last executing test programs: 1m22.819526748s ago: executing program 3 (id=907): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x9, 0x2) add_key$user(0x0, 0x0, &(0x7f0000000140)="00c2", 0x2, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r3, r3}, &(0x7f00000001c0)=""/166, 0xa6, &(0x7f0000000140)={&(0x7f0000000300)={'crc32c\x00'}, &(0x7f0000000080)='h', 0x1}) r4 = io_uring_setup(0x5ee3, &(0x7f00000001c0)={0x0, 0x694a, 0x2, 0x0, 0x150}) r5 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaee2, 0x10, 0xfffffffd, 0xbfdffffc, 0x0, r4}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x85c3}}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r8 = memfd_create(&(0x7f00000025c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1cs1F59\xcdR\xc1\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9b\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\xe7\xd6\xa3', 0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r8, 0x0) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000003c0)={&(0x7f0000000400)=""/46, 0x316000, 0x1800, 0xfffffffd, 0x2}, 0x1c) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000000)={0x1000, 0x3, {0xffffffffffffffff}, {0xee00}, 0x82, 0x8}) quotactl_fd$Q_GETQUOTA(r1, 0xffffffff80000700, r10, &(0x7f0000000300)) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="180000008000000002800000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r9, @ANYBLOB="2000000001000000010000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r5, @ANYBLOB="180000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1800000001000000010000", @ANYRES32=r5, @ANYRES32, @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32], 0xdc, 0x4}}, {{&(0x7f0000000800)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000880)="fe03d629ec306aa617d508d9808c6844f2eba771c9bf14240a3b131ed5727badebe152180a3ee296448140f5585e6f45b9b4f3b6c3ee4a736d005a6beddf4d", 0x3f}, {&(0x7f00000009c0)="c3a541c6647d2185a455259b42984456eddc8a4f0de6c886ccff10f4fc0cca76f1cca8ba7a6823c81871629e73", 0x2d}], 0x2, 0x0, 0x0, 0x20000040}}, {{&(0x7f0000000a40)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000ac0)="65430d2bce7b5760a0", 0x9}], 0x1}}], 0x3, 0x4004800) 1m20.126630699s ago: executing program 3 (id=914): bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x3ff, 0x204, 0x0, 0x64}, &(0x7f0000000080)=0x10) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x7d, 0x0, 0x4000, 0xb49, 0x2009, 0x8, 0x200, 0x3}, 0x0) r2 = fsopen(0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f00000010c0)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r4, &(0x7f0000000540)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000240)=""/17, 0x11, 0x2, 0x4, 0x9, 0x4, 0xc08}}, 0x120) read$FUSE(r4, &(0x7f0000006b40)={0x2020}, 0x2020) write$UHID_DESTROY(r4, &(0x7f0000000180), 0xfffffffffffffd46) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r2, 0x1, 0x0) fchdir(r5) r6 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r6, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000040)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x28800, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000040)={0xf, {"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", 0x1000}}, 0x1006) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) fcntl$lock(r0, 0x25, &(0x7f0000001080)={0x0, 0x3, 0x10, 0x9}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats}) 1m18.34222834s ago: executing program 3 (id=921): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x46, &(0x7f0000000040), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x22020400) sendmsg$inet(r1, &(0x7f0000002780)={0x0, 0x0, 0x0}, 0x40440c1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x20006, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}, 0x7f, 0x2, 0x0, 0x5, 0x392, 0x94}, 0x9c) shutdown(r4, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000380)={0x40000000, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x40, @local, 0x1}]}, &(0x7f0000000100)=0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, 0x0, &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b///\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4) syz_clone(0x20366080, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0) openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x82001, 0x0) 1m16.146118446s ago: executing program 3 (id=932): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x46, &(0x7f0000000040), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(r1, &(0x7f0000002780)={0x0, 0x0, 0x0}, 0x40440c1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$key(0xffffffffffffffff, &(0x7f0000000380)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="021800060c000000000000000000000005001700000000000a0000000000000000040000000000000000000000000000000000000000000005001a00ff000000000000000000000000000001fc02000000000000000000000000000029001010"], 0x60}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x40, @local, 0x1}]}, &(0x7f0000000100)=0xc) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b///\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, 0x0, 0x2c0c2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x800248a0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) socketpair$unix(0x1, 0x1, 0x0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, 0x0, 0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x3, 0x1, 0x8) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000001c0)='/dev/hidraw#\x00', &(0x7f0000000200)='\x00', 0x0) setitimer(0x2, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0xb4, 0x516f}, &(0x7f0000000180)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002640)=@ipv4_newrule={0x20, 0x20, 0x301, 0x70bd2c, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10}}, 0x1c}}, 0x8800) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 59.202265908s ago: executing program 32 (id=938): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, 0x0, 0x2c0c2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x800248a0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) socketpair$unix(0x1, 0x1, 0x0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, 0x0, 0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x3, 0x1, 0x8) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000001c0)='/dev/hidraw#\x00', &(0x7f0000000200)='\x00', 0x0) setitimer(0x2, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0xb4, 0x516f}, &(0x7f0000000180)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002640)=@ipv4_newrule={0x20, 0x20, 0x301, 0x70bd2c, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10}}, 0x1c}}, 0x8800) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 22.97069758s ago: executing program 1 (id=1129): bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x3ff, 0x204, 0x0, 0x64}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000001100)={0x0, 0x5}, &(0x7f0000001140)=0x8) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x7d, 0x0, 0x4000, 0xb49, 0x2009, 0x8, 0x200, 0x3}, 0x0) r2 = fsopen(0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f00000010c0)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r4, &(0x7f0000000540)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000240)=""/17, 0x11, 0x2, 0x4, 0x9, 0x4, 0xc08}}, 0x120) read$FUSE(r4, &(0x7f0000006b40)={0x2020}, 0x2020) write$UHID_DESTROY(r4, &(0x7f0000000180), 0xfffffffffffffd46) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r2, 0x1, 0x0) fchdir(r5) r6 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r6, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000040)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x28800, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000040)={0xf, {"686cad21e0fd02661b37090987f70e06d038e7ff7fc6e5539b0d650e8b089b3f360068090890e0878f0efcc5e7049b3b612c416b23240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07720936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b4a5f3090000000000000075271b060029d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f33491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146784078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34a1c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9b05000bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48ca2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a35595f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e205ef4a7c43b42aae501b20f7694a035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd6700800000082ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39dd2ea9762639ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359deea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e150600d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b2c2fc5d5f0da42c0456ec015f08e5247d33ae2d35623ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e938ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a893664ac70297dc8d62700000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x1000}}, 0x1006) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) fcntl$lock(r0, 0x25, &(0x7f0000001080)={0x0, 0x3, 0x10, 0x9}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats}) 21.431227098s ago: executing program 1 (id=1132): r0 = socket(0x840000000002, 0x3, 0x100) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000440)="676e0192d65a", 0x6}], 0x1) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000600)={0x0, 0x0, r3, r4, 0x3, 0x6, 0x7, 0x5b, {0xabac, 0x0, 0x2, 0x6, 0xffff, 0x8, 0x5, 0x8, 0xf, 0x4, 0x8000, 0x5, 0xfffffffc, 0x1, "3c07653f7bc421b2e2bd166b8459a3fcded06e494223aa5db3e5e050b399d71c"}}) sendmmsg$inet(r0, &(0x7f0000000000), 0x2, 0x8014) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') futimesat(r5, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003e80)=[{{&(0x7f0000000040)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/152, 0x98}, {&(0x7f0000000200)=""/155, 0x9b}], 0x2}, 0x40}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)=""/76, 0x4c}], 0x1, &(0x7f0000000440)=""/77, 0x4d}, 0x10001}, {{&(0x7f00000004c0)=@phonet, 0x80, &(0x7f0000000900)=[{&(0x7f0000000680)=""/220, 0xdc}, {&(0x7f0000000540)=""/150, 0x96}, {&(0x7f0000000780)=""/15, 0xf}, {&(0x7f00000007c0)=""/243, 0xf3}], 0x4, &(0x7f0000000940)=""/195, 0xc3}, 0x4}, {{&(0x7f0000000a40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000000ac0)=""/181, 0xb5}, {&(0x7f0000000b80)=""/97, 0x61}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/62, 0x3e}, {&(0x7f0000001c40)=""/194, 0xc2}, {0x0}], 0x6, &(0x7f0000001e80)=""/138, 0x8a}, 0xfffffff9}, {{&(0x7f0000001f40)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000002300)=[{&(0x7f0000001fc0)=""/252, 0xfc}, {&(0x7f00000020c0)=""/70, 0x46}, {&(0x7f0000002140)=""/91, 0x5b}, {&(0x7f0000002200)=""/5, 0x5}, {&(0x7f0000002240)=""/192, 0xc0}], 0x5, &(0x7f0000002340)=""/33, 0x21}, 0x2c86c212}, {{&(0x7f0000002380)=@hci, 0x80, &(0x7f00000036c0), 0x0, &(0x7f0000003700)=""/182, 0xb6}, 0x438}, {{&(0x7f00000037c0)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000003d40)=[{&(0x7f0000003840)=""/137, 0x89}, {&(0x7f0000003900)=""/224, 0xe0}, {&(0x7f0000003a00)=""/38, 0x26}, {&(0x7f0000003a40)=""/81, 0x51}, {&(0x7f0000003ac0)=""/255, 0xff}, {&(0x7f0000003bc0)=""/160, 0xa0}, {&(0x7f0000003c80)=""/141, 0x8d}], 0x7, &(0x7f0000003d80)=""/224, 0xe0}, 0x614c}], 0x7, 0x0, &(0x7f0000003f80)) mmap$dsp(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x2, 0x13, r5, 0x0) 20.496342294s ago: executing program 1 (id=1135): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r6, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYRES32, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2e11"]) read$FUSE(r4, &(0x7f00000050c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r4, &(0x7f0000007100)={0x78, 0x0, r7, {0xa0, 0x6, 0x0, {0x4, 0x0, 0x9, 0x8, 0x0, 0x23, 0xfffff92f, 0x0, 0x4, 0xc000, 0x3ff, 0xee00, 0x0, 0x7fffffff, 0x4}}}, 0x78) r8 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r8, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00222200000096231306e53f0b53743ff62a9000070d00be0083"], 0x0}, 0x0) 19.662329067s ago: executing program 0 (id=1138): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) (async) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$MAP_CREATE(0xc00000000000018, &(0x7f0000000380)=@base={0x1e, 0xffffffff, 0x4, 0xfffffc75, 0x0, 0xffffffffffffffff, 0x1e, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x11}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) openat$uinput(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) unshare(0x24020400) (async) unshare(0x24020400) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000280)={0x1f, 0x0, 0xffffffffffffffff}, &(0x7f0000000300)={0x0, 0x989680}, 0x0) (async) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000280)={0x1f, 0x0, 0xffffffffffffffff}, &(0x7f0000000300)={0x0, 0x989680}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0x401, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @IFLA_GRE_IKEY={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000000), &(0x7f0000000140)=r6}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="18080000007b000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r8, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x8000, 0x1000, 0x4, 0x6}}) socket$tipc(0x1e, 0x5, 0x0) (async) socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00') (async) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00') 19.440710741s ago: executing program 2 (id=1139): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8810) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) (fail_nth: 3) 19.239906479s ago: executing program 2 (id=1140): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x22020400) sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0}, 0x40440c1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$key(0xffffffffffffffff, &(0x7f0000000380)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="021800060c000000000000000000000005001700000000000a0000000000000000040000000000000000000000000000000000000000000005001a00ff000000000000000000000000000001fc02000000000000000000000000000029001010"], 0x60}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x40, @local, 0x1}]}, &(0x7f0000000100)=0xc) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b///\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x1c}}, 0x4000000) 19.03169122s ago: executing program 4 (id=1142): openat$vimc0(0xffffffffffffff9c, &(0x7f0000003d00), 0x2, 0x0) openat$btrfs_control(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) socket$kcm(0x10, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000300)="06", 0x1}], 0x1}}], 0x1, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES16=r1], 0x1000f) 18.223853462s ago: executing program 0 (id=1143): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000740)={@random="5bb65d3f2511", @remote, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0xb, 0x28, 0x65, 0x0, 0x3, 0x11, 0x0, @empty, @empty=0xe0000001, {[@generic={0x83, 0xffffffffffffffe3}]}}, {0x4, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x6, 0x100}}}}}}}, 0x0) 18.222098836s ago: executing program 4 (id=1144): r0 = socket(0x840000000002, 0x3, 0x100) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000440)="676e0192d65a", 0x6}], 0x1) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000600)={0x0, 0x0, r3, r4, 0x3, 0x6, 0x7, 0x5b, {0xabac, 0x0, 0x2, 0x6, 0xffff, 0x8, 0x5, 0x8, 0xf, 0x4, 0x8000, 0x5, 0xfffffffc, 0x1, "3c07653f7bc421b2e2bd166b8459a3fcded06e494223aa5db3e5e050b399d71c"}}) sendmmsg$inet(r0, &(0x7f0000000000), 0x2, 0x8014) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') futimesat(r5, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003e80)=[{{&(0x7f0000000040)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/152, 0x98}, {&(0x7f0000000200)=""/155, 0x9b}], 0x2}, 0x40}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)=""/76, 0x4c}], 0x1, &(0x7f0000000440)=""/77, 0x4d}, 0x10001}, {{&(0x7f00000004c0)=@phonet, 0x80, &(0x7f0000000900)=[{&(0x7f0000000680)=""/220, 0xdc}, {&(0x7f0000000540)=""/150, 0x96}, {&(0x7f0000000780)=""/15, 0xf}, {&(0x7f00000007c0)=""/243, 0xf3}], 0x4, &(0x7f0000000940)=""/195, 0xc3}, 0x4}, {{&(0x7f0000000a40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000000ac0)=""/181, 0xb5}, {&(0x7f0000000b80)=""/97, 0x61}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/62, 0x3e}, {&(0x7f0000001d40)=""/214, 0xd6}], 0x5, &(0x7f0000001e80)=""/138, 0x8a}, 0xfffffff9}, {{&(0x7f0000001f40)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000002300)=[{&(0x7f0000001fc0)=""/252, 0xfc}, {&(0x7f00000020c0)=""/70, 0x46}, {&(0x7f0000002140)=""/91, 0x5b}, {&(0x7f0000002200)=""/5, 0x5}, {&(0x7f0000002240)=""/192, 0xc0}], 0x5, &(0x7f0000002340)=""/33, 0x21}, 0x2c86c212}, {{&(0x7f0000002380)=@hci, 0x80, &(0x7f00000036c0), 0x0, &(0x7f0000003700)=""/182, 0xb6}, 0x438}, {{&(0x7f00000037c0)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000003d40)=[{&(0x7f0000003840)=""/137, 0x89}, {&(0x7f0000003900)=""/224, 0xe0}, {&(0x7f0000003a00)=""/38, 0x26}, {&(0x7f0000003a40)=""/81, 0x51}, {&(0x7f0000003ac0)=""/255, 0xff}, {&(0x7f0000003bc0)=""/160, 0xa0}, {&(0x7f0000003c80)=""/141, 0x8d}], 0x7, &(0x7f0000003d80)=""/224, 0xe0}, 0x614c}], 0x7, 0x0, &(0x7f0000003f80)) mmap$dsp(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x2, 0x13, r5, 0x0) 17.869613583s ago: executing program 2 (id=1145): syz_emit_ethernet(0x268, &(0x7f0000000b80)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev, @val={@val={0x88a8, 0x1, 0x1, 0x3}, {0x8100, 0x1, 0x0, 0x4}}, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x3, 0x252, 0x66, 0x0, 0x68, 0x2f, 0x0, @multicast2, @private=0xa010102}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0x5, 0xbead, 0x8001], "d946fdf44deaecc12dc10d6eb1b798fae1fe98b2f001e5eba5f0fe5b0b26ba2492eaccdb83b6ff6ffd5a221b2ee1a036adda926caf4fc1524e06634bb13a37ddbbd8f4807c5ebb3cc0536455300a2f7598e415ca5a51a8a2c6ef2a042ab34a21fb409fdf354372832251607fde7c30be83e165dbd36cecc3e40bdf32a45629be6053ac95a0f9580b377515442ae9d58635d992c5c46dbb5aeff944df0e9e4cdc053aa720d7242624"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x2, 0x0], "60f22388e1bf5cae3154c846cd17c1649a1533001dfe5191e285c5f4946fdd37cddf86850baa859369be127f49ce8da5a840c0ac622a9cd6f68afe7df21cfee52f5735bac18d55684828dfc24a12b447a228bca0855c7a0e80a20b701ef4f04509d2781abb1c4c24121bf3c5b407aafb4bc5c1fb398c74615202e5d7e8945b2e20c94e3a6d40018b5eb21ab9582d0fdc4161d6f11eb8c573adbb9e07fb4265cbfc7f"}, {0x8, 0x88be, 0x2, {{0xc, 0x1, 0x8, 0x1, 0x0, 0x3, 0x7, 0x2}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x1, {{0x3, 0x2, 0x6, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x2, {0x50, 0x8, 0x1, 0x8, 0x0, 0x0, 0x3, 0x0, 0x1}}}, {0x8, 0x6558, 0x4, "6cedabff35c65f37680c276b0623286d03a3e758bd72d69bd3bc2ae40932afc0bcfc28f50611c35537a9bb21e82eff2d53f252a7420359f947e8329c8df95d060e3b8b5502964795f8e03ce7472125a2998991a5cb27f6632f21b9dd0f078733163b5954067a53d7bbac055af3ff56215dc72d2204b32c26772b46b57f0593f456cce16b1bd828107b48abb043773526ca6337adc990ddfe10ebb5b08997e9bb3ca18168c10b"}}}}}}, 0x0) 17.85240249s ago: executing program 0 (id=1146): openat$vimc0(0xffffffffffffff9c, &(0x7f0000003d00), 0x2, 0x0) openat$btrfs_control(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)}}], 0x1, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES16=r1, @ANYRES16=r2], 0x1000f) 17.81034434s ago: executing program 2 (id=1147): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') lseek(r0, 0x1, 0x2) getdents(r0, 0x0, 0x48) 17.505550332s ago: executing program 2 (id=1148): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x46, &(0x7f0000000040), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x22020400) sendmsg$inet(r1, &(0x7f0000002780)={0x0, 0x0, 0x0}, 0x40440c1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x20006, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}, 0x7f, 0x2, 0x0, 0x5, 0x392, 0x94}, 0x9c) shutdown(r4, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000380)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="021800060c000000000000000000000005001700000000000a0000000000000000040000000000000000000000000000000000000000000005001a00ff00"/72], 0x60}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x40, @local, 0x1}]}, &(0x7f0000000100)=0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, 0x0, &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b///\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0x0}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000540)={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r1}) 17.304664665s ago: executing program 0 (id=1150): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0xe0, r2, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}, @NL80211_ATTR_FRAME={0xbf, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @broadcast, @initial, {0xf, 0x5}}, 0xffffffffffffffff, @default, 0x1000, @void, @void, @val={0x3, 0x1, 0x2c}, @void, @val={0x6, 0x2, 0x1ff}, @val={0x5, 0x3, {0x5, 0x97, 0x5}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @void, @void, @val={0x71, 0x7, {0x69, 0x0, 0x1, 0x0, 0x1, 0x7, 0x20}}, @val={0x76, 0x6, {0x3, 0x0, 0x2f, 0x6}}, [{0xdd, 0x3e, "3e115be9fc8530ca8c5bb257b3f95716bf75291a49c2eb939a96df180828988e87fc73ea49fc5cab256a312a269fa729a37808c9699b33810117da37c365"}, {0xdd, 0x35, "d43f7e14451f21a2ed68b07b41f445e9d2126a3b90b56ab03b71c487d5b60537ad8905905c1ea93995b86fbc5e58b190f756a5eab0"}]}}]}, 0xe0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 17.233252386s ago: executing program 4 (id=1151): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x1c}}, 0x4000000) 17.134207933s ago: executing program 0 (id=1152): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x29a, 0x0, 0x7fffffffffffffff}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0xe2f5b6da09b13d83, 0x4) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x210, r7, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x1e8, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x140, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x7, @private0, 0x157}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "105850071e2ab631bd00cf795354cb2c626d8b5be606d39cd0bd2ce6ebd06eb3"}, @WGPEER_A_ALLOWEDIPS={0xd4, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3b}}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x28}}, {0x5}}]}, {0x4}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0x7c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d454d5dd835fff58334762251fb458c0abd16089d30d58ca66a1769b8a83772c"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x9, @mcast2, 0x5d}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) syz_emit_ethernet(0x76, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fa0a6b", 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, [@fragment={0x2c}, @srh]}}}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r6) fsopen(&(0x7f0000000180)='efs\x00', 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x2, 0x6}}, 0x20) 16.981885659s ago: executing program 4 (id=1153): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000040), 0x10) sendmsg$netlink(r2, &(0x7f0000005d80)={&(0x7f0000000440)=@proc={0x10, 0x0, 0x25dfdbff, 0x80000}, 0xc, &(0x7f0000000200)=[{&(0x7f0000001380)=ANY=[], 0x38}], 0x1, 0x0, 0x0, 0x44011}, 0x4000000) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000b00)={0x20, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r1, &(0x7f0000000280)={0xc, &(0x7f0000000200)={0x40, 0x7, 0x12, {0x12, 0x37, "afa9a8af604bd3713fe6e17f89bcbb21"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1004}}}, &(0x7f00000003c0)={0x10, &(0x7f00000002c0)={0x0, 0xb, 0x38, "59b7c551487785d145fd3d72392614a26b469c7484f43b153c8d88d7ded103867e121fb120bbe088e9d37b8f5ccdaff9e7ed6a1025bd4fe2"}, &(0x7f0000002880)={0xa1, 0x1, 0x400, "53fc14096e82c63a3893141e7ee52a5db67e34a5f76948fab9f2e745edb1a65faf21f75db13c1cede23cc3bc893c53b99987760359cd2e06fd2e623e147589b653d97432733e24b3ffe5d079c6675ddc8dc331b5c26d8c6f531f0358f8f3b0456fd0057bfc026abf9cc126b618cdcba85a127d1782d3542f9b90d9a5551a72f5b040afc11113128ee3b551db0f421bd8bdea6c6ea2a7e56fc554c399552c9b47bf55e03bc077576c39d0694719034c89b6b5e9d0e5f2e1b8bc57f34aca5aac184952985110ffae0825dc746ae4b294174764d92334d00d0e5bce7ece57965968328beca3af9f37603e22171f92d419f13f3734e9187057612514b1cd20bdb4c2dae4a6881bd8f994ada4253a194111ed28e383529f474cdf6dea558cf32324fcf357b88dba31a51cbcf42462ddd435c4d54edfea0e4ef711fdf4bfd276e4c1eb2af8a81476b49b920c784c40b47a7d15e6b1c3a79a5b94aeb5aa77a2f8399b23917c803280a42a725a37bba3b7610bc7edbd1f9401a03b1c95ebd3f6e55aafbfcf5b75925b028fa66815d73901d109cd099afe63d0e66b6e7acb40ec653aee9c498eafa80c921a668c600b898cc68fb8cd93cedd29c86d83c07020f97f5acadf4e7f1556053420b328733bd84d1fd36f9fcb9c2c3921387bd53a22bd8aa40031552066cc2e23c326773052fac056a6a23cc41a4e75dc9d74b2db5733aee38542a0e8e0e4496343c9a10bf53057dc78d566c373eb01fa0c5afecd5f62809c70c0726c8ddd0964989557f3bc9b8931965d2207fa24d356a62911f80a60ef66ac1395d9d45dfd2e0017ccdd7da9a5f2731eb8d9f18f01e0c5c14f5b5bcf3d9480d011fbba312a6096cc41c9c8f588239751a2c621779cc99ee464417da9555ec0bae9e51bd0d01e8e1e5959a85c3239144946465ece608a098dd4cb54ecaf8a885ca77ecc72a1f5996a544a440654c2167c607a44711599026e8590b9037c3d0cfe89d20ecbe094870945e72738c74b0324f2cc97972a5a63bb43011891f2bf1583b04e8dae3f4cb01c3127163200a67cbd1bc28e09741493887b3bcaa7265c9e66f71d00dac5cd48d7451b227137fa6d3cf78ab9c5d62b1b00209456bf8b03f5c228ff1583eaaf0331367337431514b4b7254c8fc2ae1673f463d6c11332e399c8e80eaba9c40ab6e44b29179c350857eb4bcac2edce548f252b7dab9d6659b54e035f610d68fb747366749674104e81a9b3944e5a79764003b69756bc18ac1f8aa95b53dba941e65bd888a45a7d8a229608c8d02a1fc82f8b12182b1f40f3243e41ef5ad482fb1c1506210b09662c9f6f0d6a2566ce35a34e14cbed3d40efe6a8f8e0adc515400b5ca5413370648705f9bca967106c1bb11df519dd0d93770ad280675ff39ab900ccd11a3b1963fc8d1f1daeb15d94abba2ae771137b6cee42c6"}, &(0x7f0000000340)}) syz_usb_control_io$printer(r1, 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x541b, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1000, 0xfffffffffffffffd}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x13, &(0x7f0000000100)=0x1, 0x4) remap_file_pages(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x5000002, 0x9, 0x1000) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) socket$inet6_mptcp(0xa, 0x1, 0x106) 16.711126585s ago: executing program 1 (id=1154): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x22020400) sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0}, 0x40440c1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$key(0xffffffffffffffff, &(0x7f0000000380)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="021800060c000000000000000000000005001700000000000a0000000000000000040000000000000000000000000000000000000000000005001a00ff000000000000000000000000000001fc02000000000000000000000000000029001010"], 0x60}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x40, @local, 0x1}]}, &(0x7f0000000100)=0xc) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b///\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x210, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r4, 0x7}}, 0x48) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f00000005c0)={0x8, 0x120, 0xfa00, {0x0, {0x81, 0xb4ef, "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", 0x0, 0x5, 0x0, 0xab, 0xf6, 0x5, 0x6}, r4}}, 0x128) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) write$sequencer(r2, &(0x7f0000000040)=[@t={0x81, 0x3, 0x0, 0x9}], 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x12a, 0x3}}, 0xffffffffffffffd0) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000300)={0x14, 0x88, 0xfa00, {r5, 0x30, 0x0, @ib={0x1b, 0x8, 0x89, {"00000000000000000000000000000001"}, 0x1119dff, 0xffffffff7fffffff, 0xcd41}}}, 0x90) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r6, 0x30, 0x0, @ib={0x1b, 0x8, 0x889, {"00000000000000000000000000000001"}, 0x1119dff, 0xffffffff7fffffff, 0xcd41}}}, 0x90) r7 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f00000001c0), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000100)="d8", 0x1, r7) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000480)) request_key(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, 0x0, r7) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) 13.344099013s ago: executing program 4 (id=1158): openat$vimc0(0xffffffffffffff9c, &(0x7f0000003d00), 0x2, 0x0) openat$btrfs_control(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)}}], 0x1, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES16=r1, @ANYRES16=r2], 0x1000f) 2.094122996s ago: executing program 33 (id=1152): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x29a, 0x0, 0x7fffffffffffffff}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0xe2f5b6da09b13d83, 0x4) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x210, r7, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x1e8, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x140, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x7, @private0, 0x157}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "105850071e2ab631bd00cf795354cb2c626d8b5be606d39cd0bd2ce6ebd06eb3"}, @WGPEER_A_ALLOWEDIPS={0xd4, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3b}}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x28}}, {0x5}}]}, {0x4}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0x7c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d454d5dd835fff58334762251fb458c0abd16089d30d58ca66a1769b8a83772c"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x9, @mcast2, 0x5d}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) syz_emit_ethernet(0x76, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fa0a6b", 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, [@fragment={0x2c}, @srh]}}}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r6) fsopen(&(0x7f0000000180)='efs\x00', 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x2, 0x6}}, 0x20) 59.550342ms ago: executing program 34 (id=1157): r0 = socket$qrtr(0x2a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd26, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x210, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r4, 0x7}}, 0x48) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f00000005c0)={0x8, 0x120, 0xfa00, {0x0, {0x81, 0xb4ef, "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", 0x0, 0x5, 0x0, 0xab, 0xf6, 0x5, 0x6}, r4}}, 0x128) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) write$sequencer(r2, &(0x7f0000000040)=[@t={0x81, 0x3, 0x0, 0x9}], 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x12a, 0x3}}, 0xffffffffffffffd0) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000300)={0x14, 0x88, 0xfa00, {r5, 0x30, 0x0, @ib={0x1b, 0x8, 0x89, {"00000000000000000000000000000001"}, 0x1119dff, 0xffffffff7fffffff, 0xcd41}}}, 0x90) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r6, 0x30, 0x0, @ib={0x1b, 0x8, 0x889, {"00000000000000000000000000000001"}, 0x1119dff, 0xffffffff7fffffff, 0xcd41}}}, 0x90) r7 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f00000001c0), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000100)="d8", 0x1, r7) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000480)) request_key(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, 0x0, r7) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) 0s ago: executing program 35 (id=1155): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000002bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) r4 = socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000165b1b160002dbd7000ffdbdf250a000000", @ANYRES32=r4, @ANYBLOB="00005008140001"], 0x30}}, 0x64040040) kernel console output (not intermixed with test programs): wframe+0x84/0x8e [ 326.331840][ T9117] RIP: 0023:0xf70bd539 [ 326.331858][ T9117] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 326.331876][ T9117] RSP: 002b:00000000f54ad55c EFLAGS: 00000206 ORIG_RAX: 000000000000016a [ 326.331899][ T9117] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 326.331914][ T9117] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 326.331927][ T9117] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 326.331940][ T9117] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 326.331953][ T9117] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 326.331987][ T9117] [ 326.560144][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.627061][ T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 326.627891][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.748157][ T9120] netlink: 'syz.4.870': attribute type 12 has an invalid length. [ 326.781139][ T9] usb 3-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 326.791817][ T9] usb 3-1: config 5 has no interfaces? [ 326.797961][ T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 326.807697][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.025224][ T9111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.053905][ T9111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.089264][ T6303] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 327.113515][ T9133] vti0: entered promiscuous mode [ 327.118521][ T9133] vti0: entered allmulticast mode [ 327.259177][ T6303] usb 5-1: Using ep0 maxpacket: 32 [ 327.269888][ T9111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.283680][ T6303] usb 5-1: config 0 has an invalid interface number: 136 but max is 0 [ 327.292967][ T6303] usb 5-1: config 0 has no interface number 0 [ 327.299240][ T6303] usb 5-1: config 0 interface 136 altsetting 0 bulk endpoint 0xA has invalid maxpacket 32 [ 327.311203][ T9111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.325891][ T9137] blktrace: Concurrent blktraces are not allowed on nullb0 [ 327.338689][ T9] usb 3-1: string descriptor 0 read error: -71 [ 327.351145][ T9] usb 3-1: USB disconnect, device number 28 [ 327.362603][ T6303] usb 5-1: New USB device found, idVendor=10cf, idProduct=8063, bcdDevice=d1.d2 [ 327.387110][ T6303] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.404130][ T6303] usb 5-1: Product: syz [ 327.433665][ T6303] usb 5-1: Manufacturer: syz [ 327.449284][ T6303] usb 5-1: SerialNumber: syz [ 327.459792][ T6303] usb 5-1: config 0 descriptor?? [ 327.468326][ T9123] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 327.479284][ T5838] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 327.488622][ T6303] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 327.727096][ T5926] usb 5-1: USB disconnect, device number 29 [ 327.759399][ T5838] usb 1-1: Using ep0 maxpacket: 16 [ 327.789332][ T5838] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 327.797603][ T5838] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 327.807811][ T5838] usb 1-1: config 0 has no interface number 0 [ 327.830667][ T5838] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 327.846158][ T5838] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.857566][ T5838] usb 1-1: Product: syz [ 327.866943][ T5838] usb 1-1: Manufacturer: syz [ 327.873861][ T5838] usb 1-1: SerialNumber: syz [ 327.943134][ T5838] usb 1-1: config 0 descriptor?? [ 328.442564][ T9133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.473705][ T9133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.719391][ T10] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 329.445176][ T9154] net_ratelimit: 4 callbacks suppressed [ 329.445261][ T9154] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 329.477235][ T9154] netlink: 4 bytes leftover after parsing attributes in process `syz.4.881'. [ 329.528023][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.004167][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.024935][ T9160] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 330.031508][ T9160] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 330.120926][ T5926] usb 1-1: USB disconnect, device number 28 [ 330.409231][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.462891][ T9160] vhci_hcd vhci_hcd.0: Device attached [ 330.565784][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.588692][ T9165] netdevsim netdevsim1: Direct firmware load for nel/address_bits failed with error -2 [ 330.679844][ T9165] netdevsim netdevsim1: Falling back to sysfs fallback for: nel/address_bits [ 330.699217][ T5838] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 330.853278][ T9172] loop2: detected capacity change from 0 to 7 [ 330.865790][ T9172] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 330.901904][ T9172] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 330.924663][ T9172] Dev loop2: unable to read RDB block 7 [ 330.972893][ T9172] loop2: unable to read partition table [ 331.009498][ T9172] loop2: partition table beyond EOD, truncated [ 331.033607][ T9172] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 331.194012][ T10] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 331.299838][ T5957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.359740][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 331.366500][ T10] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.389296][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 331.398120][ T9185] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.407028][ T10] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 331.439214][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.454086][ T9188] blktrace: Concurrent blktraces are not allowed on nullb0 [ 331.502637][ T10] usb 3-1: config 0 descriptor?? [ 331.623773][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.964472][ T10] nzxt-smart2 0003:1E71:2009.0025: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 331.971524][ T5924] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 332.179288][ T5924] usb 4-1: Using ep0 maxpacket: 8 [ 332.229719][ T5924] usb 4-1: unable to get BOS descriptor or descriptor too short [ 332.266120][ T5924] usb 4-1: config 1 interface 0 altsetting 248 bulk endpoint 0x82 has invalid maxpacket 64 [ 332.312042][ T5924] usb 4-1: config 1 interface 0 altsetting 248 bulk endpoint 0x3 has invalid maxpacket 32 [ 332.351538][ T5924] usb 4-1: config 1 interface 0 has no altsetting 0 [ 332.434545][ T5924] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 332.449714][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.468476][ T5924] usb 4-1: Product: syz [ 332.477709][ T5924] usb 4-1: Manufacturer: syz [ 332.485919][ T5924] usb 4-1: SerialNumber: syz [ 332.582833][ T5926] usb 3-1: USB disconnect, device number 29 [ 332.601254][ T9194] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 332.608680][ T9194] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 332.680382][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.711269][ T6102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.837793][ T9161] vhci_hcd: connection reset by peer [ 332.845221][ T37] vhci_hcd vhci_hcd.1: stop threads [ 332.929162][ T37] vhci_hcd vhci_hcd.1: release socket [ 332.959288][ T37] vhci_hcd vhci_hcd.1: disconnect device [ 333.160073][ T30] audit: type=1326 audit(1765980716.252:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9198 comm="syz.4.893" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70bd558 code=0x7ffc0000 [ 333.279255][ T30] audit: type=1326 audit(1765980716.252:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9198 comm="syz.4.893" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70bd558 code=0x7ffc0000 [ 333.357750][ T30] audit: type=1326 audit(1765980716.252:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9198 comm="syz.4.893" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 333.469234][ T30] audit: type=1326 audit(1765980716.252:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9198 comm="syz.4.893" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70bd558 code=0x7ffc0000 [ 333.509311][ T5926] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 333.529272][ T30] audit: type=1326 audit(1765980716.252:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9198 comm="syz.4.893" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 333.661252][ T30] audit: type=1326 audit(1765980716.252:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9198 comm="syz.4.893" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70bd558 code=0x7ffc0000 [ 333.686443][ T5926] usb 3-1: Using ep0 maxpacket: 16 [ 333.731017][ T5926] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 333.759301][ T5926] usb 3-1: can't read configurations, error -61 [ 333.782464][ T30] audit: type=1326 audit(1765980716.252:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9198 comm="syz.4.893" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70bd558 code=0x7ffc0000 [ 333.847629][ T30] audit: type=1326 audit(1765980716.272:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9198 comm="syz.4.893" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70bd558 code=0x7ffc0000 [ 333.899272][ T5926] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 333.917154][ T30] audit: type=1326 audit(1765980716.272:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9198 comm="syz.4.893" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 333.963959][ T30] audit: type=1326 audit(1765980716.272:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9198 comm="syz.4.893" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 334.069381][ T5926] usb 3-1: Using ep0 maxpacket: 16 [ 334.087255][ T5926] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 334.127080][ T5926] usb 3-1: can't read configurations, error -61 [ 334.144661][ T5926] usb usb3-port1: attempt power cycle [ 334.559360][ T5926] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 334.603490][ T5926] usb 3-1: Using ep0 maxpacket: 16 [ 334.626353][ T5926] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 334.657126][ T5926] usb 3-1: can't read configurations, error -61 [ 334.769988][ T9217] syzkaller0: entered promiscuous mode [ 334.789878][ T9217] syzkaller0: entered allmulticast mode [ 334.816892][ T5926] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 334.886453][ T9200] loop6: detected capacity change from 0 to 7 [ 334.889711][ T6102] net_ratelimit: 2 callbacks suppressed [ 334.889750][ T6102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.930118][ T5926] usb 3-1: Using ep0 maxpacket: 16 [ 334.938585][ T5926] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 334.947351][ T5926] usb 3-1: can't read configurations, error -61 [ 334.954777][ T5926] usb usb3-port1: unable to enumerate USB device [ 335.014823][ T9200] loop6: [ 335.024066][ T9200] loop6: partition table partially beyond EOD, truncated [ 335.039873][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.786505][ T9232] pim6reg1: entered allmulticast mode [ 335.820691][ T5924] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 335.830079][ T5838] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 335.880332][ T5924] usb 4-1: USB disconnect, device number 27 [ 336.061433][ T6102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.189803][ T5926] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 336.325920][ T9244] blktrace: Concurrent blktraces are not allowed on nullb0 [ 336.509970][ T1307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.551317][ T5926] usb 1-1: config 0 has no interfaces? [ 336.556833][ T5926] usb 1-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 336.619463][ T5926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.649432][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.657663][ T5926] usb 1-1: config 0 descriptor?? [ 337.272873][ T6102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.284554][ T9225] usb usb1: usbfs: process 9225 (syz.0.899) did not claim interface 32 before use [ 337.333693][ T5838] usb 1-1: USB disconnect, device number 29 [ 337.681099][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.769804][ T5926] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 337.945132][ T6102] hid_parser_main: 8 callbacks suppressed [ 337.945154][ T6102] hid-generic 0002:0004:0009.0026: unknown main item tag 0x0 [ 337.959836][ T5926] usb 3-1: Using ep0 maxpacket: 32 [ 337.967904][ T5926] usb 3-1: config 1 has an invalid descriptor of length 117, skipping remainder of the config [ 338.033989][ T5926] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 338.048799][ T6102] hid-generic 0002:0004:0009.0026: unknown main item tag 0x0 [ 338.079583][ T6102] hid-generic 0002:0004:0009.0026: unknown main item tag 0x0 [ 338.087041][ T6102] hid-generic 0002:0004:0009.0026: unknown main item tag 0x0 [ 338.104029][ T5926] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 338.118302][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.142077][ T6102] hid-generic 0002:0004:0009.0026: unknown main item tag 0x0 [ 338.183647][ T5926] usb 3-1: Product: å¸ã¢¢ã£‚塺謗鼞╳秹Ťä´â‰‘ဤ込㮽痶鼮áƒì’«êžâ™˜îŸŽê„‚ﮩ䶴妶陛æ½ê¼«ï᧋⫗给魿能ï£ã‘“㴿甶⒳擆桇☉᜷ä´ï­ï³£ê¸–픃⠷࣊éªè´ªèŠç¿‘ [ 338.203779][ T6102] hid-generic 0002:0004:0009.0026: unknown main item tag 0x0 [ 338.218375][ T6102] hid-generic 0002:0004:0009.0026: unknown main item tag 0x0 [ 338.252276][ T6102] hid-generic 0002:0004:0009.0026: unknown main item tag 0x0 [ 338.260590][ T5926] usb 3-1: Manufacturer: è”޼ﵧ则ã¹è„ŒÛ–䲔ẽꚰᘄ乾郖ï䠨੃륰á¹ã¦‚郡铬屘ꮾ芨ë“頳갭䨲⎱庢ᦕ렙ﱎ抓⟾펉í…â¬ì½—è†åŒîƒ–艽ᆇ䊜Ⲅ宓梩ê¾ç½¾á¶°è«¡ç·ƒä´Ó“藍ꅹá¦è ±í‚¥ë†¥â¡•ï‡½ì—–蚒ʮ횆㧛⡌むﲣᖸሀ击ⱜ [ 338.328363][ T6303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.345880][ T6102] hid-generic 0002:0004:0009.0026: unknown main item tag 0x0 [ 338.363586][ T6102] hid-generic 0002:0004:0009.0026: unknown main item tag 0x0 [ 338.459231][ T5926] usb 3-1: SerialNumber: È [ 338.470840][ T6102] hid-generic 0002:0004:0009.0026: hidraw0: HID v0.04 Device [syz0] on syz0 [ 339.284985][ T9272] fido_id[9272]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 339.369265][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.679437][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.707249][ T5926] usb 3-1: USB disconnect, device number 34 [ 340.240607][ T1307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.311542][ T9286] loop2: detected capacity change from 0 to 7 [ 340.368532][ T9286] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 340.405645][ T6102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.419340][ T9286] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 340.429573][ T9286] Dev loop2: unable to read RDB block 7 [ 340.481309][ T9286] loop2: unable to read partition table [ 340.502021][ T9286] loop2: partition table beyond EOD, truncated [ 340.533911][ T9286] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 340.569626][ T9294] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 340.600447][ T9297] netlink: 'syz.1.915': attribute type 12 has an invalid length. [ 340.732710][ T10] hid-generic 0002:0004:0009.0027: hidraw0: HID v0.04 Device [syz0] on syz0 [ 341.125692][ T9301] fido_id[9301]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 341.169361][ T5926] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 341.292437][ T9307] blktrace: Concurrent blktraces are not allowed on nullb0 [ 341.612703][ T5926] usb 2-1: Using ep0 maxpacket: 32 [ 341.649422][ T6303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.659660][ T5926] usb 2-1: config 0 has an invalid interface number: 136 but max is 0 [ 341.683266][ T5926] usb 2-1: config 0 has no interface number 0 [ 341.700959][ T5926] usb 2-1: config 0 interface 136 altsetting 0 bulk endpoint 0xA has invalid maxpacket 32 [ 341.760706][ T5926] usb 2-1: New USB device found, idVendor=10cf, idProduct=8063, bcdDevice=d1.d2 [ 341.791764][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.819258][ T5926] usb 2-1: Product: syz [ 341.828374][ T5926] usb 2-1: Manufacturer: syz [ 341.843238][ T5926] usb 2-1: SerialNumber: syz [ 341.891826][ T5926] usb 2-1: config 0 descriptor?? [ 341.914344][ T9300] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 341.960199][ T5926] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 342.139184][ T5926] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 342.159899][ T5993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.199477][ T5838] usb 2-1: USB disconnect, device number 37 [ 342.321898][ T5926] usb 1-1: Using ep0 maxpacket: 16 [ 342.349770][ T5926] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 342.380507][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.388587][ T5926] usb 1-1: Product: syz [ 342.403268][ T5926] usb 1-1: Manufacturer: syz [ 342.413420][ T5926] usb 1-1: SerialNumber: syz [ 342.430700][ T9319] blktrace: Concurrent blktraces are not allowed on nullb0 [ 342.458155][ T5926] usb 1-1: config 0 descriptor?? [ 342.663413][ T9327] capability: warning: `syz.4.924' uses 32-bit capabilities (legacy support in use) [ 342.692653][ T5838] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 342.719447][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.727712][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.800669][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.849629][ T5838] usb 3-1: Using ep0 maxpacket: 16 [ 342.857355][ T5838] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 342.877521][ T5838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 342.923261][ T5926] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 342.962520][ T5926] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 342.988857][ T5926] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 343.002588][ T5838] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 343.007578][ T5926] usb 1-1: media controller created [ 343.048477][ T5838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.051355][ T9332] FAULT_INJECTION: forcing a failure. [ 343.051355][ T9332] name failslab, interval 1, probability 0, space 0, times 0 [ 343.057124][ T5838] usb 3-1: Product: syz [ 343.082148][ T5926] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 343.093976][ T9332] CPU: 1 UID: 0 PID: 9332 Comm: syz.1.926 Tainted: G L syzkaller #0 PREEMPT(full) [ 343.094011][ T9332] Tainted: [L]=SOFTLOCKUP [ 343.094017][ T9332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 343.094027][ T9332] Call Trace: [ 343.094033][ T9332] [ 343.094040][ T9332] dump_stack_lvl+0x189/0x250 [ 343.094063][ T9332] ? __pfx____ratelimit+0x10/0x10 [ 343.094087][ T9332] ? __pfx_dump_stack_lvl+0x10/0x10 [ 343.094104][ T9332] ? __pfx__printk+0x10/0x10 [ 343.094127][ T9332] ? __pfx___might_resched+0x10/0x10 [ 343.094144][ T9332] ? fs_reclaim_acquire+0x7d/0x100 [ 343.094164][ T9332] should_fail_ex+0x414/0x560 [ 343.094191][ T9332] should_failslab+0xa8/0x100 [ 343.094211][ T9332] kmem_cache_alloc_noprof+0x88/0x710 [ 343.094234][ T9332] ? vm_area_alloc+0x24/0x140 [ 343.094258][ T9332] vm_area_alloc+0x24/0x140 [ 343.094273][ T9332] mmap_region+0xdea/0x1d10 [ 343.094303][ T9332] ? __lock_acquire+0x6b6/0x2cf0 [ 343.094321][ T9332] ? __pfx_mmap_region+0x10/0x10 [ 343.094379][ T9332] ? __lock_acquire+0x6b6/0x2cf0 [ 343.094406][ T9332] ? __lock_acquire+0x6b6/0x2cf0 [ 343.094420][ T9332] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 343.094448][ T9332] ? bpf_lsm_mmap_addr+0x9/0x20 [ 343.094463][ T9332] ? security_mmap_addr+0x71/0x270 [ 343.094480][ T9332] ? shmem_mapping+0xd/0x50 [ 343.094496][ T9332] ? memfd_check_seals_mmap+0xc5/0x200 [ 343.094519][ T9332] do_mmap+0xc45/0x10d0 [ 343.094551][ T9332] ? __pfx_do_mmap+0x10/0x10 [ 343.094569][ T9332] ? down_write_killable+0x178/0x230 [ 343.094590][ T9332] ? __pfx_down_write_killable+0x10/0x10 [ 343.094607][ T9332] ? common_file_perm+0x1b5/0x220 [ 343.094631][ T9332] vm_mmap_pgoff+0x2a6/0x4d0 [ 343.094656][ T9332] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 343.094674][ T9332] ? __fget_files+0x2a/0x420 [ 343.094695][ T9332] ? __fget_files+0x2a/0x420 [ 343.094713][ T9332] ? __fget_files+0x2a/0x420 [ 343.094734][ T9332] ksys_mmap_pgoff+0x51f/0x760 [ 343.094761][ T9332] __do_fast_syscall_32+0x1f7/0x590 [ 343.094785][ T9332] ? rcu_is_watching+0x15/0xb0 [ 343.094802][ T9332] ? do_fast_syscall_32+0x34/0x80 [ 343.094823][ T9332] do_fast_syscall_32+0x34/0x80 [ 343.094839][ T9332] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 343.094858][ T9332] RIP: 0023:0xf7f02539 [ 343.094871][ T9332] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 343.094883][ T9332] RSP: 002b:00000000f53f655c EFLAGS: 00000206 ORIG_RAX: 00000000000000c0 [ 343.094899][ T9332] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000400000 [ 343.094909][ T9332] RDX: 0000000001000002 RSI: 0000000000011012 RDI: 0000000000000003 [ 343.094918][ T9332] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 343.094926][ T9332] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 343.094935][ T9332] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 343.094956][ T9332] [ 343.398433][ T5838] usb 3-1: Manufacturer: syz [ 343.403278][ T5838] usb 3-1: SerialNumber: syz [ 343.410990][ T5838] usb 3-1: config 0 descriptor?? [ 343.420675][ T5838] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 343.445570][ T9312] dtv5100: wlen = 0, aborting. [ 343.458029][ T5838] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 343.570050][ T9334] loop2: detected capacity change from 0 to 7 [ 343.624202][ T9334] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 343.634716][ T9334] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 343.641993][ T9334] Dev loop2: unable to read RDB block 7 [ 343.647759][ T9334] loop2: unable to read partition table [ 343.658759][ T9334] loop2: partition table beyond EOD, truncated [ 343.679489][ T9334] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 343.766803][ T6303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.818177][ T5926] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 343.838927][ T5926] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 343.977682][ T9336] PKCS8: Unsupported PKCS#8 version [ 344.046576][ T5838] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 344.059367][ T5838] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 344.113418][ T5926] usb 1-1: USB disconnect, device number 30 [ 344.183355][ T5926] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 344.452443][ T9355] blktrace: Concurrent blktraces are not allowed on nullb0 [ 344.685548][ T5838] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 344.925036][ T6102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.667752][ T9364] netlink: 'syz.0.935': attribute type 12 has an invalid length. [ 345.669520][ T9365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.695939][ T9365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.748011][ T5838] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 345.756991][ T5838] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 345.764489][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.774718][ T9364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.783245][ T9364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.791432][ T9364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.792612][ T5838] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 345.799619][ T9364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.832274][ T9364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.840475][ T9365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.883263][ T5838] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 345.890396][ T9365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.917012][ T5838] usb 3-1: USB disconnect, device number 35 [ 346.119170][ T796] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 346.269221][ T796] usb 1-1: Using ep0 maxpacket: 32 [ 346.286232][ T9380] random: crng reseeded on system resumption [ 346.344463][ T796] usb 1-1: config 0 has an invalid interface number: 136 but max is 0 [ 346.366398][ T796] usb 1-1: config 0 has no interface number 0 [ 346.385053][ T796] usb 1-1: config 0 interface 136 altsetting 0 bulk endpoint 0xA has invalid maxpacket 32 [ 346.421841][ T796] usb 1-1: New USB device found, idVendor=10cf, idProduct=8063, bcdDevice=d1.d2 [ 346.437333][ T796] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.526675][ T796] usb 1-1: Product: syz [ 346.532217][ T6303] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 346.539144][ T796] usb 1-1: Manufacturer: syz [ 346.548373][ T796] usb 1-1: SerialNumber: syz [ 346.598583][ T796] usb 1-1: config 0 descriptor?? [ 346.608520][ T9367] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 346.625199][ T796] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 346.669350][ T9384] blktrace: Concurrent blktraces are not allowed on nullb0 [ 346.819387][ T6102] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 347.111286][ T5838] usb 1-1: USB disconnect, device number 31 [ 347.119268][ T6303] usb 4-1: Using ep0 maxpacket: 8 [ 347.209259][ T6303] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 347.232857][ T6303] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 347.241948][ T6102] usb 2-1: device descriptor read/64, error -71 [ 347.262140][ T6303] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 347.288206][ T6303] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 347.325577][ T6303] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 347.335368][ T6303] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.432426][ T6303] hub 4-1:1.0: bad descriptor, ignoring hub [ 347.441835][ T6303] hub 4-1:1.0: probe with driver hub failed with error -5 [ 347.460148][ T6303] cdc_wdm 4-1:1.0: skipping garbage [ 347.466140][ T6303] cdc_wdm 4-1:1.0: skipping garbage [ 347.487312][ T6303] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 347.494534][ T6102] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 347.502595][ T6303] cdc_wdm 4-1:1.0: Unknown control protocol [ 347.641688][ T6102] usb 2-1: device descriptor read/64, error -71 [ 347.752069][ T6102] usb usb2-port1: attempt power cycle [ 348.221518][ T6102] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 348.298280][ T6102] usb 2-1: device descriptor read/8, error -71 [ 348.350729][ T9398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.940'. [ 348.426098][ T9396] ipip0: entered promiscuous mode [ 348.431607][ T9396] ipip0: entered allmulticast mode [ 348.539838][ T6102] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 348.582048][ T6102] usb 2-1: device descriptor read/8, error -71 [ 348.702042][ T6102] usb usb2-port1: unable to enumerate USB device [ 349.404299][ T9407] input: syz0 as /devices/virtual/input/input20 [ 349.845008][ T9414] blktrace: Concurrent blktraces are not allowed on nullb0 [ 351.253266][ T9445] blktrace: Concurrent blktraces are not allowed on nullb0 [ 351.364287][ T981] net_ratelimit: 1022 callbacks suppressed [ 351.364303][ T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.760662][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout [ 351.769342][ T5894] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 351.780128][ T5894] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 351.999375][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.405309][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.499235][ T10] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 352.758633][ T10] usb 2-1: config 0 has an invalid interface number: 122 but max is 0 [ 352.767425][ T10] usb 2-1: config 0 has no interface number 0 [ 352.779950][ T10] usb 2-1: config 0 interface 122 has no altsetting 0 [ 352.824198][ T10] usb 2-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 352.844505][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.869581][ T10] usb 2-1: Product: syz [ 352.873905][ T10] usb 2-1: Manufacturer: syz [ 352.878546][ T10] usb 2-1: SerialNumber: syz [ 352.879205][ T5924] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 352.911505][ T10] usb 2-1: config 0 descriptor?? [ 352.950066][ T24] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 353.040688][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.051673][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.091289][ T5924] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 353.126687][ T5924] usb 1-1: config 0 interface 0 has no altsetting 0 [ 353.146951][ T5924] usb 1-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 353.161730][ T24] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 353.197232][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.207698][ T24] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 353.231018][ T5924] usb 1-1: config 0 descriptor?? [ 353.236135][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 353.251753][ T9470] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 353.273816][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 353.309475][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 353.343859][ T24] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 353.372707][ T24] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 353.381115][ T24] usb 5-1: Product: syz [ 353.385358][ T24] usb 5-1: Manufacturer: syz [ 353.391825][ T10] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 353.456718][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.477654][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 353.483298][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 353.492090][ T24] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 353.508435][ T24] cdc_wdm 5-1:1.0: Unknown control protocol [ 353.569032][ T10] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 353.581606][ T10] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 353.613164][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 353.636220][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 353.654005][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 353.681408][ T5924] hid (null): invalid report_size 12391 [ 353.698645][ T10] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 353.708439][ T10] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 353.724921][ T10] usb 3-1: Product: syz [ 353.734449][ T10] usb 3-1: Manufacturer: syz [ 353.753471][ T5924] uclogic 0003:28BD:0078.0028: interface is invalid, ignoring [ 353.778944][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 353.799783][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 353.813475][ T10] cdc_wdm 3-1:1.0: cdc-wdm2: USB WDM device [ 353.825138][ T10] cdc_wdm 3-1:1.0: Unknown control protocol [ 353.840715][ T5839] Bluetooth: hci1: command 0x0c1a tx timeout [ 353.847115][ T5894] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 353.853625][ T5894] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 353.887815][ T5838] usb 1-1: USB disconnect, device number 32 [ 354.109855][ T5924] usb 5-1: USB disconnect, device number 30 [ 354.326073][ T24] usb 3-1: USB disconnect, device number 36 [ 354.487560][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.020849][ T24] hid_parser_main: 24 callbacks suppressed [ 355.020866][ T24] hid-generic 0002:0004:0009.0029: unknown main item tag 0x0 [ 355.043479][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.054044][ T24] hid-generic 0002:0004:0009.0029: unknown main item tag 0x0 [ 355.099230][ T795] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 355.123400][ T24] hid-generic 0002:0004:0009.0029: unknown main item tag 0x0 [ 355.212562][ T24] hid-generic 0002:0004:0009.0029: unknown main item tag 0x0 [ 355.225065][ T24] hid-generic 0002:0004:0009.0029: unknown main item tag 0x0 [ 355.234097][ T24] hid-generic 0002:0004:0009.0029: unknown main item tag 0x0 [ 355.264820][ T24] hid-generic 0002:0004:0009.0029: unknown main item tag 0x0 [ 355.272547][ T795] usb 1-1: Using ep0 maxpacket: 8 [ 355.367474][ T795] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 355.379223][ T795] usb 1-1: config 179 has no interface number 0 [ 355.401703][ T24] hid-generic 0002:0004:0009.0029: unknown main item tag 0x0 [ 355.405340][ T10] hid-generic 0002:0004:0009.002A: unknown main item tag 0x0 [ 355.409245][ T795] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 355.409279][ T795] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 355.409307][ T795] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 355.409334][ T795] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 355.409362][ T795] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 355.409408][ T795] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 355.409432][ T795] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.417355][ T24] hid-generic 0002:0004:0009.0029: unknown main item tag 0x0 [ 355.573953][ T9481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.626887][ T9508] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 355.656432][ T10] hid-generic 0002:0004:0009.002A: hidraw0: HID v0.04 Device [syz0] on syz0 [ 355.681747][ T24] hid-generic 0002:0004:0009.0029: hidraw1: HID v0.04 Device [syz0] on syz0 [ 355.720805][ T795] usb 2-1: USB disconnect, device number 42 [ 355.762363][ T795] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected. [ 355.919240][ T5839] Bluetooth: hci3: command 0x0c1a tx timeout [ 355.919296][ T5894] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 355.946697][ T24] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input21 [ 356.034176][ T5894] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 356.140818][ T9522] fido_id[9522]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 356.277705][ T9523] fido_id[9523]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 357.004164][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 357.012596][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 357.021942][ T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.045890][ T24] usb 1-1: USB disconnect, device number 33 [ 357.780090][ T9545] tipc: Enabled bearer , priority 0 [ 357.787521][ T9545] syzkaller0: entered promiscuous mode [ 357.794593][ T9545] syzkaller0: entered allmulticast mode [ 357.838056][ T9545] tipc: Resetting bearer [ 357.890299][ T9542] tipc: Resetting bearer [ 357.960204][ T9548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.968472][ T9548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.056073][ T9548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.065157][ T9548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.073480][ T9548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.082286][ T9548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.090891][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.107996][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.116217][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.167680][ T5894] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 358.168625][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout [ 358.175831][ T5894] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 358.186263][ T9542] tipc: Disabling bearer [ 358.317611][ T9546] netlink: 'syz.0.965': attribute type 12 has an invalid length. [ 358.439388][ T5924] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 358.465236][ T9552] tipc: Started in network mode [ 358.470739][ T9552] tipc: Node identity 56e0cc5903fa, cluster identity 4711 [ 358.514715][ T9552] tipc: Enabled bearer , priority 0 [ 358.573854][ T9555] syzkaller0: entered promiscuous mode [ 358.591252][ T9555] syzkaller0: entered allmulticast mode [ 358.649270][ T5924] usb 1-1: Using ep0 maxpacket: 32 [ 358.684877][ T5924] usb 1-1: config 0 has an invalid interface number: 136 but max is 0 [ 358.701326][ T9552] netlink: 304 bytes leftover after parsing attributes in process `syz.4.968'. [ 358.721617][ T5924] usb 1-1: config 0 has no interface number 0 [ 358.726188][ T9552] tipc: Resetting bearer [ 358.765608][ T5924] usb 1-1: config 0 interface 136 altsetting 0 bulk endpoint 0xA has invalid maxpacket 32 [ 358.806085][ T9551] tipc: Resetting bearer [ 358.820733][ T5924] usb 1-1: New USB device found, idVendor=10cf, idProduct=8063, bcdDevice=d1.d2 [ 358.852398][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.879143][ T5924] usb 1-1: Product: syz [ 358.883395][ T5924] usb 1-1: Manufacturer: syz [ 358.888033][ T5924] usb 1-1: SerialNumber: syz [ 358.898029][ T9551] tipc: Disabling bearer [ 358.928913][ T5924] usb 1-1: config 0 descriptor?? [ 358.948555][ T9550] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 358.989757][ T5924] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 359.082323][ T5923] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 359.208351][ T796] usb 1-1: USB disconnect, device number 34 [ 359.248221][ T5923] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 359.284791][ T5923] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 359.305167][ T5923] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 359.325053][ T5923] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 359.347172][ T5923] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 359.450369][ T5924] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 359.451489][ T5923] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 359.508950][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 359.522953][ T5923] usb 3-1: Product: syz [ 359.527191][ T5923] usb 3-1: Manufacturer: syz [ 359.820867][ T5923] cdc_wdm 3-1:1.0: skipping garbage [ 359.829703][ T5923] cdc_wdm 3-1:1.0: skipping garbage [ 359.883489][ T5923] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 359.893686][ T5923] cdc_wdm 3-1:1.0: Unknown control protocol [ 359.899329][ T5924] usb 2-1: Using ep0 maxpacket: 16 [ 359.971970][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 360.241058][ T5839] Bluetooth: hci4: command 0x0c1a tx timeout [ 360.243157][ T5894] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 360.262022][ T5894] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 360.313434][ T5924] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 360.349135][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.365920][ T5924] usb 2-1: Product: syz [ 360.376790][ T5924] usb 2-1: Manufacturer: syz [ 360.386932][ T5924] usb 2-1: SerialNumber: syz [ 360.439353][ T5924] usb 2-1: config 0 descriptor?? [ 360.473984][ T5924] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 360.494199][ T5924] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 360.539900][ T9587] netlink: 48 bytes leftover after parsing attributes in process `syz.4.974'. [ 360.590610][ T24] usb 3-1: USB disconnect, device number 37 [ 360.666913][ T795] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 360.863773][ T795] usb 1-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 360.876868][ T795] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.885507][ T981] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 360.899461][ T795] usb 1-1: config 0 descriptor?? [ 360.909819][ T795] pwc: Philips SPC 900NC USB webcam detected. [ 361.041500][ T981] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 361.051102][ T981] usb 5-1: config 1 has no interface number 0 [ 361.057329][ T981] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 361.071372][ T981] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 361.082672][ T981] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 361.092346][ T981] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 361.104335][ T5924] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 361.132941][ T981] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 172, setting to 64 [ 361.147723][ T981] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 361.157638][ T795] pwc: Failed to set LED on/off time (-71) [ 361.170080][ T981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.178816][ T795] pwc: send_video_command error -71 [ 361.203104][ T795] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 361.221224][ T795] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 361.238286][ T981] usb 5-1: Product: syz [ 361.253238][ T981] usb 5-1: Manufacturer: syz [ 361.257950][ T981] usb 5-1: SerialNumber: syz [ 361.272484][ T795] usb 1-1: USB disconnect, device number 35 [ 361.287840][ T9588] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 361.515655][ T9587] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 361.539428][ T9587] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 361.616752][ T5924] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 361.625656][ T5924] em28xx 2-1:0.0: board has no eeprom [ 361.761018][ T9587] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 361.792826][ T9604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.977'. [ 361.802312][ T9604] FAULT_INJECTION: forcing a failure. [ 361.802312][ T9604] name failslab, interval 1, probability 0, space 0, times 0 [ 361.815558][ T9604] CPU: 0 UID: 0 PID: 9604 Comm: syz.0.977 Tainted: G L syzkaller #0 PREEMPT(full) [ 361.815592][ T9604] Tainted: [L]=SOFTLOCKUP [ 361.815600][ T9604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 361.815613][ T9604] Call Trace: [ 361.815622][ T9604] [ 361.815631][ T9604] dump_stack_lvl+0x189/0x250 [ 361.815663][ T9604] ? __pfx____ratelimit+0x10/0x10 [ 361.815697][ T9604] ? __pfx_dump_stack_lvl+0x10/0x10 [ 361.815723][ T9604] ? __pfx__printk+0x10/0x10 [ 361.815760][ T9604] ? __pfx___might_resched+0x10/0x10 [ 361.815783][ T9604] ? fs_reclaim_acquire+0x7d/0x100 [ 361.815811][ T9604] should_fail_ex+0x414/0x560 [ 361.815850][ T9604] should_failslab+0xa8/0x100 [ 361.815878][ T9604] __kvmalloc_node_noprof+0x175/0x920 [ 361.815902][ T9604] ? alloc_netdev_mqs+0xc89/0x11b0 [ 361.815930][ T9604] ? alloc_netdev_mqs+0xbf8/0x11b0 [ 361.815966][ T9604] alloc_netdev_mqs+0xc89/0x11b0 [ 361.816004][ T9604] rtnl_create_link+0x31f/0xcf0 [ 361.816042][ T9604] rtnl_newlink_create+0x25c/0xb00 [ 361.816093][ T9604] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 361.816134][ T9604] ? __pfx___mutex_lock+0x10/0x10 [ 361.816178][ T9604] ? ns_capable+0x8a/0xf0 [ 361.816203][ T9604] rtnl_newlink+0x16e7/0x1c90 [ 361.816244][ T9604] ? __pfx_rtnl_newlink+0x10/0x10 [ 361.816273][ T9604] ? __do_fast_syscall_32+0x1f7/0x590 [ 361.816296][ T9604] ? do_fast_syscall_32+0x34/0x80 [ 361.816317][ T9604] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 361.816390][ T9604] ? kasan_quarantine_put+0xdd/0x220 [ 361.816411][ T9604] ? lockdep_hardirqs_on+0x98/0x140 [ 361.816440][ T9604] ? kmem_cache_free+0x197/0x620 [ 361.816461][ T9604] ? nlmon_xmit+0xb0/0x100 [ 361.816504][ T9604] ? __lock_acquire+0x6b6/0x2cf0 [ 361.816546][ T9604] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 361.816573][ T9604] ? __dev_queue_xmit+0x289/0x3140 [ 361.816608][ T9604] ? __dev_queue_xmit+0x289/0x3140 [ 361.816634][ T9604] ? __dev_queue_xmit+0x289/0x3140 [ 361.816693][ T9604] ? __pfx_rtnl_newlink+0x10/0x10 [ 361.816716][ T9604] rtnetlink_rcv_msg+0x7cf/0xb70 [ 361.816743][ T9604] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 361.816765][ T9604] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 361.816785][ T9604] ? ref_tracker_free+0x63a/0x7d0 [ 361.816807][ T9604] ? __asan_memcpy+0x40/0x70 [ 361.816826][ T9604] ? __pfx_ref_tracker_free+0x10/0x10 [ 361.816859][ T9604] netlink_rcv_skb+0x208/0x470 [ 361.816887][ T9604] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 361.816912][ T9604] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 361.816953][ T9604] ? netlink_deliver_tap+0x2e/0x1b0 [ 361.816989][ T9604] netlink_unicast+0x82f/0x9e0 [ 361.817023][ T9604] ? __pfx_netlink_unicast+0x10/0x10 [ 361.817049][ T9604] ? netlink_sendmsg+0x642/0xb30 [ 361.817073][ T9604] ? skb_put+0x11b/0x210 [ 361.817101][ T9604] netlink_sendmsg+0x805/0xb30 [ 361.817139][ T9604] ? __pfx_netlink_sendmsg+0x10/0x10 [ 361.817177][ T9604] ? __import_iovec+0x5d4/0x7f0 [ 361.817200][ T9604] ? aa_sock_msg_perm+0xf1/0x1b0 [ 361.817230][ T9604] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 361.817250][ T9604] ? __pfx_netlink_sendmsg+0x10/0x10 [ 361.817279][ T9604] __sock_sendmsg+0x21c/0x270 [ 361.817314][ T9604] ____sys_sendmsg+0x505/0x820 [ 361.817347][ T9604] ? __pfx_____sys_sendmsg+0x10/0x10 [ 361.817379][ T9604] ? kstrtouint+0x6e/0xe0 [ 361.817418][ T9604] ___sys_sendmsg+0x21f/0x2a0 [ 361.817446][ T9604] ? __pfx____sys_sendmsg+0x10/0x10 [ 361.817479][ T9604] ? rcu_read_lock_any_held+0xb3/0x120 [ 361.817537][ T9604] ? __fget_files+0x2a/0x420 [ 361.817563][ T9604] ? __fget_files+0x3a0/0x420 [ 361.817602][ T9604] __sys_sendmsg+0x164/0x220 [ 361.817630][ T9604] ? __pfx___sys_sendmsg+0x10/0x10 [ 361.817666][ T9604] ? __pfx_ksys_write+0x10/0x10 [ 361.817692][ T9604] ? __do_fast_syscall_32+0xbe/0x590 [ 361.817727][ T9604] __do_fast_syscall_32+0x1f7/0x590 [ 361.817752][ T9604] ? rcu_is_watching+0x15/0xb0 [ 361.817783][ T9604] ? do_fast_syscall_32+0x34/0x80 [ 361.817813][ T9604] do_fast_syscall_32+0x34/0x80 [ 361.817837][ T9604] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 361.817862][ T9604] RIP: 0023:0xf70fd539 [ 361.817880][ T9604] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 361.817899][ T9604] RSP: 002b:00000000f54ed55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 361.817922][ T9604] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 361.817937][ T9604] RDX: 0000000024008014 RSI: 0000000000000000 RDI: 0000000000000000 [ 361.817950][ T9604] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 361.817962][ T9604] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 361.817975][ T9604] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 361.818007][ T9604] [ 362.371333][ T5924] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 362.391721][ T5924] em28xx 2-1:0.0: dvb set to bulk mode. [ 362.399486][ T795] em28xx 2-1:0.0: Binding DVB extension [ 362.439444][ T24] net_ratelimit: 1023 callbacks suppressed [ 362.439464][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.454999][ T5924] usb 2-1: USB disconnect, device number 43 [ 362.496049][ T5924] em28xx 2-1:0.0: Disconnecting em28xx [ 362.558169][ T795] em28xx 2-1:0.0: Registering input extension [ 362.574828][ T5924] em28xx 2-1:0.0: Closing input extension [ 362.606520][ T5924] em28xx 2-1:0.0: Freeing device [ 362.899343][ T795] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 363.063313][ T795] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 363.084670][ T795] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.121068][ T795] usb 1-1: config 0 descriptor?? [ 363.281887][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.291563][ T796] IPVS: starting estimator thread 0... [ 363.398491][ T9621] IPVS: using max 28 ests per chain, 67200 per kthread [ 363.531709][ T9626] ipip0: entered promiscuous mode [ 363.536939][ T9626] ipip0: entered allmulticast mode [ 363.574165][ T9626] netlink: 12 bytes leftover after parsing attributes in process `syz.1.982'. [ 363.638198][ T795] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 363.646834][ T9607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.760610][ T981] cdc_ncm 5-1:1.1: bind() failure [ 363.797052][ T981] usb 5-1: USB disconnect, device number 31 [ 363.877263][ T30] kauditd_printk_skb: 406 callbacks suppressed [ 363.877277][ T30] audit: type=1326 audit(1765980746.962:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9609 comm="syz.0.988" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70fd539 code=0x0 [ 363.945057][ T9629] netlink: 'syz.4.983': attribute type 12 has an invalid length. [ 364.519221][ T9] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 364.698523][ T5972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.708146][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.751432][ T9481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.779201][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 364.786876][ T9] usb 5-1: config 0 has an invalid interface number: 136 but max is 0 [ 364.800499][ T9] usb 5-1: config 0 has no interface number 0 [ 364.812816][ T9] usb 5-1: config 0 interface 136 altsetting 0 bulk endpoint 0xA has invalid maxpacket 32 [ 364.863099][ T9] usb 5-1: New USB device found, idVendor=10cf, idProduct=8063, bcdDevice=d1.d2 [ 364.881251][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.899196][ T9] usb 5-1: Product: syz [ 364.913869][ T9] usb 5-1: Manufacturer: syz [ 364.918531][ T9] usb 5-1: SerialNumber: syz [ 364.950480][ T9] usb 5-1: config 0 descriptor?? [ 364.968275][ T9631] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 364.990688][ T9] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 365.204395][ T9] usb 5-1: USB disconnect, device number 32 [ 365.631938][ T9] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 365.766053][ T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.791660][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 365.820493][ T9] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 365.841702][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 365.854010][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 365.865271][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 365.888913][ T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 365.994028][ T9646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.987'. [ 366.077764][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 366.089185][ T9] usb 2-1: Product: syz [ 366.286940][ T795] usb 1-1: USB disconnect, device number 36 [ 366.321927][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.330887][ T9] usb 2-1: Manufacturer: syz [ 366.365635][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 366.376821][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 366.390162][ T9] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 366.401513][ T9] cdc_wdm 2-1:1.0: Unknown control protocol [ 366.616215][ T9654] netlink: 96 bytes leftover after parsing attributes in process `syz.0.990'. [ 367.049425][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.070907][ T37] raw-gadget.1 gadget.3: failed to queue suspend event [ 367.159410][ T9657] raw-gadget.1 gadget.3: failed to queue resume event [ 367.184916][ T37] raw-gadget.1 gadget.3: failed to queue suspend event [ 367.186592][ T24] usb 2-1: USB disconnect, device number 44 [ 368.081094][ T9481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.396755][ T796] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 368.607779][ T9667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.993'. [ 368.651903][ T796] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 368.669395][ T796] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 368.694579][ T796] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 368.705445][ T796] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 368.736985][ T796] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 368.766848][ T796] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 368.776458][ T796] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 368.788920][ T796] usb 2-1: Product: syz [ 368.793535][ T796] usb 2-1: Manufacturer: syz [ 368.827213][ T796] cdc_wdm 2-1:1.0: skipping garbage [ 368.836194][ T796] cdc_wdm 2-1:1.0: skipping garbage [ 368.844170][ T796] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 368.858167][ T796] cdc_wdm 2-1:1.0: Unknown control protocol [ 369.072046][ T9663] raw-gadget.1 gadget.3: failed to queue resume event [ 369.111887][ T13] raw-gadget.1 gadget.3: failed to queue suspend event [ 369.129208][ T9481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.301188][ T796] usb 2-1: USB disconnect, device number 45 [ 369.320470][ T9678] netlink: 'syz.2.997': attribute type 12 has an invalid length. [ 369.370877][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.649458][ T981] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 369.799390][ T981] usb 3-1: Using ep0 maxpacket: 32 [ 369.813753][ T981] usb 3-1: config 0 has an invalid interface number: 136 but max is 0 [ 369.822754][ T981] usb 3-1: config 0 has no interface number 0 [ 369.830305][ T981] usb 3-1: config 0 interface 136 altsetting 0 bulk endpoint 0xA has invalid maxpacket 32 [ 369.853510][ T981] usb 3-1: New USB device found, idVendor=10cf, idProduct=8063, bcdDevice=d1.d2 [ 369.868635][ T981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.877532][ T981] usb 3-1: Product: syz [ 369.882950][ T981] usb 3-1: Manufacturer: syz [ 369.887712][ T981] usb 3-1: SerialNumber: syz [ 369.897526][ T981] usb 3-1: config 0 descriptor?? [ 369.904114][ T9679] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 369.939009][ T981] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 370.158953][ T981] usb 3-1: USB disconnect, device number 38 [ 370.178353][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.239236][ T796] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 370.299272][ T24] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 370.322705][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.331391][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.425037][ T796] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 370.441456][ T796] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 370.461694][ T796] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 370.462376][ T24] usb 2-1: config 0 has an invalid interface number: 122 but max is 0 [ 370.479164][ T796] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.485786][ T24] usb 2-1: config 0 has no interface number 0 [ 370.499436][ T24] usb 2-1: config 0 interface 122 has no altsetting 0 [ 370.507081][ T9690] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 370.536513][ T796] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 370.537936][ T24] usb 2-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 370.557283][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.567589][ T24] usb 2-1: Product: syz [ 370.573640][ T24] usb 2-1: Manufacturer: syz [ 370.579989][ T24] usb 2-1: SerialNumber: syz [ 370.685629][ T24] usb 2-1: config 0 descriptor?? [ 370.965755][ T9690] input: syz0 as /devices/virtual/input/input23 [ 371.052002][ T30] audit: type=1326 audit(1765980754.132:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9701 comm="syz.4.1006" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 371.196662][ T796] usb 1-1: USB disconnect, device number 37 [ 371.248629][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.259198][ T30] audit: type=1326 audit(1765980754.132:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9701 comm="syz.4.1006" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 371.397764][ T30] audit: type=1326 audit(1765980754.132:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9701 comm="syz.4.1006" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 371.559395][ T30] audit: type=1326 audit(1765980754.132:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9701 comm="syz.4.1006" exe="/root/syz-executor" sig=0 arch=40000003 syscall=100 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 371.596003][ T30] audit: type=1326 audit(1765980754.132:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9701 comm="syz.4.1006" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 371.704838][ T30] audit: type=1326 audit(1765980754.132:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9701 comm="syz.4.1006" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 371.785784][ T30] audit: type=1326 audit(1765980754.132:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9701 comm="syz.4.1006" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 371.847068][ T30] audit: type=1326 audit(1765980754.132:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9701 comm="syz.4.1006" exe="/root/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 372.258923][ T9726] netlink: 'syz.2.1013': attribute type 4 has an invalid length. [ 372.329157][ T796] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 372.337501][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.399414][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.512947][ T796] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 372.525057][ T796] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 372.546586][ T796] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 372.558434][ T796] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 372.572110][ T796] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 372.595261][ T796] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 372.605533][ T796] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 372.614473][ T796] usb 1-1: Product: syz [ 372.620090][ T796] usb 1-1: Manufacturer: syz [ 372.642758][ T796] cdc_wdm 1-1:1.0: skipping garbage [ 372.652237][ T796] cdc_wdm 1-1:1.0: skipping garbage [ 372.662750][ T796] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 372.669556][ T796] cdc_wdm 1-1:1.0: Unknown control protocol [ 372.931802][ T9724] raw-gadget.1 gadget.3: failed to queue resume event [ 372.940180][ T9734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.952719][ T9734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.971414][ T13] raw-gadget.1 gadget.3: failed to queue suspend event [ 373.112697][ T9724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.125696][ T795] usb 1-1: USB disconnect, device number 38 [ 373.189382][ T796] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 373.319296][ T796] usb 3-1: device descriptor read/64, error -71 [ 373.359959][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.522108][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.559377][ T796] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 373.689331][ T796] usb 3-1: device descriptor read/64, error -71 [ 373.809930][ T796] usb usb3-port1: attempt power cycle [ 373.863068][ T795] usb 2-1: USB disconnect, device number 46 [ 373.870323][ T795] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected. [ 374.168089][ T796] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 374.210138][ T796] usb 3-1: device descriptor read/8, error -71 [ 374.220188][ T9753] program syz.1.1021 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 374.399557][ T9481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.569740][ T796] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 375.143430][ T796] usb 3-1: device descriptor read/8, error -71 [ 375.260682][ T796] usb usb3-port1: unable to enumerate USB device [ 375.454948][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.569669][ T9767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.641232][ T9770] FAULT_INJECTION: forcing a failure. [ 375.641232][ T9770] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 375.723884][ T9770] CPU: 0 UID: 0 PID: 9770 Comm: syz.0.1025 Tainted: G L syzkaller #0 PREEMPT(full) [ 375.723920][ T9770] Tainted: [L]=SOFTLOCKUP [ 375.723928][ T9770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 375.723945][ T9770] Call Trace: [ 375.723954][ T9770] [ 375.723962][ T9770] dump_stack_lvl+0x189/0x250 [ 375.724006][ T9770] ? __pfx____ratelimit+0x10/0x10 [ 375.724047][ T9770] ? __pfx_dump_stack_lvl+0x10/0x10 [ 375.724078][ T9770] ? __pfx__printk+0x10/0x10 [ 375.724108][ T9770] ? __might_fault+0xb0/0x130 [ 375.724152][ T9770] should_fail_ex+0x414/0x560 [ 375.724190][ T9770] _copy_from_iter+0x1cd/0x1630 [ 375.724213][ T9770] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 375.724247][ T9770] ? policy_nodemask+0x27c/0x720 [ 375.724271][ T9770] ? __pfx__copy_from_iter+0x10/0x10 [ 375.724298][ T9770] ? set_page_refcounted+0xa0/0x1e0 [ 375.724322][ T9770] ? page_copy_sane+0x4e/0x280 [ 375.724345][ T9770] copy_page_from_iter+0xdd/0x170 [ 375.724372][ T9770] tun_get_user+0x1d40/0x3dc0 [ 375.724403][ T9770] ? tun_get_user+0x6fc/0x3dc0 [ 375.724442][ T9770] ? aa_file_perm+0x44c/0x1530 [ 375.724471][ T9770] ? __pfx_tun_get_user+0x10/0x10 [ 375.724498][ T9770] ? __lock_acquire+0x6b6/0x2cf0 [ 375.724523][ T9770] ? kstrtoull+0x12f/0x1d0 [ 375.724564][ T9770] ? ref_tracker_alloc+0x318/0x460 [ 375.724587][ T9770] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 375.724614][ T9770] ? tun_get+0x1c/0x2f0 [ 375.724644][ T9770] ? tun_get+0x1c/0x2f0 [ 375.724668][ T9770] ? tun_get+0x1c/0x2f0 [ 375.724698][ T9770] tun_chr_write_iter+0x113/0x200 [ 375.724726][ T9770] vfs_write+0x5c9/0xb30 [ 375.724751][ T9770] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 375.724777][ T9770] ? __pfx_vfs_write+0x10/0x10 [ 375.724809][ T9770] ? __fget_files+0x2a/0x420 [ 375.724851][ T9770] ksys_write+0x145/0x250 [ 375.724871][ T9770] ? exc_page_fault+0x82/0x100 [ 375.724899][ T9770] ? __pfx_ksys_write+0x10/0x10 [ 375.724923][ T9770] ? __do_fast_syscall_32+0xbe/0x590 [ 375.724949][ T9770] __do_fast_syscall_32+0x1f7/0x590 [ 375.724979][ T9770] ? rcu_is_watching+0x15/0xb0 [ 375.725002][ T9770] ? do_fast_syscall_32+0x34/0x80 [ 375.725029][ T9770] do_fast_syscall_32+0x34/0x80 [ 375.725053][ T9770] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 375.725085][ T9770] RIP: 0023:0xf70fd539 [ 375.725103][ T9770] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 375.725122][ T9770] RSP: 002b:00000000f54cc520 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 375.725144][ T9770] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000100 [ 375.725159][ T9770] RDX: 0000000000000042 RSI: 00000000f7496ff4 RDI: 0000000000000000 [ 375.725172][ T9770] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 375.725184][ T9770] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 375.725197][ T9770] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 375.725229][ T9770] [ 376.138486][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.149123][ T5993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.161898][ T5924] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 376.344416][ T5924] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 376.356411][ T5924] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 376.441544][ T5924] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 376.494383][ T5924] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 376.509360][ T9481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.559337][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.565653][ T5924] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 376.707677][ T5924] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 376.725779][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 376.753576][ T5924] usb 5-1: Product: syz [ 376.767741][ T5924] usb 5-1: Manufacturer: syz [ 376.821595][ T5924] cdc_wdm 5-1:1.0: skipping garbage [ 376.854316][ T5924] cdc_wdm 5-1:1.0: skipping garbage [ 376.873566][ T5924] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 376.898872][ T5924] cdc_wdm 5-1:1.0: Unknown control protocol [ 377.114179][ T9772] raw-gadget.1 gadget.3: failed to queue resume event [ 377.254520][ T36] raw-gadget.1 gadget.3: failed to queue suspend event [ 377.309204][ T5923] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 377.343630][ T9481] usb 5-1: USB disconnect, device number 33 [ 377.459290][ T5923] usb 3-1: Using ep0 maxpacket: 8 [ 377.466988][ T5923] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 377.480422][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.514236][ T5923] pvrusb2: Hardware description: Terratec Grabster AV400 [ 377.525929][ T5923] pvrusb2: ********** [ 377.530884][ T5923] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 377.544345][ T5923] pvrusb2: Important functionality might not be entirely working. [ 377.555869][ T5923] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 377.569280][ T5923] pvrusb2: ********** [ 377.725777][ T2346] pvrusb2: Invalid write control endpoint [ 377.925896][ T2346] pvrusb2: Invalid write control endpoint [ 377.953109][ T2346] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 377.979772][ T2346] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 377.999526][ T2346] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 378.024727][ T2346] pvrusb2: Device being rendered inoperable [ 378.046095][ T9781] pvrusb2: Attempted to execute control transfer when device not ok [ 378.115377][ T2346] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 378.124311][ T2346] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 378.134736][ T9481] usb 3-1: USB disconnect, device number 43 [ 378.240493][ T2346] pvrusb2: Attached sub-driver cx25840 [ 378.255118][ T2346] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 378.269609][ T2346] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 378.560033][ T795] net_ratelimit: 4 callbacks suppressed [ 378.560050][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.654063][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.661044][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.445709][ T9809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1035'. [ 379.608006][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.639555][ T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.732980][ T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.189300][ T981] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 381.341671][ T981] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 381.356625][ T981] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 381.366105][ T9823] syzkaller0: entered promiscuous mode [ 381.376218][ T981] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 381.380759][ T9823] syzkaller0: entered allmulticast mode [ 381.395172][ T981] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 381.406887][ T981] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 381.421915][ T981] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 381.431850][ T981] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 381.440652][ T981] usb 1-1: Product: syz [ 381.445064][ T981] usb 1-1: Manufacturer: syz [ 381.515186][ T981] cdc_wdm 1-1:1.0: skipping garbage [ 381.522683][ T981] cdc_wdm 1-1:1.0: skipping garbage [ 381.534599][ T981] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 381.540839][ T981] cdc_wdm 1-1:1.0: Unknown control protocol [ 381.696396][ T9828] FAULT_INJECTION: forcing a failure. [ 381.696396][ T9828] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 381.722607][ T9828] CPU: 0 UID: 0 PID: 9828 Comm: syz.4.1043 Tainted: G L syzkaller #0 PREEMPT(full) [ 381.722642][ T9828] Tainted: [L]=SOFTLOCKUP [ 381.722650][ T9828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 381.722663][ T9828] Call Trace: [ 381.722671][ T9828] [ 381.722680][ T9828] dump_stack_lvl+0x189/0x250 [ 381.722712][ T9828] ? __pfx____ratelimit+0x10/0x10 [ 381.722746][ T9828] ? __pfx_dump_stack_lvl+0x10/0x10 [ 381.722771][ T9828] ? __pfx__printk+0x10/0x10 [ 381.722802][ T9828] ? __might_fault+0xb0/0x130 [ 381.722846][ T9828] should_fail_ex+0x414/0x560 [ 381.722883][ T9828] _copy_from_user+0x2d/0xb0 [ 381.722910][ T9828] cmsghdr_from_user_compat_to_kern+0x394/0x800 [ 381.722941][ T9828] ? __might_fault+0xb0/0x130 [ 381.722983][ T9828] ? __pfx_cmsghdr_from_user_compat_to_kern+0x10/0x10 [ 381.723023][ T9828] ____sys_sendmsg+0x20f/0x820 [ 381.723056][ T9828] ? __pfx_____sys_sendmsg+0x10/0x10 [ 381.723098][ T9828] ___sys_sendmsg+0x21f/0x2a0 [ 381.723125][ T9828] ? __pfx____sys_sendmsg+0x10/0x10 [ 381.723163][ T9828] ? kstrtoull+0x12f/0x1d0 [ 381.723234][ T9828] ? __fget_files+0x2a/0x420 [ 381.723259][ T9828] ? __fget_files+0x3a0/0x420 [ 381.723297][ T9828] __sys_sendmmsg+0x28e/0x430 [ 381.723329][ T9828] ? __pfx___sys_sendmmsg+0x10/0x10 [ 381.723364][ T9828] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 381.723407][ T9828] ? ksys_write+0x22a/0x250 [ 381.723426][ T9828] ? exc_page_fault+0x82/0x100 [ 381.723448][ T9828] ? __pfx_ksys_write+0x10/0x10 [ 381.723474][ T9828] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 381.723505][ T9828] __do_fast_syscall_32+0x1f7/0x590 [ 381.723530][ T9828] ? rcu_is_watching+0x15/0xb0 [ 381.723554][ T9828] ? do_fast_syscall_32+0x34/0x80 [ 381.723591][ T9828] do_fast_syscall_32+0x34/0x80 [ 381.723615][ T9828] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 381.723641][ T9828] RIP: 0023:0xf70bd539 [ 381.723659][ T9828] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 381.723677][ T9828] RSP: 002b:00000000f54ad55c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 381.723699][ T9828] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800009c0 [ 381.723714][ T9828] RDX: 0000000000000001 RSI: 0000000000005000 RDI: 0000000000000000 [ 381.723726][ T9828] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 381.723738][ T9828] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 381.723750][ T9828] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 381.723781][ T9828] [ 381.791077][ T9481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.801671][ T9821] raw-gadget.1 gadget.3: failed to queue resume event [ 382.001144][ T2970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.009328][ T2970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.040936][ T2970] raw-gadget.1 gadget.3: failed to queue suspend event [ 382.162950][ T9821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.220578][ T5923] usb 1-1: USB disconnect, device number 39 [ 382.250897][ C1] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 382.479885][ T9844] netlink: 'syz.2.1050': attribute type 12 has an invalid length. [ 382.639585][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.659623][ T795] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 382.750319][ T9481] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 382.799951][ T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.823732][ T795] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.846356][ T795] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.866141][ T795] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 382.875430][ T795] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.906091][ T795] usb 2-1: config 0 descriptor?? [ 382.911589][ T9481] usb 3-1: Using ep0 maxpacket: 32 [ 382.947870][ T9481] usb 3-1: config 0 has an invalid interface number: 136 but max is 0 [ 382.970660][ T9481] usb 3-1: config 0 has no interface number 0 [ 382.977361][ T9481] usb 3-1: config 0 interface 136 altsetting 0 bulk endpoint 0xA has invalid maxpacket 32 [ 383.032162][ T9481] usb 3-1: New USB device found, idVendor=10cf, idProduct=8063, bcdDevice=d1.d2 [ 383.041856][ T9481] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.050691][ T9481] usb 3-1: Product: syz [ 383.055225][ T9481] usb 3-1: Manufacturer: syz [ 383.060383][ T9481] usb 3-1: SerialNumber: syz [ 383.070269][ T9481] usb 3-1: config 0 descriptor?? [ 383.248087][ T9844] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 383.313768][ T9481] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 383.482683][ T9842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1049'. [ 383.495097][ T9842] input: syz0 as /devices/virtual/input/input24 [ 383.552405][ T795] usbhid 2-1:0.0: can't add hid device: -71 [ 383.591707][ T795] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 383.621060][ T9855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1055'. [ 383.624543][ T795] usb 2-1: USB disconnect, device number 47 [ 383.638655][ T5923] usb 3-1: USB disconnect, device number 44 [ 383.850492][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.959482][ T9860] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1056'. [ 384.167300][ T9846] syz.4.1051 (9846): drop_caches: 2 [ 384.569188][ T5923] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 384.739205][ T5923] usb 2-1: Using ep0 maxpacket: 32 [ 384.756419][ T5923] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 384.779298][ T9] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 384.808679][ T9874] rtc_cmos 00:00: Alarms can be up to one day in the future [ 384.819252][ T5923] usb 2-1: config 0 has no interfaces? [ 384.824760][ T5923] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 384.958590][ T9481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.962837][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.980361][ T5923] usb 2-1: config 0 descriptor?? [ 385.111888][ T9] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 385.133135][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.161618][ T9] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 385.179916][ T9] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 385.188289][ T9] usb 5-1: Manufacturer: syz [ 385.217619][ T9] usb 5-1: config 0 descriptor?? [ 385.247388][ T5923] usb 2-1: USB disconnect, device number 48 [ 385.359233][ T9] rc_core: IR keymap rc-hauppauge not found [ 385.365363][ T9] Registered IR keymap rc-empty [ 385.381660][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 385.394083][ T9880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.409020][ T9880] blktrace: Concurrent blktraces are not allowed on nullb0 [ 385.419597][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input25 [ 385.541417][ T9] usb 5-1: USB disconnect, device number 34 [ 385.679860][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.871359][ T9887] nfs: Unknown parameter 'ø' [ 386.004239][ T9607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.116451][ T9891] netlink: get zone limit has 4 unknown bytes [ 386.306339][ T9897] usb usb7: usbfs: process 9897 (syz.0.1070) did not claim interface 0 before use [ 386.324380][ T9899] FAULT_INJECTION: forcing a failure. [ 386.324380][ T9899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 386.331652][ T9897] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1070'. [ 386.350673][ T9899] CPU: 1 UID: 0 PID: 9899 Comm: syz.4.1071 Tainted: G L syzkaller #0 PREEMPT(full) [ 386.350707][ T9899] Tainted: [L]=SOFTLOCKUP [ 386.350715][ T9899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 386.350728][ T9899] Call Trace: [ 386.350736][ T9899] [ 386.350744][ T9899] dump_stack_lvl+0x189/0x250 [ 386.350774][ T9899] ? __pfx____ratelimit+0x10/0x10 [ 386.350807][ T9899] ? __pfx_dump_stack_lvl+0x10/0x10 [ 386.350830][ T9899] ? __pfx__printk+0x10/0x10 [ 386.350860][ T9899] ? __might_fault+0xb0/0x130 [ 386.350903][ T9899] should_fail_ex+0x414/0x560 [ 386.350950][ T9899] _copy_from_user+0x2d/0xb0 [ 386.350976][ T9899] kstrtouint_from_user+0xc4/0x170 [ 386.351000][ T9899] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 386.351036][ T9899] proc_fail_nth_write+0x88/0x200 [ 386.351059][ T9899] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 386.351094][ T9899] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 386.351116][ T9899] vfs_write+0x27e/0xb30 [ 386.351145][ T9899] ? __pfx_vfs_write+0x10/0x10 [ 386.351167][ T9899] ? __fget_files+0x2a/0x420 [ 386.351211][ T9899] ? __fget_files+0x3a0/0x420 [ 386.351236][ T9899] ? __fget_files+0x2a/0x420 [ 386.351275][ T9899] ksys_write+0x145/0x250 [ 386.351293][ T9899] ? exc_page_fault+0x82/0x100 [ 386.351315][ T9899] ? __pfx_ksys_write+0x10/0x10 [ 386.351340][ T9899] ? __do_fast_syscall_32+0xbe/0x590 [ 386.351367][ T9899] __do_fast_syscall_32+0x1f7/0x590 [ 386.351391][ T9899] ? rcu_is_watching+0x15/0xb0 [ 386.351416][ T9899] ? do_fast_syscall_32+0x34/0x80 [ 386.351444][ T9899] do_fast_syscall_32+0x34/0x80 [ 386.351471][ T9899] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 386.351497][ T9899] RIP: 0023:0xf70bd539 [ 386.351516][ T9899] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 386.351533][ T9899] RSP: 002b:00000000f54ad590 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 386.351555][ T9899] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54ad620 [ 386.351569][ T9899] RDX: 0000000000000001 RSI: 00000000f7456ff4 RDI: 0000000000000000 [ 386.351582][ T9899] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 386.351600][ T9899] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 386.351612][ T9899] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 386.351644][ T9899] [ 386.410412][ T9897] veth1_macvtap: left promiscuous mode [ 386.880123][ T9481] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 387.061279][ T9607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.063531][ T9481] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 387.063564][ T9481] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 387.063586][ T9481] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 387.063635][ T9481] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 387.063664][ T9481] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 387.068745][ T9481] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 387.068782][ T9481] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 387.068807][ T9481] usb 3-1: Product: syz [ 387.068823][ T9481] usb 3-1: Manufacturer: syz [ 387.086748][ T9481] cdc_wdm 3-1:1.0: skipping garbage [ 387.086775][ T9481] cdc_wdm 3-1:1.0: skipping garbage [ 387.105166][ T9481] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 387.105195][ T9481] cdc_wdm 3-1:1.0: Unknown control protocol [ 387.310581][ T10] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 387.463224][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 387.465125][ T10] usb 5-1: config 0 has no interfaces? [ 387.482921][ T10] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 387.482945][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.482960][ T10] usb 5-1: Product: syz [ 387.482977][ T10] usb 5-1: Manufacturer: syz [ 387.482989][ T10] usb 5-1: SerialNumber: syz [ 387.485388][ T10] usb 5-1: config 0 descriptor?? [ 387.554932][ T9909] raw-gadget.1 gadget.3: failed to queue resume event [ 387.577643][ T2970] raw-gadget.1 gadget.3: failed to queue suspend event [ 387.630870][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.640141][ T9481] usb 3-1: USB disconnect, device number 45 [ 387.651288][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.996964][ T9] usb 5-1: USB disconnect, device number 35 [ 388.087675][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.667829][ T9925] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1077'. [ 389.125805][ T981] net_ratelimit: 1 callbacks suppressed [ 389.125821][ T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.161173][ T9936] blktrace: Concurrent blktraces are not allowed on nullb0 [ 390.166243][ T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.562714][ T9] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 390.663330][ T9960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.732909][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 390.754587][ T9] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 390.775787][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 390.807885][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 390.820914][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 390.835389][ T9963] FAULT_INJECTION: forcing a failure. [ 390.835389][ T9963] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 390.838104][ T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 390.869871][ T9963] CPU: 1 UID: 0 PID: 9963 Comm: syz.0.1091 Tainted: G L syzkaller #0 PREEMPT(full) [ 390.869904][ T9963] Tainted: [L]=SOFTLOCKUP [ 390.869911][ T9963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 390.869923][ T9963] Call Trace: [ 390.869931][ T9963] [ 390.869940][ T9963] dump_stack_lvl+0x189/0x250 [ 390.869970][ T9963] ? __pfx____ratelimit+0x10/0x10 [ 390.870004][ T9963] ? __pfx_dump_stack_lvl+0x10/0x10 [ 390.870028][ T9963] ? __pfx__printk+0x10/0x10 [ 390.870059][ T9963] ? __might_fault+0xb0/0x130 [ 390.870102][ T9963] should_fail_ex+0x414/0x560 [ 390.870139][ T9963] _copy_from_user+0x2d/0xb0 [ 390.870166][ T9963] do_sys_poll+0x242/0x1070 [ 390.870205][ T9963] ? __lock_acquire+0x6b6/0x2cf0 [ 390.870227][ T9963] ? __pfx_do_sys_poll+0x10/0x10 [ 390.870328][ T9963] ? rcu_read_lock_any_held+0xb3/0x120 [ 390.870356][ T9963] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 390.870386][ T9963] ? vfs_write+0x956/0xb30 [ 390.870430][ T9963] ? set_compat_user_sigmask+0xbb/0x240 [ 390.870454][ T9963] ? __pfx_set_compat_user_sigmask+0x10/0x10 [ 390.870488][ T9963] __ia32_compat_sys_ppoll_time32+0x299/0x300 [ 390.870521][ T9963] ? fput+0xa0/0xd0 [ 390.870551][ T9963] ? __pfx___ia32_compat_sys_ppoll_time32+0x10/0x10 [ 390.870578][ T9963] ? __pfx_ksys_write+0x10/0x10 [ 390.870603][ T9963] ? __do_fast_syscall_32+0xbe/0x590 [ 390.870631][ T9963] __do_fast_syscall_32+0x1f7/0x590 [ 390.870663][ T9963] ? rcu_is_watching+0x15/0xb0 [ 390.870687][ T9963] ? do_fast_syscall_32+0x34/0x80 [ 390.870716][ T9963] do_fast_syscall_32+0x34/0x80 [ 390.870740][ T9963] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 390.870764][ T9963] RIP: 0023:0xf70fd539 [ 390.870782][ T9963] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 390.870799][ T9963] RSP: 002b:00000000f54ed55c EFLAGS: 00000206 ORIG_RAX: 0000000000000135 [ 390.870821][ T9963] RAX: ffffffffffffffda RBX: 00000000800000c0 RCX: 00000000000000dc [ 390.870835][ T9963] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 390.870847][ T9963] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 390.870859][ T9963] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 390.870871][ T9963] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 390.870902][ T9963] [ 390.890237][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 391.206602][ T9] usb 2-1: Product: syz [ 391.206707][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.211574][ T9] usb 2-1: Manufacturer: syz [ 391.271640][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 391.276922][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 391.325017][ T9] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 391.339276][ T9] cdc_wdm 2-1:1.0: Unknown control protocol [ 391.684186][ T9] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 391.769629][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.780907][ T9949] raw-gadget.1 gadget.3: failed to queue resume event [ 391.820624][ T12] raw-gadget.1 gadget.3: failed to queue suspend event [ 391.838239][ T10] usb 2-1: USB disconnect, device number 49 [ 391.861253][ T9] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 391.876332][ T9986] blktrace: Concurrent blktraces are not allowed on nullb0 [ 391.880793][ T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 391.902920][ T9] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 391.930047][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 391.940150][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.997582][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 392.022542][ T9] usb 1-1: invalid MIDI out EP 0 [ 392.248852][ T9481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.358555][ T9] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 392.702957][ T9991] netlink: 'syz.1.1099': attribute type 3 has an invalid length. [ 392.712115][ T9991] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1099'. [ 392.723307][ T9991] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1099'. [ 392.971636][ T1307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.286196][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.379434][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.326198][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.405194][ T9975] delete_channel: no stack [ 394.438129][ T5924] usb 1-1: USB disconnect, device number 40 [ 394.683011][T10023] netlink: 'syz.0.1110': attribute type 12 has an invalid length. [ 394.747764][T10024] blktrace: Concurrent blktraces are not allowed on nullb0 [ 394.799592][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.979228][ T10] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 395.129986][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 395.143433][ T10] usb 1-1: config 0 has an invalid interface number: 136 but max is 0 [ 395.161422][ T10] usb 1-1: config 0 has no interface number 0 [ 395.175537][ T10] usb 1-1: config 0 interface 136 altsetting 0 bulk endpoint 0xA has invalid maxpacket 32 [ 395.233190][ T10] usb 1-1: New USB device found, idVendor=10cf, idProduct=8063, bcdDevice=d1.d2 [ 395.252697][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.266281][ T10] usb 1-1: Product: syz [ 395.272288][ T10] usb 1-1: Manufacturer: syz [ 395.277224][ T10] usb 1-1: SerialNumber: syz [ 395.312071][ T10] usb 1-1: config 0 descriptor?? [ 395.319031][T10023] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 395.335333][ T10] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 395.377460][ T9607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.555661][ T9607] usb 1-1: USB disconnect, device number 41 [ 396.388540][T10052] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1121'. [ 396.485324][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.495853][T10054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1122'. [ 396.512780][T10055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1121'. [ 396.532267][T10054] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1122'. [ 396.632415][ T30] audit: type=1400 audit(1765980779.722:558): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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netlink: 24 bytes leftover after parsing attributes in process `syz.0.1124'. [ 397.073723][T10068] FAULT_INJECTION: forcing a failure. [ 397.073723][T10068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 397.091348][T10068] CPU: 1 UID: 0 PID: 10068 Comm: syz.1.1127 Tainted: G L syzkaller #0 PREEMPT(full) [ 397.091383][T10068] Tainted: [L]=SOFTLOCKUP [ 397.091391][T10068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 397.091403][T10068] Call Trace: [ 397.091414][T10068] [ 397.091424][T10068] dump_stack_lvl+0x189/0x250 [ 397.091455][T10068] ? __pfx____ratelimit+0x10/0x10 [ 397.091490][T10068] ? __pfx_dump_stack_lvl+0x10/0x10 [ 397.091515][T10068] ? __pfx__printk+0x10/0x10 [ 397.091559][T10068] should_fail_ex+0x414/0x560 [ 397.091597][T10068] _copy_to_user+0x31/0xb0 [ 397.091625][T10068] simple_read_from_buffer+0xe1/0x170 [ 397.091657][T10068] proc_fail_nth_read+0x1b3/0x220 [ 397.091684][T10068] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 397.091709][T10068] ? rw_verify_area+0x2a6/0x4d0 [ 397.091728][T10068] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 397.091752][T10068] vfs_read+0x200/0xa30 [ 397.091770][T10068] ? fdget_pos+0x247/0x320 [ 397.091817][T10068] ? __pfx___mutex_lock+0x10/0x10 [ 397.091841][T10068] ? __pfx_vfs_read+0x10/0x10 [ 397.091862][T10068] ? __fget_files+0x2a/0x420 [ 397.091895][T10068] ? __fget_files+0x3a0/0x420 [ 397.091919][T10068] ? __fget_files+0x2a/0x420 [ 397.091952][T10068] ksys_read+0x145/0x250 [ 397.091974][T10068] ? __pfx_ksys_read+0x10/0x10 [ 397.091999][T10068] ? __do_fast_syscall_32+0xbe/0x590 [ 397.092028][T10068] __do_fast_syscall_32+0x1f7/0x590 [ 397.092054][T10068] ? rcu_is_watching+0x15/0xb0 [ 397.092078][T10068] ? do_fast_syscall_32+0x34/0x80 [ 397.092107][T10068] do_fast_syscall_32+0x34/0x80 [ 397.092131][T10068] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 397.092164][T10068] RIP: 0023:0xf7f02539 [ 397.092184][T10068] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 397.092202][T10068] RSP: 002b:00000000f53f6590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 397.092226][T10068] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f53f6620 [ 397.092241][T10068] RDX: 000000000000000f RSI: 00000000f7396ff4 RDI: 0000000000000000 [ 397.092254][T10068] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 397.092265][T10068] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 397.092277][T10068] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 397.092308][T10068] [ 397.119406][T10069] binder: 10063:10069 ioctl c0306201 0 returned -14 [ 397.162215][ T24] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 397.526154][ T9481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.541600][ T24] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 397.556214][ T24] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 397.637676][ T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 397.659296][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.672626][T10066] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 397.695113][ T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 397.706134][ T9] hid_parser_main: 24 callbacks suppressed [ 397.706152][ T9] hid-generic 0002:0004:0009.002B: unknown main item tag 0x0 [ 397.741961][ T9] hid-generic 0002:0004:0009.002B: unknown main item tag 0x0 [ 397.778574][ T9] hid-generic 0002:0004:0009.002B: unknown main item tag 0x0 [ 397.791029][ T9] hid-generic 0002:0004:0009.002B: unknown main item tag 0x0 [ 397.806662][ T9] hid-generic 0002:0004:0009.002B: unknown main item tag 0x0 [ 397.823736][ T9] hid-generic 0002:0004:0009.002B: unknown main item tag 0x0 [ 397.866349][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.901406][ T9] hid-generic 0002:0004:0009.002B: unknown main item tag 0x0 [ 397.923380][T10082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.950900][ T9] hid-generic 0002:0004:0009.002B: unknown main item tag 0x0 [ 397.992565][T10084] blktrace: Concurrent blktraces are not allowed on nullb0 [ 398.043584][ T9] hid-generic 0002:0004:0009.002B: unknown main item tag 0x0 [ 398.081253][ T9] hid-generic 0002:0004:0009.002B: unknown main item tag 0x0 [ 398.114443][ T9] hid-generic 0002:0004:0009.002B: hidraw0: HID v0.04 Device [syz0] on syz0 [ 398.305913][T10088] fido_id[10088]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 398.484674][ T2970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.498201][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.569407][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.593787][T10066] input: syz0 as /devices/virtual/input/input26 [ 398.647488][ T9] usb 3-1: USB disconnect, device number 46 [ 399.552331][T10101] blktrace: Concurrent blktraces are not allowed on nullb0 [ 399.604812][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.236054][T10109] FAULT_INJECTION: forcing a failure. [ 400.236054][T10109] name failslab, interval 1, probability 0, space 0, times 0 [ 400.289279][T10109] CPU: 1 UID: 0 PID: 10109 Comm: syz.0.1137 Tainted: G L syzkaller #0 PREEMPT(full) [ 400.289316][T10109] Tainted: [L]=SOFTLOCKUP [ 400.289323][T10109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 400.289336][T10109] Call Trace: [ 400.289345][T10109] [ 400.289354][T10109] dump_stack_lvl+0x189/0x250 [ 400.289386][T10109] ? __pfx____ratelimit+0x10/0x10 [ 400.289420][T10109] ? __pfx_dump_stack_lvl+0x10/0x10 [ 400.289444][T10109] ? __pfx__printk+0x10/0x10 [ 400.289479][T10109] ? __pfx___might_resched+0x10/0x10 [ 400.289497][T10109] ? fs_reclaim_acquire+0x7d/0x100 [ 400.289517][T10109] should_fail_ex+0x414/0x560 [ 400.289544][T10109] should_failslab+0xa8/0x100 [ 400.289563][T10109] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 400.289587][T10109] ? __alloc_skb+0x255/0x430 [ 400.289604][T10109] ? napi_skb_cache_get+0x4a5/0x780 [ 400.289618][T10109] ? napi_skb_cache_get+0x151/0x780 [ 400.289636][T10109] __alloc_skb+0x255/0x430 [ 400.289653][T10109] ? __pfx___alloc_skb+0x10/0x10 [ 400.289668][T10109] ? __lock_acquire+0x6b6/0x2cf0 [ 400.289689][T10109] alloc_skb_with_frags+0xca/0x890 [ 400.289708][T10109] ? __lock_acquire+0x6b6/0x2cf0 [ 400.289724][T10109] ? __update_page_owner_handle+0x5a/0x570 [ 400.289742][T10109] sock_alloc_send_pskb+0x84d/0x980 [ 400.289775][T10109] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 400.289798][T10109] ? dev_get_by_index+0x22/0x2e0 [ 400.289819][T10109] ? dev_get_by_index+0x22/0x2e0 [ 400.289852][T10109] packet_sendmsg+0x33a0/0x5080 [ 400.289881][T10109] ? aa_label_match+0xd10/0x1be0 [ 400.289908][T10109] ? __lock_acquire+0x6b6/0x2cf0 [ 400.289923][T10109] ? __pfx___might_resched+0x10/0x10 [ 400.289947][T10109] ? aa_sk_perm+0x15f/0x920 [ 400.289965][T10109] ? __pfx_packet_sendmsg+0x10/0x10 [ 400.289984][T10109] ? aa_sk_perm+0x7ee/0x920 [ 400.290006][T10109] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 400.290027][T10109] ? __asan_memset+0x22/0x50 [ 400.290040][T10109] ? __import_iovec+0x40e/0x7f0 [ 400.290056][T10109] ? aa_sock_msg_perm+0xf1/0x1b0 [ 400.290076][T10109] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 400.290090][T10109] ? __pfx_packet_sendmsg+0x10/0x10 [ 400.290111][T10109] __sock_sendmsg+0x21c/0x270 [ 400.290142][T10109] ____sys_sendmsg+0x505/0x820 [ 400.290164][T10109] ? __pfx_____sys_sendmsg+0x10/0x10 [ 400.290190][T10109] ? kstrtouint+0x6e/0xe0 [ 400.290218][T10109] ___sys_sendmsg+0x21f/0x2a0 [ 400.290237][T10109] ? __pfx____sys_sendmsg+0x10/0x10 [ 400.290264][T10109] ? rcu_read_lock_any_held+0xb3/0x120 [ 400.290303][T10109] ? __fget_files+0x2a/0x420 [ 400.290322][T10109] ? __fget_files+0x3a0/0x420 [ 400.290348][T10109] __sys_sendmsg+0x164/0x220 [ 400.290367][T10109] ? __pfx___sys_sendmsg+0x10/0x10 [ 400.290391][T10109] ? __pfx_ksys_write+0x10/0x10 [ 400.290409][T10109] ? __do_fast_syscall_32+0xbe/0x590 [ 400.290429][T10109] __do_fast_syscall_32+0x1f7/0x590 [ 400.290446][T10109] ? rcu_is_watching+0x15/0xb0 [ 400.290464][T10109] ? do_fast_syscall_32+0x34/0x80 [ 400.290485][T10109] do_fast_syscall_32+0x34/0x80 [ 400.290510][T10109] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 400.290536][T10109] RIP: 0023:0xf70fd539 [ 400.290554][T10109] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 400.290573][T10109] RSP: 002b:00000000f54ed55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 400.290596][T10109] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000640 [ 400.290607][T10109] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 400.290615][T10109] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 400.290624][T10109] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 400.290633][T10109] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 400.290654][T10109] [ 400.703336][ T9] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 400.779771][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.879385][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.887865][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 400.973893][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.019137][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 401.082154][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 401.107568][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 401.111594][T10116] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1139'. [ 401.127827][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.165689][ T9] usb 2-1: config 0 descriptor?? [ 401.840371][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.879888][T10127] blktrace: Concurrent blktraces are not allowed on nullb0 [ 401.956161][T10128] fuse: Bad value for 'fd' [ 402.267987][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.002C/input/input27 [ 402.517880][ T9] microsoft 0003:045E:07DA.002C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 402.888670][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.378347][T10152] blktrace: Concurrent blktraces are not allowed on nullb0 [ 403.667549][ T9] usb 2-1: USB disconnect, device number 50 [ 403.849142][ T5923] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 403.959937][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.972596][ T9481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.268998][ T5923] usb 5-1: Using ep0 maxpacket: 16 [ 404.314545][ T5923] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 404.314930][ T2970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.326792][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 404.349397][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.643297][ T5923] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 404.652836][T10166] blktrace: Concurrent blktraces are not allowed on nullb0 [ 404.661421][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.679205][ T5923] usb 5-1: Product: syz [ 404.683501][ T5923] usb 5-1: Manufacturer: syz [ 404.688144][ T5923] usb 5-1: SerialNumber: syz [ 404.709932][ T5923] usb 5-1: config 0 descriptor?? [ 404.718432][ T5923] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 404.736359][ T5923] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 405.056212][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.322804][ T5923] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 405.334010][ T5923] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 405.946495][ T5923] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 406.085509][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.568131][ T5923] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 406.576967][ T5923] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 406.586945][ T5923] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 406.594148][ T5923] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 406.604104][ T5923] usb 5-1: USB disconnect, device number 36 [ 407.039497][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.127961][ T9481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.165339][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.213965][ T6303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.999981][ T2999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.008296][ T1307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.079877][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.245199][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.294847][ T6303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.323859][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.119475][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.364118][ T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.404647][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.120361][ T751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.443604][ T6303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.760726][ T2999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.159790][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.485723][ T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.524769][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.563973][ T6303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.199460][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.605379][ T9481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.644299][ T6303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.882385][ T5993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.520524][ T5993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.684246][ T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.239412][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.725001][ T9607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.764412][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.804026][ T6303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.279771][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.844512][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.641762][ T2999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.884974][ T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.290431][ T751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.924238][ T9481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.319581][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.964247][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.004411][ T9481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.043925][ T6303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.053278][ T2970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.063910][ T6303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.072980][ T9481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.359400][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.083801][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.399791][ T2999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.039681][ T1307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.123951][ T9481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.164499][ T6303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.244038][ T981] net_ratelimit: 2 callbacks suppressed [ 436.244055][ T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.284373][ T6303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.439647][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.448252][ T5993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.458623][ T6303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.470354][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.160739][ T751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.323899][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.799754][ T5993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.364385][ T9607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.082582][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.088931][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.444804][ T9607] net_ratelimit: 2 callbacks suppressed [ 441.444821][ T9607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.484633][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.519831][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.527981][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.919951][ T751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.559735][ T2999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.567934][ T2999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.603907][ T9607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.569416][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.646479][ T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.683727][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.723632][ T9481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.599883][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.679974][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.764864][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.319845][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.803724][ T6303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.844926][ T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.639442][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.883929][ T6303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.924311][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.963780][ T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.439954][ T1307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.679338][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.003619][ T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.079800][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.043808][ T9607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.084582][ T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.719371][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.124991][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.163367][ T9607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.119547][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.204801][ T6303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.759490][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.244498][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.283469][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.325625][ T9607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.799466][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.039820][ T2970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.363455][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.403903][ T6303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.443986][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.839402][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.483736][ T9607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.524416][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.563755][ T9607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.799659][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.879409][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.603969][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.643299][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.683707][ T6303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.919581][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.723928][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.763298][ T9607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.919847][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.803668][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.969517][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.844579][ T9607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.884416][ T6303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.923374][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.002541][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.399655][ T1307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.963666][ T9607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.042907][ T5993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.004783][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.039675][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.047899][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.083328][ T6303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.123742][ T6303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.439625][ T1307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.079385][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.163956][ T9607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.800837][ T2999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.203657][ T6303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.243311][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.119790][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.283661][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.324098][ T6303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.639596][ T2999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.363537][ T9607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.929589][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.169357][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.403751][ T6303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.443779][ T9607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.483330][ T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.200309][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.523669][ T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.679837][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.564542][ T6303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.039583][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.603309][ T9607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.239418][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.643334][ T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.684689][ T9607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.723701][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.279344][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.520383][ T2970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.528932][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.535478][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.763745][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.159722][ T5993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.803714][ T9607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.843659][ T6303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.319405][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.883831][ T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.923835][ T6303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.963297][ T9607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.280381][ T2999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.359438][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.919965][ T2999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.003999][ T9607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.044337][ T6303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.083880][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.399537][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.123616][ T9607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.759319][ T31] INFO: task syz-executor:5851 blocked for more than 143 seconds. [ 511.767846][ T31] Tainted: G L syzkaller #0 [ 511.774473][ T31] Blocked by coredump. [ 511.779215][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 511.787889][ T31] task:syz-executor state:D stack:21112 pid:5851 tgid:5851 ppid:1 task_flags:0x40054c flags:0x10080003 [ 511.801456][ T31] Call Trace: [ 511.804772][ T31] [ 511.807732][ T31] __schedule+0x14bc/0x5000 [ 511.812988][ T31] ? __pfx___schedule+0x10/0x10 [ 511.817869][ T31] ? schedule+0x91/0x360 [ 511.822192][ T31] schedule+0x165/0x360 [ 511.826370][ T31] schedule_preempt_disabled+0x13/0x30 [ 511.831916][ T31] __mutex_lock+0x7e6/0x1350 [ 511.836542][ T31] ? __mutex_lock+0x5bb/0x1350 [ 511.841555][ T31] ? rfkill_unregister+0xc8/0x220 [ 511.846663][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 511.851908][ T31] ? __pfx_device_del+0x10/0x10 [ 511.856791][ T31] ? hci_sock_dev_event+0x42d/0x630 [ 511.862243][ T31] ? __cancel_work_sync+0x5c/0x110 [ 511.867444][ T31] rfkill_unregister+0xc8/0x220 [ 511.872364][ T31] hci_unregister_dev+0x374/0x5b0 [ 511.877427][ T31] vhci_release+0x152/0x1a0 [ 511.882050][ T31] ? __pfx_vhci_release+0x10/0x10 [ 511.887149][ T31] __fput+0x44c/0xa70 [ 511.891283][ T31] task_work_run+0x1d4/0x260 [ 511.895916][ T31] ? __pfx_task_work_run+0x10/0x10 [ 511.901191][ T31] ? kmem_cache_free+0x197/0x620 [ 511.906158][ T31] ? do_exit+0x6c0/0x2310 [ 511.911631][ T31] do_exit+0x6c5/0x2310 [ 511.915824][ T31] ? do_raw_spin_lock+0x121/0x290 [ 511.921143][ T31] ? __pfx_do_exit+0x10/0x10 [ 511.925783][ T31] do_group_exit+0x21c/0x2d0 [ 511.930466][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 511.935690][ T31] get_signal+0x1285/0x1340 [ 511.940968][ T31] arch_do_signal_or_restart+0x9a/0x7a0 [ 511.946545][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 511.953546][ T31] ? exit_to_user_mode_loop+0x55/0x4f0 [ 511.959965][ T31] exit_to_user_mode_loop+0x87/0x4f0 [ 511.965335][ T31] ? rcu_is_watching+0x15/0xb0 [ 511.970178][ T31] __do_fast_syscall_32+0x3b4/0x590 [ 511.975495][ T31] ? rcu_is_watching+0x15/0xb0 [ 511.980324][ T31] ? do_fast_syscall_32+0x34/0x80 [ 511.985382][ T31] do_fast_syscall_32+0x34/0x80 [ 511.990303][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 511.996659][ T31] RIP: 0023:0xf7f32539 [ 512.001376][ T31] RSP: 002b:00000000f751fce0 EFLAGS: 00000206 ORIG_RAX: 0000000000000072 [ 512.009875][ T31] RAX: fffffffffffffe00 RBX: 00000000ffffffff RCX: 00000000f751fe08 [ 512.017870][ T31] RDX: 0000000040000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 512.026438][ T31] RBP: 00000000f751fe08 R08: 0000000000000000 R09: 0000000000000000 [ 512.034480][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 512.042526][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 512.050621][ T31] [ 512.053692][ T31] INFO: task kworker/1:4:5894 blocked for more than 143 seconds. [ 512.061522][ T31] Tainted: G L syzkaller #0 [ 512.068040][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 512.076825][ T31] task:kworker/1:4 state:D stack:20800 pid:5894 tgid:5894 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 512.088914][ T31] Workqueue: events rfkill_op_handler [ 512.094356][ T31] Call Trace: [ 512.097657][ T31] [ 512.100688][ T31] __schedule+0x14bc/0x5000 [ 512.105243][ T31] ? __pfx___schedule+0x10/0x10 [ 512.110268][ T31] ? schedule+0x91/0x360 [ 512.114542][ T31] schedule+0x165/0x360 [ 512.118704][ T31] schedule_preempt_disabled+0x13/0x30 [ 512.124216][ T31] __mutex_lock+0x7e6/0x1350 [ 512.128844][ T31] ? __mutex_lock+0x5bb/0x1350 [ 512.133773][ T31] ? nfc_dev_down+0x3b/0x290 [ 512.138405][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 512.143518][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 512.149491][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 512.154729][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 512.161012][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 512.166776][ T31] nfc_dev_down+0x3b/0x290 [ 512.167924][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.171286][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 512.185123][ T31] nfc_rfkill_set_block+0x2d/0x100 [ 512.190323][ T31] rfkill_set_block+0x1d2/0x440 [ 512.195210][ T31] rfkill_epo+0x7e/0x180 [ 512.199544][ T31] rfkill_op_handler+0x84/0x240 [ 512.204421][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 512.210219][ T31] process_scheduled_works+0xad1/0x1770 [ 512.215811][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 512.221984][ T31] worker_thread+0x8a0/0xda0 [ 512.226622][ T31] kthread+0x711/0x8a0 [ 512.230774][ T31] ? __pfx_worker_thread+0x10/0x10 [ 512.235915][ T31] ? __pfx_kthread+0x10/0x10 [ 512.242619][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 512.247880][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 512.253170][ T31] ? __pfx_kthread+0x10/0x10 [ 512.257797][ T31] ret_from_fork+0x599/0xb30 [ 512.262500][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 512.267660][ T31] ? __switch_to_asm+0x39/0x70 [ 512.272488][ T31] ? __switch_to_asm+0x33/0x70 [ 512.277295][ T31] ? __pfx_kthread+0x10/0x10 [ 512.281967][ T31] ret_from_fork_asm+0x1a/0x30 [ 512.286777][ T31] [ 512.289898][ T31] INFO: task kworker/1:7:6102 blocked for more than 143 seconds. [ 512.297636][ T31] Tainted: G L syzkaller #0 [ 512.304192][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 512.312910][ T31] task:kworker/1:7 state:D stack:21760 pid:6102 tgid:6102 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 512.324991][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 512.331760][ T31] Call Trace: [ 512.335047][ T31] [ 512.337983][ T31] __schedule+0x14bc/0x5000 [ 512.342639][ T31] ? preempt_schedule+0xae/0xc0 [ 512.347522][ T31] ? preempt_schedule+0xae/0xc0 [ 512.352469][ T31] ? __pfx___schedule+0x10/0x10 [ 512.357361][ T31] ? schedule+0x91/0x360 [ 512.361689][ T31] schedule+0x165/0x360 [ 512.365874][ T31] schedule_preempt_disabled+0x13/0x30 [ 512.371409][ T31] __mutex_lock+0x7e6/0x1350 [ 512.376029][ T31] ? __mutex_lock+0x5bb/0x1350 [ 512.380889][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 512.387165][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 512.392286][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 512.398046][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 512.403888][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 512.410063][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 512.415843][ T31] process_scheduled_works+0xad1/0x1770 [ 512.421615][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 512.427635][ T31] worker_thread+0x8a0/0xda0 [ 512.432313][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 512.438712][ T31] ? __kthread_parkme+0x7b/0x200 [ 512.443794][ T31] kthread+0x711/0x8a0 [ 512.447908][ T31] ? __pfx_worker_thread+0x10/0x10 [ 512.453101][ T31] ? __pfx_kthread+0x10/0x10 [ 512.457739][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 512.463051][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 512.468320][ T31] ? __pfx_kthread+0x10/0x10 [ 512.473029][ T31] ret_from_fork+0x599/0xb30 [ 512.477669][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 512.482883][ T31] ? __switch_to_asm+0x39/0x70 [ 512.487688][ T31] ? __switch_to_asm+0x33/0x70 [ 512.492654][ T31] ? __pfx_kthread+0x10/0x10 [ 512.497293][ T31] ret_from_fork_asm+0x1a/0x30 [ 512.502185][ T31] [ 512.505239][ T31] INFO: task syz.3.938:9378 blocked for more than 144 seconds. [ 512.512837][ T31] Tainted: G L syzkaller #0 [ 512.519430][ T31] Blocked by coredump. [ 512.524023][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 512.532813][ T31] task:syz.3.938 state:D stack:24800 pid:9378 tgid:9371 ppid:5851 task_flags:0x40044c flags:0x10080003 [ 512.544833][ T31] Call Trace: [ 512.548146][ T31] [ 512.551190][ T31] __schedule+0x14bc/0x5000 [ 512.555765][ T31] ? __pfx___schedule+0x10/0x10 [ 512.560727][ T31] ? schedule+0x91/0x360 [ 512.565003][ T31] schedule+0x165/0x360 [ 512.569253][ T31] schedule_preempt_disabled+0x13/0x30 [ 512.574903][ T31] __mutex_lock+0x7e6/0x1350 [ 512.579569][ T31] ? __mutex_lock+0x5bb/0x1350 [ 512.584370][ T31] ? rfkill_unregister+0xc8/0x220 [ 512.589488][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 512.594543][ T31] ? __pfx_device_del+0x10/0x10 [ 512.599471][ T31] ? __cancel_work_sync+0x5c/0x110 [ 512.604621][ T31] rfkill_unregister+0xc8/0x220 [ 512.609562][ T31] nfc_unregister_device+0x96/0x300 [ 512.614792][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 512.620606][ T31] virtual_ncidev_close+0x56/0x90 [ 512.625680][ T31] __fput+0x44c/0xa70 [ 512.629776][ T31] task_work_run+0x1d4/0x260 [ 512.634409][ T31] ? __pfx_task_work_run+0x10/0x10 [ 512.639643][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 512.644886][ T31] do_exit+0x6c5/0x2310 [ 512.649221][ T31] ? do_raw_spin_lock+0x121/0x290 [ 512.654285][ T31] ? __pfx_do_exit+0x10/0x10 [ 512.658904][ T31] do_group_exit+0x21c/0x2d0 [ 512.663582][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 512.668810][ T31] get_signal+0x1285/0x1340 [ 512.673477][ T31] arch_do_signal_or_restart+0x9a/0x7a0 [ 512.679172][ T31] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 512.685196][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 512.691489][ T31] ? exit_to_user_mode_loop+0x55/0x4f0 [ 512.696982][ T31] exit_to_user_mode_loop+0x87/0x4f0 [ 512.702348][ T31] ? rcu_is_watching+0x15/0xb0 [ 512.707146][ T31] __do_fast_syscall_32+0x3b4/0x590 [ 512.712438][ T31] ? do_fast_syscall_32+0x34/0x80 [ 512.717504][ T31] do_fast_syscall_32+0x34/0x80 [ 512.722424][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 512.728781][ T31] RIP: 0023:0xf7f32539 [ 512.732932][ T31] RSP: 002b:00000000f540555c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 512.741440][ T31] RAX: 0000000000010106 RBX: 0000000000000003 RCX: 00000000800000c0 [ 512.749486][ T31] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 512.757477][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 512.765529][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 512.773583][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 512.781668][ T31] [ 512.784715][ T31] INFO: task syz-executor:9598 blocked for more than 144 seconds. [ 512.792608][ T31] Tainted: G L syzkaller #0 [ 512.799193][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 512.807885][ T31] task:syz-executor state:D stack:24280 pid:9598 tgid:9598 ppid:5818 task_flags:0x400000 flags:0x10080002 [ 512.819950][ T31] Call Trace: [ 512.823259][ T31] [ 512.826220][ T31] __schedule+0x14bc/0x5000 [ 512.830877][ T31] ? __pfx___schedule+0x10/0x10 [ 512.835757][ T31] ? schedule+0x91/0x360 [ 512.840139][ T31] schedule+0x165/0x360 [ 512.844342][ T31] schedule_preempt_disabled+0x13/0x30 [ 512.849882][ T31] __mutex_lock+0x7e6/0x1350 [ 512.854512][ T31] ? __mutex_lock+0x5bb/0x1350 [ 512.859379][ T31] ? rfkill_register+0x37/0x8e0 [ 512.864254][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 512.869356][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 512.874702][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 512.880188][ T31] ? device_initialize+0x24b/0x440 [ 512.885333][ T31] rfkill_register+0x37/0x8e0 [ 512.890257][ T31] hci_register_dev+0x3f2/0x8b0 [ 512.895157][ T31] vhci_create_device+0x39c/0x650 [ 512.900296][ T31] vhci_write+0x3ce/0x4a0 [ 512.904662][ T31] vfs_write+0x5c9/0xb30 [ 512.908907][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 512.913937][ T31] ? __pfx_vhci_write+0x10/0x10 [ 512.918823][ T31] ? __pfx_vfs_write+0x10/0x10 [ 512.923670][ T31] ? expand_files+0x6c8/0x7f0 [ 512.928403][ T31] ksys_write+0x145/0x250 [ 512.932834][ T31] ? __pfx_ksys_write+0x10/0x10 [ 512.937721][ T31] ? __do_fast_syscall_32+0xbe/0x590 [ 512.943135][ T31] __do_fast_syscall_32+0x1f7/0x590 [ 512.948456][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 512.953744][ T31] ? do_fast_syscall_32+0x34/0x80 [ 512.958811][ T31] ? irqentry_exit+0x10f/0x660 [ 512.963774][ T31] do_fast_syscall_32+0x34/0x80 [ 512.968662][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 512.975106][ T31] RIP: 0023:0xf7f24539 [ 512.979261][ T31] RSP: 002b:00000000ffe8f8b0 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 512.987685][ T31] RAX: ffffffffffffffda RBX: 00000000000000ca RCX: 00000000ffe8f90a [ 512.995832][ T31] RDX: 0000000000000002 RSI: 00000000f73b6ff4 RDI: 00000000f73e54a8 [ 513.003886][ T31] RBP: 00000000ffe8fa78 R08: 0000000000000000 R09: 0000000000000000 [ 513.011983][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 513.020068][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 513.028077][ T31] [ 513.031233][ T31] [ 513.031233][ T31] Showing all locks held in the system: [ 513.039174][ T31] 1 lock held by khungtaskd/31: [ 513.039619][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.044137][ T31] #0: ffffffff8df41a20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 513.062344][ T31] 2 locks held by getty/5590: [ 513.067434][ T31] #0: ffff8880349bd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 513.077333][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 513.087549][ T31] 1 lock held by syz-executor/5851: [ 513.092940][ T31] #0: ffffffff8f5fd4e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 513.103212][ T31] 4 locks held by kworker/1:4/5894: [ 513.108443][ T31] #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 513.119628][ T31] #1: ffffc9000422fb80 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 513.130704][ T31] #2: ffffffff8f5fd4e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_epo+0x4c/0x180 [ 513.140307][ T31] #3: ffff888032dfa100 (&dev->mutex){....}-{4:4}, at: nfc_dev_down+0x3b/0x290 [ 513.149401][ T31] 3 locks held by kworker/1:7/6102: [ 513.154620][ T31] #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 513.165779][ T31] #1: ffffc90004f8fb80 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 513.179391][ T31] #2: ffffffff8f5fd4e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 513.190804][ T31] 2 locks held by syz.3.938/9378: [ 513.195847][ T31] #0: ffff888032dfa100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x300 [ 513.205939][ T31] #1: ffffffff8f5fd4e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 513.216296][ T31] 2 locks held by syz-executor/9598: [ 513.216341][ T9607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.221655][ T31] #0: ffff8880551bc118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 513.240148][ T31] #1: ffffffff8f5fd4e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 513.250168][ T31] 2 locks held by syz.0.1152/10159: [ 513.255393][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 513.264060][ T31] #1: ffffffff8f5fd4e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x12d/0x820 [ 513.274153][ T31] 1 lock held by syz.0.1152/10161: [ 513.279474][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 513.287987][ T31] 1 lock held by syz.2.1155/10168: [ 513.293188][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 513.301755][ T31] 1 lock held by syz.1.1157/10174: [ 513.306869][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 513.315396][ T31] 1 lock held by syz.1.1157/10175: [ 513.320629][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 513.329194][ T31] 1 lock held by syz.4.1158/10178: [ 513.334320][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 513.342877][ T31] 1 lock held by syz-executor/10180: [ 513.348225][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 513.356812][ T31] 1 lock held by syz-executor/10181: [ 513.362196][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 513.370793][ T31] 1 lock held by syz-executor/10182: [ 513.376097][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 513.385622][ T31] [ 513.387993][ T31] ============================================= [ 513.387993][ T31] [ 513.396502][ T31] NMI backtrace for cpu 0 [ 513.396522][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 513.396546][ T31] Tainted: [L]=SOFTLOCKUP [ 513.396553][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 513.396565][ T31] Call Trace: [ 513.396573][ T31] [ 513.396581][ T31] dump_stack_lvl+0x189/0x250 [ 513.396613][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 513.396637][ T31] ? __pfx__printk+0x10/0x10 [ 513.396678][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 513.396709][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 513.396740][ T31] ? __pfx__printk+0x10/0x10 [ 513.396775][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 513.396811][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 513.396844][ T31] sys_info+0x135/0x170 [ 513.396868][ T31] watchdog+0xf95/0xfe0 [ 513.396903][ T31] ? watchdog+0x20a/0xfe0 [ 513.396939][ T31] kthread+0x711/0x8a0 [ 513.396970][ T31] ? __pfx_watchdog+0x10/0x10 [ 513.396999][ T31] ? __pfx_kthread+0x10/0x10 [ 513.397038][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 513.397071][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 513.397091][ T31] ? __pfx_kthread+0x10/0x10 [ 513.397120][ T31] ret_from_fork+0x599/0xb30 [ 513.397143][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 513.397175][ T31] ? __switch_to_asm+0x39/0x70 [ 513.397201][ T31] ? __switch_to_asm+0x33/0x70 [ 513.397227][ T31] ? __pfx_kthread+0x10/0x10 [ 513.397255][ T31] ret_from_fork_asm+0x1a/0x30 [ 513.397300][ T31] [ 513.397308][ T31] Sending NMI from CPU 0 to CPUs 1: [ 513.552798][ C1] NMI backtrace for cpu 1 [ 513.552819][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 513.552843][ C1] Tainted: [L]=SOFTLOCKUP [ 513.552849][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 513.552861][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 513.552884][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 a0 0c 00 f3 0f 1e fa fb f4 c8 ed 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 513.552900][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 513.552916][ C1] RAX: 08f574219800de00 RBX: ffffffff81978fda RCX: 08f574219800de00 [ 513.552930][ C1] RDX: 0000000000000001 RSI: ffffffff8d7922ac RDI: ffffffff8bc08360 [ 513.552943][ C1] RBP: ffffc90000197f10 R08: ffff8880b87336db R09: 1ffff110170e66db [ 513.552956][ C1] R10: dffffc0000000000 R11: ffffed10170e66dc R12: ffffffff8f821f70 [ 513.552970][ C1] R13: 1ffff11003956b70 R14: 0000000000000001 R15: 0000000000000001 [ 513.552982][ C1] FS: 0000000000000000(0000) GS:ffff888125f35000(0000) knlGS:0000000000000000 [ 513.552997][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 513.553010][ C1] CR2: 000055640c66c168 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 513.553026][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 513.553036][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 513.553048][ C1] Call Trace: [ 513.553056][ C1] [ 513.553063][ C1] default_idle+0x13/0x20 [ 513.553083][ C1] default_idle_call+0x73/0xb0 [ 513.553107][ C1] do_idle+0x1ea/0x520 [ 513.553125][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 513.553148][ C1] ? __pfx_do_idle+0x10/0x10 [ 513.553172][ C1] ? do_idle+0x4f3/0x520 [ 513.553193][ C1] cpu_startup_entry+0x44/0x60 [ 513.553212][ C1] start_secondary+0x101/0x110 [ 513.553238][ C1] common_startup_64+0x13e/0x147 [ 513.553279][ C1] [ 513.687373][ T2999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.754934][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.763374][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 513.770262][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 513.780936][ T31] Tainted: [L]=SOFTLOCKUP [ 513.785255][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 513.795744][ T31] Call Trace: [ 513.799039][ T31] [ 513.801983][ T31] dump_stack_lvl+0x99/0x250 [ 513.806577][ T31] ? __asan_memcpy+0x40/0x70 [ 513.811168][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 513.816372][ T31] ? __pfx__printk+0x10/0x10 [ 513.820984][ T31] vpanic+0x237/0x6d0 [ 513.824975][ T31] ? __pfx_vpanic+0x10/0x10 [ 513.829482][ T31] ? preempt_schedule_common+0x83/0xd0 [ 513.834949][ T31] panic+0xb9/0xc0 [ 513.838679][ T31] ? __pfx_panic+0x10/0x10 [ 513.843105][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 513.848567][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 513.854819][ T31] watchdog+0xfdf/0xfe0 [ 513.858988][ T31] ? watchdog+0x20a/0xfe0 [ 513.863357][ T31] kthread+0x711/0x8a0 [ 513.867439][ T31] ? __pfx_watchdog+0x10/0x10 [ 513.872129][ T31] ? __pfx_kthread+0x10/0x10 [ 513.876730][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 513.881940][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 513.887140][ T31] ? __pfx_kthread+0x10/0x10 [ 513.891743][ T31] ret_from_fork+0x599/0xb30 [ 513.896336][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 513.901455][ T31] ? __switch_to_asm+0x39/0x70 [ 513.906230][ T31] ? __switch_to_asm+0x33/0x70 [ 513.910999][ T31] ? __pfx_kthread+0x10/0x10 [ 513.915771][ T31] ret_from_fork_asm+0x1a/0x30 [ 513.920555][ T31] [ 513.923974][ T31] Kernel Offset: disabled [ 513.928305][ T31] Rebooting in 86400 seconds..