last executing test programs:

35m51.539085632s ago: executing program 2 (id=585):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
r1 = fsopen(&(0x7f00000013c0)='tracefs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0)
sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0xfffffffd, @loopback, 0xfffffffc}, 0x1c, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="2400000029000000390000002c02020100000000fc02000000000000000000000000000010"], 0x34}}], 0x2, 0xff00)

35m51.359951168s ago: executing program 2 (id=587):
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x2000010}, 0x20000000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a80)=@newtaction={0x164, 0x30, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [{0x40, 0x1, [@m_simple={0x3c, 0x18, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x9, 0x3, '\t\x00\x00\x00\x00'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}, {0x110, 0x1, [@m_simple={0xb8, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x89, 0x6, "3ac47d8f66b9ada606aa60a7fc99c95c9fbb58402dd443e92602f7994c557e40094500a136bb53cc323abe8e9a032feb3b1811b3f9149f6f05ff436ae121782b9f13ed2deb3fee8a17863c1d88b38005a4604a93ebbc213530b8e07f71d1175d1580cb57e68478f9edf7f8e766c01a7ba01dde9f5efc04e3eb55e8d86d594f207de74400f3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ct={0x54, 0x17, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @remote}, @TCA_CT_LABELS={0x14, 0x7, "1fc075f6ec8940afab5885e58057ae3f"}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x4000880}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}, 0xa6ffffff}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

35m51.201323034s ago: executing program 2 (id=589):
setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f00000000c0), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback={0xe0}, 0xffffffff}, 0x1c)

35m51.092199895s ago: executing program 2 (id=591):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x4)
mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x104000, 0x0)
keyctl$get_persistent(0x16, 0x0, r0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000180)='asymmetric\x00', &(0x7f0000000200)=@secondary)

35m50.912644104s ago: executing program 2 (id=593):
r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000)
ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x9, 0x2, 0x0, {0x7, 0xbde, 0xb, 0x10000}})

35m50.584733484s ago: executing program 2 (id=596):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r1, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f00000065c0)={0x0, 0xfffffef1, &(0x7f0000006580)={&(0x7f0000000500)={0x28, 0x14, 0x211, 0x0, 0x8000, {0x28, 0x2}, [@INET_DIAG_REQ_BYTECODE={0x11, 0xfa, "4ac2411e47061aefad04000000"}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000841}, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0xfffffffd, @loopback, 0xfffffffc}, 0x1c, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="2400000029000000390000002c02020100000000fc0200000000000000000000000000001000000029"], 0x34}}], 0x2, 0xff00)

35m50.142028924s ago: executing program 32 (id=596):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r1, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f00000065c0)={0x0, 0xfffffef1, &(0x7f0000006580)={&(0x7f0000000500)={0x28, 0x14, 0x211, 0x0, 0x8000, {0x28, 0x2}, [@INET_DIAG_REQ_BYTECODE={0x11, 0xfa, "4ac2411e47061aefad04000000"}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000841}, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0xfffffffd, @loopback, 0xfffffffc}, 0x1c, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="2400000029000000390000002c02020100000000fc0200000000000000000000000000001000000029"], 0x34}}], 0x2, 0xff00)

30m24.518595248s ago: executing program 1 (id=1797):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000001fc0)={0x42, 0x3, 0x0, {0x0, 0x21, 0x0, '/proc/sys/net/ipv4/vs/secure_tcp\x00'}}, 0x42)

30m24.288594361s ago: executing program 1 (id=1817):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x14, 0x0, 0x9, 0x101}, 0x14}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000100)=0x7, 0x4)
recvmmsg$unix(r2, &(0x7f0000001d40)=[{{0x0, 0x5a, 0x0}}], 0x40001ec, 0x102, 0x0)
sendmmsg$inet(r2, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)='\t', 0x1}], 0x1}}], 0x1, 0x4000010)
writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000300)='X\x00\x00\x00', 0x4}], 0x1)
close(0x3)
r3 = socket(0x5, 0x800, 0x0)
r4 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b01"], 0x0)
syz_usb_disconnect(r4)
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x0, 0xb4, 0x8c, 0xbb}}]}}]}}, 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48)
syz_usb_control_io$printer(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f0000000f80)={0x10, &(0x7f0000000ec0)={0x0, 0x30, 0x2, "f7e0"}, 0x0, 0x0})
syz_usb_control_io(r5, 0x0, 0x0)
write(r3, &(0x7f0000000180)="240000001e005f0214fffffffffffff8070000002100000000002100050009000d000000", 0x24)
syz_usb_control_io(r4, &(0x7f0000000280)={0x18, &(0x7f0000000080)={0x20, 0x8, 0xe3, {0xe3, 0x23, "657e3b00aa4f9f18427dc5ea00ac057b6f32c84b8a419f9bde139517398d902166908588f28a86e55feec4ca077171fa419d266a38f5d1dcd2108d32d1d6c8edc657773291c5c88d20cf3c22f7e2beb10cdc643a091f0de48bdd8aa2687b787e881699a9c12bd61d0f9164ef7eb789de36c1ab3089a114cda49b24465519f61c2b9ccb6044a6baa1c802cfc2ab842b7c73760275879243e0a632fce6528d648e9193bcd74fa4b106265dcdd954d2c98102a69ab9e035c782fc9e9d7aabb49b9b88122a551ef37e1e6aa73cd94d09b5b0715bc7abae62c8754c7eceb6ab2724aefd"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}, &(0x7f00000001c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x10, 0x1c, 0x9, "bd4e2808", "543b5ba2"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x0, 0xd6, 0x1, 0x6, 0xc000, 0x6}}}, &(0x7f00000007c0)={0x44, &(0x7f00000002c0)={0x0, 0x0, 0xf1, "39f921f95979a3e9e3fea307fe8d680ca471cede2b8813da7fdd91690c68f01d6b22b5bf3826894139cec115ef01bc625c7790f83d375b23cfc937b8db559a9c892dbd7bcdbc01c79d6c5903f6d804de0e7dffd3c8300ef641bca6f38419b7cec7e055c89245502a270ccfe9a2365b05df5efb7402bd8b98f700c7028659667b8060bf6420afe124702abd88b77aabea07290121635f58e01996fbbd64f31b7d47aad953c9ac2a70e58ee3ed9a1ecda85669440e9c196d4ec74da55b3db7322b45b55ec5b4aacf290faa4da3ab1de59202760dcbca8ba10724d26ab9e83d9b4a33b0b4b6aed069617f21084e479a032233"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x400, 0x72}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x91}, &(0x7f0000000580)={0x40, 0xb, 0x2, "6ee2"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000600)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000640)={0x40, 0x17, 0x6}, &(0x7f0000000680)={0x40, 0x19, 0x2, "f774"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x78}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x7}})

30m20.383028694s ago: executing program 1 (id=1826):
mmap(&(0x7f0000543000/0x1000)=nil, 0x1000, 0x0, 0x2031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000200)=0x9, 0x8, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000005c0)={{0xdddd2000, 0xf000, 0x8, 0xf7, 0x6, 0x5, 0x1, 0xb, 0x0, 0xf8, 0xb, 0x29}, {0xffff1000, 0x1000, 0xd, 0x0, 0x3, 0x0, 0x3, 0x1, 0xa, 0x70, 0xb, 0x1}, {0xeeee8000, 0xf000, 0x19, 0x8, 0xfc, 0x6, 0xf5, 0x7, 0xf4, 0x6, 0x4, 0xe}, {0x4, 0x67594000, 0xc, 0xc, 0x1, 0xfe, 0xb, 0x9, 0x9, 0x1, 0x3, 0x6}, {0xeeee0000, 0xeeee0000, 0x9, 0xba, 0x8, 0x4, 0xe, 0x2, 0x8, 0x6, 0x2, 0x14}, {0x4, 0xf000, 0x10, 0x0, 0xfc, 0x3, 0xf8, 0x81, 0x1, 0x8, 0x0, 0x81}, {0x166672000, 0x8080000, 0xc, 0x5, 0x8, 0xfd, 0x5, 0xee, 0x9, 0xa, 0x80, 0x3}, {0xeeee8000, 0xb000, 0xc, 0x4, 0x5, 0x7, 0x2f, 0x0, 0x4, 0xd, 0xb, 0x3}, {0xffff1000}, {0xeeeeb000, 0x1}, 0x2, 0x0, 0x6000, 0x400, 0x9, 0x9801, 0x1000, [0x9, 0x8001, 0x1000, 0xd378]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7fffff, 0x4012011, r3, 0x0)
ioctl$FIBMAP(r3, 0x1, &(0x7f00000000c0)=0x46)

30m19.83844815s ago: executing program 1 (id=1828):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
mknod$loop(&(0x7f000000db40)='./file0\x00', 0x400, 0x1)
mount$fuseblk(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x0, 0x3beb44c, 0x0)
umount2(&(0x7f0000000500)='./file0\x00', 0xd)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet6(0xa, 0x800, 0x401)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xf0f, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313b, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x4}, 0x94)
close(0xffffffffffffffff)
ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x4010744d, 0x0)
r1 = dup(r0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb"], 0x0, 0x6a, 0x0, 0x1}, 0x28)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000480)='attr/prev\x00')
futimesat(r2, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200))
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111, 0x4}}, 0x20)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000180)={0x1d7, @time={0x65757900}})
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000000c0)={0x7, 0xffffffffffffffa0, 0xfa00, {0xffffffffffffffff, 0x10c}}, 0xfffffd88)

30m19.657799874s ago: executing program 1 (id=1829):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$vcsa(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
r3 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0x3e8, 0x0, r2}, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r8=>0x0})
ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000004c0)={0x0, @hci={0x1f, 0x0, 0x3}, @ethernet={0x306, @random="05bec7c51e32"}, @phonet={0x23, 0x8, 0x6, 0x1}, 0x6, 0x0, 0x0, 0x0, 0x40, 0x0, 0x8, 0x40, 0x3})
sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)={0x2c, r7, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004805}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80, 0x23456})
r9 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x124}}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140))
fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0)
r11 = fsmount(r9, 0x1, 0x0)
fchdir(r11)
r12 = memfd_secret(0x80000)
ioctl$FIONREAD(r12, 0x541b, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x44)
io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf)

30m19.084091487s ago: executing program 1 (id=1831):
fsopen(0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
socket$inet6(0xa, 0x5, 0x3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
syz_usb_connect(0x0, 0x2c, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x5b, 0xaa, 0x7f, 0x20, 0x458, 0x706e, 0x3564, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x1, 0x0, 0x0, [@uac_as={[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x2, 0x2}]}]}}]}}]}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r5=>0x0})
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0xfffffffd, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x1, 0x1, {@ip4=@loopback, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@ipv6_newnexthop={0xa4, 0x68, 0x1, 0x70bd2d, 0x25dfdbfd, {0xa, 0x0, 0x1, 0x0, 0x30}, [@NHA_OIF={0x8, 0x5, r5}, @NHA_RES_GROUP={0x2c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x4}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x2}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x1ff}]}, @NHA_RES_GROUP={0x1c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xa83}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x8}]}, @NHA_OIF={0x8, 0x5, r5}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@private0={0xfc, 0x0, '\x00', 0x1}}, @NHA_FDB={0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0xd}}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_ID={0x8}]}, 0xa4}}, 0x4000880)

30m18.502175475s ago: executing program 33 (id=1831):
fsopen(0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
socket$inet6(0xa, 0x5, 0x3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
syz_usb_connect(0x0, 0x2c, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x5b, 0xaa, 0x7f, 0x20, 0x458, 0x706e, 0x3564, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x1, 0x0, 0x0, [@uac_as={[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x2, 0x2}]}]}}]}}]}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r5=>0x0})
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0xfffffffd, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x1, 0x1, {@ip4=@loopback, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@ipv6_newnexthop={0xa4, 0x68, 0x1, 0x70bd2d, 0x25dfdbfd, {0xa, 0x0, 0x1, 0x0, 0x30}, [@NHA_OIF={0x8, 0x5, r5}, @NHA_RES_GROUP={0x2c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x4}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x2}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x1ff}]}, @NHA_RES_GROUP={0x1c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xa83}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x8}]}, @NHA_OIF={0x8, 0x5, r5}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@private0={0xfc, 0x0, '\x00', 0x1}}, @NHA_FDB={0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0xd}}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_ID={0x8}]}, 0xa4}}, 0x4000880)

17m28.804348491s ago: executing program 4 (id=4798):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0)
unshare(0x26020480)
pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x4)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r2 = socket$inet(0xa, 0x801, 0x84)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000000c0)=@filter={'filter\x00', 0xe, 0x4, 0x280, 0xffffffff, 0xe0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x210, 0x210, 0x210, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @broadcast, 0xffffffff, 0xffffff00, 'geneve1\x00', 'geneve1\x00', {}, {0xff}, 0x16, 0x2}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@ipv4={'\x00', '\xff\xff', @local}, 'veth1_to_bridge\x00', {0x7ff}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x38}, @broadcast, 0xd7e72b61874d2bec, 0xff0000ff, 'dvmrp1\x00', 'bond_slave_1\x00', {}, {0xff}, 0x67, 0x0, 0x50}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0)
lseek(r1, 0xc6c3, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, <r3=>0x0}, &(0x7f0000000040)=0xc)
statx(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x100, 0x8, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
ioctl$PPPIOCUNBRIDGECHAN(r1, 0x7434)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000100), &(0x7f0000000140)=[0x0, 0x0, <r5=>0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0], 0xf5eb480c39725e7e, 0x3, 0xa, 0x2})
ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000000580)={r5, 0x7, &(0x7f00000004c0)=[0x2, 0x1000, 0xffff, 0xc, 0xff7f, 0xff, 0x3], &(0x7f0000000500)=[0xe, 0x0, 0x9, 0x99, 0x1c], &(0x7f0000000540)=[0x2, 0xfa8, 0x0, 0x2, 0xe, 0xffff, 0x6]})
write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1, {0x2e00, {0x10, 0x4, 0x2}, 0x4, r3, r4, 0x7, 0x1, 0x1, 0x69db, 0x8, 0x6, 0xd, 0x1, 0x1, 0xffffffff, 0x2, 0x4, 0x5, 0x7, 0x74c39226}}, 0xa0)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018000000000e000000208000a400000000205000300020000000900020073797a31000000000500010007"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)

17m28.55712313s ago: executing program 4 (id=4799):
socket(0x1d, 0x6, 0x3)
socket$inet(0x2, 0x2, 0x7d)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$nullb(0xffffff9c, &(0x7f0000000180), 0xe4600, 0x0)
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x500)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e22, 0x0, @loopback, 0xfffffffe}, 0x1c)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x5, 0xf, 0x0, 0x2, 0x8, 0x8, 0xb31a, 0x3}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8bcb650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c1da009444a131f4da58ae36556dd38ea6c029607462029add0924000000000267517308a3d40aa1c788df6"}, 0xd8)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000200)=@ccm_128={{0x304}, "c40fb113298558ff", "0d1062ab77a396676a0033006c8fa27f", "a7889859", "e7cf9db4f3ea1cd9"}, 0x28)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
ioctl$int_in(r3, 0x5421, &(0x7f0000000140)=0x1)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000104000000000101000000000000", @ANYRES32=0x0, @ANYBLOB="09000000000000001c0012800b000100028008000100000000000a000100aaaaaaaaaabb00"/48], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a3b370086d04ae085811f1010301090212000d000000000904"], 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
syz_usb_disconnect(r5)
writev(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, &(0x7f0000000240)={0x2, 0x4e21, @multicast1}, 0x10)

17m24.340456259s ago: executing program 4 (id=4810):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x306b0000)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xfffffffffffffff3, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)

17m23.484408775s ago: executing program 4 (id=4812):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x9b1670066a4cce62, 0x0, 0x0, 0x0, 0x0) (async)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x9b1670066a4cce62, 0x0, 0x0, 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000540)={0x80001000}) (async)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000540)={0x80001000})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
r2 = io_uring_setup(0x6c77, &(0x7f0000000080)={0x0, 0x5596, 0x1, 0x0, 0xaf})
io_uring_register$IORING_REGISTER_NAPI(r2, 0x1b, &(0x7f0000000180)={0xa5a, 0xff}, 0x1)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
socket(0x40000000015, 0x80000, 0xffffffff) (async)
r4 = socket(0x40000000015, 0x80000, 0xffffffff)
socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, 0x0, 0x0) (async)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
fcntl$setownex(r1, 0xf, &(0x7f0000000280)={0x1})
move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r5) (async)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r5)
sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)={0x1bc, r6, 0x8, 0x70bd28, 0x25dbdbfb, {}, [@TIPC_NLA_MEDIA={0xa0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x55}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_BEARER={0x94, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e23, @rand_addr=0x64010101}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x70}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x14}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8d7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3204}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x20000804}, 0x4008050)
pivot_root(&(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0\x00')

17m23.351740122s ago: executing program 4 (id=4814):
mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0)
r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xa83b, 0x10, 0x2}, &(0x7f0000000340)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff00092406050602010000092403f802030005490c240206"], 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f00000006c0)={0x50, 0x0, r4, {0x7, 0x1f, 0x4, 0x10000000, 0x0, 0xfffe, 0x0, 0xe6d7, 0x0, 0x0, 0x10}}, 0x50)
syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80101, 0x0)
dup2(r5, r3)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r5, 0x0, 0x0, 0x0, 0x80000})
io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0)

17m22.925919019s ago: executing program 4 (id=4817):
r0 = socket(0x15, 0x2, 0x0)
recvmsg$can_bcm(r0, &(0x7f000001a6c0)={0x0, 0x0, 0x0}, 0x40002002)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8)
gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3)
fcntl$setsig(r1, 0xa, 0x12)
socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000300)=@generic={0x2, 0x8, 0x5})
prctl$PR_SCHED_CORE(0x3e, 0x800001, 0x0, 0x3, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x13f, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {0x0, r4, 0x2}}, 0x18)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000740)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r8 = syz_io_uring_setup(0x494b, &(0x7f0000000380)={0x0, 0x9012, 0x800, 0x4, 0x201}, &(0x7f00000001c0)=<r9=>0x0, &(0x7f0000000280)=<r10=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r9, r10, 0x0)
clock_gettime(0x0, &(0x7f0000000100)={<r11=>0x0, <r12=>0x0})
ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x8d00}, {r2, 0x11}, {r1, 0x20a0}, {r7, 0x1248}, {r8, 0x361a}], 0x5, &(0x7f0000000140)={r11, r12+10000000}, &(0x7f0000000340)={[0xd7, 0x5]}, 0x8)
dup2(r1, r2)
syz_open_procfs(r5, &(0x7f0000000040)='limits\x00')
fcntl$setown(r6, 0x8, 0x0)
r13 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000240)={'syz_tun\x00'})

17m22.314298104s ago: executing program 34 (id=4817):
r0 = socket(0x15, 0x2, 0x0)
recvmsg$can_bcm(r0, &(0x7f000001a6c0)={0x0, 0x0, 0x0}, 0x40002002)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8)
gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3)
fcntl$setsig(r1, 0xa, 0x12)
socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000300)=@generic={0x2, 0x8, 0x5})
prctl$PR_SCHED_CORE(0x3e, 0x800001, 0x0, 0x3, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x13f, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {0x0, r4, 0x2}}, 0x18)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000740)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r8 = syz_io_uring_setup(0x494b, &(0x7f0000000380)={0x0, 0x9012, 0x800, 0x4, 0x201}, &(0x7f00000001c0)=<r9=>0x0, &(0x7f0000000280)=<r10=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r9, r10, 0x0)
clock_gettime(0x0, &(0x7f0000000100)={<r11=>0x0, <r12=>0x0})
ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x8d00}, {r2, 0x11}, {r1, 0x20a0}, {r7, 0x1248}, {r8, 0x361a}], 0x5, &(0x7f0000000140)={r11, r12+10000000}, &(0x7f0000000340)={[0xd7, 0x5]}, 0x8)
dup2(r1, r2)
syz_open_procfs(r5, &(0x7f0000000040)='limits\x00')
fcntl$setown(r6, 0x8, 0x0)
r13 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000240)={'syz_tun\x00'})

5.686513056s ago: executing program 7 (id=9736):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket(0x400000000010, 0x3, 0x0)
ioctl(0xffffffffffffffff, 0xb8, 0x0)
sched_setattr(0x0, 0x0, 0x0)
ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r1 = fanotify_init(0x200, 0x0)
fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0)

5.613174212s ago: executing program 7 (id=9737):
setuid(0xee00)
ioctl$TIOCCONS(0xffffffffffffffff, 0x541d)
syz_open_dev$dri(0x0, 0x0, 0x0)
syz_open_dev$dri(0x0, 0xd21, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x3, 0xc9}}}, 0x6)

5.512055605s ago: executing program 7 (id=9738):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000077"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000840)={0x34, &(0x7f00000006c0)={0x40, 0x14, 0x2, "7580"}, 0x0, 0x0, 0x0, 0x0, 0x0})

4.416665652s ago: executing program 6 (id=9742):
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x80000000, 0x7fffffffffffffff}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
sync()
sync()
sync()
sync()
sync()
sync()
sync()
sync()
sync()
sync()
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
syz_clone(0x1144280, 0x0, 0x0, 0x0, 0x0, 0x0)
sync()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)

4.315948248s ago: executing program 5 (id=9745):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a00"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000014"], 0xb8}}, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000880)='/proc/vmallocinfo\x00', 0x0, 0x0)
preadv(r1, &(0x7f00000010c0)=[{&(0x7f0000000900)=""/213, 0xd5}], 0x1, 0x40000004, 0x6)

3.820388344s ago: executing program 6 (id=9748):
ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, &(0x7f0000000080)={0x1, @win={{0x2}, 0x5, 0x0, 0x0, 0x0, 0x0, 0x40}})
r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f00000001c0)={0x980915, 0x8081, @name="6736516728a5678c18a4ec047f3f1fa52fe9a9987d0406b3a0c705c611b66f06"})
openat2$dir(0xffffff9c, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt(r3, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000400)=0x18ff9)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
socket$nl_netfilter(0x10, 0x3, 0xc)

3.751768618s ago: executing program 6 (id=9749):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="a00000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c0002800500010000000000440002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000600034000010000080007"], 0xa0}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0x70}}, 0x0)

3.48872443s ago: executing program 6 (id=9750):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1)
r1 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040), 0x10)
listen(r1, 0x0)
socket(0x28, 0x5, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$xdp(0x2c, 0x3, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0xc, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

3.470263654s ago: executing program 5 (id=9751):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

3.079464146s ago: executing program 3 (id=9753):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x11082})
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)

3.032577305s ago: executing program 3 (id=9754):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r2, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
unshare(0x8040480)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000)
r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1})
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r4)
sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f00000084c0)={0x0, 0x0, &(0x7f0000008480)={&(0x7f00000082c0)={0x44, r6, 0x1, 0x70bd26, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffe51, 0xb, 0x8001}, {0x6, 0x11, 0x40}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000084}, 0x40080)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0xac, r6, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9609}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80c}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}]}, 0xac}, 0x1, 0x0, 0x0, 0x10}, 0x4000004)
fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', 0x8, 0x1)
ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00})
fsopen(0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, 0x0, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1001}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r9 = dup(r8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x12, r9, 0x2000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17)

2.487186162s ago: executing program 6 (id=9756):
r0 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x3, 0x4}, 0x80, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000440)="cb4e88a8af3288a8eef1", 0xa}, {&(0x7f0000000cc0)="c08c37436a83f0", 0x7}], 0x3}, 0x0)

2.450839938s ago: executing program 7 (id=9757):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x36b78000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f0000002f40))
recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x2, 0x2, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x20040000)

2.013131452s ago: executing program 6 (id=9758):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000)
write$char_usb(r1, &(0x7f00000000c0)='V', 0x1)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
r2 = syz_usb_connect(0x5, 0x35, 0x0, 0x0)
syz_usb_disconnect(r2)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[], 0x0)
syz_usb_control_io$printer(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_connect$uac1(0x2, 0x0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)

1.727977577s ago: executing program 3 (id=9759):
r0 = io_uring_setup(0x79bf, &(0x7f00000000c0)={0x0, 0x0, 0x800, 0x1})
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c)
write$P9_RMKNOD(0xffffffffffffffff, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1.727413521s ago: executing program 5 (id=9760):
socket$can_bcm(0x1d, 0x2, 0x2)
syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

1.659703189s ago: executing program 3 (id=9761):
r0 = socket(0x10, 0x2, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = dup(r1)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x5, @loopback, 0x5d96}], 0x1c)
sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x52}, 0x1c, &(0x7f0000000d80)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x240480c3)
r3 = dup(r2)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10)
writev(r1, &(0x7f0000000840)=[{&(0x7f0000000100)="d5", 0x1}], 0x1)
sendmsg$nl_route_sched(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff6, @empty, 0x7f}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x6}, 0x9c)
close_range(r0, 0xffffffffffffffff, 0x0)

1.560106278s ago: executing program 5 (id=9762):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)

1.476725025s ago: executing program 0 (id=9763):
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f0000000a40)="e30080670000ec67838717bd86dde148f0630962bb87dd44fe42904bcee14db4", 0x0, 0x407, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50)
r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x6f5e, 0x28101)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85)

1.453919568s ago: executing program 3 (id=9764):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000001800)=[{{&(0x7f0000001640)={0xa, 0x4e22, 0x57, @mcast1}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000080)="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", 0x5a3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000020290000003600000029000000000000002f6fdf4d30aac54823fe49902792fd34db4aa7616cf5e56985ffc7aa9aad9c9c47d33a38d25684383f20b6ea86"], 0x18}}], 0x3, 0x24008044)

1.296819338s ago: executing program 3 (id=9765):
syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
pwrite64(r0, &(0x7f0000000300)='}', 0x1, 0x4)

1.295930566s ago: executing program 0 (id=9775):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000001800)=[{{&(0x7f0000001640)={0xa, 0x4e22, 0x57, @mcast1}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000080)="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", 0x5a3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000020290000003600000029000000000000002f6fdf4d30aac54823fe49902792fd34db4aa7616cf5e56985ffc7aa9aad9c9c47d33a38d25684383f20b6ea86"], 0x18}}], 0x3, 0x24008044)

1.196547992s ago: executing program 0 (id=9766):
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe4, 0x8)

1.027982756s ago: executing program 7 (id=9767):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x20}}, 0x8000)
madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), r3)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r3, 0x0, 0x40000)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r4 = socket$netlink(0x10, 0x3, 0x0)
writev(r4, &(0x7f00000003c0), 0x0)
writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d000000000000060400", 0x32}], 0x1)
r5 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
r6 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc)
close(r6)

927.006022ms ago: executing program 5 (id=9768):
r0 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x3, 0x4}, 0x80, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000440)="cb4e88a8af3288a8eef1", 0xa}, {&(0x7f0000000cc0)="c08c37436a83f0", 0x7}], 0x3}, 0x0)

820.628789ms ago: executing program 5 (id=9769):
r0 = socket(0x10, 0x3, 0x0)
recvfrom(r0, &(0x7f0000000400)=""/131, 0x83, 0x0, &(0x7f00000004c0)=@caif=@util={0x25, "5264eba723bbbdaf4e347321be23336e"}, 0x80)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0)
timer_create(0xfffffffffffffffc, &(0x7f0000000140)={0x0, 0x7}, &(0x7f0000001400))
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000007000000000000000000000800010001000000"], 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x3, 0xff}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004004}, 0x4)
r2 = syz_open_procfs(0x0, &(0x7f0000000200)='oom_score_adj\x00')
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x6, 0x9, &(0x7f0000000200)={{0xff, @local, 0xfffe, 0x1, 'lc\x00', 0x25}, {@multicast1, 0x0, 0x4, 0x0, 0x0, 0x400}}, 0x44)
getsockopt$inet_tcp_int(r3, 0x6, 0x9, 0x0, &(0x7f0000000040))
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100)=r2, 0x4)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840)
close(0x3)
pipe(&(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = syz_genetlink_get_family_id$ipvs(0x0, r7)
sendmsg$IPVS_CMD_NEW_DEST(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x5c, r9, 0x100, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2000}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0x20004000)
sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4048880}, 0x240000c0)
lseek(r4, 0x4, 0x57317caed2f340aa)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_getroute={0x38, 0x1a, 0x1, 0x0, 0xfffffffd, {0x2}, [@RTA_GATEWAY={0x14, 0x5, @rand_addr=' \x01\x00'}, @RTA_OIF={0x8}]}, 0x38}}, 0x0)

256.022244ms ago: executing program 0 (id=9770):
r0 = socket$pppoe(0x18, 0x1, 0x0)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'ip6gre0\x00'}}, 0x1e)
connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x2, @empty, 'ip_vti0\x00'}}, 0x1e)
close(r1)

196.831225ms ago: executing program 0 (id=9771):
r0 = io_uring_setup(0x79bf, &(0x7f00000000c0)={0x0, 0x0, 0x800, 0x1})
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c)
write$P9_RMKNOD(0xffffffffffffffff, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

91.726356ms ago: executing program 7 (id=9772):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000880)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000004840)="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", 0x780}], 0x1, 0x0, 0x0, 0x20008000}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

0s ago: executing program 0 (id=9773):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
tgkill(0x0, r0, 0x27)
fanotify_init(0x200, 0x0)
r3 = openat$rtc(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
ioctl$RTC_IRQP_READ(r3, 0x40187013, &(0x7f0000000680))
pipe2$9p(0x0, 0x84880)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x2a8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x210, 0xffffff7a, 0xffffffff, 0x210, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x130, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x88, 0x88, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x80, 0x0, {0x4}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x6, 0x3, 0x6, '\x00', {0x3}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0xff000000, 'team_slave_0\x00', 'ip6gre0\x00', {0xff}, {}, 0x6, 0x3}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x4}, {0x4, 0x5, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308)
syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0)
chroot(0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000003c0)={0x54, r6, 0x1, 0x70bd2b, 0xfffffffe, {0x1e}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x4a, 0x3e, 0x1}, {0xc}, {0xc, 0x90, 0x2}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000081}, 0x20044010)

kernel console output (not intermixed with test programs):

us mode
[ 2222.275833][ T6100] 8021q: adding VLAN 0 to HW filter on device macvlan0
[ 2222.281352][ T6103] loop4: detected capacity change from 0 to 7
[ 2222.340373][ T6103] Dev loop4: unable to read RDB block 7
[ 2222.356431][ T6103]  loop4: unable to read partition table
[ 2222.356638][ T6103] loop4: partition table beyond EOD, truncated
[ 2222.356674][ T6103] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 2222.364939][ T6100] bond1: left promiscuous mode
[ 2222.364964][ T6100] gretap1: left promiscuous mode
[ 2222.385659][ T6104] fido_id[6104]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 2222.891253][ T6120] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8837'.
[ 2223.119327][T25885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2223.477959][T25885] usb 6-1: new full-speed USB device number 41 using dummy_hcd
[ 2223.642854][T25885] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2223.653237][T25885] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 2223.662495][T25885] usb 6-1: config 1 has no interface number 0
[ 2223.670607][T25885] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 2223.682054][T25885] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[ 2223.692892][T25885] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[ 2223.706026][T25885] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2223.715326][T25885] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2223.723528][T25885] usb 6-1: Product: syz
[ 2223.727681][T25885] usb 6-1: Manufacturer: syz
[ 2223.732351][T25885] usb 6-1: SerialNumber: syz
[ 2223.740485][ T6127] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[ 2223.998500][T25142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2224.158199][ T3273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2224.208414][T25885] cdc_ncm 6-1:1.1: bind() failure
[ 2224.240274][T25885] usb 6-1: USB disconnect, device number 41
[ 2224.545242][ T6141] netlink: 136 bytes leftover after parsing attributes in process `syz.5.8843'.
[ 2224.683789][ T6139] syz.5.8843 (6139): drop_caches: 2
[ 2224.824223][ T6145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8844'.
[ 2224.875758][ T6145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8844'.
[ 2224.917558][ T6145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8844'.
[ 2224.928250][ T6145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8844'.
[ 2225.192150][ T6141] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 2225.199098][ T6141] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[ 2225.208994][ T3273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2225.220414][ T6141] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 2225.229360][ T6141] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[ 2225.274465][ T6141] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 2225.289627][ T6141] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[ 2225.311964][ T6141] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2225.323605][ T6141] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[ 2225.399816][ T6141] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2225.405962][ T6141] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[ 2226.108479][ T6167] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8849'.
[ 2226.259752][ T3273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2226.683557][ T6167] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8849'.
[ 2227.038163][ T5090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2227.307956][T25885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2227.785228][ T6190] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 2227.982610][ T6194] syzkaller0: entered promiscuous mode
[ 2227.994588][ T6194] syzkaller0: entered allmulticast mode
[ 2228.117110][ T6198] netlink: 'syz.0.8860': attribute type 10 has an invalid length.
[ 2228.278329][T25147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2228.322415][ T3273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2228.336055][ T6198] vxcan1: left promiscuous mode
[ 2228.563771][T25147] usb 6-1: new full-speed USB device number 42 using dummy_hcd
[ 2228.583094][ T6198] team0: Device vxcan1 is of different type
[ 2228.774859][T25147] usb 6-1: config 0 has an invalid interface number: 133 but max is 0
[ 2228.808973][T25147] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2228.825258][ T5090] usb 4-1: new high-speed USB device number 85 using dummy_hcd
[ 2228.841492][T25147] usb 6-1: config 0 has no interface number 0
[ 2228.949848][T25147] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[ 2228.963433][T25147] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2229.313822][ T5090] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[ 2229.325958][ T5090] usb 4-1: config 0 has no interface number 0
[ 2229.351384][T25147] usb 6-1: Product: syz
[ 2229.364884][ T5090] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 2229.380859][ T5090] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2229.390536][ T3273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2229.400096][T25147] usb 6-1: Manufacturer: syz
[ 2229.407008][T25147] usb 6-1: SerialNumber: syz
[ 2229.421467][ T5090] usb 4-1: Product: syz
[ 2229.432035][ T5090] usb 4-1: Manufacturer: syz
[ 2229.437438][T25147] usb 6-1: config 0 descriptor??
[ 2229.444408][ T5090] usb 4-1: SerialNumber: syz
[ 2229.461692][ T5090] usb 4-1: config 0 descriptor??
[ 2229.694772][ T5090] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[ 2229.712077][ T6208] syzkaller0: entered promiscuous mode
[ 2229.717713][ T6208] syzkaller0: entered allmulticast mode
[ 2229.739818][ T5090] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 2229.788970][ T5090] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[ 2229.807428][ T5090] usb 4-1: media controller created
[ 2229.860778][ T5090] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2229.988354][ T5090] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[ 2230.129916][ T5090] usb 4-1: USB disconnect, device number 85
[ 2230.164357][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2230.381241][ T6213] syzkaller0: entered promiscuous mode
[ 2230.389782][ T6213] syzkaller0: entered allmulticast mode
[ 2230.405490][ T8373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2230.623551][ T6217] loop3: detected capacity change from 0 to 7
[ 2230.655103][ T6217] Dev loop3: unable to read RDB block 7
[ 2230.684803][ T6217]  loop3: AHDI p3 p4
[ 2230.693296][ T6217] loop3: partition table partially beyond EOD, truncated
[ 2230.738180][ T6217] loop3: p3 start 1702000233 is beyond EOD, truncated
[ 2230.844047][ T6221] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8868'.
[ 2230.858682][ T6217] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 2231.108120][T25147] keyspan 6-1:0.133: Keyspan 1 port adapter converter detected
[ 2231.111958][ T6226] FAULT_INJECTION: forcing a failure.
[ 2231.111958][ T6226] name failslab, interval 1, probability 0, space 0, times 0
[ 2231.145870][T25147] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 82
[ 2231.182918][T25147] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 81
[ 2231.207401][ T6226] CPU: 1 UID: 0 PID: 6226 Comm: syz.7.8869 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2231.207431][ T6226] Tainted: [L]=SOFTLOCKUP
[ 2231.207438][ T6226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 2231.207449][ T6226] Call Trace:
[ 2231.207456][ T6226]  <TASK>
[ 2231.207465][ T6226]  dump_stack_lvl+0xe8/0x150
[ 2231.207493][ T6226]  should_fail_ex+0x412/0x560
[ 2231.207520][ T6226]  should_failslab+0xa8/0x100
[ 2231.207544][ T6226]  __kmalloc_cache_noprof+0x83/0x6e0
[ 2231.207564][ T6226]  ? inet6_rtm_newroute+0x958/0x19e0
[ 2231.207588][ T6226]  inet6_rtm_newroute+0x958/0x19e0
[ 2231.207613][ T6226]  ? kasan_quarantine_put+0xbb/0x1f0
[ 2231.207637][ T6226]  ? lockdep_hardirqs_on+0x7a/0x110
[ 2231.207658][ T6226]  ? __pfx_inet6_rtm_newroute+0x10/0x10
[ 2231.207683][ T6226]  ? nlmon_xmit+0xb0/0x100
[ 2231.207724][ T6226]  ? lockdep_hardirqs_on+0x7a/0x110
[ 2231.207765][ T6226]  ? __pfx_inet6_rtm_newroute+0x10/0x10
[ 2231.207782][ T6226]  rtnetlink_rcv_msg+0x7d5/0xbe0
[ 2231.207808][ T6226]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[ 2231.207823][ T6226]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 2231.207839][ T6226]  ? ref_tracker_free+0x693/0x840
[ 2231.207855][ T6226]  ? __copy_skb_header+0xa3/0x4a0
[ 2231.207877][ T6226]  ? __pfx_ref_tracker_free+0x10/0x10
[ 2231.207895][ T6226]  ? __skb_clone+0x63/0x7a0
[ 2231.207921][ T6226]  netlink_rcv_skb+0x232/0x4b0
[ 2231.207939][ T6226]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 2231.207959][ T6226]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2231.207984][ T6226]  ? netlink_deliver_tap+0x2e/0x1b0
[ 2231.208007][ T6226]  netlink_unicast+0x80f/0x9b0
[ 2231.208038][ T6226]  ? __pfx_netlink_unicast+0x10/0x10
[ 2231.208061][ T6226]  ? __alloc_skb+0x193/0x390
[ 2231.208079][ T6226]  ? netlink_sendmsg+0x650/0xb40
[ 2231.208096][ T6226]  ? skb_put+0x11b/0x210
[ 2231.208119][ T6226]  netlink_sendmsg+0x813/0xb40
[ 2231.208146][ T6226]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2231.208167][ T6226]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 2231.208189][ T6226]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 2231.208210][ T6226]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2231.208227][ T6226]  ____sys_sendmsg+0xa68/0xad0
[ 2231.208257][ T6226]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2231.208282][ T6226]  ? kstrtoull+0x12f/0x1d0
[ 2231.208309][ T6226]  ___sys_sendmsg+0x2a5/0x360
[ 2231.208329][ T6226]  ? __lock_acquire+0x6b5/0x2cf0
[ 2231.208356][ T6226]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2231.208379][ T6226]  ? get_pid_task+0x20/0x1f0
[ 2231.208398][ T6226]  ? get_pid_task+0x20/0x1f0
[ 2231.208414][ T6226]  ? get_pid_task+0x20/0x1f0
[ 2231.208455][ T6226]  ? __fget_files+0x2a/0x420
[ 2231.208473][ T6226]  ? __fget_files+0x3a0/0x420
[ 2231.208501][ T6226]  __sys_sendmsg+0x183/0x260
[ 2231.208524][ T6226]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2231.208556][ T6226]  ? __pfx_ksys_write+0x10/0x10
[ 2231.208587][ T6226]  __do_fast_syscall_32+0x1d2/0x540
[ 2231.208606][ T6226]  ? lockdep_hardirqs_on+0x7a/0x110
[ 2231.208623][ T6226]  ? do_fast_syscall_32+0x33/0x70
[ 2231.208640][ T6226]  ? asm_int80_emulation+0x1a/0x20
[ 2231.208656][ T6226]  ? do_int80_emulation+0x20e/0x400
[ 2231.208685][ T6226]  do_fast_syscall_32+0x33/0x70
[ 2231.208704][ T6226]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2231.208724][ T6226] RIP: 0023:0xf7f03539
[ 2231.208740][ T6226] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2231.208755][ T6226] RSP: 002b:00000000f53c650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 2231.208772][ T6226] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040
[ 2231.208782][ T6226] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2231.208791][ T6226] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2231.208801][ T6226] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2231.208810][ T6226] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2231.208835][ T6226]  </TASK>
[ 2231.594720][ T8373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2231.730887][T25147] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 1
[ 2231.788046][T25147] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 2
[ 2231.844604][T25147] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[ 2231.960731][ T6240] FAULT_INJECTION: forcing a failure.
[ 2231.960731][ T6240] name failslab, interval 1, probability 0, space 0, times 0
[ 2232.005474][T25147] usb 6-1: USB disconnect, device number 42
[ 2232.048082][ T6240] CPU: 1 UID: 0 PID: 6240 Comm: syz.7.8872 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2232.048110][ T6240] Tainted: [L]=SOFTLOCKUP
[ 2232.048117][ T6240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 2232.048128][ T6240] Call Trace:
[ 2232.048135][ T6240]  <TASK>
[ 2232.048144][ T6240]  dump_stack_lvl+0xe8/0x150
[ 2232.048171][ T6240]  should_fail_ex+0x412/0x560
[ 2232.048197][ T6240]  should_failslab+0xa8/0x100
[ 2232.048218][ T6240]  __kmalloc_cache_noprof+0x83/0x6e0
[ 2232.048238][ T6240]  ? snd_hrtimer_open+0x4f/0xd0
[ 2232.048271][ T6240]  snd_hrtimer_open+0x4f/0xd0
[ 2232.048290][ T6240]  snd_timer_open+0xdce/0x10f0
[ 2232.048318][ T6240]  snd_seq_timer_open+0x2e3/0x670
[ 2232.048348][ T6240]  ? __pfx_snd_seq_timer_open+0x10/0x10
[ 2232.048381][ T6240]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 2232.048411][ T6240]  snd_seq_queue_alloc+0x3dd/0x790
[ 2232.048443][ T6240]  snd_seq_ioctl_create_queue+0x7f/0x3d0
[ 2232.048465][ T6240]  snd_seq_oss_open+0x674/0xfc0
[ 2232.048492][ T6240]  ? __pfx_snd_seq_oss_open+0x10/0x10
[ 2232.048549][ T6240]  ? trace_contention_end+0x39/0x100
[ 2232.048568][ T6240]  ? __mutex_lock+0x319/0x1300
[ 2232.048603][ T6240]  ? __pfx___mutex_lock+0x10/0x10
[ 2232.048625][ T6240]  ? __pfx_snd_seq_oss_event_input+0x10/0x10
[ 2232.048642][ T6240]  ? __pfx_free_devinfo+0x10/0x10
[ 2232.048655][ T6240]  ? do_raw_spin_unlock+0xf5/0x210
[ 2232.048676][ T6240]  ? soundcore_open+0x2da/0x490
[ 2232.048694][ T6240]  odev_open+0x67/0xd0
[ 2232.048709][ T6240]  chrdev_open+0x4cd/0x5e0
[ 2232.048728][ T6240]  ? __pfx_chrdev_open+0x10/0x10
[ 2232.048744][ T6240]  ? fsnotify_open_perm_and_set_mode+0x135/0x6d0
[ 2232.048767][ T6240]  ? __pfx_chrdev_open+0x10/0x10
[ 2232.048782][ T6240]  do_dentry_open+0x7ce/0x1420
[ 2232.048814][ T6240]  vfs_open+0x3b/0x340
[ 2232.048830][ T6240]  ? path_openat+0x346e/0x3e20
[ 2232.048852][ T6240]  path_openat+0x3486/0x3e20
[ 2232.048899][ T6240]  ? kmem_cache_alloc_noprof+0x370/0x6e0
[ 2232.048920][ T6240]  ? getname_flags+0xb7/0x540
[ 2232.048938][ T6240]  ? __pfx_path_openat+0x10/0x10
[ 2232.048962][ T6240]  ? __lock_acquire+0x6b5/0x2cf0
[ 2232.048997][ T6240]  do_filp_open+0x22d/0x490
[ 2232.049020][ T6240]  ? __pfx_do_filp_open+0x10/0x10
[ 2232.049062][ T6240]  ? _raw_spin_unlock+0x28/0x50
[ 2232.049085][ T6240]  ? alloc_fd+0x64b/0x6c0
[ 2232.049117][ T6240]  do_sys_openat2+0x12f/0x220
[ 2232.049140][ T6240]  ? __pfx_do_sys_openat2+0x10/0x10
[ 2232.049164][ T6240]  ? ksys_write+0x242/0x270
[ 2232.049192][ T6240]  __ia32_compat_sys_openat+0x131/0x160
[ 2232.049219][ T6240]  __do_fast_syscall_32+0x1d2/0x540
[ 2232.049238][ T6240]  ? lockdep_hardirqs_on+0x7a/0x110
[ 2232.049255][ T6240]  ? do_fast_syscall_32+0x33/0x70
[ 2232.049280][ T6240]  ? asm_int80_emulation+0x1a/0x20
[ 2232.049296][ T6240]  ? do_int80_emulation+0x20e/0x400
[ 2232.049319][ T6240]  do_fast_syscall_32+0x33/0x70
[ 2232.049338][ T6240]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2232.049358][ T6240] RIP: 0023:0xf7f03539
[ 2232.049381][ T6240] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2232.049396][ T6240] RSP: 002b:00000000f53a550c EFLAGS: 00000206 ORIG_RAX: 0000000000000127
[ 2232.049416][ T6240] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000640
[ 2232.049428][ T6240] RDX: 00000000000a4000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2232.049440][ T6240] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2232.049450][ T6240] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2232.049460][ T6240] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2232.049485][ T6240]  </TASK>
[ 2232.049987][T25147] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[ 2232.428375][ T6247] pim6reg1: entered promiscuous mode
[ 2232.433717][ T6247] pim6reg1: entered allmulticast mode
[ 2232.838288][ T6258] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2232.848592][ T8373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2232.853450][T25147] keyspan 6-1:0.133: device disconnected
[ 2233.198044][ T5090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2233.392594][ T6269] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8883'.
[ 2233.454124][ T6269] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8883'.
[ 2233.457926][T25147] usb 6-1: new full-speed USB device number 43 using dummy_hcd
[ 2233.764643][ T6269] team0: entered promiscuous mode
[ 2233.771570][ T6269] bond0: entered promiscuous mode
[ 2233.777317][ T6269] debugfs: 'hsr1' already exists in 'hsr'
[ 2233.789063][ T6269] Cannot create hsr debugfs directory
[ 2233.794834][ T6269] hsr1: Slave A (team0) is not up; please bring it up to get a fully working HSR network
[ 2233.813989][T25147] usb 6-1: config 0 has an invalid interface number: 11 but max is 0
[ 2233.822322][T25147] usb 6-1: config 0 has no interface number 0
[ 2233.829922][ T6269] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network
[ 2233.844481][T25147] usb 6-1: config 0 interface 11 has no altsetting 0
[ 2233.918668][ T8373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2233.951428][T25147] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[ 2233.961693][T25147] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2233.987160][T25147] usb 6-1: config 0 descriptor??
[ 2233.992736][ T6269] 8021q: adding VLAN 0 to HW filter on device hsr1
[ 2234.013072][T25147] keyspan 6-1:0.11: Keyspan 2 port adapter converter detected
[ 2234.024468][T25147] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 7
[ 2234.038616][T25147] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 81
[ 2234.046589][T25147] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 82
[ 2234.054776][T25147] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 1
[ 2234.063056][T25147] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 2
[ 2234.071124][T25147] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 85
[ 2234.079985][T25147] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 5
[ 2234.135527][T25147] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[ 2234.180253][T25147] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 83
[ 2234.200249][T25147] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 84
[ 2234.234889][T25147] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 3
[ 2234.260790][T25147] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 4
[ 2234.287495][T25147] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 86
[ 2234.308781][T25147] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 6
[ 2234.330493][T25147] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[ 2234.359989][T25147] usb 6-1: USB disconnect, device number 43
[ 2234.377747][T25147] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[ 2234.404537][T25147] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[ 2234.672898][T25147] keyspan 6-1:0.11: device disconnected
[ 2234.968124][ T8373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2235.258401][ T8374] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[ 2235.427906][ T8374] usb 6-1: Using ep0 maxpacket: 8
[ 2235.443061][ T8374] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[ 2235.455670][ T8374] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2235.478123][ T8374] usb 6-1: Product: syz
[ 2235.485109][ T8374] usb 6-1: Manufacturer: syz
[ 2235.518449][ T8374] usb 6-1: SerialNumber: syz
[ 2235.525910][ T8374] usb 6-1: config 0 descriptor??
[ 2235.731579][ T6296] netlink: 'syz.3.8893': attribute type 1 has an invalid length.
[ 2235.741454][ T8374] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[ 2235.750821][ T6298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2235.764024][ T6298] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2235.828334][ T8374] usb write operation failed. (-71)
[ 2235.860873][ T8374] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 2235.875289][ T8374] dvbdev: DVB: registering new adapter (Terratec H7)
[ 2235.882899][ T8374] usb 6-1: media controller created
[ 2235.890231][ T8374] usb read operation failed. (-71)
[ 2235.896144][ T8374] usb write operation failed. (-71)
[ 2235.998128][ T3273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2236.238194][T25147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2236.522122][ T6310] netlink: 'syz.5.8897': attribute type 2 has an invalid length.
[ 2237.069599][ T3273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2237.466948][ T6321] netlink: 56 bytes leftover after parsing attributes in process `syz.7.8900'.
[ 2237.839157][T25147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2237.891713][ T6331] openvswitch: netlink: ufid size 24 bytes exceeds the range (1, 16)
[ 2237.917778][ T6331] binder: 6328:6331 ioctl 40046205 0 returned -22
[ 2238.078190][ T3273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2238.622296][ T6341] syzkaller1: entered promiscuous mode
[ 2238.629528][ T6341] syzkaller1: entered allmulticast mode
[ 2238.744786][ T6346] syzkaller1: entered promiscuous mode
[ 2238.757289][ T6346] syzkaller1: entered allmulticast mode
[ 2239.130113][T25885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2239.308188][T25142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2240.158507][T25885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2240.191311][ T6369] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8913'.
[ 2240.264358][ T6371] netlink: 'syz.3.8914': attribute type 2 has an invalid length.
[ 2240.288884][ T6371] : entered promiscuous mode
[ 2240.299763][ T6371] netlink: 'syz.3.8914': attribute type 2 has an invalid length.
[ 2240.308078][ T6371] : left promiscuous mode
[ 2240.524204][ T6375] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8916'.
[ 2240.868200][T25885] usb 4-1: new high-speed USB device number 86 using dummy_hcd
[ 2241.037961][T25885] usb 4-1: Using ep0 maxpacket: 32
[ 2241.045602][T25885] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 2241.057399][T25885] usb 4-1: config 241 has an invalid interface number: 213 but max is 0
[ 2241.072416][T25885] usb 4-1: config 241 has no interface number 0
[ 2241.080078][T25885] usb 4-1: config 241 interface 213 has no altsetting 0
[ 2241.099506][T25885] usb 4-1: New USB device found, idVendor=0408, idProduct=3090, bcdDevice=15.61
[ 2241.110304][T25885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2241.123968][T25885] usb 4-1: Product: syz
[ 2241.129510][T25885] usb 4-1: Manufacturer: syz
[ 2241.135558][T25885] usb 4-1: SerialNumber: syz
[ 2241.223709][ T3273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2241.401064][ T6377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2241.422278][ T6377] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2241.465794][T25885] uvcvideo 4-1:241.213: Found UVC 0.00 device syz (0408:3090)
[ 2241.503074][T25885] uvcvideo 4-1:241.213: No valid video chain found.
[ 2241.517099][T25885] usb 4-1: USB disconnect, device number 86
[ 2242.045055][ T6392] netlink: 'syz.6.8921': attribute type 4 has an invalid length.
[ 2242.067496][ T6392] netlink: 'syz.6.8921': attribute type 4 has an invalid length.
[ 2242.083730][ T6395] sctp: [Deprecated]: syz.3.8922 (pid 6395) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 2242.083730][ T6395] Use struct sctp_sack_info instead
[ 2242.117242][ T6398] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8921'.
[ 2242.117242][ T6392] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8921'.
[ 2242.117268][ T6398] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8921'.
[ 2242.149046][ T6392] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8921'.
[ 2242.239964][ T3273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2242.457395][T25142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2242.586028][ T6409] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8924'.
[ 2243.288060][ T3273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2243.299785][ T6422] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8928'.
[ 2243.389826][ T6424] netlink: 'syz.5.8928': attribute type 21 has an invalid length.
[ 2243.398082][ T6424] netlink: 128 bytes leftover after parsing attributes in process `syz.5.8928'.
[ 2243.409207][ T6424] netlink: 'syz.5.8928': attribute type 4 has an invalid length.
[ 2243.441373][ T6424] netlink: 3 bytes leftover after parsing attributes in process `syz.5.8928'.
[ 2243.681326][ T6428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2243.689686][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2244.331589][ T3273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2244.489876][ T6442] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8934'.
[ 2244.818085][T25142] usb 4-1: new full-speed USB device number 87 using dummy_hcd
[ 2244.888281][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2244.992085][T25142] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 2245.014556][T25142] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2245.040879][T25142] usb 4-1: Product: syz
[ 2245.048394][T25142] usb 4-1: Manufacturer: syz
[ 2245.055656][T25142] usb 4-1: SerialNumber: syz
[ 2245.085522][T25142] usb 4-1: config 0 descriptor??
[ 2245.310780][T25142] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 2245.363210][T25885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2245.518648][ T5090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2245.797614][ T6472] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.8941'.
[ 2246.033849][ T6475] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8942'.
[ 2246.366381][T25142] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[ 2246.410551][T25885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2246.628926][ T6483] openvswitch: netlink: Message has 16 unknown bytes.
[ 2247.203158][ T6492] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8947'.
[ 2247.316392][ T6496] netlink: 'syz.5.8949': attribute type 1 has an invalid length.
[ 2247.341049][ T6496] bond2: entered promiscuous mode
[ 2247.346404][ T6496] 8021q: adding VLAN 0 to HW filter on device bond2
[ 2247.367778][ T6496] 8021q: adding VLAN 0 to HW filter on device bond2
[ 2247.377521][ T6496] bond2: (slave xfrm1): The slave device specified does not support setting the MAC address
[ 2247.387700][ T6496] bond2: (slave xfrm1): Setting fail_over_mac to active for active-backup mode
[ 2247.399485][ T6496] bond2: (slave xfrm1): making interface the new active one
[ 2247.409613][ T6496] xfrm1: entered promiscuous mode
[ 2247.415872][ T6496] bond2: (slave xfrm1): Enslaving as an active interface with an up link
[ 2247.438838][ T5090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2247.447272][ T3273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2247.542496][ T6500] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 2247.551769][T25147] usb 4-1: USB disconnect, device number 87
[ 2248.156834][ T6513] delete_channel: no stack
[ 2248.530845][T25885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2248.558091][T25147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2249.215698][ T6519] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 2249.612109][ T3273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2249.988307][ T6538] syzkaller0: entered promiscuous mode
[ 2249.993865][ T6538] syzkaller0: entered allmulticast mode
[ 2250.642571][T25885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2251.241607][ T6556] loop6: detected capacity change from 0 to 2640
[ 2251.259576][ T6556] buffer_io_error: 11 callbacks suppressed
[ 2251.259594][ T6556] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2251.276577][ T6556] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2251.285213][ T6556] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2251.293811][ T6556] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2251.303036][ T6556] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2251.319865][ T6556] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2251.332858][ T6556] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2251.341283][ T6556] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2251.354210][ T6556] ldm_validate_partition_table(): Disk read failed.
[ 2251.368808][ T6556] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2251.383304][ T6563] netlink: 'syz.5.8972': attribute type 10 has an invalid length.
[ 2251.386271][ T6556] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2251.414309][ T6556] Dev loop6: unable to read RDB block 0
[ 2251.448978][ T6556]  loop6: unable to read partition table
[ 2251.455048][ T6556] loop_reread_partitions: partition scan of loop6 (3Ÿ¾‚³˜) failed (rc=-5)
[ 2251.491265][ T6563] team0: Device bond0 is up. Set it down before adding it as a team port
[ 2251.598796][T25147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2251.677314][ T6573] Cannot find add_set index 0 as target
[ 2251.695603][ T5195] ldm_validate_partition_table(): Disk read failed.
[ 2251.702396][ T3273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2251.734018][ T5195] Dev loop6: unable to read RDB block 0
[ 2251.748456][ T5195]  loop6: unable to read partition table
[ 2251.943778][   T30] kauditd_printk_skb: 14 callbacks suppressed
[ 2251.943802][   T30] audit: type=1326 audit(1770259831.231:2778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6587 comm="syz.0.8977" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000
[ 2252.000400][   T30] audit: type=1326 audit(1770259831.231:2779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6587 comm="syz.0.8977" exe="/root/syz-executor" sig=0 arch=40000003 syscall=428 compat=1 ip=0xf7f84539 code=0x7ffc0000
[ 2252.026141][ T6588] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=513 (16416 ns) > initial count (7424 ns). Using initial count to start timer.
[ 2252.071158][   T30] audit: type=1326 audit(1770259831.231:2780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6587 comm="syz.0.8977" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000
[ 2252.093913][   T30] audit: type=1326 audit(1770259831.231:2781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6587 comm="syz.0.8977" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000
[ 2252.121485][   T30] audit: type=1326 audit(1770259831.231:2782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6587 comm="syz.0.8977" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f84539 code=0x7ffc0000
[ 2252.143775][   T30] audit: type=1326 audit(1770259831.231:2783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6587 comm="syz.0.8977" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000
[ 2252.166211][   T30] audit: type=1326 audit(1770259831.271:2784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6587 comm="syz.0.8977" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000
[ 2252.188616][   T30] audit: type=1326 audit(1770259831.271:2785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6587 comm="syz.0.8977" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f84539 code=0x7ffc0000
[ 2252.229119][   T30] audit: type=1326 audit(1770259831.281:2786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6587 comm="syz.0.8977" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000
[ 2252.258801][   T30] audit: type=1326 audit(1770259831.281:2787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6587 comm="syz.0.8977" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f84539 code=0x7ffc0000
[ 2252.721067][ T3273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2253.350347][ T6610] netlink: 'syz.0.8984': attribute type 1 has an invalid length.
[ 2253.761438][T25885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2254.768556][T25147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2254.809378][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2254.975610][ T6623] syzkaller0: entered promiscuous mode
[ 2254.981308][ T6623] syzkaller0: entered allmulticast mode
[ 2255.086275][ T6628] syzkaller0: entered promiscuous mode
[ 2255.097870][ T6628] syzkaller0: entered allmulticast mode
[ 2255.594707][ T6637] FAULT_INJECTION: forcing a failure.
[ 2255.594707][ T6637] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2255.621872][ T6637] CPU: 0 UID: 0 PID: 6637 Comm: syz.7.8992 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2255.621900][ T6637] Tainted: [L]=SOFTLOCKUP
[ 2255.621906][ T6637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 2255.621915][ T6637] Call Trace:
[ 2255.621923][ T6637]  <TASK>
[ 2255.621932][ T6637]  dump_stack_lvl+0xe8/0x150
[ 2255.621960][ T6637]  should_fail_ex+0x412/0x560
[ 2255.621986][ T6637]  _copy_from_user+0x2d/0xb0
[ 2255.622010][ T6637]  kstrtouint_from_user+0xd6/0x180
[ 2255.622035][ T6637]  ? __pfx_kstrtouint_from_user+0x10/0x10
[ 2255.622072][ T6637]  proc_fail_nth_write+0x8e/0x210
[ 2255.622097][ T6637]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 2255.622125][ T6637]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 2255.622150][ T6637]  vfs_write+0x29a/0xb90
[ 2255.622182][ T6637]  ? __pfx_vfs_write+0x10/0x10
[ 2255.622206][ T6637]  ? __fget_files+0x2a/0x420
[ 2255.622229][ T6637]  ? __fget_files+0x3a0/0x420
[ 2255.622247][ T6637]  ? __fget_files+0x2a/0x420
[ 2255.622274][ T6637]  ksys_write+0x150/0x270
[ 2255.622298][ T6637]  ? __pfx_ksys_write+0x10/0x10
[ 2255.622323][ T6637]  ? asm_int80_emulation+0x1a/0x20
[ 2255.622343][ T6637]  ? asm_int80_emulation+0x1a/0x20
[ 2255.622360][ T6637]  do_int80_emulation+0x111/0x400
[ 2255.622382][ T6637]  ? clear_bhb_loop+0x60/0xb0
[ 2255.622398][ T6637]  ? clear_bhb_loop+0x60/0xb0
[ 2255.622420][ T6637]  asm_int80_emulation+0x1a/0x20
[ 2255.622436][ T6637] RIP: 0023:0xf710572b
[ 2255.622452][ T6637] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[ 2255.622474][ T6637] RSP: 002b:00000000f53a54bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004
[ 2255.622494][ T6637] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f53a55d0
[ 2255.622507][ T6637] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[ 2255.622518][ T6637] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2255.622528][ T6637] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2255.622539][ T6637] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2255.622567][ T6637]  </TASK>
[ 2255.843654][T25885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2255.887911][   T24] usb 4-1: new high-speed USB device number 88 using dummy_hcd
[ 2255.995615][ T6639] tipc: Enabling of bearer <udp:sy> rejected, failed to enable media
[ 2256.069227][   T24] usb 4-1: Using ep0 maxpacket: 16
[ 2256.075789][   T24] usb 4-1: config 81 has an invalid descriptor of length 0, skipping remainder of the config
[ 2256.096323][ T6641] lo: entered promiscuous mode
[ 2256.105397][ T6641] lo: entered allmulticast mode
[ 2256.108603][   T24] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice=68.0d
[ 2256.111728][ T6641] tunl0: entered promiscuous mode
[ 2256.124501][ T6641] tunl0: entered allmulticast mode
[ 2256.135335][ T6641] gre0: entered promiscuous mode
[ 2256.140392][ T6641] gre0: entered allmulticast mode
[ 2256.146156][ T6641] gretap0: entered promiscuous mode
[ 2256.147777][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2256.151464][ T6641] gretap0: entered allmulticast mode
[ 2256.165790][ T6641] erspan0: entered promiscuous mode
[ 2256.171294][ T6641] erspan0: entered allmulticast mode
[ 2256.181547][ T6641] ip_vti0: entered promiscuous mode
[ 2256.186798][ T6641] ip_vti0: entered allmulticast mode
[ 2256.193927][   T24] usb 4-1: Product: syz
[ 2256.194494][ T6641] ip6_vti0: entered promiscuous mode
[ 2256.203704][   T24] usb 4-1: Manufacturer: syz
[ 2256.208855][ T6641] ip6_vti0: entered allmulticast mode
[ 2256.215340][ T6641] sit0: entered promiscuous mode
[ 2256.220878][ T6641] sit0: entered allmulticast mode
[ 2256.223969][   T24] usb 4-1: SerialNumber: syz
[ 2256.228451][ T6641] ip6tnl0: entered promiscuous mode
[ 2256.236463][ T6641] ip6tnl0: entered allmulticast mode
[ 2256.245025][ T6641] ip6gre0: entered promiscuous mode
[ 2256.250650][ T6641] ip6gre0: entered allmulticast mode
[ 2256.257030][ T6641] syz_tun: entered promiscuous mode
[ 2256.263158][ T6641] syz_tun: entered allmulticast mode
[ 2256.270287][ T6641] ip6gretap0: entered promiscuous mode
[ 2256.275924][ T6641] ip6gretap0: entered allmulticast mode
[ 2256.283926][ T6641] bridge0: entered promiscuous mode
[ 2256.290380][ T6641] bridge0: entered allmulticast mode
[ 2256.501665][   T24] usb 4-1: cannot find UAC_HEADER
[ 2256.543247][   T24] snd-usb-audio 4-1:81.0: probe with driver snd-usb-audio failed with error -22
[ 2256.563065][ T6648] FAULT_INJECTION: forcing a failure.
[ 2256.563065][ T6648] name failslab, interval 1, probability 0, space 0, times 0
[ 2256.577282][ T6648] CPU: 0 UID: 0 PID: 6648 Comm: syz.5.8996 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2256.577312][ T6648] Tainted: [L]=SOFTLOCKUP
[ 2256.577319][ T6648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 2256.577330][ T6648] Call Trace:
[ 2256.577338][ T6648]  <TASK>
[ 2256.577346][ T6648]  dump_stack_lvl+0xe8/0x150
[ 2256.577371][ T6648]  should_fail_ex+0x412/0x560
[ 2256.577396][ T6648]  should_failslab+0xa8/0x100
[ 2256.577417][ T6648]  kmem_cache_alloc_node_noprof+0x8b/0x6f0
[ 2256.577443][ T6648]  ? __alloc_skb+0x1d7/0x390
[ 2256.577461][ T6648]  ? __local_bh_enable_ip+0xd0/0x130
[ 2256.577480][ T6648]  ? __alloc_skb+0x193/0x390
[ 2256.577499][ T6648]  __alloc_skb+0x1d7/0x390
[ 2256.577523][ T6648]  netlink_dump+0x1ef/0xe80
[ 2256.577540][ T6648]  ? ethnl_default_start+0x2f0/0x5c0
[ 2256.577558][ T6648]  ? genl_start+0x4c3/0x6c0
[ 2256.577578][ T6648]  ? genl_family_rcv_msg_dumpit+0x213/0x310
[ 2256.577598][ T6648]  ? genl_rcv_msg+0x5e8/0x7a0
[ 2256.577616][ T6648]  ? netlink_rcv_skb+0x232/0x4b0
[ 2256.577631][ T6648]  ? genl_rcv+0x28/0x40
[ 2256.577649][ T6648]  ? netlink_unicast+0x80f/0x9b0
[ 2256.577669][ T6648]  ? netlink_sendmsg+0x813/0xb40
[ 2256.577686][ T6648]  ? ____sys_sendmsg+0xa68/0xad0
[ 2256.577703][ T6648]  ? ___sys_sendmsg+0x2a5/0x360
[ 2256.577722][ T6648]  ? __sys_sendmsg+0x183/0x260
[ 2256.577741][ T6648]  ? __do_fast_syscall_32+0x1d2/0x540
[ 2256.577758][ T6648]  ? do_fast_syscall_32+0x33/0x70
[ 2256.577773][ T6648]  ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2256.577796][ T6648]  ? __pfx_netlink_dump+0x10/0x10
[ 2256.577809][ T6648]  ? __kmalloc_noprof+0x42d/0x7e0
[ 2256.577824][ T6648]  ? ethnl_default_start+0x143/0x5c0
[ 2256.577855][ T6648]  ? genl_start+0x581/0x6c0
[ 2256.577883][ T6648]  __netlink_dump_start+0x5cb/0x7e0
[ 2256.577909][ T6648]  genl_family_rcv_msg_dumpit+0x213/0x310
[ 2256.577934][ T6648]  ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10
[ 2256.577954][ T6648]  ? genl_get_cmd+0x691/0x930
[ 2256.577980][ T6648]  ? __pfx_genl_start+0x10/0x10
[ 2256.577999][ T6648]  ? __pfx_genl_dumpit+0x10/0x10
[ 2256.578017][ T6648]  ? __pfx_genl_done+0x10/0x10
[ 2256.578039][ T6648]  ? __dev_queue_xmit+0x274/0x3850
[ 2256.578066][ T6648]  genl_rcv_msg+0x5e8/0x7a0
[ 2256.578091][ T6648]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2256.578118][ T6648]  ? __pfx_ethnl_default_start+0x10/0x10
[ 2256.578134][ T6648]  ? __pfx_ethnl_default_dumpit+0x10/0x10
[ 2256.578150][ T6648]  ? __pfx_ethnl_default_done+0x10/0x10
[ 2256.578174][ T6648]  ? __pfx_ref_tracker_free+0x10/0x10
[ 2256.578198][ T6648]  netlink_rcv_skb+0x232/0x4b0
[ 2256.578215][ T6648]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2256.578237][ T6648]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2256.578250][ T6648]  ? genl_rcv+0x19/0x40
[ 2256.578282][ T6648]  ? down_read+0x272/0x2e0
[ 2256.578299][ T6648]  ? genl_rcv+0xd/0x40
[ 2256.578319][ T6648]  genl_rcv+0x28/0x40
[ 2256.578337][ T6648]  netlink_unicast+0x80f/0x9b0
[ 2256.578368][ T6648]  ? __pfx_netlink_unicast+0x10/0x10
[ 2256.578390][ T6648]  ? __alloc_skb+0x193/0x390
[ 2256.578409][ T6648]  ? netlink_sendmsg+0x650/0xb40
[ 2256.578423][ T6648]  ? skb_put+0x11b/0x210
[ 2256.578446][ T6648]  netlink_sendmsg+0x813/0xb40
[ 2256.578472][ T6648]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2256.578491][ T6648]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 2256.578512][ T6648]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 2256.578531][ T6648]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2256.578545][ T6648]  ____sys_sendmsg+0xa68/0xad0
[ 2256.578577][ T6648]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2256.578601][ T6648]  ? kstrtoull+0x12f/0x1d0
[ 2256.578627][ T6648]  ___sys_sendmsg+0x2a5/0x360
[ 2256.578646][ T6648]  ? __lock_acquire+0x6b5/0x2cf0
[ 2256.578671][ T6648]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2256.578695][ T6648]  ? get_pid_task+0x20/0x1f0
[ 2256.578712][ T6648]  ? get_pid_task+0x20/0x1f0
[ 2256.578728][ T6648]  ? get_pid_task+0x20/0x1f0
[ 2256.578770][ T6648]  ? __fget_files+0x2a/0x420
[ 2256.578788][ T6648]  ? __fget_files+0x3a0/0x420
[ 2256.578815][ T6648]  __sys_sendmsg+0x183/0x260
[ 2256.578835][ T6648]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2256.578865][ T6648]  ? __pfx_ksys_write+0x10/0x10
[ 2256.578894][ T6648]  __do_fast_syscall_32+0x1d2/0x540
[ 2256.578912][ T6648]  ? lockdep_hardirqs_on+0x7a/0x110
[ 2256.578926][ T6648]  ? do_fast_syscall_32+0x33/0x70
[ 2256.578940][ T6648]  ? asm_int80_emulation+0x1a/0x20
[ 2256.578954][ T6648]  ? do_int80_emulation+0x20e/0x400
[ 2256.578973][ T6648]  do_fast_syscall_32+0x33/0x70
[ 2256.578991][ T6648]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2256.579007][ T6648] RIP: 0023:0xf73dd539
[ 2256.579022][ T6648] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2256.579036][ T6648] RSP: 002b:00000000f540650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 2256.579054][ T6648] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300
[ 2256.579066][ T6648] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2256.579076][ T6648] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2256.579086][ T6648] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2256.579095][ T6648] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2256.579132][ T6648]  </TASK>
[ 2256.585681][   T24] usb 4-1: USB disconnect, device number 88
[ 2256.811654][T25582] udevd[25582]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:81.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2257.110312][T25885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2257.118512][T25885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2257.838071][ T5090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2258.158422][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2258.763272][ T6680] syzkaller0: entered promiscuous mode
[ 2258.768927][ T6680] syzkaller0: entered allmulticast mode
[ 2259.208444][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2259.513828][ T6685] binder: 6681:6685 ioctl 4018620d 0 returned -22
[ 2259.601930][ T6688] FAULT_INJECTION: forcing a failure.
[ 2259.601930][ T6688] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2259.877290][ T6688] CPU: 1 UID: 0 PID: 6688 Comm: syz.3.9007 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2259.877320][ T6688] Tainted: [L]=SOFTLOCKUP
[ 2259.877327][ T6688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 2259.877338][ T6688] Call Trace:
[ 2259.877346][ T6688]  <TASK>
[ 2259.877354][ T6688]  dump_stack_lvl+0xe8/0x150
[ 2259.877380][ T6688]  should_fail_ex+0x412/0x560
[ 2259.877406][ T6688]  _copy_to_user+0x31/0xb0
[ 2259.877432][ T6688]  simple_read_from_buffer+0xe1/0x170
[ 2259.877456][ T6688]  proc_fail_nth_read+0x1bb/0x230
[ 2259.877482][ T6688]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2259.877507][ T6688]  ? rw_verify_area+0x2a6/0x4d0
[ 2259.877528][ T6688]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2259.877551][ T6688]  vfs_read+0x20c/0xa70
[ 2259.877578][ T6688]  ? __pfx___flush_work+0x10/0x10
[ 2259.877597][ T6688]  ? __pfx_vfs_read+0x10/0x10
[ 2259.877638][ T6688]  ksys_read+0x150/0x270
[ 2259.877663][ T6688]  ? __pfx_ksys_read+0x10/0x10
[ 2259.877689][ T6688]  ? asm_int80_emulation+0x1a/0x20
[ 2259.877708][ T6688]  ? asm_int80_emulation+0x1a/0x20
[ 2259.877725][ T6688]  do_int80_emulation+0x111/0x400
[ 2259.877747][ T6688]  ? clear_bhb_loop+0x60/0xb0
[ 2259.877763][ T6688]  ? clear_bhb_loop+0x60/0xb0
[ 2259.877787][ T6688]  asm_int80_emulation+0x1a/0x20
[ 2259.877801][ T6688] RIP: 0023:0xf715572b
[ 2259.877815][ T6688] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[ 2259.877828][ T6688] RSP: 002b:00000000f54164bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[ 2259.877852][ T6688] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54165d0
[ 2259.877863][ T6688] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[ 2259.877873][ T6688] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2259.877884][ T6688] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2259.877893][ T6688] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2259.877916][ T6688]  </TASK>
[ 2260.238868][T25885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2260.374828][   T30] kauditd_printk_skb: 31 callbacks suppressed
[ 2260.374847][   T30] audit: type=1326 audit(1770259839.661:2819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6691 comm="syz.3.9009" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52539 code=0x7ffc0000
[ 2260.406632][   T30] audit: type=1326 audit(1770259839.671:2820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6691 comm="syz.3.9009" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52539 code=0x7ffc0000
[ 2260.432221][   T30] audit: type=1326 audit(1770259839.691:2821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6691 comm="syz.3.9009" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f52539 code=0x7ffc0000
[ 2260.455351][ T6695] netlink: 84 bytes leftover after parsing attributes in process `syz.3.9009'.
[ 2260.482906][   T30] audit: type=1326 audit(1770259839.691:2822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6691 comm="syz.3.9009" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52539 code=0x7ffc0000
[ 2260.509629][   T30] audit: type=1326 audit(1770259839.691:2823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6691 comm="syz.3.9009" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52539 code=0x7ffc0000
[ 2260.532744][   T30] audit: type=1326 audit(1770259839.691:2824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6691 comm="syz.3.9009" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf715572b code=0x7ffc0000
[ 2260.612279][   T30] audit: type=1326 audit(1770259839.691:2825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6691 comm="syz.3.9009" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52539 code=0x7ffc0000
[ 2260.639396][ T6699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2260.650242][ T6699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2260.661542][ T6699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2260.673465][   T30] audit: type=1326 audit(1770259839.691:2826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6691 comm="syz.3.9009" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52539 code=0x7ffc0000
[ 2260.710000][ T6699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2260.725009][ T6700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2260.739303][   T30] audit: type=1326 audit(1770259839.691:2827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6691 comm="syz.3.9009" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f52539 code=0x7ffc0000
[ 2260.762327][ T6699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2260.775543][ T6700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2260.786090][ T6699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2260.794540][ T6700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2260.809421][   T30] audit: type=1326 audit(1770259839.691:2828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6691 comm="syz.3.9009" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52539 code=0x7ffc0000
[ 2260.925038][ T6705] syzkaller0: entered promiscuous mode
[ 2260.962905][ T6705] syzkaller0: entered allmulticast mode
[ 2260.984450][ T6706] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9013'.
[ 2261.381741][ T6717] ALSA: seq fatal error: cannot create timer (-16)
[ 2261.446340][ T6719] syzkaller0: entered promiscuous mode
[ 2261.451961][ T6719] syzkaller0: entered allmulticast mode
[ 2262.245575][ T6731] FAULT_INJECTION: forcing a failure.
[ 2262.245575][ T6731] name failslab, interval 1, probability 0, space 0, times 0
[ 2262.327914][ T6731] CPU: 1 UID: 0 PID: 6731 Comm: syz.7.9021 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2262.327942][ T6731] Tainted: [L]=SOFTLOCKUP
[ 2262.327948][ T6731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 2262.327959][ T6731] Call Trace:
[ 2262.327966][ T6731]  <TASK>
[ 2262.327973][ T6731]  dump_stack_lvl+0xe8/0x150
[ 2262.327993][ T6731]  should_fail_ex+0x412/0x560
[ 2262.328008][ T6731]  should_failslab+0xa8/0x100
[ 2262.328022][ T6731]  kmem_cache_alloc_noprof+0x87/0x6e0
[ 2262.328037][ T6731]  ? sk_filter_trim_cap+0x1e1/0xd90
[ 2262.328053][ T6731]  ? skb_clone+0x212/0x3a0
[ 2262.328069][ T6731]  skb_clone+0x212/0x3a0
[ 2262.328085][ T6731]  __netlink_deliver_tap+0x404/0x850
[ 2262.328102][ T6731]  ? netlink_deliver_tap+0x2e/0x1b0
[ 2262.328113][ T6731]  netlink_deliver_tap+0x19c/0x1b0
[ 2262.328124][ T6731]  netlink_dump+0x926/0xe80
[ 2262.328140][ T6731]  ? __pfx_netlink_dump+0x10/0x10
[ 2262.328158][ T6731]  ? netlink_lookup+0x30/0x200
[ 2262.328167][ T6731]  ? netlink_lookup+0x30/0x200
[ 2262.328175][ T6731]  ? netlink_lookup+0x30/0x200
[ 2262.328187][ T6731]  __netlink_dump_start+0x5cb/0x7e0
[ 2262.328201][ T6731]  ip_set_dump+0x15b/0x1f0
[ 2262.328216][ T6731]  ? __pfx_ip_set_dump+0x10/0x10
[ 2262.328230][ T6731]  ? __pfx_ip_set_dump_start+0x10/0x10
[ 2262.328244][ T6731]  ? __pfx_ip_set_dump_do+0x10/0x10
[ 2262.328252][ T6731]  ? __pfx_ip_set_dump_done+0x10/0x10
[ 2262.328267][ T6731]  nfnetlink_rcv_msg+0xc00/0x12c0
[ 2262.328282][ T6731]  ? unwind_get_return_address+0x4d/0x90
[ 2262.328294][ T6731]  ? nfnetlink_rcv_msg+0x229/0x12c0
[ 2262.328318][ T6731]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[ 2262.328355][ T6731]  netlink_rcv_skb+0x232/0x4b0
[ 2262.328366][ T6731]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[ 2262.328382][ T6731]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2262.328397][ T6731]  ? bpf_lsm_capable+0x9/0x20
[ 2262.328411][ T6731]  ? security_capable+0x7e/0x2c0
[ 2262.328427][ T6731]  nfnetlink_rcv+0x2c0/0x27b0
[ 2262.328446][ T6731]  ? __local_bh_enable_ip+0xd0/0x130
[ 2262.328455][ T6731]  ? lockdep_hardirqs_on+0x7a/0x110
[ 2262.328466][ T6731]  ? __dev_queue_xmit+0x274/0x3850
[ 2262.328480][ T6731]  ? __local_bh_enable_ip+0xd0/0x130
[ 2262.328488][ T6731]  ? __dev_queue_xmit+0x274/0x3850
[ 2262.328502][ T6731]  ? __dev_queue_xmit+0x1e6c/0x3850
[ 2262.328515][ T6731]  ? __sys_sendmsg+0x183/0x260
[ 2262.328532][ T6731]  ? __dev_queue_xmit+0x274/0x3850
[ 2262.328547][ T6731]  ? __pfx_nfnetlink_rcv+0x10/0x10
[ 2262.328571][ T6731]  ? __pfx___dev_queue_xmit+0x10/0x10
[ 2262.328589][ T6731]  ? ref_tracker_free+0x693/0x840
[ 2262.328601][ T6731]  ? __copy_skb_header+0xa3/0x4a0
[ 2262.328615][ T6731]  ? __pfx_ref_tracker_free+0x10/0x10
[ 2262.328635][ T6731]  ? skb_clone+0x246/0x3a0
[ 2262.328650][ T6731]  ? __netlink_deliver_tap+0x807/0x850
[ 2262.328660][ T6731]  ? netlink_deliver_tap+0x2e/0x1b0
[ 2262.328674][ T6731]  ? netlink_deliver_tap+0x2e/0x1b0
[ 2262.328687][ T6731]  netlink_unicast+0x80f/0x9b0
[ 2262.328712][ T6731]  ? __pfx_netlink_unicast+0x10/0x10
[ 2262.328732][ T6731]  ? __alloc_skb+0x193/0x390
[ 2262.328748][ T6731]  ? netlink_sendmsg+0x650/0xb40
[ 2262.328763][ T6731]  ? skb_put+0x11b/0x210
[ 2262.328783][ T6731]  netlink_sendmsg+0x813/0xb40
[ 2262.328808][ T6731]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2262.328827][ T6731]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 2262.328848][ T6731]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 2262.328867][ T6731]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2262.328882][ T6731]  ____sys_sendmsg+0xa68/0xad0
[ 2262.328908][ T6731]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2262.328933][ T6731]  ? kstrtoull+0x12f/0x1d0
[ 2262.328953][ T6731]  ___sys_sendmsg+0x2a5/0x360
[ 2262.328966][ T6731]  ? __lock_acquire+0x6b5/0x2cf0
[ 2262.328982][ T6731]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2262.329001][ T6731]  ? get_pid_task+0x20/0x1f0
[ 2262.329020][ T6731]  ? get_pid_task+0x20/0x1f0
[ 2262.329035][ T6731]  ? get_pid_task+0x20/0x1f0
[ 2262.329077][ T6731]  ? __fget_files+0x2a/0x420
[ 2262.329199][ T6731]  ? __fget_files+0x3a0/0x420
[ 2262.329216][ T6731]  __sys_sendmsg+0x183/0x260
[ 2262.329233][ T6731]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2262.329253][ T6731]  ? __pfx_ksys_write+0x10/0x10
[ 2262.329272][ T6731]  __do_fast_syscall_32+0x1d2/0x540
[ 2262.329284][ T6731]  ? lockdep_hardirqs_on+0x7a/0x110
[ 2262.329293][ T6731]  ? do_fast_syscall_32+0x33/0x70
[ 2262.329304][ T6731]  ? asm_int80_emulation+0x1a/0x20
[ 2262.329313][ T6731]  ? do_int80_emulation+0x20e/0x400
[ 2262.329326][ T6731]  do_fast_syscall_32+0x33/0x70
[ 2262.329338][ T6731]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2262.329349][ T6731] RIP: 0023:0xf7f03539
[ 2262.329360][ T6731] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2262.329369][ T6731] RSP: 002b:00000000f53c650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 2262.329380][ T6731] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100
[ 2262.329388][ T6731] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000
[ 2262.329394][ T6731] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2262.329399][ T6731] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2262.329405][ T6731] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2262.329420][ T6731]  </TASK>
[ 2263.062168][ T6736] FAULT_INJECTION: forcing a failure.
[ 2263.062168][ T6736] name failslab, interval 1, probability 0, space 0, times 0
[ 2263.088164][ T6736] CPU: 1 UID: 0 PID: 6736 Comm: syz.0.9023 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2263.088194][ T6736] Tainted: [L]=SOFTLOCKUP
[ 2263.088202][ T6736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 2263.088213][ T6736] Call Trace:
[ 2263.088220][ T6736]  <TASK>
[ 2263.088228][ T6736]  dump_stack_lvl+0xe8/0x150
[ 2263.088256][ T6736]  should_fail_ex+0x412/0x560
[ 2263.088281][ T6736]  should_failslab+0xa8/0x100
[ 2263.088302][ T6736]  kmem_cache_alloc_noprof+0x87/0x6e0
[ 2263.088325][ T6736]  ? apparmor_capable+0x137/0x1a0
[ 2263.088348][ T6736]  ? skb_clone+0x212/0x3a0
[ 2263.088374][ T6736]  skb_clone+0x212/0x3a0
[ 2263.088393][ T6736]  ? nfnetlink_rcv+0x4b0/0x27b0
[ 2263.088419][ T6736]  nfnetlink_rcv+0x4e2/0x27b0
[ 2263.088450][ T6736]  ? lockdep_hardirqs_on+0x7a/0x110
[ 2263.088468][ T6736]  ? __dev_queue_xmit+0x274/0x3850
[ 2263.088490][ T6736]  ? __local_bh_enable_ip+0xd0/0x130
[ 2263.088506][ T6736]  ? __dev_queue_xmit+0x1e6c/0x3850
[ 2263.088527][ T6736]  ? __sys_sendmsg+0x183/0x260
[ 2263.088557][ T6736]  ? __dev_queue_xmit+0x274/0x3850
[ 2263.088580][ T6736]  ? __pfx_nfnetlink_rcv+0x10/0x10
[ 2263.088617][ T6736]  ? ref_tracker_free+0x693/0x840
[ 2263.088636][ T6736]  ? __copy_skb_header+0xa3/0x4a0
[ 2263.088671][ T6736]  ? __pfx_ref_tracker_free+0x10/0x10
[ 2263.088713][ T6736]  ? skb_clone+0x246/0x3a0
[ 2263.088737][ T6736]  ? __netlink_deliver_tap+0x807/0x850
[ 2263.088755][ T6736]  ? netlink_deliver_tap+0x2e/0x1b0
[ 2263.088787][ T6736]  netlink_unicast+0x80f/0x9b0
[ 2263.088819][ T6736]  ? __pfx_netlink_unicast+0x10/0x10
[ 2263.088841][ T6736]  ? __alloc_skb+0x193/0x390
[ 2263.088860][ T6736]  ? netlink_sendmsg+0x650/0xb40
[ 2263.088876][ T6736]  ? skb_put+0x11b/0x210
[ 2263.088898][ T6736]  netlink_sendmsg+0x813/0xb40
[ 2263.088924][ T6736]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2263.088946][ T6736]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 2263.088967][ T6736]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 2263.088987][ T6736]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2263.089003][ T6736]  ____sys_sendmsg+0xa68/0xad0
[ 2263.089032][ T6736]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2263.089057][ T6736]  ? kstrtoull+0x12f/0x1d0
[ 2263.089084][ T6736]  ___sys_sendmsg+0x2a5/0x360
[ 2263.089104][ T6736]  ? __lock_acquire+0x6b5/0x2cf0
[ 2263.089129][ T6736]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2263.089152][ T6736]  ? get_pid_task+0x20/0x1f0
[ 2263.089170][ T6736]  ? get_pid_task+0x20/0x1f0
[ 2263.089186][ T6736]  ? get_pid_task+0x20/0x1f0
[ 2263.089228][ T6736]  ? __fget_files+0x2a/0x420
[ 2263.089245][ T6736]  ? __fget_files+0x3a0/0x420
[ 2263.089271][ T6736]  __sys_sendmsg+0x183/0x260
[ 2263.089295][ T6736]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2263.089326][ T6736]  ? __pfx_ksys_write+0x10/0x10
[ 2263.089357][ T6736]  __do_fast_syscall_32+0x1d2/0x540
[ 2263.089377][ T6736]  ? lockdep_hardirqs_on+0x7a/0x110
[ 2263.089393][ T6736]  ? do_fast_syscall_32+0x33/0x70
[ 2263.089411][ T6736]  ? asm_int80_emulation+0x1a/0x20
[ 2263.089427][ T6736]  ? do_int80_emulation+0x20e/0x400
[ 2263.089449][ T6736]  do_fast_syscall_32+0x33/0x70
[ 2263.089468][ T6736]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2263.089488][ T6736] RIP: 0023:0xf7f84539
[ 2263.089503][ T6736] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2263.089517][ T6736] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 2263.089536][ T6736] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0
[ 2263.089547][ T6736] RDX: 0000000024040880 RSI: 0000000000000000 RDI: 0000000000000000
[ 2263.089556][ T6736] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2263.089565][ T6736] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2263.089575][ T6736] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2263.089596][ T6736]  </TASK>
[ 2263.092171][ T6733] bond2: option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[ 2263.489538][ T6733] bond2 (unregistering): Released all slaves
[ 2264.458152][ T6768] bond2: (slave netdevsim0): Enslaving as an active interface with an up link
[ 2264.533462][ T6765] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9033'.
[ 2264.571060][ T6774] netlink: 144 bytes leftover after parsing attributes in process `syz.0.9035'.
[ 2264.585633][ T6768] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9033'.
[ 2265.111586][ T6776] netlink: 136 bytes leftover after parsing attributes in process `syz.5.9032'.
[ 2265.558518][ T6782] netlink: 6 bytes leftover after parsing attributes in process `syz.0.9036'.
[ 2265.598562][ T3273] net_ratelimit: 8 callbacks suppressed
[ 2265.598572][ T3273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2265.707504][ T6786] Dead loop on virtual device ip6_vti0, fix it urgently!
[ 2265.835136][ T6790] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9040'.
[ 2265.942640][ T6792] netlink: 'syz.0.9043': attribute type 5 has an invalid length.
[ 2266.003438][ T6795] Cannot find del_set index 0 as target
[ 2266.116987][ T6804] FAULT_INJECTION: forcing a failure.
[ 2266.116987][ T6804] name failslab, interval 1, probability 0, space 0, times 0
[ 2266.148156][ T6804] CPU: 0 UID: 0 PID: 6804 Comm: syz.7.9044 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2266.148176][ T6804] Tainted: [L]=SOFTLOCKUP
[ 2266.148180][ T6804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 2266.148187][ T6804] Call Trace:
[ 2266.148192][ T6804]  <TASK>
[ 2266.148197][ T6804]  dump_stack_lvl+0xe8/0x150
[ 2266.148216][ T6804]  should_fail_ex+0x412/0x560
[ 2266.148231][ T6804]  should_failslab+0xa8/0x100
[ 2266.148244][ T6804]  kmem_cache_alloc_noprof+0x87/0x6e0
[ 2266.148259][ T6804]  ? ksys_write+0x242/0x270
[ 2266.148279][ T6804]  ? getname_flags+0xb7/0x540
[ 2266.148291][ T6804]  getname_flags+0xb7/0x540
[ 2266.148304][ T6804]  __ia32_sys_unlink+0x39/0x50
[ 2266.148313][ T6804]  __do_fast_syscall_32+0x1d2/0x540
[ 2266.148325][ T6804]  ? lockdep_hardirqs_on+0x7a/0x110
[ 2266.148335][ T6804]  ? do_fast_syscall_32+0x33/0x70
[ 2266.148345][ T6804]  ? asm_int80_emulation+0x1a/0x20
[ 2266.148354][ T6804]  ? do_int80_emulation+0x20e/0x400
[ 2266.148367][ T6804]  do_fast_syscall_32+0x33/0x70
[ 2266.148378][ T6804]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2266.148390][ T6804] RIP: 0023:0xf7f03539
[ 2266.148400][ T6804] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2266.148409][ T6804] RSP: 002b:00000000f53c650c EFLAGS: 00000206 ORIG_RAX: 000000000000000a
[ 2266.148420][ T6804] RAX: ffffffffffffffda RBX: 0000000080002040 RCX: 0000000000000000
[ 2266.148428][ T6804] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2266.148433][ T6804] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2266.148439][ T6804] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2266.148445][ T6804] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2266.148459][ T6804]  </TASK>
[ 2266.642951][T25147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2266.651892][T25885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2266.961269][T25147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2267.681562][T25885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2268.000540][T25147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2268.707404][ T6864] binder: 6863:6864 ioctl c0306201 800001c0 returned -14
[ 2268.723445][T25885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2269.125811][   T30] kauditd_printk_skb: 61 callbacks suppressed
[ 2269.125828][   T30] audit: type=1326 audit(1770259848.411:2890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6876 comm="syz.3.9069" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f52539 code=0x0
[ 2269.345519][ T6887] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9073'.
[ 2269.764335][T25885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2269.996152][ T6899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9078'.
[ 2270.005361][ T5090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2270.247948][T25885] usb 4-1: new high-speed USB device number 89 using dummy_hcd
[ 2270.407979][T25885] usb 4-1: Using ep0 maxpacket: 16
[ 2270.414867][T25885] usb 4-1: config index 0 descriptor too short (expected 15627, got 202)
[ 2270.427875][T25885] usb 4-1: config 225 has too many interfaces: 46, using maximum allowed: 32
[ 2270.437646][T25885] usb 4-1: config 225 has an invalid descriptor of length 0, skipping remainder of the config
[ 2270.454424][T25885] usb 4-1: config 225 has 1 interface, different from the descriptor's value: 46
[ 2270.464351][T25885] usb 4-1: too many endpoints for config 225 interface 0 altsetting 40: 56, using maximum allowed: 30
[ 2270.475472][T25885] usb 4-1: config 225 interface 0 altsetting 40 has 0 endpoint descriptors, different from the interface descriptor's value: 56
[ 2270.490375][T25885] usb 4-1: config 225 interface 0 has no altsetting 0
[ 2270.501637][T25885] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2270.518465][T25885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2270.526581][T25885] usb 4-1: Product: syz
[ 2270.532328][T25885] usb 4-1: Manufacturer: syz
[ 2270.539859][T25885] usb 4-1: SerialNumber: syz
[ 2270.660121][ T6903] syzkaller0: entered promiscuous mode
[ 2270.665835][ T6903] syzkaller0: entered allmulticast mode
[ 2270.757233][ T6899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2270.786448][ T6899] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2270.803447][ T3273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2270.837396][T25885] usb 4-1: 0:2 : does not exist
[ 2270.865816][T25885] usb 4-1: USB disconnect, device number 89
[ 2271.119119][T25582] udevd[25582]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:225.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2271.455840][ T6909] syzkaller0: entered promiscuous mode
[ 2271.465986][ T6909] syzkaller0: entered allmulticast mode
[ 2271.756561][ T6912] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 2271.851337][T25885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2271.997381][ T6914] FAULT_INJECTION: forcing a failure.
[ 2271.997381][ T6914] name failslab, interval 1, probability 0, space 0, times 0
[ 2272.017060][ T6914] CPU: 1 UID: 0 PID: 6914 Comm: syz.3.9082 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2272.017092][ T6914] Tainted: [L]=SOFTLOCKUP
[ 2272.017099][ T6914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 2272.017110][ T6914] Call Trace:
[ 2272.017118][ T6914]  <TASK>
[ 2272.017126][ T6914]  dump_stack_lvl+0xe8/0x150
[ 2272.017155][ T6914]  should_fail_ex+0x412/0x560
[ 2272.017179][ T6914]  should_failslab+0xa8/0x100
[ 2272.017200][ T6914]  __kmalloc_noprof+0xde/0x7e0
[ 2272.017218][ T6914]  ? ethnl_default_notify+0x1f5/0xbe0
[ 2272.017243][ T6914]  ethnl_default_notify+0x1f5/0xbe0
[ 2272.017269][ T6914]  ? __pfx_ethnl_default_notify+0x10/0x10
[ 2272.017297][ T6914]  ? mutex_is_locked+0x17/0x50
[ 2272.017312][ T6914]  ? rtnl_is_locked+0x15/0x20
[ 2272.017335][ T6914]  ethnl_default_set_doit+0x6a5/0xad0
[ 2272.017361][ T6914]  genl_family_rcv_msg_doit+0x22a/0x330
[ 2272.017381][ T6914]  ? __asan_memcpy+0x40/0x70
[ 2272.017406][ T6914]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 2272.017434][ T6914]  ? bpf_lsm_capable+0x9/0x20
[ 2272.017455][ T6914]  ? security_capable+0x7e/0x2c0
[ 2272.017478][ T6914]  genl_rcv_msg+0x61c/0x7a0
[ 2272.017502][ T6914]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2272.017520][ T6914]  ? __pfx_ethnl_default_set_doit+0x10/0x10
[ 2272.017541][ T6914]  ? __pfx_ref_tracker_free+0x10/0x10
[ 2272.017566][ T6914]  netlink_rcv_skb+0x232/0x4b0
[ 2272.017582][ T6914]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2272.017602][ T6914]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2272.017615][ T6914]  ? genl_rcv+0x19/0x40
[ 2272.017646][ T6914]  ? down_read+0x272/0x2e0
[ 2272.017663][ T6914]  ? genl_rcv+0xd/0x40
[ 2272.017682][ T6914]  genl_rcv+0x28/0x40
[ 2272.017700][ T6914]  netlink_unicast+0x80f/0x9b0
[ 2272.017728][ T6914]  ? __pfx_netlink_unicast+0x10/0x10
[ 2272.017749][ T6914]  ? __alloc_skb+0x193/0x390
[ 2272.017768][ T6914]  ? netlink_sendmsg+0x650/0xb40
[ 2272.017787][ T6914]  ? skb_put+0x11b/0x210
[ 2272.017806][ T6914]  netlink_sendmsg+0x813/0xb40
[ 2272.017831][ T6914]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2272.017850][ T6914]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 2272.017869][ T6914]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 2272.017894][ T6914]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2272.017911][ T6914]  ____sys_sendmsg+0xa68/0xad0
[ 2272.017942][ T6914]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2272.017967][ T6914]  ? kstrtoull+0x12f/0x1d0
[ 2272.017993][ T6914]  ___sys_sendmsg+0x2a5/0x360
[ 2272.018013][ T6914]  ? __lock_acquire+0x6b5/0x2cf0
[ 2272.018040][ T6914]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2272.018063][ T6914]  ? get_pid_task+0x20/0x1f0
[ 2272.018081][ T6914]  ? get_pid_task+0x20/0x1f0
[ 2272.018096][ T6914]  ? get_pid_task+0x20/0x1f0
[ 2272.018139][ T6914]  ? __fget_files+0x2a/0x420
[ 2272.018155][ T6914]  ? __fget_files+0x3a0/0x420
[ 2272.018182][ T6914]  __sys_sendmsg+0x183/0x260
[ 2272.018204][ T6914]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2272.018231][ T6914]  ? __pfx_ksys_write+0x10/0x10
[ 2272.018260][ T6914]  __do_fast_syscall_32+0x1d2/0x540
[ 2272.018278][ T6914]  ? lockdep_hardirqs_on+0x7a/0x110
[ 2272.018293][ T6914]  ? do_fast_syscall_32+0x33/0x70
[ 2272.018309][ T6914]  ? asm_int80_emulation+0x1a/0x20
[ 2272.018323][ T6914]  ? do_int80_emulation+0x20e/0x400
[ 2272.018342][ T6914]  do_fast_syscall_32+0x33/0x70
[ 2272.018360][ T6914]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2272.018378][ T6914] RIP: 0023:0xf7f52539
[ 2272.018393][ T6914] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2272.018404][ T6914] RSP: 002b:00000000f541650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 2272.018421][ T6914] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000540
[ 2272.018431][ T6914] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2272.018439][ T6914] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2272.018447][ T6914] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2272.018456][ T6914] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2272.018476][ T6914]  </TASK>
[ 2272.770341][ T6933] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2272.878408][ T3273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2273.042827][ T3162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2273.934758][ T3273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2274.958124][ T3273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2276.001610][T25885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2276.080992][ T5090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2276.158241][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2277.038357][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2277.617158][T25147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2277.687893][   T30] audit: type=1326 audit(1770259856.961:2891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6955 comm="syz.5.9096" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd539 code=0x7ffc0000
[ 2277.763448][   T30] audit: type=1326 audit(1770259856.961:2892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6955 comm="syz.5.9096" exe="/root/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf73dd539 code=0x7ffc0000
[ 2277.817656][   T30] audit: type=1326 audit(1770259856.961:2893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6955 comm="syz.5.9096" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd539 code=0x7ffc0000
[ 2277.914890][   T30] audit: type=1326 audit(1770259856.961:2894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6955 comm="syz.5.9096" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd539 code=0x7ffc0000
[ 2278.078074][T25885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2278.117945][   T30] audit: type=1326 audit(1770259856.961:2895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6955 comm="syz.5.9096" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf73dd539 code=0x7ffc0000
[ 2278.255215][   T30] audit: type=1326 audit(1770259856.961:2896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6955 comm="syz.5.9096" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd539 code=0x7ffc0000
[ 2278.337947][   T30] audit: type=1326 audit(1770259856.961:2897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6955 comm="syz.5.9096" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd539 code=0x7ffc0000
[ 2279.118688][T25885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2279.139932][ T3162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2280.162400][ T3273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2281.198718][T25885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2281.350088][ T7028] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9114'.
[ 2281.393367][ T7028] netlink: 104 bytes leftover after parsing attributes in process `syz.6.9114'.
[ 2281.403394][ T7028] netlink: 104 bytes leftover after parsing attributes in process `syz.6.9114'.
[ 2281.617987][ T3162] usb 4-1: new high-speed USB device number 90 using dummy_hcd
[ 2281.779948][ T3162] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 2281.806630][ T3162] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 2281.889156][ T3162] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 2281.903303][ T3162] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2281.924393][ T7024] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 2281.932718][ T7040] loop5: detected capacity change from 0 to 7
[ 2281.935882][ T3162] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[ 2281.954874][T26545] Dev loop5: unable to read RDB block 7
[ 2281.964936][T26545]  loop5: unable to read partition table
[ 2281.974771][T26545] loop5: partition table beyond EOD, truncated
[ 2281.982773][ T7040] Dev loop5: unable to read RDB block 7
[ 2281.990387][ T7040]  loop5: unable to read partition table
[ 2281.996523][ T7040] loop5: partition table beyond EOD, truncated
[ 2282.009590][ T7040] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 2282.149836][ T3273] usb 4-1: USB disconnect, device number 90
[ 2282.158107][ T3162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2282.239273][T25885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2283.285849][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 2283.293066][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 2283.304574][ T8373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2283.407392][ T7055] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9122'.
[ 2284.318712][ T3273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2285.198095][ T3162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2285.358417][ T8373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2286.398764][ T3273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2287.120618][T25147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2287.444731][T25885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2287.764345][ T7248] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9208'.
[ 2288.273243][T25147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2288.427219][T25147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2288.478103][ T8373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2288.586202][ T7233] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2288.850113][ T8373] usb 4-1: new high-speed USB device number 91 using dummy_hcd
[ 2289.018325][ T8373] usb 4-1: Using ep0 maxpacket: 16
[ 2289.030423][ T8373] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[ 2289.041880][ T8373] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2289.053484][ T8373] usb 4-1: config 0 descriptor??
[ 2289.062104][ T8373] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[ 2289.263054][ T8373] usb 4-1: Detected FT232B
[ 2289.528783][T15254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2289.755037][ T8373] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[ 2289.768943][ T8373] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[ 2289.795261][ T8373] usb 4-1: USB disconnect, device number 91
[ 2289.817022][ T8373] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[ 2289.836724][ T8373] ftdi_sio 4-1:0.0: device disconnected
[ 2290.568723][ T8373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2290.611154][ T7289] tipc: Started in network mode
[ 2290.619383][ T7289] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711
[ 2290.621649][ T7289] tipc: Enabled bearer <udp:syz1>, priority 20
[ 2291.278739][ T3162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2291.632971][T15254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2291.738090][ T3162] tipc: Node number set to 4269801494
[ 2291.975942][ T7307] program syz.5.9223 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2292.664342][ T8373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2292.990593][ T7320] netlink: 'syz.5.9227': attribute type 4 has an invalid length.
[ 2292.998690][ T7320] netlink: 17 bytes leftover after parsing attributes in process `syz.5.9227'.
[ 2293.682403][ T3273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2294.171684][ T7333] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9232'.
[ 2294.328082][T25142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2294.494504][ T7337] netlink: 96 bytes leftover after parsing attributes in process `syz.5.9233'.
[ 2294.702043][ T7341] netlink: 'syz.3.9235': attribute type 10 has an invalid length.
[ 2294.722880][T15254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2294.746481][ T7343] F2FS-fs: Conflicting test_dummy_encryption options
[ 2294.803162][ T7345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9236'.
[ 2294.872228][ T7345] macvlan2: entered promiscuous mode
[ 2294.888092][ T7345] macvlan2: entered allmulticast mode
[ 2294.893598][ T7345] mac80211_hwsim hwsim201 wlan0: entered allmulticast mode
[ 2295.024109][ T7349] netlink: 'syz.6.9238': attribute type 1 has an invalid length.
[ 2295.044940][ T7349] 8021q: adding VLAN 0 to HW filter on device bond3
[ 2295.087554][ T7349] 8021q: adding VLAN 0 to HW filter on device bond3
[ 2295.088635][ T7349] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[ 2295.089798][ T7349] bond3: (slave vxcan3): Error -95 calling set_mac_address
[ 2295.389642][ T7349] gretap2: entered promiscuous mode
[ 2295.761054][ T8373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2296.776611][ T7376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9244'.
[ 2296.815486][ T8373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2297.358088][T25147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2297.841145][ T3273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2297.998214][T25142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2298.021603][ T1090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2298.030825][ T3162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2298.048322][ T3162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2298.190481][ T7403] IPv6: addrconf: prefix option has invalid lifetime
[ 2298.216419][ T3273] usb 4-1: new high-speed USB device number 92 using dummy_hcd
[ 2298.372651][ T7403] netlink: 144 bytes leftover after parsing attributes in process `syz.6.9253'.
[ 2298.599712][ T3273] usb 4-1: Using ep0 maxpacket: 16
[ 2298.640865][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2298.863583][ T3273] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[ 2298.883141][ T3273] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2298.897272][ T3273] usb 4-1: Product: syz
[ 2298.906155][T15254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2298.928131][ T3273] usb 4-1: Manufacturer: syz
[ 2298.939551][ T3273] usb 4-1: SerialNumber: syz
[ 2299.230866][ T3273] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[ 2299.269499][ T3273] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 2299.295443][ T3273] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[ 2299.320666][ T3273] usb 4-1: media controller created
[ 2299.363947][ T3273] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2299.420579][ T3273] zl10353_read_register: readreg error (reg=127, ret==-71)
[ 2299.488115][ T3273] dvb_usb_gl861 4-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[ 2299.537163][ T3273] usb 4-1: USB disconnect, device number 92
[ 2300.898641][ T7458] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9268'.
[ 2301.772604][ T7470] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 2301.866333][ T7475] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 2302.085942][ T3273] net_ratelimit: 3 callbacks suppressed
[ 2302.085962][ T3273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2302.359711][   T30] audit: type=1804 audit(1770259881.651:2898): pid=7498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.9281" name="/newroot/360/T" dev="tmpfs" ino=1918 res=1 errno=0
[ 2302.408220][ T7493] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 2303.119853][ T2356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2303.140205][ T3273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2303.148545][T15254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2303.156673][ T3162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2303.445487][ T7541] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 2303.449207][T25147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2303.592025][ T7547] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 2303.742829][ T7552] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 2303.811156][ T7552] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 2304.189570][ T3273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2304.731791][ T7592] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 2305.202859][ T3273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2305.764483][ T7632] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 2305.838490][ T7632] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 2306.043518][ T7647] kvm: kvm [7646]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x80ffffff
[ 2306.180002][ T7647] kvm: kvm [7646]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x400005
[ 2306.252602][T15254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2306.489879][ T3162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2307.078302][ T7685] dump_vmcs: 3 callbacks suppressed
[ 2307.078320][ T7685] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 2307.365140][ T3273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2307.806095][ T7696] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9349'.
[ 2308.429758][ T3273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2308.890013][T25142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2308.898786][T12145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2308.918638][T25147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2308.928016][ T3162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2310.118183][ T8373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2311.005753][ T7726] loop9: detected capacity change from 0 to 8
[ 2311.039149][ T7726] Dev loop9: unable to read RDB block 8
[ 2311.075975][ T7726]  loop9: unable to read partition table
[ 2311.145237][ T7729] netlink: 165144 bytes leftover after parsing attributes in process `syz.3.9355'.
[ 2311.158280][ T7726] loop9: partition table beyond EOD, truncated
[ 2311.188055][ T7726] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 2311.198237][ T8373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2311.247064][ T7729] openvswitch: netlink: Message has 5 unknown bytes.
[ 2311.306862][ T7728] netlink: 'syz.5.9356': attribute type 4 has an invalid length.
[ 2311.368999][ T7728] netlink: 'syz.5.9356': attribute type 4 has an invalid length.
[ 2311.637668][ T7733] pim6reg: entered allmulticast mode
[ 2311.654189][ T7733] pim6reg: left allmulticast mode
[ 2311.749688][ T7734] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9357'.
[ 2311.832259][ T7736] FAULT_INJECTION: forcing a failure.
[ 2311.832259][ T7736] name failslab, interval 1, probability 0, space 0, times 0
[ 2311.875423][ T7736] CPU: 0 UID: 0 PID: 7736 Comm: syz.7.9358 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2311.875453][ T7736] Tainted: [L]=SOFTLOCKUP
[ 2311.875460][ T7736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 2311.875472][ T7736] Call Trace:
[ 2311.875479][ T7736]  <TASK>
[ 2311.875487][ T7736]  dump_stack_lvl+0xe8/0x150
[ 2311.875514][ T7736]  should_fail_ex+0x412/0x560
[ 2311.875540][ T7736]  should_failslab+0xa8/0x100
[ 2311.875562][ T7736]  __kmalloc_noprof+0xde/0x7e0
[ 2311.875579][ T7736]  ? percpu_ref_get_many+0x21/0x1e0
[ 2311.875598][ T7736]  ? io_cache_alloc_new+0x40/0x100
[ 2311.875623][ T7736]  io_cache_alloc_new+0x40/0x100
[ 2311.875646][ T7736]  __io_prep_rw+0x2bf/0xed0
[ 2311.875671][ T7736]  ? __pfx___io_prep_rw+0x10/0x10
[ 2311.875688][ T7736]  ? __pfx___io_alloc_req_refill+0x10/0x10
[ 2311.875723][ T7736]  io_prep_write+0x36/0x110
[ 2311.875745][ T7736]  ? io_task_refs_refill+0xba/0x180
[ 2311.875768][ T7736]  io_submit_sqes+0xad2/0x2130
[ 2311.875822][ T7736]  __se_sys_io_uring_enter+0x2f7/0x2c30
[ 2311.875866][ T7736]  ? ksys_write+0x1e6/0x270
[ 2311.875889][ T7736]  ? __pfx___se_sys_io_uring_enter+0x10/0x10
[ 2311.875914][ T7736]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[ 2311.875940][ T7736]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 2311.875963][ T7736]  ? __fget_files+0x3a0/0x420
[ 2311.875989][ T7736]  ? fput+0xa0/0xd0
[ 2311.876009][ T7736]  ? ksys_write+0x242/0x270
[ 2311.876034][ T7736]  ? __pfx_ksys_write+0x10/0x10
[ 2311.876058][ T7736]  ? __ia32_sys_io_uring_enter+0x21/0xf0
[ 2311.876079][ T7736]  __do_fast_syscall_32+0x1d2/0x540
[ 2311.876106][ T7736]  ? lockdep_hardirqs_on+0x7a/0x110
[ 2311.876123][ T7736]  ? do_fast_syscall_32+0x33/0x70
[ 2311.876141][ T7736]  ? asm_int80_emulation+0x1a/0x20
[ 2311.876157][ T7736]  ? do_int80_emulation+0x20e/0x400
[ 2311.876180][ T7736]  do_fast_syscall_32+0x33/0x70
[ 2311.876200][ T7736]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2311.876219][ T7736] RIP: 0023:0xf7f03539
[ 2311.876236][ T7736] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2311.876251][ T7736] RSP: 002b:00000000f53c650c EFLAGS: 00000206 ORIG_RAX: 00000000000001aa
[ 2311.876271][ T7736] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000207a98
[ 2311.876284][ T7736] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2311.876296][ T7736] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2311.876306][ T7736] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2311.876318][ T7736] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2311.876344][ T7736]  </TASK>
[ 2312.138893][T25147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2312.201968][ T7743] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9362'.
[ 2312.217730][ T7743] vlan1: entered promiscuous mode
[ 2312.222910][ T7743] geneve1: entered promiscuous mode
[ 2312.233065][ T7743] vlan1: entered allmulticast mode
[ 2312.245265][ T7743] geneve1: entered allmulticast mode
[ 2312.616128][ T7759] netlink: 'syz.3.9360': attribute type 29 has an invalid length.
[ 2312.738644][ T7764] netlink: 'syz.3.9360': attribute type 29 has an invalid length.
[ 2312.769800][ T7764] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9360'.
[ 2313.306504][ T8373] net_ratelimit: 1 callbacks suppressed
[ 2313.306523][ T8373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2314.348039][T15254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2314.647965][T15254] usb 4-1: new high-speed USB device number 93 using dummy_hcd
[ 2314.818321][T15254] usb 4-1: Using ep0 maxpacket: 16
[ 2314.831407][T15254] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 2314.848811][T15254] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 2314.883876][T15254] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 2314.907918][T15254] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2314.920403][T15254] usb 4-1: Product: syz
[ 2314.924609][T15254] usb 4-1: Manufacturer: syz
[ 2314.951566][T15254] usb 4-1: SerialNumber: syz
[ 2314.981602][T15254] usb 4-1: config 0 descriptor??
[ 2315.011140][T15254] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 2315.025248][ T7811] CUSE: info not properly terminated
[ 2315.042617][T15254] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[ 2315.198395][ T3162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2315.406047][ T8373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2315.670974][T15254] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[ 2315.712102][T15254] em28xx 4-1:0.0: Config register raw data: 0x41
[ 2315.883176][ T3162] usb 4-1: USB disconnect, device number 93
[ 2315.890152][ T3162] em28xx 4-1:0.0: Disconnecting em28xx
[ 2315.914156][ T3162] em28xx 4-1:0.0: Freeing device
[ 2316.480003][T15254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2316.570743][ T7834] sch_tbf: burst 3 is lower than device tunl0 mtu (1536) !
[ 2317.250880][ T7849] syzkaller0: entered promiscuous mode
[ 2317.256427][ T7849] syzkaller0: entered allmulticast mode
[ 2317.518202][ T8373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2318.163584][ T7860] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9402'.
[ 2318.240486][ T3162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2318.478139][T25142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2318.572676][T15254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2319.118484][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2319.144391][ T3273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2319.181245][ T1090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2319.190414][ T3273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2319.199338][T15254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2319.598581][ T3273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2319.730768][ T7899] program syz.7.9419 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2319.851084][ T7904] loop8: detected capacity change from 0 to 8
[ 2319.873153][ T7904] Dev loop8: unable to read RDB block 8
[ 2319.898018][ T7904]  loop8: unable to read partition table
[ 2319.904490][ T7904] loop8: partition table beyond EOD, truncated
[ 2319.948021][ T7904] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[ 2320.656740][ T3273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2321.680466][T15254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2322.197971][ T3162] usb 4-1: new high-speed USB device number 94 using dummy_hcd
[ 2322.327725][ T7949] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9436'.
[ 2322.337248][ T7949] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9436'.
[ 2322.354196][ T7949] bond0: entered promiscuous mode
[ 2322.359756][ T7949] bond_slave_0: entered promiscuous mode
[ 2322.365708][ T7949] bond_slave_1: entered promiscuous mode
[ 2322.388167][ T7949] bond0: left promiscuous mode
[ 2322.393536][ T7949] bond_slave_0: left promiscuous mode
[ 2322.408633][ T7949] bond_slave_1: left promiscuous mode
[ 2322.417870][ T3162] usb 4-1: Using ep0 maxpacket: 32
[ 2322.424842][ T3162] usb 4-1: config 0 has an invalid interface number: 196 but max is 0
[ 2322.469423][ T3162] usb 4-1: config 0 has no interface number 0
[ 2322.475667][ T3162] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[ 2322.527872][ T3162] usb 4-1: config 0 interface 196 has no altsetting 0
[ 2322.712449][ T3162] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[ 2322.721670][ T3162] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2323.022756][ T3162] usb 4-1: Product: syz
[ 2323.026970][ T3162] usb 4-1: Manufacturer: syz
[ 2323.041980][ T3162] usb 4-1: SerialNumber: syz
[ 2323.067664][ T3162] usb 4-1: config 0 descriptor??
[ 2323.078773][ T7942] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 2323.306746][ T3162] ipheth 4-1:0.196: ipheth_get_macaddr: usb_control_msg: -71
[ 2323.314941][ T3162] ipheth 4-1:0.196: probe with driver ipheth failed with error -71
[ 2323.379310][ T3162] usb 4-1: USB disconnect, device number 94
[ 2323.838297][T25885] net_ratelimit: 4 callbacks suppressed
[ 2323.838315][T25885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2324.888096][T15254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2325.278433][T25142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2325.310661][ T7994] netlink: 'syz.6.9453': attribute type 1 has an invalid length.
[ 2325.346541][ T7994] netlink: 5220 bytes leftover after parsing attributes in process `syz.6.9453'.
[ 2325.919468][T25885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2326.894865][ T8019] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9463'.
[ 2326.958968][T15254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2327.998016][T15254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2328.078382][T25142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2328.318238][T25147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2328.764509][ T8051] netlink: 203340 bytes leftover after parsing attributes in process `syz.6.9475'.
[ 2329.038882][ T3273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2329.123506][ T8062] netlink: 87 bytes leftover after parsing attributes in process `syz.5.9480'.
[ 2329.445544][ T8073] netlink: 72 bytes leftover after parsing attributes in process `syz.7.9473'.
[ 2330.080743][ T3273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2330.287200][ T8076] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 2330.301318][ T8076] syzkaller0: entered promiscuous mode
[ 2330.307199][ T8076] syzkaller0: entered allmulticast mode
[ 2330.341001][ T8076] tipc: Resetting bearer <eth:syzkaller0>
[ 2330.348846][ T8075] tipc: Resetting bearer <eth:syzkaller0>
[ 2330.374682][ T8075] tipc: Disabling bearer <eth:syzkaller0>
[ 2330.557958][ T3273] usb 4-1: new high-speed USB device number 95 using dummy_hcd
[ 2330.707966][ T3273] usb 4-1: Using ep0 maxpacket: 16
[ 2330.751754][ T3273] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2330.767807][ T3273] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2330.809746][ T3273] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2330.818895][ T3273] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2330.826901][ T3273] usb 4-1: Product: syz
[ 2330.867832][ T3273] usb 4-1: Manufacturer: syz
[ 2330.872468][ T3273] usb 4-1: SerialNumber: syz
[ 2331.096243][ T3273] usb 4-1: 0:2 : does not exist
[ 2331.106860][ T3273] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[ 2331.125762][ T3273] usb 4-1: USB disconnect, device number 95
[ 2331.132309][T25885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2331.159166][T25582] udevd[25582]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2331.358326][ T3162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2332.027898][ T3273] usb 4-1: new high-speed USB device number 96 using dummy_hcd
[ 2332.164753][T15254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2332.287085][ T3273] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[ 2332.296304][ T3273] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2332.305236][ T3273] usb 4-1: Product: syz
[ 2332.309729][ T3273] usb 4-1: Manufacturer: syz
[ 2332.314385][ T3273] usb 4-1: SerialNumber: syz
[ 2332.348182][ T3273] usb 4-1: config 0 descriptor??
[ 2332.427695][ T3273] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[ 2332.458084][ T3273] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 2332.470913][ T3273] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[ 2332.481452][ T3273] usb 4-1: media controller created
[ 2332.540695][ T3273] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2332.765461][ T3273] DVB: Unable to find symbol mt352_attach()
[ 2332.893527][ T3273] DVB: Unable to find symbol nxt6000_attach()
[ 2332.913977][ T3273] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[ 2332.952672][ T3273] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input115
[ 2333.000005][ T3273] dvb-usb: schedule remote query interval to 1000 msecs.
[ 2333.040997][ T3273] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[ 2333.071624][ T3273] dvb-usb: bulk message failed: -22 (7/0)
[ 2333.091001][ T3273] dvb-usb: bulk message failed: -22 (7/0)
[ 2333.117263][ T3273] usb 4-1: USB disconnect, device number 96
[ 2333.199696][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2333.605570][ T3273] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[ 2334.131556][ T8136] binder: BINDER_SET_CONTEXT_MGR already set
[ 2334.137626][ T8136] binder: 8130:8136 ioctl 4018620d 80000040 returned -16
[ 2334.248059][ T3273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2334.486412][ T8136] syz.0.9503 (8136): drop_caches: 2
[ 2334.491981][ T3162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2335.118000][T25885] usb 4-1: new full-speed USB device number 97 using dummy_hcd
[ 2335.411134][ T3273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2335.530893][T25885] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2335.541358][T25885] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2335.560749][T25885] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[ 2335.578175][T25885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 2335.594944][T25885] usb 4-1: SerialNumber: syz
[ 2335.651657][T25885] usb 4-1: 0:2 : does not exist
[ 2336.115568][ T8142] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) !
[ 2336.192380][ T3162] usb 4-1: USB disconnect, device number 97
[ 2336.478227][T25885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2336.736505][ T8160] syzkaller0: entered promiscuous mode
[ 2336.780610][ T8160] syzkaller0: entered allmulticast mode
[ 2337.518476][T25885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2337.526616][T25142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2337.688178][T25142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2338.565059][ T8193] binder: BINDER_SET_CONTEXT_MGR already set
[ 2338.571256][ T8193] binder: 8184:8193 ioctl 4018620d 80000040 returned -16
[ 2338.601591][ T8193] syz.3.9520 (8193): drop_caches: 2
[ 2338.639683][ T3273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2339.079360][ T8200] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(10)
[ 2339.085998][ T8200] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 2339.148862][ T8200] vhci_hcd vhci_hcd.0: Device attached
[ 2339.162844][ T8205] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9525'.
[ 2339.179756][ T8203] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(13)
[ 2339.186377][ T8203] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 2339.216058][ T8203] vhci_hcd vhci_hcd.0: Device attached
[ 2339.456542][ T8200] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(12)
[ 2339.463159][ T8200] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 2339.490640][T25142] usb 47-1: new low-speed USB device number 2 using vhci_hcd
[ 2339.504182][ T8209] vhci_hcd vhci_hcd.0: pdev(7) rhport(3) sockfd(18)
[ 2339.511009][ T8209] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 2339.572385][ T8211] vhci_hcd vhci_hcd.0: pdev(7) rhport(4) sockfd(21)
[ 2339.579034][ T8211] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 2339.584710][ T8219] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 2339.626326][ T8203] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(15)
[ 2339.632954][ T8203] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 2339.693204][T15254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2339.714444][ T8209] vhci_hcd vhci_hcd.0: Device attached
[ 2339.715775][ T8225] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 2339.780744][ T8200] vhci_hcd vhci_hcd.0: Device attached
[ 2339.977972][ T8203] vhci_hcd vhci_hcd.0: Device attached
[ 2339.979660][ T8211] vhci_hcd vhci_hcd.0: Device attached
[ 2340.104151][ T8200] vhci_hcd vhci_hcd.0: pdev(7) rhport(7) sockfd(17)
[ 2340.110808][ T8200] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 2340.139929][ T8209] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 2340.176728][ T8200] vhci_hcd vhci_hcd.0: Device attached
[ 2340.243174][ T8218] vhci_hcd: connection closed
[ 2340.243425][T12143] vhci_hcd vhci_hcd.7: stop threads
[ 2340.243887][ T8229] vhci_hcd: connection closed
[ 2340.248508][ T8213] vhci_hcd: connection closed
[ 2340.255038][ T8208] vhci_hcd: connection closed
[ 2340.263400][ T8210] vhci_hcd: connection closed
[ 2340.311399][ T8201] vhci_hcd: connection reset by peer
[ 2340.311677][ T8206] vhci_hcd: connection closed
[ 2340.317978][T12143] vhci_hcd vhci_hcd.7: release socket
[ 2340.355117][T12143] vhci_hcd vhci_hcd.7: disconnect device
[ 2340.377387][T12143] vhci_hcd vhci_hcd.7: stop threads
[ 2340.382855][T12143] vhci_hcd vhci_hcd.7: release socket
[ 2340.424650][T12143] vhci_hcd vhci_hcd.7: disconnect device
[ 2340.445738][T12143] vhci_hcd vhci_hcd.7: stop threads
[ 2340.451249][T12143] vhci_hcd vhci_hcd.7: release socket
[ 2340.482604][T12143] vhci_hcd vhci_hcd.7: disconnect device
[ 2340.587630][ T3162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2340.628084][T12143] vhci_hcd vhci_hcd.7: stop threads
[ 2340.633349][T12143] vhci_hcd vhci_hcd.7: release socket
[ 2340.667937][T12143] vhci_hcd vhci_hcd.7: disconnect device
[ 2340.888139][T15254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2340.940962][T12143] vhci_hcd vhci_hcd.7: stop threads
[ 2341.032637][T12143] vhci_hcd vhci_hcd.7: release socket
[ 2341.048576][T12143] vhci_hcd vhci_hcd.7: disconnect device
[ 2341.087991][T12143] vhci_hcd vhci_hcd.7: stop threads
[ 2341.127095][T12143] vhci_hcd vhci_hcd.7: release socket
[ 2341.150103][T12143] vhci_hcd vhci_hcd.7: disconnect device
[ 2341.168475][T12143] vhci_hcd vhci_hcd.7: stop threads
[ 2341.229216][T12143] vhci_hcd vhci_hcd.7: release socket
[ 2341.249301][T12143] vhci_hcd vhci_hcd.7: disconnect device
[ 2341.921762][T15254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2342.978129][T15254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2343.203053][ T8266] binder: BINDER_SET_CONTEXT_MGR already set
[ 2343.209324][ T8266] binder: 8261:8266 ioctl 4018620d 80000040 returned -16
[ 2343.222670][ T8266] syz.7.9541 (8266): drop_caches: 2
[ 2343.598208][ T3162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2344.022163][T15254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2344.643332][T25142] vhci_hcd vhci_hcd.7: vhci_device speed not set
[ 2344.722588][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 2344.733240][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 2345.013464][ T8282] netlink: 148 bytes leftover after parsing attributes in process `syz.6.9548'.
[ 2345.022835][ T8282] netlink: 52 bytes leftover after parsing attributes in process `syz.6.9548'.
[ 2345.038804][T15254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2346.085714][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2346.205205][T25885] usb usb48-port1: attempt power cycle
[ 2346.639232][T25142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2346.813248][T25885] usb usb48-port1: unable to enumerate USB device
[ 2347.125532][T25885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2347.288277][ T5090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2348.158309][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2349.198623][T25885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2349.678848][ T5090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2350.238394][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2351.278707][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2352.318074][T25885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2352.402978][ T8372] syz_tun: entered promiscuous mode
[ 2352.436263][ T8372] vlan2: entered promiscuous mode
[ 2352.658983][ T8378] bond3: (slave netdevsim0): Enslaving as an active interface with an up link
[ 2352.713335][ T8376] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9580'.
[ 2352.722619][T25142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2352.951651][ T8378] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9580'.
[ 2353.209142][ T8389] netlink: 'syz.5.9584': attribute type 5 has an invalid length.
[ 2353.361390][ T3273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2354.355648][ T8418] vlan0: entered promiscuous mode
[ 2354.406302][ T3273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2354.832668][ T8431] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9597'.
[ 2354.898488][ T8431] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9597'.
[ 2354.973583][ T8433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2354.992373][ T8433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2355.008968][ T8433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2355.045929][ T8433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2355.438187][T25885] net_ratelimit: 23 callbacks suppressed
[ 2355.438207][T25885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2355.758593][T25142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2356.478744][T15254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2356.939747][ T5090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2357.031138][ T8468] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9610'.
[ 2357.536865][ T3273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2358.192372][ T8491] syz_tun: entered promiscuous mode
[ 2358.199270][ T8491] vlan0: entered promiscuous mode
[ 2358.569519][ T3273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2358.761082][ T8502] binder: BINDER_SET_CONTEXT_MGR already set
[ 2358.767236][ T8502] binder: 8498:8502 ioctl 4018620d 80004a80 returned -16
[ 2358.806098][ T5090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2359.608708][T15254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2359.728002][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2360.643398][ T3273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2360.717992][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2360.847970][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2361.217958][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2361.681440][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2361.838010][T25142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2362.728391][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2363.763720][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2364.342350][   T30] audit: type=1326 audit(1770259943.511:2899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8578 comm="syz.6.9647" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000
[ 2364.450608][   T30] audit: type=1326 audit(1770259943.511:2900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8578 comm="syz.6.9647" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000
[ 2364.520763][   T30] audit: type=1326 audit(1770259943.511:2901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8578 comm="syz.6.9647" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf73ed539 code=0x7ffc0000
[ 2364.597697][   T30] audit: type=1326 audit(1770259943.511:2902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8578 comm="syz.6.9647" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000
[ 2364.653823][   T30] audit: type=1326 audit(1770259943.511:2903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8578 comm="syz.6.9647" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf73ed539 code=0x7ffc0000
[ 2364.700012][   T30] audit: type=1326 audit(1770259943.511:2904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8578 comm="syz.6.9647" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000
[ 2364.742412][   T30] audit: type=1326 audit(1770259943.511:2905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8578 comm="syz.6.9647" exe="/root/syz-executor" sig=0 arch=40000003 syscall=286 compat=1 ip=0xf73ed539 code=0x7ffc0000
[ 2364.799198][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2364.803752][   T30] audit: type=1326 audit(1770259943.511:2906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8578 comm="syz.6.9647" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000
[ 2364.829982][T21676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2365.099092][   T30] audit: type=1326 audit(1770259943.511:2907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8578 comm="syz.6.9647" exe="/root/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf73ed539 code=0x7ffc0000
[ 2365.183984][   T30] audit: type=1326 audit(1770259943.511:2908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8578 comm="syz.6.9647" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000
[ 2365.647829][ T8589] net_ratelimit: 988 callbacks suppressed
[ 2365.647852][ T8589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2365.657839][T25142] usb 4-1: new high-speed USB device number 98 using dummy_hcd
[ 2365.677951][ T8589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2365.696951][ T8589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2365.824101][ T8589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2365.845321][ T8589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2365.855249][ T8589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2365.917973][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2365.919894][T25142] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[ 2365.967098][T25142] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[ 2365.967142][ T8589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2365.967174][T25142] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 2366.073328][T25142] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 2366.099242][T25142] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 2366.120155][T25142] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[ 2366.129445][T25142] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2366.137526][T25142] usb 4-1: Product: syz
[ 2366.142296][T25142] usb 4-1: Manufacturer: syz
[ 2366.162473][T25142] usb 4-1: SerialNumber: syz
[ 2366.167491][ T8589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2366.195114][T25142] usb 4-1: config 0 descriptor??
[ 2366.215581][T25142] iguanair 4-1:0.0: probe with driver iguanair failed with error -12
[ 2366.233148][ T8589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2366.439875][T25142] usb 4-1: USB disconnect, device number 98
[ 2367.287839][ T5090] usb 4-1: new high-speed USB device number 99 using dummy_hcd
[ 2367.450310][ T5090] usb 4-1: config 0 has an invalid interface number: 255 but max is 0
[ 2367.467827][ T5090] usb 4-1: config 0 has no interface number 0
[ 2367.473992][ T5090] usb 4-1: New USB device found, idVendor=0733, idProduct=0401, bcdDevice=ad.7d
[ 2367.498216][ T5090] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2367.505460][ T8623] QAT: Device 7 not found
[ 2367.518888][ T5090] usb 4-1: config 0 descriptor??
[ 2367.531240][ T5090] gspca_main: spca501-2.14.0 probing 0733:0401
[ 2367.930383][ T5090] gspca_spca501: reg write: error -71
[ 2367.956131][ T5090] spca501 4-1:0.255: Reg write failed for 0x00,0x02,0x01
[ 2367.982038][ T5090] spca501 4-1:0.255: probe with driver spca501 failed with error -22
[ 2368.016759][ T5090] usb 4-1: USB disconnect, device number 99
[ 2368.295652][ T8651] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9674'.
[ 2368.581229][ T8658] vlan0: entered allmulticast mode
[ 2368.586909][ T8658] macsec0: entered allmulticast mode
[ 2368.608025][ T8658] veth1_macvtap: entered allmulticast mode
[ 2370.166482][   T30] kauditd_printk_skb: 25 callbacks suppressed
[ 2370.166498][   T30] audit: type=1326 audit(1770259949.451:2934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.0.9692" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000
[ 2370.416968][   T30] audit: type=1326 audit(1770259949.491:2935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.0.9692" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000
[ 2370.447251][   T30] audit: type=1326 audit(1770259949.491:2936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.0.9692" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f84539 code=0x7ffc0000
[ 2370.495787][   T30] audit: type=1326 audit(1770259949.491:2937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.0.9692" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000
[ 2370.549281][   T30] audit: type=1326 audit(1770259949.491:2938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.0.9692" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000
[ 2370.644002][   T30] audit: type=1326 audit(1770259949.491:2939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.0.9692" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f84539 code=0x7ffc0000
[ 2370.695063][   T30] audit: type=1326 audit(1770259949.491:2940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.0.9692" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000
[ 2370.724458][   T30] audit: type=1326 audit(1770259949.491:2941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.0.9692" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000
[ 2370.747172][   T30] audit: type=1326 audit(1770259949.491:2942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.0.9692" exe="/root/syz-executor" sig=0 arch=40000003 syscall=286 compat=1 ip=0xf7f84539 code=0x7ffc0000
[ 2370.771395][   T30] audit: type=1326 audit(1770259949.491:2943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.0.9692" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000
[ 2370.798560][ T8706] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9694'.
[ 2370.958832][T25142] net_ratelimit: 41 callbacks suppressed
[ 2370.958848][T25142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2371.119495][ T8713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9697'.
[ 2371.439194][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2372.478866][T15254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2372.507587][ T8740] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9707'.
[ 2373.171153][   T24] usb 4-1: new high-speed USB device number 100 using dummy_hcd
[ 2373.339950][   T24] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 2373.352182][   T24] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 2373.376676][   T24] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2373.407846][   T24] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 2373.420371][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2373.528490][T15254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2373.544993][   T24] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[ 2373.558744][   T24] usb 4-1: invalid MIDI out EP 0
[ 2373.642534][T26545] udevd[26545]: setting mode of /dev/snd/controlC3 to 020660 failed: No such file or directory
[ 2373.682619][   T24] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22
[ 2373.693150][T26545] udevd[26545]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory
[ 2373.784580][   T24] usb 4-1: USB disconnect, device number 100
[ 2373.998022][T25142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2374.558912][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2374.654245][ T8768] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9720'.
[ 2374.769332][ T8770] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9717'.
[ 2374.788875][ T8770] netlink: 220 bytes leftover after parsing attributes in process `syz.6.9717'.
[ 2374.827912][ T8770] netlink: 220 bytes leftover after parsing attributes in process `syz.6.9717'.
[ 2375.598566][T15254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2375.979907][ T8799] program syz.7.9734 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2376.136421][ T8802] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9735'.
[ 2376.152389][ T8802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2376.168080][ T5090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2376.640093][T15254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2377.039402][T25142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2377.679272][T15254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2377.899059][ T8827] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9745'.
[ 2377.930148][ T8827] netlink: 104 bytes leftover after parsing attributes in process `syz.5.9745'.
[ 2377.948055][ T8827] netlink: 104 bytes leftover after parsing attributes in process `syz.5.9745'.
[ 2378.258369][ T8840] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9749'.
[ 2378.718690][ T3273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2379.012129][ T8857] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9754'.
[ 2379.769764][T25885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2380.078324][ T5090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2380.487891][ T8877] program syz.0.9763 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2380.800141][T15254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2380.917837][T25885] usb 4-1: new low-speed USB device number 101 using dummy_hcd
[ 2381.027985][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2381.070233][T25885] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[ 2381.086763][T25885] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 2381.098524][T25885] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 2381.111730][T25885] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 2381.123887][T25885] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 2381.144181][T25885] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[ 2381.152255][T25885] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 2381.163393][T25885] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 2381.176055][T25885] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 2381.188190][T25885] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 2381.202388][T25885] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[ 2381.210482][T25885] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 2381.222040][T25885] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 2381.234697][T25885] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 2381.269970][T25885] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 2381.288048][T25885] usb 4-1: string descriptor 0 read error: -22
[ 2381.294747][T25885] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 2381.304044][T25885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2381.322896][T25885] adutux 4-1:168.0: ADU100  now attached to /dev/usb/adutux0
[ 2381.758104][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2381.838349][   T31] INFO: task kworker/1:10:8374 blocked for more than 143 seconds.
[ 2381.842682][T25885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2381.846242][   T31]       Tainted: G             L      syzkaller #0
[ 2381.861425][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 2381.876359][   T31] task:kworker/1:10    state:D stack:20512 pid:8374  tgid:8374  ppid:2      task_flags:0x4208060 flags:0x00080000
[ 2381.891116][   T31] Workqueue: usb_hub_wq hub_event
[ 2381.896750][   T31] Call Trace:
[ 2381.904200][   T31]  <TASK>
[ 2381.907462][   T31]  __schedule+0x14ea/0x5050
[ 2381.922290][   T31]  ? __device_attach_driver+0x279/0x430
[ 2381.932472][   T31]  ? device_initial_probe+0xa1/0xd0
[ 2381.940705][   T31]  ? __driver_probe_device+0x18c/0x320
[ 2381.946310][   T31]  ? bus_for_each_drv+0x258/0x2f0
[ 2381.951627][   T31]  ? look_up_lock_class+0x57/0x110
[ 2381.956885][   T31]  ? __pfx___schedule+0x10/0x10
[ 2381.969394][   T31]  ? schedule+0x90/0x360
[ 2381.992903][   T31]  schedule+0x164/0x360
[ 2381.997256][   T31]  schedule_timeout+0xc3/0x2c0
[ 2382.003439][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[ 2382.012236][   T31]  ? do_raw_spin_lock+0x12b/0x2f0
[ 2382.017420][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 2382.023751][   T31]  ? wait_for_completion+0x274/0x5e0
[ 2382.029252][   T31]  wait_for_completion+0x2cc/0x5e0
[ 2382.034494][   T31]  ? __pfx_wait_for_completion+0x10/0x10
[ 2382.040340][   T31]  i2c_del_adapter+0x5c0/0x790
[ 2382.045162][   T31]  ? usb_urb_exitv2+0xef/0x1d0
[ 2382.050107][   T31]  ? kfree+0x1be/0x650
[ 2382.054310][   T31]  ? __pfx_i2c_del_adapter+0x10/0x10
[ 2382.059745][   T31]  ? dvb_usbv2_exit+0x935/0xb60
[ 2382.064714][   T31]  dvb_usbv2_probe+0x4c0/0x3c20
[ 2382.069764][   T31]  ? __pfx_dvb_usbv2_probe+0x10/0x10
[ 2382.075141][   T31]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 2382.081145][   T31]  ? __pm_runtime_set_status+0x9d4/0xcd0
[ 2382.086883][   T31]  usb_probe_interface+0x668/0xc90
[ 2382.092371][   T31]  ? __pfx_usb_probe_interface+0x10/0x10
[ 2382.099170][   T31]  really_probe+0x267/0xaf0
[ 2382.103713][   T31]  __driver_probe_device+0x18c/0x320
[ 2382.110312][   T31]  driver_probe_device+0x4f/0x240
[ 2382.115458][   T31]  __device_attach_driver+0x279/0x430
[ 2382.124037][   T31]  bus_for_each_drv+0x258/0x2f0
[ 2382.131506][   T31]  ? __pfx___device_attach_driver+0x10/0x10
[ 2382.137524][   T31]  ? __pfx_bus_for_each_drv+0x10/0x10
[ 2382.143051][   T31]  ? lockdep_hardirqs_on+0x7a/0x110
[ 2382.148428][   T31]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 2382.154350][   T31]  __device_attach+0x2c5/0x450
[ 2382.159505][   T31]  ? __pfx___device_attach+0x10/0x10
[ 2382.164843][   T31]  ? _raw_spin_unlock+0x28/0x50
[ 2382.169917][   T31]  device_initial_probe+0xa1/0xd0
[ 2382.174961][   T31]  bus_probe_device+0x12a/0x220
[ 2382.179923][   T31]  ? device_add+0x726/0xb70
[ 2382.184446][   T31]  device_add+0x7b6/0xb70
[ 2382.189032][   T31]  usb_set_configuration+0x1a87/0x2110
[ 2382.195102][   T31]  usb_generic_driver_probe+0x8d/0x150
[ 2382.200982][   T31]  usb_probe_device+0x1c4/0x3b0
[ 2382.205869][   T31]  ? __pfx_usb_probe_device+0x10/0x10
[ 2382.211509][   T31]  really_probe+0x267/0xaf0
[ 2382.216045][   T31]  __driver_probe_device+0x18c/0x320
[ 2382.221531][   T31]  driver_probe_device+0x4f/0x240
[ 2382.226586][   T31]  __device_attach_driver+0x279/0x430
[ 2382.232244][   T31]  bus_for_each_drv+0x258/0x2f0
[ 2382.240520][   T31]  ? __pfx___device_attach_driver+0x10/0x10
[ 2382.246498][   T31]  ? __pfx_bus_for_each_drv+0x10/0x10
[ 2382.252827][   T31]  ? lockdep_hardirqs_on+0x7a/0x110
[ 2382.258189][   T31]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 2382.264147][   T31]  __device_attach+0x2c5/0x450
[ 2382.269172][   T31]  ? __pfx___device_attach+0x10/0x10
[ 2382.274488][   T31]  ? _raw_spin_unlock+0x28/0x50
[ 2382.279947][   T31]  device_initial_probe+0xa1/0xd0
[ 2382.285093][   T31]  bus_probe_device+0x12a/0x220
[ 2382.290194][   T31]  ? device_add+0x726/0xb70
[ 2382.294762][   T31]  device_add+0x7b6/0xb70
[ 2382.299209][   T31]  usb_new_device+0xa08/0x16f0
[ 2382.303998][   T31]  ? __pfx_usb_new_device+0x10/0x10
[ 2382.309682][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 2382.314985][   T31]  hub_event+0x2a1c/0x4f30
[ 2382.319554][   T31]  ? __pfx_hub_event+0x10/0x10
[ 2382.324339][   T31]  ? process_scheduled_works+0xa0f/0x17a0
[ 2382.331203][   T31]  ? process_scheduled_works+0xa0f/0x17a0
[ 2382.336959][   T31]  ? process_scheduled_works+0xa0f/0x17a0
[ 2382.344099][   T31]  process_scheduled_works+0xaec/0x17a0
[ 2382.353214][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[ 2382.361803][   T31]  ? do_raw_spin_lock+0x12b/0x2f0
[ 2382.366875][   T31]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 2382.372408][   T31]  ? schedule+0x90/0x360
[ 2382.376674][   T31]  worker_thread+0xda6/0x1360
[ 2382.381515][   T31]  kthread+0x726/0x8b0
[ 2382.385602][   T31]  ? __pfx_worker_thread+0x10/0x10
[ 2382.390856][   T31]  ? __pfx_kthread+0x10/0x10
[ 2382.395495][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 2382.401034][   T31]  ? __pfx_kthread+0x10/0x10
[ 2382.405652][   T31]  ret_from_fork+0x51b/0xa40
[ 2382.410394][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 2382.415557][   T31]  ? __switch_to+0xc82/0x1410
[ 2382.420533][   T31]  ? __pfx_kthread+0x10/0x10
[ 2382.425145][   T31]  ret_from_fork_asm+0x1a/0x30
[ 2382.430089][   T31]  </TASK>
[ 2382.433260][   T31] 
[ 2382.433260][   T31] Showing all locks held in the system:
[ 2382.443900][   T31] 1 lock held by khungtaskd/31:
[ 2382.455417][   T31]  #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 2382.477988][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2382.498149][   T31] 2 locks held by getty/5586:
[ 2382.502866][   T31]  #0: ffff8880306fd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 2382.512808][   T31]  #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0
[ 2382.523290][   T31] 5 locks held by kworker/1:10/8374:
[ 2382.529091][   T31]  #0: ffff88801fee7548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0
[ 2382.540810][   T31]  #1: ffffc90004edfbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0
[ 2382.553022][   T31]  #2: ffff888144332198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30
[ 2382.562991][   T31]  #3: ffff8880570d8198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450
[ 2382.572434][   T31]  #4: ffff88802a774160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450
[ 2382.581946][   T31] 4 locks held by kworker/u8:12/12143:
[ 2382.587455][   T31] 4 locks held by udevd/25584:
[ 2382.592361][   T31]  #0: ffff88806afb3b08 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10
[ 2382.601251][   T31]  #1: ffff8880a2994888 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420
[ 2382.610831][   T31]  #2: ffff8880716cac38 (kn->active#26){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420
[ 2382.620811][   T31]  #3: ffff8880570d8198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0
[ 2382.630787][   T31] 1 lock held by syz.3.9765/8882:
[ 2382.635828][   T31]  #0: ffffffff8f338868 (adutux_mutex){+.+.}-{4:4}, at: adu_release+0xbc/0x940
[ 2382.645482][   T31] 
[ 2382.648008][   T31] =============================================
[ 2382.648008][   T31] 
[ 2382.656437][   T31] NMI backtrace for cpu 0
[ 2382.656459][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2382.656484][   T31] Tainted: [L]=SOFTLOCKUP
[ 2382.656491][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 2382.656502][   T31] Call Trace:
[ 2382.656511][   T31]  <TASK>
[ 2382.656521][   T31]  dump_stack_lvl+0xe8/0x150
[ 2382.656549][   T31]  nmi_cpu_backtrace+0x274/0x2d0
[ 2382.656573][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 2382.656605][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[ 2382.656630][   T31]  sys_info+0x135/0x170
[ 2382.656650][   T31]  watchdog+0xf90/0xfe0
[ 2382.656673][   T31]  ? watchdog+0x209/0xfe0
[ 2382.656697][   T31]  kthread+0x726/0x8b0
[ 2382.656720][   T31]  ? __pfx_watchdog+0x10/0x10
[ 2382.656738][   T31]  ? __pfx_kthread+0x10/0x10
[ 2382.656759][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 2382.656783][   T31]  ? __pfx_kthread+0x10/0x10
[ 2382.656803][   T31]  ret_from_fork+0x51b/0xa40
[ 2382.656830][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 2382.656851][   T31]  ? __switch_to+0xc82/0x1410
[ 2382.656877][   T31]  ? __pfx_kthread+0x10/0x10
[ 2382.656897][   T31]  ret_from_fork_asm+0x1a/0x30
[ 2382.656931][   T31]  </TASK>
[ 2382.656938][   T31] Sending NMI from CPU 0 to CPUs 1:
[ 2382.786302][    C1] NMI backtrace for cpu 1
[ 2382.786320][    C1] CPU: 1 UID: 0 PID: 5200 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2382.786342][    C1] Tainted: [L]=SOFTLOCKUP
[ 2382.786348][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 2382.786358][    C1] RIP: 0010:__do_wait+0x607/0x740
[ 2382.786381][    C1] Code: f6 e8 4d 08 3e 00 4d 85 f6 74 07 e8 03 04 3e 00 eb 3e 48 83 c3 04 48 89 d8 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 b8 00 00 00 <8b> 1b 89 de 83 e6 01 31 ff e8 1b 08 3e 00 83 e3 01 75 0e e8 d1 03
[ 2382.786394][    C1] RSP: 0000:ffffc90004e4fb78 EFLAGS: 00000246
[ 2382.786408][    C1] RAX: 0000000000000000 RBX: ffffc90004e4fc84 RCX: 0000000000000000
[ 2382.786419][    C1] RDX: ffff88802966bd00 RSI: 0000000000000000 RDI: 0000000000000000
[ 2382.786428][    C1] RBP: ffff88802966c358 R08: ffffffff8e20c043 R09: 1ffffffff1c41808
[ 2382.786440][    C1] R10: dffffc0000000000 R11: fffffbfff1c41809 R12: dffffc0000000000
[ 2382.786452][    C1] R13: ffff88802d952450 R14: 0000000000000000 R15: 1ffff920009c9f90
[ 2382.786462][    C1] FS:  0000000000000000(0000) GS:ffff8881257f5000(0063) knlGS:0000000057afc480
[ 2382.786475][    C1] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[ 2382.786486][    C1] CR2: 00000000f73d1208 CR3: 000000007d808000 CR4: 00000000003526f0
[ 2382.786500][    C1] DR0: 0000000000000003 DR1: 00000000000001f8 DR2: 000000000000008e
[ 2382.786509][    C1] DR3: 000000000000057a DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 2382.786520][    C1] Call Trace:
[ 2382.786526][    C1]  <TASK>
[ 2382.786537][    C1]  do_wait+0x1e7/0x4f0
[ 2382.786555][    C1]  ? do_wait+0x17d/0x4f0
[ 2382.786573][    C1]  kernel_wait4+0x232/0x2b0
[ 2382.786592][    C1]  ? __pfx_kernel_wait4+0x10/0x10
[ 2382.786611][    C1]  ? __pfx_child_wait_callback+0x10/0x10
[ 2382.786631][    C1]  ? hrtimer_nanosleep+0x2c5/0x390
[ 2382.786649][    C1]  __ia32_compat_sys_wait4+0x165/0x230
[ 2382.786666][    C1]  ? __pfx_hrtimer_wakeup+0x10/0x10
[ 2382.786682][    C1]  ? __pfx___ia32_compat_sys_wait4+0x10/0x10
[ 2382.786707][    C1]  ? rcu_is_watching+0x15/0xb0
[ 2382.786723][    C1]  ? asm_int80_emulation+0x1a/0x20
[ 2382.786739][    C1]  ? asm_int80_emulation+0x1a/0x20
[ 2382.786753][    C1]  do_int80_emulation+0x111/0x400
[ 2382.786775][    C1]  ? clear_bhb_loop+0x60/0xb0
[ 2382.786789][    C1]  ? clear_bhb_loop+0x60/0xb0
[ 2382.786805][    C1]  asm_int80_emulation+0x1a/0x20
[ 2382.786819][    C1] RIP: 0023:0xf715572b
[ 2382.786831][    C1] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[ 2382.786844][    C1] RSP: 002b:00000000f753fc6c EFLAGS: 00000246 ORIG_RAX: 0000000000000072
[ 2382.786861][    C1] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00000000f753fe08
[ 2382.786872][    C1] RDX: 0000000040000001 RSI: 0000000000000000 RDI: 0000000000000000
[ 2382.786881][    C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2382.786890][    C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2382.786899][    C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2382.786916][    C1]  </TASK>
[ 2383.093312][ T3273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2383.111186][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[ 2383.118072][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2383.128933][   T31] Tainted: [L]=SOFTLOCKUP
[ 2383.133270][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 2383.143336][   T31] Call Trace:
[ 2383.146629][   T31]  <TASK>
[ 2383.149577][   T31]  vpanic+0x1e0/0x670
[ 2383.153584][   T31]  panic+0xc5/0xd0
[ 2383.157331][   T31]  ? __pfx_panic+0x10/0x10
[ 2383.161770][   T31]  ? preempt_schedule_thunk+0x16/0x30
[ 2383.167620][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[ 2383.173807][   T31]  watchdog+0xfda/0xfe0
[ 2383.178019][   T31]  ? watchdog+0x209/0xfe0
[ 2383.182384][   T31]  kthread+0x726/0x8b0
[ 2383.186481][   T31]  ? __pfx_watchdog+0x10/0x10
[ 2383.191157][   T31]  ? __pfx_kthread+0x10/0x10
[ 2383.195826][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 2383.201050][   T31]  ? __pfx_kthread+0x10/0x10
[ 2383.205640][   T31]  ret_from_fork+0x51b/0xa40
[ 2383.210225][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 2383.215340][   T31]  ? __switch_to+0xc82/0x1410
[ 2383.220020][   T31]  ? __pfx_kthread+0x10/0x10
[ 2383.224615][   T31]  ret_from_fork_asm+0x1a/0x30
[ 2383.229384][   T31]  </TASK>
[ 2383.232859][   T31] Kernel Offset: disabled
[ 2383.238040][   T31] Rebooting in 86400 seconds..