last executing test programs: 8.966385462s ago: executing program 3 (id=8012): open(0x0, 0x60840, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0xc4, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}, 0xc4}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0) sched_setattr(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x3, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b}, 0x94) 8.724762974s ago: executing program 4 (id=8014): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x3, 0x3a) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r2, 0x1, 0xc, &(0x7f0000000380), &(0x7f00000003c0)=0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x1e0, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x3, 0x0, 0x1, 0x1000}}}}, @TCA_STAB={0x194, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x2, 0x4, 0xffffffff, 0x0, 0x6, 0x7, 0x4}}, {0xc, 0x2, [0x7ff, 0x7f, 0x3, 0x3]}}, {{0x1c, 0x1, {0x5, 0x6, 0x7, 0x8, 0x2, 0x9, 0x80000, 0x7}}, {0x12, 0x2, [0x8, 0x2, 0x3, 0x1, 0x1ff, 0xf36, 0x4]}}, {{0x1c, 0x1, {0x8, 0x10, 0x4, 0x6, 0x2, 0x10000, 0x1, 0x3}}, {0xa, 0x2, [0x4, 0x3, 0x40]}}, {{0x1c, 0x1, {0x1, 0xf, 0x5, 0x200, 0x1, 0x200, 0x27e3437d, 0x3}}, {0xa, 0x2, [0x8, 0x7, 0x6]}}, {{0x9, 0x1, {0x9, 0x50, 0x1, 0x5, 0x1, 0x1, 0xfff, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0x7, 0x40, 0x0, 0x0, 0x1, 0x61dd, 0x7, 0x3}}, {0xa, 0x2, [0x2, 0x33, 0x7]}}, {{0x1c, 0x1, {0x5, 0x5, 0x6, 0x0, 0x0, 0x6, 0x7fffffff, 0x6}}, {0x10, 0x2, [0x0, 0xfff0, 0xa0e7, 0xffff, 0x5, 0x319]}}, {{0x1c, 0x1, {0x30, 0x9, 0x0, 0xfffffffb, 0x1, 0xf, 0x7fffffff, 0x6}}, {0x10, 0x2, [0x3, 0xe7ff, 0x5, 0x1, 0x4, 0x4]}}, {{0x1c, 0x1, {0x6, 0xff, 0x0, 0x4e9, 0x1, 0x6, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x9, 0x5, 0x7e2, 0x3, 0x0, 0xfffffcd1, 0x6, 0x2}}, {0x8, 0x2, [0x1, 0xfe]}}]}]}, 0x1e0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYRES8=r3, @ANYBLOB="0ec28eb6638dc03bf9009e67525d3d0c259602bf0e2e2fa738a848b8b396980d6ac8a0f3422fbbd0078a97940653b9e78cf44cc7e051d4a28e740181dbda1d862f17c8f15e91c040765e92b55ca319ecbaf91010e751e2fbfb096cc0878c0401e15a209fb16f8af4c63ac8ef5de8731ede5c18ad10cd6343e2ec00bccac066dfc0debeae89c5d4906c0be8df2127ab32ab615ecd3194dbc6a7c46741316a009acb742fa63818ccf98bfd91036d0aabe1a52107ca4ffa0f1ebe851226901f7bb8bd00323770e5cfc46c0c34ded24270071aa81fa2903eb271f49b2dfb9099d5d1d452bf96f6e17bb8ed7013c7e981e8742916c2", @ANYRESOCT, @ANYBLOB="9996e639e07e984a"], 0x30}}, 0x4040000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00042abd0300", @ANYRES32=r5, @ANYBLOB="05008a000100000005008a000300000005008a00030000000a000600080211000001000005008a00040000000a000600ffffffffffff000005008a0000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x40) 8.035260088s ago: executing program 0 (id=8017): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_fuse_handle_req(r1, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) r3 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000300)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0xc, 0x9, 0x64}, {@rand_addr=0x64010102, 0x4e23, 0x2000, 0x100000cd, 0x12d5f, 0x3}}, 0x44) sendmmsg$sock(r2, &(0x7f0000002680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}}], 0x11, 0x20000000) 7.823423312s ago: executing program 0 (id=8018): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0, 0xdddd0000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000005c0)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0, 0x4}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x4000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000600)={0x1, 0x80000, [{0x953138a8a709a5d7, 0x3e, &(0x7f00000001c0)=""/62}]}) 7.485979039s ago: executing program 0 (id=8019): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 7.123787383s ago: executing program 0 (id=8021): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, &(0x7f0000002900)) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x14, 0x0, 0xfffffffffffffd71) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x2004c016) fsmount(0xffffffffffffffff, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0xb0}, @exit], &(0x7f00000000c0)='GPL\x00', 0x7}, 0x94) 6.929844102s ago: executing program 3 (id=8024): openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000180)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x2) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x7, 0x200) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) read$FUSE(r2, &(0x7f00000034c0)={0x2020}, 0x2020) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0xe, @val=@tcx={@void, @value=r2}}, 0x1c) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0xffffffff, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0xc000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000002c0)={0x2, 0x0, [{0x0, 0xe5, &(0x7f0000000580)=""/229}, {0x33365000, 0xc8, &(0x7f00000006c0)=""/200}]}) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0xd70f, 0xb, 0x3, "5cb2117e734c8efecf179ff3f458bb23b09982cd0b2c6f8315a127237f901310", 0x4745504d}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 5.264379333s ago: executing program 2 (id=8026): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000540), 0x40, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000080)={0x8, 0x1, &(0x7f0000000040)=[0x2], &(0x7f00000000c0), &(0x7f0000000600), 0xffffffffffffffff}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00') syz_clone(0x26000, &(0x7f0000000580)="495ed372cd7e3f71edaff3ca179d436e77f15ecdd84ae704261c358e0699f63934", 0x21, &(0x7f0000000280), 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x13) ptrace(0x4206, r2) waitid(0x1, r2, &(0x7f0000000080), 0x4, &(0x7f0000000100)) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x3c, 0x5, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4000800) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES16, @ANYRESDEC=r0], 0x48) r4 = socket(0x2, 0x3, 0x9) setsockopt$inet_int(r4, 0x0, 0x13, &(0x7f00000001c0)=0x3, 0x4) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="000000000000b702000014000000b70300000000002666f65d0083000000bf0900000000000067000000000000008eb609b42d01705102536bbedcb300000000009500000000000000254c16f9a6228bbf090100fcff00000000b7020080281c00010000008400000000000000"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) read$eventfd(r1, &(0x7f0000000340), 0x8) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000380)) 5.014150847s ago: executing program 3 (id=8027): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) syz_emit_ethernet(0x48, &(0x7f0000000080)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x12, 0x11, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {0x0, 0xe22, 0x12, 0x0, @gue={{0x2, 0x1, 0x1, 0x4}, "c961"}}}}}}}, 0x0) 4.672003473s ago: executing program 0 (id=8029): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000000000003900000008000300", @ANYRES32=r3, @ANYBLOB="04005a80"], 0x20}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000480)={0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="000269000000690f5eb5eb61d3d7f0dbc2c6caabc4b86ab46940cd3373fb1e23cc0dfcc0cbcc81d18ea9e6b6064ce3a1042f69e25e21fdbdbceb2f8fa27930e4f80670f1e523bc053aa9fbfcb91dfbe20cddab32530f3a51413e9186a8f20012077533c835e8953f87e093e8549f1e"], &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000880)={0x24, &(0x7f00000004c0)={0x0, 0x5, 0x78, "7747cea05639c1cea7f806133630fcf7ae025e85f298181e9fa8b54d7d2842ff649260ef15c12ff8209d0ea28362f22c627fc44bebdb2daf8400a0dea4d3b4a021365560fdf8b6dc365741bcef68c236f46de182706a8142c6bfc238237350c20435896e317878773a9a8165a5f6c4a78e72df9464b462e5"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000640)={0x20, 0x80, 0x1c, {0x9, 0x3, 0xf3b, 0x5, 0x7, 0x9, 0x8ae, 0x8, 0x6, 0x2, 0x1, 0x9}}, &(0x7f0000000680)={0x20, 0x85, 0x4}, &(0x7f00000006c0)={0x20, 0x83, 0x2}, &(0x7f0000000700)={0x20, 0x87, 0x2, 0x2}, &(0x7f0000000740)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000180)=ANY=[@ANYBLOB="400802"], 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000800)="baa00066edf20f0d1766b8010000000f01d9f3d2c16766c7442400040000006766c7442402591f00006766c744240600000000670f011424f3f0816800c0ba0f1a9d05000f01f60f01c90f01df", 0x4d}], 0x1, 0x54, 0x0, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$unix(0x1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 4.638971258s ago: executing program 3 (id=8030): ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) sendto$inet(r0, &(0x7f0000000040)="221f190f70b09c3903eb9e46948b6eb7fa3046f033709bb17c5ee9fa7b387c3e00418e37b27d16f0b9b054306f7980c5eecdb190f37fdef0b79d0c4f038d7dd413c444a0f64a45e848f723703c3d8c30d64216266262fdefe0af83d6ee70f20c3b57189c1aa0b62dfe94d4ed49d9892b5ae2238a220f10a466a4678a4f", 0x7d, 0x4, &(0x7f00000000c0)={0x2, 0x4e24, @multicast2}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x3, 0x40) ioctl$USBDEVFS_DROP_PRIVILEGES(r1, 0x4004551e, &(0x7f0000000140)=0xffffff80) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000180)=0x6) fcntl$lock(r1, 0x25, &(0x7f00000001c0)={0x2, 0x7, 0xfffeffff, 0x3ff, 0xffffffffffffffff}) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xe) r2 = openat$null(0xffffff9c, &(0x7f0000000200), 0x220000, 0x0) bind$vsock_stream(r2, 0xffffffffffffffff, 0x0) r3 = openat$sysctl(0xffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000000280)=0xd5f) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r2, 0xc01064c1, &(0x7f00000002c0)={0x0, 0x1, 0xffffffffffffffff}) fdatasync(r4) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) ioctl$USBDEVFS_RESETEP(r5, 0x80045503, &(0x7f0000000340)={0xa}) faccessat2(r5, &(0x7f0000000380)='./file1\x00', 0x10a, 0x1200) fchdir(r2) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, 0x1, 0x7, 0x801, 0x0, 0x0, {0x5}, [@NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x100}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xffffe00d}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40800}, 0x800) ioctl$PPPIOCUNBRIDGECHAN(r0, 0x7434) pipe2$watch_queue(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r7 = openat$tun(0xffffff9c, &(0x7f0000000540), 0x1c9800, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000580)={'veth1\x00', @broadcast}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001d00)={'ip_vti0\x00', &(0x7f0000001cc0)={'gretap0\x00', 0x0, 0x7800, 0x50, 0x5, 0x80, {{0x7, 0x4, 0x3, 0x9, 0x1c, 0x68, 0x0, 0xfc, 0x4, 0x0, @local, @rand_addr=0x64010100, {[@lsrr={0x83, 0x7, 0xff, [@broadcast]}]}}}}}) sendmsg$inet6(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f00000005c0)="4c36c02099086032539a6856bab1952877a86760aecc4a4766116cd3e146765a3747605dd0f109e411346e242fe991c6704e1fa3d0fdf5088f15b7b1bfdc8cb384188363ccfa3708c9a7ebf6e762c71c0e9c377c", 0x54}, {&(0x7f0000000640)="c092fae6c14357f4f0fccd863761439d7944d8818f75b1e67e542b825a235f57d4760f610515da43e7b69ce506096eb1c0125e767ad22ab45e31a4131694fd74c8481c6fcfe23df2f3e3939a88f9b42f482569454fdc0c96aa477b97ef24bf241ac2b0e52bf7a2d1c602136d271720ef1be67910bcb2eb6b0df3383bc490da934d2eecc94a0fb4756d962e0c15aed393b6b4c3f37977735d372a96b5a2242f3b94beb1a066319ce74f3db644191b5ec113a6f5d8a81f0c6dc72ea45f0101d7a2030cec833595bd8ac6a9714118e1ad6d0811b4d6c5c89090bfefa8a8a40a14732ac1dd38e19f0cfa45c2a01849fbe9a55068ee", 0xf3}, {&(0x7f0000000740)="5a25ea6aec5752f37d2a39d023e536c17f82a059670391ad2f55b4880a5f0b188480cba0bd647455a70d3d5df94f71f1f432012c5c4a03f042f4f253ab903d513a28a9ed0379268cbc08e8", 0x4b}, {&(0x7f00000007c0)="ea733ca85d17d036806c48406b228b8bb3008e99c92fd50c952e4f88ca8c27ae20f4443a5fcaa4ae16987560450bd5ba8517c6bb530c52eedd43034504b9d720e08fed93ed11f928d295f19860a31f58abc05af0c68e9e96b91831d923418131fcac89a6c21df8f0a2e375c5bee51f894a9eddb20b45ea94b85b0d7ba8ee2255", 0x80}, {&(0x7f0000000840)="fc706b1e3e058438b0989dea29f4babf979d8bd394360a2e95f0d3ccd6cb4ce78100bc7cc74f5fb2cbc09acf34a4", 0x2e}, {&(0x7f0000000880)="9f0e29f28f4a9daa9addd2c9dc77d5af71202b0cf15b53b07ed43879a0e757a8fa48c0c7b15df777bcc5f5dd41518edeb713011b35665f8c1e71cb1d7f5a82baa34f4c001a00e54a84080b5c5019deeeacc171664521c4c5d18f1e7f674d3b59b6f94e4db8a56009d266084dce0bf57e9597b60c6ed8ccc9cca30eb724d2dac28e8b4cfed276f04ad7546cdbd05f5aae71f0f258f74cf5c458633051f20b444cc491250fbccf0abae17c13ee3ae9b24dd35a2827906d4879fe8c86d10e094333ed3db5e81562088f876fca4a80ed70a4b41eb211acd94b296121ffdf0725e73befa9a6e3cfe01886df85663439a82f2c2d", 0xf1}, {&(0x7f0000000980)="420a9de449b3c6464d3ea91eab96711feb7f9b4689713b3565419d282f5652420dee0cb15190b67ae9e8e49ddd167f2d0ec8fe57bd6b576d0e5d721e526b8ad8a85fcb0088719cbaa6d1e24ece60bba6254ad98a4dfca9adbd8b54c87d436895fb04a636b372b40fa7aa3ec8599918c459c34cfd95f5755441e6cfdbb21efde0fae8fb1491dcc51365528bc01f52fb2a6115e60a26c6f27fa81805dbefebd64fef146ae29d83e5a92c0a87039c746919e5b454def7e1e31bc52fb3a16394c7a67b040f75dc6d07c7efc9827b7ca967bd56dff51305263ba7c55343a2fd92eccb808bc34e9a5d2950", 0xe8}, {&(0x7f0000000a80)="c4b0060d9055b01f50e33841df6ef5b8d44de8d17878c1787929ffdd12f49399f6bacc62500073e4c026cbe5c3f2d6e46c3ba48614036144592ba8fa85d443f3a86e1aeb0b9e1b69b49f73e5f0f517e55408fc5585b1467997f4a7954c28cdf410a92500c0e2d6f4bbd3544767078d53e20a4b270a05d81599241d304e62977df4d6a736f8e099af4013853c90877d5ab0e885a60a1fad74cbd2ce6e153c998eca2473e5af3df260b7", 0xa9}, {&(0x7f0000000b40)="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", 0x1000}, {&(0x7f0000001b40)="b6162114d76e5d49f447ba68f64a536866ca0cb67b4107929a7186bae99fa687a176788e11d485033708da0f73127fb799dc19eabebe4a295987ff9ba045ff530cd2fc5b3e055994e55f3257509ce818f68a80ba3944f331e97ae41a96c3fea8256edeab183324b7e5638dd73c19480e1febe6d3ab7d546d28b6f6fd532558d1ca85c732f040154839bd9161457ce546e4b0ddb625ece3d3bbe3e2d144f2f55d9aa63032d050c8023d878f069dd3dbabf2ce595661ba619216b820438b40a91ac9aab82d9c4fd019641e23af0b3a4b7ba026414cbd79c7091f292ed00c00423b73", 0xe1}], 0xa, &(0x7f0000001d40)=[@hoplimit={{0x10, 0x29, 0x34, 0x8}}, @pktinfo={{0x20, 0x29, 0x32, {@mcast2, r8}}}, @flowinfo={{0x10, 0x29, 0xb, 0x1}}, @rthdr_2292={{0x64, 0x29, 0x39, {0x8, 0xa, 0x2, 0x8, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @local, @local, @mcast1, @private2]}}}], 0xa4}, 0x80c0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r6, 0x7a9, &(0x7f0000001e40)={{@hyper, 0x400}, 0x0, 0xc, 0x7f80, 0x2, 0x4, 0x7, 0x7, 0x9}) sendmsg$nl_route_sched(r2, &(0x7f0000001f40)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001ec0)=@deltclass={0x3c, 0x29, 0x4, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xd, 0x9}, {}, {0x1, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x33, 0x1}}, @TCA_RATE={0x6, 0x5, {0x8, 0x65}}, @TCA_RATE={0x6, 0x5, {0x86, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48094}, 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000001f80)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r9, 0x3b82, &(0x7f0000002000)={0x18, 0x0, 0x1, 0x0, &(0x7f0000001fc0)=[{0x74}]}) ioctl$DRM_IOCTL_ADD_MAP(r3, 0xc0186415, &(0x7f0000002040)={&(0x7f0000ffb000/0x3000)=nil, 0x9, 0x2, 0x80}) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000002080)={0xaa, 0x4}) 4.525153486s ago: executing program 3 (id=8031): lsm_set_self_attr(0x64, &(0x7f0000000480)={0x68, 0x0, 0x4f, 0x2f, "9e81834f01da01bcc5ead04ec96c9e964154d0da7db0c9a9590c0d3258ac442b4287a1bb4a70aad7f2e13333f920a6"}, 0x20, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000006c0)={0x5c, 0xa, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x4}, @IPSET_ATTR_COMMENT={0x9, 0x1a, 'TIPC\x00'}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6c}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x4}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20004000) r3 = syz_mount_image$fuse(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x21, &(0x7f0000000200)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x7}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@allow_other}, {@allow_other}, {@allow_other}, {@default_permissions}, {@allow_other}, {@allow_other}, {@allow_other}], [{@fsmagic={'fsmagic', 0x3d, 0xffffffffffffff7f}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}]}}, 0x9, 0x0, &(0x7f0000000340)="17202fa8ca89de17eaf19364ad0695da514bd52435647465d465ddfbeb0fa10e382d8e9844c571710365be4c3af5882d3ee012304c93c0d476d6bc34a1f7dfa2b40d947ad41a7bfc60038c19abd59d37efe8adb593fecab164aa0e70e571c29a1e6b2b818c01054589e9cc9417a5aa836b66f6d9b83df09a9b2ec54874da40de080fdf3c9de50ead30728df980f6cc40a52796b3a6d8c987913bcaf95173d1569619b64d98ad63ce91786452a14ff9973354551310af782a08557bf1ff92f45332e6b77a8b209c26") mknodat(r3, &(0x7f0000000440)='./file0\x00', 0x10, 0xb) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x5) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000500), 0x101000, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r5, 0x40096101, &(0x7f0000000940)={{&(0x7f00000008c0)={'Accelerator\x00', {&(0x7f0000000600)=@adf_hex={@format={'Cy', '2', 'RingSymRx\x00'}, {0x8}, {&(0x7f0000000540)=@adf_dec={@bank={'Bank', '4', 'InterruptCoalescingNumResponses\x00'}, {0x8}}}}}}}, 0x40}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f00000009c0)={0x6, 0x0, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) syz_usb_connect(0x0, 0x7d, &(0x7f0000000a00)={{0x12, 0x1, 0x310, 0xc6, 0x8c, 0xa, 0x8, 0xfe6, 0x9700, 0x318b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x1, 0x8, 0x3, 0x40, 0x1, [{{0x9, 0x4, 0x8e, 0x5, 0x6, 0xff, 0x5d, 0x1, 0xf5, [], [{{0x9, 0x5, 0x8, 0x1, 0x3ff, 0x7, 0x8, 0xfd}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x7, 0x9, 0x9}}, {{0x9, 0x5, 0xa, 0x3, 0x200, 0x9, 0x2, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0xc}]}}, {{0x9, 0x5, 0x7, 0x2, 0x40, 0x20, 0xb5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc3, 0x3, 0x80}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0xd, 0x9}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x2e, 0x0, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x6, 0xc6, 0xa8}]}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x8, 0x3d, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0xc}]}}]}}]}}]}}, &(0x7f0000001040)={0xa, &(0x7f0000000bc0)={0xa, 0x6, 0x351, 0x27, 0x3, 0xc, 0x8, 0x3}, 0x2a, &(0x7f0000000c00)={0x5, 0xf, 0x2a, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "c6ba8464ef9ad6944f087f5ec3aeb226"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x5, 0x9, 0x5, 0x1}, @ptm_cap={0x3}]}, 0x8, [{0x2, &(0x7f0000000c40)=@string={0x2}}, {0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0x44b}}, {0x0, 0x0}, {0x19, &(0x7f0000000dc0)=@string={0x19, 0x3, "f7dd90ba79f4f6a99287883540cd3c7f8e41aac9f87259"}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x180a}}, {0x53, &(0x7f0000000e40)=@string={0x53, 0x3, "2e7079113afc0f4e30f5fa7c5a71c961049a45f729c2d4401ab808b401cfeb1b94db2c8dae0fa3f26c53cfcf6524bd8f443aea939881945afe004f825032e34583265031f8b3748b6f2e0fa5c81e049321"}}, {0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0x44d}}, {0xe3, &(0x7f0000000f40)=@string={0xe3, 0x3, "9f3a75aec72f73c01a78486d9c5a74b47c47098e8a5ad4a75c7edfefa264dbea0024c0b174f7ce0f6a24c96754d33341b7bdc52a39fe59ff862813c4c7d9416d8f6bd19e30b8712a0a22dd175ab81d57dd83cbe9bec97bda5d4320bd928aa06921a1be14cf210e60b4c0923831cea160db3431a9b0c880f25df030b11008137f536f0e484f621e80af1861a105497effe21037b632938f7fe7206786252d614bf4c562ebc4a6363a36beef4420fbb6d7b0a5b253afc3f344aadfad3abf27654df0dafad555f21285a46627be79a502735ac767e0dc6f3980248dd81677eb961c1b"}}]}) semctl$SETALL(0xffffffffffffffff, 0x0, 0x11, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x7f, 0x40, 0x9, [{{0x9, 0x4, 0x0, 0x5e, 0x2, 0x7, 0x1, 0x2, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x1, 0x3, 0xd8}}}}}]}}]}}, &(0x7f00000011c0)={0xa, &(0x7f0000001140)={0xa, 0x6, 0x300, 0x20, 0x8, 0xd, 0x40, 0x2}, 0x19, &(0x7f0000001180)=ANY=[@ANYBLOB="050f190001141005ee862161390ae7686cc4175e"]}) ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f0000001200)={0x0, 0x2, 0x4, 0x0, 0x4}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001240)='/proc/tty/ldiscs\x00', 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_TX_TS(r6, &(0x7f00000013c0)={&(0x7f0000001280), 0xc, &(0x7f0000001380)={0x0}, 0x1, 0x0, 0x0, 0x890}, 0x800) semget$private(0x0, 0x2, 0x396) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000014c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r6, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)=ANY=[@ANYBLOB="de060000", @ANYRES16=r7, @ANYBLOB="00012dbd7000ffdbdf256c00000008000300", @ANYRES32=r8, @ANYBLOB="08002201d70300000800260085160000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_inet_SIOCGIFNETMASK(r6, 0x891b, &(0x7f00000015c0)={'bridge0\x00', {0x2, 0x0, @broadcast}}) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) syz_genetlink_get_family_id$tipc(&(0x7f0000001640), r6) 4.518631596s ago: executing program 4 (id=8032): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000040)=0x9) 4.335787166s ago: executing program 2 (id=8033): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000180)) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000100)={r2, 0xfff, 0x5}, 0x8) 4.276882138s ago: executing program 4 (id=8034): socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 4.220677294s ago: executing program 2 (id=8035): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0xb0}, @exit], &(0x7f00000000c0)='GPL\x00', 0x7}, 0x94) 4.133041909s ago: executing program 2 (id=8036): pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000000)={0x0, 0x400, 0x2, 0x1, 0xfffffffd, 0xffffff00}) r2 = socket$netlink(0x10, 0x3, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000000000)={0xf, {"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", 0x1000}}, 0x1006) writev(r2, &(0x7f0000000980)=[{&(0x7f0000000440)="4800000014001d1009074beafd0d8c560a84606080ffe0064e204e20590000a2bc5603ca00000f7f8907000020008d42188fedc22e47ad8f75edc6d100000101ff0000000309ff5b", 0x48}], 0x1) (async) writev(r2, &(0x7f0000000980)=[{&(0x7f0000000440)="4800000014001d1009074beafd0d8c560a84606080ffe0064e204e20590000a2bc5603ca00000f7f8907000020008d42188fedc22e47ad8f75edc6d100000101ff0000000309ff5b", 0x48}], 0x1) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0xfffffffb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000001080), r0) r5 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) (async) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) (async) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) (async) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) (async) syz_usb_control_io$uac1(r5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x39}, @NFTA_SET_EXPRESSIONS={0x28, 0x12, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x134}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) syz_usb_control_io(r5, 0x0, 0x0) (async) syz_usb_control_io(r5, 0x0, 0x0) 3.481006053s ago: executing program 1 (id=8037): r0 = io_uring_setup(0x7ed4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffffff, 0x2f9}) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x1a, &(0x7f00000000c0)={0x0, 0x0, 0x1}, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 2.953262627s ago: executing program 1 (id=8038): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000300), 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "fbffffffffffffff", "1fd33c81cf7995313c09de00fd6ded74", '\x00', "1e00040000000100"}, 0x28) write$binfmt_script(r0, 0x0, 0x0) 2.760708281s ago: executing program 1 (id=8039): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000200)={0x0, 0xfffffe2b, &(0x7f00000000c0)=[{&(0x7f0000000500)="6b0a038522b89d8582d0ee2069b19e47e060c987de920dca668882f46679b762af2caff90bf300014026de83def564b35bda7e4571d653569da06d0c9f5aa9d25abab97e0ff6dabedcd004f722973a3e21f91ae6e083bdddcd09751950c1d3f4e62ae4eac38c3c879933ae9880c5fe27995c220264c1e7eec63e1e6eb5d1e8553a33a38d0c0d1372e998fa81522d3ea668cb0900d10140594893c35d15a6d698a6a82c5e43ab2f0b69945b14633fe41e26a5420e548ab39a3f867a1dc1086e7b60d72beaab615a628fdc44fdda9d123c93077ae50c17818f7e69f025997e01861e344d5170936d7a0c483980c37e6ddd3e67", 0xe4}], 0x1, &(0x7f0000000240)=[@cred], 0x10}, 0x845) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = gettid() (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000000000)={0x10, 0x0, 0x2ddfdbff, 0x2ffffffff}, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r7, 0x1, 0x70bd2c, 0x0, {0x1, 0x0, 0x6000}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) (async) sched_setattr(r2, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffd, 0x0, 0xb, 0x0, 0xfffffe0000000000, 0xfa11, 0x7fffffff}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r9, 0xaea2, 0x80000000) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r10, 0xaea2, 0x8) ioctl$KVM_RUN(r10, 0xae80, 0x0) (async) r11 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_G_TUNER(r11, 0xc054561d, &(0x7f0000000180)={0x0, "836d11f8a2f7337496bff2b4d43d400ebf870e7cf92542da0cbdf188dede83ee", 0x2, 0x20, 0x7fffffff, 0x7, 0x10, 0x1, 0x0, 0x3}) (async) socket(0x15, 0x5, 0x0) 2.499175359s ago: executing program 1 (id=8040): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) 2.493721887s ago: executing program 3 (id=8041): socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x1, 0x6, [@multicast1, @multicast1, @private=0xa010100, @rand_addr=0x64010100, @rand_addr=0x64010100, @broadcast]}, 0x28) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000180)={0x4, 0x3, 0x0, {0x5, 0x0, 0xfaa0, 0x5}}) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) syz_usb_connect(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000068e04d206f0e2c586831010203010902240001000000000904000002ff47d000090509e700008000040905", @ANYRES64], 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="040000001000010000000000000000000000000a30000000120a01030000000000000000020004000c000b40000000000000000108000440000000000800034000000008140000001100010000000000000000000000000a"], 0x58}}, 0x0) 2.451851944s ago: executing program 4 (id=8042): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x228543, 0x0) ioctl$KVM_GET_MSRS_sys(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x48c, 0x0, 0x7fffffffffffffff}]}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0x13dc, 0x9, 0x4, 0x0, 0x400003}, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c9a2cd0265b6d80864967feeb9f38e90144773bb22ec36001760fc98449a5d7f2b026b9739562fe17fe287848273d46ef39f5ce8ec0bfebf5a5569d6ca56b1784a765f3afe22a9d55c83c0c7a63a762c170068c0f1a7c7d903b0b0f90b1f94a3fa93b0fd8845a0acb812c23a6727aacb39ca2b521b7b3d9acb761e873d181cde83b63158244b3b1e56410326a6fd450039a0e5be502a1387297e04e2fc587b075382cef6799522bf3e65cc7153eeb3ed602122c15ea9cb733fd9817207f", @ANYRES16=r3, @ANYBLOB="0b1600000000000000004a0000000800a800000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x3c}, 0x1, 0x0, 0x0, 0x4008055}, 0x44040) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x401c, &(0x7f0000000240)='}\x00') r6 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x60) read$FUSE(r6, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000000)=0xffff0018) ioctl$SOUND_PCM_READ_CHANNELS(r7, 0x80045006, 0x0) syz_emit_ethernet(0x42, &(0x7f00000003c0)=ANY=[], 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x7) sendmsg$key(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002980)=ANY=[@ANYBLOB="42050006060000002dbd700004dbdf2504000300380000dc0f00000000000000f9ffffffffffffffff7f000000000000530707531c6937880a2088ba13f64c012f0f21fa74feddba70ad7331204fc959c4a0a86cc99c2e817ac3e3aa484ef8e5a8a375c947b53ea383140115bafd52ed0a416fea34cbcb7f1e08c4ec4fc951c0f99d8b0d1be0a04e59d1cdbd4ec51a82fe96b5395169c07b6055bb24d089d81c6978492b1c506a2cd75743ffbe4f37ba58b16361a997827c3f7c0074fd73abc1eb04689685eadb8da751e882f522244b9c646caf892cbc11d661d17e7ec4c83cb233e09f793103d68eea4080", @ANYRES64=0x0, @ANYRES16, @ANYRES8, @ANYRES16=r5, @ANYBLOB="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"], 0x30}}, 0x4008810) ioctl$UI_SET_RELBIT(r6, 0x40045566, 0xb) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) 2.336117917s ago: executing program 1 (id=8043): open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x3, 0xff) r2 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x3}, &(0x7f0000002000), &(0x7f0000000000)) io_uring_enter(r2, 0x48e9, 0x0, 0x2, 0x0, 0x0) 1.212364975s ago: executing program 0 (id=8044): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0, 0xdddd0000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x6f6) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000007000000140001800500020001010000080006001a00"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000005c0)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0, 0x4}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x4000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000900)={0x800000000000291, 0x0, [{0x4000, 0x0, &(0x7f0000000040)=""/97}, {0x8080000, 0x0, &(0x7f0000000100)=""/42}, {0x6000, 0x0, &(0x7f0000000400)=""/240}, {0x26000, 0x0, &(0x7f0000000140)=""/100}, {0x91944000, 0x0, &(0x7f0000000640)=""/254}, {0x70000, 0x0, &(0x7f0000000500)=""/91}, {0xa000, 0x0, &(0x7f0000000740)=""/85}, {0x7000, 0x0, &(0x7f00000007c0)=""/189}, {0x20000, 0x0, &(0x7f0000000880)=""/104}, {0xfec00000, 0x0, &(0x7f00000001c0)=""/62}]}) 612.629641ms ago: executing program 4 (id=8045): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000180)) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000100)={r2, 0xfff, 0x5}, 0x8) 336.471151ms ago: executing program 2 (id=8046): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0xb0}, @exit], &(0x7f00000000c0)='GPL\x00', 0x7}, 0x94) 136.569317ms ago: executing program 4 (id=8047): syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x4, &(0x7f0000000240)=ANY=[]) 107.677739ms ago: executing program 1 (id=8048): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x34, r3, 0x1, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x800) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r3, 0x2, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040}, 0x8040) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0xd4, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x88, 0x8, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xcb20}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x4}]}, {0x50, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x3ff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}]}, 0xd4}}, 0x0) 0s ago: executing program 2 (id=8049): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x2000, 0x0, {0x0, 0x0, 0x2, 0x0, 0x4124, 0xd35589f4b721e29c}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x2, 0x30}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10008819}, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) ioctl$USBDEVFS_CLAIMINTERFACE(r3, 0x8004550f, &(0x7f00000000c0)=0xfffffdab) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000001c0)={&(0x7f0000000100)=[{0xf62d, 0xf211, 0x0, 0x0}, {0x7, 0x10, 0x7, &(0x7f0000000000)="95eaaebb575ba4"}], 0x2}) kernel console output (not intermixed with test programs): 2: command 0x0e transfer failed. [ 2108.972701][T23756] dvb-usb: bulk message failed: -22 (3/0) [ 2108.978759][T23756] dw2102: command 0x0e transfer failed. [ 2108.994642][T32545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2109.004010][T32545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2109.211549][T32549] loop6: detected capacity change from 0 to 2640 [ 2109.219457][T32549] ldm_validate_partition_table(): Disk read failed. [ 2109.227147][T32549] Dev loop6: unable to read RDB block 0 [ 2109.233089][T32549] loop6: unable to read partition table [ 2109.256151][T32549] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 2109.286159][T23756] dvb-usb: bulk message failed: -22 (3/0) [ 2109.291957][T23756] dw2102: command 0x0e transfer failed. [ 2109.306400][T23756] dvb-usb: bulk message failed: -22 (3/0) [ 2109.312325][T23756] dw2102: command 0x0e transfer failed. [ 2109.327028][T23756] dvb-usb: bulk message failed: -22 (1/0) [ 2109.332941][T23756] dw2102: command 0x51 transfer failed. [ 2109.356047][T23756] dvb-usb: bulk message failed: -22 (5/0) [ 2109.361876][T23756] dw2102: i2c probe for address 0x68 failed. [ 2109.376032][T23756] dvb-usb: bulk message failed: -22 (5/0) [ 2109.383150][T23756] dw2102: i2c probe for address 0x69 failed. [ 2109.389528][T23756] dvb-usb: bulk message failed: -22 (5/0) [ 2109.395333][T23756] dw2102: i2c probe for address 0x6a failed. [ 2109.402855][T32545] dvb-usb: bulk message failed: -22 (3/0) [ 2109.408841][T23756] dw2102: probing for demodulator failed. Is the external power switched on? [ 2109.417762][T32545] dw2102: i2c transfer failed. [ 2109.422649][T32545] dvb-usb: bulk message failed: -22 (4/0) [ 2109.428660][T23756] dvb-usb: no frontend was attached by 'TeVii S662' [ 2109.435568][T32545] dw2102: i2c transfer failed. [ 2109.436651][T32548] buffer_io_error: 3138 callbacks suppressed [ 2109.436670][T32548] Buffer I/O error on dev loop6, logical block 1, async page read [ 2109.441677][T32545] dw2102: i2c wr: len=6400 is too big! [ 2109.441677][T32545] [ 2109.458221][T32550] Buffer I/O error on dev loop6, logical block 0, async page read [ 2109.472805][T32548] Buffer I/O error on dev loop6, logical block 1, async page read [ 2109.481189][T32550] Buffer I/O error on dev loop6, logical block 0, async page read [ 2109.517983][T32548] Buffer I/O error on dev loop6, logical block 1, async page read [ 2109.530873][T21990] pegasus 3-1:0.0: setup Pegasus II specific registers [ 2109.548777][T32550] Buffer I/O error on dev loop6, logical block 0, async page read [ 2109.562774][T32548] Buffer I/O error on dev loop6, logical block 1, async page read [ 2109.566155][T23756] rc_core: IR keymap rc-tt-1500 not found [ 2109.571218][T32548] Buffer I/O error on dev loop6, logical block 1, async page read [ 2109.585084][T32548] Buffer I/O error on dev loop6, logical block 1, async page read [ 2109.586662][T32550] Buffer I/O error on dev loop6, logical block 0, async page read [ 2109.601637][T23756] Registered IR keymap rc-empty [ 2109.608639][T23756] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 2109.624283][T23756] input: TeVii S662 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input119 [ 2109.639990][T23756] dvb-usb: schedule remote query interval to 250 msecs. [ 2109.648216][T23756] dw2102: su3000_power_ctrl: 0, initialized 1 [ 2109.660149][T21990] pegasus 3-1:0.0: can't locate MII phy, using default [ 2109.669279][T23756] dvb-usb: TeVii S662 successfully initialized and connected. [ 2109.726621][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2109.733419][T32553] x_tables: ip_tables: socket.0 match: invalid size 0 (kernel) != (user) 8 [ 2109.736165][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2109.766788][T23756] usb 4-1: USB disconnect, device number 92 [ 2109.789813][T21990] pegasus 3-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, 8e:41:0a:8a:1c:21 [ 2109.799154][T27073] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2109.851178][T21990] usb 3-1: USB disconnect, device number 117 [ 2109.860750][T27073] usb 2-1: USB disconnect, device number 21 [ 2110.036580][T23756] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 2110.636438][T28843] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 2110.766153][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2110.775062][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2110.816145][T28843] usb 4-1: Using ep0 maxpacket: 8 [ 2110.841521][T28843] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 2110.883243][T28843] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 2110.900948][T28843] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 2110.940596][T28843] usb 4-1: Product: syz [ 2110.950210][T28843] usb 4-1: Manufacturer: syz [ 2110.975588][T28843] usb 4-1: SerialNumber: syz [ 2111.096095][T26448] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 2111.293390][T32584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7755'. [ 2111.303776][T26448] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 2111.356072][T26448] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 2111.378209][T28843] usb 4-1: palm_os_3_probe - error -110 getting connection information [ 2111.417167][T28843] visor 4-1:1.0: probe with driver visor failed with error -110 [ 2111.428384][T26448] usb 2-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 2111.451360][T26448] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2111.473214][T26448] usb 2-1: config 0 descriptor?? [ 2111.483247][T32578] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 2111.806657][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2111.816909][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2111.939964][T26448] hkems 0003:2006:0118.009B: item fetching failed at offset 5/7 [ 2111.956900][T26448] hkems 0003:2006:0118.009B: parse failed [ 2111.962912][T26448] hkems 0003:2006:0118.009B: probe with driver hkems failed with error -22 [ 2112.318850][T23756] usb 2-1: USB disconnect, device number 22 [ 2112.487544][T32601] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7757'. [ 2112.589207][T26448] hid-generic 0000:0000:0000.009C: unknown main item tag 0x0 [ 2112.630649][T26448] hid-generic 0000:0000:0000.009C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2112.846167][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2112.855276][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2113.886632][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2113.895795][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2114.189102][T21990] usb 4-1: USB disconnect, device number 93 [ 2114.334831][T32625] kvm: requested 128228 ns i8254 timer period limited to 200000 ns [ 2114.383162][T32625] kvm: requested 136609 ns i8254 timer period limited to 200000 ns [ 2114.433029][T32625] kvm: requested 108114 ns i8254 timer period limited to 200000 ns [ 2114.463773][T32625] kvm: requested 101409 ns i8254 timer period limited to 200000 ns [ 2114.494275][T32625] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 2114.531786][T32630] x_tables: ip_tables: socket.0 match: invalid size 0 (kernel) != (user) 8 [ 2114.666259][T27073] usb 3-1: new full-speed USB device number 118 using dummy_hcd [ 2114.708247][T32632] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7762'. [ 2114.760062][ T5915] hid-generic 0000:0000:0000.009D: unknown main item tag 0x0 [ 2114.784008][ T5915] hid-generic 0000:0000:0000.009D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2114.836272][T27073] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 2114.857937][T27073] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 2114.896103][T27073] usb 3-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 2114.915644][T27073] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2114.926208][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2114.931877][T32639] tipc: Enabling of bearer rejected, already enabled [ 2114.935468][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2114.969060][T27073] usb 3-1: config 0 descriptor?? [ 2114.983978][T32627] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2115.251545][T32649] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7762'. [ 2115.276509][ T5915] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 2115.437962][ T5915] usb 2-1: Using ep0 maxpacket: 32 [ 2115.445300][ T5915] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 2115.455455][ T5915] usb 2-1: config 0 has no interface number 0 [ 2115.462591][ T5915] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 2115.476839][ T5915] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 2115.487678][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2115.495721][ T5915] usb 2-1: Product: syz [ 2115.506931][ T5915] usb 2-1: Manufacturer: syz [ 2115.511694][ T5915] usb 2-1: SerialNumber: syz [ 2115.520377][ T5915] usb 2-1: config 0 descriptor?? [ 2115.532287][T32641] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 2115.700031][T32654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2115.746731][T32654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2115.753894][T32641] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 2115.941745][T27073] usbhid 3-1:0.0: can't add hid device: -71 [ 2115.959928][T27073] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2115.965543][ T5915] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 2115.968584][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2115.987907][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2116.005746][ T5915] asix 2-1:0.188: probe with driver asix failed with error -61 [ 2116.042684][T27073] usb 3-1: USB disconnect, device number 118 [ 2116.257340][T32659] FAULT_INJECTION: forcing a failure. [ 2116.257340][T32659] name failslab, interval 1, probability 0, space 0, times 0 [ 2116.271380][T32659] CPU: 0 UID: 0 PID: 32659 Comm: syz.3.7772 Tainted: G L syzkaller #0 PREEMPT(full) [ 2116.271405][T32659] Tainted: [L]=SOFTLOCKUP [ 2116.271411][T32659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2116.271421][T32659] Call Trace: [ 2116.271427][T32659] [ 2116.271434][T32659] dump_stack_lvl+0x189/0x250 [ 2116.271459][T32659] ? __pfx____ratelimit+0x10/0x10 [ 2116.271482][T32659] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2116.271501][T32659] ? __pfx__printk+0x10/0x10 [ 2116.271534][T32659] should_fail_ex+0x414/0x560 [ 2116.271559][T32659] should_failslab+0xa8/0x100 [ 2116.271580][T32659] kmem_cache_alloc_noprof+0x88/0x710 [ 2116.271605][T32659] ? skb_clone+0x212/0x3a0 [ 2116.271626][T32659] skb_clone+0x212/0x3a0 [ 2116.271646][T32659] __netlink_deliver_tap+0x404/0x850 [ 2116.271673][T32659] ? netlink_deliver_tap+0x2e/0x1b0 [ 2116.271691][T32659] netlink_deliver_tap+0x19c/0x1b0 [ 2116.271709][T32659] netlink_sendskb+0x68/0x140 [ 2116.271725][T32659] netlink_unicast+0x397/0x9e0 [ 2116.271738][T32659] ? __asan_memcpy+0x40/0x70 [ 2116.271757][T32659] ? __pfx_netlink_unicast+0x10/0x10 [ 2116.271779][T32659] netlink_rcv_skb+0x28c/0x470 [ 2116.271797][T32659] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2116.271819][T32659] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2116.271849][T32659] ? down_read+0x274/0x2e0 [ 2116.271862][T32659] ? genl_rcv+0xd/0x40 [ 2116.271884][T32659] genl_rcv+0x28/0x40 [ 2116.271903][T32659] netlink_unicast+0x82f/0x9e0 [ 2116.271924][T32659] ? __pfx_netlink_unicast+0x10/0x10 [ 2116.271940][T32659] ? netlink_sendmsg+0x642/0xb30 [ 2116.271956][T32659] ? skb_put+0x11b/0x210 [ 2116.271972][T32659] netlink_sendmsg+0x805/0xb30 [ 2116.271996][T32659] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2116.272016][T32659] ? __import_iovec+0x5d4/0x7f0 [ 2116.272030][T32659] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2116.272048][T32659] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2116.272063][T32659] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2116.272081][T32659] __sock_sendmsg+0x21c/0x270 [ 2116.272103][T32659] ____sys_sendmsg+0x505/0x820 [ 2116.272123][T32659] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2116.272143][T32659] ? kstrtouint+0x6e/0xe0 [ 2116.272168][T32659] ___sys_sendmsg+0x21f/0x2a0 [ 2116.272186][T32659] ? __pfx____sys_sendmsg+0x10/0x10 [ 2116.272207][T32659] ? rcu_read_lock_any_held+0xb3/0x120 [ 2116.272255][T32659] ? __fget_files+0x2a/0x420 [ 2116.272275][T32659] ? __fget_files+0x3a0/0x420 [ 2116.272302][T32659] __sys_sendmsg+0x164/0x220 [ 2116.272320][T32659] ? __pfx___sys_sendmsg+0x10/0x10 [ 2116.272343][T32659] ? __pfx_ksys_write+0x10/0x10 [ 2116.272362][T32659] ? __do_fast_syscall_32+0xbe/0x570 [ 2116.272380][T32659] __do_fast_syscall_32+0x1f7/0x570 [ 2116.272396][T32659] ? rcu_is_watching+0x15/0xb0 [ 2116.272414][T32659] ? do_fast_syscall_32+0x34/0x80 [ 2116.272433][T32659] do_fast_syscall_32+0x34/0x80 [ 2116.272448][T32659] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2116.272467][T32659] RIP: 0023:0xf700d539 [ 2116.272481][T32659] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2116.272495][T32659] RSP: 002b:00000000f53fd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2116.272512][T32659] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000680 [ 2116.272523][T32659] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2116.272532][T32659] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2116.272541][T32659] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2116.272550][T32659] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2116.272572][T32659] [ 2116.774141][T32667] x_tables: ip_tables: socket.0 match: invalid size 0 (kernel) != (user) 8 [ 2116.960017][T27073] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 2117.006156][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2117.016229][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2117.032200][T32664] netlink: 'syz.0.7773': attribute type 10 has an invalid length. [ 2117.584167][T27073] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 2117.602460][T27073] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2117.616035][T27073] usb 4-1: Product: syz [ 2117.620324][T27073] usb 4-1: Manufacturer: syz [ 2117.631653][T27073] usb 4-1: SerialNumber: syz [ 2117.655003][T27073] usb 4-1: config 0 descriptor?? [ 2118.034779][T27073] usb 4-1: f81604_read: reg: 105 failed: -EREMOTEIO [ 2118.046868][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2118.066902][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2118.098080][T27073] f81604 4-1:0.0: Setting termination of CH#0 failed: -EREMOTEIO [ 2118.105907][T27073] f81604 4-1:0.0: probe with driver f81604 failed with error -121 [ 2118.178209][T28843] usb 2-1: USB disconnect, device number 23 [ 2118.311969][T32688] tipc: Enabling of bearer rejected, already enabled [ 2118.498352][T32695] FAULT_INJECTION: forcing a failure. [ 2118.498352][T32695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2118.512175][T32695] CPU: 0 UID: 0 PID: 32695 Comm: syz.2.7782 Tainted: G L syzkaller #0 PREEMPT(full) [ 2118.512210][T32695] Tainted: [L]=SOFTLOCKUP [ 2118.512219][T32695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2118.512233][T32695] Call Trace: [ 2118.512243][T32695] [ 2118.512253][T32695] dump_stack_lvl+0x189/0x250 [ 2118.512287][T32695] ? __pfx____ratelimit+0x10/0x10 [ 2118.512318][T32695] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2118.512346][T32695] ? __pfx__printk+0x10/0x10 [ 2118.512392][T32695] should_fail_ex+0x414/0x560 [ 2118.512430][T32695] _copy_to_user+0x31/0xb0 [ 2118.512456][T32695] simple_read_from_buffer+0xe1/0x170 [ 2118.512490][T32695] proc_fail_nth_read+0x1b3/0x220 [ 2118.512519][T32695] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2118.512544][T32695] ? rw_verify_area+0x2a6/0x4d0 [ 2118.512565][T32695] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2118.512589][T32695] vfs_read+0x200/0xa30 [ 2118.512609][T32695] ? fdget_pos+0x247/0x320 [ 2118.512641][T32695] ? __pfx___mutex_lock+0x10/0x10 [ 2118.512662][T32695] ? __pfx_vfs_read+0x10/0x10 [ 2118.512685][T32695] ? __fget_files+0x2a/0x420 [ 2118.512719][T32695] ? __fget_files+0x3a0/0x420 [ 2118.512747][T32695] ? __fget_files+0x2a/0x420 [ 2118.512785][T32695] ksys_read+0x145/0x250 [ 2118.512810][T32695] ? __pfx_ksys_read+0x10/0x10 [ 2118.512836][T32695] ? __do_fast_syscall_32+0xbe/0x570 [ 2118.512862][T32695] __do_fast_syscall_32+0x1f7/0x570 [ 2118.512891][T32695] ? rcu_is_watching+0x15/0xb0 [ 2118.512918][T32695] ? do_fast_syscall_32+0x34/0x80 [ 2118.512945][T32695] do_fast_syscall_32+0x34/0x80 [ 2118.512967][T32695] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2118.512994][T32695] RIP: 0023:0xf704d539 [ 2118.513013][T32695] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2118.513032][T32695] RSP: 002b:00000000f543d590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 2118.513056][T32695] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f543d620 [ 2118.513072][T32695] RDX: 000000000000000f RSI: 00000000f73e6ff4 RDI: 0000000000000000 [ 2118.513085][T32695] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 2118.513099][T32695] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2118.513112][T32695] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2118.513145][T32695] [ 2119.041229][T32698] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7774'. [ 2119.086130][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2119.095199][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2119.263070][T32703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2119.341761][T32703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2119.706080][T27073] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 2119.885212][T27073] usb 3-1: Using ep0 maxpacket: 32 [ 2119.912033][T27073] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 2119.921707][T27073] usb 3-1: config 0 has no interface number 0 [ 2119.928301][T27073] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 2119.941619][T27073] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 2119.952196][T27073] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2119.964025][T27073] usb 3-1: Product: syz [ 2119.968927][T27073] usb 3-1: Manufacturer: syz [ 2119.973850][T27073] usb 3-1: SerialNumber: syz [ 2120.001655][T27073] usb 3-1: config 0 descriptor?? [ 2120.007506][T32711] x_tables: ip_tables: socket.0 match: invalid size 0 (kernel) != (user) 8 [ 2120.008404][T32705] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 2120.126485][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2120.136011][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2120.139069][T26448] usb 4-1: USB disconnect, device number 94 [ 2120.231496][ T5915] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 2120.247563][T32705] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 2120.396415][ T5915] usb 2-1: Using ep0 maxpacket: 32 [ 2120.406515][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2120.429773][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2120.476217][ T5915] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2120.548777][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2120.609340][ T5915] usb 2-1: config 0 descriptor?? [ 2120.625283][T32724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2120.656682][ T5915] hub 2-1:0.0: USB hub found [ 2120.692419][T32726] netlink: 'syz.2.7784': attribute type 1 has an invalid length. [ 2120.718046][T32724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2120.869030][T32710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2120.889488][T27073] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2120.906328][T27073] asix 3-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 2120.926802][T32710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2120.963371][T27073] asix 3-1:0.188: probe with driver asix failed with error -71 [ 2120.991586][T27073] usb 3-1: USB disconnect, device number 119 [ 2121.152905][T32732] tipc: Enabling of bearer rejected, already enabled [ 2121.163324][ T5915] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 2121.176100][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2121.185206][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2121.389030][ T5915] usbhid 2-1:0.0: can't add hid device: -71 [ 2121.395154][ T5915] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2121.447550][ T5915] usb 2-1: USB disconnect, device number 24 [ 2121.578241][T32731] netlink: 'syz.2.7791': attribute type 10 has an invalid length. [ 2121.626289][T27073] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 2121.788565][T27073] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 2121.797664][T27073] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2121.817244][T27073] usb 4-1: config 220 has no interface number 2 [ 2121.823734][T27073] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 2121.842794][T27073] usb 4-1: config 220 interface 0 has no altsetting 0 [ 2121.850106][T27073] usb 4-1: config 220 interface 76 has no altsetting 0 [ 2121.860494][T27073] usb 4-1: config 220 interface 1 has no altsetting 0 [ 2121.879418][T27073] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2121.890028][T27073] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2121.899025][T27073] usb 4-1: Product: syz [ 2121.903416][T27073] usb 4-1: Manufacturer: syz [ 2121.908371][T27073] usb 4-1: SerialNumber: syz [ 2122.030648][T32752] x_tables: ip_tables: socket.0 match: invalid size 0 (kernel) != (user) 8 [ 2122.116939][T32754] binder: 32749:32754 ioctl c0306201 0 returned -14 [ 2122.147906][T32754] binder: 32749:32754 ioctl c0306201 0 returned -14 [ 2122.151278][T27073] usb 4-1: selecting invalid altsetting 0 [ 2122.161189][T27073] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 2122.169067][T27073] uvcvideo 4-1:220.0: No valid video chain found. [ 2122.206655][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2122.216185][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2122.240855][T27073] usb 4-1: selecting invalid altsetting 0 [ 2122.250278][T27073] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 2122.263073][T27073] usb 4-1: USB disconnect, device number 95 [ 2122.434277][T32760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2122.444368][T32760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2122.707944][T32765] tls_set_device_offload_rx: netdev not found [ 2122.956412][ T10] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 2123.035191][ T303] tipc: Enabling of bearer rejected, already enabled [ 2123.044764][ T305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2123.054265][ T305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2123.066149][T27073] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 2123.096410][ T10] usb 4-1: device descriptor read/64, error -71 [ 2123.134493][ T307] QAT: Device 64 not found [ 2123.141074][ T307] QAT: Invalid ioctl -1072667448 [ 2123.226141][T27073] usb 3-1: Using ep0 maxpacket: 16 [ 2123.232979][T27073] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2123.244642][T27073] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2123.254621][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2123.263474][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2123.274539][T27073] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2123.288496][T27073] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2123.298488][T27073] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2123.309681][T27073] usb 3-1: config 0 descriptor?? [ 2123.336164][ T10] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 2123.386144][ T5915] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 2123.466434][ T10] usb 4-1: device descriptor read/64, error -71 [ 2123.536064][ T5915] usb 2-1: Using ep0 maxpacket: 8 [ 2123.544650][ T5915] usb 2-1: config 8 has an invalid interface number: 142 but max is 0 [ 2123.553376][ T5915] usb 2-1: config 8 has no interface number 0 [ 2123.560073][ T5915] usb 2-1: config 8 interface 142 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 2123.571332][ T5915] usb 2-1: config 8 interface 142 altsetting 5 bulk endpoint 0x7 has invalid maxpacket 64 [ 2123.582544][ T10] usb usb4-port1: attempt power cycle [ 2123.588940][ T5915] usb 2-1: config 8 interface 142 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 2123.616414][ T5915] usb 2-1: config 8 interface 142 altsetting 5 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 2123.630602][ T5915] usb 2-1: config 8 interface 142 has no altsetting 0 [ 2123.638922][ T5915] usb 2-1: language id specifier not provided by device, defaulting to English [ 2123.653641][ T5915] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=31.8b [ 2123.663353][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2123.671856][ T5915] usb 2-1: Manufacturer: ы [ 2123.681035][ T5915] usb 2-1: SerialNumber: 몐꧶螒㖈쵀缼䆎즪狸 [ 2123.692964][ T307] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 2123.743836][ T309] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7808'. [ 2123.753292][ T309] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7808'. [ 2123.765400][ T309] PKCS8: Unsupported PKCS#8 version [ 2123.774148][ T309] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 2123.911653][ T307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2123.930622][ T307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2123.946548][ T10] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 2123.950984][T27073] microsoft 0003:045E:07DA.009E: unknown main item tag 0x6 [ 2123.966554][ T5915] dm9601 2-1:8.142: probe with driver dm9601 failed with error -22 [ 2123.967158][ T10] usb 4-1: device descriptor read/8, error -71 [ 2123.972713][T27073] microsoft 0003:045E:07DA.009E: report_id 28134 is invalid [ 2123.984053][T27073] microsoft 0003:045E:07DA.009E: item 0 2 1 8 parsing failed [ 2124.004810][T27073] microsoft 0003:045E:07DA.009E: parse failed [ 2124.011216][ T5915] sr9700 2-1:8.142: probe with driver sr9700 failed with error -22 [ 2124.020976][T27073] microsoft 0003:045E:07DA.009E: probe with driver microsoft failed with error -22 [ 2124.030779][ T5915] usb 2-1: USB disconnect, device number 25 [ 2124.180014][T27073] usb 3-1: USB disconnect, device number 120 [ 2124.236443][ T10] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 2124.267239][ T10] usb 4-1: device descriptor read/8, error -71 [ 2124.296459][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2124.305717][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2124.386576][ T10] usb usb4-port1: unable to enumerate USB device [ 2124.578988][ T317] netlink: 'syz.4.7812': attribute type 10 has an invalid length. [ 2124.902895][T28518] Bluetooth: hci3: unexpected event 0x01 length: 4 > 1 [ 2124.929879][T28518] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 2125.013445][ T331] syzkaller0: entered promiscuous mode [ 2125.027893][ T331] syzkaller0: entered allmulticast mode [ 2125.210000][ T335] FAULT_INJECTION: forcing a failure. [ 2125.210000][ T335] name failslab, interval 1, probability 0, space 0, times 0 [ 2125.225760][ T335] CPU: 1 UID: 0 PID: 335 Comm: syz.4.7817 Tainted: G L syzkaller #0 PREEMPT(full) [ 2125.225797][ T335] Tainted: [L]=SOFTLOCKUP [ 2125.225806][ T335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2125.225826][ T335] Call Trace: [ 2125.225835][ T335] [ 2125.225846][ T335] dump_stack_lvl+0x189/0x250 [ 2125.225878][ T335] ? __pfx____ratelimit+0x10/0x10 [ 2125.225910][ T335] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2125.225939][ T335] ? __pfx__printk+0x10/0x10 [ 2125.225984][ T335] ? __pfx___might_resched+0x10/0x10 [ 2125.226013][ T335] should_fail_ex+0x414/0x560 [ 2125.226048][ T335] should_failslab+0xa8/0x100 [ 2125.226077][ T335] __kmalloc_noprof+0xdf/0x800 [ 2125.226099][ T335] ? ioctl_standard_iw_point+0x4d5/0xd40 [ 2125.226139][ T335] ioctl_standard_iw_point+0x4d5/0xd40 [ 2125.226186][ T335] ? __pfx_cfg80211_wext_giwscan+0x10/0x10 [ 2125.226212][ T335] ? __pfx_ioctl_standard_iw_point+0x10/0x10 [ 2125.226257][ T335] ? wext_ioctl_dispatch+0xa2/0x410 [ 2125.226293][ T335] compat_standard_call+0x18d/0x4a0 [ 2125.226328][ T335] ? __pfx_cfg80211_wext_giwscan+0x10/0x10 [ 2125.226354][ T335] ? __pfx_compat_standard_call+0x10/0x10 [ 2125.226389][ T335] ? netdev_name_node_lookup+0xdf/0x120 [ 2125.226420][ T335] ? __pfx_cfg80211_wext_giwscan+0x10/0x10 [ 2125.226443][ T335] wext_ioctl_dispatch+0xee/0x410 [ 2125.226472][ T335] ? __pfx_compat_standard_call+0x10/0x10 [ 2125.226508][ T335] compat_wext_handle_ioctl+0x149/0x220 [ 2125.226544][ T335] ? __pfx_compat_wext_handle_ioctl+0x10/0x10 [ 2125.226588][ T335] ? unix_ioctl+0x204/0x720 [ 2125.226616][ T335] ? unix_compat_ioctl+0x15/0x30 [ 2125.226650][ T335] compat_sock_ioctl+0x1d8/0xc80 [ 2125.226684][ T335] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 2125.226715][ T335] ? __fget_files+0x3a0/0x420 [ 2125.226742][ T335] ? __fget_files+0x2a/0x420 [ 2125.226774][ T335] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 2125.226803][ T335] __ia32_compat_sys_ioctl+0x543/0x840 [ 2125.226830][ T335] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 2125.226853][ T335] ? __fget_files+0x3a0/0x420 [ 2125.226888][ T335] ? fput+0xa0/0xd0 [ 2125.226919][ T335] ? ksys_write+0x22a/0x250 [ 2125.226939][ T335] ? exc_page_fault+0x82/0x100 [ 2125.226978][ T335] ? __pfx_ksys_write+0x10/0x10 [ 2125.227004][ T335] ? __do_fast_syscall_32+0xbe/0x570 [ 2125.227030][ T335] __do_fast_syscall_32+0x1f7/0x570 [ 2125.227051][ T335] ? rcu_is_watching+0x15/0xb0 [ 2125.227077][ T335] ? do_fast_syscall_32+0x34/0x80 [ 2125.227103][ T335] do_fast_syscall_32+0x34/0x80 [ 2125.227125][ T335] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2125.227152][ T335] RIP: 0023:0xf7fc2539 [ 2125.227171][ T335] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2125.227190][ T335] RSP: 002b:00000000f54b655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2125.227214][ T335] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008b19 [ 2125.227230][ T335] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 2125.227244][ T335] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2125.227256][ T335] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2125.227269][ T335] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2125.227302][ T335] [ 2125.556073][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2125.567352][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2125.604339][T27073] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 2125.687578][ T340] wg1: entered promiscuous mode [ 2125.692615][ T340] wg1: entered allmulticast mode [ 2125.906101][T27073] usb 3-1: Using ep0 maxpacket: 16 [ 2125.913378][T27073] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2125.924395][T27073] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2125.935421][T27073] usb 3-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 2125.944540][T27073] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2125.966224][ C0] bridge0: port 5(batadv0) entered forwarding state [ 2125.972861][ C0] bridge0: topology change detected, propagating [ 2125.979548][ C0] bridge0: port 3(team0) entered forwarding state [ 2125.986011][ C0] bridge0: topology change detected, propagating [ 2125.992494][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2125.999747][ C0] bridge0: topology change detected, propagating [ 2126.006252][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2126.013484][ C0] bridge0: topology change detected, propagating [ 2126.066262][T27073] usb 3-1: config 0 descriptor?? [ 2126.071300][ T347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2126.081390][ T347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2126.425817][T28518] Bluetooth: hci0: unexpected event for opcode 0xe007 [ 2126.607506][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2126.616755][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2126.676918][T27073] input: HID 0458:5012 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5012.009F/input/input124 [ 2126.733083][T27073] input: HID 0458:5012 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5012.009F/input/input125 [ 2126.889237][ T359] netlink: 'syz.2.7825': attribute type 1 has an invalid length. [ 2127.206098][T27073] kye 0003:0458:5012.009F: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.2-1/input0 [ 2127.238305][ T362] netlink: 'syz.3.7824': attribute type 1 has an invalid length. [ 2127.277785][T27073] usb 3-1: USB disconnect, device number 121 [ 2127.477374][ T367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2127.499743][ T361] fido_id[361]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 2127.517541][ T367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2127.646520][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2127.655886][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2127.753369][ T368] netlink: 'syz.0.7823': attribute type 10 has an invalid length. [ 2127.858080][ T375] netlink: 830 bytes leftover after parsing attributes in process `syz.3.7829'. [ 2127.883621][ T30] audit: type=1326 audit(1765460790.675:8905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=374 comm="syz.3.7829" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x0 [ 2128.114034][ T372] netlink: 'syz.1.7828': attribute type 10 has an invalid length. [ 2128.226058][T27073] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 2128.403566][T27073] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 2128.417297][T27073] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2128.431842][T27073] usb 4-1: config 0 descriptor?? [ 2128.482694][ T390] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 2128.489284][ T390] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2128.499271][ T390] vhci_hcd vhci_hcd.0: Device attached [ 2128.686932][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2128.699416][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2128.784835][ T400] tipc: Enabling of bearer rejected, already enabled [ 2128.816072][T16639] usb 33-1: new low-speed USB device number 13 using vhci_hcd [ 2128.857328][ T397] loop6: detected capacity change from 0 to 524288000 [ 2129.017752][ T401] support for the xor transformation has been removed. [ 2129.088357][ T394] netlink: 'syz.4.7834': attribute type 10 has an invalid length. [ 2129.286096][ T5945] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 2129.462829][ T411] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2129.490513][ T5945] usb 3-1: Using ep0 maxpacket: 32 [ 2129.509264][ T5945] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 2129.522366][ T5945] usb 3-1: config 0 has no interface number 0 [ 2129.532336][ T5945] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 2129.555988][ T5945] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 2129.565747][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2129.575479][ T5945] usb 3-1: Product: syz [ 2129.587279][ T5945] usb 3-1: Manufacturer: syz [ 2129.593996][ T5945] usb 3-1: SerialNumber: syz [ 2129.726111][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2129.736087][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2129.771486][ T5945] usb 3-1: config 0 descriptor?? [ 2129.777559][ T405] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2129.946151][T28843] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 2129.954673][T27073] pegasus 4-1:0.0: can't reset MAC [ 2129.960288][T27073] pegasus 4-1:0.0: probe with driver pegasus failed with error -5 [ 2130.003008][ T405] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2130.126849][T28843] usb 2-1: Using ep0 maxpacket: 32 [ 2130.143083][T28843] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 2130.190855][T28843] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2130.208011][T28843] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2130.231832][T28843] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2130.253427][T28843] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2130.281090][T28843] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 2130.291467][T28843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2130.299974][T28843] usb 2-1: Product: syz [ 2130.311684][T28843] usb 2-1: Manufacturer: syz [ 2130.320989][T28843] usb 2-1: SerialNumber: syz [ 2130.330013][T28843] usb 2-1: config 0 descriptor?? [ 2130.338605][ T411] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 2130.353005][T28843] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input126 [ 2130.372573][ T5184] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2130.397774][ T5184] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2130.459571][ T5945] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 2130.624191][ T5184] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2130.652635][ T5945] asix 3-1:0.188: probe with driver asix failed with error -32 [ 2130.715237][ T5184] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2130.766683][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2130.831648][ T5184] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2130.865183][ T5184] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2131.026318][T25728] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2131.306985][T23756] usb 4-1: USB disconnect, device number 100 [ 2131.543709][ T422] FAULT_INJECTION: forcing a failure. [ 2131.543709][ T422] name failslab, interval 1, probability 0, space 0, times 0 [ 2131.576167][ T5184] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2131.596111][ T422] CPU: 1 UID: 0 PID: 422 Comm: syz.3.7839 Tainted: G L syzkaller #0 PREEMPT(full) [ 2131.596147][ T422] Tainted: [L]=SOFTLOCKUP [ 2131.596154][ T422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2131.596168][ T422] Call Trace: [ 2131.596177][ T422] [ 2131.596186][ T422] dump_stack_lvl+0x189/0x250 [ 2131.596218][ T422] ? __pfx____ratelimit+0x10/0x10 [ 2131.596250][ T422] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2131.596276][ T422] ? __pfx__printk+0x10/0x10 [ 2131.596308][ T422] ? __lock_acquire+0x6b6/0x2cf0 [ 2131.596349][ T422] should_fail_ex+0x414/0x560 [ 2131.596385][ T422] should_failslab+0xa8/0x100 [ 2131.596414][ T422] kmem_cache_alloc_noprof+0x88/0x710 [ 2131.596445][ T422] ? __netlink_lookup+0xbd/0x8a0 [ 2131.596471][ T422] ? skb_clone+0x212/0x3a0 [ 2131.596500][ T422] skb_clone+0x212/0x3a0 [ 2131.596528][ T422] __netlink_deliver_tap+0x404/0x850 [ 2131.596567][ T422] ? netlink_deliver_tap+0x2e/0x1b0 [ 2131.596593][ T422] netlink_deliver_tap+0x19c/0x1b0 [ 2131.596619][ T422] netlink_unicast+0x7fa/0x9e0 [ 2131.596648][ T422] ? __pfx_netlink_unicast+0x10/0x10 [ 2131.596672][ T422] ? netlink_sendmsg+0x642/0xb30 [ 2131.596694][ T422] ? skb_put+0x11b/0x210 [ 2131.596718][ T422] netlink_sendmsg+0x805/0xb30 [ 2131.596753][ T422] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2131.596780][ T422] ? __import_iovec+0x5d4/0x7f0 [ 2131.596800][ T422] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2131.596827][ T422] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2131.596848][ T422] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2131.596874][ T422] __sock_sendmsg+0x21c/0x270 [ 2131.596906][ T422] ____sys_sendmsg+0x505/0x820 [ 2131.596937][ T422] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2131.596966][ T422] ? kstrtouint+0x6e/0xe0 [ 2131.597002][ T422] ___sys_sendmsg+0x21f/0x2a0 [ 2131.597029][ T422] ? __pfx____sys_sendmsg+0x10/0x10 [ 2131.597060][ T422] ? rcu_read_lock_any_held+0xb3/0x120 [ 2131.597119][ T422] ? __fget_files+0x2a/0x420 [ 2131.597147][ T422] ? __fget_files+0x3a0/0x420 [ 2131.597186][ T422] __sys_sendmsg+0x164/0x220 [ 2131.597212][ T422] ? __pfx___sys_sendmsg+0x10/0x10 [ 2131.597244][ T422] ? __pfx_ksys_write+0x10/0x10 [ 2131.597271][ T422] ? __do_fast_syscall_32+0xbe/0x570 [ 2131.597298][ T422] __do_fast_syscall_32+0x1f7/0x570 [ 2131.597331][ T422] ? rcu_is_watching+0x15/0xb0 [ 2131.597357][ T422] ? do_fast_syscall_32+0x34/0x80 [ 2131.597384][ T422] do_fast_syscall_32+0x34/0x80 [ 2131.597405][ T422] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2131.597433][ T422] RIP: 0023:0xf700d539 [ 2131.597453][ T422] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2131.597474][ T422] RSP: 002b:00000000f53fd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2131.597497][ T422] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000500 [ 2131.597513][ T422] RDX: 0000000020008000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2131.597527][ T422] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2131.597540][ T422] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2131.597555][ T422] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2131.597587][ T422] [ 2131.921957][ C1] net_ratelimit: 1 callbacks suppressed [ 2131.921978][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2131.939266][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2132.208791][T28843] usb 3-1: USB disconnect, device number 122 [ 2132.516300][ T391] vhci_hcd: connection reset by peer [ 2132.532307][T17863] vhci_hcd vhci_hcd.0: stop threads [ 2132.542749][T17863] vhci_hcd vhci_hcd.0: release socket [ 2132.549550][T28843] usb 2-1: USB disconnect, device number 26 [ 2132.634693][T17863] vhci_hcd vhci_hcd.0: disconnect device [ 2132.756488][T26448] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 2132.797735][ T438] ALSA: mixer_oss: invalid OSS volume 'y:' [ 2132.825227][ T438] ALSA: mixer_oss: invalid OSS volume 'Shared_Clean:' [ 2132.842573][ T438] ALSA: mixer_oss: invalid OSS volume 'Sha' [ 2132.917933][T26448] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 2132.936095][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2132.936222][T26448] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2132.944776][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2133.001114][T26448] usb 3-1: config 0 descriptor?? [ 2133.547460][ T433] fuse: Bad value for 'fd' [ 2133.956133][T16639] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 2133.966119][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2133.974578][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2134.557495][ T449] netlink: 'syz.1.7847': attribute type 10 has an invalid length. [ 2135.006083][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2135.014649][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2135.080228][T26448] usb 3-1: Cannot set autoneg [ 2135.085353][T26448] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 2135.120746][T26448] usb 3-1: USB disconnect, device number 123 [ 2135.379575][ T455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2135.399338][ T455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2135.706421][T16639] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 2135.866095][T16639] usb 2-1: Using ep0 maxpacket: 32 [ 2135.875206][T16639] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 2135.884011][T16639] usb 2-1: config 0 has no interface number 0 [ 2135.890931][T16639] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 2135.904843][T16639] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 2135.920299][ T30] audit: type=1326 audit(1765460798.705:8906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=461 comm="syz.2.7852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 2135.944080][T16639] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2135.953319][T16639] usb 2-1: Product: syz [ 2135.962735][T16639] usb 2-1: Manufacturer: syz [ 2135.967236][ T30] audit: type=1326 audit(1765460798.705:8907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=461 comm="syz.2.7852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 2135.971279][T16639] usb 2-1: SerialNumber: syz [ 2136.004711][ T30] audit: type=1326 audit(1765460798.705:8908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=461 comm="syz.2.7852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 2136.045895][T16639] usb 2-1: config 0 descriptor?? [ 2136.046107][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2136.059808][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2136.062637][ T30] audit: type=1326 audit(1765460798.715:8909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=461 comm="syz.2.7852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 2136.136032][ T30] audit: type=1326 audit(1765460798.715:8910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=461 comm="syz.2.7852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 2136.139280][ T458] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 2136.226710][ T30] audit: type=1326 audit(1765460798.715:8911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=461 comm="syz.2.7852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 2136.310912][ T30] audit: type=1326 audit(1765460798.715:8912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=461 comm="syz.2.7852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 2136.346832][ T30] audit: type=1326 audit(1765460798.715:8913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=461 comm="syz.2.7852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 2136.373199][ T30] audit: type=1326 audit(1765460798.715:8914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=461 comm="syz.2.7852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 2136.398050][ T30] audit: type=1326 audit(1765460798.715:8915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=461 comm="syz.2.7852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 2136.428592][ T458] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 2136.840720][T16639] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 2136.854064][T16639] asix 2-1:0.188: probe with driver asix failed with error -32 [ 2137.086075][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2137.094728][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2137.598831][ T475] delete_channel: no stack [ 2137.680812][ T477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2137.702186][ T477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2137.724873][ T477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2137.739210][ T477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2138.126155][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2138.134624][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2138.246579][ T484] netlink: 'syz.3.7856': attribute type 10 has an invalid length. [ 2138.257643][ T484] batman_adv: batadv0: Interface deactivated: netdevsim0 [ 2138.293544][ T484] batman_adv: batadv0: Removing interface: netdevsim0 [ 2138.334027][ T484] team0: Device netdevsim0 failed to register rx_handler [ 2138.513973][T16639] usb 2-1: USB disconnect, device number 27 [ 2138.656830][ T491] sctp: [Deprecated]: syz.0.7857 (pid 491) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2138.656830][ T491] Use struct sctp_sack_info instead [ 2139.166151][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2139.174693][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2139.411444][ T500] macsec1: entered allmulticast mode [ 2139.418008][ T500] veth1_macvtap: entered allmulticast mode [ 2139.464079][ T500] veth1_macvtap: left allmulticast mode [ 2139.648823][ T504] QAT: Device 64 not found [ 2139.657456][ T504] QAT: Invalid ioctl -1072667448 [ 2139.700401][ T5945] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 2139.803983][ T507] fuse: Bad value for 'group_id' [ 2139.816220][ T507] fuse: Bad value for 'group_id' [ 2139.859581][ T5945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2139.878386][ T5945] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2139.891149][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2139.896311][ T5915] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 2139.906592][ T5945] usb 3-1: Product: syz [ 2139.912144][ T5945] usb 3-1: Manufacturer: syz [ 2139.924212][ T5945] usb 3-1: SerialNumber: syz [ 2139.937208][ T5945] usb 3-1: config 0 descriptor?? [ 2140.066046][ T5915] usb 4-1: Using ep0 maxpacket: 8 [ 2140.075047][ T5915] usb 4-1: config 8 has an invalid interface number: 142 but max is 0 [ 2140.083639][ T5915] usb 4-1: config 8 has no interface number 0 [ 2140.092830][ T5915] usb 4-1: config 8 interface 142 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 2140.104418][ T5915] usb 4-1: config 8 interface 142 altsetting 5 bulk endpoint 0x7 has invalid maxpacket 64 [ 2140.115131][ T5915] usb 4-1: config 8 interface 142 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 2140.127044][ T5915] usb 4-1: config 8 interface 142 altsetting 5 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 2140.141520][ T5915] usb 4-1: config 8 interface 142 has no altsetting 0 [ 2140.151149][ T5915] usb 4-1: language id specifier not provided by device, defaulting to English [ 2140.174545][ T5915] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=31.8b [ 2140.200873][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2140.216064][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2140.218965][ T500] bridge0: port 3(vlan3) entered blocking state [ 2140.224758][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2140.236252][ T5915] usb 4-1: Manufacturer: ы [ 2140.243407][ T5915] usb 4-1: SerialNumber: 몐꧶螒㖈쵀缼䆎즪狸 [ 2140.296954][ T500] bridge0: port 3(vlan3) entered disabled state [ 2140.307263][ T500] vlan3: entered allmulticast mode [ 2140.317467][ T504] raw-gadget.5 gadget.3: fail, usb_ep_enable returned -22 [ 2140.329975][ T500] vlan3: entered promiscuous mode [ 2140.412072][ T5945] usb 3-1: USB disconnect, device number 124 [ 2140.801881][ T504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2140.862639][ T504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2140.893940][ T5915] dm9601 4-1:8.142: probe with driver dm9601 failed with error -22 [ 2140.922453][ T5915] sr9700 4-1:8.142: probe with driver sr9700 failed with error -22 [ 2140.958547][ T5915] usb 4-1: USB disconnect, device number 101 [ 2141.083530][ T513] tipc: Enabling of bearer rejected, already enabled [ 2141.246081][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2141.255019][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2141.416221][T23756] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 2141.532985][ T523] QAT: Device 64 not found [ 2141.538674][ T523] QAT: Invalid ioctl -1072667448 [ 2141.577768][T23756] usb 2-1: config 4 has an invalid interface number: 28 but max is 0 [ 2141.587328][T23756] usb 2-1: config 4 has no interface number 0 [ 2141.596303][T23756] usb 2-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= a.3a [ 2141.622486][T23756] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2141.662781][ T527] syzkaller0: entered promiscuous mode [ 2141.668455][ T527] syzkaller0: entered allmulticast mode [ 2141.696153][T23756] usb 2-1: Product: syz [ 2141.705560][T23756] usb 2-1: Manufacturer: syz [ 2141.710619][T23756] usb 2-1: SerialNumber: syz [ 2141.750267][T23756] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:4.28/input/input127 [ 2141.828249][ T5915] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 2141.986393][ T5915] usb 3-1: Using ep0 maxpacket: 8 [ 2141.994965][ T5915] usb 3-1: config 8 has an invalid interface number: 142 but max is 0 [ 2142.006211][ T5915] usb 3-1: config 8 has no interface number 0 [ 2142.013945][ T5915] usb 3-1: config 8 interface 142 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 2142.032375][ T5184] bcm5974 2-1:4.28: could not read from device [ 2142.039850][ T5915] usb 3-1: config 8 interface 142 altsetting 5 bulk endpoint 0x7 has invalid maxpacket 64 [ 2142.051407][ T5184] bcm5974 2-1:4.28: could not read from device [ 2142.061951][ T5915] usb 3-1: config 8 interface 142 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 2142.073693][ T5184] bcm5974 2-1:4.28: could not read from device [ 2142.082671][ T5915] usb 3-1: config 8 interface 142 altsetting 5 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 2142.085210][T23756] usb 2-1: USB disconnect, device number 28 [ 2142.094607][ T5184] bcm5974 2-1:4.28: could not read from device [ 2142.106940][ T5915] usb 3-1: config 8 interface 142 has no altsetting 0 [ 2142.135660][ T5915] usb 3-1: language id specifier not provided by device, defaulting to English [ 2142.212879][ T5915] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=31.8b [ 2142.280778][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2142.296056][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2142.304788][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2142.313391][ T5915] usb 3-1: Manufacturer: ы [ 2142.322354][ T5915] usb 3-1: SerialNumber: 몐꧶螒㖈쵀缼䆎즪狸 [ 2142.351974][ T523] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 2142.630603][ T523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2142.639881][ T523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2142.670614][ T5915] dm9601 3-1:8.142: probe with driver dm9601 failed with error -22 [ 2142.695030][ T5915] sr9700 3-1:8.142: probe with driver sr9700 failed with error -22 [ 2142.805136][ T5915] usb 3-1: USB disconnect, device number 125 [ 2142.914507][ T538] sctp: [Deprecated]: syz.1.7873 (pid 538) Use of int in max_burst socket option deprecated. [ 2142.914507][ T538] Use struct sctp_assoc_value instead [ 2142.977308][ T538] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 2143.282612][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 2143.282633][ T30] audit: type=1326 audit(1765460806.065:8963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=537 comm="syz.1.7873" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47539 code=0x7ffc0000 [ 2143.312810][ T30] audit: type=1326 audit(1765460806.065:8964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=537 comm="syz.1.7873" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47539 code=0x7ffc0000 [ 2143.335066][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2143.343566][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2143.355124][ T30] audit: type=1326 audit(1765460806.065:8965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=537 comm="syz.1.7873" exe="/root/syz-executor" sig=0 arch=40000003 syscall=138 compat=1 ip=0xf7f47539 code=0x7ffc0000 [ 2143.396909][ T30] audit: type=1326 audit(1765460806.075:8966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=537 comm="syz.1.7873" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47539 code=0x7ffc0000 [ 2143.433934][ T30] audit: type=1326 audit(1765460806.075:8967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=537 comm="syz.1.7873" exe="/root/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf7f47539 code=0x7ffc0000 [ 2143.461981][ T30] audit: type=1326 audit(1765460806.155:8968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=542 comm="syz.1.7873" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7f47539 code=0x7ffc0000 [ 2143.489006][ T30] audit: type=1326 audit(1765460806.155:8969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=537 comm="syz.1.7873" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47539 code=0x7ffc0000 [ 2143.517511][ T30] audit: type=1326 audit(1765460806.155:8970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=537 comm="syz.1.7873" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47539 code=0x7ffc0000 [ 2143.540042][ T30] audit: type=1326 audit(1765460806.185:8971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=537 comm="syz.1.7873" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f47539 code=0x7ffc0000 [ 2143.567888][ T30] audit: type=1326 audit(1765460806.195:8972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=537 comm="syz.1.7873" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47539 code=0x7ffc0000 [ 2143.800596][ T554] fuse: Bad value for 'group_id' [ 2143.805636][ T554] fuse: Bad value for 'group_id' [ 2143.899670][ T541] netlink: 'syz.3.7874': attribute type 10 has an invalid length. [ 2143.922847][ T541] batman_adv: batadv0: Adding interface: netdevsim0 [ 2143.939967][ T541] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2143.973518][ T541] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 2144.120178][ T558] tipc: Enabling of bearer rejected, already enabled [ 2144.366089][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2144.376271][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2144.592739][ T563] netlink: 'syz.1.7879': attribute type 10 has an invalid length. [ 2144.602832][ T563] batman_adv: batadv0: Interface deactivated: netdevsim0 [ 2144.656281][ T563] batman_adv: batadv0: Removing interface: netdevsim0 [ 2144.724732][ T563] team0: Port device netdevsim0 added [ 2145.406077][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2145.415030][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2145.972712][ T581] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2146.446262][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2146.722598][ T587] loop9: detected capacity change from 0 to 7 [ 2146.747781][T22872] buffer_io_error: 1119 callbacks suppressed [ 2146.747797][T22872] Buffer I/O error on dev loop9, logical block 0, async page read [ 2147.067328][T22872] Buffer I/O error on dev loop9, logical block 0, async page read [ 2147.103923][T22872] Buffer I/O error on dev loop9, logical block 0, async page read [ 2147.148385][T22872] Buffer I/O error on dev loop9, logical block 0, async page read [ 2147.191063][T22872] Buffer I/O error on dev loop9, logical block 0, async page read [ 2147.328784][T22872] Buffer I/O error on dev loop9, logical block 0, async page read [ 2147.351249][T22872] Buffer I/O error on dev loop9, logical block 0, async page read [ 2147.390810][T22872] Buffer I/O error on dev loop9, logical block 0, async page read [ 2147.406274][T22872] Buffer I/O error on dev loop9, logical block 0, async page read [ 2147.464685][T22872] Buffer I/O error on dev loop9, logical block 0, async page read [ 2147.486071][ C1] net_ratelimit: 1 callbacks suppressed [ 2147.486092][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2147.500233][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2147.836104][ T5915] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 2147.869039][ T595] QAT: Device 64 not found [ 2147.883426][ T595] QAT: Invalid ioctl -1072667448 [ 2147.905309][ T595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2147.944470][ T595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2148.093661][ T5915] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2148.183572][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2148.239279][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2148.256260][T27073] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 2148.260485][ T595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2148.273916][ T5915] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2148.287978][ T595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2148.328567][ T5915] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2148.349036][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2148.383709][ T5915] usb 2-1: config 0 descriptor?? [ 2148.442633][T27073] usb 4-1: config 0 has an invalid descriptor of length 211, skipping remainder of the config [ 2148.454475][T27073] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2148.511456][T27073] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2148.526071][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2148.535109][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2148.566046][T27073] usb 4-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 2148.585715][T27073] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2148.623225][T27073] usb 4-1: Product: syz [ 2148.630954][T27073] usb 4-1: Manufacturer: syz [ 2148.635661][T27073] usb 4-1: SerialNumber: syz [ 2148.662116][T27073] usb 4-1: config 0 descriptor?? [ 2148.690013][T27073] uvcvideo 4-1:0.0: probe with driver uvcvideo failed with error -22 [ 2148.825002][ T5915] plantronics 0003:047F:FFFF.00A0: ignoring exceeding usage max [ 2148.933513][ T5915] plantronics 0003:047F:FFFF.00A0: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 2149.566072][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2149.576262][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2149.828809][ T621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2149.885496][ T621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2150.326325][ T615] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2150.334373][ T615] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2150.342501][ T615] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2150.351188][ T615] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2150.357494][ T615] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2150.463297][ T5915] usb 2-1: USB disconnect, device number 29 [ 2150.606075][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2150.614912][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2151.387247][T27073] usb 4-1: USB disconnect, device number 102 [ 2151.646120][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2151.654675][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2151.809852][ T633] vxcan1: entered allmulticast mode [ 2151.895799][ T633] vxcan1 (unregistering): left allmulticast mode [ 2152.073910][ T639] tipc: Enabled bearer , priority 0 [ 2152.082329][ T638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7901'. [ 2152.142872][ T639] tipc: Disabling bearer [ 2152.371520][T14825] Bluetooth: hci5: command 0x0406 tx timeout [ 2152.378137][T14825] Bluetooth: hci3: command 0x0406 tx timeout [ 2152.384349][T25718] Bluetooth: hci2: command 0x0406 tx timeout [ 2152.390956][T25718] Bluetooth: hci0: command 0x0406 tx timeout [ 2152.397509][T28518] Bluetooth: hci1: command 0x0c1a tx timeout [ 2152.447938][ T649] QAT: Device 64 not found [ 2152.459552][ T649] QAT: Invalid ioctl -1072667448 [ 2152.686088][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2152.695142][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2152.707472][T28843] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 2152.776459][ T5915] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 2152.805261][ T653] netlink: 'syz.0.7906': attribute type 10 has an invalid length. [ 2152.886038][T28843] usb 4-1: Using ep0 maxpacket: 32 [ 2152.946470][ T5915] usb 3-1: Using ep0 maxpacket: 8 [ 2152.974962][T28843] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 2153.225574][ T5915] usb 3-1: config 8 has an invalid interface number: 142 but max is 0 [ 2153.235839][T28843] usb 4-1: config 0 has no interface number 0 [ 2153.242166][ T5915] usb 3-1: config 8 has no interface number 0 [ 2153.251589][T28843] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 2153.278205][ T5915] usb 3-1: config 8 interface 142 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 2153.296276][ T5915] usb 3-1: config 8 interface 142 altsetting 5 bulk endpoint 0x7 has invalid maxpacket 64 [ 2153.311425][ T5915] usb 3-1: config 8 interface 142 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 2153.335498][ T5915] usb 3-1: config 8 interface 142 altsetting 5 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 2153.348454][T28843] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 2153.361863][T28843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2153.371857][T28843] usb 4-1: Product: syz [ 2153.376622][T28843] usb 4-1: Manufacturer: syz [ 2153.381277][T28843] usb 4-1: SerialNumber: syz [ 2153.386283][ T5915] usb 3-1: config 8 interface 142 has no altsetting 0 [ 2153.395409][T28843] usb 4-1: config 0 descriptor?? [ 2153.401334][ T5915] usb 3-1: language id specifier not provided by device, defaulting to English [ 2153.415133][ T655] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2153.427571][ T5915] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=31.8b [ 2153.439024][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2153.447759][ T5915] usb 3-1: Manufacturer: ы [ 2153.460612][ T669] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2153.477711][ T5915] usb 3-1: SerialNumber: 몐꧶螒㖈쵀缼䆎즪狸 [ 2153.513909][ T649] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 2153.652836][ T655] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2153.726092][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2153.734624][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2153.769924][ T649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2153.789415][ T649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2153.819573][ T5945] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 2153.823463][ T5915] dm9601 3-1:8.142: probe with driver dm9601 failed with error -22 [ 2153.841676][ T5915] sr9700 3-1:8.142: probe with driver sr9700 failed with error -22 [ 2153.870076][ T5915] usb 3-1: USB disconnect, device number 126 [ 2153.938270][ T675] FAULT_INJECTION: forcing a failure. [ 2153.938270][ T675] name failslab, interval 1, probability 0, space 0, times 0 [ 2153.951547][ T675] CPU: 1 UID: 0 PID: 675 Comm: syz.0.7912 Tainted: G L syzkaller #0 PREEMPT(full) [ 2153.951582][ T675] Tainted: [L]=SOFTLOCKUP [ 2153.951590][ T675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2153.951603][ T675] Call Trace: [ 2153.951613][ T675] [ 2153.951623][ T675] dump_stack_lvl+0x189/0x250 [ 2153.951656][ T675] ? __pfx____ratelimit+0x10/0x10 [ 2153.951689][ T675] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2153.951715][ T675] ? __pfx__printk+0x10/0x10 [ 2153.951748][ T675] ? __lock_acquire+0x6b6/0x2cf0 [ 2153.951779][ T675] should_fail_ex+0x414/0x560 [ 2153.951815][ T675] should_failslab+0xa8/0x100 [ 2153.951847][ T675] kmem_cache_alloc_noprof+0x88/0x710 [ 2153.951879][ T675] ? __netlink_lookup+0xbd/0x8a0 [ 2153.951904][ T675] ? skb_clone+0x212/0x3a0 [ 2153.951933][ T675] skb_clone+0x212/0x3a0 [ 2153.951962][ T675] __netlink_deliver_tap+0x404/0x850 [ 2153.951999][ T675] ? netlink_deliver_tap+0x2e/0x1b0 [ 2153.952027][ T675] netlink_deliver_tap+0x19c/0x1b0 [ 2153.952053][ T675] netlink_unicast+0x7fa/0x9e0 [ 2153.952084][ T675] ? __pfx_netlink_unicast+0x10/0x10 [ 2153.952114][ T675] ? netlink_sendmsg+0x642/0xb30 [ 2153.952138][ T675] ? skb_put+0x11b/0x210 [ 2153.952163][ T675] netlink_sendmsg+0x805/0xb30 [ 2153.952199][ T675] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2153.952227][ T675] ? __import_iovec+0x5d4/0x7f0 [ 2153.952248][ T675] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2153.952275][ T675] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2153.952296][ T675] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2153.952321][ T675] __sock_sendmsg+0x21c/0x270 [ 2153.952354][ T675] ____sys_sendmsg+0x505/0x820 [ 2153.952383][ T675] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2153.952410][ T675] ? kstrtouint+0x6e/0xe0 [ 2153.952446][ T675] ___sys_sendmsg+0x21f/0x2a0 [ 2153.952471][ T675] ? __pfx____sys_sendmsg+0x10/0x10 [ 2153.952501][ T675] ? rcu_read_lock_any_held+0xb3/0x120 [ 2153.952555][ T675] ? __fget_files+0x2a/0x420 [ 2153.952584][ T675] ? __fget_files+0x3a0/0x420 [ 2153.952623][ T675] __sys_sendmsg+0x164/0x220 [ 2153.952648][ T675] ? __pfx___sys_sendmsg+0x10/0x10 [ 2153.952680][ T675] ? __pfx_ksys_write+0x10/0x10 [ 2153.952707][ T675] ? __do_fast_syscall_32+0xbe/0x570 [ 2153.952734][ T675] __do_fast_syscall_32+0x1f7/0x570 [ 2153.952755][ T675] ? rcu_is_watching+0x15/0xb0 [ 2153.952779][ T675] ? do_fast_syscall_32+0x34/0x80 [ 2153.952806][ T675] do_fast_syscall_32+0x34/0x80 [ 2153.952827][ T675] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2153.952855][ T675] RIP: 0023:0xf7f57539 [ 2153.952875][ T675] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2153.952893][ T675] RSP: 002b:00000000f544655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2153.952914][ T675] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 2153.952930][ T675] RDX: 0000000004000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 2153.952939][ T675] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2153.952947][ T675] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2153.952957][ T675] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2153.952985][ T675] [ 2154.070886][T28843] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 2154.105542][ T5945] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2154.109077][T28843] asix 4-1:0.188: probe with driver asix failed with error -32 [ 2154.111446][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2154.111472][ T5945] usb 2-1: Product: syz [ 2154.316497][ T5945] usb 2-1: Manufacturer: syz [ 2154.321204][ T5945] usb 2-1: SerialNumber: syz [ 2154.384705][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 2154.384725][ T30] audit: type=1326 audit(1765460817.175:9030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=677 comm="syz.0.7913" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57539 code=0x7ffc0000 [ 2154.416090][ T30] audit: type=1326 audit(1765460817.215:9031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=677 comm="syz.0.7913" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57539 code=0x7ffc0000 [ 2154.443709][ T30] audit: type=1326 audit(1765460817.215:9032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=677 comm="syz.0.7913" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7f57539 code=0x7ffc0000 [ 2154.490382][ T30] audit: type=1326 audit(1765460817.235:9033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=677 comm="syz.0.7913" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57539 code=0x7ffc0000 [ 2154.512946][ T30] audit: type=1326 audit(1765460817.235:9034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=677 comm="syz.0.7913" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57539 code=0x7ffc0000 [ 2154.540122][ T30] audit: type=1326 audit(1765460817.275:9035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=677 comm="syz.0.7913" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f57539 code=0x7ffc0000 [ 2154.593432][ T30] audit: type=1326 audit(1765460817.275:9036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=677 comm="syz.0.7913" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57539 code=0x7ffc0000 [ 2154.619370][ T30] audit: type=1326 audit(1765460817.275:9037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=677 comm="syz.0.7913" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57539 code=0x7ffc0000 [ 2154.663323][ T30] audit: type=1326 audit(1765460817.275:9038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=677 comm="syz.0.7913" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f57539 code=0x7ffc0000 [ 2154.684738][ T686] FAULT_INJECTION: forcing a failure. [ 2154.684738][ T686] name failslab, interval 1, probability 0, space 0, times 0 [ 2154.700634][ T30] audit: type=1326 audit(1765460817.285:9039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=677 comm="syz.0.7913" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57539 code=0x7ffc0000 [ 2154.726412][ T686] CPU: 0 UID: 0 PID: 686 Comm: syz.4.7915 Tainted: G L syzkaller #0 PREEMPT(full) [ 2154.726447][ T686] Tainted: [L]=SOFTLOCKUP [ 2154.726457][ T686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2154.726471][ T686] Call Trace: [ 2154.726480][ T686] [ 2154.726490][ T686] dump_stack_lvl+0x189/0x250 [ 2154.726523][ T686] ? __pfx____ratelimit+0x10/0x10 [ 2154.726557][ T686] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2154.726584][ T686] ? __pfx__printk+0x10/0x10 [ 2154.726617][ T686] ? __lock_acquire+0x6b6/0x2cf0 [ 2154.726651][ T686] should_fail_ex+0x414/0x560 [ 2154.726687][ T686] should_failslab+0xa8/0x100 [ 2154.726717][ T686] kmem_cache_alloc_noprof+0x88/0x710 [ 2154.726749][ T686] ? __netlink_lookup+0xbd/0x8a0 [ 2154.726776][ T686] ? skb_clone+0x212/0x3a0 [ 2154.726806][ T686] skb_clone+0x212/0x3a0 [ 2154.726845][ T686] __netlink_deliver_tap+0x404/0x850 [ 2154.726884][ T686] ? netlink_deliver_tap+0x2e/0x1b0 [ 2154.726910][ T686] netlink_deliver_tap+0x19c/0x1b0 [ 2154.726936][ T686] netlink_unicast+0x7fa/0x9e0 [ 2154.726968][ T686] ? __pfx_netlink_unicast+0x10/0x10 [ 2154.726993][ T686] ? netlink_sendmsg+0x642/0xb30 [ 2154.727016][ T686] ? skb_put+0x11b/0x210 [ 2154.727041][ T686] netlink_sendmsg+0x805/0xb30 [ 2154.727077][ T686] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2154.727106][ T686] ? __import_iovec+0x5d4/0x7f0 [ 2154.727127][ T686] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2154.727155][ T686] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2154.727177][ T686] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2154.727204][ T686] __sock_sendmsg+0x21c/0x270 [ 2154.727236][ T686] ____sys_sendmsg+0x505/0x820 [ 2154.727267][ T686] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2154.727296][ T686] ? kstrtouint+0x6e/0xe0 [ 2154.727333][ T686] ___sys_sendmsg+0x21f/0x2a0 [ 2154.727359][ T686] ? __pfx____sys_sendmsg+0x10/0x10 [ 2154.727391][ T686] ? rcu_read_lock_any_held+0xb3/0x120 [ 2154.727450][ T686] ? __fget_files+0x2a/0x420 [ 2154.727477][ T686] ? __fget_files+0x3a0/0x420 [ 2154.727517][ T686] __sys_sendmsg+0x164/0x220 [ 2154.727544][ T686] ? __pfx___sys_sendmsg+0x10/0x10 [ 2154.727577][ T686] ? __pfx_ksys_write+0x10/0x10 [ 2154.727604][ T686] ? __do_fast_syscall_32+0xbe/0x570 [ 2154.727630][ T686] __do_fast_syscall_32+0x1f7/0x570 [ 2154.727652][ T686] ? rcu_is_watching+0x15/0xb0 [ 2154.727678][ T686] ? do_fast_syscall_32+0x34/0x80 [ 2154.727705][ T686] do_fast_syscall_32+0x34/0x80 [ 2154.727727][ T686] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2154.727754][ T686] RIP: 0023:0xf7fc2539 [ 2154.727773][ T686] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2154.727792][ T686] RSP: 002b:00000000f54b655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2154.727815][ T686] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000200 [ 2154.727839][ T686] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2154.727852][ T686] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2154.727865][ T686] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2154.727879][ T686] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2154.727911][ T686] [ 2154.766284][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2155.061309][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2155.083640][ T5945] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 2155.095778][ T5945] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 2155.487609][ T667] usb 4-1: USB disconnect, device number 103 [ 2155.506346][T28843] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 2155.640106][ T702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2155.651049][ T702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2155.672221][ T702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2155.682122][ T702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2155.698927][T28843] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 2155.806063][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2155.816299][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2155.907211][T28843] usb 3-1: config 0 has no interface number 0 [ 2155.913505][T28843] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 2156.003113][T28843] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2156.033919][T28843] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 2156.056968][T28843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2156.071347][T28843] usb 3-1: Product: syz [ 2156.078607][T28843] usb 3-1: Manufacturer: syz [ 2156.086585][T28843] usb 3-1: SerialNumber: syz [ 2156.105469][T28843] usb 3-1: config 0 descriptor?? [ 2156.116879][ T696] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 2156.134153][T28843] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 2156.165646][T28843] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 2156.616150][ T5945] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2156.640995][T27073] usb 3-1: USB disconnect, device number 127 [ 2156.651890][ T5945] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2156.681657][T27073] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 2156.693782][T27073] cyberjack 3-1:0.69: device disconnected [ 2156.807295][ T5945] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 2156.872399][ T5945] usb 2-1: USB disconnect, device number 30 [ 2157.290779][ T709] netlink: 'syz.4.7923': attribute type 10 has an invalid length. [ 2157.616743][T27068] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 2157.792794][T27068] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 2157.822355][T27068] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2157.856136][T27068] usb 3-1: Product: syz [ 2157.886080][ C1] net_ratelimit: 5 callbacks suppressed [ 2157.886101][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2157.889441][T27068] usb 3-1: Manufacturer: syz [ 2157.892256][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2157.916595][ T667] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 2157.948856][T27068] usb 3-1: SerialNumber: syz [ 2158.034096][T27068] usb 3-1: config 0 descriptor?? [ 2158.147642][ T667] usb 4-1: Using ep0 maxpacket: 32 [ 2158.155036][ T667] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 2158.172714][ T667] usb 4-1: config 0 has no interface number 0 [ 2158.193567][ T667] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 2158.254489][ T667] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 2158.274919][ T667] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2158.283844][T28843] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 2158.304125][ T667] usb 4-1: Product: syz [ 2158.333356][ T667] usb 4-1: Manufacturer: syz [ 2158.338571][ T667] usb 4-1: SerialNumber: syz [ 2158.364586][ T667] usb 4-1: config 0 descriptor?? [ 2158.396794][ T733] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2158.447004][T28843] usb 2-1: Using ep0 maxpacket: 32 [ 2158.494199][T28843] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2158.537394][T28843] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2158.569200][T28843] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2158.593535][T28843] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2158.640582][ T733] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2158.655602][T28843] usb 2-1: config 0 descriptor?? [ 2158.926075][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2158.934593][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2159.058151][T27068] usb 3-1: f81604_read: reg: 100f failed: -EPROTO [ 2159.077564][ T667] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 2159.093113][ T752] netlink: 'syz.4.7933': attribute type 10 has an invalid length. [ 2159.128994][T27068] usb 3-1: f81604_read: reg: 200f failed: -EPROTO [ 2159.136722][ T667] asix 4-1:0.188: probe with driver asix failed with error -61 [ 2159.167378][T28843] savu 0003:1E7D:2D5A.00A1: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 2159.191067][T27068] usb 3-1: USB disconnect, device number 2 [ 2159.231596][T27068] usb 3-1: f81604_read: reg: 100f failed: -ENODEV [ 2159.297910][ T5494] usb 3-1: f81604_read: reg: 200f failed: -ENODEV [ 2159.318129][T27068] usb 3-1: f81604_read: reg: 200f failed: -ENODEV [ 2159.865351][ T760] FAULT_INJECTION: forcing a failure. [ 2159.865351][ T760] name failslab, interval 1, probability 0, space 0, times 0 [ 2159.884789][ T760] CPU: 1 UID: 0 PID: 760 Comm: syz.4.7936 Tainted: G L syzkaller #0 PREEMPT(full) [ 2159.884825][ T760] Tainted: [L]=SOFTLOCKUP [ 2159.884834][ T760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2159.884848][ T760] Call Trace: [ 2159.884858][ T760] [ 2159.884868][ T760] dump_stack_lvl+0x189/0x250 [ 2159.884901][ T760] ? __pfx____ratelimit+0x10/0x10 [ 2159.884932][ T760] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2159.884959][ T760] ? __pfx__printk+0x10/0x10 [ 2159.884996][ T760] ? __pfx___might_resched+0x10/0x10 [ 2159.885015][ T760] ? fs_reclaim_acquire+0x7d/0x100 [ 2159.885044][ T760] should_fail_ex+0x414/0x560 [ 2159.885080][ T760] should_failslab+0xa8/0x100 [ 2159.885110][ T760] __kmalloc_noprof+0xdf/0x800 [ 2159.885131][ T760] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 2159.885170][ T760] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 2159.885210][ T760] genl_family_rcv_msg_doit+0xb8/0x300 [ 2159.885250][ T760] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2159.885290][ T760] ? apparmor_capable+0x137/0x1a0 [ 2159.885314][ T760] ? bpf_lsm_capable+0x9/0x20 [ 2159.885334][ T760] ? security_capable+0x7e/0x2e0 [ 2159.885354][ T760] genl_rcv_msg+0x60e/0x790 [ 2159.885381][ T760] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2159.885402][ T760] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 2159.885417][ T760] ? __pfx_nl80211_join_mesh+0x10/0x10 [ 2159.885437][ T760] ? __pfx_nl80211_post_doit+0x10/0x10 [ 2159.885462][ T760] netlink_rcv_skb+0x208/0x470 [ 2159.885480][ T760] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2159.885513][ T760] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2159.885543][ T760] ? down_read+0x274/0x2e0 [ 2159.885557][ T760] ? genl_rcv+0xd/0x40 [ 2159.885579][ T760] genl_rcv+0x28/0x40 [ 2159.885599][ T760] netlink_unicast+0x82f/0x9e0 [ 2159.885621][ T760] ? __pfx_netlink_unicast+0x10/0x10 [ 2159.885638][ T760] ? netlink_sendmsg+0x642/0xb30 [ 2159.885654][ T760] ? skb_put+0x11b/0x210 [ 2159.885672][ T760] netlink_sendmsg+0x805/0xb30 [ 2159.885697][ T760] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2159.885717][ T760] ? __import_iovec+0x5d4/0x7f0 [ 2159.885732][ T760] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2159.885751][ T760] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2159.885766][ T760] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2159.885786][ T760] __sock_sendmsg+0x21c/0x270 [ 2159.885819][ T760] ____sys_sendmsg+0x505/0x820 [ 2159.885856][ T760] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2159.885877][ T760] ? kstrtouint+0x6e/0xe0 [ 2159.885913][ T760] ___sys_sendmsg+0x21f/0x2a0 [ 2159.885938][ T760] ? __pfx____sys_sendmsg+0x10/0x10 [ 2159.885967][ T760] ? rcu_read_lock_any_held+0xb3/0x120 [ 2159.886023][ T760] ? __fget_files+0x2a/0x420 [ 2159.886050][ T760] ? __fget_files+0x3a0/0x420 [ 2159.886088][ T760] __sys_sendmsg+0x164/0x220 [ 2159.886113][ T760] ? __pfx___sys_sendmsg+0x10/0x10 [ 2159.886144][ T760] ? __pfx_ksys_write+0x10/0x10 [ 2159.886170][ T760] ? __do_fast_syscall_32+0xbe/0x570 [ 2159.886197][ T760] __do_fast_syscall_32+0x1f7/0x570 [ 2159.886219][ T760] ? rcu_is_watching+0x15/0xb0 [ 2159.886243][ T760] ? do_fast_syscall_32+0x34/0x80 [ 2159.886270][ T760] do_fast_syscall_32+0x34/0x80 [ 2159.886289][ T760] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2159.886315][ T760] RIP: 0023:0xf7fc2539 [ 2159.886333][ T760] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2159.886352][ T760] RSP: 002b:00000000f54b655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2159.886375][ T760] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 2159.886390][ T760] RDX: 0000000004000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 2159.886403][ T760] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2159.886416][ T760] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2159.886427][ T760] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2159.886460][ T760] [ 2160.268332][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2160.277585][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2160.577445][ T5945] usb 2-1: reset high-speed USB device number 31 using dummy_hcd [ 2160.675566][T28843] usb 4-1: USB disconnect, device number 104 [ 2160.965743][ T772] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2161.326596][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2161.337297][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2161.627788][T27073] usb 2-1: USB disconnect, device number 31 [ 2161.854844][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 2161.854858][ T30] audit: type=1326 audit(1765460824.645:9088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=775 comm="syz.3.7939" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 2161.884393][ T778] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2161.936837][ T30] audit: type=1326 audit(1765460824.675:9089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=775 comm="syz.3.7939" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 2161.959244][ T30] audit: type=1326 audit(1765460824.675:9090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=775 comm="syz.3.7939" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 2162.015565][ T650] Bluetooth: hci1: unexpected event 0x01 length: 4 > 1 [ 2162.018252][ T650] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 2162.043861][ T30] audit: type=1326 audit(1765460824.675:9091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=775 comm="syz.3.7939" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 2162.186298][ T30] audit: type=1326 audit(1765460824.675:9092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=775 comm="syz.3.7939" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 2162.243132][ T30] audit: type=1326 audit(1765460824.675:9093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=775 comm="syz.3.7939" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 2162.284055][ T30] audit: type=1326 audit(1765460824.675:9094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=775 comm="syz.3.7939" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 2162.341104][ T30] audit: type=1326 audit(1765460824.705:9095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=775 comm="syz.3.7939" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 2162.378942][ T30] audit: type=1326 audit(1765460824.705:9096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=775 comm="syz.3.7939" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 2162.418895][ T30] audit: type=1326 audit(1765460824.705:9097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=775 comm="syz.3.7939" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 2162.487257][ T781] netlink: 'syz.0.7942': attribute type 10 has an invalid length. [ 2162.661275][ T800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2162.670218][ T800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2162.697009][T27073] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 2162.868133][T27073] usb 3-1: config index 0 descriptor too short (expected 65069, got 45) [ 2162.876649][T27073] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 2162.889171][T27073] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2162.899452][T27073] usb 3-1: config 0 has no interfaces? [ 2162.905028][T27073] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 2162.914163][T27073] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2162.924758][T27073] usb 3-1: config 0 descriptor?? [ 2163.136897][T28843] usb 3-1: USB disconnect, device number 3 [ 2163.406567][ C1] net_ratelimit: 2 callbacks suppressed [ 2163.406592][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2163.421542][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2163.854255][ T819] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^!l1*$pOcɔr$G [ 2164.456100][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2164.464811][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2165.486526][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2165.495717][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2165.654466][ T832] bridge0: port 2(bridge_slave_1) entered blocking state [ 2165.661722][ T832] bridge0: port 2(bridge_slave_1) entered listening state [ 2165.669137][ T832] bridge0: port 1(bridge_slave_0) entered blocking state [ 2165.676316][ T832] bridge0: port 1(bridge_slave_0) entered listening state [ 2165.791477][ T832] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2166.307278][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2166.313986][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2166.526054][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2166.536056][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2167.208626][ T862] FAULT_INJECTION: forcing a failure. [ 2167.208626][ T862] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2167.236096][ T862] CPU: 1 UID: 0 PID: 862 Comm: syz.1.7968 Tainted: G L syzkaller #0 PREEMPT(full) [ 2167.236123][ T862] Tainted: [L]=SOFTLOCKUP [ 2167.236129][ T862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2167.236139][ T862] Call Trace: [ 2167.236146][ T862] [ 2167.236153][ T862] dump_stack_lvl+0x189/0x250 [ 2167.236178][ T862] ? __pfx____ratelimit+0x10/0x10 [ 2167.236200][ T862] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2167.236219][ T862] ? __pfx__printk+0x10/0x10 [ 2167.236251][ T862] should_fail_ex+0x414/0x560 [ 2167.236276][ T862] strncpy_from_user+0x36/0x2c0 [ 2167.236299][ T862] getname_flags+0xf3/0x540 [ 2167.236322][ T862] __ia32_sys_renameat2+0xba/0xe0 [ 2167.236344][ T862] __do_fast_syscall_32+0x1f7/0x570 [ 2167.236360][ T862] ? trace_page_fault_user+0x84/0x1c0 [ 2167.236376][ T862] ? do_fast_syscall_32+0x34/0x80 [ 2167.236393][ T862] do_fast_syscall_32+0x34/0x80 [ 2167.236408][ T862] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2167.236427][ T862] RIP: 0023:0xf7f47539 [ 2167.236440][ T862] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2167.236455][ T862] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000161 [ 2167.236471][ T862] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000180 [ 2167.236483][ T862] RDX: 00000000ffffff9c RSI: 0000000080000000 RDI: 0000000000000002 [ 2167.236493][ T862] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2167.236502][ T862] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2167.236511][ T862] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2167.236534][ T862] [ 2167.515476][ T859] netlink: 'syz.4.7967': attribute type 10 has an invalid length. [ 2167.566605][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2168.460399][ T5945] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 2168.606072][ C1] net_ratelimit: 2 callbacks suppressed [ 2168.606094][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2168.621828][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2168.646076][ T5945] usb 3-1: Using ep0 maxpacket: 8 [ 2168.676900][ T5945] usb 3-1: config index 0 descriptor too short (expected 30482, got 18) [ 2168.697725][ T5945] usb 3-1: config 0 has too many interfaces: 101, using maximum allowed: 32 [ 2168.713845][ T5945] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 101 [ 2168.779136][ T5945] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 5.00 [ 2168.803120][ T5945] usb 3-1: New USB device strings: Mfr=253, Product=255, SerialNumber=0 [ 2168.827566][ T5945] usb 3-1: Product: syz [ 2168.840113][ T5945] usb 3-1: Manufacturer: syz [ 2168.863370][ T5945] usb 3-1: config 0 descriptor?? [ 2168.882884][ T5945] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 2169.079357][ T5945] usb 3-1: Detected FT2232C/D [ 2169.181170][ T897] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2169.281848][ T5945] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 2169.291238][ T5945] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 2169.304309][ T5945] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2169.316102][ T5945] usb 3-1: USB disconnect, device number 4 [ 2169.454635][ T5945] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2169.476308][ T5945] ftdi_sio 3-1:0.0: device disconnected [ 2169.646687][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2169.655830][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2170.005440][ T901] FAULT_INJECTION: forcing a failure. [ 2170.005440][ T901] name failslab, interval 1, probability 0, space 0, times 0 [ 2170.018368][ T901] CPU: 1 UID: 0 PID: 901 Comm: syz.4.7983 Tainted: G L syzkaller #0 PREEMPT(full) [ 2170.018400][ T901] Tainted: [L]=SOFTLOCKUP [ 2170.018406][ T901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2170.018416][ T901] Call Trace: [ 2170.018423][ T901] [ 2170.018430][ T901] dump_stack_lvl+0x189/0x250 [ 2170.018455][ T901] ? __pfx____ratelimit+0x10/0x10 [ 2170.018478][ T901] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2170.018497][ T901] ? __pfx__printk+0x10/0x10 [ 2170.018521][ T901] ? __lock_acquire+0x6b6/0x2cf0 [ 2170.018544][ T901] should_fail_ex+0x414/0x560 [ 2170.018570][ T901] should_failslab+0xa8/0x100 [ 2170.018591][ T901] kmem_cache_alloc_noprof+0x88/0x710 [ 2170.018614][ T901] ? __netlink_lookup+0xbd/0x8a0 [ 2170.018633][ T901] ? skb_clone+0x212/0x3a0 [ 2170.018661][ T901] skb_clone+0x212/0x3a0 [ 2170.018690][ T901] __netlink_deliver_tap+0x404/0x850 [ 2170.018726][ T901] ? netlink_deliver_tap+0x2e/0x1b0 [ 2170.018754][ T901] netlink_deliver_tap+0x19c/0x1b0 [ 2170.018778][ T901] netlink_unicast+0x7fa/0x9e0 [ 2170.018800][ T901] ? __pfx_netlink_unicast+0x10/0x10 [ 2170.018817][ T901] ? netlink_sendmsg+0x642/0xb30 [ 2170.018833][ T901] ? skb_put+0x11b/0x210 [ 2170.018850][ T901] netlink_sendmsg+0x805/0xb30 [ 2170.018874][ T901] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2170.018894][ T901] ? __import_iovec+0x5d4/0x7f0 [ 2170.018909][ T901] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2170.018928][ T901] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2170.018943][ T901] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2170.018961][ T901] __sock_sendmsg+0x21c/0x270 [ 2170.018984][ T901] ____sys_sendmsg+0x505/0x820 [ 2170.019004][ T901] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2170.019024][ T901] ? kstrtouint+0x6e/0xe0 [ 2170.019051][ T901] ___sys_sendmsg+0x21f/0x2a0 [ 2170.019068][ T901] ? __pfx____sys_sendmsg+0x10/0x10 [ 2170.019089][ T901] ? rcu_read_lock_any_held+0xb3/0x120 [ 2170.019129][ T901] ? __fget_files+0x2a/0x420 [ 2170.019149][ T901] ? __fget_files+0x3a0/0x420 [ 2170.019176][ T901] __sys_sendmsg+0x164/0x220 [ 2170.019194][ T901] ? __pfx___sys_sendmsg+0x10/0x10 [ 2170.019217][ T901] ? __pfx_ksys_write+0x10/0x10 [ 2170.019235][ T901] ? __do_fast_syscall_32+0xbe/0x570 [ 2170.019254][ T901] __do_fast_syscall_32+0x1f7/0x570 [ 2170.019269][ T901] ? rcu_is_watching+0x15/0xb0 [ 2170.019288][ T901] ? do_fast_syscall_32+0x34/0x80 [ 2170.019306][ T901] do_fast_syscall_32+0x34/0x80 [ 2170.019320][ T901] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2170.019340][ T901] RIP: 0023:0xf7fc2539 [ 2170.019354][ T901] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2170.019368][ T901] RSP: 002b:00000000f54b655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2170.019391][ T901] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000180 [ 2170.019402][ T901] RDX: 0000000000044000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2170.019412][ T901] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2170.019421][ T901] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2170.019431][ T901] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2170.019453][ T901] [ 2170.686455][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2170.695432][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2171.021017][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 2171.021128][ T30] audit: type=1326 audit(1765460833.815:9140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=927 comm="syz.1.7988" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47539 code=0x7ffc0000 [ 2171.112207][ T935] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2171.218265][ T935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2171.232636][ T935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2171.275785][ T30] audit: type=1326 audit(1765460833.815:9141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=927 comm="syz.1.7988" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47539 code=0x7ffc0000 [ 2171.394906][ T30] audit: type=1326 audit(1765460833.815:9142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=927 comm="syz.1.7988" exe="/root/syz-executor" sig=0 arch=40000003 syscall=255 compat=1 ip=0xf7f47539 code=0x7ffc0000 [ 2171.621565][ T30] audit: type=1326 audit(1765460833.815:9143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=927 comm="syz.1.7988" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47539 code=0x7ffc0000 [ 2171.665382][ T30] audit: type=1326 audit(1765460833.815:9144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=927 comm="syz.1.7988" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7f47539 code=0x7ffc0000 [ 2171.688427][ T30] audit: type=1326 audit(1765460833.815:9145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=927 comm="syz.1.7988" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f47539 code=0x7ffc0000 [ 2171.714983][ T30] audit: type=1326 audit(1765460833.815:9146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=927 comm="syz.1.7988" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f47539 code=0x7ffc0000 [ 2171.737673][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2171.748139][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2171.766767][ T30] audit: type=1326 audit(1765460833.815:9147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=927 comm="syz.1.7988" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47539 code=0x7ffc0000 [ 2171.768400][ T944] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7990'. [ 2171.928036][ T944] vlan2: entered promiscuous mode [ 2171.938383][ T944] gretap0: entered promiscuous mode [ 2171.980692][ T939] netlink: 'syz.1.7989': attribute type 10 has an invalid length. [ 2172.040061][ T939] team0: Port device netdevsim0 removed [ 2172.074091][ T939] batman_adv: batadv0: Adding interface: netdevsim0 [ 2172.114298][ T939] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2172.142233][ T939] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 2172.830455][ T956] FAULT_INJECTION: forcing a failure. [ 2172.830455][ T956] name failslab, interval 1, probability 0, space 0, times 0 [ 2172.854481][ T956] CPU: 1 UID: 0 PID: 956 Comm: syz.0.7994 Tainted: G L syzkaller #0 PREEMPT(full) [ 2172.854516][ T956] Tainted: [L]=SOFTLOCKUP [ 2172.854525][ T956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2172.854540][ T956] Call Trace: [ 2172.854549][ T956] [ 2172.854559][ T956] dump_stack_lvl+0x189/0x250 [ 2172.854595][ T956] ? __pfx____ratelimit+0x10/0x10 [ 2172.854627][ T956] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2172.854653][ T956] ? __pfx__printk+0x10/0x10 [ 2172.854689][ T956] ? __pfx___might_resched+0x10/0x10 [ 2172.854716][ T956] ? fs_reclaim_acquire+0x7d/0x100 [ 2172.854746][ T956] should_fail_ex+0x414/0x560 [ 2172.854790][ T956] should_failslab+0xa8/0x100 [ 2172.854818][ T956] __kmalloc_noprof+0xdf/0x800 [ 2172.854839][ T956] ? rcu_is_watching+0x15/0xb0 [ 2172.854865][ T956] ? security_sk_alloc+0x52/0x390 [ 2172.854901][ T956] security_sk_alloc+0x52/0x390 [ 2172.854931][ T956] sk_prot_alloc+0x101/0x220 [ 2172.854952][ T956] ? sk_alloc+0x27/0x390 [ 2172.854974][ T956] sk_alloc+0x3a/0x390 [ 2172.854999][ T956] __netlink_create+0x65/0x260 [ 2172.855023][ T956] ? __pfx_genl_release+0x10/0x10 [ 2172.855055][ T956] netlink_create+0x3ca/0x590 [ 2172.855082][ T956] ? __pfx_genl_unbind+0x10/0x10 [ 2172.855110][ T956] ? __pfx_genl_bind+0x10/0x10 [ 2172.855142][ T956] __sock_create+0x4b3/0x9d0 [ 2172.855182][ T956] __sys_socket+0xd7/0x1b0 [ 2172.855216][ T956] __ia32_compat_sys_socketcall+0x6df/0x9d0 [ 2172.855244][ T956] ? __fget_files+0x3a0/0x420 [ 2172.855276][ T956] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 2172.855305][ T956] ? fput+0xa0/0xd0 [ 2172.855334][ T956] ? ksys_write+0x22a/0x250 [ 2172.855355][ T956] ? exc_page_fault+0x82/0x100 [ 2172.855389][ T956] ? __pfx_ksys_write+0x10/0x10 [ 2172.855415][ T956] ? __do_fast_syscall_32+0xbe/0x570 [ 2172.855440][ T956] __do_fast_syscall_32+0x1f7/0x570 [ 2172.855462][ T956] ? rcu_is_watching+0x15/0xb0 [ 2172.855488][ T956] ? do_fast_syscall_32+0x34/0x80 [ 2172.855514][ T956] do_fast_syscall_32+0x34/0x80 [ 2172.855534][ T956] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2172.855561][ T956] RIP: 0023:0xf7f57539 [ 2172.855578][ T956] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2172.855597][ T956] RSP: 002b:00000000f54454f0 EFLAGS: 00000206 ORIG_RAX: 0000000000000066 [ 2172.855619][ T956] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000f5445500 [ 2172.855634][ T956] RDX: 00000000f73e6ff4 RSI: 0000000000000000 RDI: 00000000f73e6ff4 [ 2172.855648][ T956] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2172.855661][ T956] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2172.855674][ T956] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2172.855705][ T956] [ 2173.216037][T23756] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 2173.416042][T23756] usb 4-1: Using ep0 maxpacket: 32 [ 2173.423126][T23756] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2173.434418][T23756] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2173.444469][T23756] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2173.453857][T23756] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2173.466660][T23756] usb 4-1: config 0 descriptor?? [ 2173.475026][T23756] hub 4-1:0.0: USB hub found [ 2173.598657][T28843] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 2173.689683][T23756] hub 4-1:0.0: 1 port detected [ 2173.756548][T28843] usb 3-1: Using ep0 maxpacket: 8 [ 2173.765076][T28843] usb 3-1: config index 0 descriptor too short (expected 30482, got 18) [ 2173.775996][T28843] usb 3-1: config 0 has too many interfaces: 101, using maximum allowed: 32 [ 2173.806620][ C1] net_ratelimit: 3 callbacks suppressed [ 2173.806644][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2173.820753][T28843] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 101 [ 2173.821505][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2173.847701][T28843] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 5.00 [ 2173.877649][T28843] usb 3-1: New USB device strings: Mfr=253, Product=255, SerialNumber=0 [ 2173.913299][T28843] usb 3-1: Product: syz [ 2173.930220][T28843] usb 3-1: Manufacturer: syz [ 2173.951041][T28843] usb 3-1: config 0 descriptor?? [ 2173.980219][T28843] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 2173.998638][T28843] usb 3-1: Detected FT2232C/D [ 2174.056741][ T971] FAULT_INJECTION: forcing a failure. [ 2174.056741][ T971] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2174.073758][ T971] CPU: 1 UID: 0 PID: 971 Comm: syz.0.8000 Tainted: G L syzkaller #0 PREEMPT(full) [ 2174.073794][ T971] Tainted: [L]=SOFTLOCKUP [ 2174.073804][ T971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2174.073817][ T971] Call Trace: [ 2174.073826][ T971] [ 2174.073837][ T971] dump_stack_lvl+0x189/0x250 [ 2174.073876][ T971] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2174.073911][ T971] ? _printk+0xff/0x120 [ 2174.073947][ T971] should_fail_ex+0x414/0x560 [ 2174.073984][ T971] _copy_to_user+0x31/0xb0 [ 2174.074018][ T971] simple_read_from_buffer+0xe1/0x170 [ 2174.074051][ T971] proc_fail_nth_read+0x1b3/0x220 [ 2174.074078][ T971] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2174.074106][ T971] ? rw_verify_area+0x2a6/0x4d0 [ 2174.074128][ T971] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2174.074153][ T971] vfs_read+0x200/0xa30 [ 2174.074173][ T971] ? fdget_pos+0x247/0x320 [ 2174.074205][ T971] ? __pfx___mutex_lock+0x10/0x10 [ 2174.074227][ T971] ? __pfx_vfs_read+0x10/0x10 [ 2174.074250][ T971] ? __fget_files+0x2a/0x420 [ 2174.074284][ T971] ? __fget_files+0x3a0/0x420 [ 2174.074310][ T971] ? __fget_files+0x2a/0x420 [ 2174.074348][ T971] ksys_read+0x145/0x250 [ 2174.074368][ T971] ? exc_page_fault+0x82/0x100 [ 2174.074401][ T971] ? __pfx_ksys_read+0x10/0x10 [ 2174.074428][ T971] ? __do_fast_syscall_32+0xbe/0x570 [ 2174.074454][ T971] __do_fast_syscall_32+0x1f7/0x570 [ 2174.074477][ T971] ? rcu_is_watching+0x15/0xb0 [ 2174.074502][ T971] ? do_fast_syscall_32+0x34/0x80 [ 2174.074530][ T971] do_fast_syscall_32+0x34/0x80 [ 2174.074551][ T971] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2174.074579][ T971] RIP: 0023:0xf7f57539 [ 2174.074598][ T971] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2174.074619][ T971] RSP: 002b:00000000f5446590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 2174.074642][ T971] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5446620 [ 2174.074657][ T971] RDX: 000000000000000f RSI: 00000000f73e6ff4 RDI: 0000000000000000 [ 2174.074671][ T971] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 2174.074684][ T971] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2174.074698][ T971] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2174.074731][ T971] [ 2174.338165][T28843] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 2174.345420][T28843] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 2174.358683][T28843] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2174.387323][T28843] usb 3-1: USB disconnect, device number 5 [ 2174.397040][T28843] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2174.412330][T28843] ftdi_sio 3-1:0.0: device disconnected [ 2174.420292][ T976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2174.538065][ T979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2174.547931][ T979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2174.557177][ T976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2174.623284][ T983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2174.637562][T23756] hub 4-1:0.0: activate --> -90 [ 2174.710356][ T983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2174.846145][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2174.855284][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2175.297033][ T991] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2175.339550][T16639] usb 4-1: USB disconnect, device number 105 [ 2175.345746][T23756] usb 4-1-port1: cannot reset (err = -71) [ 2175.353698][T23756] usb 4-1-port1: attempt power cycle [ 2175.454634][ T994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2175.505713][ T994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2175.886542][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2175.896069][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2176.048106][ T650] Bluetooth: hci3: unexpected event for opcode 0x1004 [ 2176.348051][ T1000] VFS: Mount too revealing [ 2176.936112][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2176.944951][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2177.624278][ T1038] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2179.006440][ C1] net_ratelimit: 2 callbacks suppressed [ 2179.006465][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2179.020884][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2180.058339][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2180.067611][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2180.096398][ T30] audit: type=1326 audit(1765460842.885:9148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1076 comm="syz.2.8026" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704d539 code=0x0 [ 2180.157097][ T650] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 2180.171321][ T650] Bluetooth: hci3: Injecting HCI hardware error event [ 2180.181684][ T651] Bluetooth: hci3: hardware error 0x00 [ 2180.477906][ T1094] QAT: Device 64 not found [ 2180.482835][ T1094] QAT: Invalid ioctl -1072667448 [ 2180.530241][ T1097] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2180.745446][T16639] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 2180.926127][T16639] usb 4-1: Using ep0 maxpacket: 8 [ 2180.934996][T16639] usb 4-1: config 8 has an invalid interface number: 142 but max is 0 [ 2181.029698][T16639] usb 4-1: config 8 has no interface number 0 [ 2181.052730][T16639] usb 4-1: config 8 interface 142 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 2181.052765][T16639] usb 4-1: config 8 interface 142 altsetting 5 bulk endpoint 0x7 has invalid maxpacket 64 [ 2181.079193][T16639] usb 4-1: config 8 interface 142 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 2181.091639][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2181.101105][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2181.111190][T16639] usb 4-1: config 8 interface 142 altsetting 5 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 2181.125836][T16639] usb 4-1: config 8 interface 142 has no altsetting 0 [ 2181.136019][ T667] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 2181.137005][T16639] usb 4-1: language id specifier not provided by device, defaulting to English [ 2181.158689][T16639] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=31.8b [ 2181.173630][T16639] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2181.182744][T16639] usb 4-1: Manufacturer: ы [ 2181.189686][T16639] usb 4-1: SerialNumber: 몐꧶螒㖈쵀缼䆎즪狸 [ 2181.204370][ T1094] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2181.299294][ T667] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 2181.316475][ T667] usb 3-1: config 0 has no interface number 0 [ 2181.334253][ T667] usb 3-1: config 0 interface 50 altsetting 80 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 2181.372597][ T667] usb 3-1: config 0 interface 50 has no altsetting 0 [ 2181.447862][ T667] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 2181.465215][ T667] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2181.486396][ T1094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2181.506344][ T667] usb 3-1: Product: syz [ 2181.506772][ T1094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2181.510766][ T667] usb 3-1: Manufacturer: syz [ 2181.562450][ T667] usb 3-1: SerialNumber: syz [ 2181.588898][ T667] usb 3-1: config 0 descriptor?? [ 2181.590251][T16639] dm9601 4-1:8.142: probe with driver dm9601 failed with error -22 [ 2181.606134][T16639] sr9700 4-1:8.142: probe with driver sr9700 failed with error -22 [ 2181.659094][ T1112] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8037'. [ 2181.689214][T16639] usb 4-1: USB disconnect, device number 110 [ 2181.707720][ T1112] vlan4: entered promiscuous mode [ 2181.731625][ T1112] erspan0: entered promiscuous mode [ 2181.811724][ T667] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 2182.126653][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2182.136185][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2182.206311][ T651] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 2183.013146][ T1136] team0: left promiscuous mode [ 2183.024122][ T1136] team_slave_0: left promiscuous mode [ 2183.034756][ T1136] team_slave_1: left promiscuous mode [ 2183.041200][ T1136] team0: left allmulticast mode [ 2183.046331][ T1136] team_slave_0: left allmulticast mode [ 2183.060268][ T1136] team_slave_1: left allmulticast mode [ 2183.083096][ T1136] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2183.544765][ T1132] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2183.551589][ T1132] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2183.558339][ T1132] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2183.586223][ T1132] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2183.972523][ T667] gspca_stk1135: reg_w 0x352 err -71 [ 2183.980092][ T667] gspca_stk1135: serial bus timeout: status=0x00 [ 2183.995697][ T667] gspca_stk1135: Sensor write failed [ 2184.001847][ T5915] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 2184.017213][ T667] gspca_stk1135: serial bus timeout: status=0x00 [ 2184.034851][ T667] gspca_stk1135: Sensor write failed [ 2184.046182][ T667] gspca_stk1135: serial bus timeout: status=0x00 [ 2184.064332][ T667] gspca_stk1135: Sensor read failed [ 2184.074541][ T667] gspca_stk1135: serial bus timeout: status=0x00 [ 2184.092102][ T667] gspca_stk1135: Sensor read failed [ 2184.105869][ T667] gspca_stk1135: Detected sensor type unknown (0x0) [ 2184.116736][ T667] gspca_stk1135: serial bus timeout: status=0x00 [ 2184.140014][ T667] gspca_stk1135: Sensor read failed [ 2184.160556][ T667] gspca_stk1135: serial bus timeout: status=0x00 [ 2184.176477][ T5915] usb 4-1: Using ep0 maxpacket: 32 [ 2184.189079][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 2184.200399][ T667] gspca_stk1135: Sensor read failed [ 2184.206809][ C1] net_ratelimit: 2 callbacks suppressed [ 2184.206839][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2184.220750][ T667] gspca_stk1135: serial bus timeout: status=0x00 [ 2184.221671][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2184.256544][ T667] gspca_stk1135: Sensor write failed [ 2184.261980][ T667] gspca_stk1135: serial bus timeout: status=0x00 [ 2184.269059][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2184.305846][ T5915] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2184.317873][ T667] gspca_stk1135: Sensor write failed [ 2184.323288][ T667] stk1135 3-1:0.50: probe with driver stk1135 failed with error -71 [ 2184.446256][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2184.465872][ T667] usb 3-1: USB disconnect, device number 6 [ 2184.472140][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2184.579787][ T5915] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 2184.596600][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2184.615110][ T5915] usb 4-1: Product: syz [ 2184.635440][ T5915] usb 4-1: Manufacturer: syz [ 2184.649219][ T5915] usb 4-1: SerialNumber: syz [ 2184.801415][ T5915] usb 4-1: config 0 descriptor?? [ 2184.843171][ T1136] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2184.850939][ T31] INFO: task kworker/0:8:28768 blocked for more than 143 seconds. [ 2184.866691][ T31] Tainted: G L syzkaller #0 [ 2184.885982][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2184.914574][ T31] task:kworker/0:8 state:D stack:22520 pid:28768 tgid:28768 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 2184.928655][ T651] Bluetooth: hci0: command 0x0406 tx timeout [ 2184.938658][ T31] Workqueue: usb_hub_wq hub_event [ 2184.938815][ T5915] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input128 [ 2184.944114][ T31] Call Trace: [ 2184.961209][ T31] [ 2184.965478][ T31] __schedule+0x14bc/0x5000 [ 2184.973999][ T31] ? preempt_schedule+0xae/0xc0 [ 2184.982414][ T31] ? preempt_schedule+0xae/0xc0 [ 2184.988494][ T31] ? __pfx___schedule+0x10/0x10 [ 2184.993707][ T31] ? schedule+0x91/0x360 [ 2184.999097][ T31] schedule+0x165/0x360 [ 2185.003409][ T31] schedule_preempt_disabled+0x13/0x30 [ 2185.009678][ T31] __mutex_lock+0x7e6/0x1350 [ 2185.014421][ T31] ? __mutex_lock+0x5bb/0x1350 [ 2185.020243][ T31] ? hub_event+0x2182/0x4ef0 [ 2185.022610][ T5184] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2185.025288][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2185.042894][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2185.049573][ T31] hub_event+0x2182/0x4ef0 [ 2185.054477][ T31] ? __pfx_hub_event+0x10/0x10 [ 2185.069242][ T1154] loop2: detected capacity change from 0 to 7 [ 2185.077679][ T1154] Dev loop2: unable to read RDB block 7 [ 2185.105286][ T1154] loop2: unable to read partition table [ 2185.199618][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 2185.216266][ T1154] loop2: partition table beyond EOD, truncated [ 2185.216769][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2185.224527][ T1154] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 2185.228790][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 2185.246068][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2185.254997][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2185.268783][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 2185.274712][ T31] process_scheduled_works+0xad1/0x1770 [ 2185.314685][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 2185.364505][ T31] worker_thread+0x8a0/0xda0 [ 2185.385297][ T31] kthread+0x711/0x8a0 [ 2185.427946][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2185.443493][ T31] ? __pfx_kthread+0x10/0x10 [ 2185.484841][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2185.512236][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 2185.518114][ T31] ? __pfx_kthread+0x10/0x10 [ 2185.522829][ T31] ret_from_fork+0x599/0xb30 [ 2185.528217][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2185.533433][ T31] ? __switch_to_asm+0x39/0x70 [ 2185.539391][ T31] ? __switch_to_asm+0x33/0x70 [ 2185.544772][ T31] ? __pfx_kthread+0x10/0x10 [ 2185.551494][ T31] ret_from_fork_asm+0x1a/0x30 [ 2185.558266][ T31] [ 2185.561860][T25728] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2185.579796][ T31] [ 2185.579796][ T31] Showing all locks held in the system: [ 2185.588001][ T31] 2 locks held by ksoftirqd/0/15: [ 2185.593284][ T31] 1 lock held by khungtaskd/31: [ 2185.599203][ T31] #0: ffffffff8df419e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2185.610426][ T31] 1 lock held by acpid/5184: [ 2185.615466][ T31] #0: ffffffff8df47538 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 2185.630469][ T31] 2 locks held by getty/5591: [ 2185.635423][ T31] #0: ffff88814cbf30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2185.659279][T28518] Bluetooth: hci5: command 0x0406 tx timeout [ 2185.659312][ T650] Bluetooth: hci2: command 0x0406 tx timeout [ 2185.665539][ T651] Bluetooth: hci1: command 0x0c1a tx timeout [ 2185.677869][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 2185.688736][ T31] 5 locks held by kworker/0:6/12997: [ 2185.694159][ T31] #0: ffff88823be26148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 2185.706183][ T31] #1: ffffc9001cad7b80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 2185.719605][ T31] #2: ffff8881433c3198 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4ef0 [ 2185.729314][ T31] #3: ffff888143f10518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x215a/0x4ef0 [ 2185.740146][ T31] #4: ffff8881433e6368 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2182/0x4ef0 [ 2185.750330][ T31] 2 locks held by udevd/25728: [ 2185.756181][ T31] #0: ffff88807e3c8118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_open+0x2d4/0x5b0 [ 2185.765674][ T31] #1: ffff888080e9f2c0 (&dev->mutex#2){+.+.}-{4:4}, at: input_open_device+0x53/0x390 [ 2185.776745][ T31] 5 locks held by kworker/0:8/28768: [ 2185.782158][ T31] #0: ffff88823be26148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 2185.794083][ T31] #1: ffffc9000b81fb80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 2185.806341][ T31] #2: ffff888143f23198 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4ef0 [ 2185.816602][ T31] #3: ffff888143f26518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x215a/0x4ef0 [ 2185.827121][ T31] #4: ffff8881433e6368 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2182/0x4ef0 [ 2185.837342][ T31] 1 lock held by syz.3.8041/1127: [ 2185.842519][ T31] 1 lock held by syz.3.8041/1130: [ 2185.848045][ T31] #0: ffff8880b863a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 2185.858429][ T31] 2 locks held by dhcpcd/1156: [ 2185.863430][ T31] #0: ffff888078ad1348 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 2185.874048][ T31] #1: ffffffff8df47538 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 2185.885420][ T31] [ 2185.893788][ T5184] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2185.925872][ T31] ============================================= [ 2185.925872][ T31] [ 2185.947633][ T31] NMI backtrace for cpu 1 [ 2185.947658][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2185.947688][ T31] Tainted: [L]=SOFTLOCKUP [ 2185.947696][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2185.947709][ T31] Call Trace: [ 2185.947718][ T31] [ 2185.947729][ T31] dump_stack_lvl+0x189/0x250 [ 2185.947768][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2185.947796][ T31] ? __pfx__printk+0x10/0x10 [ 2185.947843][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 2185.947874][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2185.947905][ T31] ? __pfx__printk+0x10/0x10 [ 2185.947942][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2185.947981][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2185.948012][ T31] sys_info+0x135/0x170 [ 2185.948034][ T31] watchdog+0xf95/0xfe0 [ 2185.948072][ T31] ? watchdog+0x20a/0xfe0 [ 2185.948111][ T31] kthread+0x711/0x8a0 [ 2185.948146][ T31] ? __pfx_watchdog+0x10/0x10 [ 2185.948176][ T31] ? __pfx_kthread+0x10/0x10 [ 2185.948207][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2185.948237][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 2185.948269][ T31] ? __pfx_kthread+0x10/0x10 [ 2185.948300][ T31] ret_from_fork+0x599/0xb30 [ 2185.948324][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2185.948358][ T31] ? __switch_to_asm+0x39/0x70 [ 2185.948386][ T31] ? __switch_to_asm+0x33/0x70 [ 2185.948414][ T31] ? __pfx_kthread+0x10/0x10 [ 2185.948445][ T31] ret_from_fork_asm+0x1a/0x30 [ 2185.948500][ T31] [ 2185.948535][ T31] Sending NMI from CPU 1 to CPUs 0: [ 2186.105053][ C0] NMI backtrace for cpu 0 [ 2186.105075][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 2186.105099][ C0] Tainted: [L]=SOFTLOCKUP [ 2186.105107][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2186.105118][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 2186.105157][ C0] Code: 13 ee 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 50 0d 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 2186.105173][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 2186.105189][ C0] RAX: 776bce6f08450900 RBX: ffffffff81978eba RCX: 776bce6f08450900 [ 2186.105204][ C0] RDX: 0000000000000001 RSI: ffffffff8d78fe62 RDI: ffffffff8bc07960 [ 2186.105216][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b86336db R09: 1ffff110170c66db [ 2186.105230][ C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8f81f770 [ 2186.105244][ C0] R13: 1ffffffff1b92a68 R14: 0000000000000000 R15: 0000000000000000 [ 2186.105257][ C0] FS: 0000000000000000(0000) GS:ffff888125e3a000(0000) knlGS:0000000000000000 [ 2186.105272][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2186.105286][ C0] CR2: 00000000801b3018 CR3: 0000000052450000 CR4: 00000000003526f0 [ 2186.105304][ C0] Call Trace: [ 2186.105314][ C0] [ 2186.105322][ C0] default_idle+0x13/0x20 [ 2186.105341][ C0] default_idle_call+0x73/0xb0 [ 2186.105360][ C0] do_idle+0x1ea/0x520 [ 2186.105381][ C0] ? irqentry_exit+0x5ba/0x660 [ 2186.105411][ C0] ? __pfx_do_idle+0x10/0x10 [ 2186.105443][ C0] cpu_startup_entry+0x44/0x60 [ 2186.105464][ C0] rest_init+0x2de/0x300 [ 2186.105485][ C0] start_kernel+0x3a7/0x400 [ 2186.105507][ C0] x86_64_start_reservations+0x24/0x30 [ 2186.105534][ C0] x86_64_start_kernel+0x143/0x1c0 [ 2186.105563][ C0] common_startup_64+0x13e/0x147 [ 2186.105597][ C0] [ 2186.296620][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2186.305729][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2186.369723][ T5184] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2186.456487][ T5184] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 2186.488259][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 2186.495184][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2186.505904][ T31] Tainted: [L]=SOFTLOCKUP [ 2186.510261][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2186.520694][ T31] Call Trace: [ 2186.523983][ T31] [ 2186.526927][ T31] dump_stack_lvl+0x99/0x250 [ 2186.531548][ T31] ? __asan_memcpy+0x40/0x70 [ 2186.536850][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2186.542064][ T31] ? __pfx__printk+0x10/0x10 [ 2186.546693][ T31] vpanic+0x237/0x6d0 [ 2186.550709][ T31] ? __pfx_vpanic+0x10/0x10 [ 2186.555225][ T31] ? irqentry_exit+0x5dd/0x660 [ 2186.560010][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 2186.565250][ T31] panic+0xb9/0xc0 [ 2186.568985][ T31] ? __pfx_panic+0x10/0x10 [ 2186.573427][ T31] ? __pfx_panic+0x10/0x10 [ 2186.577853][ T31] watchdog+0xfdf/0xfe0 [ 2186.582025][ T31] ? watchdog+0x20a/0xfe0 [ 2186.586374][ T31] kthread+0x711/0x8a0 [ 2186.590472][ T31] ? __pfx_watchdog+0x10/0x10 [ 2186.595165][ T31] ? __pfx_kthread+0x10/0x10 [ 2186.599767][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2186.604977][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 2186.610187][ T31] ? __pfx_kthread+0x10/0x10 [ 2186.614790][ T31] ret_from_fork+0x599/0xb30 [ 2186.619438][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2186.624567][ T31] ? __switch_to_asm+0x39/0x70 [ 2186.629347][ T31] ? __switch_to_asm+0x33/0x70 [ 2186.634155][ T31] ? __pfx_kthread+0x10/0x10 [ 2186.638754][ T31] ret_from_fork_asm+0x1a/0x30 [ 2186.643541][ T31] [ 2186.646857][ T31] Kernel Offset: disabled [ 2186.651193][ T31] Rebooting in 86400 seconds..