10564]  ? asm_int80_emulation+0x1a/0x20
[  430.979191][T10564]  ? clear_bhb_loop+0x40/0x90
[  430.979206][T10564]  ? clear_bhb_loop+0x40/0x90
[  430.979224][T10564]  asm_int80_emulation+0x1a/0x20
[  430.979239][T10564] RIP: 0023:0xf71f5cab
[  430.979252][T10564] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  430.979265][T10564] RSP: 002b:00000000f54954bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  430.979281][T10564] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54955d0
[  430.979291][T10564] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[  430.979300][T10564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  430.979308][T10564] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  430.979317][T10564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  430.979345][T10564]  </TASK>
[  431.277344][T10566] FAULT_INJECTION: forcing a failure.
[  431.277344][T10566] name failslab, interval 1, probability 0, space 0, times 0
[  431.293931][T10566] CPU: 1 UID: 0 PID: 10566 Comm: syz.3.1266 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  431.293964][T10566] Tainted: [L]=SOFTLOCKUP
[  431.293972][T10566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  431.293985][T10566] Call Trace:
[  431.293993][T10566]  <TASK>
[  431.294002][T10566]  dump_stack_lvl+0xe8/0x150
[  431.294037][T10566]  should_fail_ex+0x412/0x560
[  431.294085][T10566]  should_failslab+0xa8/0x100
[  431.294134][T10566]  __kmalloc_noprof+0xe8/0x760
[  431.294160][T10566]  ? sock_kmalloc+0xd6/0x160
[  431.294193][T10566]  sock_kmalloc+0xd6/0x160
[  431.294223][T10566]  skcipher_recvmsg+0x54f/0x1140
[  431.294269][T10566]  ? __pfx_skcipher_recvmsg+0x10/0x10
[  431.294293][T10566]  ? aa_sock_msg_perm+0xf1/0x1b0
[  431.294329][T10566]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  431.294353][T10566]  ? security_socket_recvmsg+0x7e/0x2c0
[  431.294378][T10566]  ? __pfx_skcipher_recvmsg+0x10/0x10
[  431.294403][T10566]  sock_recvmsg+0x172/0x1b0
[  431.294440][T10566]  ____sys_recvmsg+0x1e6/0x4a0
[  431.294477][T10566]  ? __pfx_____sys_recvmsg+0x10/0x10
[  431.294506][T10566]  ? get_compat_msghdr+0x34b/0x4c0
[  431.294553][T10566]  ___sys_recvmsg+0x215/0x590
[  431.294580][T10566]  ? get_pid_task+0x20/0x1f0
[  431.294605][T10566]  ? __pfx____sys_recvmsg+0x10/0x10
[  431.294657][T10566]  ? __fget_files+0x3a0/0x420
[  431.294687][T10566]  __sys_recvmsg+0x180/0x250
[  431.294718][T10566]  ? __pfx___sys_recvmsg+0x10/0x10
[  431.294768][T10566]  __do_fast_syscall_32+0x20d/0x640
[  431.294801][T10566]  ? do_fast_syscall_32+0x33/0x70
[  431.294828][T10566]  ? asm_int80_emulation+0x1a/0x20
[  431.294849][T10566]  ? do_int80_emulation+0x274/0x4d0
[  431.294876][T10566]  ? trace_irq_disable+0x3b/0x150
[  431.294899][T10566]  do_fast_syscall_32+0x33/0x70
[  431.294929][T10566]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  431.294956][T10566] RIP: 0023:0xf7fb8f6c
[  431.294975][T10566] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  431.294993][T10566] RSP: 002b:00000000f547650c EFLAGS: 00000206 ORIG_RAX: 0000000000000174
[  431.295017][T10566] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800005c0
[  431.295032][T10566] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  431.295051][T10566] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  431.295064][T10566] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  431.295076][T10566] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  431.295108][T10566]  </TASK>
[  431.316219][T10567] delete_channel: no stack
[  431.785111][T10576] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1268'.
[  431.794214][T10576] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1268'.
[  432.538528][T10578] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1271'.
[  432.710669][T10578] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1271'.
[  433.055813][T10591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1274'.
[  433.281814][T10603] delete_channel: no stack
[  433.321331][    T9] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[  433.485637][    T9] usb 4-1: Using ep0 maxpacket: 16
[  433.498188][    T9] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  433.514858][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  433.579509][    T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  433.595743][    T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  433.605110][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  433.615231][    T9] usb 4-1: Product: syz
[  433.621666][    T9] usb 4-1: Manufacturer: syz
[  433.626708][    T9] usb 4-1: SerialNumber: syz
[  433.793815][T10606] FAULT_INJECTION: forcing a failure.
[  433.793815][T10606] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  433.811719][T10606] CPU: 1 UID: 0 PID: 10606 Comm: syz.5.1279 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  433.811775][T10606] Tainted: [L]=SOFTLOCKUP
[  433.811784][T10606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  433.811798][T10606] Call Trace:
[  433.811806][T10606]  <TASK>
[  433.811814][T10606]  dump_stack_lvl+0xe8/0x150
[  433.811850][T10606]  should_fail_ex+0x412/0x560
[  433.811884][T10606]  copy_fpstate_to_sigframe+0xad2/0xd90
[  433.811903][T10606]  ? do_fast_syscall_32+0x33/0x70
[  433.811950][T10606]  ? copy_fpstate_to_sigframe+0x196/0xd90
[  433.811992][T10606]  ? __pfx_copy_fpstate_to_sigframe+0x10/0x10
[  433.812036][T10606]  ? fpu__alloc_mathframe+0xac/0x130
[  433.812055][T10606]  get_sigframe+0x5f7/0x820
[  433.812122][T10606]  ? __pfx_get_sigframe+0x10/0x10
[  433.812159][T10606]  ia32_setup_frame+0x115/0x8d0
[  433.812192][T10606]  ? _raw_spin_unlock_irq+0x23/0x50
[  433.812210][T10606]  ? lockdep_hardirqs_on+0x7a/0x110
[  433.812230][T10606]  ? get_signal+0x114f/0x1330
[  433.812284][T10606]  ? __pfx_ia32_setup_frame+0x10/0x10
[  433.812322][T10606]  arch_do_signal_or_restart+0x44c/0x830
[  433.812348][T10606]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  433.812379][T10606]  ? __pfx___ia32_compat_sys_io_submit+0x10/0x10
[  433.812402][T10606]  exit_to_user_mode_loop+0x86/0x480
[  433.812434][T10606]  ? rcu_is_watching+0x15/0xb0
[  433.812467][T10606]  __do_fast_syscall_32+0x415/0x640
[  433.812496][T10606]  ? do_fast_syscall_32+0x33/0x70
[  433.812522][T10606]  ? asm_int80_emulation+0x1a/0x20
[  433.812536][T10606]  ? do_int80_emulation+0x274/0x4d0
[  433.812554][T10606]  ? trace_irq_disable+0x3b/0x150
[  433.812585][T10606]  do_fast_syscall_32+0x33/0x70
[  433.812614][T10606]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  433.812650][T10606] RIP: 0023:0xf7fa8f6c
[  433.812671][T10606] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  433.812684][T10606] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 00000000000000f8
[  433.812700][T10606] RAX: 0000000000000001 RBX: 00000000f543d000 RCX: 0000000000000001
[  433.812726][T10606] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000
[  433.812739][T10606] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  433.812754][T10606] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  433.812767][T10606] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  433.812796][T10606]  </TASK>
[  434.386335][    T9] usb 4-1: 0:2 : does not exist
[  434.395339][    T9] usb 4-1: 1:0: cannot get min/max values for control 2 (id 1)
[  434.555791][    T9] usb 4-1: USB disconnect, device number 61
[  435.277642][T10636] fuse: Bad value for 'fd'
[  435.340993][T10613] syz.0.1281 (10613): drop_caches: 2
[  436.170172][T10645] delete_channel: no stack
[  436.200212][T10651] FAULT_INJECTION: forcing a failure.
[  436.200212][T10651] name failslab, interval 1, probability 0, space 0, times 0
[  436.225306][T10651] CPU: 0 UID: 0 PID: 10651 Comm: syz.3.1293 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  436.225341][T10651] Tainted: [L]=SOFTLOCKUP
[  436.225350][T10651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  436.225363][T10651] Call Trace:
[  436.225371][T10651]  <TASK>
[  436.225379][T10651]  dump_stack_lvl+0xe8/0x150
[  436.225415][T10651]  should_fail_ex+0x412/0x560
[  436.225453][T10651]  should_failslab+0xa8/0x100
[  436.225488][T10651]  __kmalloc_noprof+0xe8/0x760
[  436.225513][T10651]  ? sock_kmalloc+0xd6/0x160
[  436.225546][T10651]  sock_kmalloc+0xd6/0x160
[  436.225576][T10651]  cmsghdr_from_user_compat_to_kern+0x2d1/0x810
[  436.225615][T10651]  ? __pfx_cmsghdr_from_user_compat_to_kern+0x10/0x10
[  436.225652][T10651]  ____sys_sendmsg+0x220/0x9f0
[  436.225683][T10651]  ? __lock_acquire+0x6b5/0x2cf0
[  436.225712][T10651]  ? __pfx_____sys_sendmsg+0x10/0x10
[  436.225746][T10651]  ? kstrtoull+0x12f/0x1d0
[  436.225787][T10651]  ___sys_sendmsg+0x2a5/0x360
[  436.225821][T10651]  ? __pfx____sys_sendmsg+0x10/0x10
[  436.225851][T10651]  ? get_pid_task+0x20/0x1f0
[  436.225889][T10651]  ? get_pid_task+0x20/0x1f0
[  436.225906][T10651]  ? get_pid_task+0x20/0x1f0
[  436.225950][T10651]  ? __fget_files+0x2a/0x420
[  436.225968][T10651]  ? __fget_files+0x3a0/0x420
[  436.225996][T10651]  __sys_sendmsg+0x183/0x260
[  436.226023][T10651]  ? __pfx___sys_sendmsg+0x10/0x10
[  436.226069][T10651]  __do_fast_syscall_32+0x20d/0x640
[  436.226117][T10651]  ? do_fast_syscall_32+0x33/0x70
[  436.226144][T10651]  ? asm_int80_emulation+0x1a/0x20
[  436.226164][T10651]  ? do_int80_emulation+0x274/0x4d0
[  436.226192][T10651]  ? trace_irq_disable+0x3b/0x150
[  436.226215][T10651]  do_fast_syscall_32+0x33/0x70
[  436.226243][T10651]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  436.226269][T10651] RIP: 0023:0xf7fb8f6c
[  436.226289][T10651] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  436.226308][T10651] RSP: 002b:00000000f547650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  436.226331][T10651] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000900
[  436.226346][T10651] RDX: 0000000000028010 RSI: 0000000000000000 RDI: 0000000000000000
[  436.226359][T10651] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  436.226372][T10651] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  436.226384][T10651] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  436.226414][T10651]  </TASK>
[  436.576227][ T5903] IPVS: starting estimator thread 0...
[  436.668302][T10656] IPVS: using max 29 ests per chain, 69600 per kthread
[  437.170092][T10675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1299'.
[  437.179648][T10675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1299'.
[  437.230827][T10677] FAULT_INJECTION: forcing a failure.
[  437.230827][T10677] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  437.395965][T10677] CPU: 0 UID: 0 PID: 10677 Comm: syz.0.1301 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  437.395997][T10677] Tainted: [L]=SOFTLOCKUP
[  437.396007][T10677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  437.396022][T10677] Call Trace:
[  437.396028][T10677]  <TASK>
[  437.396035][T10677]  dump_stack_lvl+0xe8/0x150
[  437.396059][T10677]  should_fail_ex+0x412/0x560
[  437.396091][T10677]  _copy_to_user+0x31/0xb0
[  437.396110][T10677]  simple_read_from_buffer+0xe1/0x170
[  437.396164][T10677]  proc_fail_nth_read+0x1bb/0x230
[  437.396204][T10677]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  437.396239][T10677]  ? rw_verify_area+0x2a6/0x4d0
[  437.396261][T10677]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  437.396295][T10677]  vfs_read+0x20c/0xa70
[  437.396316][T10677]  ? fdget_pos+0x246/0x320
[  437.396341][T10677]  ? __pfx___mutex_lock+0x10/0x10
[  437.396371][T10677]  ? __pfx_vfs_read+0x10/0x10
[  437.396395][T10677]  ? __fget_files+0x2a/0x420
[  437.396419][T10677]  ? __fget_files+0x3a0/0x420
[  437.396437][T10677]  ? __fget_files+0x2a/0x420
[  437.396465][T10677]  ksys_read+0x150/0x270
[  437.396501][T10677]  ? __pfx_ksys_read+0x10/0x10
[  437.396529][T10677]  ? asm_int80_emulation+0x1a/0x20
[  437.396557][T10677]  do_int80_emulation+0x173/0x4d0
[  437.396586][T10677]  ? trace_irq_disable+0x3b/0x150
[  437.396604][T10677]  ? asm_int80_emulation+0x1a/0x20
[  437.396624][T10677]  ? clear_bhb_loop+0x40/0x90
[  437.396645][T10677]  ? clear_bhb_loop+0x40/0x90
[  437.396671][T10677]  asm_int80_emulation+0x1a/0x20
[  437.396693][T10677] RIP: 0023:0xf71a5cab
[  437.396712][T10677] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  437.396730][T10677] RSP: 002b:00000000f545d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  437.396752][T10677] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f545d5d0
[  437.396766][T10677] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[  437.396778][T10677] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  437.396802][T10677] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  437.396813][T10677] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  437.396840][T10677]  </TASK>
[  440.010108][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  440.016686][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  440.623186][T10729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1326'.
[  440.632512][T10729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1326'.
[  441.541972][   T43] usb 4-1: new low-speed USB device number 62 using dummy_hcd
[  441.750070][   T43] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  441.765726][   T43] usb 4-1: config 0 has no interface number 0
[  441.781275][   T43] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  441.798939][   T43] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  441.817788][   T43] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  441.828057][T10741] FAULT_INJECTION: forcing a failure.
[  441.828057][T10741] name failslab, interval 1, probability 0, space 0, times 0
[  441.841206][   T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  441.956135][T10741] CPU: 1 UID: 0 PID: 10741 Comm: syz.4.1320 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  441.956167][T10741] Tainted: [L]=SOFTLOCKUP
[  441.956173][T10741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  441.956182][T10741] Call Trace:
[  441.956188][T10741]  <TASK>
[  441.956195][T10741]  dump_stack_lvl+0xe8/0x150
[  441.956223][T10741]  should_fail_ex+0x412/0x560
[  441.956249][T10741]  ? sock_alloc_inode+0x28/0xc0
[  441.956274][T10741]  should_failslab+0xa8/0x100
[  441.956296][T10741]  kmem_cache_alloc_lru_noprof+0x87/0x640
[  441.956315][T10741]  ? process_measurement+0x7ce/0x1c80
[  441.956336][T10741]  ? __pfx_sock_alloc_inode+0x10/0x10
[  441.956358][T10741]  sock_alloc_inode+0x28/0xc0
[  441.956380][T10741]  alloc_inode+0x6a/0x1b0
[  441.956405][T10741]  __sock_create+0x12d/0x9d0
[  441.956418][T10741]  ? look_up_lock_class+0x57/0x110
[  441.956471][T10741]  ? register_lock_class+0x31/0x2e0
[  441.956504][T10741]  mptcp_subflow_create_socket+0xfb/0x800
[  441.956543][T10741]  ? __pfx_mptcp_subflow_create_socket+0x10/0x10
[  441.956576][T10741]  ? tomoyo_check_open_permission+0x38e/0x470
[  441.956607][T10741]  ? aa_label_sk_perm+0x532/0x6e0
[  441.956642][T10741]  __mptcp_nmpc_sk+0x155/0x790
[  441.956684][T10741]  ? do_raw_spin_lock+0x12b/0x2f0
[  441.956705][T10741]  ? __pfx___mptcp_nmpc_sk+0x10/0x10
[  441.956734][T10741]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  441.956761][T10741]  mptcp_sendmsg_fastopen+0xd4/0x580
[  441.956788][T10741]  ? __local_bh_enable_ip+0xd0/0x130
[  441.956821][T10741]  mptcp_sendmsg+0x17af/0x19d0
[  441.956846][T10741]  ? __lock_acquire+0x6b5/0x2cf0
[  441.956868][T10741]  ? aa_sk_perm+0x6d5/0x900
[  441.956894][T10741]  ? __pfx_aa_sk_perm+0x10/0x10
[  441.956915][T10741]  ? __pfx_mptcp_sendmsg+0x10/0x10
[  441.956939][T10741]  ? inet6_sendmsg+0x101/0x120
[  441.956963][T10741]  ____sys_sendmsg+0x5c7/0x9f0
[  441.956988][T10741]  ? __pfx_____sys_sendmsg+0x10/0x10
[  441.957010][T10741]  ? kstrtoull+0x12f/0x1d0
[  441.957037][T10741]  ___sys_sendmsg+0x2a5/0x360
[  441.957060][T10741]  ? __pfx____sys_sendmsg+0x10/0x10
[  441.957080][T10741]  ? get_pid_task+0x20/0x1f0
[  441.957093][T10741]  ? get_pid_task+0x20/0x1f0
[  441.957105][T10741]  ? get_pid_task+0x20/0x1f0
[  441.957137][T10741]  ? __fget_files+0x2a/0x420
[  441.957150][T10741]  ? __fget_files+0x3a0/0x420
[  441.957170][T10741]  __sys_sendmsg+0x183/0x260
[  441.957190][T10741]  ? __pfx___sys_sendmsg+0x10/0x10
[  441.957224][T10741]  __do_fast_syscall_32+0x20d/0x640
[  441.957245][T10741]  ? do_fast_syscall_32+0x33/0x70
[  441.957264][T10741]  ? asm_int80_emulation+0x1a/0x20
[  441.957279][T10741]  ? do_int80_emulation+0x274/0x4d0
[  441.957297][T10741]  ? trace_irq_disable+0x3b/0x150
[  441.957313][T10741]  do_fast_syscall_32+0x33/0x70
[  441.957334][T10741]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  441.957352][T10741] RIP: 0023:0xf7ff3f6c
[  441.957365][T10741] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  441.957379][T10741] RSP: 002b:00000000f54b650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  441.957395][T10741] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000780
[  441.957405][T10741] RDX: 0000000020dfefca RSI: 0000000000000000 RDI: 0000000000000000
[  441.957414][T10741] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  441.957441][T10741] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  441.957450][T10741] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  441.957477][T10741]  </TASK>
[  441.957707][T10741] socket: no more sockets
[  442.370963][   T43] usb 4-1: config 0 descriptor??
[  442.376792][T10735] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22
[  442.557878][   T43] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  443.059401][T10752] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  443.067557][T10752] syzkaller0: entered promiscuous mode
[  443.075670][  T796] usb 5-1: new low-speed USB device number 53 using dummy_hcd
[  443.084379][T10752] syzkaller0: entered allmulticast mode
[  443.155900][T10752] tipc: Resetting bearer <eth:syzkaller0>
[  443.228887][  T796] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[  443.247055][  T796] usb 5-1: config 0 has no interface number 0
[  443.253732][  T796] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  443.267417][  T796] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[  443.279617][  T796] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  443.293134][  T796] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  443.319397][  T796] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8
[  443.349941][  T796] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  443.368337][  T796] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  443.379160][  T796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  443.412610][  T796] usb 5-1: config 0 descriptor??
[  443.423935][T10746] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  443.435824][T10746] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  443.458356][  T796] ldusb 5-1:0.55: LD USB Device #1 now attached to major 180 minor 1
[  443.556907][T10758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1325'.
[  443.658179][ T5830] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  443.671122][  T796] usb 5-1: USB disconnect, device number 53
[  443.692969][  T796] ldusb 5-1:0.55: LD USB Device #1 now disconnected
[  443.866079][T10751] tipc: Resetting bearer <eth:syzkaller0>
[  443.884336][T10751] tipc: Disabling bearer <eth:syzkaller0>
[  443.920959][ T5903] usb 4-1: USB disconnect, device number 62
[  444.134530][T10769] FAULT_INJECTION: forcing a failure.
[  444.134530][T10769] name failslab, interval 1, probability 0, space 0, times 0
[  444.147540][T10769] CPU: 0 UID: 0 PID: 10769 Comm: syz.3.1330 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  444.147564][T10769] Tainted: [L]=SOFTLOCKUP
[  444.147570][T10769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  444.147579][T10769] Call Trace:
[  444.147585][T10769]  <TASK>
[  444.147591][T10769]  dump_stack_lvl+0xe8/0x150
[  444.147618][T10769]  should_fail_ex+0x412/0x560
[  444.147645][T10769]  should_failslab+0xa8/0x100
[  444.147666][T10769]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  444.147685][T10769]  ? __alloc_skb+0x1d0/0x7d0
[  444.147701][T10769]  ? __local_bh_enable_ip+0xd0/0x130
[  444.147725][T10769]  __alloc_skb+0x1d0/0x7d0
[  444.147745][T10769]  _sctp_make_chunk+0x59/0x290
[  444.147764][T10769]  sctp_make_heartbeat+0xc5/0x4c0
[  444.147784][T10769]  ? __pfx_sctp_make_heartbeat+0x10/0x10
[  444.147804][T10769]  ? is_bpf_text_address+0x26/0x2b0
[  444.147826][T10769]  sctp_sf_do_prm_requestheartbeat+0x32/0x280
[  444.147853][T10769]  sctp_do_sm+0x238/0x5cf0
[  444.147874][T10769]  ? __pfx_sctp_pname+0x10/0x10
[  444.147894][T10769]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  444.147912][T10769]  ? arch_stack_walk+0xfb/0x150
[  444.147943][T10769]  ? __pfx_sctp_do_sm+0x10/0x10
[  444.147963][T10769]  ? stack_trace_save+0xa9/0x100
[  444.147978][T10769]  ? __pfx_stack_trace_save+0x10/0x10
[  444.148027][T10769]  sctp_primitive_REQUESTHEARTBEAT+0x98/0xc0
[  444.148058][T10769]  sctp_apply_peer_addr_params+0xdf/0x1880
[  444.148091][T10769]  sctp_setsockopt_peer_addr_params+0x678/0x940
[  444.148119][T10769]  sctp_setsockopt+0x752/0x12c0
[  444.148136][T10769]  ? sock_common_setsockopt+0x36/0xc0
[  444.148151][T10769]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  444.148167][T10769]  do_sock_setsockopt+0x17c/0x1b0
[  444.148189][T10769]  __ia32_sys_setsockopt+0x13d/0x1b0
[  444.148211][T10769]  __do_fast_syscall_32+0x20d/0x640
[  444.148257][T10769]  ? do_fast_syscall_32+0x33/0x70
[  444.148285][T10769]  ? asm_int80_emulation+0x1a/0x20
[  444.148306][T10769]  ? do_int80_emulation+0x274/0x4d0
[  444.148337][T10769]  ? trace_irq_disable+0x3b/0x150
[  444.148354][T10769]  do_fast_syscall_32+0x33/0x70
[  444.148375][T10769]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  444.148393][T10769] RIP: 0023:0xf7fb8f6c
[  444.148407][T10769] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  444.148419][T10769] RSP: 002b:00000000f545550c EFLAGS: 00000206 ORIG_RAX: 000000000000016e
[  444.148434][T10769] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000084
[  444.148445][T10769] RDX: 0000000000000009 RSI: 00000000800001c0 RDI: 000000000000009c
[  444.148454][T10769] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  444.148462][T10769] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  444.148471][T10769] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  444.148505][T10769]  </TASK>
[  444.499849][T10771] FAULT_INJECTION: forcing a failure.
[  444.499849][T10771] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  444.513257][T10771] CPU: 1 UID: 0 PID: 10771 Comm: syz.4.1331 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  444.513280][T10771] Tainted: [L]=SOFTLOCKUP
[  444.513286][T10771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  444.513295][T10771] Call Trace:
[  444.513301][T10771]  <TASK>
[  444.513307][T10771]  dump_stack_lvl+0xe8/0x150
[  444.513332][T10771]  should_fail_ex+0x412/0x560
[  444.513358][T10771]  _copy_from_user+0x2d/0xb0
[  444.513376][T10771]  sock_do_ioctl+0x1ed/0x320
[  444.513400][T10771]  ? __pfx_sock_do_ioctl+0x10/0x10
[  444.513428][T10771]  ? unix_ioctl+0x203/0x720
[  444.513447][T10771]  ? unix_compat_ioctl+0x15/0x30
[  444.513469][T10771]  compat_sock_ioctl+0xba6/0xcb0
[  444.513494][T10771]  ? __pfx_compat_sock_ioctl+0x10/0x10
[  444.513517][T10771]  ? __fget_files+0x3a0/0x420
[  444.513530][T10771]  ? __fget_files+0x2a/0x420
[  444.513545][T10771]  ? bpf_lsm_file_ioctl_compat+0x9/0x20
[  444.513567][T10771]  __ia32_compat_sys_ioctl+0x5ea/0x950
[  444.513587][T10771]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[  444.513608][T10771]  ? __fget_files+0x3a0/0x420
[  444.513625][T10771]  ? fput+0xa0/0xd0
[  444.513646][T10771]  ? ksys_write+0x242/0x270
[  444.513669][T10771]  __do_fast_syscall_32+0x20d/0x640
[  444.513690][T10771]  ? do_fast_syscall_32+0x33/0x70
[  444.513708][T10771]  ? asm_int80_emulation+0x1a/0x20
[  444.513721][T10771]  ? do_int80_emulation+0x274/0x4d0
[  444.513740][T10771]  ? trace_irq_disable+0x3b/0x150
[  444.513755][T10771]  do_fast_syscall_32+0x33/0x70
[  444.513774][T10771]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  444.513791][T10771] RIP: 0023:0xf7ff3f6c
[  444.513805][T10771] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  444.513817][T10771] RSP: 002b:00000000f54b650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  444.513834][T10771] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000008924
[  444.513844][T10771] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000
[  444.513852][T10771] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  444.513861][T10771] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  444.513869][T10771] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  444.513889][T10771]  </TASK>
[  445.260245][ T5888] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  445.396492][ T5888] usb 5-1: device descriptor read/64, error -71
[  445.945627][ T5888] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  446.203510][ T5888] usb 5-1: device descriptor read/64, error -71
[  446.326054][ T5888] usb usb5-port1: attempt power cycle
[  446.621112][T10794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1338'.
[  446.636629][T10797] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  446.652559][T10797] syzkaller0: entered promiscuous mode
[  446.665618][ T5888] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  446.672502][T10797] syzkaller0: entered allmulticast mode
[  446.689236][ T5888] usb 5-1: device descriptor read/8, error -71
[  446.725817][T10797] tipc: Resetting bearer <eth:syzkaller0>
[  446.935661][ T5888] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  447.119390][ T5888] usb 5-1: device descriptor read/8, error -71
[  447.246091][ T5888] usb usb5-port1: unable to enumerate USB device
[  447.801703][T10796] tipc: Resetting bearer <eth:syzkaller0>
[  448.041957][T10796] tipc: Disabling bearer <eth:syzkaller0>
[  448.868663][T10836] netlink: 'syz.3.1361': attribute type 10 has an invalid length.
[  448.880309][T10836] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  449.280538][T10852] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1352'.
[  449.289895][T10852] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1352'.
[  449.646661][ T5888] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[  449.739687][T10864] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  449.749174][T10864] syzkaller0: entered promiscuous mode
[  449.754823][T10864] syzkaller0: entered allmulticast mode
[  449.809928][ T5888] usb 4-1: device descriptor read/64, error -71
[  449.924423][T10866] tipc: Resetting bearer <eth:syzkaller0>
[  450.105972][ T5888] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[  450.235653][ T5888] usb 4-1: device descriptor read/64, error -71
[  450.346172][ T5888] usb usb4-port1: attempt power cycle
[  450.566908][T10863] tipc: Resetting bearer <eth:syzkaller0>
[  450.659582][T10880] input: syz0 as /devices/virtual/input/input69
[  450.698515][T10863] tipc: Disabling bearer <eth:syzkaller0>
[  450.705655][ T5888] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[  450.728379][ T5888] usb 4-1: device descriptor read/8, error -71
[  450.995728][ T5888] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[  451.016244][ T5888] usb 4-1: device descriptor read/8, error -71
[  451.125933][ T5888] usb usb4-port1: unable to enumerate USB device
[  451.384404][T10891] FAULT_INJECTION: forcing a failure.
[  451.384404][T10891] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  451.745695][T10891] CPU: 1 UID: 0 PID: 10891 Comm: syz.0.1369 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  451.745730][T10891] Tainted: [L]=SOFTLOCKUP
[  451.745737][T10891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  451.745750][T10891] Call Trace:
[  451.745759][T10891]  <TASK>
[  451.745768][T10891]  dump_stack_lvl+0xe8/0x150
[  451.745804][T10891]  should_fail_ex+0x412/0x560
[  451.745843][T10891]  _copy_from_iter+0x1d3/0x1670
[  451.745870][T10891]  ? rcu_is_watching+0x15/0xb0
[  451.745906][T10891]  ? __pfx__copy_from_iter+0x10/0x10
[  451.745936][T10891]  ? netlink_sendmsg+0x650/0xb40
[  451.745957][T10891]  ? skb_put+0x11b/0x210
[  451.745985][T10891]  netlink_sendmsg+0x6c0/0xb40
[  451.746014][T10891]  ? __pfx_netlink_sendmsg+0x10/0x10
[  451.746037][T10891]  ? aa_sock_msg_perm+0xf1/0x1b0
[  451.746069][T10891]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  451.746094][T10891]  ____sys_sendmsg+0x972/0x9f0
[  451.746126][T10891]  ? __pfx_____sys_sendmsg+0x10/0x10
[  451.746154][T10891]  ? kstrtoull+0x12f/0x1d0
[  451.746189][T10891]  ___sys_sendmsg+0x2a5/0x360
[  451.746217][T10891]  ? __pfx____sys_sendmsg+0x10/0x10
[  451.746243][T10891]  ? get_pid_task+0x20/0x1f0
[  451.746261][T10891]  ? get_pid_task+0x20/0x1f0
[  451.746276][T10891]  ? get_pid_task+0x20/0x1f0
[  451.746315][T10891]  ? __fget_files+0x2a/0x420
[  451.746332][T10891]  ? __fget_files+0x3a0/0x420
[  451.746357][T10891]  __sys_sendmsg+0x183/0x260
[  451.746398][T10891]  ? __pfx___sys_sendmsg+0x10/0x10
[  451.746440][T10891]  __do_fast_syscall_32+0x20d/0x640
[  451.746468][T10891]  ? do_fast_syscall_32+0x33/0x70
[  451.746492][T10891]  ? asm_int80_emulation+0x1a/0x20
[  451.746511][T10891]  ? do_int80_emulation+0x274/0x4d0
[  451.746534][T10891]  ? trace_irq_disable+0x3b/0x150
[  451.746555][T10891]  do_fast_syscall_32+0x33/0x70
[  451.746581][T10891]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  451.746604][T10891] RIP: 0023:0xf706ef6c
[  451.746625][T10891] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  451.746642][T10891] RSP: 002b:00000000f545d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  451.746662][T10891] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180
[  451.746676][T10891] RDX: 0000000000028040 RSI: 0000000000000000 RDI: 0000000000000000
[  451.746686][T10891] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  451.746697][T10891] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  451.746709][T10891] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  451.746735][T10891]  </TASK>
[  452.553793][ T5903] IPVS: starting estimator thread 0...
[  452.657389][T10905] IPVS: using max 27 ests per chain, 64800 per kthread
[  452.733174][T10910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  452.762567][T10910] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  452.852801][T10915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  452.889003][T10915] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  453.085686][ T5903] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  453.237536][ T5903] usb 5-1: config index 0 descriptor too short (expected 39, got 27)
[  453.245946][ T5903] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  453.256245][ T5903] usb 5-1: config 0 interface 0 has no altsetting 0
[  453.265406][ T5903] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  453.274747][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  453.283980][ T5903] usb 5-1: Product: syz
[  453.288785][ T5903] usb 5-1: Manufacturer: syz
[  453.293453][ T5903] usb 5-1: SerialNumber: syz
[  453.301424][ T5903] usb 5-1: config 0 descriptor??
[  453.310826][ T5903] hub 5-1:0.0: bad descriptor, ignoring hub
[  453.317125][ T5903] hub 5-1:0.0: probe with driver hub failed with error -5
[  453.327980][ T5903] usb 5-1: selecting invalid altsetting 0
[  453.698519][ T5903] usb 5-1: USB disconnect, device number 58
[  453.793613][T10931] PM: Enabling pm_trace changes system date and time during resume.
[  453.793613][T10931] PM: Correct system time has to be restored manually after resume.
[  454.135590][ T5903] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[  454.287870][ T5903] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[  454.297023][ T5903] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  454.310812][ T5903] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c
[  454.320179][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  454.328844][ T5903] usb 5-1: Product: syz
[  454.333249][ T5903] usb 5-1: Manufacturer: syz
[  454.337954][ T5903] usb 5-1: SerialNumber: syz
[  454.346621][ T5903] usb 5-1: config 0 descriptor??
[  454.356780][ T5903] ims_pcu 5-1:0.0: Missing CDC union descriptor
[  454.363229][ T5903] ims_pcu 5-1:0.0: probe with driver ims_pcu failed with error -22
[  454.437773][T10938] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  454.456778][T10938] kvm: pic: level sensitive irq not supported
[  454.457264][T10938] kvm: pic: non byte read
[  454.468840][T10938] kvm: pic: level sensitive irq not supported
[  454.468905][T10938] kvm: pic: non byte read
[  454.480329][T10938] kvm: pic: level sensitive irq not supported
[  454.480438][T10938] kvm: pic: non byte read
[  454.491783][T10938] kvm: pic: level sensitive irq not supported
[  454.491854][T10938] kvm: pic: non byte read
[  454.503117][T10938] kvm: pic: level sensitive irq not supported
[  454.503426][T10938] kvm: pic: non byte read
[  454.528811][T10938] kvm: pic: level sensitive irq not supported
[  454.528898][T10938] kvm: pic: non byte read
[  454.802980][   T29] audit: type=1326 audit(1774945532.144:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10930 comm="syz.4.1381" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3f6c code=0x7fc00000
[  455.779436][  T796] IPVS: starting estimator thread 0...
[  455.885650][T10951] IPVS: using max 26 ests per chain, 62400 per kthread
[  456.462426][T10961] FAULT_INJECTION: forcing a failure.
[  456.462426][T10961] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  456.476667][T10961] CPU: 0 UID: 0 PID: 10961 Comm: syz.3.1390 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  456.476702][T10961] Tainted: [L]=SOFTLOCKUP
[  456.476711][T10961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  456.476725][T10961] Call Trace:
[  456.476735][T10961]  <TASK>
[  456.476744][T10961]  dump_stack_lvl+0xe8/0x150
[  456.476781][T10961]  should_fail_ex+0x412/0x560
[  456.476819][T10961]  _copy_from_iter+0x1d3/0x1670
[  456.476856][T10961]  ? __pfx__copy_from_iter+0x10/0x10
[  456.476876][T10961]  ? trace_kmalloc+0x2a/0x110
[  456.476936][T10961]  file_tty_write+0x4c1/0xa20
[  456.476969][T10961]  vfs_write+0x61d/0xb90
[  456.477057][T10961]  ? __pfx_vfs_write+0x10/0x10
[  456.477093][T10961]  ? __fget_files+0x2a/0x420
[  456.477135][T10961]  ksys_write+0x150/0x270
[  456.477161][T10961]  ? __pfx_ksys_write+0x10/0x10
[  456.477197][T10961]  __do_fast_syscall_32+0x20d/0x640
[  456.477228][T10961]  ? do_fast_syscall_32+0x33/0x70
[  456.477316][T10961]  ? asm_int80_emulation+0x1a/0x20
[  456.477339][T10961]  ? do_int80_emulation+0x274/0x4d0
[  456.477366][T10961]  ? trace_irq_disable+0x3b/0x150
[  456.477392][T10961]  do_fast_syscall_32+0x33/0x70
[  456.477427][T10961]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  456.477454][T10961] RIP: 0023:0xf7fb8f6c
[  456.477475][T10961] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  456.477495][T10961] RSP: 002b:00000000f547650c EFLAGS: 00000206 ORIG_RAX: 0000000000000004
[  456.477518][T10961] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800010c0
[  456.477533][T10961] RDX: 0000000000001006 RSI: 0000000000000000 RDI: 0000000000000000
[  456.477546][T10961] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  456.477558][T10961] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  456.477571][T10961] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  456.477603][T10961]  </TASK>
[  456.791172][   T29] audit: type=1326 audit(1774945534.114:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10930 comm="syz.4.1381" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff3f88 code=0x7fc00000
[  456.793257][ T5895] usb 5-1: USB disconnect, device number 59
[  457.634951][T10981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1396'.
[  457.654357][T10981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1396'.
[  457.911170][T10986] fuse: Bad value for 'fd'
[  459.194364][   T29] audit: type=1326 audit(1774945536.534:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10995 comm="syz.4.1402" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3f6c code=0x7ffc0000
[  459.221581][   T29] audit: type=1326 audit(1774945536.534:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10995 comm="syz.4.1402" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3f6c code=0x7ffc0000
[  459.244755][   T29] audit: type=1326 audit(1774945536.564:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10995 comm="syz.4.1402" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7ff3f6c code=0x7ffc0000
[  459.270816][   T29] audit: type=1326 audit(1774945536.564:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10995 comm="syz.4.1402" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3f6c code=0x7ffc0000
[  459.297094][   T29] audit: type=1326 audit(1774945536.564:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10995 comm="syz.4.1402" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3f6c code=0x7ffc0000
[  459.319529][   T29] audit: type=1326 audit(1774945536.584:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10995 comm="syz.4.1402" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7ff3f6c code=0x7ffc0000
[  459.342826][   T29] audit: type=1326 audit(1774945536.594:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10995 comm="syz.4.1402" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3f6c code=0x7ffc0000
[  459.368020][   T29] audit: type=1326 audit(1774945536.614:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10995 comm="syz.4.1402" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3f6c code=0x7ffc0000
[  459.665676][   T24] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[  459.815661][   T24] usb 5-1: Using ep0 maxpacket: 16
[  459.821535][   T29] kauditd_printk_skb: 82 callbacks suppressed
[  459.821553][   T29] audit: type=1326 audit(1774945537.164:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10995 comm="syz.4.1402" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7ff3f6c code=0x7ffc0000
[  459.850554][   T29] audit: type=1326 audit(1774945537.174:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10995 comm="syz.4.1402" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7ff3f6c code=0x7ffc0000
[  459.873096][   T29] audit: type=1326 audit(1774945537.194:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10995 comm="syz.4.1402" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7ff3f6c code=0x7ffc0000
[  459.895642][   T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  459.906013][   T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  459.915022][   T29] audit: type=1326 audit(1774945537.214:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10995 comm="syz.4.1402" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7ff3f6c code=0x7ffc0000
[  459.937379][   T29] audit: type=1326 audit(1774945537.214:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10995 comm="syz.4.1402" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7ff3f6c code=0x7ffc0000
[  459.960637][   T29] audit: type=1326 audit(1774945537.244:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10995 comm="syz.4.1402" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7ff3f6c code=0x7ffc0000
[  459.985553][   T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  459.994669][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  460.003146][   T29] audit: type=1326 audit(1774945537.284:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10995 comm="syz.4.1402" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7ff3f6c code=0x7ffc0000
[  460.025207][   T24] usb 5-1: Product: syz
[  460.029606][   T24] usb 5-1: Manufacturer: syz
[  460.034233][   T24] usb 5-1: SerialNumber: syz
[  460.040610][   T29] audit: type=1326 audit(1774945537.304:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10995 comm="syz.4.1402" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7ff3f6c code=0x7ffc0000
[  460.068254][   T29] audit: type=1326 audit(1774945537.304:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10995 comm="syz.4.1402" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7ff3f6c code=0x7ffc0000
[  460.090995][   T29] audit: type=1326 audit(1774945537.304:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10995 comm="syz.4.1402" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7ff3f6c code=0x7ffc0000
[  460.271960][   T24] usb 5-1: 0:2 : does not exist
[  460.278862][   T24] usb 5-1: unit 9 not found!
[  460.290476][   T24] usb 5-1: 4:0: cannot get min/max values for control 2 (id 4)
[  460.306286][   T24] usb 5-1: 4:0: cannot get min/max values for control 3 (id 4)
[  460.354461][   T24] usb 5-1: USB disconnect, device number 60
[  460.537183][T10998] FAULT_INJECTION: forcing a failure.
[  460.537183][T10998] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  460.565207][T10998] CPU: 0 UID: 0 PID: 10998 Comm: syz.2.1403 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  460.565243][T10998] Tainted: [L]=SOFTLOCKUP
[  460.565251][T10998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  460.565265][T10998] Call Trace:
[  460.565274][T10998]  <TASK>
[  460.565283][T10998]  dump_stack_lvl+0xe8/0x150
[  460.565320][T10998]  should_fail_ex+0x412/0x560
[  460.565359][T10998]  _copy_from_iter+0x1d3/0x1670
[  460.565387][T10998]  ? rcu_is_watching+0x15/0xb0
[  460.565424][T10998]  ? __pfx__copy_from_iter+0x10/0x10
[  460.565454][T10998]  ? netlink_sendmsg+0x650/0xb40
[  460.565480][T10998]  ? skb_put+0x11b/0x210
[  460.565509][T10998]  netlink_sendmsg+0x6c0/0xb40
[  460.565542][T10998]  ? __pfx_netlink_sendmsg+0x10/0x10
[  460.565569][T10998]  ? aa_sock_msg_perm+0xf1/0x1b0
[  460.565604][T10998]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  460.565634][T10998]  ____sys_sendmsg+0x972/0x9f0
[  460.565671][T10998]  ? __pfx_____sys_sendmsg+0x10/0x10
[  460.565703][T10998]  ? kstrtoull+0x12f/0x1d0
[  460.565741][T10998]  ___sys_sendmsg+0x2a5/0x360
[  460.565774][T10998]  ? __pfx____sys_sendmsg+0x10/0x10
[  460.565804][T10998]  ? get_pid_task+0x20/0x1f0
[  460.565825][T10998]  ? get_pid_task+0x20/0x1f0
[  460.565844][T10998]  ? get_pid_task+0x20/0x1f0
[  460.565889][T10998]  ? __fget_files+0x2a/0x420
[  460.565909][T10998]  ? __fget_files+0x3a0/0x420
[  460.565940][T10998]  __sys_sendmsg+0x183/0x260
[  460.565972][T10998]  ? __pfx___sys_sendmsg+0x10/0x10
[  460.566029][T10998]  __do_fast_syscall_32+0x20d/0x640
[  460.566062][T10998]  ? do_fast_syscall_32+0x33/0x70
[  460.566089][T10998]  ? asm_int80_emulation+0x1a/0x20
[  460.566110][T10998]  ? do_int80_emulation+0x274/0x4d0
[  460.566139][T10998]  ? trace_irq_disable+0x3b/0x150
[  460.566163][T10998]  do_fast_syscall_32+0x33/0x70
[  460.566194][T10998]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  460.566222][T10998] RIP: 0023:0xf709ef6c
[  460.566241][T10998] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  460.566261][T10998] RSP: 002b:00000000f548d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  460.566284][T10998] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000440
[  460.566299][T10998] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000
[  460.566313][T10998] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  460.566326][T10998] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  460.566340][T10998] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  460.566371][T10998]  </TASK>
[  460.906911][T11004] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.1406'.
[  460.917288][T11004] bridge_slave_1: default FDB implementation only supports local addresses
[  461.187075][  T796] IPVS: starting estimator thread 0...
[  461.215302][T11017] fuse: Bad value for 'fd'
[  461.275597][T11015] IPVS: using max 29 ests per chain, 69600 per kthread
[  461.468216][T11025] FAULT_INJECTION: forcing a failure.
[  461.468216][T11025] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  461.488072][T11025] CPU: 0 UID: 0 PID: 11025 Comm: syz.5.1414 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  461.488108][T11025] Tainted: [L]=SOFTLOCKUP
[  461.488117][T11025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  461.488131][T11025] Call Trace:
[  461.488140][T11025]  <TASK>
[  461.488149][T11025]  dump_stack_lvl+0xe8/0x150
[  461.488186][T11025]  should_fail_ex+0x412/0x560
[  461.488225][T11025]  _copy_from_iter+0x1d3/0x1670
[  461.488253][T11025]  ? rcu_is_watching+0x15/0xb0
[  461.488290][T11025]  ? __pfx__copy_from_iter+0x10/0x10
[  461.488321][T11025]  ? netlink_sendmsg+0x650/0xb40
[  461.488343][T11025]  ? skb_put+0x11b/0x210
[  461.488372][T11025]  netlink_sendmsg+0x6c0/0xb40
[  461.488404][T11025]  ? __pfx_netlink_sendmsg+0x10/0x10
[  461.488437][T11025]  ? aa_sock_msg_perm+0xf1/0x1b0
[  461.488472][T11025]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  461.488501][T11025]  ____sys_sendmsg+0x972/0x9f0
[  461.488538][T11025]  ? __pfx_____sys_sendmsg+0x10/0x10
[  461.488576][T11025]  ? kstrtoull+0x12f/0x1d0
[  461.488622][T11025]  ___sys_sendmsg+0x2a5/0x360
[  461.488659][T11025]  ? __pfx____sys_sendmsg+0x10/0x10
[  461.488690][T11025]  ? get_pid_task+0x20/0x1f0
[  461.488711][T11025]  ? get_pid_task+0x20/0x1f0
[  461.488730][T11025]  ? get_pid_task+0x20/0x1f0
[  461.488778][T11025]  ? __fget_files+0x2a/0x420
[  461.488797][T11025]  ? __fget_files+0x3a0/0x420
[  461.488827][T11025]  __sys_sendmsg+0x183/0x260
[  461.488857][T11025]  ? __pfx___sys_sendmsg+0x10/0x10
[  461.488908][T11025]  __do_fast_syscall_32+0x20d/0x640
[  461.488940][T11025]  ? do_fast_syscall_32+0x33/0x70
[  461.488968][T11025]  ? asm_int80_emulation+0x1a/0x20
[  461.488989][T11025]  ? do_int80_emulation+0x274/0x4d0
[  461.489017][T11025]  ? trace_irq_disable+0x3b/0x150
[  461.489041][T11025]  do_fast_syscall_32+0x33/0x70
[  461.489071][T11025]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  461.489099][T11025] RIP: 0023:0xf7fa8f6c
[  461.489118][T11025] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  461.489138][T11025] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  461.489162][T11025] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000
[  461.489178][T11025] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  461.489191][T11025] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  461.489203][T11025] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  461.489217][T11025] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  461.489247][T11025]  </TASK>
[  462.625888][ T5903] usb 4-1: new full-speed USB device number 67 using dummy_hcd
[  462.778333][ T5903] usb 4-1: unable to get BOS descriptor or descriptor too short
[  462.795708][ T5903] usb 4-1: not running at top speed; connect to a high speed hub
[  462.813492][ T5903] usb 4-1: config 1 interface 0 altsetting 14 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  462.836275][ T5903] usb 4-1: config 1 interface 0 has no altsetting 0
[  462.852941][ T5903] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  462.872994][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  462.890432][ T5903] usb 4-1: Product: syz
[  462.895014][ T5903] usb 4-1: Manufacturer: syz
[  462.901222][ T5903] usb 4-1: SerialNumber: syz
[  463.147047][ T5903] usbhid 4-1:1.0: can't add hid device: -71
[  463.153752][ T5903] usbhid 4-1:1.0: probe with driver usbhid failed with error -71
[  463.164539][ T5903] usb 4-1: USB disconnect, device number 67
[  463.436610][T11070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1439'.
[  464.425887][ T5903] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[  464.491847][T11087] FAULT_INJECTION: forcing a failure.
[  464.491847][T11087] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  464.519121][T11087] CPU: 0 UID: 0 PID: 11087 Comm: syz.4.1438 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  464.519158][T11087] Tainted: [L]=SOFTLOCKUP
[  464.519168][T11087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  464.519181][T11087] Call Trace:
[  464.519191][T11087]  <TASK>
[  464.519201][T11087]  dump_stack_lvl+0xe8/0x150
[  464.519238][T11087]  should_fail_ex+0x412/0x560
[  464.519282][T11087]  _copy_from_iter+0x1d3/0x1670
[  464.519303][T11087]  ? rcu_is_watching+0x15/0xb0
[  464.519329][T11087]  ? __pfx__copy_from_iter+0x10/0x10
[  464.519371][T11087]  ? netlink_sendmsg+0x650/0xb40
[  464.519387][T11087]  ? skb_put+0x11b/0x210
[  464.519407][T11087]  netlink_sendmsg+0x6c0/0xb40
[  464.519435][T11087]  ? __pfx_netlink_sendmsg+0x10/0x10
[  464.519454][T11087]  ? aa_sock_msg_perm+0xf1/0x1b0
[  464.519479][T11087]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  464.519500][T11087]  ____sys_sendmsg+0x972/0x9f0
[  464.519526][T11087]  ? __pfx_____sys_sendmsg+0x10/0x10
[  464.519557][T11087]  ___sys_sendmsg+0x2a5/0x360
[  464.519580][T11087]  ? __pfx____sys_sendmsg+0x10/0x10
[  464.519600][T11087]  ? trace_sched_exit_tp+0x3a/0x150
[  464.519620][T11087]  ? __schedule+0x15f3/0x52d0
[  464.519657][T11087]  ? __fget_files+0x2a/0x420
[  464.519671][T11087]  ? __fget_files+0x3a0/0x420
[  464.519694][T11087]  __sys_sendmsg+0x183/0x260
[  464.519712][T11087]  ? irqentry_exit+0x59e/0x620
[  464.519733][T11087]  ? __pfx___sys_sendmsg+0x10/0x10
[  464.519767][T11087]  __do_fast_syscall_32+0x20d/0x640
[  464.519789][T11087]  ? do_fast_syscall_32+0x33/0x70
[  464.519808][T11087]  ? asm_int80_emulation+0x1a/0x20
[  464.519823][T11087]  ? do_int80_emulation+0x274/0x4d0
[  464.519842][T11087]  ? trace_irq_disable+0x3b/0x150
[  464.519859][T11087]  do_fast_syscall_32+0x33/0x70
[  464.519880][T11087]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  464.519898][T11087] RIP: 0023:0xf7ff3f6c
[  464.519913][T11087] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  464.519926][T11087] RSP: 002b:00000000f54b650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  464.519942][T11087] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180
[  464.519953][T11087] RDX: 0000000000000840 RSI: 0000000000000000 RDI: 0000000000000000
[  464.519962][T11087] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  464.519971][T11087] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  464.519980][T11087] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  464.520001][T11087]  </TASK>
[  464.806298][ T5903] usb 4-1: Using ep0 maxpacket: 8
[  464.823079][ T5903] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  464.831877][ T5903] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  464.842797][ T5903] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  464.878597][ T5903] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  464.925691][ T5903] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  464.968220][ T5903] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  464.997829][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  465.229130][T11103] FAULT_INJECTION: forcing a failure.
[  465.229130][T11103] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  465.245817][T11103] CPU: 0 UID: 0 PID: 11103 Comm: syz.5.1442 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  465.245854][T11103] Tainted: [L]=SOFTLOCKUP
[  465.245863][T11103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  465.245878][T11103] Call Trace:
[  465.245887][T11103]  <TASK>
[  465.245897][T11103]  dump_stack_lvl+0xe8/0x150
[  465.245934][T11103]  should_fail_ex+0x412/0x560
[  465.245973][T11103]  _copy_from_iter+0x1d3/0x1670
[  465.246001][T11103]  ? rcu_is_watching+0x15/0xb0
[  465.246039][T11103]  ? __pfx__copy_from_iter+0x10/0x10
[  465.246071][T11103]  ? netlink_sendmsg+0x650/0xb40
[  465.246093][T11103]  ? skb_put+0x11b/0x210
[  465.246122][T11103]  netlink_sendmsg+0x6c0/0xb40
[  465.246154][T11103]  ? __pfx_netlink_sendmsg+0x10/0x10
[  465.246182][T11103]  ? aa_sock_msg_perm+0xf1/0x1b0
[  465.246218][T11103]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  465.246248][T11103]  ____sys_sendmsg+0x972/0x9f0
[  465.246285][T11103]  ? __pfx_____sys_sendmsg+0x10/0x10
[  465.246327][T11103]  ? kstrtoull+0x12f/0x1d0
[  465.246367][T11103]  ___sys_sendmsg+0x2a5/0x360
[  465.246401][T11103]  ? __pfx____sys_sendmsg+0x10/0x10
[  465.246432][T11103]  ? get_pid_task+0x20/0x1f0
[  465.246454][T11103]  ? get_pid_task+0x20/0x1f0
[  465.246472][T11103]  ? get_pid_task+0x20/0x1f0
[  465.246519][T11103]  ? __fget_files+0x2a/0x420
[  465.246539][T11103]  ? __fget_files+0x3a0/0x420
[  465.246570][T11103]  __sys_sendmsg+0x183/0x260
[  465.246601][T11103]  ? __pfx___sys_sendmsg+0x10/0x10
[  465.246651][T11103]  __do_fast_syscall_32+0x20d/0x640
[  465.246684][T11103]  ? do_fast_syscall_32+0x33/0x70
[  465.246712][T11103]  ? asm_int80_emulation+0x1a/0x20
[  465.246735][T11103]  ? do_int80_emulation+0x274/0x4d0
[  465.246768][T11103]  ? trace_irq_disable+0x3b/0x150
[  465.246793][T11103]  do_fast_syscall_32+0x33/0x70
[  465.246824][T11103]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  465.246851][T11103] RIP: 0023:0xf7fa8f6c
[  465.246871][T11103] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  465.246891][T11103] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  465.246914][T11103] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180
[  465.246930][T11103] RDX: 0000000020004044 RSI: 0000000000000000 RDI: 0000000000000000
[  465.246943][T11103] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  465.246956][T11103] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  465.246969][T11103] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  465.247000][T11103]  </TASK>
[  465.538317][ T5903] usb 4-1: usb_control_msg returned -32
[  465.544006][ T5903] usbtmc 4-1:16.0: can't read capabilities
[  465.628309][ T5942] usb 6-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  465.648179][ T5942] dvb_usb_ec168 6-1:0.1: probe with driver dvb_usb_ec168 failed with error -110
[  465.669006][ T5942] usb 6-1: USB disconnect, device number 3
[  465.774405][ T5888] usb 4-1: USB disconnect, device number 68
[  465.953274][T11114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1444'.
[  465.962380][T11114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1444'.
[  466.003994][T11078] netlink: 'syz.3.1432': attribute type 10 has an invalid length.
[  466.032912][T11113] openvswitch: netlink: IP tunnel dst address not specified
[  466.150654][T11078] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  466.281823][T11122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1449'.
[  466.291053][T11122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1449'.
[  466.800389][T11139] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1454'.
[  467.271556][T11142] FAULT_INJECTION: forcing a failure.
[  467.271556][T11142] name failslab, interval 1, probability 0, space 0, times 0
[  467.284568][T11142] CPU: 0 UID: 0 PID: 11142 Comm: syz.0.1455 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  467.284593][T11142] Tainted: [L]=SOFTLOCKUP
[  467.284599][T11142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  467.284609][T11142] Call Trace:
[  467.284615][T11142]  <TASK>
[  467.284622][T11142]  dump_stack_lvl+0xe8/0x150
[  467.284649][T11142]  should_fail_ex+0x412/0x560
[  467.284676][T11142]  should_failslab+0xa8/0x100
[  467.284697][T11142]  ? do_getname+0x2e/0x250
[  467.284718][T11142]  kmem_cache_alloc_noprof+0x87/0x650
[  467.284741][T11142]  do_getname+0x2e/0x250
[  467.284764][T11142]  __se_sys_rename+0x3a/0x2c0
[  467.284789][T11142]  __do_fast_syscall_32+0x20d/0x640
[  467.284813][T11142]  ? do_fast_syscall_32+0x33/0x70
[  467.284833][T11142]  ? asm_int80_emulation+0x1a/0x20
[  467.284848][T11142]  ? do_int80_emulation+0x274/0x4d0
[  467.284867][T11142]  ? trace_irq_disable+0x3b/0x150
[  467.284884][T11142]  do_fast_syscall_32+0x33/0x70
[  467.284906][T11142]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  467.284941][T11142] RIP: 0023:0xf706ef6c
[  467.284963][T11142] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  467.284984][T11142] RSP: 002b:00000000f545d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000026
[  467.285008][T11142] RAX: ffffffffffffffda RBX: 0000000080000080 RCX: 0000000080000140
[  467.285028][T11142] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  467.285038][T11142] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  467.285047][T11142] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  467.285057][T11142] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  467.285079][T11142]  </TASK>
[  467.973923][T11158] netlink: 'syz.4.1461': attribute type 8 has an invalid length.
[  468.267032][T11169] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1464'.
[  468.873314][T11177] fuse: Invalid rootmode
[  468.958578][T11180] FAULT_INJECTION: forcing a failure.
[  468.958578][T11180] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  469.005649][T11180] CPU: 0 UID: 0 PID: 11180 Comm: syz.0.1467 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  469.005687][T11180] Tainted: [L]=SOFTLOCKUP
[  469.005695][T11180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  469.005708][T11180] Call Trace:
[  469.005718][T11180]  <TASK>
[  469.005728][T11180]  dump_stack_lvl+0xe8/0x150
[  469.005765][T11180]  should_fail_ex+0x412/0x560
[  469.005816][T11180]  _copy_from_iter+0x1d3/0x1670
[  469.005844][T11180]  ? rcu_is_watching+0x15/0xb0
[  469.005882][T11180]  ? __pfx__copy_from_iter+0x10/0x10
[  469.005910][T11180]  ? netlink_sendmsg+0x650/0xb40
[  469.005933][T11180]  ? skb_put+0x11b/0x210
[  469.005963][T11180]  netlink_sendmsg+0x6c0/0xb40
[  469.005996][T11180]  ? __pfx_netlink_sendmsg+0x10/0x10
[  469.006029][T11180]  ? aa_sock_msg_perm+0xf1/0x1b0
[  469.006062][T11180]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  469.006087][T11180]  ____sys_sendmsg+0x972/0x9f0
[  469.006120][T11180]  ? __pfx_____sys_sendmsg+0x10/0x10
[  469.006148][T11180]  ? kstrtoull+0x12f/0x1d0
[  469.006183][T11180]  ___sys_sendmsg+0x2a5/0x360
[  469.006212][T11180]  ? __pfx____sys_sendmsg+0x10/0x10
[  469.006239][T11180]  ? get_pid_task+0x20/0x1f0
[  469.006257][T11180]  ? get_pid_task+0x20/0x1f0
[  469.006275][T11180]  ? get_pid_task+0x20/0x1f0
[  469.006324][T11180]  ? __fget_files+0x2a/0x420
[  469.006343][T11180]  ? __fget_files+0x3a0/0x420
[  469.006375][T11180]  __sys_sendmsg+0x183/0x260
[  469.006406][T11180]  ? __pfx___sys_sendmsg+0x10/0x10
[  469.006457][T11180]  __do_fast_syscall_32+0x20d/0x640
[  469.006490][T11180]  ? do_fast_syscall_32+0x33/0x70
[  469.006518][T11180]  ? asm_int80_emulation+0x1a/0x20
[  469.006540][T11180]  ? do_int80_emulation+0x274/0x4d0
[  469.006568][T11180]  ? trace_irq_disable+0x3b/0x150
[  469.006592][T11180]  do_fast_syscall_32+0x33/0x70
[  469.006623][T11180]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  469.006650][T11180] RIP: 0023:0xf706ef6c
[  469.006668][T11180] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  469.006686][T11180] RSP: 002b:00000000f545d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  469.006707][T11180] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140
[  469.006721][T11180] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  469.006732][T11180] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  469.006743][T11180] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  469.006755][T11180] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  469.006782][T11180]  </TASK>
[  470.305751][   T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  470.465577][   T24] usb 6-1: Using ep0 maxpacket: 32
[  470.493375][   T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  470.555141][   T24] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  470.581336][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  470.609667][   T24] usb 6-1: Product: syz
[  470.618828][   T24] usb 6-1: Manufacturer: syz
[  470.634851][   T24] usb 6-1: SerialNumber: syz
[  470.651357][   T24] usb 6-1: config 0 descriptor??
[  470.684463][   T24] gs_usb 6-1:0.0: Required endpoints not found
[  471.008071][T11208] fuse: Unknown parameter 'ÿÿe¢EKXûžF6³vž`ê¬ý[	wŒœÈì
[  471.008071][T11208] 
xÛkw̵~¯SÂ&—¬Ðá¬B“©ÒÙö_tCi‹Î͹Ÿ¦x�±Wã¾.Œ­ëÛ×ݹ	AZlq_>i77Ò¢ÑsX'
[  471.227703][T11215] fuse: Invalid rootmode
[  472.667853][ T5888] usb 6-1: USB disconnect, device number 4
[  472.715266][T11239] sock: sock_set_timeout: `syz.0.1490' (pid 11239) tries to set negative timeout
[  473.473545][T11243] netlink: 'syz.0.1490': attribute type 2 has an invalid length.
[  473.505861][T11254] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1495'.
[  473.577098][T11256] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  473.603169][T11256] syzkaller0: entered promiscuous mode
[  473.617116][T11256] syzkaller0: entered allmulticast mode
[  473.648886][T11256] tipc: Resetting bearer <eth:syzkaller0>
[  474.376454][T11255] tipc: Resetting bearer <eth:syzkaller0>
[  474.394397][T11255] tipc: Disabling bearer <eth:syzkaller0>
[  474.857947][T11286] syzkaller0: entered promiscuous mode
[  474.868120][T11286] syzkaller0: entered allmulticast mode
[  475.035600][   T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  475.195747][   T24] usb 6-1: Using ep0 maxpacket: 16
[  475.208588][   T24] usb 6-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[  475.232810][   T24] usb 6-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[  475.250072][   T24] usb 6-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  475.271101][   T24] usb 6-1: config 1 interface 0 has no altsetting 0
[  475.284257][   T24] usb 6-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40
[  475.296122][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  475.304167][   T24] usb 6-1: Product: syz
[  475.309562][   T24] usb 6-1: Manufacturer: syz
[  475.314306][   T24] usb 6-1: SerialNumber: syz
[  475.404917][T11290] tipc: Resetting bearer <eth:geneve0>
[  475.467081][   T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  475.493358][   T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  475.505701][   T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  475.514802][   T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  475.548665][   T24] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8
[  475.747861][ T5895] usb 6-1: USB disconnect, device number 5
[  475.781562][ T5895] usblp0: removed
[  475.793551][T11306] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  475.804376][T11306] syzkaller0: entered promiscuous mode
[  475.811531][T11306] syzkaller0: entered allmulticast mode
[  475.820722][T11307] sctp: [Deprecated]: syz.4.1512 (pid 11307) Use of struct sctp_assoc_value in delayed_ack socket option.
[  475.820722][T11307] Use struct sctp_sack_info instead
[  475.847191][T11306] tipc: Resetting bearer <eth:syzkaller0>
[  476.378468][T11318] bridge_slave_0: left allmulticast mode
[  476.385034][T11318] bridge_slave_0: left promiscuous mode
[  476.391837][T11318] bridge0: port 1(bridge_slave_0) entered disabled state
[  476.404558][T11318] bridge_slave_1: left allmulticast mode
[  476.411458][T11318] bridge_slave_1: left promiscuous mode
[  476.417445][T11318] bridge0: port 2(bridge_slave_1) entered disabled state
[  476.435211][T11318] team0: Port device team_slave_0 removed
[  476.445249][T11318] team0: Port device team_slave_1 removed
[  476.452841][T11318] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  476.460918][T11318] batman_adv: batadv0: Removing interface: batadv_slave_0
[  476.471279][T11318] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  476.479282][ T1592] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[  476.480039][T11318] batman_adv: batadv0: Removing interface: batadv_slave_1
[  476.497892][T11318] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  476.598660][T11320] vlan2: entered allmulticast mode
[  476.604046][T11320] bond0: entered allmulticast mode
[  476.613501][T11320] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1521'.
[  476.623137][T11305] tipc: Resetting bearer <eth:syzkaller0>
[  476.640739][T11305] tipc: Disabling bearer <eth:syzkaller0>
[  476.646996][ T1592] usb 4-1: Using ep0 maxpacket: 32
[  476.654985][ T1592] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  476.665945][ T1592] usb 4-1: config 0 has no interface number 0
[  476.685586][ T1592] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  476.697211][T11320] bond0 (unregistering): Released all slaves
[  476.705096][ T1592] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  476.724056][ T1592] usb 4-1: Product: syz
[  476.738763][ T1592] usb 4-1: Manufacturer: syz
[  476.752705][ T1592] usb 4-1: SerialNumber: syz
[  476.776603][ T1592] usb 4-1: config 0 descriptor??
[  477.179078][T11333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1525'.
[  477.188377][T11333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1525'.
[  477.247357][T11316] openvswitch: netlink: EtherType 0 is less than min 600
[  477.274145][ T1592] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61
[  477.392864][ T1592] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  477.490360][ T1592] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  477.536361][ T1592] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71
[  477.570317][ T1592] usb 4-1: USB disconnect, device number 69
[  477.637795][T11342] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1528'.
[  477.782994][T11344] loop5: detected capacity change from 0 to 7
[  478.046852][T11344] Dev loop5: unable to read RDB block 7
[  478.052823][T11344]  loop5: unable to read partition table
[  478.058985][T11344] loop5: partition table beyond EOD, truncated
[  478.087504][T11344] loop_reread_partitions: partition scan of loop5 (
ÿÿÿÿÿÿÿ‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�ƒÈµ4[LQkÝŠ) failed (rc=-5)
[  478.427909][T11351] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  478.460307][T11351] syzkaller0: entered promiscuous mode
[  478.483247][T11351] syzkaller0: entered allmulticast mode
[  478.598149][T11351] tipc: Resetting bearer <eth:syzkaller0>
[  478.956254][T11367] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1539'.
[  479.169028][T11350] tipc: Resetting bearer <eth:syzkaller0>
[  479.183937][T11350] tipc: Disabling bearer <eth:syzkaller0>
[  479.258656][T11377] FAULT_INJECTION: forcing a failure.
[  479.258656][T11377] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  479.272050][T11377] CPU: 0 UID: 0 PID: 11377 Comm: syz.4.1542 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  479.272086][T11377] Tainted: [L]=SOFTLOCKUP
[  479.272095][T11377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  479.272109][T11377] Call Trace:
[  479.272118][T11377]  <TASK>
[  479.272134][T11377]  dump_stack_lvl+0xe8/0x150
[  479.272160][T11377]  should_fail_ex+0x412/0x560
[  479.272194][T11377]  _copy_to_user+0x31/0xb0
[  479.272215][T11377]  simple_read_from_buffer+0xe1/0x170
[  479.272243][T11377]  proc_fail_nth_read+0x1bb/0x230
[  479.272269][T11377]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  479.272295][T11377]  ? rw_verify_area+0x2a6/0x4d0
[  479.272312][T11377]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  479.272336][T11377]  vfs_read+0x20c/0xa70
[  479.272352][T11377]  ? fdget_pos+0x246/0x320
[  479.272370][T11377]  ? __pfx___mutex_lock+0x10/0x10
[  479.272392][T11377]  ? __pfx_vfs_read+0x10/0x10
[  479.272410][T11377]  ? __fget_files+0x2a/0x420
[  479.272427][T11377]  ? __fget_files+0x3a0/0x420
[  479.272442][T11377]  ? __fget_files+0x2a/0x420
[  479.272462][T11377]  ksys_read+0x150/0x270
[  479.272481][T11377]  ? __pfx_ksys_read+0x10/0x10
[  479.272501][T11377]  ? asm_int80_emulation+0x1a/0x20
[  479.272521][T11377]  do_int80_emulation+0x173/0x4d0
[  479.272542][T11377]  ? trace_irq_disable+0x3b/0x150
[  479.272556][T11377]  ? asm_int80_emulation+0x1a/0x20
[  479.272570][T11377]  ? clear_bhb_loop+0x40/0x90
[  479.272585][T11377]  ? clear_bhb_loop+0x40/0x90
[  479.272604][T11377]  asm_int80_emulation+0x1a/0x20
[  479.272619][T11377] RIP: 0023:0xf71f5cab
[  479.272633][T11377] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  479.272647][T11377] RSP: 002b:00000000f54b64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  479.272663][T11377] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54b65d0
[  479.272674][T11377] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[  479.272684][T11377] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  479.272693][T11377] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  479.272702][T11377] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  479.272724][T11377]  </TASK>
[  479.596207][T11381] sg_write: data in/out 67150913/126 bytes for SCSI command 0x7f-- guessing data in;
[  479.596207][T11381]    program syz.4.1544 not setting count and/or reply_len properly
[  479.668965][T11386] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1545'.
[  479.785673][T11390] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1546'.
[  480.057309][ T5888] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[  480.077217][T11398] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1550'.
[  480.250961][ T5888] usb 5-1: Using ep0 maxpacket: 8
[  480.259076][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  480.270557][ T5888] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  480.284438][ T5888] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52
[  480.314314][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  480.352295][   T29] kauditd_printk_skb: 16 callbacks suppressed
[  480.352314][   T29] audit: type=1326 audit(1774945557.694:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11403 comm="syz.3.1552" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8f6c code=0x7ffc0000
[  480.354326][ T5888] usb 5-1: Product: syz
[  480.367173][   T29] audit: type=1326 audit(1774945557.704:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11403 comm="syz.3.1552" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8f6c code=0x7ffc0000
[  480.392879][ T5888] usb 5-1: Manufacturer: syz
[  480.439812][   T29] audit: type=1326 audit(1774945557.754:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11403 comm="syz.3.1552" exe="/root/syz-executor" sig=0 arch=40000003 syscall=311 compat=1 ip=0xf7fb8f6c code=0x7ffc0000
[  480.455851][ T5888] usb 5-1: SerialNumber: syz
[  480.465076][   T29] audit: type=1326 audit(1774945557.754:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11403 comm="syz.3.1552" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8f6c code=0x7ffc0000
[  480.489447][   T29] audit: type=1326 audit(1774945557.754:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11403 comm="syz.3.1552" exe="/root/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf7fb8f6c code=0x7ffc0000
[  480.512676][   T29] audit: type=1326 audit(1774945557.754:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11403 comm="syz.3.1552" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8f6c code=0x7ffc0000
[  480.538978][   T29] audit: type=1326 audit(1774945557.764:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11403 comm="syz.3.1552" exe="/root/syz-executor" sig=0 arch=40000003 syscall=431 compat=1 ip=0xf7fb8f6c code=0x7ffc0000
[  480.562369][   T29] audit: type=1326 audit(1774945557.764:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11403 comm="syz.3.1552" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8f6c code=0x7ffc0000
[  480.580529][ T5888] usb 5-1: config 0 descriptor??
[  480.585618][   T29] audit: type=1326 audit(1774945557.764:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11403 comm="syz.3.1552" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7fb8f6c code=0x7ffc0000
[  480.629886][   T29] audit: type=1326 audit(1774945557.764:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11403 comm="syz.3.1552" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8f6c code=0x7ffc0000
[  480.721031][T11407] FAULT_INJECTION: forcing a failure.
[  480.721031][T11407] name failslab, interval 1, probability 0, space 0, times 0
[  480.721108][T11407] CPU: 1 UID: 0 PID: 11407 Comm: syz.2.1553 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  480.721138][T11407] Tainted: [L]=SOFTLOCKUP
[  480.721146][T11407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  480.721160][T11407] Call Trace:
[  480.721169][T11407]  <TASK>
[  480.721178][T11407]  dump_stack_lvl+0xe8/0x150
[  480.721219][T11407]  should_fail_ex+0x412/0x560
[  480.721274][T11407]  should_failslab+0xa8/0x100
[  480.721305][T11407]  __kmalloc_noprof+0xe8/0x760
[  480.721331][T11407]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  480.721360][T11407]  tomoyo_realpath_from_path+0xe3/0x5d0
[  480.721384][T11407]  ? tomoyo_path_number_perm+0x219/0x630
[  480.721428][T11407]  tomoyo_path_number_perm+0x246/0x630
[  480.721462][T11407]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  480.721498][T11407]  ? lockdep_unlock+0x5d/0xd0
[  480.721517][T11407]  ? __lock_acquire+0x146e/0x2cf0
[  480.721584][T11407]  ? __pfx_from_kuid+0x10/0x10
[  480.721619][T11407]  ? down_write_killable+0x180/0x240
[  480.721660][T11407]  ? __pfx_down_write_killable+0x10/0x10
[  480.721686][T11407]  tomoyo_path_chown+0x46/0xc0
[  480.721705][T11407]  security_path_chown+0x139/0x340
[  480.721745][T11407]  chown_common+0x40c/0x6b0
[  480.721792][T11407]  ? __pfx_chown_common+0x10/0x10
[  480.721830][T11407]  ? mnt_get_write_access+0x213/0x280
[  480.721852][T11407]  ? mnt_want_write_file+0x172/0x200
[  480.721890][T11407]  ksys_fchown+0xe9/0x160
[  480.721924][T11407]  __ia32_sys_fchown16+0xc0/0xd0
[  480.721952][T11407]  __do_fast_syscall_32+0x20d/0x640
[  480.721984][T11407]  ? do_fast_syscall_32+0x33/0x70
[  480.722004][T11407]  ? asm_int80_emulation+0x1a/0x20
[  480.722020][T11407]  ? do_int80_emulation+0x274/0x4d0
[  480.722068][T11407]  ? trace_irq_disable+0x3b/0x150
[  480.722092][T11407]  do_fast_syscall_32+0x33/0x70
[  480.722126][T11407]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  480.722146][T11407] RIP: 0023:0xf709ef6c
[  480.722160][T11407] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  480.722174][T11407] RSP: 002b:00000000f546c50c EFLAGS: 00000206 ORIG_RAX: 000000000000005f
[  480.722212][T11407] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000000
[  480.722227][T11407] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  480.722238][T11407] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  480.722250][T11407] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  480.722263][T11407] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  480.722294][T11407]  </TASK>
[  480.722303][T11407] ERROR: Out of memory at tomoyo_realpath_from_path.
[  481.039862][   T24] usb 5-1: USB disconnect, device number 61
[  481.481021][T11420] netlink: 'syz.3.1557': attribute type 11 has an invalid length.
[  481.495584][T11420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1557'.
[  481.710478][T11430] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1560'.
[  481.781368][T11432] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1562'.
[  481.861665][T11436] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  481.985557][ T5895] usb 6-1: new full-speed USB device number 6 using dummy_hcd
[  482.307569][ T5895] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 30768, setting to 64
[  482.320316][ T5895] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  482.426297][ T5895] usb 6-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  482.445664][ T5895] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  482.495985][ T5895] usb 6-1: config 0 descriptor??
[  483.024977][T11454] sock: sock_set_timeout: `syz.4.1568' (pid 11454) tries to set negative timeout
[  483.126679][ T5895] hid (null): unknown global tag 0xc
[  483.135676][ T5895] hid (null): unknown global tag 0xd
[  483.145032][ T5895] hid (null): global environment stack underflow
[  483.166994][ T5895] hid-multitouch 0003:0457:07DA.0007: unknown global tag 0xc
[  483.174559][ T5895] hid-multitouch 0003:0457:07DA.0007: item 0 4 1 12 parsing failed
[  483.198121][ T5895] hid-multitouch 0003:0457:07DA.0007: probe with driver hid-multitouch failed with error -22
[  483.741844][T11467] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1572'.
[  483.743493][T11468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1573'.
[  483.875935][T11456] netlink: 'syz.4.1568': attribute type 2 has an invalid length.
[  483.910359][T11473] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[  483.929321][T11473] syzkaller0: entered promiscuous mode
[  483.934820][T11473] syzkaller0: entered allmulticast mode
[  483.948212][T11473] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  484.413619][T11485] dummy0: entered allmulticast mode
[  484.420364][T11485] dummy0: left allmulticast mode
[  484.672720][T11491] dummy0: entered promiscuous mode
[  484.682829][T11491] Invalid argument reading file caps for ./file0
[  484.739330][   T43] usb 6-1: USB disconnect, device number 6
[  484.800703][T11493] FAULT_INJECTION: forcing a failure.
[  484.800703][T11493] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  484.814449][T11493] CPU: 0 UID: 0 PID: 11493 Comm: syz.5.1583 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  484.814473][T11493] Tainted: [L]=SOFTLOCKUP
[  484.814480][T11493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  484.814490][T11493] Call Trace:
[  484.814497][T11493]  <TASK>
[  484.814503][T11493]  dump_stack_lvl+0xe8/0x150
[  484.814531][T11493]  should_fail_ex+0x412/0x560
[  484.814559][T11493]  _copy_from_iter+0x1d3/0x1670
[  484.814579][T11493]  ? rcu_is_watching+0x15/0xb0
[  484.814605][T11493]  ? __pfx__copy_from_iter+0x10/0x10
[  484.814627][T11493]  ? netlink_sendmsg+0x650/0xb40
[  484.814643][T11493]  ? skb_put+0x11b/0x210
[  484.814664][T11493]  netlink_sendmsg+0x6c0/0xb40
[  484.814686][T11493]  ? __pfx_netlink_sendmsg+0x10/0x10
[  484.814705][T11493]  ? aa_sock_msg_perm+0xf1/0x1b0
[  484.814731][T11493]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  484.814777][T11493]  ____sys_sendmsg+0x972/0x9f0
[  484.814804][T11493]  ? __pfx_____sys_sendmsg+0x10/0x10
[  484.814827][T11493]  ? kstrtoull+0x12f/0x1d0
[  484.814855][T11493]  ___sys_sendmsg+0x2a5/0x360
[  484.814878][T11493]  ? __pfx____sys_sendmsg+0x10/0x10
[  484.814899][T11493]  ? get_pid_task+0x20/0x1f0
[  484.814914][T11493]  ? get_pid_task+0x20/0x1f0
[  484.814927][T11493]  ? get_pid_task+0x20/0x1f0
[  484.814959][T11493]  ? __fget_files+0x2a/0x420
[  484.814973][T11493]  ? __fget_files+0x3a0/0x420
[  484.815020][T11493]  __sys_sendmsg+0x183/0x260
[  484.815051][T11493]  ? __pfx___sys_sendmsg+0x10/0x10
[  484.815102][T11493]  __do_fast_syscall_32+0x20d/0x640
[  484.815126][T11493]  ? do_fast_syscall_32+0x33/0x70
[  484.815146][T11493]  ? asm_int80_emulation+0x1a/0x20
[  484.815161][T11493]  ? do_int80_emulation+0x274/0x4d0
[  484.815180][T11493]  ? trace_irq_disable+0x3b/0x150
[  484.815198][T11493]  do_fast_syscall_32+0x33/0x70
[  484.815219][T11493]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  484.815238][T11493] RIP: 0023:0xf7fa8f6c
[  484.815253][T11493] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  484.815267][T11493] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  484.815284][T11493] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800002c0
[  484.815295][T11493] RDX: 0000000000048090 RSI: 0000000000000000 RDI: 0000000000000000
[  484.815305][T11493] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  484.815314][T11493] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  484.815323][T11493] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  484.815344][T11493]  </TASK>
[  485.070743][ T1592] usb 4-1: new full-speed USB device number 70 using dummy_hcd
[  485.205670][ T1592] usb 4-1: device descriptor read/64, error -71
[  485.217660][T11497] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1585'.
[  485.288476][T11499] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1586'.
[  485.447952][ T1592] usb 4-1: new full-speed USB device number 71 using dummy_hcd
[  485.595606][ T1592] usb 4-1: device descriptor read/64, error -71
[  485.706033][ T1592] usb usb4-port1: attempt power cycle
[  486.026743][T11529] sock: sock_set_timeout: `syz.5.1589' (pid 11529) tries to set negative timeout
[  486.046070][ T1592] usb 4-1: new full-speed USB device number 72 using dummy_hcd
[  486.067785][ T1592] usb 4-1: device descriptor read/8, error -71
[  486.251661][T11532] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1591'.
[  486.262943][T11532] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1591'.
[  486.305716][ T1592] usb 4-1: new full-speed USB device number 73 using dummy_hcd
[  486.326506][ T1592] usb 4-1: device descriptor read/8, error -71
[  486.387337][T11530] netlink: 'syz.5.1589': attribute type 2 has an invalid length.
[  486.435937][ T1592] usb usb4-port1: unable to enumerate USB device
[  486.595604][ T1592] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[  486.745758][ T1592] usb 5-1: Using ep0 maxpacket: 16
[  486.752740][ T1592] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  486.764860][ T1592] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  486.778431][ T1592] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  486.787842][ T1592] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  486.796179][ T1592] usb 5-1: Product: syz
[  486.800377][ T1592] usb 5-1: Manufacturer: syz
[  486.805032][ T1592] usb 5-1: SerialNumber: syz
[  486.812418][ T1592] usb 5-1: config 0 descriptor??
[  486.822551][ T1592] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  486.832280][ T1592] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class)
[  487.070755][T11539] FAULT_INJECTION: forcing a failure.
[  487.070755][T11539] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  487.093481][T11539] CPU: 0 UID: 0 PID: 11539 Comm: syz.5.1594 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  487.093518][T11539] Tainted: [L]=SOFTLOCKUP
[  487.093528][T11539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  487.093542][T11539] Call Trace:
[  487.093551][T11539]  <TASK>
[  487.093560][T11539]  dump_stack_lvl+0xe8/0x150
[  487.093605][T11539]  should_fail_ex+0x412/0x560
[  487.093644][T11539]  _copy_to_user+0x31/0xb0
[  487.093675][T11539]  simple_read_from_buffer+0xe1/0x170
[  487.093713][T11539]  proc_fail_nth_read+0x1bb/0x230
[  487.093749][T11539]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  487.093785][T11539]  ? rw_verify_area+0x2a6/0x4d0
[  487.093810][T11539]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  487.093843][T11539]  vfs_read+0x20c/0xa70
[  487.093866][T11539]  ? fdget_pos+0x246/0x320
[  487.093891][T11539]  ? __pfx___mutex_lock+0x10/0x10
[  487.093922][T11539]  ? __pfx_vfs_read+0x10/0x10
[  487.093949][T11539]  ? __fget_files+0x2a/0x420
[  487.093974][T11539]  ? __fget_files+0x3a0/0x420
[  487.093992][T11539]  ? __fget_files+0x2a/0x420
[  487.094021][T11539]  ksys_read+0x150/0x270
[  487.094049][T11539]  ? __pfx_ksys_read+0x10/0x10
[  487.094078][T11539]  ? asm_int80_emulation+0x1a/0x20
[  487.094118][T11539]  do_int80_emulation+0x173/0x4d0
[  487.094146][T11539]  ? trace_irq_disable+0x3b/0x150
[  487.094165][T11539]  ? asm_int80_emulation+0x1a/0x20
[  487.094184][T11539]  ? clear_bhb_loop+0x40/0x90
[  487.094207][T11539]  ? clear_bhb_loop+0x40/0x90
[  487.094234][T11539]  asm_int80_emulation+0x1a/0x20
[  487.094255][T11539] RIP: 0023:0xf71a5cab
[  487.094274][T11539] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  487.094293][T11539] RSP: 002b:00000000f54664bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  487.094316][T11539] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54665d0
[  487.094332][T11539] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[  487.094344][T11539] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  487.094357][T11539] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  487.094370][T11539] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  487.094401][T11539]  </TASK>
[  487.448998][ T1592] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[  487.483179][ T1592] em28xx 5-1:0.0: Config register raw data: 0xfffffffb
[  487.516083][T11543] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1596'.
[  487.717767][T11491] dummy0: left promiscuous mode
[  488.315630][ T5888] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  488.320635][ T1592] em28xx 5-1:0.0: Unknown AC97 audio processor detected!
[  488.343532][ T1592] em28xx 5-1:0.0: couldn't setup AC97 register 2
[  488.351564][ T1592] em28xx 5-1:0.0: couldn't setup AC97 register 4
[  488.359131][ T1592] em28xx 5-1:0.0: couldn't setup AC97 register 6
[  488.366471][ T1592] em28xx 5-1:0.0: couldn't setup AC97 register 54
[  488.373529][ T1592] em28xx 5-1:0.0: couldn't setup AC97 register 56
[  488.386162][ T1592] usb 5-1: USB disconnect, device number 62
[  488.395547][ T5895] usb 4-1: new high-speed USB device number 74 using dummy_hcd
[  488.488440][ T5888] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  488.496663][ T5888] usb 6-1: config 0 has no interface number 0
[  488.504584][ T5888] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  488.513942][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  488.522041][ T5888] usb 6-1: Product: syz
[  488.526421][ T5888] usb 6-1: Manufacturer: syz
[  488.531110][ T5888] usb 6-1: SerialNumber: syz
[  488.535827][ T5895] usb 4-1: device descriptor read/64, error -71
[  488.544597][ T5888] usb 6-1: config 0 descriptor??
[  488.795737][ T5895] usb 4-1: new high-speed USB device number 75 using dummy_hcd
[  488.808361][ T5888] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state
[  488.818407][ T5888] usb 6-1: Direct firmware load for dvb-usb-ec168.fw failed with error -2
[  488.827056][ T5888] usb 6-1: Falling back to sysfs fallback for: dvb-usb-ec168.fw
[  488.912064][T11573] sock: sock_set_timeout: `syz.4.1606' (pid 11573) tries to set negative timeout
[  488.925825][ T5895] usb 4-1: device descriptor read/64, error -71
[  489.012295][T11571] loop7: detected capacity change from 0 to 2640
[  489.035983][ T5895] usb usb4-port1: attempt power cycle
[  489.114281][T11578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1607'.
[  489.124183][T11578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1607'.
[  489.765688][ T5895] usb 4-1: new high-speed USB device number 76 using dummy_hcd
[  489.796256][ T5895] usb 4-1: device descriptor read/8, error -71
[  489.947511][T11574] netlink: 'syz.4.1606': attribute type 2 has an invalid length.
[  490.055668][ T5895] usb 4-1: new high-speed USB device number 77 using dummy_hcd
[  490.086251][ T5895] usb 4-1: device descriptor read/8, error -71
[  490.193072][T11583] syzkaller0: entered promiscuous mode
[  490.199433][ T5895] usb usb4-port1: unable to enumerate USB device
[  490.205989][T11583] syzkaller0: entered allmulticast mode
[  490.223491][T11583] FAULT_INJECTION: forcing a failure.
[  490.223491][T11583] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  490.237023][T11583] CPU: 0 UID: 0 PID: 11583 Comm: syz.4.1608 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  490.237058][T11583] Tainted: [L]=SOFTLOCKUP
[  490.237066][T11583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  490.237079][T11583] Call Trace:
[  490.237089][T11583]  <TASK>
[  490.237097][T11583]  dump_stack_lvl+0xe8/0x150
[  490.237134][T11583]  should_fail_ex+0x412/0x560
[  490.237175][T11583]  _copy_from_iter+0x1d3/0x1670
[  490.237202][T11583]  ? sock_alloc_send_pskb+0x896/0x990
[  490.237243][T11583]  ? __pfx__copy_from_iter+0x10/0x10
[  490.237265][T11583]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  490.237288][T11583]  skb_copy_datagram_from_iter+0xf5/0x710
[  490.237329][T11583]  ? dev_get_by_index+0x22/0x2e0
[  490.237356][T11583]  ? skb_put+0x11b/0x210
[  490.237376][T11583]  packet_sendmsg+0x37e4/0x50f0
[  490.237412][T11583]  ? __lock_acquire+0x6b5/0x2cf0
[  490.237445][T11583]  ? aa_sk_perm+0x6d5/0x900
[  490.237467][T11583]  ? __pfx_packet_sendmsg+0x10/0x10
[  490.237494][T11583]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  490.237515][T11583]  ? aa_sock_msg_perm+0xf1/0x1b0
[  490.237541][T11583]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  490.237559][T11583]  ? __pfx_packet_sendmsg+0x10/0x10
[  490.237577][T11583]  __sys_sendto+0x672/0x710
[  490.237600][T11583]  ? __pfx___sys_sendto+0x10/0x10
[  490.237633][T11583]  ? fput+0xa0/0xd0
[  490.237656][T11583]  ? ksys_write+0x242/0x270
[  490.237677][T11583]  __ia32_sys_sendto+0xdd/0x100
[  490.237697][T11583]  __do_fast_syscall_32+0x20d/0x640
[  490.237719][T11583]  ? do_fast_syscall_32+0x33/0x70
[  490.237739][T11583]  ? asm_int80_emulation+0x1a/0x20
[  490.237754][T11583]  ? do_int80_emulation+0x274/0x4d0
[  490.237773][T11583]  ? trace_irq_disable+0x3b/0x150
[  490.237790][T11583]  do_fast_syscall_32+0x33/0x70
[  490.237810][T11583]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  490.237829][T11583] RIP: 0023:0xf7ff3f6c
[  490.237843][T11583] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  490.237856][T11583] RSP: 002b:00000000f54b650c EFLAGS: 00000206 ORIG_RAX: 0000000000000171
[  490.237872][T11583] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000480
[  490.237883][T11583] RDX: 000000000000000e RSI: 0000000000040000 RDI: 0000000080000240
[  490.237892][T11583] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000
[  490.237901][T11583] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  490.237910][T11583] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  490.237931][T11583]  </TASK>
[  490.673059][T11587] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  490.681933][T11589] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1610'.
[  490.689348][T11587] syzkaller0: entered promiscuous mode
[  490.706938][T11587] syzkaller0: entered allmulticast mode
[  490.788532][T11587] tipc: Resetting bearer <eth:syzkaller0>
[  490.820755][T11591] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  490.835208][T11591] syzkaller0: entered promiscuous mode
[  490.842569][T11591] syzkaller0: entered allmulticast mode
[  490.951621][T11596] tunl0: entered promiscuous mode
[  490.956964][T11596] tunl0: entered allmulticast mode
[  491.344922][T11611] netlink: 'syz.3.1618': attribute type 2 has an invalid length.
[  491.469257][T11586] tipc: Resetting bearer <eth:syzkaller0>
[  491.511134][T11586] tipc: Disabling bearer <eth:syzkaller0>
[  491.605142][T11617] fuse: Unknown parameter 'user_id00000000000000000000'
[  491.877735][T11624] FAULT_INJECTION: forcing a failure.
[  491.877735][T11624] name failslab, interval 1, probability 0, space 0, times 0
[  491.903163][T11624] CPU: 1 UID: 0 PID: 11624 Comm: syz.0.1623 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  491.903199][T11624] Tainted: [L]=SOFTLOCKUP
[  491.903207][T11624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  491.903221][T11624] Call Trace:
[  491.903230][T11624]  <TASK>
[  491.903240][T11624]  dump_stack_lvl+0xe8/0x150
[  491.903277][T11624]  should_fail_ex+0x412/0x560
[  491.903317][T11624]  should_failslab+0xa8/0x100
[  491.903348][T11624]  __kmalloc_noprof+0xe8/0x760
[  491.903373][T11624]  ? sock_kmalloc+0xd6/0x160
[  491.903408][T11624]  sock_kmalloc+0xd6/0x160
[  491.903445][T11624]  skcipher_recvmsg+0x54f/0x1140
[  491.903491][T11624]  ? __pfx_skcipher_recvmsg+0x10/0x10
[  491.903516][T11624]  ? aa_sock_msg_perm+0xf1/0x1b0
[  491.903552][T11624]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  491.903576][T11624]  ? security_socket_recvmsg+0x7e/0x2c0
[  491.903602][T11624]  ? __pfx_skcipher_recvmsg+0x10/0x10
[  491.903627][T11624]  sock_recvmsg+0x172/0x1b0
[  491.903665][T11624]  ____sys_recvmsg+0x1e6/0x4a0
[  491.903704][T11624]  ? __pfx_____sys_recvmsg+0x10/0x10
[  491.903730][T11624]  ? get_compat_msghdr+0x34b/0x4c0
[  491.903779][T11624]  ___sys_recvmsg+0x215/0x590
[  491.903807][T11624]  ? get_pid_task+0x20/0x1f0
[  491.903834][T11624]  ? __pfx____sys_recvmsg+0x10/0x10
[  491.903888][T11624]  ? __fget_files+0x3a0/0x420
[  491.903920][T11624]  __sys_recvmsg+0x180/0x250
[  491.903951][T11624]  ? __pfx___sys_recvmsg+0x10/0x10
[  491.904003][T11624]  __do_fast_syscall_32+0x20d/0x640
[  491.904036][T11624]  ? do_fast_syscall_32+0x33/0x70
[  491.904064][T11624]  ? asm_int80_emulation+0x1a/0x20
[  491.904085][T11624]  ? do_int80_emulation+0x274/0x4d0
[  491.904113][T11624]  ? trace_irq_disable+0x3b/0x150
[  491.904138][T11624]  do_fast_syscall_32+0x33/0x70
[  491.904169][T11624]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  491.904196][T11624] RIP: 0023:0xf706ef6c
[  491.904230][T11624] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  491.904252][T11624] RSP: 002b:00000000f545d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000174
[  491.904268][T11624] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800005c0
[  491.904279][T11624] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  491.904288][T11624] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  491.904296][T11624] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  491.904306][T11624] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  491.904326][T11624]  </TASK>
[  492.249334][T11628] QAT: Invalid ioctl 21531
[  492.921446][T11644] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  493.115770][T11647] syzkaller0: entered promiscuous mode
[  493.121755][T11647] syzkaller0: entered allmulticast mode
[  493.597167][T11647] tipc: Resetting bearer <eth:syzkaller0>
[  493.739304][T11643] tipc: Resetting bearer <eth:syzkaller0>
[  493.844888][T11643] tipc: Disabling bearer <eth:syzkaller0>
[  494.735631][   T24] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[  494.885631][   T24] usb 5-1: Using ep0 maxpacket: 32
[  494.895356][   T24] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  494.904409][   T24] usb 5-1: config 0 has no interface number 0
[  494.910924][   T24] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  494.926708][   T24] usb 5-1: config 0 interface 1 has no altsetting 0
[  494.938793][   T24] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  494.948517][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  494.957416][   T24] usb 5-1: Product: syz
[  494.961854][   T24] usb 5-1: Manufacturer: syz
[  494.967320][   T24] usb 5-1: SerialNumber: syz
[  494.975387][   T24] usb 5-1: config 0 descriptor??
[  495.209720][   T24] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[  495.228793][   T24] cx231xx 5-1:0.1: Not found matching IAD interface
[  495.238047][   T24] usb 5-1: USB disconnect, device number 63
[  495.505586][T11690] netlink: 'syz.2.1644': attribute type 21 has an invalid length.
[  495.514123][T11690] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1644'.
[  496.135769][ T1592] usb 4-1: new high-speed USB device number 78 using dummy_hcd
[  496.285623][ T1592] usb 4-1: Using ep0 maxpacket: 8
[  496.292567][ T1592] usb 4-1: config index 0 descriptor too short (expected 30, got 18)
[  496.304119][ T1592] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  496.315287][ T1592] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  496.341716][ T1592] usb 4-1: Product: syz
[  496.358288][ T1592] usb 4-1: Manufacturer: syz
[  496.362983][ T1592] usb 4-1: SerialNumber: syz
[  496.368608][   T24] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[  496.381633][ T1592] usb 4-1: config 0 descriptor??
[  496.390459][ T1592] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  496.405880][ T1592] usb 4-1: setting power ON
[  496.411720][ T1592] dvb-usb: bulk message failed: -22 (2/0)
[  496.420939][ T1592] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  496.431167][ T1592] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  496.441468][ T1592] usb 4-1: media controller created
[  496.458527][ T1592] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  496.488355][ T1592] usb 4-1: selecting invalid altsetting 6
[  496.494158][ T1592] usb 4-1: digital interface selection failed (-22)
[  496.505367][ T1592] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  496.514047][   T24] usb 5-1: device descriptor read/64, error -71
[  496.522474][ T1592] usb 4-1: setting power OFF
[  496.528405][ T1592] dvb-usb: bulk message failed: -22 (2/0)
[  496.538337][ T1592] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  496.548457][ T1592] (NULL device *): no alternate interface
[  496.581701][ T1592] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  496.612117][ T1592] usb 4-1: USB disconnect, device number 78
[  496.755664][   T24] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[  496.885609][   T24] usb 5-1: device descriptor read/64, error -71
[  496.996911][   T24] usb usb5-port1: attempt power cycle
[  497.351016][   T24] usb 5-1: new high-speed USB device number 66 using dummy_hcd
[  497.386530][   T24] usb 5-1: device descriptor read/8, error -71
[  497.625660][   T24] usb 5-1: new high-speed USB device number 67 using dummy_hcd
[  497.649629][   T24] usb 5-1: device descriptor read/8, error -71
[  497.775557][  T796] usb 4-1: new high-speed USB device number 79 using dummy_hcd
[  497.776556][   T24] usb usb5-port1: unable to enumerate USB device
[  497.949753][  T796] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  497.970144][  T796] usb 4-1: config 0 has no interface number 0
[  497.979243][  T796] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  497.988703][  T796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  497.997112][  T796] usb 4-1: Product: syz
[  498.001291][  T796] usb 4-1: Manufacturer: syz
[  498.007034][  T796] usb 4-1: SerialNumber: syz
[  498.014715][  T796] usb 4-1: config 0 descriptor??
[  498.280668][  T796] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state
[  498.408230][   T51] Bluetooth: hci5: command 0x0406 tx timeout
[  498.494350][T11732] loop7: detected capacity change from 0 to 2640
[  498.972101][T11739] netlink: 'syz.0.1662': attribute type 21 has an invalid length.
[  498.980259][T11739] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1662'.
[  499.269716][T11745] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  500.094110][T11755] FAULT_INJECTION: forcing a failure.
[  500.094110][T11755] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  500.145803][T11755] CPU: 0 UID: 0 PID: 11755 Comm: syz.5.1666 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  500.145829][T11755] Tainted: [L]=SOFTLOCKUP
[  500.145836][T11755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  500.145846][T11755] Call Trace:
[  500.145853][T11755]  <TASK>
[  500.145860][T11755]  dump_stack_lvl+0xe8/0x150
[  500.145887][T11755]  should_fail_ex+0x412/0x560
[  500.145914][T11755]  _copy_from_iter+0x1d3/0x1670
[  500.145939][T11755]  ? __pfx__copy_from_iter+0x10/0x10
[  500.145961][T11755]  ? raw_sendmsg+0x74d/0x1a50
[  500.145982][T11755]  raw_sendmsg+0x112c/0x1a50
[  500.146011][T11755]  ? __pfx_raw_sendmsg+0x10/0x10
[  500.146039][T11755]  ? aa_sk_perm+0x6d5/0x900
[  500.146068][T11755]  ? __pfx_aa_sk_perm+0x10/0x10
[  500.146089][T11755]  ? tomoyo_socket_sendmsg_permission+0x215/0x300
[  500.146109][T11755]  ? sock_rps_record_flow+0x19/0x400
[  500.146131][T11755]  ? inet_sendmsg+0x2f4/0x370
[  500.146150][T11755]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  500.146171][T11755]  ____sys_sendmsg+0x80a/0x9f0
[  500.146198][T11755]  ? __pfx_____sys_sendmsg+0x10/0x10
[  500.146229][T11755]  ___sys_sendmsg+0x2a5/0x360
[  500.146252][T11755]  ? __pfx____sys_sendmsg+0x10/0x10
[  500.146275][T11755]  ? kstrtoull+0x12f/0x1d0
[  500.146316][T11755]  ? __fget_files+0x2a/0x420
[  500.146330][T11755]  ? __fget_files+0x3a0/0x420
[  500.146350][T11755]  __sys_sendmmsg+0x2e7/0x4e0
[  500.146374][T11755]  ? __pfx___sys_sendmmsg+0x10/0x10
[  500.146413][T11755]  ? fput+0xa0/0xd0
[  500.146435][T11755]  ? ksys_write+0x242/0x270
[  500.146458][T11755]  __ia32_compat_sys_sendmmsg+0xa2/0xc0
[  500.146480][T11755]  __do_fast_syscall_32+0x20d/0x640
[  500.146503][T11755]  ? do_fast_syscall_32+0x33/0x70
[  500.146530][T11755]  ? asm_int80_emulation+0x1a/0x20
[  500.146544][T11755]  ? do_int80_emulation+0x274/0x4d0
[  500.146564][T11755]  ? trace_irq_disable+0x3b/0x150
[  500.146581][T11755]  do_fast_syscall_32+0x33/0x70
[  500.146602][T11755]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  500.146622][T11755] RIP: 0023:0xf7fa8f6c
[  500.146636][T11755] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  500.146649][T11755] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000159
[  500.146666][T11755] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000900
[  500.146678][T11755] RDX: 0000000000000001 RSI: 0000000000000800 RDI: 0000000000000000
[  500.146687][T11755] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  500.146696][T11755] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  500.146706][T11755] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  500.146727][T11755]  </TASK>
[  500.546724][T11757] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  500.608546][T11760] tipc: Resetting bearer <eth:syzkaller0>
[  500.617895][T11757] syzkaller0: entered promiscuous mode
[  500.893604][T11775] netlink: 'syz.3.1675': attribute type 4 has an invalid length.
[  500.922808][T11775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1675'.
[  500.940350][T11775] bond_slave_0: entered promiscuous mode
[  500.946325][T11775] bond_slave_1: entered promiscuous mode
[  500.952004][T11775] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode
[  500.960612][T11775] syz_tun: entered promiscuous mode
[  500.969233][T11775] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  500.992522][T11775] bond_slave_0: left promiscuous mode
[  500.998061][T11775] bond_slave_1: left promiscuous mode
[  501.003517][T11775] mac80211_hwsim hwsim8 wlan1: left promiscuous mode
[  501.010253][T11775] syz_tun: left promiscuous mode
[  501.210290][T11783] FAULT_INJECTION: forcing a failure.
[  501.210290][T11783] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  501.226309][T11783] CPU: 0 UID: 0 PID: 11783 Comm: syz.2.1678 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  501.226341][T11783] Tainted: [L]=SOFTLOCKUP
[  501.226350][T11783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  501.226362][T11783] Call Trace:
[  501.226371][T11783]  <TASK>
[  501.226380][T11783]  dump_stack_lvl+0xe8/0x150
[  501.226414][T11783]  should_fail_ex+0x412/0x560
[  501.226451][T11783]  _copy_from_user+0x2d/0xb0
[  501.226485][T11783]  kstrtouint_from_user+0xd6/0x180
[  501.226521][T11783]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  501.226569][T11783]  proc_fail_nth_write+0x8e/0x210
[  501.226601][T11783]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  501.226637][T11783]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  501.226670][T11783]  vfs_write+0x29a/0xb90
[  501.226701][T11783]  ? __pfx_vfs_write+0x10/0x10
[  501.226748][T11783]  ? __fget_files+0x2a/0x420
[  501.226773][T11783]  ? __fget_files+0x3a0/0x420
[  501.226791][T11783]  ? __fget_files+0x2a/0x420
[  501.226819][T11783]  ksys_write+0x150/0x270
[  501.226846][T11783]  ? __pfx_ksys_write+0x10/0x10
[  501.226874][T11783]  ? asm_int80_emulation+0x1a/0x20
[  501.226901][T11783]  do_int80_emulation+0x173/0x4d0
[  501.226930][T11783]  ? trace_irq_disable+0x3b/0x150
[  501.226949][T11783]  ? asm_int80_emulation+0x1a/0x20
[  501.226969][T11783]  ? clear_bhb_loop+0x40/0x90
[  501.226990][T11783]  ? clear_bhb_loop+0x40/0x90
[  501.227017][T11783]  asm_int80_emulation+0x1a/0x20
[  501.227039][T11783] RIP: 0023:0xf71d5cab
[  501.227058][T11783] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  501.227079][T11783] RSP: 002b:00000000f548d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004
[  501.227103][T11783] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f548d5d0
[  501.227119][T11783] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[  501.227132][T11783] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  501.227145][T11783] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  501.227157][T11783] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  501.227187][T11783]  </TASK>
[  501.477380][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  501.483739][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  501.588633][T11756] tipc: Resetting bearer <eth:syzkaller0>
[  501.689642][T11756] tipc: Disabling bearer <eth:syzkaller0>
[  502.855610][ T1592] usb 5-1: new high-speed USB device number 68 using dummy_hcd
[  502.985639][ T1592] usb 5-1: device descriptor read/64, error -71
[  503.225642][ T1592] usb 5-1: new high-speed USB device number 69 using dummy_hcd
[  503.355654][ T1592] usb 5-1: device descriptor read/64, error -71
[  503.465974][ T1592] usb usb5-port1: attempt power cycle
[  503.806410][ T1592] usb 5-1: new high-speed USB device number 70 using dummy_hcd
[  503.847172][ T1592] usb 5-1: device descriptor read/8, error -71
[  504.083489][T11829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1692'.
[  504.086045][ T1592] usb 5-1: new high-speed USB device number 71 using dummy_hcd
[  504.093860][T11829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1692'.
[  504.156390][ T1592] usb 5-1: device descriptor read/8, error -71
[  504.266222][ T1592] usb usb5-port1: unable to enumerate USB device
[  505.557261][T11842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1696'.
[  505.566406][T11842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1696'.
[  506.681856][T11853] bridge0: port 3(macvtap1) entered blocking state
[  506.688891][T11853] bridge0: port 3(macvtap1) entered disabled state
[  506.696312][T11853] macvtap1: entered allmulticast mode
[  506.702003][T11853] bridge0: entered allmulticast mode
[  506.710989][T11853] macvtap1: left allmulticast mode
[  506.716755][T11853] bridge0: left allmulticast mode
[  507.029596][T11859] fuse: Bad value for 'fd'
[  508.113813][T11871] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1704'.
[  508.595346][T11877] netlink: 'syz.0.1707': attribute type 11 has an invalid length.
[  508.823935][T11887] FAULT_INJECTION: forcing a failure.
[  508.823935][T11887] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  508.837301][T11887] CPU: 1 UID: 0 PID: 11887 Comm: syz.4.1711 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  508.837326][T11887] Tainted: [L]=SOFTLOCKUP
[  508.837332][T11887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  508.837342][T11887] Call Trace:
[  508.837349][T11887]  <TASK>
[  508.837356][T11887]  dump_stack_lvl+0xe8/0x150
[  508.837406][T11887]  should_fail_ex+0x412/0x560
[  508.837445][T11887]  _copy_to_user+0x31/0xb0
[  508.837474][T11887]  simple_read_from_buffer+0xe1/0x170
[  508.837515][T11887]  proc_fail_nth_read+0x1bb/0x230
[  508.837541][T11887]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  508.837566][T11887]  ? rw_verify_area+0x2a6/0x4d0
[  508.837583][T11887]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  508.837607][T11887]  vfs_read+0x20c/0xa70
[  508.837622][T11887]  ? fdget_pos+0x246/0x320
[  508.837640][T11887]  ? __pfx___mutex_lock+0x10/0x10
[  508.837661][T11887]  ? __pfx_vfs_read+0x10/0x10
[  508.837679][T11887]  ? __fget_files+0x2a/0x420
[  508.837695][T11887]  ? __fget_files+0x3a0/0x420
[  508.837708][T11887]  ? __fget_files+0x2a/0x420
[  508.837728][T11887]  ksys_read+0x150/0x270
[  508.837746][T11887]  ? __pfx_ksys_read+0x10/0x10
[  508.837766][T11887]  ? asm_int80_emulation+0x1a/0x20
[  508.837785][T11887]  do_int80_emulation+0x173/0x4d0
[  508.837805][T11887]  ? trace_irq_disable+0x3b/0x150
[  508.837819][T11887]  ? asm_int80_emulation+0x1a/0x20
[  508.837833][T11887]  ? clear_bhb_loop+0x40/0x90
[  508.837854][T11887]  ? clear_bhb_loop+0x40/0x90
[  508.837873][T11887]  asm_int80_emulation+0x1a/0x20
[  508.837888][T11887] RIP: 0023:0xf71f5cab
[  508.837903][T11887] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  508.837917][T11887] RSP: 002b:00000000f54b64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  508.837933][T11887] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54b65d0
[  508.837945][T11887] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[  508.837953][T11887] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  508.837962][T11887] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  508.837972][T11887] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  508.837994][T11887]  </TASK>
[  509.750193][T11897] binder: 11896:11897 ioctl c0306201 80000640 returned -22
[  510.059957][T11903] FAULT_INJECTION: forcing a failure.
[  510.059957][T11903] name failslab, interval 1, probability 0, space 0, times 0
[  510.079795][T11903] CPU: 1 UID: 0 PID: 11903 Comm: syz.4.1718 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  510.079832][T11903] Tainted: [L]=SOFTLOCKUP
[  510.079839][T11903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  510.079851][T11903] Call Trace:
[  510.079857][T11903]  <TASK>
[  510.079864][T11903]  dump_stack_lvl+0xe8/0x150
[  510.079890][T11903]  should_fail_ex+0x412/0x560
[  510.079917][T11903]  should_failslab+0xa8/0x100
[  510.079939][T11903]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  510.079957][T11903]  ? __alloc_skb+0x186/0x7d0
[  510.079979][T11903]  ? __alloc_skb+0x1d0/0x7d0
[  510.079993][T11903]  ? __local_bh_enable_ip+0xd0/0x130
[  510.080017][T11903]  __alloc_skb+0x1d0/0x7d0
[  510.080036][T11903]  alloc_skb_with_frags+0xca/0x890
[  510.080064][T11903]  sock_alloc_send_pskb+0x878/0x990
[  510.080097][T11903]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  510.080125][T11903]  ? iov_iter_advance+0x8b/0x1c0
[  510.080142][T11903]  tun_get_user+0x92d/0x3dd0
[  510.080169][T11903]  ? aa_file_perm+0x192/0x15e0
[  510.080187][T11903]  ? aa_file_perm+0x50e/0x15e0
[  510.080201][T11903]  ? __pfx_tun_get_user+0x10/0x10
[  510.080217][T11903]  ? aa_file_perm+0x192/0x15e0
[  510.080236][T11903]  ? __lock_acquire+0x6b5/0x2cf0
[  510.080262][T11903]  ? ref_tracker_alloc+0x35c/0x4c0
[  510.080279][T11903]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  510.080298][T11903]  ? tun_get+0x1c/0x2f0
[  510.080318][T11903]  ? tun_get+0x1c/0x2f0
[  510.080334][T11903]  ? tun_get+0x1c/0x2f0
[  510.080353][T11903]  tun_chr_write_iter+0x113/0x200
[  510.080372][T11903]  vfs_write+0x61d/0xb90
[  510.080394][T11903]  ? __pfx_vfs_write+0x10/0x10
[  510.080417][T11903]  ? __fget_files+0x2a/0x420
[  510.080437][T11903]  ksys_write+0x150/0x270
[  510.080455][T11903]  ? __pfx_ksys_write+0x10/0x10
[  510.080478][T11903]  __do_fast_syscall_32+0x20d/0x640
[  510.080501][T11903]  ? do_fast_syscall_32+0x33/0x70
[  510.080520][T11903]  ? asm_int80_emulation+0x1a/0x20
[  510.080535][T11903]  ? do_int80_emulation+0x274/0x4d0
[  510.080554][T11903]  ? trace_irq_disable+0x3b/0x150
[  510.080570][T11903]  do_fast_syscall_32+0x33/0x70
[  510.080591][T11903]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  510.080609][T11903] RIP: 0023:0xf7ff3f6c
[  510.080623][T11903] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  510.080636][T11903] RSP: 002b:00000000f54b650c EFLAGS: 00000206 ORIG_RAX: 0000000000000004
[  510.080652][T11903] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000080
[  510.080663][T11903] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000000
[  510.080672][T11903] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  510.080680][T11903] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  510.080689][T11903] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  510.080713][T11903]  </TASK>
[  510.563014][   T30] INFO: task kworker/1:4:5902 blocked for more than 143 seconds.
[  510.571295][   T30]       Tainted: G             L      syzkaller #0
[  510.577878][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  510.586624][   T30] task:kworker/1:4     state:D stack:21320 pid:5902  tgid:5902  ppid:2      task_flags:0x4288060 flags:0x00080000
[  510.598870][   T30] Workqueue: usb_hub_wq hub_event
[  510.603976][   T30] Call Trace:
[  510.607389][   T30]  <TASK>
[  510.610367][   T30]  __schedule+0x15dd/0x52d0
[  510.614936][   T30]  ? __lock_acquire+0x6b5/0x2cf0
[  510.619993][   T30]  ? do_raw_spin_lock+0x12b/0x2f0
[  510.625157][   T30]  ? __pfx___schedule+0x10/0x10
[  510.630197][   T30]  ? schedule+0x90/0x360
[  510.634458][   T30]  schedule+0x164/0x360
[  510.638656][   T30]  schedule_timeout+0xc3/0x2c0
[  510.643462][   T30]  ? do_raw_spin_lock+0x12b/0x2f0
[  510.648590][   T30]  ? __pfx_schedule_timeout+0x10/0x10
[  510.653976][   T30]  ? do_raw_spin_lock+0x12b/0x2f0
[  510.659932][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  510.665278][   T30]  ? wait_for_completion+0x274/0x5e0
[  510.671399][   T30]  wait_for_completion+0x2cc/0x5e0
[  510.712152][   T30]  ? __pfx_wait_for_completion+0x10/0x10
[  510.721262][   T30]  i2c_del_adapter+0x5c0/0x790
[  510.729004][   T30]  ? __pfx_i2c_del_adapter+0x10/0x10
[  510.737986][   T30]  ? kfree+0x4d/0x630
[  510.742038][   T30]  dvb_usb_i2c_exit+0x64/0xb0
[  510.752349][   T30]  dvb_usb_device_exit+0x1cb/0x360
[  510.760260][   T30]  ? __pfx_dvb_usb_device_exit+0x10/0x10
[  510.768744][   T30]  ? usb_disable_interface+0x31d/0x350
[  510.778082][   T30]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  510.783964][   T30]  usb_unbind_interface+0x26e/0x910
[  510.792787][   T30]  ? __pfx_usb_unbind_interface+0x10/0x10
[  510.799662][   T30]  device_release_driver_internal+0x4d9/0x870
[  510.806202][   T30]  bus_remove_device+0x455/0x570
[  510.811394][   T30]  ? __pfx_bus_remove_device+0x10/0x10
[  510.817418][   T30]  device_del+0x527/0x8f0
[  510.822766][   T30]  ? usb_disconnect+0xf8/0x990
[  510.828020][   T30]  ? __pfx_device_del+0x10/0x10
[  510.832964][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  510.838545][   T30]  usb_disable_device+0x3d4/0x8d0
[  510.844519][   T30]  usb_disconnect+0x32f/0x990
[  510.849682][   T30]  hub_event+0x1cc9/0x4f30
[  510.854265][   T30]  ? __lock_acquire+0x6b5/0x2cf0
[  510.859947][   T30]  ? __pfx_hub_event+0x10/0x10
[  510.864870][   T30]  ? process_scheduled_works+0xa8d/0x18c0
[  510.870918][   T30]  ? process_scheduled_works+0xa8d/0x18c0
[  510.877587][   T30]  process_scheduled_works+0xb6e/0x18c0
[  510.883240][   T30]  ? __pfx_process_scheduled_works+0x10/0x10
[  510.889866][   T30]  ? assign_work+0x3d5/0x5e0
[  510.894706][   T30]  worker_thread+0xa53/0xfc0
[  510.902917][   T30]  kthread+0x388/0x470
[  510.907387][   T30]  ? __pfx_worker_thread+0x10/0x10
[  510.912547][   T30]  ? __pfx_kthread+0x10/0x10
[  510.917804][   T30]  ret_from_fork+0x51e/0xb90
[  510.922523][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  510.928396][   T30]  ? __switch_to+0xc7d/0x1450
[  510.933184][   T30]  ? __pfx_kthread+0x10/0x10
[  510.938199][   T30]  ret_from_fork_asm+0x1a/0x30
[  510.943062][   T30]  </TASK>
[  510.946256][   T30] INFO: task syz.1.929:9506 blocked for more than 143 seconds.
[  510.953834][   T30]       Tainted: G             L      syzkaller #0
[  510.960597][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  510.969440][   T30] task:syz.1.929       state:D stack:27808 pid:9506  tgid:9503  ppid:5851   task_flags:0x400040 flags:0x08080002
[  510.982847][   T30] Call Trace:
[  510.986443][   T30]  <TASK>
[  510.989405][   T30]  __schedule+0x15dd/0x52d0
[  510.993963][   T30]  ? __lock_acquire+0x6b5/0x2cf0
[  510.999063][   T30]  ? __pfx___schedule+0x10/0x10
[  511.003973][   T30]  ? schedule+0x90/0x360
[  511.008493][   T30]  schedule+0x164/0x360
[  511.013895][   T30]  schedule_preempt_disabled+0x13/0x30
[  511.019548][   T30]  __mutex_lock+0x7fe/0x1300
[  511.024187][   T30]  ? __mutex_lock+0x5ac/0x1300
[  511.029093][   T30]  ? usbdev_open+0x182/0x770
[  511.033724][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  511.038951][   T30]  ? bus_find_device+0x27d/0x2d0
[  511.043933][   T30]  ? __pfx_bus_find_device+0x10/0x10
[  511.049661][   T30]  ? usbdev_open+0xa7/0x770
[  511.054209][   T30]  ? __kmalloc_cache_noprof+0x15b/0x660
[  511.059918][   T30]  usbdev_open+0x182/0x770
[  511.064384][   T30]  ? __pfx_usbdev_open+0x10/0x10
[  511.069483][   T30]  ? do_raw_spin_unlock+0xf5/0x210
[  511.074661][   T30]  chrdev_open+0x4cd/0x5e0
[  511.079535][   T30]  ? __pfx_chrdev_open+0x10/0x10
[  511.084535][   T30]  ? fsnotify_open_perm_and_set_mode+0x135/0x6d0
[  511.091046][   T30]  ? __pfx_chrdev_open+0x10/0x10
[  511.096235][   T30]  do_dentry_open+0x785/0x14e0
[  511.101031][   T30]  vfs_open+0x3b/0x340
[  511.105119][   T30]  ? path_openat+0x2df0/0x3860
[  511.109975][   T30]  path_openat+0x2e08/0x3860
[  511.114623][   T30]  ? __pfx_stack_trace_save+0x10/0x10
[  511.120250][   T30]  ? stack_depot_save_flags+0x33/0x810
[  511.127418][   T30]  ? __pfx_path_openat+0x10/0x10
[  511.132408][   T30]  ? __ia32_compat_sys_openat+0x131/0x160
[  511.138305][   T30]  ? do_int80_emulation+0x173/0x4d0
[  511.143576][   T30]  ? asm_int80_emulation+0x1a/0x20
[  511.148818][   T30]  ? __lock_acquire+0x6b5/0x2cf0
[  511.153813][   T30]  do_file_open+0x23e/0x4a0
[  511.158475][   T30]  ? __pfx_do_file_open+0x10/0x10
[  511.163567][   T30]  ? _raw_spin_unlock+0x28/0x50
[  511.168557][   T30]  ? alloc_fd+0x64b/0x6c0
[  511.172961][   T30]  do_sys_openat2+0x113/0x200
[  511.177814][   T30]  ? __pfx_do_sys_openat2+0x10/0x10
[  511.183474][   T30]  ? rcu_is_watching+0x15/0xb0
[  511.188495][   T30]  __ia32_compat_sys_openat+0x131/0x160
[  511.194105][   T30]  do_int80_emulation+0x173/0x4d0
[  511.199379][   T30]  ? asm_int80_emulation+0x1a/0x20
[  511.204535][   T30]  ? clear_bhb_loop+0x40/0x90
[  511.209604][   T30]  ? clear_bhb_loop+0x40/0x90
[  511.214340][   T30]  asm_int80_emulation+0x1a/0x20
[  511.219431][   T30] RIP: 0023:0xf7135cab
[  511.223540][   T30] RSP: 002b:00000000f53ed03c EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  511.232172][   T30] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f53ed100
[  511.241548][   T30] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000
[  511.249900][   T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  511.258066][   T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  511.266368][   T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  511.274480][   T30]  </TASK>
[  511.277795][   T30] 
[  511.277795][   T30] Showing all locks held in the system:
[  511.368930][   T30] 1 lock held by khungtaskd/30:
[  511.373869][   T30]  #0: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  511.385166][   T30] 5 locks held by kworker/0:2/796:
[  511.390476][   T30]  #0: ffff888022293548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0
[  511.401940][   T30]  #1: ffffc900045c7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0
[  511.413995][   T30]  #2: ffff888029d571e0 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30
[  511.423049][   T30]  #3: ffff88807a1101e0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450
[  511.432680][   T30]  #4: ffff888057d3b1a8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450
[  511.442081][   T30] 2 locks held by getty/5582:
[  511.446940][   T30]  #0: ffff8880372880a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  511.456859][   T30]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0
[  511.467176][   T30] 1 lock held by syz-executor/5846:
[  511.472436][   T30] 6 locks held by kworker/0:3/5888:
[  511.477731][   T30]  #0: ffff888022293548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0
[  511.489649][   T30]  #1: ffffc900045f7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0
[  511.501692][   T30]  #2: ffff888029da71e0 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30
[  511.518444][   T30]  #3: ffff888029b8e1e0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450
[  511.527967][   T30]  #4: ffff88802940d1a8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450
[  511.537548][   T30]  #5: ffffffff8e5fb9b0 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xfc/0x2c0
[  511.548162][   T30] 5 locks held by kworker/1:4/5902:
[  511.553400][   T30]  #0: ffff888022293548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0
[  511.564809][   T30]  #1: ffffc900046d7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0
[  511.576896][   T30]  #2: ffff888029d151e0 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30
[  511.585909][   T30]  #3: ffff88802aaad1e0 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x990
[  511.595418][   T30]  #4: ffff88802aaaf1a8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870
[  511.606627][   T30] 4 locks held by udevd/7502:
[  511.611315][   T30]  #0: ffff88807e4010a0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10
[  511.620314][   T30]  #1: ffff88802b456888 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420
[  511.629866][   T30]  #2: ffff8880579771e8 (kn->active#29){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420
[  511.639585][   T30]  #3: ffff88802aaad1e0 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0
[  511.649263][   T30] 1 lock held by syz.1.929/9506:
[  511.654212][   T30]  #0: ffff888029d151e0 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x770
[  511.663372][   T30] 
[  511.666013][   T30] =============================================
[  511.666013][   T30] 
[  511.674475][   T30] NMI backtrace for cpu 1
[  511.674500][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  511.674520][   T30] Tainted: [L]=SOFTLOCKUP
[  511.674526][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  511.674536][   T30] Call Trace:
[  511.674543][   T30]  <TASK>
[  511.674549][   T30]  dump_stack_lvl+0xe8/0x150
[  511.674574][   T30]  nmi_cpu_backtrace+0x274/0x2d0
[  511.674590][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  511.674611][   T30]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  511.674630][   T30]  sys_info+0x135/0x170
[  511.674651][   T30]  watchdog+0xfd9/0x1030
[  511.674668][   T30]  ? watchdog+0x21a/0x1030
[  511.674687][   T30]  kthread+0x388/0x470
[  511.674702][   T30]  ? __pfx_watchdog+0x10/0x10
[  511.674714][   T30]  ? __pfx_kthread+0x10/0x10
[  511.674729][   T30]  ret_from_fork+0x51e/0xb90
[  511.674751][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  511.674770][   T30]  ? __switch_to+0xc7d/0x1450
[  511.674790][   T30]  ? __pfx_kthread+0x10/0x10
[  511.674805][   T30]  ret_from_fork_asm+0x1a/0x30
[  511.674838][   T30]  </TASK>
[  511.674843][   T30] Sending NMI from CPU 1 to CPUs 0:
[  511.793362][    C0] NMI backtrace for cpu 0
[  511.793382][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  511.793407][    C0] Tainted: [L]=SOFTLOCKUP
[  511.793414][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  511.793427][    C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x17/0x90
[  511.793461][    C0] Code: 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 65 48 8b 15 c8 dc 56 11 65 8b 0d e9 dc 56 11 <81> e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75 5b 83 ba a4 16 00 00
[  511.793477][    C0] RSP: 0018:ffffc900000078e0 EFLAGS: 00000246
[  511.793494][    C0] RAX: ffffffff8706f1b1 RBX: ffffc900000079e0 RCX: 0000000080000102
[  511.793508][    C0] RDX: ffffffff8e494ec0 RSI: 0000000000000001 RDI: 0000000000000000
[  511.793520][    C0] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000007900
[  511.793531][    C0] R10: dffffc0000000000 R11: ffffffff8706f130 R12: 0000000000000008
[  511.793544][    C0] R13: ffff888056332fa0 R14: ffff888056332ad0 R15: 0000000000000000
[  511.793557][    C0] FS:  0000000000000000(0000) GS:ffff888125457000(0000) knlGS:0000000000000000
[  511.793572][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  511.793585][    C0] CR2: 00000000f74832f0 CR3: 000000000e54c000 CR4: 00000000003526f0
[  511.793600][    C0] Call Trace:
[  511.793608][    C0]  <IRQ>
[  511.793621][    C0]  mac80211_hwsim_addr_iter+0x81/0x1b0
[  511.793646][    C0]  __iterate_interfaces+0x2ab/0x590
[  511.793669][    C0]  ? __pfx_mac80211_hwsim_addr_iter+0x10/0x10
[  511.793690][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  511.793715][    C0]  ? __pfx_mac80211_hwsim_addr_iter+0x10/0x10
[  511.793735][    C0]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  511.793761][    C0]  mac80211_hwsim_addr_match+0x11e/0x190
[  511.793781][    C0]  ? __pfx_mac80211_hwsim_addr_match+0x10/0x10
[  511.793807][    C0]  mac80211_hwsim_tx_frame_no_nl+0xd21/0x11f0
[  511.793836][    C0]  ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10
[  511.793856][    C0]  ? ktime_get_with_offset+0x93/0x2a0
[  511.793878][    C0]  ? seqcount_lockdep_reader_access+0xa9/0x100
[  511.793900][    C0]  ? lockdep_hardirqs_on+0x7a/0x110
[  511.793925][    C0]  ? mac80211_hwsim_monitor_rx+0x1a3/0x820
[  511.793948][    C0]  mac80211_hwsim_tx_frame+0x1b5/0x200
[  511.793972][    C0]  mac80211_hwsim_beacon_tx+0x3e8/0x870
[  511.793995][    C0]  ? lock_acquire+0xf0/0x2e0
[  511.794019][    C0]  __iterate_interfaces+0x2ab/0x590
[  511.794041][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  511.794063][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  511.794088][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  511.794110][    C0]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  511.794137][    C0]  mac80211_hwsim_beacon+0xbb/0x180
[  511.794166][    C0]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  511.794193][    C0]  __hrtimer_run_queues+0x53a/0xcc0
[  511.794228][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  511.794253][    C0]  ? ktime_get_update_offsets_now+0x3b2/0x3d0
[  511.794291][    C0]  hrtimer_run_softirq+0x182/0x5a0
[  511.794338][    C0]  handle_softirqs+0x22a/0x870
[  511.794363][    C0]  ? __irq_exit_rcu+0x5f/0x150
[  511.794391][    C0]  __irq_exit_rcu+0x5f/0x150
[  511.794414][    C0]  irq_exit_rcu+0x9/0x30
[  511.794436][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  511.794458][    C0]  </IRQ>
[  511.794464][    C0]  <TASK>
[  511.794472][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  511.794492][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  511.794515][    C0] Code: 0e 6c 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 32 1a 00 fb f4 <e9> fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[  511.794531][    C0] RSP: 0018:ffffffff8e407dc0 EFLAGS: 00000242
[  511.794546][    C0] RAX: 0000000000a14f25 RBX: ffffffff819a913a RCX: 0000000080000001
[  511.794559][    C0] RDX: 0000000000000001 RSI: ffffffff8defa72c RDI: ffffffff8c27d100
[  511.794572][    C0] RBP: ffffffff8e407eb0 R08: ffff8880b863399b R09: 1ffff110170c6733
[  511.794586][    C0] R10: dffffc0000000000 R11: ffffed10170c6734 R12: 0000000000000000
[  511.794599][    C0] R13: 1ffffffff1c929d8 R14: 0000000000000000 R15: 1ffffffff1c929d8
[  511.794621][    C0]  ? do_idle+0x36a/0x5f0
[  511.794651][    C0]  default_idle+0x9/0x20
[  511.794675][    C0]  default_idle_call+0x72/0xb0
[  511.794701][    C0]  do_idle+0x36a/0x5f0
[  511.794728][    C0]  ? __pfx_do_idle+0x10/0x10
[  511.794754][    C0]  ? do_idle+0x5c1/0x5f0
[  511.794781][    C0]  cpu_startup_entry+0x43/0x60
[  511.794806][    C0]  rest_init+0x2de/0x300
[  511.794822][    C0]  start_kernel+0x385/0x3d0
[  511.794850][    C0]  x86_64_start_reservations+0x24/0x30
[  511.794872][    C0]  x86_64_start_kernel+0x143/0x1c0
[  511.794892][    C0]  common_startup_64+0x13e/0x147
[  511.794919][    C0]  </TASK>
[  512.261161][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  512.268035][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  512.278747][   T30] Tainted: [L]=SOFTLOCKUP
[  512.283097][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  512.293163][   T30] Call Trace:
[  512.296453][   T30]  <TASK>
[  512.299394][   T30]  vpanic+0x56c/0xa60
[  512.303393][   T30]  ? __pfx___schedule+0x10/0x10
[  512.308261][   T30]  ? __pfx_vpanic+0x10/0x10
[  512.312804][   T30]  ? __pfx_console_unlock+0x10/0x10
[  512.318080][   T30]  panic+0xc5/0xd0
[  512.321856][   T30]  ? __pfx_panic+0x10/0x10
[  512.326312][   T30]  ? preempt_schedule_thunk+0x16/0x30
[  512.331713][   T30]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  512.337895][   T30]  watchdog+0x1023/0x1030
[  512.342287][   T30]  ? watchdog+0x21a/0x1030
[  512.346746][   T30]  kthread+0x388/0x470
[  512.350837][   T30]  ? __pfx_watchdog+0x10/0x10
[  512.355530][   T30]  ? __pfx_kthread+0x10/0x10
[  512.360157][   T30]  ret_from_fork+0x51e/0xb90
[  512.364775][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  512.369916][   T30]  ? __switch_to+0xc7d/0x1450
[  512.374631][   T30]  ? __pfx_kthread+0x10/0x10
[  512.379240][   T30]  ret_from_fork_asm+0x1a/0x30
[  512.384046][   T30]  </TASK>
[  512.387676][   T30] Kernel Offset: disabled
[  512.392016][   T30] Rebooting in 86400 seconds..