last executing test programs:

36m51.014129689s ago: executing program 0 (id=305):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="54000000010401040000000000000000000000000500010001"], 0x54}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000000010401010000000000000000050000000a"], 0x20}, 0x1, 0x0, 0x0, 0x20048805}, 0x0)

36m50.723668025s ago: executing program 0 (id=307):
socket$packet(0x11, 0x3, 0x300)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10b200, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_usb_connect(0x0, 0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000092e1300833280102d52a0000000109022200010000000009040000000e01000008240301"], 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$sock_int(r5, 0x1, 0x47, 0x0, &(0x7f0000000080))
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000304fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000240012800b00010062726964676500001400028105401900060000000500180001000000"], 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={<r8=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)={r8})
r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="240000001a0001000000000000000000020000fd000000000038000008000100ac1414bb335ad0327172116ae465f27627806ee806ea0ffff3078f8b53652f47381941e902088ceecaa354cf2bfcb86b6860d79c46b7effb53464124844e5adf0813ac8e1965c176d35a425236f78bc6a8891b344657a74539ea2a6c1dabdf725898fae9d6eeb77777f5247980ae29d0077355a2af76e57b79d0b37b8649fc378f5c8368cc6b328a43b564ca1c80fe960ee2ec1fc9"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

36m47.536677786s ago: executing program 0 (id=315):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28)
connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c)
r1 = fcntl$dupfd(r0, 0x406, r0)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
sendmmsg$unix(r1, &(0x7f0000005a40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000e00)="f6debb016479bbdfe28ae6b90bf3259a1d51dd8ad823fd0ccdf24c5797d8d245422324ce052a9fc2a6ad1b627b86486f134c06fbe2bb525de3f57362ff335ee7163a4f532fdae30bcacf3657474467a49c3530dbdc6a02105000b9a0adbddc1d97bc88ba619b2fcf5666c29354bd452fdf3b17502cba980410889b48e6c29da4fc330792086c4ce0857bb303e68aeca8c50f7024a86a2ada3d1ac268efcd305f2b01da5e9cb6d12d76f406f5a0f6ba00aa071f6394fe7ebac06e282b12916597a5d44015e6c6b4183989d085a8f0f4aaed0bb8bc30235b1ab87d3b9511a46d04f1c191b4e068d8799b6c6aeb72bc6cf568b66e6a1f45d26fd548f098ac43fe232903b277ebf82b7ed57dc200af6b20ced93886c2b8e027894a123a8737b0a6553b890bbbdc0e1e1853adda2eb2de137c80308d44d2f04c9772c0316689f9524b645296e3f675080a707d067ce35030a4419e1434527dda4910ca88f3f112dcf025c94ded3b4b3dcb35a020fefba1cf75cbc14fbbd876c30bacd7e290b1d025c1ba56c5cf637e3a02f35e77e4c32edd8362487211257f2a2af803746cfc4baba95b666ee1810f614686a46844e127046c8ee162a2f9205b3b0987f8aef17fc7ff50b4b6fc2fbfbc8000e0e3569718bac09afb166d1bfa3abf104b35aa8aaba0a7b065aa8a1d70afd07d4c41c22a9015c7e4e06c5fe2264526c47c19ab74b52ca94d43c315fb7b959c5d3f81a80f1a0d9933903e5b1ad449ff351d0426db0876082c148a3f4352f6692973ff3c87edf4a4b1597b8502933e05d03603bf8f438aa2c6cb27b07c363cc0777be366ae5e9d433ad8742ee8326bfd22152f52ae4f882783fca079ae0d5cbcd3f78494e716acfa420354261138570bbe82f8b8d6cde71199ef8f55e6783869b9c7395e16fa3f390dc152a78ab6db1ef767c076172216f4bdb29ca1ec098af5f92e5abcb163ef48de8b414a4c841fb24640451602bd459c29169bc33d28efb2a2cb1b4c6c37afa73a6805e3b6c7c3cc099b29ca1834bcb7f3a18e1ed968dabf3ac34e1b34765465b7208a52f4484aeceb40b5308f5bf040c9be3f0816b453bc1bca72baa12fb6d7b16da757147a36550a856a943a74b2b36e73a62421cfec838905a2ad17cfb36314e5d0bb629e6daee690c7d163a62ad0c7430d5beddb0cda713b21767cfc38f359343546f54fa61208681490a9ac82c746ec50602713b0417ae515debece1d625f09bf595ad596a7cf0e7ebb448d6ce7834ebe31352f51abb998b0aa96ea4a6842263461453310ab29ea2ec2576845958ba4a5491d93c14c9cfee4a4c748c65792d1e6ee1fc6529bbf82224bce8d5415112c797d958a4f5553673e40b7d133105d79d2743900349c89855ccc1d92f96afdff376961f1c9b72b8080edf8f6b71fff66b3b49e0492d3c3af304a66e01fafcb26020b62568ed1915385965894c77f212b61392872ef5d441379643a692e068b6869d616d0fa3636eedb01acf5344daf84e0c11f5c8ffdcebeb02c58b77764c8bf6fee2b116eeafb2752f262786e0fb134a3f0823301d0578ae6952ba9a585371c4a31c28beb03518a1123abb745b55885486a347013e65e7e0bf0e734d74976ea4902ab513fecd98fccb8e023941e40fed3c1c4733422e2bc5840ed218d113369d6b09882f387260d50dc21f5ac807b00d28d7b8891e461cb5092f34f704954334b94fc7b832692431609627a88961866538ab6ed950ed74b1f150e9fe3cc00edceb9ec7269ed64c2e372c65ccb062b50a7c21f3d10c11eebf7980f0fea74d19b089fbe29f98b021d6be1ae5628fe3a0d704e908209d511d66987549e30f196bdee9f62182492285f60e59ce910686f914b1f9eda9d04d25fb8f43669ac28ef3da3b929fa1cc9c11dd9e5a3ac1d2f855312643676fe592bb058e14d52b937cef03dbaa4d6ef1c9bca4587c5e28057f2de745fabf8e0f688bc1e4c975d6bb429feaa6a3a21f49cec012b23c09b97ec2f46a556a1076b037bb441c8", 0x59c}], 0x1, 0x0, 0x0, 0x811}}], 0x1, 0x4880)
setsockopt$inet6_tcp_int(r1, 0x6, 0x1, &(0x7f0000000000)=0x82b, 0x4)

36m47.414820359s ago: executing program 0 (id=316):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

36m46.282825898s ago: executing program 0 (id=319):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x3)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)

36m45.849154268s ago: executing program 0 (id=321):
socket$inet(0x2, 0x1, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0)
fcntl$setlease(r3, 0x400, 0x1)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000ffffffff0080000008000000", @ANYRES32, @ANYBLOB="0000000000000000000000f20000000000000000edfdf5449708d1798b990e1e1de3e2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00200000000000000400"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x69}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(r3)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x6, 0x0, 0x0, 0x2, 0x0, 0x4c6c}, 0x0)
r5 = socket(0x10, 0x2, 0x0)
write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})
syz_emit_ethernet(0x46, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaa0d953d48b692fca85d8daaaabbbbbbbbbbbb86dd6000000000102b00ff020000000002000009000000000001fe8000000000000000000000000000aa3b0000000010"], 0x0)
r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$SG_IO(r7, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0})
r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r9 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42)
ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f0000001ac0)={r8, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}})
ioctl$LOOP_SET_STATUS64(r9, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ac, 0x0, 0x1, 0x15, 0x0, "89753015418ab0cb0900245518580ce0c8bf604cca41f31c108938fcfa393ef569e0bcf244bb4b23555b130900000000000000d0f08e8ad896ba67a07673defa", "8b609009aaa722681a1e2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fee40080000027cc7d24fdc26f1a95d702020000e4b8fb1703e47463b969e4", "ca1bf5ffffffffffffff6570128218a0d22915ff6eddb10000800400", [0xc]})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r10=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r10, 0x1, 0x6, @broadcast}, 0x8)
keyctl$set_reqkey_keyring(0xe, 0x0)

36m45.516647204s ago: executing program 32 (id=321):
socket$inet(0x2, 0x1, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0)
fcntl$setlease(r3, 0x400, 0x1)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000ffffffff0080000008000000", @ANYRES32, @ANYBLOB="0000000000000000000000f20000000000000000edfdf5449708d1798b990e1e1de3e2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00200000000000000400"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x69}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(r3)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x6, 0x0, 0x0, 0x2, 0x0, 0x4c6c}, 0x0)
r5 = socket(0x10, 0x2, 0x0)
write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})
syz_emit_ethernet(0x46, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaa0d953d48b692fca85d8daaaabbbbbbbbbbbb86dd6000000000102b00ff020000000002000009000000000001fe8000000000000000000000000000aa3b0000000010"], 0x0)
r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$SG_IO(r7, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0})
r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r9 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42)
ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f0000001ac0)={r8, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}})
ioctl$LOOP_SET_STATUS64(r9, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ac, 0x0, 0x1, 0x15, 0x0, "89753015418ab0cb0900245518580ce0c8bf604cca41f31c108938fcfa393ef569e0bcf244bb4b23555b130900000000000000d0f08e8ad896ba67a07673defa", "8b609009aaa722681a1e2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fee40080000027cc7d24fdc26f1a95d702020000e4b8fb1703e47463b969e4", "ca1bf5ffffffffffffff6570128218a0d22915ff6eddb10000800400", [0xc]})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r10=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r10, 0x1, 0x6, @broadcast}, 0x8)
keyctl$set_reqkey_keyring(0xe, 0x0)

10.345555796s ago: executing program 2 (id=7157):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, 0x40010, r1, 0x6c870000)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
unlink(&(0x7f0000000140)='./cgroup\x00')
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000000500f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a", 0xbd}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800)
r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x46001)
ioctl$USBDEVFS_FREE_STREAMS(r4, 0x802c550a, &(0x7f0000000000)=ANY=[])
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$lock(r5, 0x5, &(0x7f00000031c0)={0x1, 0x0, 0x8000, 0xfffffffe})
setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0x8, 0x3e, 0x9, 0xec, 0xa0, 0x4, 0x1, 0x0, 0x3, 0x6, 0x1}, 0xe)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r6=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e1f, @local}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000180)={r6, 0x417}, &(0x7f0000000240)=0x8)
execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400)
syz_open_dev$vim2m(&(0x7f0000000180), 0x2, 0x2)
ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0f8565c, &(0x7f0000001640)={0x80000001, 0x3, 0x1, {0x6, @pix_mp={0x7ff, 0x6, 0x38415262, 0x3, 0x7, [{0x4, 0x5}, {0x1, 0x9}, {0x1, 0x1}, {0x7b, 0x1}, {0x5}, {0xfffffff7, 0xffffe91b}, {0x9d2b, 0x4}, {0xf7, 0x4}], 0x8, 0xd1, 0x8}}, 0x2aef6})

9.962700196s ago: executing program 1 (id=7158):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0xc0, &(0x7f0000000100)=0x27, 0x0, 0x4)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000040)={0x1, 'veth0_vlan\x00'}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private=0xffffffff}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x14, 0x0, 0x7, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=@newsa={0x194, 0x10, 0x1, 0x70bd2b, 0x0, {{@in=@broadcast, @in=@private, 0x0, 0xecdf, 0x4e22}, {@in=@multicast1, 0x4d5, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x400800, 0x0, 0x2}, {0x1000}, 0x0, 0x3507, 0x2, 0x4, 0x0, 0x7d}, [@algo_crypt={0x58, 0x2, {{'cbc(aes)\x00'}, 0x80, "e0fad3f10cd3a506627800000000074f"}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x40}}]}, 0x194}}, 0x4050)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000040000100feffffffffdbdf25017c000004004280"], 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x800c010)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000300)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2a}}}}, 0x90)
fsopen(&(0x7f0000000040)='tracefs\x00', 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20)

8.179464473s ago: executing program 1 (id=7163):
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={<r1=>0x0, 0x2, 0x20}, &(0x7f0000000340)=0xc)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000200)={r1, 0x7}, 0x8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1004000, 0x0, 0xb49, 0xfffffffffffffffb, 0x6, 0x0, 0x3}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r4, 0x0, 0x0, 0x34000811)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, 0x0, &(0x7f00000001c0))
ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000240)={"37b67071", 0x243, 0x6, 0xe6, 0x8000, 0x3, "c438bb4038b279f8be6b008d1ca10d", "e61e0287", "fdee9896", "52b6afab", ["89727e1229a1c6e34dbaef76", "42120bb93018001fbbec932f", "430da04d0d1cea773e6d1802", "6aa21958e6d1669b3fe57e6b"]})
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x2)
r5 = memfd_secret(0x80000)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r5, 0x29, 0x41, &(0x7f0000000400)=ANY=[@ANYBLOB="6d616e676c65000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000004000"/84], 0x54)
r6 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, "000064640000001503fe00", '\x00', "0f00", "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386afe0374831c1f9", "cf6cce2296b3f853e224c4e0"]})
ioctl$CEC_TRANSMIT(r6, 0xc0386105, &(0x7f0000000480)={0x5, 0xfffffffffffffffe, 0x7, 0x0, 0x0, 0x0, "0ff8000000000000c5c6ff0717c3a86d", 0x0, 0x2, 0x0, 0x6, 0x0, 0x5, 0xff})
socket$alg(0x26, 0x5, 0x0)
r7 = socket(0x10, 0x3, 0x4)
sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@gettaction={0x148, 0x32, 0xa00, 0x70bd2c, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}, {0xc, 0x22, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x4}, @action_gd=@TCA_ACT_TAB={0x94, 0x1, [{0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x14, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x14, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0x148}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20051}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x6}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x8f}]}}}]}, 0x44}}, 0x0)

8.049636746s ago: executing program 3 (id=7164):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0)
r2 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x50, 0x0, 0x0)
ioctl$TIOCMGET(0xffffffffffffffff, 0x541e, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xe, 0x1, 'statistic\x00'}, @NFTA_MATCH_INFO={0x1c, 0x3, "4cb4fc4ba7906e8f58c2052fade1bc2c62cdeb7521cf85ee"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa0}}, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, 0x0)
r5 = epoll_create(0x101)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)={0x40000014})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r7, 0x0, 0xc8, 0x0, 0x0)
ioctl$BTRFS_IOC_SPACE_INFO(r6, 0x540b, 0x0)
rt_sigqueueinfo(0x0, 0xe, &(0x7f00000004c0)={0x22, 0x6, 0x7})
syz_clone3(&(0x7f0000000740)={0x100010000, &(0x7f0000000180), &(0x7f0000000240)=<r8=>0x0, &(0x7f0000000280), {0x15}, &(0x7f0000000540)=""/198, 0xc6, &(0x7f0000000640)=""/220, &(0x7f0000000380)=[0xffffffffffffffff], 0x1}, 0x58)
sched_getattr(r8, &(0x7f0000000480)={0x38}, 0x38, 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRESOCT, @ANYRESDEC=0x0, @ANYRESDEC=0x0])
fsopen(&(0x7f0000000000)='autofs\x00', 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000000101010200000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x8000850}, 0x0)

7.927898114s ago: executing program 2 (id=7165):
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f00000000c0)=0x40)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000b259a3d995eff32d971600000d0a010200000000000000000a0000000900010073797a3100001900"], 0x20}, 0x1, 0x0, 0x0, 0x16}, 0x4005)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000680)={'bridge0\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r7, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e00030000000300000005000700"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@getstats={0x1c, 0x5e, 0x100, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r7}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xcc93f1266b77d0bf}, 0x9040)
r8 = openat$sequencer(0xffffff9c, &(0x7f0000000000), 0x201, 0x0)
sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)={0x28, r0, 0x100, 0x50bd2a, 0x25dfdbf8, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xc9c1, 0x4c}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0)
syz_usb_control_io$hid(r9, 0x0, 0x0)
syz_usb_control_io$hid(r9, &(0x7f0000000040)={0x14, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x2, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0)
syz_usb_control_io(r9, 0x0, &(0x7f0000000e40)={0x44, &(0x7f0000000900)={0x20, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r10 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r10, 0xc018480b, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x20000)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={0x0, 0x0, <r11=>0xffffffffffffffff})
r12 = syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000)
syz_usb_ep_write(r9, 0xe, 0x40, &(0x7f0000000440)="8cd2a0baebe3eb51d9fef4242be77f081f8158b2384d8b0bbe6910087b199724ab452ab6b85af9597f33906c2e14ba2a9b8bfe13573feb7477c5c61e3ae78e6d")
ioctl$VIDIOC_S_FMT(r12, 0xc0cc5605, &(0x7f00000025c0)={0x2, @pix={0x85, 0x2, 0x35315241, 0x1, 0x80000200, 0x0, 0x3, 0xa, 0x0, 0x7, 0x1, 0x7}})
mmap$panthor(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000004, 0x12, r11, 0xc0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r8, 0x40085112, &(0x7f0000000080)=@l={0x92, 0x3, 0xc0, 0x4, 0x7f, 0x4, 0xfff7})
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r13=>0x0})
faccessat(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x50)
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r12, @ANYRES16=r0, @ANYRES8=0x0, @ANYRES8=r13, @ANYRES32=r12], 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x44000)

6.87801821s ago: executing program 5 (id=7167):
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={<r1=>0x0, 0x2, 0x20}, &(0x7f0000000340)=0xc)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000200)={r1, 0x7}, 0x8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1004000, 0x0, 0xb49, 0xfffffffffffffffb, 0x6, 0x0, 0x3}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r4, 0x0, 0x0, 0x34000811)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, 0x0, &(0x7f00000001c0))
ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000240)={"37b67071", 0x243, 0x6, 0xe6, 0x8000, 0x3, "c438bb4038b279f8be6b008d1ca10d", "e61e0287", "fdee9896", "52b6afab", ["89727e1229a1c6e34dbaef76", "42120bb93018001fbbec932f", "430da04d0d1cea773e6d1802", "6aa21958e6d1669b3fe57e6b"]})
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x2)
r5 = memfd_secret(0x80000)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r5, 0x29, 0x41, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x54)
r6 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, "000064640000001503fe00", '\x00', "0f00", "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386afe0374831c1f9", "cf6cce2296b3f853e224c4e0"]})
ioctl$CEC_TRANSMIT(r6, 0xc0386105, &(0x7f0000000480)={0x5, 0xfffffffffffffffe, 0x7, 0x0, 0x0, 0x0, "0ff8000000000000c5c6ff0717c3a86d", 0x0, 0x2, 0x0, 0x6, 0x0, 0x5, 0xff})
r7 = socket$alg(0x26, 0x5, 0x0)
r8 = socket(0x10, 0x3, 0x4)
sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@gettaction={0x14, 0x32, 0xa00, 0x70bd2c, 0x25dfdbfc}, 0x14}}, 0x0)
bind$alg(r7, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
sendmsg$nl_route(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20051}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x6}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x8f}]}}}]}, 0x44}}, 0x0)

6.64913721s ago: executing program 1 (id=7168):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0xc0, &(0x7f0000000100)=0x27, 0x0, 0x4)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000040)={0x1, 'veth0_vlan\x00'}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private=0xffffffff}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x14, 0x0, 0x7, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=@newsa={0x194, 0x10, 0x1, 0x70bd2b, 0x0, {{@in=@broadcast, @in=@private, 0x0, 0xecdf, 0x4e22}, {@in=@multicast1, 0x4d5, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x400800, 0x0, 0x2}, {0x1000}, 0x0, 0x3507, 0x2, 0x4, 0x0, 0x7d}, [@algo_crypt={0x58, 0x2, {{'cbc(aes)\x00'}, 0x80, "e0fad3f10cd3a506627800000000074f"}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x40}}]}, 0x194}}, 0x4050)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000040000100feffffffffdbdf25017c000004004280"], 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x800c010)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000300)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2a}}}}, 0x90)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000), 0x13f}}, 0x20)
fsopen(&(0x7f0000000040)='tracefs\x00', 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20)

6.3211069s ago: executing program 3 (id=7169):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0)
preadv(r3, 0x0, 0x0, 0xf2, 0x207fff)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0)
r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
keyctl$setperm(0x5, r4, 0x82004)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001140), 0x0)
keyctl$read(0xb, r4, 0x0, 0x0)
r5 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x0)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f00000000c0)={0x100, 0x0, 0x0, 0x5, 0x4})
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f0000000040)={0x4, 0x0, 0x0, 0xb, 0x4})
sendto$inet6(r0, &(0x7f0000000180), 0x0, 0x800, &(0x7f0000000480)={0xa, 0x4e23, 0x20000000, @loopback}, 0x1c)

5.559781284s ago: executing program 5 (id=7170):
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={<r1=>0x0, 0x2, 0x20}, &(0x7f0000000340)=0xc)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000200)={r1, 0x7}, 0x8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1004000, 0x0, 0xb49, 0xfffffffffffffffb, 0x6, 0x0, 0x3}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r4, 0x0, 0x0, 0x34000811)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, 0x0, &(0x7f00000001c0))
ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000240)={"37b67071", 0x243, 0x6, 0xe6, 0x8000, 0x3, "c438bb4038b279f8be6b008d1ca10d", "e61e0287", "fdee9896", "52b6afab", ["89727e1229a1c6e34dbaef76", "42120bb93018001fbbec932f", "430da04d0d1cea773e6d1802", "6aa21958e6d1669b3fe57e6b"]})
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x2)
r5 = memfd_secret(0x80000)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r5, 0x29, 0x41, &(0x7f0000000400)=ANY=[@ANYBLOB="6d616e676c65000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000004000"/84], 0x54)
r6 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, "000064640000001503fe00", '\x00', "0f00", "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386afe0374831c1f9", "cf6cce2296b3f853e224c4e0"]})
ioctl$CEC_TRANSMIT(r6, 0xc0386105, &(0x7f0000000480)={0x5, 0xfffffffffffffffe, 0x7, 0x0, 0x0, 0x0, "0ff8000000000000c5c6ff0717c3a86d", 0x0, 0x2, 0x0, 0x6, 0x0, 0x5, 0xff})
socket$alg(0x26, 0x5, 0x0)
r7 = socket(0x10, 0x3, 0x4)
sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@gettaction={0x160, 0x32, 0xa00, 0x70bd2c, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}, {0xc, 0x22, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x4}, @action_gd=@TCA_ACT_TAB={0x94, 0x1, [{0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x14, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x14, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_gd=@TCA_ACT_TAB={0x24, 0x1, [{0x14, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0x160}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20051}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x6}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x8f}]}}}]}, 0x44}}, 0x0)

5.193520445s ago: executing program 1 (id=7171):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0xc0, &(0x7f0000000100)=0x27, 0x0, 0x4)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000040)={0x1, 'veth0_vlan\x00'}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private=0xffffffff}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x14, 0x0, 0x7, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=@newsa={0x194, 0x10, 0x1, 0x70bd2b, 0x0, {{@in=@broadcast, @in=@private, 0x0, 0xecdf, 0x4e22}, {@in=@multicast1, 0x4d5, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x400800, 0x0, 0x2}, {0x1000}, 0x0, 0x3507, 0x2, 0x4, 0x0, 0x7d}, [@algo_crypt={0x58, 0x2, {{'cbc(aes)\x00'}, 0x80, "e0fad3f10cd3a506627800000000074f"}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x40}}]}, 0x194}}, 0x4050)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000040000100feffffffffdbdf25017c000004004280"], 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x800c010)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000300)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2a}}}}, 0x90)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000), 0x13f}}, 0x20)
fsopen(&(0x7f0000000040)='tracefs\x00', 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20)

4.401797152s ago: executing program 2 (id=7172):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xae}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4844}, 0x4048091)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
io_uring_setup(0x7244, &(0x7f0000000100)={0x0, 0x5525, 0x0, 0x0, 0x118})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000845, 0x0, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r10, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x45, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="14002c8008"], 0x30}}, 0x22000000)

4.004910999s ago: executing program 3 (id=7173):
r0 = socket$alg(0x26, 0x5, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{0xffffffffffffffff, <r1=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pK    \x00'}, 0x1c)
fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, <r2=>0x0})
sched_setattr(r2, &(0x7f0000000140)={0x38, 0x0, 0x10000001, 0x0, 0x4, 0x2, 0x6, 0x100000000, 0x6}, 0x0)
fcntl$lock(r0, 0x24, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x4e0, r2})
bind$alg(r0, &(0x7f0000001100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r0, 0x0, 0x0, 0x80800)
sendmmsg$alg(r3, &(0x7f0000000380)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000000c0)=""/22, 0x16}], 0x1}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r5 = dup(r4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x38011, r5, 0x0)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r6, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}])
sync()

3.990932048s ago: executing program 4 (id=7174):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="14002c8008"], 0x30}}, 0x22000000) (fail_nth: 4)

3.738120446s ago: executing program 5 (id=7175):
r0 = socket$inet6(0xa, 0x2, 0x0)
close(0x3)
socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4)
sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0xa, 0x1, 0x8ff00, @empty, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=[@hopopts_2292={{0x18, 0x29, 0x36, {0x4}}}], 0x18}, 0x1400c0c0)

3.339188255s ago: executing program 1 (id=7176):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0xc0, &(0x7f0000000100)=0x27, 0x0, 0x4)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000040)={0x1, 'veth0_vlan\x00'}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x200000000000011, 0x2, 0x0)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private=0xffffffff}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x14, 0x0, 0x7, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=@newsa={0x194, 0x10, 0x1, 0x70bd2b, 0x0, {{@in=@broadcast, @in=@private, 0x0, 0xecdf, 0x4e22}, {@in=@multicast1, 0x4d5, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x400800, 0x0, 0x2}, {0x1000}, 0x0, 0x3507, 0x2, 0x4, 0x0, 0x7d}, [@algo_crypt={0x58, 0x2, {{'cbc(aes)\x00'}, 0x80, "e0fad3f10cd3a506627800000000074f"}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x40}}]}, 0x194}}, 0x4050)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000040000100feffffffffdbdf25017c000004004280"], 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x800c010)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000300)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2a}}}}, 0x90)
fsopen(&(0x7f0000000040)='tracefs\x00', 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20)

3.339003221s ago: executing program 4 (id=7177):
r0 = socket$inet6(0xa, 0x800, 0x0)
close(0x3)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, 0x0, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
r2 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x84102)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f0000000140)={{0x2, 0x6}, {0xff, 0x1}, 0x8, 0x6, 0x9})
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4)
sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0xa, 0x1, 0x80000, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1400000029cb9236b15e3e5f74baae00e3d7a77f4c00003600"], 0x14}, 0x1400c0c0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002, 0xfffffffa, @rand_addr, 0x5}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, &(0x7f0000000080)='D', 0x1, 0x404c814, 0x0, 0x0)
splice(r4, 0x0, r3, 0x0, 0x1, 0x0)
ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f00000001c0)=""/66)

3.250231849s ago: executing program 2 (id=7178):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x18, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfb61cb0106df6c98}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x411, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0)

3.181832973s ago: executing program 5 (id=7179):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x358, 0xffffffff, 0x398, 0xe8, 0x398, 0xfeffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xff000000, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa4, 0xe4}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0xa4, 0xe4}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x1, {0x2000010}}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3b4)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r3, &(0x7f0000000140), &(0x7f0000000240)=""/154}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r4, @ANYBLOB="08002600851600000a00180000000000000000001c005a80"], 0x4c}, 0x1, 0x0, 0x0, 0x2004}, 0x0)

2.365642474s ago: executing program 3 (id=7180):
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={<r1=>0x0, 0x2, 0x20}, &(0x7f0000000340)=0xc)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000200)={r1, 0x7}, 0x8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1004000, 0x0, 0xb49, 0xfffffffffffffffb, 0x6, 0x0, 0x3}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r4, 0x0, 0x0, 0x34000811)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, 0x0, &(0x7f00000001c0))
ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000240)={"37b67071", 0x243, 0x6, 0xe6, 0x8000, 0x3, "c438bb4038b279f8be6b008d1ca10d", "e61e0287", "fdee9896", "52b6afab", ["89727e1229a1c6e34dbaef76", "42120bb93018001fbbec932f", "430da04d0d1cea773e6d1802", "6aa21958e6d1669b3fe57e6b"]})
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x2)
r5 = memfd_secret(0x80000)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r5, 0x29, 0x41, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x54)
r6 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, "000064640000001503fe00", '\x00', "0f00", "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386afe0374831c1f9", "cf6cce2296b3f853e224c4e0"]})
ioctl$CEC_TRANSMIT(r6, 0xc0386105, &(0x7f0000000480)={0x5, 0xfffffffffffffffe, 0x7, 0x0, 0x0, 0x0, "0ff8000000000000c5c6ff0717c3a86d", 0x0, 0x2, 0x0, 0x6, 0x0, 0x5, 0xff})
r7 = socket$alg(0x26, 0x5, 0x0)
r8 = socket(0x10, 0x3, 0x4)
sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@gettaction={0x14, 0x32, 0xa00, 0x70bd2c, 0x25dfdbfc}, 0x14}}, 0x0)
bind$alg(r7, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
sendmsg$nl_route(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20051}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x6}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x8f}]}}}]}, 0x44}}, 0x0)

2.360314364s ago: executing program 4 (id=7181):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0xc0, &(0x7f0000000100)=0x27, 0x0, 0x4)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000040)={0x1, 'veth0_vlan\x00'}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x200000000000011, 0x2, 0x0)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private=0xffffffff}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x14, 0x0, 0x7, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=@newsa={0x194, 0x10, 0x1, 0x70bd2b, 0x0, {{@in=@broadcast, @in=@private, 0x0, 0xecdf, 0x4e22}, {@in=@multicast1, 0x4d5, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x400800, 0x0, 0x2}, {0x1000}, 0x0, 0x3507, 0x2, 0x4, 0x0, 0x7d}, [@algo_crypt={0x58, 0x2, {{'cbc(aes)\x00'}, 0x80, "e0fad3f10cd3a506627800000000074f"}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x40}}]}, 0x194}}, 0x4050)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000040000100feffffffffdbdf25017c000004004280"], 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x800c010)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000), 0x13f}}, 0x20)
fsopen(&(0x7f0000000040)='tracefs\x00', 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20)

1.453559779s ago: executing program 2 (id=7182):
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x2, 0x9, 0x2, 0x3, 0x2, 0x0, 0x70bd2c, 0x25dfdbfd}, 0x10}}, 0x80d0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010e7010000000000000000000000000a20000000000a03000000000000000000070000000c00044000000000000000021c000000090a010400000000000000000700000008000a4000000003"], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000d8425bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="1000000000000000240012800b0001006272696467650000140002800800020006000000080003001700"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}}, 0x4008840)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r2, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x890}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40d0}, 0x40040890)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

1.158011904s ago: executing program 5 (id=7183):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0)
preadv(r3, 0x0, 0x0, 0xf2, 0x207fff)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0)
r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
keyctl$setperm(0x5, r4, 0x82004)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001140), 0x0)
keyctl$read(0xb, r4, 0x0, 0x0)
r5 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x0)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f00000000c0)={0x100, 0x0, 0x0, 0x5, 0x4})
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f0000000040)={0x4, 0x0, 0x0, 0xb, 0x4})
sendto$inet6(r0, &(0x7f0000000180), 0x0, 0x800, &(0x7f0000000480)={0xa, 0x4e23, 0x20000000, @loopback}, 0x1c)

1.145152642s ago: executing program 1 (id=7184):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc0, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x882d, 0x0, 0x0, 0x0, 0x4000000800000, 0x0, 0xf}, {0x0, 0xacb0, 0x400000000, 0x7}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc0}}, 0x0)
timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
timerfd_gettime(0xffffffffffffffff, 0x0)
read(0xffffffffffffffff, &(0x7f0000000380)=""/162, 0xa2)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x2002, 0x0)
ioctl$SOUND_PCM_READ_CHANNELS(r1, 0x80045006, 0x0)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r1, 0x0)
ioctl$SNDCTL_DSP_GETFMTS(r1, 0x8004500b, &(0x7f00000002c0)=0x4)
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r3 = openat$vicodec1(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000001840)=ANY=[@ANYBLOB="84000000040801080000000000000000000000041c00048008000240000006370800014000007fff0800024000000002060002408100000006030240001500000900010073797a3100000000060002404305000006000240001600001c000480d9e722e179e5857e0800014000000ee308000140000003ff0900010073797a3000000018b3c8ec15fdf5249baf2b6e180005f0c0219b86ef509c446ff0c08bb25beb1437b36f4ee63d56122d5bc36a5dbf4ffa245cd088"], 0x84}, 0x1, 0x0, 0x0, 0x4000806}, 0x4080)
ioctl$VIDIOC_PREPARE_BUF(r3, 0xc04c565d, &(0x7f0000000380)=@multiplanar_fd={0x74f, 0x9, 0x4, 0x0, 0x9, {}, {0x1, 0x8, 0x8, 0x7, 0x80, 0x4, "88fc9c43"}, 0x8, 0x4, {0x0}, 0x8})
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000040)={@host})
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io(r4, &(0x7f00000003c0)={0x18, &(0x7f0000000100)=ANY=[@ANYRES8], 0x0, 0x0, 0x0, 0x0}, 0x0)
r5 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x300)
syz_usb_ep_write(r4, 0x81, 0x1, &(0x7f0000000140)='g')
preadv(r5, &(0x7f00000002c0)=[{&(0x7f0000000740)=""/4096, 0x1000}], 0x1, 0x6, 0xc052)
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, &(0x7f0000000000)={&(0x7f0000000540)={{@host=0x10}, {@host=0x10, 0x800}, 0x400, "d49e0b1f09a3e05cb898141464441748655937bb34d22f02362479246bb6372d891a3b5dafa58a6abc5a678d6874fc8fb5f8a529c6e30103484f2667c174fb6cda19ea0a9301bc3238eb816e9c3882f243bcd4bd7115b26dacf5923f060498d471cb4f789562fcda119739dd1a5b0e4e1a4a64dbd7b398bd4e7a247d81f968f2e945f293fc3860bf11f0424193fce743067d27f0ac187b44b128a4999547f73d8c35d3c2bd8b51bbc9a31123f773be89e109cc71b8ec29a539083c0cba15b0899c7181ba154c28b3c4e2ebe360ac44f942a703b9a3a37fbbefe9ae0de04a32336a6eba07b2fb6ad426d56e17291bb1a9d1fcdaa939378bab6dd2eac37b369ef163c9e0fc8039352c24d8147fcc2e2559b47066abd21a3a5f83f239a2227d17d4ca90f60ed9acc243ed38818e3883a985106b54dc157b67022525a74e8f9cb99852760359278d5d22294a70433ba4cec5147fbb09b1d0008ba76257f1c5af6b8d6bf3bcfd5a468a566a4e98fe5f264f2663b72cb421c90d8b7883ddfb5749b27a3e146f9d8538706fea61b07c6e064446337439b9d5a5dc82f6c63c57d6ba0e709b7c1b15fa8367f8e6df2cf59b0b30740ef47c5cccffce5911569591ce4ab62275964cd147e87a30cc6e71f7e40e161997cdbadcfbfb6c54e0289ac137508b7b5339414e4ab7afcc420148e37d49b664cc07c8178a3b50f566c5bdd3aa9217ef909805972bd63ee1d729b282cd866c183744b20da3227f9d43843236b571c8d3237408c266e08d0699ebd30e0820362664ab323b15d3ae9896d6120aae6ef9085f53a2b39cc31238b031476c86e6b16d7703fcbacc7269ce8622eab1cfdf82a364209ec4ac912db924bb76bc35ddf8d0e7a3aff0d08a48c07be47303b59653d9409f14dc59ac33cae5e010466f54d86772e43e3680863bb9bf10c971f16a731e601d7fcdbb91d7146e7834d89059ad522d70398c2bacf113ed791e32f933dfa23f5d6d11bfc9d9e0f04a34b0eddd99d16cd9712485e0a5c9aaf1ebf3f14d00005f8960b6145cbb7d4522692ebe1f9491f87a29ed67c5fb60f5e69bde2a758742999fc986a2dbf6199977e9b446691bf9f95d0abd84557c77ea13356c977d0f098ab9fec85acbd6447f2e6893e2fa6a0a7b272dab66e69b7def48f8b3583a53a0941fb3e4367fa8d56e05ee3b265f17ca0439fcdcea276f7f0a9bf4c2a324d7143658007cf4019e8da69ba1b7dff4383714cbcb71dfe6f1b1ac5d5e99394cb2c360ddb1889d92cd36f8fc72ac865f1c6445957b2a57c1af59ef8d2e9fe328ec2bde763d65c4dea965042f540515bf2f879d1b26309ebc1d7f76c569fa88fbe61845e96e93d3b6025b6285777e59495943596c128fdacc545263ce458bf99f57d7e5dc77f65cf650902b5b6d5af9359334759843365bf0dfb244817a40e8cc9030"}, 0x418, 0x1})
ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r2, 0x7ac, &(0x7f0000000140)={0x0, 0xffffffffffffff60, 0x6})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)=@updpolicy={0xf8, 0x19, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, {0x0, 0x8001, 0x2, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x4, 0x0, 0x1, 0x0, 0x7}]}]}, 0xf8}}, 0x20000000)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
sendto$inet(r6, &(0x7f00000000c0)="b87bfeb1beefefa747abc93bc40502617c6af7ee349b06d43a2647a3a028ddc7a34eb604766eedd77e87af9296048c5c71e33f7414e7900b66841c6269649f758592776ee9204f11a5caa4c6bde6", 0x4e, 0x2004c140, &(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_AUTHENTICATE(r7, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x40894}, 0x48)
syz_emit_ethernet(0x46, &(0x7f0000000040)=ANY=[@ANYBLOB="1f80c20000000180c200000286dd4100000000103afffe800000020000000000000000000000ff0200000012da51038aba00000000010000000000018600907800"/76], 0x0)

1.003842925s ago: executing program 4 (id=7185):
waitid(0x0, 0x0, 0x0, 0xa1000009, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
fremovexattr(r0, &(0x7f00000001c0)=@random={'security.', 'sit\x00'})
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r1, 0xe503, 0x0)
syz_fuse_handle_req(r1, &(0x7f0000004100)="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", 0x2000, &(0x7f0000000080)={&(0x7f0000000100)={0x50, 0x0, 0x87, {0x7, 0x2b, 0x6, 0x48a6040, 0x1, 0xff47, 0x8, 0x5, 0x0, 0x0, 0x80, 0x39bf}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x103)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f00000003c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}})

697.196574ms ago: executing program 2 (id=7186):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0x10000)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000100)=0xa)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f00000000c0)={0x0, 0x2000000, 0x0})
syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="861e0000db168900000904"], 0x0)
ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000000a40)={&(0x7f0000000700)=[{0x5, 0xac39d643e9965aa2, 0x0, 0x0}], 0x1})

669.138853ms ago: executing program 3 (id=7187):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x20000800)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x9c, r1, 0x5, 0x4, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {{{}, {0x1}, @device_b, @broadcast, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x20, 0x2, 0x1, 0x0, {0x6, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1}, 0xb08, 0x2, 0xc0}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x1, 0xf0, 0x8}}, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x8, 0x3, "4ca60225"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x9c}}, 0x0) (fail_nth: 4)

614.066539ms ago: executing program 4 (id=7188):
socket$inet_sctp(0x2, 0x1, 0x84)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)={0x14, 0x26, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000180)=0x84) (async)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000080)={<r1=>0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000180)=0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={r1, 0xd4, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x800, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6b1}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e22, 0x4, @mcast1, 0x8}, @in6={0xa, 0x4e23, 0x4, @private0}, @in6={0xa, 0x4e23, 0x0, @mcast1, 0x7}, @in6={0xa, 0x4e24, 0x0, @mcast1, 0x7}, @in6={0xa, 0x4e21, 0x5, @remote, 0x9c0}, @in6={0xa, 0x4e24, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f0000000380)=0xc) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={r1, 0xd4, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x800, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6b1}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e22, 0x4, @mcast1, 0x8}, @in6={0xa, 0x4e23, 0x4, @private0}, @in6={0xa, 0x4e23, 0x0, @mcast1, 0x7}, @in6={0xa, 0x4e24, 0x0, @mcast1, 0x7}, @in6={0xa, 0x4e21, 0x5, @remote, 0x9c0}, @in6={0xa, 0x4e24, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f0000000380)=0xc)
acct(&(0x7f00000003c0)='./file0\x00')

258.813648ms ago: executing program 3 (id=7189):
syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="21010000db168920402000d92ca9010203010902120001000000000904"], 0x0)
r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003)
ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f0000000700)=[{0x1900, 0xd001, 0x0, 0x0}], 0x1})

209.859438ms ago: executing program 4 (id=7190):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x289, 0x0, 0xb}]})
r4 = socket$netlink(0x10, 0x3, 0x0)
io_uring_setup(0x4f15, &(0x7f0000000280)={0x0, 0x15da, 0x0, 0x3, 0xc8}) (async)
io_uring_setup(0x4f15, &(0x7f0000000280)={0x0, 0x15da, 0x0, 0x3, 0xc8})
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r6=>0x0})
socket(0x10, 0x80002, 0x0) (async)
r7 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d00", @ANYRES16=r7, @ANYRES32=r7], 0x44}}, 0x2000800) (async)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d00", @ANYRES16=r7, @ANYRES32=r7], 0x44}}, 0x2000800)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0) (async)
r8 = fsmount(r0, 0x0, 0x0)
fchdir(r8)
open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000300)={[0x9167, 0x9, 0xa01, 0x6, 0x5, 0x3, 0x3, 0x8, 0x36, 0x26, 0x401, 0x10, 0x7fffffffffffffff, 0x6, 0x7, 0x60d9], 0x3000, 0x1800c0})
sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) (async)
sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0)
r10 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r11=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETGAMMA(r10, 0xc02064a4, &(0x7f0000000140)={r11, 0x0, 0x0, 0x0, 0x0})
r12 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000000)={'wlan0\x00'})
syz_usb_connect(0x0, 0x4f, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000075b21f408680630bf3ca0102030109023de401000000000904", @ANYRES32=r12, @ANYRESDEC=r12, @ANYRESOCT=0x0, @ANYRESOCT], 0x0)
r13 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r13, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r13, 0xc018aa3f, &(0x7f00000000c0))
socket$nl_generic(0x10, 0x3, 0x10)

0s ago: executing program 5 (id=7191):
syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="21010000db168920402000d92ca9010203010902120001000000000904"], 0x0)
r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003)
ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f0000000700)=[{0x1900, 0xac39d643e9965aa2, 0x0, 0x0}], 0x1})

kernel console output (not intermixed with test programs):

r read/8, error -71
[ 2312.564977][ T1415] 8021q: adding VLAN 0 to HW filter on device bond14
[ 2312.588789][T30638] usb 4-1: new high-speed USB device number 98 using dummy_hcd
[ 2312.604295][T13582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2312.628719][T30638] usb 4-1: device descriptor read/8, error -71
[ 2312.642012][ T1418] FAULT_INJECTION: forcing a failure.
[ 2312.642012][ T1418] name failslab, interval 1, probability 0, space 0, times 0
[ 2312.656250][ T1418] CPU: 0 UID: 0 PID: 1418 Comm: syz.5.6946 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2312.656268][ T1418] Tainted: [L]=SOFTLOCKUP
[ 2312.656272][ T1418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 2312.656279][ T1418] Call Trace:
[ 2312.656284][ T1418]  <TASK>
[ 2312.656289][ T1418]  dump_stack_lvl+0xe8/0x150
[ 2312.656308][ T1418]  should_fail_ex+0x412/0x560
[ 2312.656326][ T1418]  should_failslab+0xa8/0x100
[ 2312.656340][ T1418]  kmem_cache_alloc_node_noprof+0x8f/0x690
[ 2312.656357][ T1418]  ? __alloc_skb+0x186/0x7d0
[ 2312.656371][ T1418]  ? __alloc_skb+0x1d0/0x7d0
[ 2312.656384][ T1418]  ? __local_bh_enable_ip+0xd0/0x130
[ 2312.656408][ T1418]  __alloc_skb+0x1d0/0x7d0
[ 2312.656425][ T1418]  netlink_sendmsg+0x5d4/0xb40
[ 2312.656440][ T1418]  ? lockdep_hardirqs_on+0x7a/0x110
[ 2312.656455][ T1418]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2312.656470][ T1418]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 2312.656486][ T1418]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 2312.656497][ T1418]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2312.656510][ T1418]  ____sys_sendmsg+0xa68/0xad0
[ 2312.656524][ T1418]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2312.656536][ T1418]  ? kstrtoull+0x12f/0x1d0
[ 2312.656554][ T1418]  ___sys_sendmsg+0x2a5/0x360
[ 2312.656567][ T1418]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2312.656581][ T1418]  ? get_pid_task+0x20/0x1f0
[ 2312.656597][ T1418]  ? get_pid_task+0x20/0x1f0
[ 2312.656610][ T1418]  ? get_pid_task+0x20/0x1f0
[ 2312.656637][ T1418]  ? __fget_files+0x2a/0x420
[ 2312.656650][ T1418]  ? __fget_files+0x3a0/0x420
[ 2312.656667][ T1418]  __sys_sendmsg+0x183/0x260
[ 2312.656678][ T1418]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2312.656698][ T1418]  __do_fast_syscall_32+0x20d/0x640
[ 2312.656711][ T1418]  ? do_fast_syscall_32+0x33/0x70
[ 2312.656721][ T1418]  ? asm_int80_emulation+0x1a/0x20
[ 2312.656731][ T1418]  ? do_int80_emulation+0x274/0x4d0
[ 2312.656741][ T1418]  ? trace_irq_disable+0x3b/0x150
[ 2312.656757][ T1418]  do_fast_syscall_32+0x33/0x70
[ 2312.656768][ T1418]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2312.656781][ T1418] RIP: 0023:0xf709ef6c
[ 2312.656791][ T1418] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad
[ 2312.656800][ T1418] RSP: 002b:00000000f548d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 2312.656812][ T1418] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080
[ 2312.656819][ T1418] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2312.656825][ T1418] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2312.656831][ T1418] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2312.656837][ T1418] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2312.656851][ T1418]  </TASK>
[ 2312.738421][T30638] usb usb4-port1: unable to enumerate USB device
[ 2312.935787][T13969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2313.207963][   T24] usb 6-1: new high-speed USB device number 97 using dummy_hcd
[ 2313.369668][   T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[ 2313.379734][   T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[ 2313.396789][   T24] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[ 2313.406180][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2313.414370][   T24] usb 6-1: Product: syz
[ 2313.419795][   T24] usb 6-1: Manufacturer: syz
[ 2313.424430][   T24] usb 6-1: SerialNumber: syz
[ 2313.431844][   T24] usb 6-1: config 0 descriptor??
[ 2313.437505][ T1420] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[ 2313.446241][ T1420] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[ 2313.516369][ T1429] syz.1.6948 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[ 2313.659856][ T1420] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[ 2313.672181][ T1420] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[ 2313.699939][ T1433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6951'.
[ 2313.790411][ T1431] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6950'.
[ 2313.907058][ T1437] FAULT_INJECTION: forcing a failure.
[ 2313.907058][ T1437] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2313.926885][ T1437] CPU: 0 UID: 0 PID: 1437 Comm: syz.3.6952 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2313.926916][ T1437] Tainted: [L]=SOFTLOCKUP
[ 2313.926924][ T1437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 2313.926935][ T1437] Call Trace:
[ 2313.926944][ T1437]  <TASK>
[ 2313.926953][ T1437]  dump_stack_lvl+0xe8/0x150
[ 2313.926984][ T1437]  should_fail_ex+0x412/0x560
[ 2313.927016][ T1437]  _copy_from_iter+0x1d3/0x1670
[ 2313.927060][ T1437]  ? rcu_is_watching+0x15/0xb0
[ 2313.927096][ T1437]  ? __pfx__copy_from_iter+0x10/0x10
[ 2313.927135][ T1437]  ? netlink_sendmsg+0x650/0xb40
[ 2313.927159][ T1437]  ? skb_put+0x11b/0x210
[ 2313.927189][ T1437]  netlink_sendmsg+0x6c0/0xb40
[ 2313.927222][ T1437]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2313.927250][ T1437]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 2313.927278][ T1437]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 2313.927298][ T1437]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2313.927322][ T1437]  ____sys_sendmsg+0xa68/0xad0
[ 2313.927348][ T1437]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2313.927370][ T1437]  ? kstrtoull+0x12f/0x1d0
[ 2313.927402][ T1437]  ___sys_sendmsg+0x2a5/0x360
[ 2313.927425][ T1437]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2313.927443][ T1437]  ? get_pid_task+0x20/0x1f0
[ 2313.927469][ T1437]  ? get_pid_task+0x20/0x1f0
[ 2313.927493][ T1437]  ? get_pid_task+0x20/0x1f0
[ 2313.927540][ T1437]  ? __fget_files+0x2a/0x420
[ 2313.927563][ T1437]  ? __fget_files+0x3a0/0x420
[ 2313.927595][ T1437]  __sys_sendmsg+0x183/0x260
[ 2313.927617][ T1437]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2313.927654][ T1437]  __do_fast_syscall_32+0x20d/0x640
[ 2313.927678][ T1437]  ? do_fast_syscall_32+0x33/0x70
[ 2313.927698][ T1437]  ? asm_int80_emulation+0x1a/0x20
[ 2313.927715][ T1437]  ? do_int80_emulation+0x274/0x4d0
[ 2313.927735][ T1437]  ? trace_irq_disable+0x3b/0x150
[ 2313.927763][ T1437]  do_fast_syscall_32+0x33/0x70
[ 2313.927784][ T1437]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2313.927806][ T1437] RIP: 0023:0xf6fcef6c
[ 2313.927823][ T1437] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad
[ 2313.927840][ T1437] RSP: 002b:00000000f53bd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 2313.927858][ T1437] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000280
[ 2313.927870][ T1437] RDX: 0000000024000850 RSI: 0000000000000000 RDI: 0000000000000000
[ 2313.927880][ T1437] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2313.927890][ T1437] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2313.927900][ T1437] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2313.927925][ T1437]  </TASK>
[ 2314.189328][T13969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2314.248778][   T24] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00
[ 2314.446139][ T1442] FAULT_INJECTION: forcing a failure.
[ 2314.446139][ T1442] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2314.460759][ T1442] CPU: 0 UID: 0 PID: 1442 Comm: syz.2.6954 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2314.460791][ T1442] Tainted: [L]=SOFTLOCKUP
[ 2314.460799][ T1442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 2314.460811][ T1442] Call Trace:
[ 2314.460819][ T1442]  <TASK>
[ 2314.460827][ T1442]  dump_stack_lvl+0xe8/0x150
[ 2314.460855][ T1442]  should_fail_ex+0x412/0x560
[ 2314.460884][ T1442]  _copy_from_iter+0x1d3/0x1670
[ 2314.460913][ T1442]  ? rcu_is_watching+0x15/0xb0
[ 2314.460952][ T1442]  ? __pfx__copy_from_iter+0x10/0x10
[ 2314.460984][ T1442]  ? netlink_sendmsg+0x650/0xb40
[ 2314.461008][ T1442]  ? skb_put+0x11b/0x210
[ 2314.461036][ T1442]  netlink_sendmsg+0x6c0/0xb40
[ 2314.461065][ T1442]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2314.461092][ T1442]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 2314.461127][ T1442]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 2314.461146][ T1442]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2314.461169][ T1442]  ____sys_sendmsg+0xa68/0xad0
[ 2314.461195][ T1442]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2314.461217][ T1442]  ? kstrtoull+0x12f/0x1d0
[ 2314.461247][ T1442]  ___sys_sendmsg+0x2a5/0x360
[ 2314.461269][ T1442]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2314.461288][ T1442]  ? get_pid_task+0x20/0x1f0
[ 2314.461313][ T1442]  ? get_pid_task+0x20/0x1f0
[ 2314.461335][ T1442]  ? get_pid_task+0x20/0x1f0
[ 2314.461380][ T1442]  ? __fget_files+0x2a/0x420
[ 2314.461403][ T1442]  ? __fget_files+0x3a0/0x420
[ 2314.461433][ T1442]  __sys_sendmsg+0x183/0x260
[ 2314.461452][ T1442]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2314.461487][ T1442]  __do_fast_syscall_32+0x20d/0x640
[ 2314.461510][ T1442]  ? do_fast_syscall_32+0x33/0x70
[ 2314.461526][ T1442]  ? asm_int80_emulation+0x1a/0x20
[ 2314.461542][ T1442]  ? do_int80_emulation+0x274/0x4d0
[ 2314.461560][ T1442]  ? trace_irq_disable+0x3b/0x150
[ 2314.461584][ T1442]  do_fast_syscall_32+0x33/0x70
[ 2314.461601][ T1442]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2314.461622][ T1442] RIP: 0023:0xf7f84f6c
[ 2314.461650][ T1442] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad
[ 2314.461667][ T1442] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 2314.461687][ T1442] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800004c0
[ 2314.461700][ T1442] RDX: 0000000000044044 RSI: 0000000000000000 RDI: 0000000000000000
[ 2314.461710][ T1442] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2314.461721][ T1442] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2314.461732][ T1442] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2314.461760][ T1442]  </TASK>
[ 2314.981646][ T1453] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6955'.
[ 2315.323480][T13969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2315.545750][ T1457] 8021q: adding VLAN 0 to HW filter on device bond16
[ 2315.660482][   T24] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71
[ 2315.836309][   T24] dm9601 6-1:0.0 eth5: register 'dm9601' at usb-dummy_hcd.5-1, Davicom DM96xx USB 10/100 Ethernet, 9a:bb:d9:55:d3:dd
[ 2315.924895][   T24] usb 6-1: USB disconnect, device number 97
[ 2315.934266][   T24] dm9601 6-1:0.0 eth5: unregister 'dm9601' usb-dummy_hcd.5-1, Davicom DM96xx USB 10/100 Ethernet
[ 2316.398052][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2316.764600][ T1476] 8021q: adding VLAN 0 to HW filter on device bond11
[ 2316.793382][T30075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2317.384873][ T1487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6961'.
[ 2317.420585][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2317.632021][   T24] usb 2-1: new high-speed USB device number 123 using dummy_hcd
[ 2317.715945][ T1494] syzkaller0: entered promiscuous mode
[ 2317.722173][ T1494] syzkaller0: entered allmulticast mode
[ 2317.756822][T18486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2317.808083][   T24] usb 2-1: Using ep0 maxpacket: 16
[ 2317.814735][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2317.853602][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2317.895055][   T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice= 0.00
[ 2317.919079][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2317.986439][   T24] usb 2-1: config 0 descriptor??
[ 2318.227803][   T24] usb 2-1: string descriptor 0 read error: -71
[ 2318.229319][ T1518] syzkaller0: entered promiscuous mode
[ 2318.240688][ T1518] syzkaller0: entered allmulticast mode
[ 2318.242298][   T24] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input129
[ 2318.249528][ T1518] FAULT_INJECTION: forcing a failure.
[ 2318.249528][ T1518] name failslab, interval 1, probability 0, space 0, times 0
[ 2318.847797][T30638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2318.848903][ T1518] CPU: 0 UID: 0 PID: 1518 Comm: syz.5.6968 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2318.848939][ T1518] Tainted: [L]=SOFTLOCKUP
[ 2318.848947][ T1518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 2318.848958][ T1518] Call Trace:
[ 2318.848966][ T1518]  <TASK>
[ 2318.848975][ T1518]  dump_stack_lvl+0xe8/0x150
[ 2318.849005][ T1518]  should_fail_ex+0x412/0x560
[ 2318.849036][ T1518]  should_failslab+0xa8/0x100
[ 2318.849059][ T1518]  kmem_cache_alloc_node_noprof+0x8f/0x690
[ 2318.849087][ T1518]  ? __alloc_skb+0x186/0x7d0
[ 2318.849112][ T1518]  ? __alloc_skb+0x1d0/0x7d0
[ 2318.849134][ T1518]  ? __local_bh_enable_ip+0xd0/0x130
[ 2318.849167][ T1518]  __alloc_skb+0x1d0/0x7d0
[ 2318.849196][ T1518]  alloc_skb_with_frags+0xca/0x890
[ 2318.849234][ T1518]  sock_alloc_send_pskb+0x878/0x990
[ 2318.849270][ T1518]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[ 2318.849293][ T1518]  ? dev_get_by_index+0x22/0x2e0
[ 2318.849313][ T1518]  ? dev_get_by_index+0x22/0x2e0
[ 2318.849339][ T1518]  packet_sendmsg+0x33e5/0x50f0
[ 2318.849363][ T1518]  ? __pfx_aa_label_sk_perm+0x10/0x10
[ 2318.849390][ T1518]  ? __lock_acquire+0x6b5/0x2cf0
[ 2318.849433][ T1518]  ? __lock_acquire+0x6b5/0x2cf0
[ 2318.849453][ T1518]  ? aa_sk_perm+0x15a/0x960
[ 2318.849478][ T1518]  ? aa_sk_perm+0x82d/0x960
[ 2318.849500][ T1518]  ? __pfx_packet_sendmsg+0x10/0x10
[ 2318.849523][ T1518]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[ 2318.849553][ T1518]  ? __import_iovec+0x40e/0x7e0
[ 2318.849574][ T1518]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 2318.849600][ T1518]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 2318.849618][ T1518]  ? __pfx_packet_sendmsg+0x10/0x10
[ 2318.849635][ T1518]  ____sys_sendmsg+0xa68/0xad0
[ 2318.849661][ T1518]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2318.849683][ T1518]  ? kstrtoull+0x12f/0x1d0
[ 2318.849713][ T1518]  ___sys_sendmsg+0x2a5/0x360
[ 2318.849736][ T1518]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2318.849756][ T1518]  ? get_pid_task+0x20/0x1f0
[ 2318.849790][ T1518]  ? get_pid_task+0x20/0x1f0
[ 2318.849813][ T1518]  ? get_pid_task+0x20/0x1f0
[ 2318.849860][ T1518]  ? __fget_files+0x2a/0x420
[ 2318.849882][ T1518]  ? __fget_files+0x3a0/0x420
[ 2318.849920][ T1518]  __sys_sendmsg+0x183/0x260
[ 2318.849940][ T1518]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2318.849977][ T1518]  __do_fast_syscall_32+0x20d/0x640
[ 2318.849999][ T1518]  ? do_fast_syscall_32+0x33/0x70
[ 2318.850018][ T1518]  ? asm_int80_emulation+0x1a/0x20
[ 2318.850035][ T1518]  ? do_int80_emulation+0x274/0x4d0
[ 2318.850054][ T1518]  ? trace_irq_disable+0x3b/0x150
[ 2318.850081][ T1518]  do_fast_syscall_32+0x33/0x70
[ 2318.850102][ T1518]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2318.850123][ T1518] RIP: 0023:0xf709ef6c
[ 2318.850140][ T1518] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad
[ 2318.850155][ T1518] RSP: 002b:00000000f548d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 2318.850175][ T1518] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000800000c0
[ 2318.850188][ T1518] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000
[ 2318.850199][ T1518] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2318.850210][ T1518] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2318.850220][ T1518] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2318.850245][ T1518]  </TASK>
[ 2319.197940][ T5178] bcm5974 2-1:0.0: could not read from device
[ 2319.198614][   T24] usb 2-1: USB disconnect, device number 123
[ 2319.261664][   T43] dvb-usb: did not find the firmware file 'dvb-usb-dw2104.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[ 2319.293048][   T43] dvb-usb: found a 'DVBWorld DW2104 USB2.0' in cold state, will try to load a firmware
[ 2319.303914][ T5178] bcm5974 2-1:0.0: could not read from device
[ 2319.314463][   T43] usb 5-1: Direct firmware load for dvb-usb-dw2104.fw failed with error -2
[ 2319.328502][   T43] usb 5-1: Falling back to sysfs fallback for: dvb-usb-dw2104.fw
[ 2319.473456][   T29] kauditd_printk_skb: 18 callbacks suppressed
[ 2319.473474][   T29] audit: type=1326 audit(1771142566.358:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1528 comm="syz.3.6971" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef6c code=0x7ffc0000
[ 2319.916717][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2320.034003][ T1535] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6970'.
[ 2320.055911][   T29] audit: type=1326 audit(1771142566.358:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1528 comm="syz.3.6971" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef6c code=0x7ffc0000
[ 2320.174327][   T29] audit: type=1326 audit(1771142566.358:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1528 comm="syz.3.6971" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf6fcef6c code=0x7ffc0000
[ 2320.233726][   T29] audit: type=1326 audit(1771142566.358:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1528 comm="syz.3.6971" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef6c code=0x7ffc0000
[ 2320.379595][   T29] audit: type=1326 audit(1771142566.358:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1528 comm="syz.3.6971" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fcef6c code=0x7ffc0000
[ 2320.520599][   T29] audit: type=1326 audit(1771142567.318:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1547 comm="syz.2.6973" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84f6c code=0x7ffc0000
[ 2320.578175][   T29] audit: type=1326 audit(1771142567.318:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1547 comm="syz.2.6973" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84f6c code=0x7ffc0000
[ 2320.721491][   T29] audit: type=1326 audit(1771142567.328:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1547 comm="syz.2.6973" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84f6c code=0x7ffc0000
[ 2320.749513][   T29] audit: type=1326 audit(1771142567.328:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1547 comm="syz.2.6973" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84f6c code=0x7ffc0000
[ 2320.979074][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2320.982233][ T1559] 8021q: adding VLAN 0 to HW filter on device bond12
[ 2321.006154][   T29] audit: type=1326 audit(1771142567.328:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1547 comm="syz.2.6973" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f84f6c code=0x7ffc0000
[ 2321.266225][ T1566] FAULT_INJECTION: forcing a failure.
[ 2321.266225][ T1566] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2321.289444][ T1564] FAULT_INJECTION: forcing a failure.
[ 2321.289444][ T1564] name failslab, interval 1, probability 0, space 0, times 0
[ 2321.302355][ T1564] CPU: 0 UID: 0 PID: 1564 Comm: syz.4.6975 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2321.302383][ T1564] Tainted: [L]=SOFTLOCKUP
[ 2321.302390][ T1564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 2321.302400][ T1564] Call Trace:
[ 2321.302407][ T1564]  <TASK>
[ 2321.302415][ T1564]  dump_stack_lvl+0xe8/0x150
[ 2321.302443][ T1564]  should_fail_ex+0x412/0x560
[ 2321.302474][ T1564]  should_failslab+0xa8/0x100
[ 2321.302503][ T1564]  kmem_cache_alloc_node_noprof+0x8f/0x690
[ 2321.302531][ T1564]  ? __alloc_skb+0x186/0x7d0
[ 2321.302555][ T1564]  ? __alloc_skb+0x1d0/0x7d0
[ 2321.302577][ T1564]  ? __local_bh_enable_ip+0xd0/0x130
[ 2321.302604][ T1564]  __alloc_skb+0x1d0/0x7d0
[ 2321.302628][ T1564]  ? __raw_spin_lock_init+0x45/0x100
[ 2321.302649][ T1564]  audit_log_start+0x416/0xa20
[ 2321.302676][ T1564]  ? __pfx_audit_log_start+0x10/0x10
[ 2321.302700][ T1564]  ? get_pid_task+0x20/0x1f0
[ 2321.302724][ T1564]  ? get_pid_task+0x20/0x1f0
[ 2321.302751][ T1564]  audit_seccomp+0x63/0x190
[ 2321.302767][ T1564]  ? clear_bhb_loop+0x40/0x90
[ 2321.302777][ T1564]  ? clear_bhb_loop+0xe/0x90
[ 2321.302790][ T1564]  __seccomp_filter+0xd48/0x1ef0
[ 2321.302806][ T1564]  ? __pfx___seccomp_filter+0x10/0x10
[ 2321.302816][ T1564]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[ 2321.302830][ T1564]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 2321.302843][ T1564]  ? __fget_files+0x3a0/0x420
[ 2321.302866][ T1564]  ? __secure_computing+0xe1/0x2a0
[ 2321.302878][ T1564]  __do_fast_syscall_32+0x332/0x640
[ 2321.302891][ T1564]  ? do_fast_syscall_32+0x33/0x70
[ 2321.302901][ T1564]  ? asm_int80_emulation+0x1a/0x20
[ 2321.302910][ T1564]  ? do_int80_emulation+0x274/0x4d0
[ 2321.302920][ T1564]  ? trace_irq_disable+0x3b/0x150
[ 2321.302936][ T1564]  do_fast_syscall_32+0x33/0x70
[ 2321.302947][ T1564]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2321.302959][ T1564] RIP: 0023:0xf703ef6c
[ 2321.302970][ T1564] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad
[ 2321.302978][ T1564] RSP: 002b:00000000f542d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[ 2321.302990][ T1564] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 000000000000ae80
[ 2321.302997][ T1564] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2321.303003][ T1564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2321.303009][ T1564] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2321.303016][ T1564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2321.303030][ T1564]  </TASK>
[ 2321.560607][ T1566] CPU: 0 UID: 0 PID: 1566 Comm: syz.3.6976 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2321.560639][ T1566] Tainted: [L]=SOFTLOCKUP
[ 2321.560647][ T1566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 2321.560659][ T1566] Call Trace:
[ 2321.560667][ T1566]  <TASK>
[ 2321.560676][ T1566]  dump_stack_lvl+0xe8/0x150
[ 2321.560704][ T1566]  should_fail_ex+0x412/0x560
[ 2321.560732][ T1566]  _copy_from_iter+0x1d3/0x1670
[ 2321.560764][ T1566]  ? rcu_is_watching+0x15/0xb0
[ 2321.560793][ T1566]  ? __pfx__copy_from_iter+0x10/0x10
[ 2321.560825][ T1566]  ? netlink_sendmsg+0x650/0xb40
[ 2321.560845][ T1566]  ? skb_put+0x11b/0x210
[ 2321.560868][ T1566]  netlink_sendmsg+0x6c0/0xb40
[ 2321.560894][ T1566]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2321.560916][ T1566]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 2321.560937][ T1566]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 2321.560953][ T1566]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2321.560972][ T1566]  ____sys_sendmsg+0xa68/0xad0
[ 2321.560993][ T1566]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2321.561011][ T1566]  ? kstrtoull+0x12f/0x1d0
[ 2321.561036][ T1566]  ___sys_sendmsg+0x2a5/0x360
[ 2321.561054][ T1566]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2321.561070][ T1566]  ? get_pid_task+0x20/0x1f0
[ 2321.561090][ T1566]  ? get_pid_task+0x20/0x1f0
[ 2321.561109][ T1566]  ? get_pid_task+0x20/0x1f0
[ 2321.561147][ T1566]  ? __fget_files+0x2a/0x420
[ 2321.561165][ T1566]  ? __fget_files+0x3a0/0x420
[ 2321.561190][ T1566]  __sys_sendmsg+0x183/0x260
[ 2321.561207][ T1566]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2321.561237][ T1566]  __do_fast_syscall_32+0x20d/0x640
[ 2321.561256][ T1566]  ? do_fast_syscall_32+0x33/0x70
[ 2321.561271][ T1566]  ? asm_int80_emulation+0x1a/0x20
[ 2321.561285][ T1566]  ? do_int80_emulation+0x274/0x4d0
[ 2321.561300][ T1566]  ? trace_irq_disable+0x3b/0x150
[ 2321.561322][ T1566]  do_fast_syscall_32+0x33/0x70
[ 2321.561338][ T1566]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2321.561357][ T1566] RIP: 0023:0xf6fcef6c
[ 2321.561370][ T1566] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad
[ 2321.561384][ T1566] RSP: 002b:00000000f53bd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 2321.561400][ T1566] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040
[ 2321.561410][ T1566] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2321.561420][ T1566] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2321.561429][ T1566] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2321.561438][ T1566] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2321.561464][ T1566]  </TASK>
[ 2322.077118][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2322.127970][T13429] usb 3-1: new high-speed USB device number 73 using dummy_hcd
[ 2322.218355][   T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2322.295281][T13429] usb 3-1: Using ep0 maxpacket: 8
[ 2322.313273][T13429] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[ 2322.327967][T13429] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2322.347951][T13429] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 2322.389788][T13429] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 2322.414544][T13429] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2322.428428][T13429] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 2322.437575][T13429] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2322.778301][T13429] usb 3-1: GET_CAPABILITIES returned 0
[ 2322.784070][T13429] usbtmc 3-1:16.0: can't read capabilities
[ 2322.805317][ T1591] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6982'.
[ 2323.045020][    C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2323.054286][    C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2323.063481][    C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2323.072900][    C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2323.108975][T30638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2323.118539][T18486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2323.153009][    C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2323.162485][    C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2323.171779][    C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2323.181057][    C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2323.190165][    C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2323.199269][    C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2323.370699][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2323.398453][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2323.407627][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2323.416744][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2323.425875][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2323.444026][    C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2323.704497][ T1607] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6986'.
[ 2324.258604][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2324.318461][T13429] usb 2-1: new high-speed USB device number 124 using dummy_hcd
[ 2324.518015][T13429] usb 2-1: Using ep0 maxpacket: 32
[ 2324.594461][T13429] usb 2-1: config 1 has an invalid interface number: 206 but max is 1
[ 2324.604514][T13429] usb 2-1: config 1 has an invalid interface number: 30 but max is 1
[ 2324.648987][ T1618] 8021q: adding VLAN 0 to HW filter on device bond12
[ 2324.787028][T13429] usb 2-1: config 1 has no interface number 0
[ 2324.846152][T13429] usb 2-1: config 1 has no interface number 1
[ 2324.856255][T13429] usb 2-1: config 1 interface 206 altsetting 9 bulk endpoint 0xF has invalid maxpacket 1024
[ 2324.882853][    T9] usb 3-1: USB disconnect, device number 73
[ 2324.905463][T13429] usb 2-1: config 1 interface 206 altsetting 9 endpoint 0x4 has invalid maxpacket 1024, setting to 64
[ 2324.927233][T13429] usb 2-1: config 1 interface 206 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[ 2324.953161][T13429] usb 2-1: config 1 interface 206 altsetting 9 bulk endpoint 0xD has invalid maxpacket 16
[ 2324.964797][ T1621] fuse: Bad value for 'source'
[ 2324.988501][T13429] usb 2-1: config 1 interface 206 altsetting 9 has a duplicate endpoint with address 0xF, skipping
[ 2325.008440][T13429] usb 2-1: config 1 interface 206 altsetting 9 has a duplicate endpoint with address 0x5, skipping
[ 2325.037967][T13429] usb 2-1: config 1 interface 30 altsetting 4 endpoint 0x7 has invalid maxpacket 512, setting to 64
[ 2325.068062][T13429] usb 2-1: config 1 interface 30 altsetting 4 has a duplicate endpoint with address 0x4, skipping
[ 2325.128186][T13429] usb 2-1: config 1 interface 30 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[ 2325.150924][T13429] usb 2-1: config 1 interface 30 altsetting 4 endpoint 0x9 has invalid maxpacket 512, setting to 64
[ 2325.179904][T13429] usb 2-1: config 1 interface 30 altsetting 4 has a duplicate endpoint with address 0x5, skipping
[ 2325.213732][ T1628] FAULT_INJECTION: forcing a failure.
[ 2325.213732][ T1628] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2325.227013][T13429] usb 2-1: config 1 interface 30 altsetting 4 has a duplicate endpoint with address 0x9, skipping
[ 2325.238359][T13429] usb 2-1: config 1 interface 30 altsetting 4 has a duplicate endpoint with address 0xE, skipping
[ 2325.409068][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2325.409637][ T1628] CPU: 0 UID: 0 PID: 1628 Comm: syz.5.6992 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2325.409664][ T1628] Tainted: [L]=SOFTLOCKUP
[ 2325.409671][ T1628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 2325.409682][ T1628] Call Trace:
[ 2325.409691][ T1628]  <TASK>
[ 2325.409699][ T1628]  dump_stack_lvl+0xe8/0x150
[ 2325.409730][ T1628]  should_fail_ex+0x412/0x560
[ 2325.409760][ T1628]  _copy_from_iter+0x1d3/0x1670
[ 2325.409791][ T1628]  ? rcu_is_watching+0x15/0xb0
[ 2325.409820][ T1628]  ? __pfx__copy_from_iter+0x10/0x10
[ 2325.409853][ T1628]  ? netlink_sendmsg+0x650/0xb40
[ 2325.409877][ T1628]  ? skb_put+0x11b/0x210
[ 2325.409906][ T1628]  netlink_sendmsg+0x6c0/0xb40
[ 2325.409937][ T1628]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2325.409964][ T1628]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 2325.409991][ T1628]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 2325.410020][ T1628]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2325.410042][ T1628]  ____sys_sendmsg+0xa68/0xad0
[ 2325.410068][ T1628]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2325.410090][ T1628]  ? kstrtoull+0x12f/0x1d0
[ 2325.410120][ T1628]  ___sys_sendmsg+0x2a5/0x360
[ 2325.410150][ T1628]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2325.410171][ T1628]  ? get_pid_task+0x20/0x1f0
[ 2325.410197][ T1628]  ? get_pid_task+0x20/0x1f0
[ 2325.410220][ T1628]  ? get_pid_task+0x20/0x1f0
[ 2325.410268][ T1628]  ? __fget_files+0x2a/0x420
[ 2325.410291][ T1628]  ? __fget_files+0x3a0/0x420
[ 2325.410321][ T1628]  __sys_sendmsg+0x183/0x260
[ 2325.410341][ T1628]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2325.410377][ T1628]  __do_fast_syscall_32+0x20d/0x640
[ 2325.410400][ T1628]  ? do_fast_syscall_32+0x33/0x70
[ 2325.410419][ T1628]  ? asm_int80_emulation+0x1a/0x20
[ 2325.410437][ T1628]  ? do_int80_emulation+0x274/0x4d0
[ 2325.410456][ T1628]  ? trace_irq_disable+0x3b/0x150
[ 2325.410483][ T1628]  do_fast_syscall_32+0x33/0x70
[ 2325.410503][ T1628]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2325.410528][ T1628] RIP: 0023:0xf709ef6c
[ 2325.410545][ T1628] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad
[ 2325.410561][ T1628] RSP: 002b:00000000f548d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 2325.410581][ T1628] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080002440
[ 2325.410594][ T1628] RDX: 0000000004040004 RSI: 0000000000000000 RDI: 0000000000000000
[ 2325.410605][ T1628] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2325.410615][ T1628] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2325.410626][ T1628] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2325.410652][ T1628]  </TASK>
[ 2325.838302][ T1631] 8021q: adding VLAN 0 to HW filter on device bond15
[ 2325.891795][T13429] usb 2-1: config 1 interface 30 altsetting 4 has a duplicate endpoint with address 0xE, skipping
[ 2325.898681][ T1636] FAULT_INJECTION: forcing a failure.
[ 2325.898681][ T1636] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2325.923238][ T1632] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6993'.
[ 2325.978494][T13429] usb 2-1: config 1 interface 206 has no altsetting 0
[ 2325.992774][T13429] usb 2-1: config 1 interface 30 has no altsetting 0
[ 2326.002522][ T1636] CPU: 1 UID: 0 PID: 1636 Comm: syz.5.6994 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2326.002551][ T1636] Tainted: [L]=SOFTLOCKUP
[ 2326.002557][ T1636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 2326.002568][ T1636] Call Trace:
[ 2326.002575][ T1636]  <TASK>
[ 2326.002599][ T1636]  dump_stack_lvl+0xe8/0x150
[ 2326.002628][ T1636]  should_fail_ex+0x412/0x560
[ 2326.002659][ T1636]  _copy_from_iter+0x1d3/0x1670
[ 2326.002690][ T1636]  ? rcu_is_watching+0x15/0xb0
[ 2326.002718][ T1636]  ? __pfx__copy_from_iter+0x10/0x10
[ 2326.002760][ T1636]  ? netlink_sendmsg+0x650/0xb40
[ 2326.002783][ T1636]  ? skb_put+0x11b/0x210
[ 2326.002811][ T1636]  netlink_sendmsg+0x6c0/0xb40
[ 2326.002844][ T1636]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2326.002870][ T1636]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 2326.002897][ T1636]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 2326.002917][ T1636]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2326.002939][ T1636]  ____sys_sendmsg+0xa68/0xad0
[ 2326.002965][ T1636]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2326.002987][ T1636]  ? kstrtoull+0x12f/0x1d0
[ 2326.003017][ T1636]  ___sys_sendmsg+0x2a5/0x360
[ 2326.003040][ T1636]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2326.003061][ T1636]  ? get_pid_task+0x20/0x1f0
[ 2326.003086][ T1636]  ? get_pid_task+0x20/0x1f0
[ 2326.003110][ T1636]  ? get_pid_task+0x20/0x1f0
[ 2326.003156][ T1636]  ? __fget_files+0x2a/0x420
[ 2326.003178][ T1636]  ? __fget_files+0x3a0/0x420
[ 2326.003209][ T1636]  __sys_sendmsg+0x183/0x260
[ 2326.003230][ T1636]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2326.003268][ T1636]  __do_fast_syscall_32+0x20d/0x640
[ 2326.003290][ T1636]  ? do_fast_syscall_32+0x33/0x70
[ 2326.003308][ T1636]  ? asm_int80_emulation+0x1a/0x20
[ 2326.003326][ T1636]  ? do_int80_emulation+0x274/0x4d0
[ 2326.003345][ T1636]  ? trace_irq_disable+0x3b/0x150
[ 2326.003372][ T1636]  do_fast_syscall_32+0x33/0x70
[ 2326.003393][ T1636]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2326.003422][ T1636] RIP: 0023:0xf709ef6c
[ 2326.003439][ T1636] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad
[ 2326.003456][ T1636] RSP: 002b:00000000f548d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 2326.003475][ T1636] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800005c0
[ 2326.003488][ T1636] RDX: 0000000020000004 RSI: 0000000000000000 RDI: 0000000000000000
[ 2326.003500][ T1636] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2326.003511][ T1636] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2326.003521][ T1636] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2326.003547][ T1636]  </TASK>
[ 2326.005049][T13429] usb 2-1: New USB device found, idVendor=1199, idProduct=6803, bcdDevice=cd.fe
[ 2326.470017][T30638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2326.594311][T13429] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2326.755373][ T1647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6996'.
[ 2326.788969][T13429] usb 2-1: Product: 턥ᢎ䓐鏯톣䴽ꋧ扶仦ྴ錤鬴ࢽ醚쀤ሧ䳓覻偶햘Ჸ➬㭞헟稏넽浝퍲鹳華膁䂡蓏⫤Ｇ뇼ꁇ墉髦⅌ݑ䎼頾疄낃ꕡꄪ誝홢ꅊ䓨쒝뛺봤뗰硳핱籈ᐩƆ섈劗ฤಆ蛝⃩᛿팪ᡘ遶兣떧ኝ욥箆⌳ᵚᇩ䏏
[ 2326.818123][T13429] usb 2-1: Manufacturer: ূ덃딶醪☤ደ쏽㦍砾烎㲚⥸폻ᇏ䑠ﳞ羣ꢢᅙ쑷䉠ۥ루閤퀗砦딟ペᱻ瘁Ὗ蝘兙筳뽿ᡰ噍蓛帜떒쐰⊻괊硃틔ᒈ薝肠⁒츜⾨㡧⹡ꕑこٓ앐섗㫉렌ﭠ㧰句㯸꧝剓槠ഀ抧ட䷉땛髞ᨑΏ䯡퀚陫媫垢
[ 2326.848166][T13429] usb 2-1: SerialNumber: е
[ 2326.945612][    T9] usb 4-1: new high-speed USB device number 99 using dummy_hcd
[ 2327.149524][T13429] usb 2-1: can't set config #1, error -71
[ 2327.170085][ T1652] netlink: 'syz.1.7000': attribute type 2 has an invalid length.
[ 2327.174881][T13429] usb 2-1: USB disconnect, device number 124
[ 2327.185186][    T9] usb 4-1: Using ep0 maxpacket: 8
[ 2327.232454][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 2327.269737][    T9] usb 4-1: config 3 has an invalid interface number: 182 but max is 0
[ 2327.278394][    T9] usb 4-1: config 3 has no interface number 0
[ 2327.284487][    T9] usb 4-1: config 3 interface 182 altsetting 8 endpoint 0xA has an invalid bInterval 129, changing to 11
[ 2327.297428][    T9] usb 4-1: config 3 interface 182 altsetting 8 endpoint 0x3 has an invalid bInterval 92, changing to 10
[ 2327.323494][    T9] usb 4-1: config 3 interface 182 has no altsetting 0
[ 2327.514950][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2327.582170][T18486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2327.592191][    T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=90.57
[ 2327.602588][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2327.627946][    T9] usb 4-1: Product: syz
[ 2327.632158][    T9] usb 4-1: Manufacturer: syz
[ 2327.790205][    T9] usb 4-1: SerialNumber: syz
[ 2327.911045][ T1659] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7001'.
[ 2328.038387][    T9] usbtest 4-1:3.182: couldn't get endpoints, -71
[ 2328.050984][    T9] usbtest 4-1:3.182: probe with driver usbtest failed with error -71
[ 2328.066124][    T9] usb 4-1: USB disconnect, device number 99
[ 2328.561305][T30638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2328.887661][T13574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2329.378185][ T1684] 8021q: adding VLAN 0 to HW filter on device bond17
[ 2329.575474][ T1687] FAULT_INJECTION: forcing a failure.
[ 2329.575474][ T1687] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2329.592590][T30638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2329.617015][ T1687] CPU: 1 UID: 0 PID: 1687 Comm: syz.3.7009 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2329.617045][ T1687] Tainted: [L]=SOFTLOCKUP
[ 2329.617052][ T1687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 2329.617063][ T1687] Call Trace:
[ 2329.617071][ T1687]  <TASK>
[ 2329.617079][ T1687]  dump_stack_lvl+0xe8/0x150
[ 2329.617110][ T1687]  should_fail_ex+0x412/0x560
[ 2329.617138][ T1687]  _copy_from_iter+0x1d3/0x1670
[ 2329.617167][ T1687]  ? rcu_is_watching+0x15/0xb0
[ 2329.617196][ T1687]  ? __pfx__copy_from_iter+0x10/0x10
[ 2329.617235][ T1687]  ? netlink_sendmsg+0x650/0xb40
[ 2329.617258][ T1687]  ? skb_put+0x11b/0x210
[ 2329.617285][ T1687]  netlink_sendmsg+0x6c0/0xb40
[ 2329.617314][ T1687]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2329.617340][ T1687]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 2329.617373][ T1687]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 2329.617393][ T1687]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2329.617413][ T1687]  ____sys_sendmsg+0xa68/0xad0
[ 2329.617438][ T1687]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2329.617461][ T1687]  ? kstrtoull+0x12f/0x1d0
[ 2329.617492][ T1687]  ___sys_sendmsg+0x2a5/0x360
[ 2329.617512][ T1687]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2329.617533][ T1687]  ? get_pid_task+0x20/0x1f0
[ 2329.617558][ T1687]  ? get_pid_task+0x20/0x1f0
[ 2329.617579][ T1687]  ? get_pid_task+0x20/0x1f0
[ 2329.617626][ T1687]  ? __fget_files+0x2a/0x420
[ 2329.617649][ T1687]  ? __fget_files+0x3a0/0x420
[ 2329.617686][ T1687]  __sys_sendmsg+0x183/0x260
[ 2329.617707][ T1687]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2329.617744][ T1687]  __do_fast_syscall_32+0x20d/0x640
[ 2329.617767][ T1687]  ? do_fast_syscall_32+0x33/0x70
[ 2329.617786][ T1687]  ? asm_int80_emulation+0x1a/0x20
[ 2329.617803][ T1687]  ? do_int80_emulation+0x274/0x4d0
[ 2329.617827][ T1687]  do_fast_syscall_32+0x33/0x70
[ 2329.617850][ T1687]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2329.617868][ T1687] RIP: 0023:0xf6fcef6c
[ 2329.617884][ T1687] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad
[ 2329.617899][ T1687] RSP: 002b:00000000f53bd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 2329.617917][ T1687] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001540
[ 2329.617929][ T1687] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2329.617940][ T1687] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2329.617951][ T1687] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2329.617961][ T1687] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2329.617988][ T1687]  </TASK>
[ 2330.138756][    T9] usb 3-1: new high-speed USB device number 74 using dummy_hcd
[ 2330.327755][    T9] usb 3-1: Using ep0 maxpacket: 16
[ 2330.342084][    T9] usb 3-1: config 0 has an invalid interface number: 8 but max is 0
[ 2330.355869][    T9] usb 3-1: config 0 has no interface number 0
[ 2330.384490][    T9] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 2330.419560][    T9] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 2330.441185][    T9] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 2330.494078][ T1699] FAULT_INJECTION: forcing a failure.
[ 2330.494078][ T1699] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2330.507823][    T9] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 2330.517073][ T1699] CPU: 0 UID: 0 PID: 1699 Comm: syz.5.7012 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2330.517100][ T1699] Tainted: [L]=SOFTLOCKUP
[ 2330.517106][ T1699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 2330.517116][ T1699] Call Trace:
[ 2330.517123][ T1699]  <TASK>
[ 2330.517129][ T1699]  dump_stack_lvl+0xe8/0x150
[ 2330.517155][ T1699]  should_fail_ex+0x412/0x560
[ 2330.517180][ T1699]  _copy_from_user+0x2d/0xb0
[ 2330.517198][ T1699]  userfaultfd_ioctl+0xa61/0x5130
[ 2330.517217][ T1699]  ? kasan_save_track+0x4f/0x80
[ 2330.517237][ T1699]  ? kasan_save_track+0x3e/0x80
[ 2330.517257][ T1699]  ? kfree+0x1c1/0x630
[ 2330.517275][ T1699]  ? tomoyo_path_number_perm+0x501/0x630
[ 2330.517294][ T1699]  ? security_file_ioctl_compat+0xc3/0x2a0
[ 2330.517316][ T1699]  ? __do_fast_syscall_32+0x20d/0x640
[ 2330.517333][ T1699]  ? do_fast_syscall_32+0x33/0x70
[ 2330.517348][ T1699]  ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2330.517372][ T1699]  ? __pfx_userfaultfd_ioctl+0x10/0x10
[ 2330.517409][ T1699]  ? kasan_quarantine_put+0xbb/0x1f0
[ 2330.517436][ T1699]  ? tomoyo_path_number_perm+0x219/0x630
[ 2330.517455][ T1699]  ? tomoyo_path_number_perm+0x219/0x630
[ 2330.517476][ T1699]  ? do_vfs_ioctl+0x1166/0x1530
[ 2330.517493][ T1699]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 2330.517531][ T1699]  ? __fget_files+0x2a/0x420
[ 2330.517553][ T1699]  ? __fget_files+0x3a0/0x420
[ 2330.517589][ T1699]  ? __fget_files+0x2a/0x420
[ 2330.517609][ T1699]  ? bpf_lsm_file_ioctl_compat+0x9/0x20
[ 2330.517629][ T1699]  __ia32_compat_sys_ioctl+0x5ea/0x950
[ 2330.517646][ T1699]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[ 2330.517664][ T1699]  ? __fget_files+0x3a0/0x420
[ 2330.517686][ T1699]  ? fput+0xa0/0xd0
[ 2330.517703][ T1699]  ? ksys_write+0x242/0x270
[ 2330.517733][ T1699]  __do_fast_syscall_32+0x20d/0x640
[ 2330.517750][ T1699]  ? do_fast_syscall_32+0x33/0x70
[ 2330.517764][ T1699]  ? asm_int80_emulation+0x1a/0x20
[ 2330.517778][ T1699]  ? do_int80_emulation+0x274/0x4d0
[ 2330.517797][ T1699]  ? trace_irq_disable+0x3b/0x150
[ 2330.517819][ T1699]  do_fast_syscall_32+0x33/0x70
[ 2330.517835][ T1699]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2330.517853][ T1699] RIP: 0023:0xf709ef6c
[ 2330.517869][ T1699] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad
[ 2330.517883][ T1699] RSP: 002b:00000000f544b50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[ 2330.517899][ T1699] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000c028aa03
[ 2330.517910][ T1699] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2330.517919][ T1699] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2330.517928][ T1699] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2330.517937][ T1699] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2330.517958][ T1699]  </TASK>
[ 2330.801356][    T9] usb 3-1: Product: syz
[ 2330.805561][    T9] usb 3-1: SerialNumber: syz
[ 2330.813876][T30638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2330.819635][    T9] usb 3-1: config 0 descriptor??
[ 2330.830882][    T9] cm109 3-1:0.8: invalid payload size 0, expected 4
[ 2330.839865][    T9] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input130
[ 2331.260141][ T1689] FAULT_INJECTION: forcing a failure.
[ 2331.260141][ T1689] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2331.307967][ T1689] CPU: 1 UID: 0 PID: 1689 Comm: syz.2.7010 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2331.307996][ T1689] Tainted: [L]=SOFTLOCKUP
[ 2331.308002][ T1689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 2331.308011][ T1689] Call Trace:
[ 2331.308020][ T1689]  <TASK>
[ 2331.308028][ T1689]  dump_stack_lvl+0xe8/0x150
[ 2331.308058][ T1689]  should_fail_ex+0x412/0x560
[ 2331.308085][ T1689]  _copy_from_user+0x2d/0xb0
[ 2331.308115][ T1689]  evdev_ioctl_handler+0x558/0x1fe0
[ 2331.308160][ T1689]  ? __pfx_evdev_ioctl_handler+0x10/0x10
[ 2331.308218][ T1689]  ? __fget_files+0x3a0/0x420
[ 2331.308241][ T1689]  ? __fget_files+0x2a/0x420
[ 2331.308264][ T1689]  ? bpf_lsm_file_ioctl_compat+0x9/0x20
[ 2331.308287][ T1689]  __ia32_compat_sys_ioctl+0x5ea/0x950
[ 2331.308310][ T1689]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[ 2331.308333][ T1689]  ? __fget_files+0x3a0/0x420
[ 2331.308361][ T1689]  ? fput+0xa0/0xd0
[ 2331.308384][ T1689]  ? ksys_write+0x242/0x270
[ 2331.308420][ T1689]  __do_fast_syscall_32+0x20d/0x640
[ 2331.308443][ T1689]  ? do_fast_syscall_32+0x33/0x70
[ 2331.308462][ T1689]  ? asm_int80_emulation+0x1a/0x20
[ 2331.308479][ T1689]  ? do_int80_emulation+0x274/0x4d0
[ 2331.308498][ T1689]  ? trace_irq_disable+0x3b/0x150
[ 2331.308525][ T1689]  do_fast_syscall_32+0x33/0x70
[ 2331.308543][ T1689]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2331.308565][ T1689] RIP: 0023:0xf7f84f6c
[ 2331.308583][ T1689] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad
[ 2331.308600][ T1689] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[ 2331.308619][ T1689] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080284504
[ 2331.308631][ T1689] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000
[ 2331.308641][ T1689] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2331.308650][ T1689] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2331.308661][ T1689] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2331.308686][ T1689]  </TASK>
[ 2331.529949][    C0] cm109_urb_ctl_callback: 61 callbacks suppressed
[ 2331.529974][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 2331.538280][   T24] usb 3-1: USB disconnect, device number 74
[ 2331.543526][    C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[ 2331.699660][ T1713] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7019'.
[ 2331.752050][   T24] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 2331.821387][T30638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2332.154268][ T1720] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7018'.
[ 2332.229936][ T1719] syzkaller0: entered promiscuous mode
[ 2332.237706][ T1719] syzkaller0: entered allmulticast mode
[ 2332.547573][ T1726] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7023'.
[ 2332.858088][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2332.901025][ T5883] usb 6-1: new high-speed USB device number 98 using dummy_hcd
[ 2333.153274][ T1738] 8021q: adding VLAN 0 to HW filter on device bond13
[ 2333.178084][ T5883] usb 6-1: Using ep0 maxpacket: 8
[ 2333.298885][ T5883] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2333.335644][ T5883] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 2333.345544][T13582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2333.447529][ T5883] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2333.518644][ T5883] usb 6-1: config 0 descriptor??
[ 2333.547345][ T1737] 8021q: adding VLAN 0 to HW filter on device bond14
[ 2333.721243][ T1744] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7026'.
[ 2333.761815][ T5883] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 2333.778653][ T1744] FAULT_INJECTION: forcing a failure.
[ 2333.778653][ T1744] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2333.808195][ T1744] CPU: 1 UID: 0 PID: 1744 Comm: syz.1.7026 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2333.808226][ T1744] Tainted: [L]=SOFTLOCKUP
[ 2333.808233][ T1744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 2333.808244][ T1744] Call Trace:
[ 2333.808258][ T1744]  <TASK>
[ 2333.808267][ T1744]  dump_stack_lvl+0xe8/0x150
[ 2333.808296][ T1744]  should_fail_ex+0x412/0x560
[ 2333.808325][ T1744]  _copy_from_user+0x2d/0xb0
[ 2333.808347][ T1744]  get_compat_msghdr+0xb3/0x4c0
[ 2333.808374][ T1744]  ? __lock_acquire+0x6b5/0x2cf0
[ 2333.808399][ T1744]  ? __pfx_get_compat_msghdr+0x10/0x10
[ 2333.808427][ T1744]  ? kstrtoull+0x12f/0x1d0
[ 2333.808458][ T1744]  ___sys_sendmsg+0x201/0x360
[ 2333.808480][ T1744]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2333.808501][ T1744]  ? get_pid_task+0x20/0x1f0
[ 2333.808527][ T1744]  ? get_pid_task+0x20/0x1f0
[ 2333.808551][ T1744]  ? get_pid_task+0x20/0x1f0
[ 2333.808600][ T1744]  ? __fget_files+0x2a/0x420
[ 2333.808621][ T1744]  ? __fget_files+0x3a0/0x420
[ 2333.808653][ T1744]  __sys_sendmsg+0x183/0x260
[ 2333.808680][ T1744]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2333.808717][ T1744]  __do_fast_syscall_32+0x20d/0x640
[ 2333.808741][ T1744]  ? do_fast_syscall_32+0x33/0x70
[ 2333.808760][ T1744]  ? asm_int80_emulation+0x1a/0x20
[ 2333.808777][ T1744]  ? do_int80_emulation+0x274/0x4d0
[ 2333.808797][ T1744]  ? trace_irq_disable+0x3b/0x150
[ 2333.808824][ T1744]  do_fast_syscall_32+0x33/0x70
[ 2333.808846][ T1744]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2333.808868][ T1744] RIP: 0023:0xf7fa8f6c
[ 2333.808884][ T1744] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad
[ 2333.808900][ T1744] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 2333.808919][ T1744] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100
[ 2333.808933][ T1744] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2333.808944][ T1744] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2333.808955][ T1744] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2333.808966][ T1744] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2333.808993][ T1744]  </TASK>
[ 2334.059310][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2334.308605][ T1748] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7027'.
[ 2334.325927][ T1748] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7027'.
[ 2334.477944][T30638] usb 2-1: new high-speed USB device number 125 using dummy_hcd
[ 2334.590357][ T1760] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7030'.
[ 2334.599802][ T1760] ipvlan1: entered allmulticast mode
[ 2334.605130][ T1760] veth0_vlan: entered allmulticast mode
[ 2334.669404][T13582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2334.778081][T30638] usb 2-1: Using ep0 maxpacket: 8
[ 2334.785056][T30638] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[ 2334.793404][T30638] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2334.806855][T30638] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 2334.816831][   T24] usb 4-1: new low-speed USB device number 100 using dummy_hcd
[ 2334.824966][T30638] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 2334.840916][T30638] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2334.866259][T30638] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 2334.883864][T30638] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2334.989933][   T24] usb 4-1: too many endpoints for config 0 interface 0 altsetting 5: 254, using maximum allowed: 30
[ 2335.001226][   T24] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 2335.029048][   T24] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1792, setting to 8
[ 2335.047921][   T24] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[ 2335.061882][   T24] usb 4-1: config 0 interface 0 has no altsetting 0
[ 2335.069376][   T24] usb 4-1: New USB device found, idVendor=5543, idProduct=0081, bcdDevice= 0.00
[ 2335.142222][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2335.169228][ T1762] FAULT_INJECTION: forcing a failure.
[ 2335.169228][ T1762] name failslab, interval 1, probability 0, space 0, times 0
[ 2335.183245][ T1762] CPU: 1 UID: 0 PID: 1762 Comm: syz.2.7029 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2335.183277][ T1762] Tainted: [L]=SOFTLOCKUP
[ 2335.183284][ T1762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 2335.183296][ T1762] Call Trace:
[ 2335.183305][ T1762]  <TASK>
[ 2335.183315][ T1762]  dump_stack_lvl+0xe8/0x150
[ 2335.183350][ T1762]  should_fail_ex+0x412/0x560
[ 2335.183382][ T1762]  should_failslab+0xa8/0x100
[ 2335.183406][ T1762]  __kmalloc_noprof+0xe8/0x760
[ 2335.183435][ T1762]  ? __pfx_down_write_nested+0x10/0x10
[ 2335.183453][ T1762]  ? security_sb_alloc+0x48/0x310
[ 2335.183485][ T1762]  security_sb_alloc+0x48/0x310
[ 2335.183514][ T1762]  alloc_super+0x294/0xab0
[ 2335.183546][ T1762]  sget_fc+0x329/0xa40
[ 2335.183573][ T1762]  ? __pfx_set_anon_super_fc+0x10/0x10
[ 2335.183600][ T1762]  ? __pfx_binderfs_fill_super+0x10/0x10
[ 2335.183627][ T1762]  get_tree_nodev+0x2a/0x150
[ 2335.183657][ T1762]  vfs_get_tree+0x92/0x2a0
[ 2335.183678][ T1762]  vfs_cmd_create+0xa2/0x200
[ 2335.183700][ T1762]  __se_sys_fsconfig+0x6c9/0x820
[ 2335.183725][ T1762]  ? __pfx___se_sys_fsconfig+0x10/0x10
[ 2335.183755][ T1762]  ? __ia32_sys_fsconfig+0x20/0xc0
[ 2335.183777][ T1762]  __do_fast_syscall_32+0x20d/0x640
[ 2335.183800][ T1762]  ? do_fast_syscall_32+0x33/0x70
[ 2335.183820][ T1762]  ? asm_int80_emulation+0x1a/0x20
[ 2335.183837][ T1762]  ? do_int80_emulation+0x274/0x4d0
[ 2335.183856][ T1762]  ? trace_irq_disable+0x3b/0x150
[ 2335.183884][ T1762]  do_fast_syscall_32+0x33/0x70
[ 2335.183906][ T1762]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2335.183929][ T1762] RIP: 0023:0xf7f84f6c
[ 2335.183946][ T1762] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad
[ 2335.183962][ T1762] RSP: 002b:00000000f540450c EFLAGS: 00000206 ORIG_RAX: 00000000000001af
[ 2335.183981][ T1762] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000000000006
[ 2335.183994][ T1762] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2335.184005][ T1762] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2335.184015][ T1762] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2335.184026][ T1762] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2335.184054][ T1762]  </TASK>
[ 2335.427359][T30638] usb 2-1: GET_CAPABILITIES returned 0
[ 2335.432930][T30638] usbtmc 2-1:16.0: can't read capabilities
[ 2335.470201][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2335.527441][   T24] usb 4-1: config 0 descriptor??
[ 2335.538995][ T1755] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[ 2335.687796][T13429] usb 6-1: USB disconnect, device number 98
[ 2335.693848][    C0] iowarrior 6-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19
[ 2335.790974][T30638] usb 2-1: USB disconnect, device number 125
[ 2335.816831][ T1767] syzkaller0: entered promiscuous mode
[ 2335.831106][ T1767] syzkaller0: entered allmulticast mode
[ 2335.850746][ T1767] FAULT_INJECTION: forcing a failure.
[ 2335.850746][ T1767] name failslab, interval 1, probability 0, space 0, times 0
[ 2335.868659][ T1767] CPU: 1 UID: 0 PID: 1767 Comm: syz.5.7032 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2335.868690][ T1767] Tainted: [L]=SOFTLOCKUP
[ 2335.868697][ T1767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 2335.868708][ T1767] Call Trace:
[ 2335.868716][ T1767]  <TASK>
[ 2335.868723][ T1767]  dump_stack_lvl+0xe8/0x150
[ 2335.868753][ T1767]  should_fail_ex+0x412/0x560
[ 2335.868786][ T1767]  should_failslab+0xa8/0x100
[ 2335.868807][ T1767]  ? skb_clone+0x212/0x3a0
[ 2335.868825][ T1767]  kmem_cache_alloc_noprof+0x87/0x650
[ 2335.868849][ T1767]  ? __netlink_lookup+0xc6/0x8b0
[ 2335.868878][ T1767]  skb_clone+0x212/0x3a0
[ 2335.868899][ T1767]  __netlink_deliver_tap+0x404/0x850
[ 2335.868931][ T1767]  ? netlink_deliver_tap+0x2e/0x1b0
[ 2335.868953][ T1767]  netlink_deliver_tap+0x19c/0x1b0
[ 2335.868976][ T1767]  netlink_unicast+0x7e3/0x9b0
[ 2335.869012][ T1767]  ? __pfx_netlink_unicast+0x10/0x10
[ 2335.869033][ T1767]  ? netlink_sendmsg+0x650/0xb40
[ 2335.869055][ T1767]  ? skb_put+0x11b/0x210
[ 2335.869080][ T1767]  netlink_sendmsg+0x813/0xb40
[ 2335.869109][ T1767]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2335.869135][ T1767]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 2335.869161][ T1767]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 2335.869180][ T1767]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2335.869201][ T1767]  ____sys_sendmsg+0xa68/0xad0
[ 2335.869225][ T1767]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2335.869246][ T1767]  ? kstrtoull+0x12f/0x1d0
[ 2335.869275][ T1767]  ___sys_sendmsg+0x2a5/0x360
[ 2335.869296][ T1767]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2335.869314][ T1767]  ? get_pid_task+0x20/0x1f0
[ 2335.869340][ T1767]  ? get_pid_task+0x20/0x1f0
[ 2335.869362][ T1767]  ? get_pid_task+0x20/0x1f0
[ 2335.869394][ T1767]  ? __fget_files+0x2a/0x420
[ 2335.869408][ T1767]  ? __fget_files+0x3a0/0x420
[ 2335.869426][ T1767]  __sys_sendmsg+0x183/0x260
[ 2335.869437][ T1767]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2335.869458][ T1767]  __do_fast_syscall_32+0x20d/0x640
[ 2335.869471][ T1767]  ? do_fast_syscall_32+0x33/0x70
[ 2335.869481][ T1767]  ? asm_int80_emulation+0x1a/0x20
[ 2335.869491][ T1767]  ? do_int80_emulation+0x274/0x4d0
[ 2335.869504][ T1767]  do_fast_syscall_32+0x33/0x70
[ 2335.869515][ T1767]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2335.869528][ T1767] RIP: 0023:0xf709ef6c
[ 2335.869538][ T1767] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad
[ 2335.869548][ T1767] RSP: 002b:00000000f548d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 2335.869560][ T1767] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080006040
[ 2335.869567][ T1767] RDX: 0000000004041080 RSI: 0000000000000000 RDI: 0000000000000000
[ 2335.869573][ T1767] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2335.869580][ T1767] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2335.869585][ T1767] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2335.869600][ T1767]  </TASK>
[ 2336.225903][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2336.515273][   T24] usb 4-1: string descriptor 0 read error: -71
[ 2336.522389][   T24] uclogic 0003:5543:0081.0020: failed retrieving string descriptor #200: -71
[ 2336.532296][   T24] uclogic 0003:5543:0081.0020: failed retrieving pen parameters: -71
[ 2336.540897][   T24] uclogic 0003:5543:0081.0020: failed probing pen v2 parameters: -71
[ 2336.561129][   T24] uclogic 0003:5543:0081.0020: failed probing parameters: -71
[ 2336.606527][ T1784] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7036'.
[ 2336.629378][   T24] uclogic 0003:5543:0081.0020: probe with driver uclogic failed with error -71
[ 2336.670659][   T24] usb 4-1: USB disconnect, device number 100
[ 2336.684447][ T1776] FAULT_INJECTION: forcing a failure.
[ 2336.684447][ T1776] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2336.759661][ T1776] CPU: 1 UID: 0 PID: 1776 Comm: syz.2.7035 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2336.759692][ T1776] Tainted: [L]=SOFTLOCKUP
[ 2336.759700][ T1776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 2336.759712][ T1776] Call Trace:
[ 2336.759720][ T1776]  <TASK>
[ 2336.759729][ T1776]  dump_stack_lvl+0xe8/0x150
[ 2336.759758][ T1776]  should_fail_ex+0x412/0x560
[ 2336.759788][ T1776]  _copy_from_user+0x2d/0xb0
[ 2336.759808][ T1776]  kstrtouint_from_user+0xd6/0x180
[ 2336.759837][ T1776]  ? __pfx_kstrtouint_from_user+0x10/0x10
[ 2336.759863][ T1776]  ? __pfx___mutex_trylock_common+0x10/0x10
[ 2336.759884][ T1776]  proc_fail_nth_write+0x8e/0x210
[ 2336.759896][ T1776]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 2336.759910][ T1776]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 2336.759922][ T1776]  vfs_write+0x29a/0xb90
[ 2336.759943][ T1776]  ? __pfx_vfs_write+0x10/0x10
[ 2336.759959][ T1776]  ? __fget_files+0x2a/0x420
[ 2336.759975][ T1776]  ? __fget_files+0x3a0/0x420
[ 2336.759987][ T1776]  ? __fget_files+0x2a/0x420
[ 2336.760004][ T1776]  ksys_write+0x150/0x270
[ 2336.760020][ T1776]  ? __pfx_ksys_write+0x10/0x10
[ 2336.760038][ T1776]  ? asm_int80_emulation+0x1a/0x20
[ 2336.760051][ T1776]  do_int80_emulation+0x173/0x4d0
[ 2336.760063][ T1776]  ? trace_irq_disable+0x3b/0x150
[ 2336.760077][ T1776]  ? asm_int80_emulation+0x1a/0x20
[ 2336.760086][ T1776]  ? clear_bhb_loop+0x40/0x90
[ 2336.760096][ T1776]  ? clear_bhb_loop+0x40/0x90
[ 2336.760109][ T1776]  asm_int80_emulation+0x1a/0x20
[ 2336.760119][ T1776] RIP: 0023:0xf718572b
[ 2336.760129][ T1776] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[ 2336.760138][ T1776] RSP: 002b:00000000f54464bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004
[ 2336.760151][ T1776] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f54465d0
[ 2336.760161][ T1776] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[ 2336.760171][ T1776] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2336.760182][ T1776] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2336.760192][ T1776] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2336.760217][ T1776]  </TASK>
[ 2337.258263][T22304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2337.349925][ T1790] 8021q: adding VLAN 0 to HW filter on device bond15
[ 2337.592860][ T1796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7039'.
[ 2337.990347][ T1801] 8021q: adding VLAN 0 to HW filter on device bond18
[ 2338.308659][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2339.099488][   T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2339.146003][ T1825] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7044'.
[ 2339.367000][ T1830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7047'.
[ 2339.408068][T22304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2339.420904][ T1831] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7045'.
[ 2339.477946][   T24] usb 4-1: new high-speed USB device number 101 using dummy_hcd
[ 2339.870512][T30075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2340.020759][ T1832] 8021q: adding VLAN 0 to HW filter on device bond19
[ 2340.028464][   T24] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 2340.039511][   T24] usb 4-1: config 27 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping
[ 2340.051660][   T24] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 2340.226306][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2340.468432][T22304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2340.626686][   T24] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[ 2340.645352][   T24] usb 4-1: invalid MIDI out EP 0
[ 2340.673813][T13574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2340.683447][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2340.704813][T22304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2341.144517][   T24] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22
[ 2341.693018][ T1847] program syz.4.7051 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2341.705868][ T1847] input: syz1 as /devices/virtual/input/input131
[ 2341.767663][T22304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2341.787796][ T1841] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[ 2341.813991][ T1849] QAT: failed to copy from user cfg_data.
[ 2342.263262][T14332] usb 4-1: USB disconnect, device number 101
[ 2342.529207][ T1860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7052'.
[ 2342.727493][ T1862] syzkaller0: entered promiscuous mode
[ 2342.742230][ T1862] syzkaller0: entered allmulticast mode
[ 2342.793740][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2343.826477][ T1876] FAULT_INJECTION: forcing a failure.
[ 2343.826477][ T1876] name failslab, interval 1, probability 0, space 0, times 0
[ 2343.828232][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2343.848602][ T1872] 8021q: adding VLAN 0 to HW filter on device bond16
[ 2343.902610][ T1876] CPU: 0 UID: 0 PID: 1876 Comm: syz.5.7057 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2343.902640][ T1876] Tainted: [L]=SOFTLOCKUP
[ 2343.902647][ T1876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 2343.902659][ T1876] Call Trace:
[ 2343.902666][ T1876]  <TASK>
[ 2343.902674][ T1876]  dump_stack_lvl+0xe8/0x150
[ 2343.902704][ T1876]  should_fail_ex+0x412/0x560
[ 2343.902735][ T1876]  should_failslab+0xa8/0x100
[ 2343.902757][ T1876]  kmem_cache_alloc_node_noprof+0x8f/0x690
[ 2343.902784][ T1876]  ? do_fast_syscall_32+0x33/0x70
[ 2343.902804][ T1876]  ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2343.902827][ T1876]  ? __alloc_skb+0x1d0/0x7d0
[ 2343.902857][ T1876]  __alloc_skb+0x1d0/0x7d0
[ 2343.902886][ T1876]  tipc_msg_create+0x51/0x4d0
[ 2343.902910][ T1876]  tipc_group_proto_xmit+0xce/0x790
[ 2343.902937][ T1876]  tipc_group_cong+0x4dc/0x5e0
[ 2343.902958][ T1876]  ? __pfx_tipc_group_cong+0x10/0x10
[ 2343.902975][ T1876]  ? lockdep_hardirqs_on+0x7a/0x110
[ 2343.903004][ T1876]  ? tipc_dest_pop+0x19c/0x230
[ 2343.903030][ T1876]  __tipc_sendmsg+0x1046/0x2bf0
[ 2343.903073][ T1876]  ? __pfx___tipc_sendmsg+0x10/0x10
[ 2343.903098][ T1876]  ? tomoyo_check_open_permission+0x38e/0x470
[ 2343.903124][ T1876]  ? aa_label_sk_perm+0x529/0x6d0
[ 2343.903153][ T1876]  ? __lock_acquire+0x6b5/0x2cf0
[ 2343.903175][ T1876]  ? __pfx_aa_label_sk_perm+0x10/0x10
[ 2343.903209][ T1876]  ? __lock_acquire+0x6b5/0x2cf0
[ 2343.903233][ T1876]  ? __lock_acquire+0x6b5/0x2cf0
[ 2343.903273][ T1876]  ? __lock_acquire+0x6b5/0x2cf0
[ 2343.903311][ T1876]  ? tipc_sendmsg+0x47/0x70
[ 2343.903339][ T1876]  ? __local_bh_enable_ip+0xd0/0x130
[ 2343.903371][ T1876]  tipc_sendmsg+0x55/0x70
[ 2343.903389][ T1876]  ? __pfx_tipc_sendmsg+0x10/0x10
[ 2343.903406][ T1876]  ____sys_sendmsg+0xa68/0xad0
[ 2343.903434][ T1876]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2343.903457][ T1876]  ? kstrtoull+0x12f/0x1d0
[ 2343.903493][ T1876]  ___sys_sendmsg+0x2a5/0x360
[ 2343.903517][ T1876]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2343.903539][ T1876]  ? get_pid_task+0x20/0x1f0
[ 2343.903566][ T1876]  ? get_pid_task+0x20/0x1f0
[ 2343.903588][ T1876]  ? get_pid_task+0x20/0x1f0
[ 2343.903638][ T1876]  ? __fget_files+0x2a/0x420
[ 2343.903661][ T1876]  ? __fget_files+0x3a0/0x420
[ 2343.903694][ T1876]  __sys_sendmsg+0x183/0x260
[ 2343.903716][ T1876]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2343.903755][ T1876]  __do_fast_syscall_32+0x20d/0x640
[ 2343.903778][ T1876]  ? do_fast_syscall_32+0x33/0x70
[ 2343.903797][ T1876]  ? asm_int80_emulation+0x1a/0x20
[ 2343.903814][ T1876]  ? do_int80_emulation+0x274/0x4d0
[ 2343.903833][ T1876]  ? trace_irq_disable+0x3b/0x150
[ 2343.903861][ T1876]  do_fast_syscall_32+0x33/0x70
[ 2343.903883][ T1876]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2343.903906][ T1876] RIP: 0023:0xf709ef6c
[ 2343.903923][ T1876] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad
[ 2343.903940][ T1876] RSP: 002b:00000000f548d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 2343.903961][ T1876] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800008c0
[ 2343.903975][ T1876] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000
[ 2343.903986][ T1876] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2343.903997][ T1876] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2343.904009][ T1876] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2343.904037][ T1876]  </TASK>
[ 2343.948712][ T1874] workqueue: Failed to create a rescuer kthread for wq "bond20": -EINTR
[ 2344.558882][ T1889] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7058'.
[ 2344.930635][ T1891] 8021q: adding VLAN 0 to HW filter on device bond13
[ 2344.953496][   T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2345.012308][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 2345.018846][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2345.027155][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 2345.316492][ T1897] netlink: 'syz.4.7060': attribute type 2 has an invalid length.
[ 2345.515237][   T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2345.811155][ T1908] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7061'.
[ 2345.979302][ T1909] blktrace: Concurrent blktraces are not allowed on nullb0
[ 2346.062777][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2346.231593][T13582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2346.245563][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2346.254275][T22304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2346.763940][ T1910] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7062'.
[ 2347.268082][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2347.550068][ T1920] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 2347.557488][ T1920] IPv6: NLM_F_CREATE should be set when creating new route
[ 2347.564815][ T1920] IPv6: NLM_F_CREATE should be set when creating new route
[ 2347.572064][ T1920] IPv6: NLM_F_CREATE should be set when creating new route
[ 2347.883302][ T1920] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 2347.929840][ T1920] syzkaller0: entered promiscuous mode
[ 2347.935328][ T1920] syzkaller0: entered allmulticast mode
[ 2348.027992][ T1921] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7063'.
[ 2348.052285][ T1918] tipc: Resetting bearer <eth:syzkaller0>
[ 2348.181097][ T1918] tipc: Disabling bearer <eth:syzkaller0>
[ 2348.334317][ T1931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7065'.
[ 2348.414257][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2348.596795][ T1938] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2348.756913][ T1938] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2348.848578][ T1941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7067'.
[ 2349.426353][T30638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2349.980624][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2349.990481][   T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2350.062721][ T1948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7070'.
[ 2350.366357][ T1953] 8021q: adding VLAN 0 to HW filter on device bond14
[ 2350.468277][T30638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2351.064228][ T1968] 8021q: adding VLAN 0 to HW filter on device bond20
[ 2351.408453][T30075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2351.528526][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2351.828127][T30638] usb 6-1: new full-speed USB device number 99 using dummy_hcd
[ 2351.899600][   T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2351.908427][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2351.917003][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2351.998760][T30638] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[ 2352.058723][ T1981] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7077'.
[ 2352.124670][T30638] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64
[ 2352.136395][T30638] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 35185, setting to 64
[ 2352.148075][T30638] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 2352.165669][T30638] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2352.205818][ T1974] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 2352.399070][ T1974] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 2352.567317][ T1993] blktrace: Concurrent blktraces are not allowed on nullb0
[ 2352.738978][ T1991] 8021q: adding VLAN 0 to HW filter on device bond21
[ 2352.840299][T30638] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[ 2352.948125][T22304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2354.291368][ T2005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7081'.
[ 2354.476498][ T2007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7082'.
[ 2354.517807][T13429] usb 6-1: USB disconnect, device number 99
[ 2355.058203][T30638] net_ratelimit: 1 callbacks suppressed
[ 2355.058224][T30638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2355.743010][T13574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2355.857921][ T2019] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7095'.
[ 2356.153603][T22304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2356.184113][ T2022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7084'.
[ 2356.486113][ T2031] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7087'.
[ 2356.830845][ T2035] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7088'.
[ 2357.011720][ T2039] trusted_key: encrypted_key: insufficient parameters specified
[ 2357.039519][   T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2357.047741][T13582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2357.066535][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2357.078184][T13969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2357.249585][T22304] usb 2-1: new full-speed USB device number 126 using dummy_hcd
[ 2357.422330][T22304] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[ 2357.431723][T22304] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[ 2357.458131][T22304] usb 2-1: Product: syz
[ 2357.478046][T22304] usb 2-1: Manufacturer: syz
[ 2357.503513][T22304] usb 2-1: SerialNumber: syz
[ 2357.525580][T22304] usb 2-1: config 0 descriptor??
[ 2357.959016][ T2044] blktrace: Concurrent blktraces are not allowed on nullb0
[ 2358.349750][T13969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2359.081279][ T2052] 8021q: adding VLAN 0 to HW filter on device bond15
[ 2359.484726][ T2059] netlink: 'syz.5.7094': attribute type 12 has an invalid length.
[ 2359.601025][ T2059] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7094'.
[ 2359.610672][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2359.768138][ T2061] snd_dummy snd_dummy.0: control 1:-1:-8:syz0:32 is already present
[ 2359.885196][    T9] usb 2-1: USB disconnect, device number 126
[ 2360.612826][ T2074] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7097'.
[ 2360.623343][ T2074] ipvlan1: entered allmulticast mode
[ 2360.628734][ T2074] veth0_vlan: entered allmulticast mode
[ 2360.638222][T13969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2360.700285][ T2075] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7098'.
[ 2360.859545][T13574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2361.554292][ T2082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7109'.
[ 2361.658142][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2361.855962][ T2084] blktrace: Concurrent blktraces are not allowed on nullb0
[ 2362.291919][T30075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2362.420496][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2362.448431][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2362.590503][ T2094] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7100'.
[ 2362.788972][T13429] usb 2-1: new high-speed USB device number 127 using dummy_hcd
[ 2362.789534][T13582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2362.926200][ T2098] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7103'.
[ 2363.067970][T13429] usb 2-1: Using ep0 maxpacket: 16
[ 2363.077935][T13429] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2363.156788][T13429] usb 2-1: config 0 interface 0 has no altsetting 0
[ 2363.183442][T13429] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[ 2363.214636][T13429] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2363.258148][T13429] usb 2-1: config 0 descriptor??
[ 2363.408021][ T2104] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7104'.
[ 2363.445769][ T2107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7105'.
[ 2363.498168][T22304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2364.217746][T13429] usbhid 2-1:0.0: can't add hid device: -71
[ 2364.225270][T13429] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 2364.315662][T13429] usb 2-1: USB disconnect, device number 127
[ 2364.560561][T22304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2364.724232][ T2117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7107'.
[ 2364.931728][ T2119] 8021q: adding VLAN 0 to HW filter on device bond17
[ 2365.092978][ T2124] Cannot find add_set index 3 as target
[ 2365.487138][ T2128] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7108'.
[ 2365.579617][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2365.704742][ T2133] blktrace: Concurrent blktraces are not allowed on nullb0
[ 2366.628133][T22304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2366.636307][T30075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2367.402789][ T2143] syzkaller0: entered promiscuous mode
[ 2367.408382][ T2143] syzkaller0: entered allmulticast mode
[ 2367.549047][ T2151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7113'.
[ 2367.659352][T22304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2367.979302][ T2149] 8021q: adding VLAN 0 to HW filter on device bond18
[ 2368.209491][ T2156] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7115'.
[ 2368.580459][  T115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2368.768135][T22304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2369.306492][ T2160] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7117'.
[ 2369.448317][ T2163] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7118'.
[ 2369.593014][ T2173] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7122'.
[ 2369.633882][T22304] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[ 2369.798997][ T2175] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7121'.
[ 2369.851585][T30638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2369.887936][T22304] usb 2-1: Using ep0 maxpacket: 16
[ 2369.904223][T22304] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2369.968204][ T2180] Cannot find add_set index 3 as target
[ 2369.982641][T22304] usb 2-1: config 0 interface 0 has no altsetting 0
[ 2369.989487][T22304] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[ 2370.021017][T22304] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2370.036328][T22304] usb 2-1: config 0 descriptor??
[ 2370.858712][T30638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2371.301021][T22304] usbhid 2-1:0.0: can't add hid device: -71
[ 2371.307387][T22304] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 2371.327734][ T2190] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7125'.
[ 2371.345916][T22304] usb 2-1: USB disconnect, device number 2
[ 2371.377479][ T2190] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7125'.
[ 2371.494480][ T2193] 8021q: adding VLAN 0 to HW filter on device bond19
[ 2371.517990][T13429] usb 4-1: new full-speed USB device number 102 using dummy_hcd
[ 2371.549440][   T29] kauditd_printk_skb: 19 callbacks suppressed
[ 2371.549452][   T29] audit: type=1326 audit(1771142618.458:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2191 comm="syz.5.7136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000
[ 2371.603468][ T2192] kvm: kvm [2191]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x11e) = 0xbe70a111
[ 2371.717759][   T29] audit: type=1326 audit(1771142618.488:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2191 comm="syz.5.7136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000
[ 2371.838775][   T29] audit: type=1326 audit(1771142618.488:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2191 comm="syz.5.7136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000
[ 2371.898130][T22304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2372.018283][   T29] audit: type=1326 audit(1771142618.488:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2191 comm="syz.5.7136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf709ef6c code=0x7ffc0000
[ 2372.108094][   T29] audit: type=1326 audit(1771142618.488:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2191 comm="syz.5.7136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000
[ 2372.139008][T13429] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[ 2372.143083][   T29] audit: type=1326 audit(1771142618.488:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2191 comm="syz.5.7136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000
[ 2372.182899][   T29] audit: type=1326 audit(1771142618.488:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2191 comm="syz.5.7136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf709ef6c code=0x7ffc0000
[ 2372.236960][   T29] audit: type=1326 audit(1771142618.658:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2191 comm="syz.5.7136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000
[ 2372.260276][T13429] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[ 2372.265573][ T2206] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[ 2372.317338][T13429] usb 4-1: Product: syz
[ 2372.324578][T13429] usb 4-1: Manufacturer: syz
[ 2372.337339][T13429] usb 4-1: SerialNumber: syz
[ 2372.463678][T13582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2372.541696][ T2208] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7128'.
[ 2372.589954][T13429] usb 4-1: config 0 descriptor??
[ 2372.675900][   T29] audit: type=1326 audit(1771142618.658:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2191 comm="syz.5.7136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000
[ 2372.939121][T30638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2373.679578][ T2217] FAULT_INJECTION: forcing a failure.
[ 2373.679578][ T2217] name failslab, interval 1, probability 0, space 0, times 0
[ 2373.694554][   T29] audit: type=1326 audit(1771142620.578:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2216 comm="syz.1.7131" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8f6c code=0x7ffc0000
[ 2373.726890][ T2217] CPU: 1 UID: 0 PID: 2217 Comm: syz.1.7131 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2373.726911][ T2217] Tainted: [L]=SOFTLOCKUP
[ 2373.726915][ T2217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 2373.726921][ T2217] Call Trace:
[ 2373.726926][ T2217]  <TASK>
[ 2373.726932][ T2217]  dump_stack_lvl+0xe8/0x150
[ 2373.726951][ T2217]  should_fail_ex+0x412/0x560
[ 2373.726969][ T2217]  should_failslab+0xa8/0x100
[ 2373.726982][ T2217]  kmem_cache_alloc_node_noprof+0x8f/0x690
[ 2373.726999][ T2217]  ? __alloc_skb+0x186/0x7d0
[ 2373.727013][ T2217]  ? __alloc_skb+0x1d0/0x7d0
[ 2373.727026][ T2217]  ? __local_bh_enable_ip+0xd0/0x130
[ 2373.727044][ T2217]  __alloc_skb+0x1d0/0x7d0
[ 2373.727059][ T2217]  ? __raw_spin_lock_init+0x45/0x100
[ 2373.727070][ T2217]  audit_log_start+0x416/0xa20
[ 2373.727085][ T2217]  ? __pfx_audit_log_start+0x10/0x10
[ 2373.727099][ T2217]  ? get_pid_task+0x20/0x1f0
[ 2373.727115][ T2217]  ? get_pid_task+0x20/0x1f0
[ 2373.727132][ T2217]  audit_seccomp+0x63/0x190
[ 2373.727142][ T2217]  ? clear_bhb_loop+0x40/0x90
[ 2373.727153][ T2217]  ? clear_bhb_loop+0xe/0x90
[ 2373.727165][ T2217]  __seccomp_filter+0xd48/0x1ef0
[ 2373.727182][ T2217]  ? __pfx___seccomp_filter+0x10/0x10
[ 2373.727191][ T2217]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[ 2373.727206][ T2217]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 2373.727218][ T2217]  ? __fget_files+0x3a0/0x420
[ 2373.727242][ T2217]  ? __secure_computing+0xe1/0x2a0
[ 2373.727253][ T2217]  __do_fast_syscall_32+0x332/0x640
[ 2373.727266][ T2217]  ? do_fast_syscall_32+0x33/0x70
[ 2373.727276][ T2217]  ? asm_int80_emulation+0x1a/0x20
[ 2373.727285][ T2217]  ? do_int80_emulation+0x274/0x4d0
[ 2373.727296][ T2217]  ? trace_irq_disable+0x3b/0x150
[ 2373.727311][ T2217]  do_fast_syscall_32+0x33/0x70
[ 2373.727323][ T2217]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2373.727335][ T2217] RIP: 0023:0xf7fa8f6c
[ 2373.727346][ T2217] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad
[ 2373.727355][ T2217] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[ 2373.727367][ T2217] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 000000000000ae80
[ 2373.727374][ T2217] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2373.727381][ T2217] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2373.727387][ T2217] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2373.727393][ T2217] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2373.727407][ T2217]  </TASK>
[ 2374.054500][T13969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2374.103248][ T2217] kvm: kvm [2216]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x11e) = 0xbe70a111
[ 2374.135831][    T9] usb 4-1: USB disconnect, device number 102
[ 2374.263212][ T2226] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7134'.
[ 2374.298682][   T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2374.410670][ T2229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7132'.
[ 2374.450465][ T2224] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7133'.
[ 2374.859537][   T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[ 2375.057336][ T2244] 8021q: adding VLAN 0 to HW filter on device bond20
[ 2375.130786][T30638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2375.146629][   T24] usb 2-1: Using ep0 maxpacket: 16
[ 2375.391989][ T2248] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7140'.
[ 2375.418751][   T24] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2375.438147][   T24] usb 2-1: config 0 interface 0 has no altsetting 0
[ 2375.469263][   T24] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[ 2375.488577][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2375.515378][   T24] usb 2-1: config 0 descriptor??
[ 2375.877545][    T9] usb 4-1: new full-speed USB device number 103 using dummy_hcd
[ 2376.149484][    T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2376.162162][T22304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2376.190182][    T9] usb 4-1: config 0 has no interfaces?
[ 2376.232199][    T9] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[ 2376.242102][ T2255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2376.253771][    T9] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[ 2376.264643][ T2255] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2376.277504][    T9] usb 4-1: Product: syz
[ 2376.282480][    T9] usb 4-1: Manufacturer: syz
[ 2376.287297][    T9] usb 4-1: SerialNumber: syz
[ 2376.310498][    T9] usb 4-1: config 0 descriptor??
[ 2376.404051][   T24] usbhid 2-1:0.0: can't add hid device: -71
[ 2376.418116][   T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 2376.442891][   T24] usb 2-1: USB disconnect, device number 3
[ 2377.179107][ T2268] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7146'.
[ 2377.188416][ T2268] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7146'.
[ 2377.202115][T22304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2377.248854][ T2270] FAULT_INJECTION: forcing a failure.
[ 2377.248854][ T2270] name failslab, interval 1, probability 0, space 0, times 0
[ 2377.261789][   T24] usb 6-1: new high-speed USB device number 100 using dummy_hcd
[ 2377.270818][ T2270] CPU: 1 UID: 0 PID: 2270 Comm: syz.2.7147 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2377.270848][ T2270] Tainted: [L]=SOFTLOCKUP
[ 2377.270855][ T2270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 2377.270866][ T2270] Call Trace:
[ 2377.270877][ T2270]  <TASK>
[ 2377.270886][ T2270]  dump_stack_lvl+0xe8/0x150
[ 2377.270917][ T2270]  should_fail_ex+0x412/0x560
[ 2377.270951][ T2270]  should_failslab+0xa8/0x100
[ 2377.270972][ T2270]  ? skb_clone+0x212/0x3a0
[ 2377.270993][ T2270]  kmem_cache_alloc_noprof+0x87/0x650
[ 2377.271020][ T2270]  ? __netlink_lookup+0xc6/0x8b0
[ 2377.271053][ T2270]  skb_clone+0x212/0x3a0
[ 2377.271077][ T2270]  __netlink_deliver_tap+0x404/0x850
[ 2377.271114][ T2270]  ? netlink_deliver_tap+0x2e/0x1b0
[ 2377.271141][ T2270]  netlink_deliver_tap+0x19c/0x1b0
[ 2377.271168][ T2270]  netlink_unicast+0x7e3/0x9b0
[ 2377.271199][ T2270]  ? __pfx_netlink_unicast+0x10/0x10
[ 2377.271225][ T2270]  ? netlink_sendmsg+0x650/0xb40
[ 2377.271247][ T2270]  ? skb_put+0x11b/0x210
[ 2377.271276][ T2270]  netlink_sendmsg+0x813/0xb40
[ 2377.271308][ T2270]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2377.271336][ T2270]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 2377.271364][ T2270]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 2377.271386][ T2270]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2377.271408][ T2270]  ____sys_sendmsg+0xa68/0xad0
[ 2377.271436][ T2270]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2377.271459][ T2270]  ? kstrtoull+0x12f/0x1d0
[ 2377.271490][ T2270]  ___sys_sendmsg+0x2a5/0x360
[ 2377.271512][ T2270]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2377.271534][ T2270]  ? get_pid_task+0x20/0x1f0
[ 2377.271560][ T2270]  ? get_pid_task+0x20/0x1f0
[ 2377.271584][ T2270]  ? get_pid_task+0x20/0x1f0
[ 2377.271635][ T2270]  ? __fget_files+0x2a/0x420
[ 2377.271666][ T2270]  ? __fget_files+0x3a0/0x420
[ 2377.271699][ T2270]  __sys_sendmsg+0x183/0x260
[ 2377.271721][ T2270]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2377.271761][ T2270]  __do_fast_syscall_32+0x20d/0x640
[ 2377.271784][ T2270]  ? do_fast_syscall_32+0x33/0x70
[ 2377.271803][ T2270]  ? asm_int80_emulation+0x1a/0x20
[ 2377.271822][ T2270]  ? do_int80_emulation+0x274/0x4d0
[ 2377.271841][ T2270]  ? trace_irq_disable+0x3b/0x150
[ 2377.271870][ T2270]  do_fast_syscall_32+0x33/0x70
[ 2377.271891][ T2270]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2377.271914][ T2270] RIP: 0023:0xf7f84f6c
[ 2377.271931][ T2270] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad
[ 2377.271949][ T2270] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 2377.271970][ T2270] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000
[ 2377.271983][ T2270] RDX: 0000000000024080 RSI: 0000000000000000 RDI: 0000000000000000
[ 2377.271996][ T2270] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2377.272007][ T2270] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2377.272019][ T2270] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2377.272047][ T2270]  </TASK>
[ 2377.728182][   T24] usb 6-1: Using ep0 maxpacket: 16
[ 2377.736165][   T24] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2377.737660][ T2273] FAULT_INJECTION: forcing a failure.
[ 2377.737660][ T2273] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2377.749735][   T24] usb 6-1: config 0 interface 0 has no altsetting 0
[ 2377.762235][ T2273] CPU: 0 UID: 0 PID: 2273 Comm: syz.2.7148 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2377.762264][ T2273] Tainted: [L]=SOFTLOCKUP
[ 2377.762271][ T2273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 2377.762282][ T2273] Call Trace:
[ 2377.762290][ T2273]  <TASK>
[ 2377.762298][ T2273]  dump_stack_lvl+0xe8/0x150
[ 2377.762328][ T2273]  should_fail_ex+0x412/0x560
[ 2377.762358][ T2273]  _copy_from_iter+0x1d3/0x1670
[ 2377.762389][ T2273]  ? rcu_is_watching+0x15/0xb0
[ 2377.762418][ T2273]  ? __pfx__copy_from_iter+0x10/0x10
[ 2377.762450][ T2273]  ? netlink_sendmsg+0x650/0xb40
[ 2377.762474][ T2273]  ? skb_put+0x11b/0x210
[ 2377.762502][ T2273]  netlink_sendmsg+0x6c0/0xb40
[ 2377.762533][ T2273]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2377.762567][ T2273]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 2377.762595][ T2273]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 2377.762614][ T2273]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2377.762637][ T2273]  ____sys_sendmsg+0xa68/0xad0
[ 2377.762662][ T2273]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2377.762684][ T2273]  ? kstrtoull+0x12f/0x1d0
[ 2377.762715][ T2273]  ___sys_sendmsg+0x2a5/0x360
[ 2377.762738][ T2273]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2377.762758][ T2273]  ? get_pid_task+0x20/0x1f0
[ 2377.762784][ T2273]  ? get_pid_task+0x20/0x1f0
[ 2377.762808][ T2273]  ? get_pid_task+0x20/0x1f0
[ 2377.762855][ T2273]  ? __fget_files+0x2a/0x420
[ 2377.762876][ T2273]  ? __fget_files+0x3a0/0x420
[ 2377.762907][ T2273]  __sys_sendmsg+0x183/0x260
[ 2377.762927][ T2273]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2377.762963][ T2273]  __do_fast_syscall_32+0x20d/0x640
[ 2377.762986][ T2273]  ? do_fast_syscall_32+0x33/0x70
[ 2377.763005][ T2273]  ? asm_int80_emulation+0x1a/0x20
[ 2377.763022][ T2273]  ? do_int80_emulation+0x274/0x4d0
[ 2377.763041][ T2273]  ? trace_irq_disable+0x3b/0x150
[ 2377.763067][ T2273]  do_fast_syscall_32+0x33/0x70
[ 2377.763088][ T2273]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2377.763113][ T2273] RIP: 0023:0xf7f84f6c
[ 2377.763130][ T2273] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad
[ 2377.763147][ T2273] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 2377.763166][ T2273] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0
[ 2377.763180][ T2273] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2377.763192][ T2273] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2377.763202][ T2273] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2377.763214][ T2273] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2377.763239][ T2273]  </TASK>
[ 2378.035709][   T24] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[ 2378.047306][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2378.060995][   T24] usb 6-1: config 0 descriptor??
[ 2378.088013][T22304] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[ 2378.121405][    T9] usb 4-1: USB disconnect, device number 103
[ 2378.138593][T13574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2378.199436][ T2277] FAULT_INJECTION: forcing a failure.
[ 2378.199436][ T2277] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2378.212614][ T2277] CPU: 1 UID: 0 PID: 2277 Comm: syz.3.7150 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2378.212639][ T2277] Tainted: [L]=SOFTLOCKUP
[ 2378.212643][ T2277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 2378.212650][ T2277] Call Trace:
[ 2378.212656][ T2277]  <TASK>
[ 2378.212662][ T2277]  dump_stack_lvl+0xe8/0x150
[ 2378.212682][ T2277]  should_fail_ex+0x412/0x560
[ 2378.212703][ T2277]  _copy_from_iter+0x1d3/0x1670
[ 2378.212722][ T2277]  ? rcu_is_watching+0x15/0xb0
[ 2378.212739][ T2277]  ? __pfx__copy_from_iter+0x10/0x10
[ 2378.212758][ T2277]  ? netlink_sendmsg+0x650/0xb40
[ 2378.212772][ T2277]  ? skb_put+0x11b/0x210
[ 2378.212789][ T2277]  netlink_sendmsg+0x6c0/0xb40
[ 2378.212807][ T2277]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2378.212822][ T2277]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 2378.212838][ T2277]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 2378.212849][ T2277]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2378.212862][ T2277]  ____sys_sendmsg+0xa68/0xad0
[ 2378.212877][ T2277]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2378.212889][ T2277]  ? kstrtoull+0x12f/0x1d0
[ 2378.212907][ T2277]  ___sys_sendmsg+0x2a5/0x360
[ 2378.212920][ T2277]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2378.212931][ T2277]  ? get_pid_task+0x20/0x1f0
[ 2378.212946][ T2277]  ? get_pid_task+0x20/0x1f0
[ 2378.212960][ T2277]  ? get_pid_task+0x20/0x1f0
[ 2378.212986][ T2277]  ? __fget_files+0x2a/0x420
[ 2378.213000][ T2277]  ? __fget_files+0x3a0/0x420
[ 2378.213017][ T2277]  __sys_sendmsg+0x183/0x260
[ 2378.213028][ T2277]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2378.213049][ T2277]  __do_fast_syscall_32+0x20d/0x640
[ 2378.213063][ T2277]  ? do_fast_syscall_32+0x33/0x70
[ 2378.213073][ T2277]  ? asm_int80_emulation+0x1a/0x20
[ 2378.213084][ T2277]  ? do_int80_emulation+0x274/0x4d0
[ 2378.213094][ T2277]  ? trace_irq_disable+0x3b/0x150
[ 2378.213110][ T2277]  do_fast_syscall_32+0x33/0x70
[ 2378.213121][ T2277]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2378.213133][ T2277] RIP: 0023:0xf6fcef6c
[ 2378.213144][ T2277] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad
[ 2378.213153][ T2277] RSP: 002b:00000000f53bd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 2378.213164][ T2277] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080
[ 2378.213172][ T2277] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2378.213178][ T2277] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2378.213183][ T2277] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2378.213190][ T2277] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2378.213204][ T2277]  </TASK>
[ 2378.478560][T13969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2378.523908][T22304] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[ 2378.533475][T22304] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[ 2378.542249][T22304] usb 2-1: Product: syz
[ 2378.552621][T22304] usb 2-1: Manufacturer: syz
[ 2378.557319][T22304] usb 2-1: SerialNumber: syz
[ 2378.564611][T22304] usb 2-1: config 0 descriptor??
[ 2378.786414][    T9] usb 4-1: new high-speed USB device number 104 using dummy_hcd
[ 2378.927996][    T9] usb 4-1: device descriptor read/64, error -71
[ 2379.104197][   T24] usbhid 6-1:0.0: can't add hid device: -71
[ 2379.450409][    T9] usb 4-1: new high-speed USB device number 105 using dummy_hcd
[ 2379.458517][   T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 2379.490400][   T24] usb 6-1: USB disconnect, device number 100
[ 2379.506258][T22304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2379.569846][ T2284] 8021q: adding VLAN 0 to HW filter on device bond16
[ 2379.592192][    T9] usb 4-1: device descriptor read/64, error -71
[ 2379.708406][    T9] usb usb4-port1: attempt power cycle
[ 2379.994108][ T2293] FAULT_INJECTION: forcing a failure.
[ 2379.994108][ T2293] name failslab, interval 1, probability 0, space 0, times 0
[ 2380.021274][ T2293] CPU: 0 UID: 0 PID: 2293 Comm: syz.5.7155 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2380.021297][ T2293] Tainted: [L]=SOFTLOCKUP
[ 2380.021308][ T2293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 2380.021314][ T2293] Call Trace:
[ 2380.021319][ T2293]  <TASK>
[ 2380.021325][ T2293]  dump_stack_lvl+0xe8/0x150
[ 2380.021344][ T2293]  should_fail_ex+0x412/0x560
[ 2380.021362][ T2293]  should_failslab+0xa8/0x100
[ 2380.021375][ T2293]  ? skb_clone+0x212/0x3a0
[ 2380.021386][ T2293]  kmem_cache_alloc_noprof+0x87/0x650
[ 2380.021401][ T2293]  ? __netlink_lookup+0xc6/0x8b0
[ 2380.021420][ T2293]  skb_clone+0x212/0x3a0
[ 2380.021432][ T2293]  __netlink_deliver_tap+0x404/0x850
[ 2380.021452][ T2293]  ? netlink_deliver_tap+0x2e/0x1b0
[ 2380.021465][ T2293]  netlink_deliver_tap+0x19c/0x1b0
[ 2380.021484][ T2293]  netlink_unicast+0x7e3/0x9b0
[ 2380.021501][ T2293]  ? __pfx_netlink_unicast+0x10/0x10
[ 2380.021514][ T2293]  ? netlink_sendmsg+0x650/0xb40
[ 2380.021526][ T2293]  ? skb_put+0x11b/0x210
[ 2380.021543][ T2293]  netlink_sendmsg+0x813/0xb40
[ 2380.021561][ T2293]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2380.021577][ T2293]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 2380.021593][ T2293]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 2380.021604][ T2293]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2380.021617][ T2293]  ____sys_sendmsg+0xa68/0xad0
[ 2380.021632][ T2293]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2380.021644][ T2293]  ? kstrtoull+0x12f/0x1d0
[ 2380.021662][ T2293]  ___sys_sendmsg+0x2a5/0x360
[ 2380.021675][ T2293]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2380.021687][ T2293]  ? get_pid_task+0x20/0x1f0
[ 2380.021702][ T2293]  ? get_pid_task+0x20/0x1f0
[ 2380.021715][ T2293]  ? get_pid_task+0x20/0x1f0
[ 2380.021743][ T2293]  ? __fget_files+0x2a/0x420
[ 2380.021756][ T2293]  ? __fget_files+0x3a0/0x420
[ 2380.021773][ T2293]  __sys_sendmsg+0x183/0x260
[ 2380.021785][ T2293]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2380.021806][ T2293]  __do_fast_syscall_32+0x20d/0x640
[ 2380.021820][ T2293]  ? do_fast_syscall_32+0x33/0x70
[ 2380.021830][ T2293]  ? asm_int80_emulation+0x1a/0x20
[ 2380.021840][ T2293]  ? do_int80_emulation+0x274/0x4d0
[ 2380.021850][ T2293]  ? trace_irq_disable+0x3b/0x150
[ 2380.021866][ T2293]  do_fast_syscall_32+0x33/0x70
[ 2380.021877][ T2293]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2380.021890][ T2293] RIP: 0023:0xf709ef6c
[ 2380.021900][ T2293] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad
[ 2380.021910][ T2293] RSP: 002b:00000000f548d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 2380.021921][ T2293] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180
[ 2380.021929][ T2293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2380.021935][ T2293] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2380.021941][ T2293] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2380.021947][ T2293] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2380.021961][ T2293]  </TASK>
[ 2380.021989][ T2293] netlink: 'syz.5.7155': attribute type 13 has an invalid length.
[ 2380.068598][   T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2380.077991][    T9] usb 4-1: new high-speed USB device number 106 using dummy_hcd
[ 2380.388311][T14332] usb 2-1: USB disconnect, device number 4
[ 2380.490526][    T9] usb 4-1: device descriptor read/8, error -71
[ 2380.538521][T13969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2380.712557][   T43] dvb-usb: did not find the firmware file 'dvb-usb-dw2104.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[ 2380.739958][ T2293] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2380.747471][ T2293] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2380.787687][ T2303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7158'.
[ 2380.796717][    T9] usb 4-1: new high-speed USB device number 107 using dummy_hcd
[ 2380.884923][    T9] usb 4-1: device descriptor read/8, error -71
[ 2380.892333][ T2293] team_slave_0: left promiscuous mode
[ 2380.921178][ T2293] team_slave_1: left promiscuous mode
[ 2381.013771][    T9] usb usb4-port1: unable to enumerate USB device
[ 2381.051017][   T43] dvb-usb: found a 'DVBWorld DW2104 USB2.0' in cold state, will try to load a firmware
[ 2381.073075][   T43] usb 5-1: Direct firmware load for dvb-usb-dw2104.fw failed with error -2
[ 2381.094999][   T43] usb 5-1: Falling back to sysfs fallback for: dvb-usb-dw2104.fw
[ 2381.183294][ T2293] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2381.232013][ T2293] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2381.580396][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2381.602100][ T2309] netlink: 72 bytes leftover after parsing attributes in process `syz.4.7160'.
[ 2382.622369][T13969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2382.653734][   T60] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2382.705151][ T2331] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7164'.
[ 2382.875040][ T2326] syzkaller0: entered promiscuous mode
[ 2382.881038][ T2326] syzkaller0: entered allmulticast mode
[ 2382.901569][T13969] usb 3-1: new high-speed USB device number 75 using dummy_hcd
[ 2382.998540][ T2330] 8021q: adding VLAN 0 to HW filter on device bond22
[ 2383.045796][   T60] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2383.066332][   T60] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2383.080286][T13969] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 2383.122781][T13969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 2383.178146][T13969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 2383.201530][   T60] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2383.217640][T13969] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 2383.398537][T19813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2383.476900][T13969] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2383.500833][T13969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2383.539020][T13969] usb 3-1: config 0 descriptor??
[ 2383.679085][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2383.873304][ T2339] 8021q: adding VLAN 0 to HW filter on device bond14
[ 2384.112277][ T2345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7168'.
[ 2384.147325][T13969] plantronics 0003:047F:FFFF.0021: ignoring exceeding usage max
[ 2384.162707][T13969] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[ 2384.698493][T13969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2385.011059][   T24] usb 3-1: USB disconnect, device number 75
[ 2385.404845][ T2359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7171'.
[ 2385.789496][ T2360] 8021q: adding VLAN 0 to HW filter on device bond15
[ 2385.810692][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2386.548327][ T2363] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7172'.
[ 2386.559049][ T2365] FAULT_INJECTION: forcing a failure.
[ 2386.559049][ T2365] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2386.599949][ T2365] CPU: 0 UID: 0 PID: 2365 Comm: syz.4.7174 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2386.599978][ T2365] Tainted: [L]=SOFTLOCKUP
[ 2386.599986][ T2365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 2386.599998][ T2365] Call Trace:
[ 2386.600005][ T2365]  <TASK>
[ 2386.600013][ T2365]  dump_stack_lvl+0xe8/0x150
[ 2386.600044][ T2365]  should_fail_ex+0x412/0x560
[ 2386.600074][ T2365]  _copy_from_iter+0x1d3/0x1670
[ 2386.600105][ T2365]  ? rcu_is_watching+0x15/0xb0
[ 2386.600135][ T2365]  ? __pfx__copy_from_iter+0x10/0x10
[ 2386.600166][ T2365]  ? netlink_sendmsg+0x650/0xb40
[ 2386.600191][ T2365]  ? skb_put+0x11b/0x210
[ 2386.600219][ T2365]  netlink_sendmsg+0x6c0/0xb40
[ 2386.600251][ T2365]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2386.600276][ T2365]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 2386.600303][ T2365]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 2386.600322][ T2365]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2386.600345][ T2365]  ____sys_sendmsg+0xa68/0xad0
[ 2386.600371][ T2365]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2386.600393][ T2365]  ? kstrtoull+0x12f/0x1d0
[ 2386.600424][ T2365]  ___sys_sendmsg+0x2a5/0x360
[ 2386.600448][ T2365]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2386.600469][ T2365]  ? get_pid_task+0x20/0x1f0
[ 2386.600504][ T2365]  ? get_pid_task+0x20/0x1f0
[ 2386.600527][ T2365]  ? get_pid_task+0x20/0x1f0
[ 2386.600574][ T2365]  ? __fget_files+0x2a/0x420
[ 2386.600597][ T2365]  ? __fget_files+0x3a0/0x420
[ 2386.600628][ T2365]  __sys_sendmsg+0x183/0x260
[ 2386.600648][ T2365]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2386.600685][ T2365]  __do_fast_syscall_32+0x20d/0x640
[ 2386.600708][ T2365]  ? do_fast_syscall_32+0x33/0x70
[ 2386.600728][ T2365]  ? asm_int80_emulation+0x1a/0x20
[ 2386.600744][ T2365]  ? do_int80_emulation+0x274/0x4d0
[ 2386.600763][ T2365]  ? trace_irq_disable+0x3b/0x150
[ 2386.600791][ T2365]  do_fast_syscall_32+0x33/0x70
[ 2386.600811][ T2365]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2386.600832][ T2365] RIP: 0023:0xf703ef6c
[ 2386.600849][ T2365] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad
[ 2386.600865][ T2365] RSP: 002b:00000000f542d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 2386.600883][ T2365] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000380
[ 2386.600896][ T2365] RDX: 0000000022000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2386.600907][ T2365] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2386.600919][ T2365] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2386.600929][ T2365] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2386.600956][ T2365]  </TASK>
[ 2386.858231][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2387.235291][ T2378] netlink: 'syz.2.7178': attribute type 13 has an invalid length.
[ 2387.509961][ T2385] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7176'.
[ 2387.575330][ T2378] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2387.583028][ T2378] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2387.832160][ T2378] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2387.855830][ T2378] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2387.915199][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2388.338863][ T2395] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7181'.
[ 2389.091432][T13574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2389.108204][T13969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2389.178908][ T2394] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR
[ 2389.219168][T30075] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2389.272346][T30075] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2389.306347][ T2402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7182'.
[ 2389.317049][T30075] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2389.389354][T30075] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2389.597956][ T5911] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[ 2389.668744][T30075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2389.739929][ T2416] FAULT_INJECTION: forcing a failure.
[ 2389.739929][ T2416] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2389.759085][ T5911] usb 2-1: Using ep0 maxpacket: 16
[ 2389.776588][ T5911] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2389.792588][ T2416] CPU: 0 UID: 0 PID: 2416 Comm: syz.3.7187 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2389.792618][ T2416] Tainted: [L]=SOFTLOCKUP
[ 2389.792625][ T2416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 2389.792637][ T2416] Call Trace:
[ 2389.792644][ T2416]  <TASK>
[ 2389.792652][ T2416]  dump_stack_lvl+0xe8/0x150
[ 2389.792683][ T2416]  should_fail_ex+0x412/0x560
[ 2389.792711][ T2416]  _copy_from_iter+0x1d3/0x1670
[ 2389.792741][ T2416]  ? rcu_is_watching+0x15/0xb0
[ 2389.792771][ T2416]  ? __pfx__copy_from_iter+0x10/0x10
[ 2389.792801][ T2416]  ? netlink_sendmsg+0x650/0xb40
[ 2389.792823][ T2416]  ? skb_put+0x11b/0x210
[ 2389.792849][ T2416]  netlink_sendmsg+0x6c0/0xb40
[ 2389.792879][ T2416]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2389.792905][ T2416]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 2389.792928][ T2416]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 2389.792946][ T2416]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2389.792973][ T2416]  ____sys_sendmsg+0xa68/0xad0
[ 2389.792998][ T2416]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2389.793019][ T2416]  ? kstrtoull+0x12f/0x1d0
[ 2389.793048][ T2416]  ___sys_sendmsg+0x2a5/0x360
[ 2389.793069][ T2416]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2389.793088][ T2416]  ? get_pid_task+0x20/0x1f0
[ 2389.793113][ T2416]  ? get_pid_task+0x20/0x1f0
[ 2389.793145][ T2416]  ? get_pid_task+0x20/0x1f0
[ 2389.793194][ T2416]  ? __fget_files+0x2a/0x420
[ 2389.793216][ T2416]  ? __fget_files+0x3a0/0x420
[ 2389.793243][ T2416]  __sys_sendmsg+0x183/0x260
[ 2389.793262][ T2416]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2389.793298][ T2416]  __do_fast_syscall_32+0x20d/0x640
[ 2389.793320][ T2416]  ? do_fast_syscall_32+0x33/0x70
[ 2389.793337][ T2416]  ? asm_int80_emulation+0x1a/0x20
[ 2389.793366][ T2416]  ? do_int80_emulation+0x274/0x4d0
[ 2389.793383][ T2416]  ? trace_irq_disable+0x3b/0x150
[ 2389.793410][ T2416]  do_fast_syscall_32+0x33/0x70
[ 2389.793429][ T2416]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2389.793451][ T2416] RIP: 0023:0xf6fcef6c
[ 2389.793467][ T2416] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad
[ 2389.793483][ T2416] RSP: 002b:00000000f53bd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 2389.793503][ T2416] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0
[ 2389.793516][ T2416] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2389.793526][ T2416] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2389.793535][ T2416] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2389.793545][ T2416] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2389.793568][ T2416]  </TASK>
[ 2389.794223][ T5911] usb 2-1: config 0 interface 0 has no altsetting 0
[ 2390.062130][   T24] usb 3-1: new high-speed USB device number 76 using dummy_hcd
[ 2390.141056][T22304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2390.200262][ T5911] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[ 2390.215557][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2390.239178][ T5911] usb 2-1: config 0 descriptor??
[ 2390.268656][   T24] usb 3-1: device descriptor read/64, error -71
[ 2390.398014][    T9] usb 4-1: new high-speed USB device number 108 using dummy_hcd
[ 2390.507983][   T24] usb 3-1: new high-speed USB device number 77 using dummy_hcd
[ 2390.547950][    T9] usb 4-1: Using ep0 maxpacket: 32
[ 2390.557091][    T9] usb 4-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c
[ 2390.567589][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2390.575718][    T9] usb 4-1: Product: syz
[ 2390.580149][    T9] usb 4-1: Manufacturer: syz
[ 2390.584806][    T9] usb 4-1: SerialNumber: syz
[ 2390.591847][    T9] usb 4-1: config 0 descriptor??
[ 2390.598914][T13969] usb 6-1: new high-speed USB device number 101 using dummy_hcd
[ 2390.609977][    T9] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state.
[ 2390.619150][    T9] dw2102: su3000_power_ctrl: 1, initialized 0
[ 2390.625236][    T9] dvb-usb: bulk message failed: -22 (2/0)
[ 2390.633737][    T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 2390.643892][    T9] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0)
[ 2390.653247][    T9] usb 4-1: media controller created
[ 2390.658136][   T24] usb 3-1: device descriptor read/64, error -71
[ 2390.658979][    T9] dvb-usb: bulk message failed: -22 (6/0)
[ 2390.670711][    T9] dw2102: i2c transfer failed.
[ 2390.675688][    T9] dvb-usb: bulk message failed: -22 (6/0)
[ 2390.681796][    T9] dw2102: i2c transfer failed.
[ 2390.686716][    T9] dvb-usb: bulk message failed: -22 (6/0)
[ 2390.693087][    T9] dw2102: i2c transfer failed.
[ 2390.698218][    T9] dvb-usb: bulk message failed: -22 (6/0)
[ 2390.704051][    T9] dw2102: i2c transfer failed.
[ 2390.709075][    T9] dvb-usb: bulk message failed: -22 (6/0)
[ 2390.714950][    T9] dw2102: i2c transfer failed.
[ 2390.720064][    T9] dvb-usb: bulk message failed: -22 (6/0)
[ 2390.725956][    T9] dw2102: i2c transfer failed.
[ 2390.731068][    T9] dvb-usb: MAC address: 02:02:02:02:02:02
[ 2390.744746][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2390.758013][T13969] usb 6-1: Using ep0 maxpacket: 32
[ 2390.764753][    T9] dvb-usb: bulk message failed: -22 (3/0)
[ 2390.767620][T13969] usb 6-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c
[ 2390.770593][    T9] dw2102: command 0x0e transfer failed.
[ 2390.780952][   T24] usb usb3-port1: attempt power cycle
[ 2390.785380][    T9] dvb-usb: bulk message failed: -22 (3/0)
[ 2390.791713][T13969] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2390.801991][    T9] dw2102: command 0x0e transfer failed.
[ 2390.805299][T13969] usb 6-1: Product: syz
[ 2390.814961][T13969] usb 6-1: Manufacturer: syz
[ 2390.820133][T13969] usb 6-1: SerialNumber: syz
[ 2390.827147][T13969] usb 6-1: config 0 descriptor??
[ 2390.836153][T13969] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state.
[ 2390.845103][T13969] dw2102: su3000_power_ctrl: 1, initialized 0
[ 2390.851438][T13969] dvb-usb: bulk message failed: -22 (2/0)
[ 2390.859771][T13969] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 2390.870556][T13969] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0)
[ 2390.880883][T13969] usb 6-1: media controller created
[ 2390.886131][T13969] dvb-usb: bulk message failed: -22 (6/0)
[ 2390.891916][T13969] dw2102: i2c transfer failed.
[ 2390.896701][T13969] dvb-usb: bulk message failed: -22 (6/0)
[ 2390.902594][T13969] dw2102: i2c transfer failed.
[ 2390.907562][T13969] dvb-usb: bulk message failed: -22 (6/0)
[ 2390.913372][T13969] dw2102: i2c transfer failed.
[ 2390.918223][T13969] dvb-usb: bulk message failed: -22 (6/0)
[ 2390.924061][T13969] dw2102: i2c transfer failed.
[ 2390.929185][T13969] dvb-usb: bulk message failed: -22 (6/0)
[ 2390.935120][T13969] dw2102: i2c transfer failed.
[ 2390.940799][T13969] dvb-usb: bulk message failed: -22 (6/0)
[ 2390.946548][T13969] dw2102: i2c transfer failed.
[ 2390.951433][T13969] dvb-usb: MAC address: 02:02:02:02:02:02
[ 2390.966709][T13969] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2390.985601][T13969] dvb-usb: bulk message failed: -22 (3/0)
[ 2390.991496][T13969] dw2102: command 0x0e transfer failed.
[ 2390.997059][T13969] dvb-usb: bulk message failed: -22 (3/0)
[ 2391.002860][T13969] dw2102: command 0x0e transfer failed.
[ 2391.085540][ T5911] usbhid 2-1:0.0: can't add hid device: -71
[ 2391.091847][ T5911] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 2391.103352][ T5911] usb 2-1: USB disconnect, device number 5
[ 2391.128194][    T9] dvb-usb: bulk message failed: -22 (3/0)
[ 2391.134044][    T9] dw2102: command 0x0e transfer failed.
[ 2391.138092][   T24] usb 3-1: new high-speed USB device number 78 using dummy_hcd
[ 2391.141968][    T9] dvb-usb: bulk message failed: -22 (3/0)
[ 2391.153856][    T9] dw2102: command 0x0e transfer failed.
[ 2391.159706][    T9] dvb-usb: bulk message failed: -22 (1/0)
[ 2391.165519][    T9] dw2102: command 0x51 transfer failed.
[ 2391.169996][   T24] usb 3-1: device descriptor read/8, error -71
[ 2391.171919][ T2422] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN PTI
[ 2391.178499][T22304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2391.189834][ T2422] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017]
[ 2391.189861][ T2422] CPU: 0 UID: 0 PID: 2422 Comm: syz.3.7189 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2391.189887][ T2422] Tainted: [L]=SOFTLOCKUP
[ 2391.189894][ T2422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 2391.189907][ T2422] RIP: 0010:su3000_i2c_transfer+0x1ad/0xfd0
[ 2391.189936][ T2422] Code: 4c 89 f8 48 c1 e8 03 49 bc 00 00 00 00 00 fc ff df 42 80 3c 20 00 74 08 4c 89 ff e8 fd ba 3a fa 49 8b 1f 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 f5 08 00 00 0f b6 1b 48 8b 44 24 38 42
[ 2391.189953][ T2422] RSP: 0000:ffffc9000de7f9d0 EFLAGS: 00010202
[ 2391.189973][ T2422] RAX: 0000000000000002 RBX: 0000000000000010 RCX: 0000000000000003
[ 2391.272138][ T2422] RDX: ffffffff87f4d505 RSI: ffffffff8f766d90 RDI: 0000000000001900
[ 2391.280377][ T2422] RBP: 0000000000000000 R08: ffff888032b1bc80 R09: 0000000000000002
[ 2391.288644][ T2422] R10: 0000000000001a00 R11: 0000000000000002 R12: dffffc0000000000
[ 2391.296651][ T2422] R13: 1ffff1100ba4cff0 R14: 0000000000000001 R15: ffff88805d267f88
[ 2391.304897][ T2422] FS:  0000000000000000(0000) GS:ffff88812546f000(0063) knlGS:00000000f53bdb40
[ 2391.313818][ T2422] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[ 2391.318797][T13969] dvb-usb: bulk message failed: -22 (3/0)
[ 2391.320567][ T2422] CR2: 0000000000000000 CR3: 00000000358a6000 CR4: 00000000003526f0
[ 2391.320589][ T2422] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 2391.320602][ T2422] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 2391.326915][T13969] dw2102: command 0x0e transfer failed.
[ 2391.334454][ T2422] Call Trace:
[ 2391.334471][ T2422]  <TASK>
[ 2391.334484][ T2422]  __i2c_transfer+0x79a/0x2020
[ 2391.334516][ T2422]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 2391.334542][ T2422]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 2391.344020][T13969] dvb-usb: bulk message failed: -22 (3/0)
[ 2391.350462][ T2422]  ? i2c_transfer+0xc8/0x2d0
[ 2391.350493][ T2422]  i2c_transfer+0x1cc/0x2d0
[ 2391.350517][ T2422]  i2cdev_ioctl_rdwr+0x460/0x740
[ 2391.350543][ T2422]  compat_i2cdev_ioctl+0x59f/0x5c0
[ 2391.350569][ T2422]  ? __pfx_compat_i2cdev_ioctl+0x10/0x10
[ 2391.350597][ T2422]  ? __fget_files+0x3a0/0x420
[ 2391.350621][ T2422]  ? __fget_files+0x2a/0x420
[ 2391.350643][ T2422]  ? bpf_lsm_file_ioctl_compat+0x9/0x20
[ 2391.350667][ T2422]  __ia32_compat_sys_ioctl+0x5ea/0x950
[ 2391.350688][ T2422]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[ 2391.350704][ T2422]  ? kmem_cache_free+0x187/0x630
[ 2391.359604][T13969] dw2102: command 0x0e transfer failed.
[ 2391.359687][ T2422]  ? __se_sys_futex_time32+0x3ab/0x440
[ 2391.362745][T13969] dvb-usb: bulk message failed: -22 (1/0)
[ 2391.367369][ T2422]  ? rcu_is_watching+0x15/0xb0
[ 2391.367400][ T2422]  __do_fast_syscall_32+0x20d/0x640
[ 2391.367422][ T2422]  ? do_fast_syscall_32+0x33/0x70
[ 2391.374354][T13969] dw2102: command 0x51 transfer failed.
[ 2391.379385][ T2422]  ? asm_int80_emulation+0x1a/0x20
[ 2391.379416][ T2422]  ? do_int80_emulation+0x274/0x4d0
[ 2391.379435][ T2422]  ? trace_irq_disable+0x3b/0x150
[ 2391.379460][ T2422]  do_fast_syscall_32+0x33/0x70
[ 2391.379480][ T2422]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2391.411512][T13969] DVB: Unable to find symbol ds3000_attach()
[ 2391.415021][ T2422] RIP: 0023:0xf6fcef6c
[ 2391.415047][ T2422] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad
[ 2391.420017][T13969] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0'
[ 2391.425239][ T2422] RSP: 002b:00000000f53bd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[ 2391.425264][ T2422] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707
[ 2391.448073][   T24] usb 3-1: new high-speed USB device number 79 using dummy_hcd
[ 2391.452570][ T2422] RDX: 0000000080000a40 RSI: 0000000000000000 RDI: 0000000000000000
[ 2391.452591][ T2422] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2391.452602][ T2422] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2391.452613][ T2422] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2391.452630][ T2422]  </TASK>
[ 2391.452654][ T2422] Modules linked in:
[ 2391.478682][   T24] usb 3-1: device descriptor read/8, error -71
[ 2391.478988][ T2422] 
[ 2391.487933][T13969] rc_core: IR keymap rc-su3000 not found
[ 2391.489848][ T2422] ---[ end trace 0000000000000000 ]---
[ 2391.506134][T13969] Registered IR keymap rc-empty
[ 2391.534647][    T9] DVB: Unable to find symbol ds3000_attach()
[ 2391.535875][ T2422] RIP: 0010:su3000_i2c_transfer+0x1ad/0xfd0
[ 2391.544881][    T9] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0'
[ 2391.589184][   T24] usb usb3-port1: unable to enumerate USB device
[ 2391.594843][ T2422] Code: 4c 89 f8 48 c1 e8 03 49 bc 00 00 00 00 00 fc ff df 42 80 3c 20 00 74 08 4c 89 ff e8 fd ba 3a fa 49 8b 1f 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 f5 08 00 00 0f b6 1b 48 8b 44 24 38 42
[ 2391.603623][T13969] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0
[ 2391.605931][ T2422] RSP: 0000:ffffc9000de7f9d0 EFLAGS: 00010202
[ 2391.612679][T13969] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input133
[ 2391.618978][ T2422] 
[ 2391.627789][T13969] dvb-usb: schedule remote query interval to 150 msecs.
[ 2391.630822][ T2422] RAX: 0000000000000002 RBX: 0000000000000010 RCX: 0000000000000003
[ 2391.635552][T13969] dw2102: su3000_power_ctrl: 0, initialized 1
[ 2391.641235][ T2422] RDX: ffffffff87f4d505 RSI: ffffffff8f766d90 RDI: 0000000000001900
[ 2391.648513][T13969] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected.
[ 2391.677982][ T2422] RBP: 0000000000000000 R08: ffff888032b1bc80 R09: 0000000000000002
[ 2391.769919][ T2422] R10: 0000000000001a00 R11: 0000000000000002 R12: dffffc0000000000
[ 2391.778136][ T2422] R13: 1ffff1100ba4cff0 R14: 0000000000000001 R15: ffff88805d267f88
[ 2391.786281][ T2422] FS:  0000000000000000(0000) GS:ffff88812546f000(0063) knlGS:00000000f53bdb40
[ 2391.787965][T13969] dvb-usb: bulk message failed: -22 (1/0)
[ 2391.795395][    T9] rc_core: IR keymap rc-su3000 not found
[ 2391.807411][    T9] Registered IR keymap rc-empty
[ 2391.815497][    T9] rc rc1: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc1
[ 2391.826859][ T2422] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[ 2391.831387][T13969] dw2102: i2c transfer failed.
[ 2391.835719][    T9] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc1/input134
[ 2391.839969][ T2422] CR2: 00007f1ea0278000 CR3: 00000000358a6000 CR4: 00000000003526f0
[ 2391.860107][ T2422] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 2391.861110][    T9] dvb-usb: schedule remote query interval to 150 msecs.
[ 2391.868935][ T2422] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 2391.876015][    T9] dw2102: su3000_power_ctrl: 0, initialized 1
[ 2391.883608][ T2422] Kernel panic - not syncing: Fatal exception
[ 2391.890254][ T2422] Kernel Offset: disabled