last executing test programs:

13m4.210320793s ago: executing program 2 (id=206):
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
socket$rds(0x15, 0x5, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x9b00, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$l2tp6(0xa, 0x2, 0x73)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_80211_join_ibss(0x0, 0x0, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$netlink(0x10, 0x3, 0xb)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0xa8000)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4433000041000701fefffffffeffffff017c0000040042800c0001800600060065580000203302801c3317800400150004008b80080086800400b28006330180", @ANYRES8=r1, @ANYRES16=r0], 0x3344}, 0x1, 0x0, 0x0, 0x4040044}, 0xc000)

13m3.488702303s ago: executing program 2 (id=208):
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
syz_open_procfs(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
getpgrp(0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='stat\x00')
read$FUSE(r2, &(0x7f0000003680)={0x2020}, 0x2020)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5)
socket$netlink(0x10, 0x3, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/thermal/cooling_device0/cur_state\x00', 0x1, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
write(r3, &(0x7f0000000280)="8d", 0x1)

13m1.873747896s ago: executing program 2 (id=214):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r2=>0x0})
bind$packet(r0, &(0x7f00000000c0)={0x11, 0x14, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x34}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b30, &(0x7f0000000040)={'wlan0\x00'})
bind$packet(r0, &(0x7f00000006c0)={0x11, 0x0, r2, 0x1, 0xb, 0x6, @broadcast}, 0x14)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_EDIT(r5, 0x0, 0x483, &(0x7f0000000300)={0x6, @loopback, 0x15, 0x0, 'none\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_EDITDEST(r5, 0x0, 0x489, &(0x7f0000000400)={{0x6, @loopback, 0x15, 0x0, 'none\x00'}, {@private=0xa010101, 0x15}}, 0x44)
setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x0, 0x488, &(0x7f0000000500)={{0x6, @loopback, 0x15, 0x0, 'none\x00'}, {@loopback, 0x15}}, 0x44)
setsockopt$IP_VS_SO_SET_DEL(r5, 0x0, 0x484, &(0x7f0000000600)={0x6, @loopback, 0x15, 0x0, 'none\x00'}, 0x2c)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
r7 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000180)=ANY=[], 0x90}}, 0x408c0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000020)={&(0x7f00000006c0)=ANY=[@ANYBLOB="300000001900250000000000000000002df00000000004000000000005000100110000000c000500000000000a"], 0xe1c}}, 0x20000050)
sendmmsg$alg(r7, &(0x7f00000000c0), 0x492492492492627, 0x0)
connect$inet6(r6, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r8 = fcntl$dupfd(r6, 0x0, r6)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4)
sendmsg$IPVS_CMD_GET_CONFIG(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000)
setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x2, &(0x7f0000000240)=@gcm_128={{0x303}, "baac6c0b0f05a1e2", "3434257396dc4000", "12015eeb"}, 0x28)
syz_io_uring_setup(0xf03, &(0x7f0000000380)={0x0, 0x595f, 0x10000, 0x3, 0x51, 0x0, r8}, &(0x7f0000000100)=<r9=>0x0, &(0x7f0000000000)=<r10=>0x0, &(0x7f0000000080)=<r11=>0x0)
syz_io_uring_submit(r9, r10, r11, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})

12m58.321590458s ago: executing program 2 (id=221):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/buffer_subbuf_size_kb\x00', 0x1, 0x0)
write(r0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0x6}, 0x1c)
unlinkat(r0, &(0x7f00000001c0)='./tracing\x00', 0x200)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10)
setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000001200)=0xd0, 0x4)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10)
pipe2(&(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x800)
splice(r4, &(0x7f0000000000)=0x800, r5, 0x0, 0x2, 0x6)
r6 = accept$inet(r2, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000040)=0x10)
sendto$inet(r6, &(0x7f0000000100)="10f6fdf09f9784384fc500e855f315a63e32fd290f43a51f884545ff7a12a94bcd9a16a29215eb4c910705e55166fc5cb51e2595e1c068ce81", 0x39, 0x4, &(0x7f0000000140)={0x2, 0x4e24, @remote}, 0x10)
sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
socket(0x1, 0x803, 0x0)
sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

12m57.693004265s ago: executing program 2 (id=225):
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
syz_open_procfs(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
getpgrp(0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='stat\x00')
read$FUSE(r2, &(0x7f0000003680)={0x2020}, 0x2020)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5)
socket$netlink(0x10, 0x3, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/thermal/cooling_device0/cur_state\x00', 0x1, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
write(r3, &(0x7f0000000280)="8d", 0x1)

12m53.428956966s ago: executing program 2 (id=232):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file1/file4\x00', &(0x7f00000001c0), 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0)
r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x30, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
landlock_restrict_self(r0, 0x0)
linkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)
linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, 0x0, 0x2)

12m38.118959447s ago: executing program 32 (id=232):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file1/file4\x00', &(0x7f00000001c0), 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0)
r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x30, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
landlock_restrict_self(r0, 0x0)
linkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)
linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, 0x0, 0x2)

12m2.766805036s ago: executing program 3 (id=332):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file1/file4\x00', 0x0, 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0)
r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x30, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
landlock_restrict_self(r0, 0x0)
linkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)
linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file1/file4/file7/file6\x00', 0x2)

12m2.12524632s ago: executing program 3 (id=334):
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8)

12m1.675736877s ago: executing program 3 (id=335):
rt_sigtimedwait(&(0x7f0000000300)={[0x4]}, 0x0, &(0x7f00000004c0), 0x8)
execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r3, 0x402, 0x8000003d)
fcntl$setownex(r3, 0xf, &(0x7f0000000040)={0x1})
capset(&(0x7f00000000c0)={0x19980330, r0}, &(0x7f0000000180)={0xb, 0x30a, 0x6d9d, 0x3, 0x7, 0xfffffff8})
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8001, 0x2)
syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000080)={0x80000020}, 0x10)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014"], 0x30}}, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)

11m59.123907459s ago: executing program 3 (id=345):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0)
pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x58, &(0x7f00000000c0)=[@in={0x2, 0x1000, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x843}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e24, 0x7, @private2, 0x767c}]}, &(0x7f0000000080)=0x10)
io_uring_setup(0x66a, &(0x7f0000000000)={0x0, 0x8dd3, 0x10000, 0x42, 0x235})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket(0x10, 0x3, 0x0)
write(r2, &(0x7f00000000c0)="2000000012005f0214f9f4070000fbe414019ff5526ac553f0ff49a1fc8bf60a1e00", 0xfffffffffffffcde)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x20000023896)
recvmmsg(r2, &(0x7f00000021c0), 0x5b, 0x40, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0xa4}}, 0x4)
socket$nl_rdma(0x10, 0x3, 0x14)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00')
read$FUSE(r5, &(0x7f0000003380)={0x2020}, 0x2020)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})

11m57.907406461s ago: executing program 3 (id=349):
syz_open_dev$loop(0x0, 0x9, 0x80)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1, 0xfffffdfe}, 0x50)
mmap(&(0x7f0000980000/0x2000)=nil, 0x2000, 0x3, 0x28011, r3, 0xffffd000)
socket$nl_route(0x10, 0x3, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)

11m49.893749641s ago: executing program 3 (id=356):
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000240)=[{0x6, 0xc0, 0x2, 0x7fff0000}]})
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r1 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05})
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$nci(0xffffff9c, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r2, &(0x7f0000000800)=[{{&(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10, 0x0}}, {{&(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000001414aa88f6fd579834d25da864799cf4db9a914ee178f4ae383912d9d73cd292e5a20c685df985a562268e4b44bd15d517e367c006999f04a143c7d0acdbad08c9a3749ce84771f088af00005f02f704b3f64c1d9bc6000000000000"], 0x18}}], 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x1, 0x2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000001000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x30, r5, 0x5707b563827c8365, 0x1, 0xbffffffd, {{}, {@val={0x8, 0x1, 0x73}, @val={0x8}, @val={0xc, 0x99, {0x9, 0x14}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x48884}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x2010, r1, 0x42ee000)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mq_timedsend(r1, 0x0, 0x0, 0x5, 0x0)

11m34.588720302s ago: executing program 33 (id=356):
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000240)=[{0x6, 0xc0, 0x2, 0x7fff0000}]})
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r1 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05})
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$nci(0xffffff9c, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r2, &(0x7f0000000800)=[{{&(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10, 0x0}}, {{&(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000001414aa88f6fd579834d25da864799cf4db9a914ee178f4ae383912d9d73cd292e5a20c685df985a562268e4b44bd15d517e367c006999f04a143c7d0acdbad08c9a3749ce84771f088af00005f02f704b3f64c1d9bc6000000000000"], 0x18}}], 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x1, 0x2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000001000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x30, r5, 0x5707b563827c8365, 0x1, 0xbffffffd, {{}, {@val={0x8, 0x1, 0x73}, @val={0x8}, @val={0xc, 0x99, {0x9, 0x14}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x48884}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x2010, r1, 0x42ee000)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mq_timedsend(r1, 0x0, 0x0, 0x5, 0x0)

7m51.680150346s ago: executing program 4 (id=1160):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffef6, 0x10, 0x0, 0x3d}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x60006000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

7m50.154069277s ago: executing program 4 (id=1163):
r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)

7m48.732736555s ago: executing program 4 (id=1168):
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @random="ce3500590a7f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x0, 0x8}}}}}, 0x0)
syz_emit_ethernet(0x2f, &(0x7f0000000280)={@broadcast, @random="67eaa8fce250", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x21, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x4, 0x0, 0xd, 0x0, @opaque="3196b913fb"}}}}}, 0x0)

7m47.412187536s ago: executing program 4 (id=1170):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8})

7m45.918057014s ago: executing program 4 (id=1175):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0xa, 0x9}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000480)="62042700590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee844", 0x46}], 0x1}, 0x8001)

7m44.908025865s ago: executing program 4 (id=1180):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdf8, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0x3}, {0x2, 0xfff1}}}, 0x24}}, 0x4008000)

7m43.287496367s ago: executing program 34 (id=1180):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdf8, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0x3}, {0x2, 0xfff1}}}, 0x24}}, 0x4008000)

7.721374504s ago: executing program 0 (id=3138):
r0 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x24008818, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10)
pipe2(&(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x0)
shutdown(r0, 0x1)

7.259911146s ago: executing program 6 (id=3140):
r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000409911ff0f0000000000010902200001010080320904000002080650000705810200020007050202"], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000680)={0xc0, 0xa, 0xb, "0100000000000000000021"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0)

7.168624551s ago: executing program 0 (id=3141):
r0 = syz_usb_connect$uac2(0x2, 0xa8, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x1d, 0x7}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x1, 0xff, 0x23}, @output_terminal={0xc, 0x24, 0x3, 0x2, 0x307, 0x0, 0x4, 0x0, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x4, 0x1ccc, 0x5}, @as_header={0x10, 0x24, 0x1, 0x2, 0x1, 0x0, 0x4, 0x8, 0xb8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, 0x0, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000440)={0x20, 0xb, 0x1, "bb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000d80)={0x44, &(0x7f0000000080)={0x0, 0xb, 0x17, "6d35374aeca66fc5a2d7a9ecd3e08a8e3f03ff212e18a5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

5.574629799s ago: executing program 5 (id=3147):
socket(0x11, 0x3, 0x9)
socket$kcm(0x2, 0xa, 0x2)
socket$packet(0x11, 0x3, 0x300)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00')
preadv(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/40, 0x28}], 0x1, 0x38, 0x9)

5.191350737s ago: executing program 5 (id=3150):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e80), r2)
sendmsg$NL80211_CMD_SET_PMKSA(r2, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000001ec0)={0x30, r3, 0x821, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "ded18ee73c00e97d022e034aa8b32517"}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000)

5.061458668s ago: executing program 5 (id=3151):
r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r1 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/dev\x00')
pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.idle_time\x00', 0x275a, 0x0)

4.842178033s ago: executing program 0 (id=3153):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd77c7000)
r2 = syz_clone(0x200c8100, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_buf(r4, 0x0, 0x8008000000010, 0x0, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x10)
sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001180)={&(0x7f0000001200)=ANY=[@ANYBLOB="b40d0000", @ANYRES16=0x0, @ANYBLOB="03022bbd7000fedbdf2500000000300d0880ac00008024000200010b18bd0791cce988b2622f9298ed6427342ba62738d2692526bb3dd45451e12400020012d9f351ef21c1f5f0dea15a0b0235b216885682b314eda7e2c484403d01e6d108000a000100000008000a00010000002400020075d25d48cbdf4ae101edbffc7b6df607343892a0da4b86f516663c5c3b3b1f1024000200b90c6dbc6f41a819e0f25004d3cde2e572d04e2c1706aaffbd79ade300efa1c4080003000300000060000080060005000700000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b08000a0001000000200004000a004e220000fffffc0100000000000000000000000000010400000008000a0001000000d40000801400040002004e24000000000000000000000000200004000a004e2100000004fc0100000000000000000000000000010100000024000200d40fb91b34e781e4be661a910cd052f2d7e27a2c816abd6460a2e987efd3a32f08000a0001000000200004000a004e2300008001fe800000000000000000000000000029000800002400020026da1410264d596bb2a82348fd71d7bc392911529999d1f01a18c3b606b3be9a060005000290000024000200427dee7ddb26f65a238f56c885badb1b33723756ffd92cd8fbe2de36f8d623ab1c06008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c08000a00010000006c0509800c010080060001000a00000014000200fc02000000000000000000000000000105000300020000000600010002000000080002000a0101010500030001000000060001000a00000014000200fe80000000000000000000000000000c0500030001000000060001000200000008000200e000000105000300020000000600010002000000080002007f0000010500030003000000060001000200000008000200ac1414bb05000300010000000600010002000000080002000a0101020500030000000000060001000a00000014000200fc0100000000000000000000000000010500030002000000060001000a00000014000200fc020000000000000000000000000000050003000000000028000080060001000a000000140002000000000000000000000000000000000005000300030000000c010080060001000200000008000200e00000010500030001000000060001000a00000014000200fe8800000000000000000000000001010500030002000000060001000a00000014000200ff0200000000000000000000000000010500030002000000060001000a00000014000200fe80000000000000000000000000002a0500030000000000060001000a00000014000200fc0100000000000000000000000000010500030000000000060001000a00000014000200000000000000000000000000000000000500030002000000060001000200000008000200ac1414aa0500030003000000060001000a00000014000200fc010000000000000000000000000001050003000100000094000080060001000a00000014000200fe80000000000000000000000000000c0500030000000000060001000a00000014000200ff0200000000000000000000000000010500030002000000060001000a00000014000200ff0100000000000000000000000000010500030001000000060001000a00000014000200fe8000000000000000000000000000370500030000000000ac0000800600010002000000080002000000000005000300030000000600010002000000080002000a0101000500030003000000060001000a00000014000200fc0100000000000000000000000000000500030003000000060001000a0000001400020000000000000000000000ffffffffffff05000300030000000600010002000000080002000a01010105000300030000000600010002000000080002000a0101010500030001000000ac000080060001000200000008000200ffffffff0500030001000000060001000200000008000200ffffffff0500030001000000060001000200000008000200e00000010500030003000000060001000200000008000200000000000500030001000000060001000a00000014000200fc0000000000000000000000000000010500030003000000060001000a000000140002000000000000000000000000000000000105000300030000003c010080060001000a00000014000200fe8000000000000000000000000000aa0500030002000000060001000200000008000200ffffffff0500030001000000060001000200000008000200ac1414aa0500030001000000060001000a000000140002002001000000000000000000000000000005000300030000000600010002000000080002007f0000010500030002000000060001000a00000014000200fc0200000000000000000000000000010500030000000000060001000a00000014000200000000000000000000000000000000000500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030003000000060001000200000008000200ac1e00010500030002000000060001000a00000014000200fc020000000000000000000000000000050003000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b08000a00010000001400040002004e2400000000000000000000000008000300010000001400040002004e22640101010000000000000000240001000000000000000000000000000000000000000000000000000000000000000000280400801400040002004e22ac1414bb000000000000000008000a000100000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922200004000a004e2300000005fc0100000000000000000000000000017f0000008003098040000080060001000200000008000200000000000500030003000000060001000a00000014000200fe8000000000000000000000000000bb050003000200000028000080060001000a00000014000200ff010000000000000000000000000001050003000300000094000080060001000a00000014000200fe8000000000000000000000000000bb0500030001000000060001000200000008000200ac1414250500030002000000060001000200000008000200e00000010500030002000000060001000200000008000200ac1414410500030001000000060001000a0000001400020000000000000000000000000000000000050003000100000040000080060001000a00000014000200fc0100000000000000000000000000010500030002000000060001000200000008000200ffffffff05000300020000001c000080060001000200000008000200e0000001050003000200000030010080060001000a00000014000200fe80000000000000000000000000000a0500030001000000060001000a00000014000200fc0100000000000000000000000000010500030002000000060001000a0000001400020020010000000000000000000000000002050003001f000000060001000a00000014000200fc0000000000000000000000000000010500030000000000060001000200000008000200ac1414bb0500030001000000060001000200000008000200ac1414aa0500030003000000060001000200000008000200000000000500030002000000060001000200000008000200ac1414aa0500030003000000060001000200000008000200e00000010500030001000000060001000a00000014000200ff0200000000000000000000000000010500030003000000f4000080060001000a00000014000200fe8000000000000000000000000000aa0500030000000000060001000200000008000200e00000020500030003000000060001000a00000014000200fc0100000000000000000000000000010500030003000000060001000200000008000200e00000020500030002000000060001000200000008000200ffffffff0500030003000000060001000a00000014000200fe80000000000000000000000000002b0500030003000000060001000a00000014000200fe8000000000000000000000000000aa0500030002000000060001000200000008000200ac1414240500030000000000240002007aec46615f6adf48d0985ed2ff90b09b54beb0836f05fb16520dca0788f3b6a8200004000a004e2100000f6b00000000000000000000ffff7f0000010700000028000080240002008400ad36746db8243bc048abce1084b5b5575a3e6d1816906f616414ed4ee7a2bc0000801400040002004e240000000000000000000000001400040002004e21ac1e000100000000000000002400020040f7d22f9f619da1cf68c80135ca2b7cb9b4e46db37b04d9816ca3d6ea7d4ca00400098024000200562252be99ba6472750fe0145d16905c48159bd009536ed1705fe449d9864ab024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922200004000a004e2000000007fe8000000000000000000000000000bbd20a000024000080200004000a004e2300000001fe80000000000000000000000000001a0004000014000200776731000000000000000000000000000800050000000000140002007767320000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020077673200000000000000000000000000240001896a74fc3cc9b10300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9"], 0xdb4}, 0x1, 0x0, 0x0, 0x48001}, 0x2000c801)
bind$inet(r6, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r6, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}}], 0x1, 0x20008000)
shutdown(r6, 0x1)
close(0x3)
close_range(r5, 0xffffffffffffffff, 0x0)
creat(0x0, 0xd931d3864d39dcfb)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000000000), 0x1000000, 0x0)
syz_open_procfs$pagemap(r1, &(0x7f00000000c0))
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x440b0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000069114c0000000000850000001a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)

4.737122857s ago: executing program 5 (id=3154):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x0, 0x1, 0x6, 0x3, 0x2f, 0x40}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x28, 0x63, 0x0, 0x40, 0x11, 0x0, @private=0xa010108, @broadcast}, {0x4e23, 0x4e20, 0x14, 0x0, @gue={{0x2, 0x1, 0x3, 0x9}, "62fc3c32"}}}}, 0x36)

3.88945861s ago: executing program 6 (id=3156):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x0)

3.889125718s ago: executing program 7 (id=3157):
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000)
r0 = io_uring_setup(0x2e71, &(0x7f00000003c0)={0x0, 0x800000, 0x400, 0x2, 0x131})
io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000740)={&(0x7f0000002000)={[{0x0, 0x0, 0x3}, {0x0}, {0x0, 0x0, 0xfffe}, {0x0}]}, 0x4}, 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x20, 0x3)

3.276398507s ago: executing program 0 (id=3158):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000300)=0x1b)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)

3.164354217s ago: executing program 1 (id=3159):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000014f000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x29, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000600)=@vmx={0x109, 0x0, 0x2080, {0xf000, 0xeeef0000, {}, 0x0, 0x20000009a1}, {"d07ee511f368b2a747251cf1a94a5870db8535a3258ed7ba4130c84d13bc1903e6882414875944b82f10a32adad59953b7a890eff248264533942a68add3cd784a01567c6b0d9560e938d5a95542f7c44ffc40a36a3fb7f4578b61af429294817929705e32b6b48f388e93ca051ed017c49a75ba08d2220e3c4a16845c32fbd0f1f02e1fa8845a8982a3ac2a241adabdb23500b7be45c2995db01232accacc0c6a6f39b3cbd4b8009b7608dadf3ae9bd27b6be4aaec5c2666b8d08df62b6b7187cc43faeeed57a95f17a81d8677b2f4b7dfd403adeaaa978afe637d027bcdc81ef81ee9345c362621d8eaefff4dac96def624351935f2ac6d573abae93a2ed5e1120a4e28a6f6a29fe2f8ee17582b17b682e66e576a5e42391d6b991f31795a7f3fb1a49a956d3d11d7b3ef39239065a548704677d9bc89f619fcd96d88b7a8674aeda53c9c4a258fdc2d937213bd5b5e43f5550a0a4f4f5df6a428694a2b83b0cd2aeb1eb7dbae38c86f27292eae23e79a3505264657ccf35ccd4507b8f0d879db556faf827837122a90a2a6e78b56fa092bca0eb8a57e9784bedb38403903eaa0948c0611d30f8e2823daf14abd13207cc18f420d8ed21a29c53ee3c821ebefdddec8dd7e80bad1cca1acd2dfce368b6d3d80000517f5c06959ed3d9402664cf167998b3cf784c4787733f5d644e79b670952fb33b6be1f84ce73bd863b87d506dbd517dc247b1d54b6325bdf0f8cc026bb2c7aa64541e8e37c98cb17d5a7bbfe731994f780bcd91f5a7327d849bc718d3b669bde81bce23c0a516684b771dc961273a7e32917231a2b15a0554b3bc631efad8a807f8e8c910e788b59af76f28eddf3261856c2cad8330a0420b757872075201fd7e0a94761ffa10a26da432389e778ffd7d402cbcaed958f979a57fd82efc290d7540e7eff753606c663c046be13526e0a37faf74d9fb2f4518e83014403a74af69ad6987764d43cde4c295cc7c8720c642e72a6cb821b020385310af2cfc941131718d50c9f53ee807ba969db68a97bef3ebdc0c18c74b9ea64d91d408ca446d6ccf14c24f6153794721752f74ba44f575a1d66f002c49f18f7b35428f1bac27f758872c5624caa0ed3b76ca43a5907153dc0305c608f1498eff49fcae7b775cb1db295b40f59c0d47f18a2a5b2449c8e7aff042cf6e38b956a9893d6e43b1a9e95c90a1c08326ddb6cf1beac903717d8c2b351d8d28db9f4a42eb6b43368988345689a7ec76c2da4865caff776ed09cc51e6c33430000fffff318e0d5c251e3c741e384b971b3901ab57b35bd6d517aae1935ddce6296e60109f43f78b3e3d8cc203992015feda1d8036748e1bfa2ccdb7c2939bc4221944974d01d6a31dd1bbf6a6b9b17decedd550f2a8f6d2cdc7410e893375bf363b69d765a28da57762216dd6428f9cc4b4e2fe4f89b1cc92c629e64b29700fe75fe4a7929424769db1de2974473c2ef68cb104e79132e1cf29432a57552472451c78455f14aa3bcd6e2f0afe298a399e23270f3ce6075472e46d5fd22b0cf7f53005bc0a8fbc08bd88533c9a73d290b469b71d4f9f6fbc0c174f19b31dc05e54117d583d2879d90add5d2abbac1880f5459f9c501d39cdc85019401e87f4f1ff44675107e9db6e02bb8b894422cd95a1e1e133abd7a070f4184753973853613760743d618992f9515597297e345c5571731de7031e21faa156944f9cebcc2a2a2f81750766e9be2bc21d66ff24933cde48e387bac6e94f92f5a5beb261a7570d74782d5e7588c963a52b5f8d88b8abb60c9f3a1e23c5d803819a1c5523d23291164d33a4c1303963f420f07eb28e444cc5ac1e046a5c9682f1d050d03fc94720fa11f21fda510c32e2406c0f63e1af2a8d53b7acacecdbcfb60ee38897f02c7d72abab49a16e9c0711122f89a22d1f01db605804d270938a86973fdd517a7178912a8e7b9cc78c88700cf862e524c4d152d2d0201b1d5b080c97a58e25843c1b04e143937dcbd5d2875eb2c3b38003bd9c200a81367a9d6129a121375c89c782cbdb9b92ae006db33085df12dd65ec1e19ca013a284fc5666e8a0f66173c9dc7519a83349c0cea1ba33847c96740f54d8fe9838823f43a336ff06690182515c8230e6ddf69c3e70e08c2900f1fdfe0ba4c6dd10e96cead6a7ed21a261d2e8e15bf041590439db57539d10cae9683a822dd2a6631abe3941a86b05d815ce91fdb0d7a783ef8870a81bda624f65b049b16ad2ec373e0d9af75132ab3cabd0dc424c004b5e90fffff6b6c7ac3c676e779de4a0561c52ffc880c170872143144b133886912263e56b7dfb97d23f0e2491ba46a5053c1a5e42cb0fac52970a834496f1d10310f3b0946e531aacacc9d526a337f77c5a0e35fe6d2ca8c9eb87fce0fcfb659a86dbdc0fe6ff1de1ae8549c29274ec7e2daac612e2e0194974c6b0a9e65e724a76e54d3ebede753cf9f027759c79529eaac74b0400000000000000dc7f06cd08243716826f7c901e257c3b40cb6392726a523010c4a7f4023043c715973a39db3683804f309bfe045280d204ca000505aa9efe079819f63f08e23adea81e0f8fc73a8ab1827476509410917b0091aa0702dedaae8b1e8bb1aad23b97a23d010c3fec37e625820d9375304cb318a0cd3865ff56f96f19dfd9110fa1ba8ba17bdf992c5aebf165053ce2e2245af1dda0b6af2770e968116ea6735e2f2136ca09d42a43da54801395b9ac182475ec6b2c4ccddec16d8fce4252352bcb9df6707f4ea1630d58edfdb200e5e8ade514b750721ab7c52c614ba51cd437fa238e9ae3b09f78c712febe138c754b27bafdbe8859ce1e5133e825ea8d8bd68684a8d2c4db066203f336b54207761b8ce0ed940a8ea494ed18b46c891c4b9c4b580c44cc04e53007a289f734db4d7dbb90d7b5183cf466c549af7ae3a9394e6b6c9fc2cb9e732a66c38acc858a8e12077d2de8827adf521661edfd317887fd9f1d4b8f17478ca2a7d1463c681a12f6abd70d8d12a3aff448182e0e08e1263d9edbad4d0c29aac3794a24e85d47defa58659b945d6add52b074220bc88423a5379819044274be0c23a7e08c08b7411337ddd2a6b3bed2647cf467c2edb78add7410b723577b7eb9a3a36882dd250ffd173978b7e0066fe577586c2584442349cd1962104e22b128db56e7a7f1ab59ee963cee9e463647aafb0ba9ef90169c69fcbb2851d8340597f478d7201c67e8990b85f1d47a8dc78d5fe4ef321bdd8d52f79bc7ecb2ec3c29ddb0ab2859074af6635e3bec5e1679ace0b088e76a7f5232cbf93eb52b5435e58d3ae5bb8f9cf26966264243909a8dafc62989eda979a0a05b8e562d518fa3e2d92eafe1f2831a77d06abd69817644519576fb07a88c17f52fc74de32f030d8cc53ba673c7434c328cfd58f343f8ed0f19840ae80f0aaefeede42b74b4b5d0870280e6233890f41e9147bb4a1d8d15f62e4a1d0254b3463402b1300c078f251c8a336e80d003318d8e5b5e2e0afd7dbe3b57022adebc1de85209d24949c63af34bbab681747ef5960f58fd8db1b0c6a99fe0ae8c84b9b6e260cf71f8151bdce47b2a694bf7932b6a30639275a612c77f589101f571221bf0d4e64ce2a23301c53a380c53175fcca302563efb50452d3f4419f1f81e9dfd8e40bede6f9c73dfcb79edc8b8c60ffa738718765fd0b65859da8542e67f6ba3556d595cf8859810a83ca6161ef8381d348d7342c3b66edb402e323af4aef6684a7f72f3b49e5dc3c20c154db11fe4807dbb7876c7c7d84e5cf831da693e65b7769950872578ce87ff1696b2f26a8ae900154fd129a62c3dce2620cb753a7f1c96c6628df7b338a00ba20557ab15f8623b7c1bdf3f15e9b662bb65e1bb8dfaadf407d97f468b51dc7817a1f3978848996f99c62bdd12ceeadf2be3d4bbc3e83c01bab738899568f1d90c799b9170c107645f543633e5cca5ba598ce28da37312e50dd3cc1413cb21c596920ab8d5779200682d527267e6564a93549b1ca13a10f57e593de6edfb9e1cd68108903f54e5a78a4c68cdffb31048c735161991fa149268fff0967c379ef1645f7716610c3230b452488f13632523a0d86d02d0e47546123d1e6b1dbeb8d1a38c6d2752c570142a30fbdb1e1daff58d065403dc731a650bf65e9f94492c4ff60ced6a0631cf1d9ddc9318bf067d4d28a0845b6b0b030000007d22b8490e17fcd602bdf954f7ec0183cb0f6df78935829d0c00372dee9102c9ff0f5423767b9d62d9a8ffd92d3af25fccc23e7961f5fd218903a136478754c53adf93e355ed5f12060c4bb707cd4875015617ab5f1f232a7cf044b7f50a1590613ec30be930edc70c8a5c1d99bce875f260e40a3b779b38a1daa1054ad50f9a96d0204d7ce7ee96b3d03ae5c13e0ac53f374676fb457de8dc978c7331810dadbc6444f5fa7596a943b7f7836654e8387cfd07170134eac21428609bac2b85619d87789c51396fb04afefdea95848cc55054b0d3099f974ffee828e255be1a13d7e6a17e81562e55eca306d438f36cd5a9863c77f9d519b0d0af0900000000000000b9b8d130339193893c4937cab0b3619f775ff538696c30b9964bd04e2be4b8aaa90a7891c6e8a2806ead78cb170db650c68a7a844590c578788caf13f48d8b375dd725eee00bd0b17b0d2a87418c684ece2fd66db58eb7b601257ad692e8a6f27125f5cf77287a6da495ce839aad3fc9077abfb28e28ef09a1fd103045310e62faaa36198a6a22810585d90599f8d7988ad786057d57888cddb48152afcbcca3979bad2f2a498e96f11855be2481bfa17218c10f8962ca094d898e1f2a60cb7d663569739cd1195fbcb436c9cdbf729206d1d937276b4e67d47ef325c3e1abf7defd3bd69f4b5f47b05ef86f501527694fa16f17d266f4de07654c4e547908da3b8ebf89e87cd633509261418f6009cf53f6d73d4df249642dc9b65e1d762376c9a75ad057871b26479c9fd42b9fff1eb59f6817251014f1777a9be2d249dcd3eea21e92444c0e13a019100b7effb9d0c6c95448a72a1ae7ad520fe8809683545052fbe5dbad18ed399e317a0dbfd738f53b2405239b9ef60b076f768274da79bb674782f10789e506c38713d27c7996b6bfe516ac6dbf0fe1188ce65150ffa4e000d9dc1c28b7a8b00830719666c1d6b927fdebf23533be84b8250850f98160e2de1a97221aec2726e64677951dc1af88a1ad05ab3dabbb6407894661648f92e082b8c8cedb3c894c95bdfeea0218f16ed942b9bf7be2ecbae1df061c0d7a6c5f491605c1161deb626eba3587d17610f13cc3aa4bfda536cffcbee7a22de7826ba43047ed98f0474fc24d42246dcad449d346f21f557043099c5bbae70286a09c37f6976d11b31ac6af6e07b87bcf1949e777374314fbc807dfd88c9f0740728898fa88d93ab45731e41cc09ce235fbb4458a65510c67ae3909ed5d5fc56980436dccebedc51b0ca383d2868438c5a10435ec8d13b67f0171b6d67ba15db4d66ddcaec6227d1e3b1d0c9fcd72b99fced4b76e8f6bd4dfb8cd2adec2593d5933fcaff774136da3d754523bbfb68fc388dba10000bf11238e2536178ba9a480bb5abeba376fcebeb1403e0d223e3afc1a6a6688352056671a3ecde86cc9b7a6b08c1c096c024e12d40410a00487dcafed8520599f678b1f6b74f08ee595534fdd455baf5f7b6400", "d07ee59115bfee5345dc58b23cffc5c643e81123cf65a8d185a9e53e7f9d20a2020cabd00e6cd5420c4fc8fe61efbb8012fec281c1550aa7087060b41a484b5b682068eca9d6936960d6477a239fe120e7433936c058ffa20f15e2ed6c32ae4bd9de18fd5fe31f20ab85f2fb01b792873e66a5cf610bb34322c830d921ca201a82c1557b5a2d7ba0c22555f03c65cc8d2df42064f60eef20d09c493c84c11857ffa5eb8130764e6e21b41a0fb263aedfc3c9be3390087ef0222481b049f72a52ad49e908223a367b40d567a52fde9fc9cc245e733edfdd1b4442a55ed7fe18226e3f7fd28b8d5fd88907fca2350c968c2918f0fe093c91cba0b87bb954b3280a000023025602d77ef2605b9d2720c269744d29ef36a79f700c0eab33eec64c5b8341d3143cc0d382133e6961216b5802820929b94a7bcb1f581110df1b4c52293b478694f8d147476bb3bc5e5a5018481950c395d42b423899a7c4e06b6befa46e2a67a70194a2d2e80234385db03c4ba693c61b84ff80571643f204ae1c7d42f5461f209f7b559bbb5a0c45d5ead100f30f615dbbccb6139a4afe8fa59496b1aaed900299f1c335ab35ee56a333fa22455c05b1ebb1b9bc3b0ca1e02abe0732b24a4ef6f9310db4dcaf37382f4a69e02829eb46bcf9a8132906f7e5c46afbac699a9618130cb39489d3ae793d8fcc43213198bc2cbe8a0fcffd1b69450d61e9c8e9ce80c19218335c48788ddde3d97c694611c783125d96392ad0295bd9600076978c64ec511106f9422e019b08041a43ef0b8abaec4cef8b8041b773f57068a38690056837008cfe86c143b821ddd9e4d517a2f6ca2e21bbbc3b1f0ea5f6d855c37f8814f15a00df3031328c804e360ca966287cce40b4d57e533e575263d48759428ca6df4154f4699d8f41b8c8e076aa225e0c1c0f278e21463a205bfc0a334f3516eae2c5222f87b57ef5e424505b9993d24a8d225b89517ed3015d5a64950bd265412d07a397bd454698571ab002ac752f7d0c8959025065eba27ea44574379a6a387ef7344a90f828a08afe8c27032c8431d30f323b56e7cbe9edb3c9327a2cabc3ea0dceccf4ec25b2861d5f8940823b57def9c184083586c6534f3402ba8d9d6ba1cfff07fba22d24d40bca43c96c56489ea10500b32b7359c2c296181ac4d5f7872377c40a819a8093859a42fa02a0a4f4b2ce4f44d87cabdb2433dcbc530a03516856417d25b06c38952c80f5348c96bf2549c72c8bb4735f958bf7e02c7a67e530611f2d80d547810bae4f52799a9eb6be5da14693d9d7c84dc0b2bef18e11c87a6977a669608ae4f1d1367687cfbeaec2308d1f2b24a95d8b25e4fe6c7cd47fc5800cc59c2467c778de641662e9a83431b5c014ff3a8cb777b92b5847318a8a525e44d45058fb03db60112a4b35b4370e9cc8e142a216308d987eea38d7b91f29b26535792c28ee9e9f7beb3668b765ca388cd3269f6f017d169196f55eea8f16280ceee95eafb1990b2eaacdb6a36386936a02a70cc8baed1ed7f75df629f618de95ccf62ca5f27fef54a22a94d313f1688526f34a834f14472c5a2d5fe91d828fb228c142c3bda3a7463a528d34d37ac32fa27e9b47fc9d817d91fb2dcec4c5c051cc46cfa47ee94f7843cfb8faa99da3569095245cd88674e5503ff2921852bde363894bfab4a13195c960ee5940ea3625b3c6780580bc4694b5fe9bc118afa261bf51b8a5f79397cf4b27e84a15339bfe5f04f477ca9b0038a6a309c9ea89261e5da441f35598ee644eb7544d99b1e07f8a0e71b4f70e0faf47413518795a3d247e5f37863a80e83111bc8265dc7ab304e3097a8a825334ab4e507895be0862f5d219bff68ab180c307c6726b74e9197972da8bdc53f70e43c91406349b97d124622b4896c7471421047c8eca382953347c98df1959bcb269814ded7ee1e1bd5d724ba5d0a1af9d87ae96853de2de0798e7ae879513f2a561d3d7be2e04d382bfd2d0a27052c3e14aeae844cb6fcac2737d3f9f916715026a3d19c7401d2162add82a16b8e172c96ee8f0e4e645e7a201bcdf34271ee87eede9d36439c1962bb44b6433b19bad3c3bc841955be66176ceec74c5173a838a77fcc58ece7a7653c87f344c758278eb53b24142bf87472a6cb1367b0940154aac55dcc81dc8032987e9ea9856a5c844853616ffe3daaae85d50a20994126065e79e8e91022a5c8678a10870410361b74a0e37f9acc773c876f50da6776d43dcd80b3850fcbdd22d03cacad58fb8b408388efec93d42385fb266044178235fc5fe59dc35aef3eb8e89ada9c0ceb8f9379d9fe9045248196e918411bba64eb740337c0c8015540bebf581465d382f1e214f2f8a7b21b4983d8567de985d5e709ad9a8e0113be44e5f8f6aa9e592115669a494d1eddb3186a688a122ad66cc289e249c47d90168d499cac3fea3f2cac52eb840760837b485c6ce32e6ab2c4e1d2bce37f5105a1da6b34215bc19440189fbce47b4bf386c1ecde35ea39024fcf75e3b92a4d45a12452b8df5fd302faa71ab130d3d350907ff28dc4d62f01912eb5cfa84d2d818937d0ba7af08470128a92fb10e86d8a636c65be67c967f3bdd039a5eed1700e335ed92261b3600fb0f5ba72a8f5f86eaad9d51b8fc3c7fcc9ec7645079c4164398805cde129e8b7bf90c91d7bbdc411228a7f072920f40ab43074558ce7b48f9ef77f5fe6e845dcf0d23b12f3d61ea6435bf16b886bc9fb0af755fa472929f5536e64d34cb33336535c33e4ec3c0ebf1824fcebceee319d346f34f1569b04dba2284bbe06f6c81794a94b6e470260290fea50c0a3645989ed557feef3068b67bc18025df1a3182b44d805903f438e70ff4dd59cecca60e755b7297c665462c768a1942b447e76d2a244e17295e94e77176f79f32b4734081138cc64f27243c1a2ebe7a094bf81b74208184b3212b769d55531d898eda1ac80c02b4c9564c9f2fd788ab605a445c963f40115908fd07587c4feed6253ba295922495e24d9a6779a8f1ed80ddac801b329ddb5ff32f654cde6c6faf1f917a036937a5d936b2bde8c547362322044d51ba758834a786814aec35c72c5c4f28a49cdb663876f0e82e73024f183823a4f12898bf6a71ec7bbe599e36f2c03186e8187b37856060d4f5d598e72b80672b8eed4206569c2d593b37d9c6cb64eec7d783c3d506c0568c0b205aa548bcac773732b56f8a0910f6c8b6a5cf846e84db67465ed7c3a88909d5ea256300566dc8bcdb279a36eb028e0577f3eedc7f0ae6111cef1445e29f0bf0a92b7c6601e75aecad62a9f21e5e1a4d744b652d4c60b434b9220b7f8169df36d5c172ea6ded7eabed08f91305e9f0748ae9cd56ed50418dc6eab2bc6d153a3d61834f16b3739d93afa510f2ddd26d3f913b6ef9278cb4c81c5b470b1002b63ef31432ca969c27fa3f463b3f3824cabeccfb35c8493d3b4d4dcad1305f37e607359ad219e4598ba7713aa3ca89f0b4ff710b83acf64ac1306d21a450422cc8bc9d0e4526655359ba2c3967dc0b4f7853b83043f66b2bab33d34510829e951cd13036474b2934fbea89b30137f0258b4c22d9e061e76c5cec96d72801295e47a1121bdd526196ce9ea6942197ae990c59a3a71447192ab4bc0bf0904b83a52413c157625a5df9547bc7015f3b48729eb1fcb462c1fe9fbcb2ea9d921107d5dadbce9a2a7f5fce1502b5132500b86978d4132e903f907c62d91d85cf5f5a315f7b8dcd9e143e5b7a66dcdd1411515586b13401b6038af4f4b01f76f438151aec9bfd0b45baf14301d54aa00e6936869f0c92109ec1a509000000000000008f0da6d47a8e5e24d92e678f63572371f85486ee1dcc071df165f0695df15f8b60587765f4cd49819880a779a7290cbd65b8df57c3f2d1139e8fc8383d9aee5466fbb97d66a85c7ab7091fe00806f862a39a51d998c6efec7727d953fe4e72f218858c5e848456429aeda5e92c40480d9e84e87ee61ade1a82f8838fe1f28bd294af45b9a2fe12462c78dde15bec8723c74825d0d83e9d071f91d57ebe0ba2fc1e6e75d6ef6859289b22fe9d90819d1e99043a365c608dd6ce89c23f62f9772fe6ad59383e01b8bbba61e836d66e7ba91e1e246c9755f023f6b05c452fdcb167b7ebe5e0a113c8681397316761e66239911ba677baf7552090d316bd75cd05fb0caf235c523cf607157b7d4cde8b144d49df4f339a65411a92ee68a4f1c2ddf9fbc3d22ffb986059b3ed0d3f82501554919b37e66cbb5bd75401dfda96092d114bc259860438cfb79ea33607ca30798ddaefef2715a3d91946fc26f94bd269ba7567dcd9c50ad11ee96347bccba629a784c7b662873a866f73f1dda2aa2082ba26d270d6471236823dc05b788de80f94e5c294af129128d34cfb44105a8b40d4f8441c21a098eb04e48bca616dc6915b52fa6a9fb0ab5eef802fd3d8dcf182258567951be20a0ebf49116216432e91033f6085fbf72ed1d60717739f3499b52b6b684e0d42e33f736657a898cb3fa5da70e8710d35fb11e2996031a82cce1d55d8fa4bead1a35e458b8811fd7ad70c566146daf8d9ac29288ca45ab50f7779526be7741ad9f39daac4195fa13914b7151115b06d2d07dd1a4af6efe38a225f7f8b183a43797d5a1d7c046613d78b19bfba2316fbcdfc935fc54477b095295553bb417e527e3814d165cdeb43c552f05b1f66d13aca2496327760c93b8a1427c2272c405d8b94f8eb275249a0947c332049ee0bad7136669c7df60e00000000000000a39db50af4d76e9dd5dcd74a77b8fcd1981b6f138a048970e94fe6c4082b49f7e397e0f9b9fc7368aebaf3ba0c051d08f6770e6ddca26f8eca0415552bbe7b1c41e1e87f52981f2de74bded1a1d5bc41660d19e4e05de1db2e9700256741fd6e86028fd21aaae7d3978d09baa4ebdf9a39aee448d344f2e5c050fe3293c6c74a7cb16755554747b010f10bff9b6f02c82da4f78b5b5596aafa01b5027ccaad437c125390416f36f1df42ef52a1d5af117e7866cc9f61b950ce922e3a1a6ff586e14add3e14781116d643e74124e570392572393c56e78906a24cec1ef196ccd22a7e492084a04b8ca069b95d5e12ad19e76b4ced072ce0bff78d7fe3a3750fe541ed053fb3fe08f29a773cb68d2cb8418f1b3bd4949720ae4104ed20d9aa5d2541317367d02db5f60f6b8df2ff596bd166692cee510b59da757532d88ddf3e8944f01a63ca0657ed24ea5b8110cb53731c539e94633e41d71fa59919d96287a505e8c4e9ac3d9b5e9180b93b670e37aeeec29bdabaac747f8bdf2a5275b61cb8f2081c5655fb047e9036d2273d4674e0382c5d5ebb50448ac02b07d851d66f8836fec1ac3e42c5405adcecb31f50b20e6573dad067999b78f7351bea9e8ca6536fc304eede9cdb905c24f475141349a1b00ad68198ca88898f29afcfb63ebf63d7d037529cf8219dbdb85d01cf5fc3d4b045c9400f672a6deb1ff4d197a28b2a7304e751541a046bc4812ba2fa9e430c79a0b34ab764933148ed337d34dfabf055608109bfd85c739f9c2353f1137582bc73a8d4310cb8ca1dd192b9335ce4ffca52907f37f29fd50e96be21e33b5074f0e16d11a08b274150eb876024ae815e67f3c13c6a3f158c4fd7a26bb2f5d19a2f097235d2fc235f67bdc9b11ffeef3168eb360388749f2f8b91fc3249edc58a959577aa205a105af400"}})

3.08532944s ago: executing program 7 (id=3160):
r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100)
lseek(r2, 0x1, 0x1)

2.97529269s ago: executing program 0 (id=3161):
r0 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x60e4, @loopback, 0xfffffffe}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x659f, 0x4)
write$binfmt_script(r0, &(0x7f00000000c0), 0x28)
recvmmsg(r0, &(0x7f0000006640)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40002000, 0x0)

2.896958741s ago: executing program 7 (id=3162):
socket$packet(0x11, 0x2, 0x300)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1})
write$tun(r0, &(0x7f0000000040)={@void, @val={0x2, 0x3, 0x1b, 0x30, 0x14, 0x6}, @ipv6=@gre_packet={0x3, 0x6, "32c5ab", 0x44, 0x2f, 0xff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x22eb, 0x0, 0x3}, {0x1}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x4, {{0x8, 0x1, 0x7, 0x0, 0x0, 0x1, 0x7, 0x7}, 0x1, {0x8}}}, {0x8, 0x22eb, 0x4, {{0xc, 0x2, 0x15, 0x3, 0x1, 0x2, 0x1, 0x7}, 0x2, {0x0, 0x8, 0x3, 0x7, 0x1, 0x1, 0x2, 0x1, 0x1}}}}}}}, 0x76)

2.892787266s ago: executing program 0 (id=3163):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000040)='#')
keyctl$restrict_keyring(0xa, 0x0, 0x0, 0x0)

2.799979764s ago: executing program 6 (id=3164):
prctl$PR_GET_FP_MODE(0x3d)
socket$netlink(0x10, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x82)

2.758286758s ago: executing program 1 (id=3165):
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00')
mount$fuse(0x0, 0x0, 0x0, 0x80, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}})
fchdir(r0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB='-'], 0x27)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='dev\x00', 0x1ff)

2.751148292s ago: executing program 5 (id=3166):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='loginuid\x00')
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0x290e, 0xc000, 0x8, 0x23})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x5d, 0x0}, 0x94)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

2.622732868s ago: executing program 1 (id=3167):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0)
read$FUSE(r0, &(0x7f0000001740)={0x2020}, 0x2020)
getgid()
preadv2(r0, &(0x7f0000000580)=[{&(0x7f0000000040)=""/181, 0xb5}], 0x1, 0x9, 0x80000000, 0x1)

2.544346065s ago: executing program 5 (id=3168):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000440)={0x40, 0x31}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000002c0)={0x20, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000ac0)={0x34, &(0x7f0000000840)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0})

2.450550068s ago: executing program 1 (id=3169):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262)

2.337195151s ago: executing program 6 (id=3170):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000001dc0)={0x50, 0xfffffffffffffff5, r1, {0x7, 0x2b, 0x0, 0x2f438842, 0x7}}, 0x50)
openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140)={0x5b5603, 0x5b6, 0x4}, 0x18)

2.140356s ago: executing program 6 (id=3171):
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000808, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback, 0x2}, 0x1c)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x7b36, 0x4)
sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0}, 0xf0}], 0x1, 0x22021, 0x0)

2.062921702s ago: executing program 1 (id=3172):
execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r3, 0x402, 0x8000003d)
fcntl$setownex(r3, 0xf, &(0x7f0000000040)={0x1})
capset(&(0x7f00000000c0)={0x19980330, r0}, &(0x7f0000000180)={0xb, 0x30a, 0x6d9d, 0x3, 0x7, 0xfffffff8})
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8001, 0x2)
syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000080)={0x80000020}, 0x10)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014"], 0x30}}, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)

2.014533249s ago: executing program 7 (id=3173):
syz_open_dev$loop(0x0, 0x9, 0x80)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1, 0xfffffdfe}, 0x50)
mmap(&(0x7f0000980000/0x2000)=nil, 0x2000, 0x3, 0x28011, r4, 0xffffd000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008f00)="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", 0x2000, &(0x7f0000008e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x404, &(0x7f0000000600)=ANY=[@ANYRESHEX=r5, @ANYRESHEX=r6, @ANYRES16=r6, @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB])
r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53})
ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x12)
ioctl$UI_SET_SNDBIT(r7, 0x4004556a, 0x1)
ioctl$UI_DEV_CREATE(r7, 0x5501)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x4, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0xfffffffe, 0x0, 0xa9ba, 0xc1f, 0x1, 0x101, 0x3, 0x6, 0xffff, 0x9, 0x2, 0x9, 0x0, 0x3, 0xe, 0x3, 0x0, 0x8, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0x4, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0xf, 0xa33, 0x5, 0x80, 0x401, 0x5, 0xa3a, 0xfffffffd, 0x7, 0xb, 0x3, 0xffff8001, 0x2, 0x4, 0x80000000, 0x1, 0x905e5596, 0x7, 0x0, 0x5, 0xb6, 0x1, 0x7fe, 0x7fff, 0x2, 0x1000002, 0x8], [0x2, 0x1, 0x10000, 0x7, 0xb66, 0x2, 0x5, 0x80000001, 0x8000001, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x6, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x6, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0x80, 0x2, 0x81, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x3, 0x6, 0x525ba681, 0x4f71, 0x4, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x100008b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x7, 0x4, 0x3, 0x7a8, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x80000001, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0x2, 0x3, 0x0, 0x0, 0x3, 0x4c, 0x3, 0x1, 0x2, 0x0, 0x9, 0x13, 0x10001, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x7, 0x47, 0x7, 0x0, 0x11, 0x3, 0x1, 0x5, 0x7, 0x8000, 0xffc, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x10003, 0x10, 0x4e26, 0x6, 0x40, 0x7, 0x497, 0x4, 0x5, 0x0, 0x5, 0x56, 0xc28, 0x9, 0x10001, 0x0, 0x7, 0x79a, 0x40, 0x9, 0x6, 0xc421, 0x80000001, 0x6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x4, 0x3ff, 0x10, 0xd, 0x6, 0x8000, 0x4f, 0x78d, 0x6, 0x1, 0xffffb029, 0xfffffff8, 0x9, 0x7, 0x6, 0x101, 0x1, 0x7, 0x4, 0x0, 0x8000b, 0x400, 0x8, 0x0, 0x200008, 0x10001, 0x9a33247, 0x6, 0x0, 0x1, 0x8001, 0xfffffff7, 0x2000005]}, 0x45c)
read$FUSE(r6, &(0x7f00000021c0)={0x2020}, 0x2020)

425.100446ms ago: executing program 6 (id=3174):
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="3cc81e0000004d61501d0100000000000000100000000000800700000000000038"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)={0x40, 0x40, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000240)={0x0, 0x17, 0x41, "e34a7b4ee08cbfc7d7ec24f4808c7d89ed11aa6dcbdf43c6ba5df4d7f225dab340b837c60859a100948e3e5702704782f5006165524633572c7676f53c23616d27"}, 0x0, 0x0, 0x0, 0x0, 0x0})

384.970129ms ago: executing program 7 (id=3175):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="30003300c0100e00ffffffffffff080211000000505050505050"], 0x4c}, 0x1, 0x0, 0x0, 0x20040080}, 0x28008004)

177.866106ms ago: executing program 7 (id=3176):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1)
setsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000000)="1d", 0x1)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000)

0s ago: executing program 1 (id=3177):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r1=>0x0})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000001200)={0x48, 0x8, r2, 0x0, 0xffff, 0xffc4, &(0x7f0000000480)='|0', 0x1})

kernel console output (not intermixed with test programs):

n OID: [4] 0.0
[  890.475121][T14089] PKCS7: Only support pkcs7_signedData type
[  890.921625][ T5682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  891.154280][T14091] loop5: detected capacity change from 0 to 7
[  891.193479][ T5931] usb 1-1: USB disconnect, device number 38
[  891.263895][T14091] Dev loop5: unable to read RDB block 7
[  891.263949][T14091]  loop5: unable to read partition table
[  891.264162][T14091] loop5: partition table beyond EOD, truncated
[  891.264181][T14091] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  891.480562][ T3577] cdc_ether 6-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.5-1, CDC Ethernet Device, 42:42:42:42:42:42
[  891.490759][ T3577] usb 6-1: USB disconnect, device number 22
[  891.530806][ T3577] cdc_ether 6-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.5-1, CDC Ethernet Device
[  891.542218][    T9] usb 7-1: new high-speed USB device number 32 using dummy_hcd
[  891.699291][    T9] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice= 0.00
[  891.699354][    T9] usb 7-1: too many configurations: 16, using maximum allowed: 8
[  891.758306][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  891.758335][    T9] usb 7-1: Product: syz
[  891.758349][    T9] usb 7-1: Manufacturer: syz
[  891.758364][    T9] usb 7-1: SerialNumber: syz
[  891.928439][ T5931] kernel read not supported for file /kmsg (pid: 5931 comm: kworker/0:6)
[  892.027592][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  892.137948][T14093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  892.139703][T14093] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  892.241854][T14108] PKCS7: Unknown OID: [4] 0.0
[  892.241871][T14108] PKCS7: Only support pkcs7_signedData type
[  892.539214][    T9] ath6kl: Failed to submit usb control message: -71
[  892.540097][    T9] ath6kl: unable to send the bmi data to the device: -71
[  892.540148][    T9] ath6kl: Unable to send get target info: -71
[  892.798058][T14115] input: syz0 as /devices/virtual/input/input81
[  893.470830][    T9] ath6kl: Failed to init ath6kl core: -71
[  893.474832][    T9] ath6kl_usb 7-1:1.0: probe with driver ath6kl_usb failed with error -71
[  893.485293][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  893.520334][    T9] usb 7-1: USB disconnect, device number 32
[  893.911259][T14122] input: syz0 as /devices/virtual/input/input82
[  894.611993][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  896.124782][ T2915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  896.125045][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  896.542516][ T1161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  896.542723][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  896.701831][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  896.707075][ T3577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  896.992252][    T9] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  897.144657][    T9] usb 2-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00
[  897.146342][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  897.801898][T10621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  898.085080][    C0] usb 2-1: NFC: It it not the response to the last command
[  898.164429][    T9] usb 2-1: NFC: Unable to get FW version
[  898.337391][T14175] [U] 
[  898.355824][    T9] pn533_usb 2-1:1.0: probe with driver pn533_usb failed with error -5
[  898.462253][    T9] usb 2-1: USB disconnect, device number 37
[  898.862535][ T8565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  899.178340][T14187] loop9: detected capacity change from 0 to 7
[  899.413478][T14187] Dev loop9: unable to read RDB block 7
[  899.413528][T14187]  loop9: unable to read partition table
[  899.413721][T14187] loop9: partition table beyond EOD, truncated
[  899.413771][T14187] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[  899.953703][T14198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  899.953912][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  899.966411][  T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  900.058335][    T9] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  900.097194][ T1161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  900.250356][    T9] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e
[  900.256645][T10621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  900.284682][    T9] usb 1-1: config 0 has too many interfaces: 129, using maximum allowed: 32
[  900.284728][    T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 129
[  900.284806][T10621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  900.289113][T14194] geneve2: entered promiscuous mode
[  900.289131][T14194] geneve2: entered allmulticast mode
[  900.344748][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  900.344777][    T9] usb 1-1: Product: syz
[  900.344791][    T9] usb 1-1: Manufacturer: syz
[  900.344805][    T9] usb 1-1: SerialNumber: syz
[  900.386050][    T9] usb 1-1: config 0 descriptor??
[  900.701719][ T5591] Bluetooth: hci2: command 0x0406 tx timeout
[  900.705585][ T5700] Bluetooth: hci2: Opcode 0x0c1a failed: -110
[  900.705608][ T5700] Bluetooth: hci2: Error when powering off device on rfkill (-110)
[  901.045647][    T9] mos7840 1-1:0.0: required endpoints missing
[  901.100301][T14214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  901.100501][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  901.102346][    T9] usb 1-1: USB disconnect, device number 39
[  901.419225][T10621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  901.492245][ T1161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  901.543897][ T5931] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  901.549122][T14224] db_root: cannot be changed because it's in use
[  902.027800][ T5931] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  902.051354][ T5931] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  902.051381][ T5931] usb 6-1: Product: syz
[  902.051396][ T5931] usb 6-1: Manufacturer: syz
[  902.052292][ T5931] usb 6-1: SerialNumber: syz
[  902.074286][ T5931] usb 6-1: config 0 descriptor??
[  902.913013][T11034] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  903.082202][T11034] usb 2-1: Using ep0 maxpacket: 8
[  903.084224][T11034] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  903.087439][T11034] usb 2-1: config index 0 descriptor too short (expected 74, got 45)
[  903.094698][T11034] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  903.094730][T11034] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  903.094754][T11034] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  903.103065][T11034] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  903.103094][T11034] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  903.103380][T11034] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  903.320862][ T5931] usb 6-1: Firmware: major: 0, minor: 36, hardware type: UNKNOWN (255)
[  903.645649][ T5931] usb 6-1: failed to fetch extended address, random address set
[  903.686907][T11034] usb 2-1: GET_CAPABILITIES returned 0
[  903.686937][T11034] usbtmc 2-1:16.0: can't read capabilities
[  904.439351][ T5931] usb 6-1: atusb_probe: initialization failed, error = -524
[  904.440091][ T5931] atusb 6-1:0.0: probe with driver atusb failed with error -524
[  904.632331][T14249] loop5: detected capacity change from 0 to 4095
[  904.671056][ T5931] usb 6-1: USB disconnect, device number 23
[  904.716515][T11034] usb 2-1: USB disconnect, device number 38
[  905.111742][T10621] usb 7-1: new high-speed USB device number 33 using dummy_hcd
[  905.290229][T10621] usb 7-1: unable to get BOS descriptor or descriptor too short
[  905.290267][T10621] usb 7-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice= 0.40
[  905.315510][T10621] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  905.315538][T10621] usb 7-1: Product: syz
[  905.315552][T10621] usb 7-1: Manufacturer: syz
[  905.315566][T10621] usb 7-1: SerialNumber: syz
[  905.650462][T10621] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -71
[  905.685576][T10621] snd-usb-audio 7-1:1.1: probe with driver snd-usb-audio failed with error -71
[  905.734544][T10621] snd-usb-audio 7-1:1.2: probe with driver snd-usb-audio failed with error -71
[  905.790125][  T977] net_ratelimit: 5 callbacks suppressed
[  905.790142][  T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  905.825732][T10621] usb 7-1: USB disconnect, device number 33
[  905.947095][T14267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  905.947292][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  905.948131][T11623] buffer_io_error: 138 callbacks suppressed
[  905.948230][T11623] Buffer I/O error on dev loop5, logical block 511, async page read
[  906.284407][T14275] FAULT_INJECTION: forcing a failure.
[  906.284407][T14275] name failslab, interval 1, probability 0, space 0, times 0
[  906.284446][T14275] CPU: 1 UID: 0 PID: 14275 Comm: syz.5.2683 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  906.284475][T14275] Tainted: [L]=SOFTLOCKUP
[  906.284483][T14275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  906.284496][T14275] Call Trace:
[  906.284505][T14275]  <TASK>
[  906.284514][T14275]  dump_stack_lvl+0xe8/0x150
[  906.284550][T14275]  should_fail_ex+0x46b/0x600
[  906.284579][T14275]  ? alloc_inode+0xb8/0x1b0
[  906.284612][T14275]  should_failslab+0xa8/0x100
[  906.284646][T14275]  kmem_cache_alloc_lru_noprof+0xa2/0x680
[  906.284672][T14275]  ? alloc_inode+0xb8/0x1b0
[  906.284717][T14275]  alloc_inode+0xb8/0x1b0
[  906.284751][T14275]  alloc_anon_inode+0x1e/0x340
[  906.284776][T14275]  anon_inode_make_secure_inode+0x7b/0x180
[  906.284851][T14275]  ? __pfx_anon_inode_make_secure_inode+0x10/0x10
[  906.284892][T14275]  __se_sys_memfd_secret+0xe1/0x580
[  906.284927][T14275]  do_syscall_64+0x166/0x520
[  906.284954][T14275]  ? trace_irq_disable+0x3b/0x140
[  906.284979][T14275]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  906.285000][T14275]  ? clear_bhb_loop+0x70/0xc0
[  906.285026][T14275]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  906.285045][T14275] RIP: 0033:0x7f7cae70e159
[  906.285064][T14275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  906.285082][T14275] RSP: 002b:00007f7cac966028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf
[  906.285105][T14275] RAX: ffffffffffffffda RBX: 00007f7cae995fa0 RCX: 00007f7cae70e159
[  906.285121][T14275] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080000
[  906.285134][T14275] RBP: 00007f7cae7a503b R08: 0000000000000000 R09: 0000000000000000
[  906.285148][T14275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  906.285162][T14275] R13: 00007f7cae996038 R14: 00007f7cae995fa0 R15: 00007fff9612d4a8
[  906.285194][T14275]  </TASK>
[  906.931721][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  907.321606][T14302] FAULT_INJECTION: forcing a failure.
[  907.321606][T14302] name failslab, interval 1, probability 0, space 0, times 0
[  907.321645][T14302] CPU: 1 UID: 0 PID: 14302 Comm: syz.6.2691 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  907.321674][T14302] Tainted: [L]=SOFTLOCKUP
[  907.321683][T14302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  907.321696][T14302] Call Trace:
[  907.321705][T14302]  <TASK>
[  907.321715][T14302]  dump_stack_lvl+0xe8/0x150
[  907.321752][T14302]  should_fail_ex+0x46b/0x600
[  907.321781][T14302]  ? __d_alloc+0x37/0x6f0
[  907.321807][T14302]  should_failslab+0xa8/0x100
[  907.321841][T14302]  kmem_cache_alloc_lru_noprof+0xa2/0x680
[  907.321871][T14302]  ? __d_alloc+0x37/0x6f0
[  907.321900][T14302]  __d_alloc+0x37/0x6f0
[  907.321929][T14302]  d_alloc_pseudo+0x21/0xc0
[  907.321955][T14302]  alloc_path_pseudo+0x107/0x220
[  907.321990][T14302]  ? __pfx_alloc_path_pseudo+0x10/0x10
[  907.322019][T14302]  ? rt_spin_lock+0x1e2/0x400
[  907.322053][T14302]  alloc_file_pseudo+0xa8/0x1e0
[  907.322095][T14302]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  907.322127][T14302]  ? alloc_fd+0x654/0x6d0
[  907.322150][T14302]  sock_alloc_file+0xb8/0x2f0
[  907.322268][T14302]  ? __sys_socket+0x12b/0x1b0
[  907.322295][T14302]  __sys_socket+0x13f/0x1b0
[  907.322327][T14302]  __x64_sys_socket+0x7a/0x90
[  907.322356][T14302]  do_syscall_64+0x166/0x520
[  907.322381][T14302]  ? trace_irq_disable+0x3b/0x140
[  907.322406][T14302]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  907.322428][T14302]  ? clear_bhb_loop+0x70/0xc0
[  907.322452][T14302]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  907.322473][T14302] RIP: 0033:0x7effd827e159
[  907.322493][T14302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  907.322511][T14302] RSP: 002b:00007effd64d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  907.322534][T14302] RAX: ffffffffffffffda RBX: 00007effd8505fa0 RCX: 00007effd827e159
[  907.322551][T14302] RDX: 0000000000000006 RSI: 0000000000000002 RDI: 000000000000001d
[  907.322563][T14302] RBP: 00007effd831503b R08: 0000000000000000 R09: 0000000000000000
[  907.322577][T14302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  907.322590][T14302] R13: 00007effd8506038 R14: 00007effd8505fa0 R15: 00007ffc94437718
[  907.322623][T14302]  </TASK>
[  907.656585][T14304] 9p: Bad value for 'rfdno'
[  907.812043][ T5700] Bluetooth: hci5: Opcode 0x0c1a failed: -110
[  907.812068][ T5700] Bluetooth: hci5: Error when powering off device on rfkill (-110)
[  907.812206][ T5591] Bluetooth: hci5: command 0x206a tx timeout
[  907.894384][ T8572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  907.894585][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  907.942231][T10621] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  907.971770][ T8565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  908.122244][T10621] usb 2-1: Using ep0 maxpacket: 8
[  908.125670][T10621] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  908.128266][T10621] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  908.128292][T10621] usb 2-1: config 179 has no interface number 0
[  908.128333][T10621] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  908.128358][T10621] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  908.128385][T10621] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  908.128408][T10621] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  908.128432][T10621] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  908.128472][T10621] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  908.253118][T14309] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  909.015768][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  909.470226][ T5708] usb 2-1: USB disconnect, device number 39
[  909.470302][    C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  909.470339][    C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  909.508167][T14318] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2696'.
[  909.648800][T10621] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input83
[  910.053802][  T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  910.644398][T14349] FAULT_INJECTION: forcing a failure.
[  910.644398][T14349] name failslab, interval 1, probability 0, space 0, times 0
[  910.644440][T14349] CPU: 1 UID: 0 PID: 14349 Comm: syz.1.2706 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  910.644470][T14349] Tainted: [L]=SOFTLOCKUP
[  910.644478][T14349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  910.644491][T14349] Call Trace:
[  910.644501][T14349]  <TASK>
[  910.644511][T14349]  dump_stack_lvl+0xe8/0x150
[  910.644547][T14349]  should_fail_ex+0x46b/0x600
[  910.644580][T14349]  should_failslab+0xa8/0x100
[  910.644612][T14349]  ? kcm_create+0x11b/0x570
[  910.644765][T14349]  kmem_cache_alloc_noprof+0x9e/0x690
[  910.644804][T14349]  ? kcm_create+0x11b/0x570
[  910.644839][T14349]  kcm_create+0x11b/0x570
[  910.644872][T14349]  __sock_create+0x4b3/0x9d0
[  910.644910][T14349]  __sys_socket+0xd6/0x1b0
[  910.644942][T14349]  __x64_sys_socket+0x7a/0x90
[  910.644971][T14349]  do_syscall_64+0x166/0x520
[  910.644999][T14349]  ? trace_irq_disable+0x3b/0x140
[  910.645025][T14349]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  910.645047][T14349]  ? clear_bhb_loop+0x70/0xc0
[  910.645072][T14349]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  910.645093][T14349] RIP: 0033:0x7f702be8e159
[  910.645112][T14349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  910.645130][T14349] RSP: 002b:00007f702a0e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  910.645155][T14349] RAX: ffffffffffffffda RBX: 00007f702c115fa0 RCX: 00007f702be8e159
[  910.645171][T14349] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000029
[  910.645184][T14349] RBP: 00007f702bf2503b R08: 0000000000000000 R09: 0000000000000000
[  910.645200][T14349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  910.645213][T14349] R13: 00007f702c116038 R14: 00007f702c115fa0 R15: 00007ffd2ce08898
[  910.645248][T14349]  </TASK>
[  911.018180][T14353] input: syz0 as /devices/virtual/input/input84
[  911.630458][ T8565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  912.702357][T10621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  913.185427][T14379] binder: 14377:14379 ioctl c0306201 200000000480 returned -14
[  913.281813][   T37] audit: type=1400 audit(1789462077.120:520): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":]" requested=w pid=14381 comm="syz.7.2717" daddr=::ffff:172.20.20.170 dest=20000
[  913.643362][T14398] FAULT_INJECTION: forcing a failure.
[  913.643362][T14398] name failslab, interval 1, probability 0, space 0, times 0
[  913.643403][T14398] CPU: 1 UID: 0 PID: 14398 Comm: syz.0.2721 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  913.643433][T14398] Tainted: [L]=SOFTLOCKUP
[  913.643441][T14398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  913.643454][T14398] Call Trace:
[  913.643463][T14398]  <TASK>
[  913.643473][T14398]  dump_stack_lvl+0xe8/0x150
[  913.643510][T14398]  should_fail_ex+0x46b/0x600
[  913.643557][T14398]  should_failslab+0xa8/0x100
[  913.643596][T14398]  ? vm_area_dup+0x28/0x750
[  913.643653][T14398]  kmem_cache_alloc_noprof+0x9e/0x690
[  913.643682][T14398]  ? vm_area_dup+0x28/0x750
[  913.643717][T14398]  vm_area_dup+0x28/0x750
[  913.643740][T14398]  ? __split_vma+0x1b7/0xa00
[  913.643773][T14398]  __split_vma+0x1d7/0xa00
[  913.643800][T14398]  ? rcu_is_watching+0x16/0xb0
[  913.643834][T14398]  ? __pfx___split_vma+0x10/0x10
[  913.643878][T14398]  vms_gather_munmap_vmas+0x322/0x1370
[  913.643911][T14398]  ? futex_unqueue+0x22/0x240
[  913.643935][T14398]  ? __pfx_vms_gather_munmap_vmas+0x10/0x10
[  913.643961][T14398]  ? futex_unqueue+0x22/0x240
[  913.643982][T14398]  ? futex_unqueue+0x22/0x240
[  913.644002][T14398]  ? futex_unqueue+0x22/0x240
[  913.644023][T14398]  ? futex_unqueue+0x211/0x240
[  913.644047][T14398]  ? __futex_wait+0x1e3/0x410
[  913.644078][T14398]  do_vmi_align_munmap+0x2c7/0x4d0
[  913.644127][T14398]  ? __pfx_do_vmi_align_munmap+0x10/0x10
[  913.644186][T14398]  ? mas_walk+0x381/0x490
[  913.644275][T14398]  ? mas_find+0x645/0xcb0
[  913.644293][T14398]  do_vmi_munmap+0x252/0x2d0
[  913.644314][T14398]  __vm_munmap+0x241/0x3e0
[  913.644326][T14398]  ? __pfx___vm_munmap+0x10/0x10
[  913.644338][T14398]  ? __se_sys_futex+0x3a8/0x450
[  913.644353][T14398]  ? rcu_is_watching+0x16/0xb0
[  913.644373][T14398]  __x64_sys_munmap+0x60/0x70
[  913.644387][T14398]  do_syscall_64+0x166/0x520
[  913.644401][T14398]  ? trace_irq_disable+0x3b/0x140
[  913.644414][T14398]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  913.644425][T14398]  ? clear_bhb_loop+0x70/0xc0
[  913.644438][T14398]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  913.644448][T14398] RIP: 0033:0x7f8ec445e159
[  913.644460][T14398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  913.644470][T14398] RSP: 002b:00007f8ec26b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000000b
[  913.644483][T14398] RAX: ffffffffffffffda RBX: 00007f8ec46e5fa0 RCX: 00007f8ec445e159
[  913.644491][T14398] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000ff8000
[  913.644498][T14398] RBP: 00007f8ec44f503b R08: 0000000000000000 R09: 0000000000000000
[  913.644505][T14398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  913.644512][T14398] R13: 00007f8ec46e6038 R14: 00007f8ec46e5fa0 R15: 00007fffb97d2a88
[  913.644530][T14398]  </TASK>
[  913.653461][ T2927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  913.653668][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  913.820321][ T8565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  914.159955][T14406] MTRR 2 not used
[  914.752141][T14429] input: syz0 as /devices/virtual/input/input85
[  915.337825][ T5591] Bluetooth: hci1: command 0x0405 tx timeout
[  915.614740][ T5700] Bluetooth: hci1: Opcode 0x0c1a failed: -110
[  915.614912][ T5700] Bluetooth: hci1: Error when powering off device on rfkill (-110)
[  915.620305][ T3317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  915.620481][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  915.683978][ T8565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  916.192280][T14437] FAULT_INJECTION: forcing a failure.
[  916.192280][T14437] name failslab, interval 1, probability 0, space 0, times 0
[  916.192322][T14437] CPU: 0 UID: 0 PID: 14437 Comm: syz.6.2732 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  916.192351][T14437] Tainted: [L]=SOFTLOCKUP
[  916.192359][T14437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  916.192371][T14437] Call Trace:
[  916.192380][T14437]  <TASK>
[  916.192389][T14437]  dump_stack_lvl+0xe8/0x150
[  916.192425][T14437]  should_fail_ex+0x46b/0x600
[  916.192457][T14437]  should_failslab+0xa8/0x100
[  916.192489][T14437]  __kmalloc_node_noprof+0xfd/0x7b0
[  916.192516][T14437]  ? get_callchain_buffers+0x198/0x350
[  916.192572][T14437]  ? get_callchain_buffers+0x198/0x350
[  916.192607][T14437]  get_callchain_buffers+0x198/0x350
[  916.192639][T14437]  stack_map_alloc+0x301/0x4b0
[  916.192674][T14437]  map_create+0x1111/0x1e20
[  916.192718][T14437]  ? __pfx_map_create+0x10/0x10
[  916.192754][T14437]  ? bpf_lsm_bpf+0x9/0x20
[  916.192774][T14437]  ? security_bpf+0x7e/0x2d0
[  916.192803][T14437]  __sys_bpf+0xaea/0xd90
[  916.192839][T14437]  ? __pfx___sys_bpf+0x10/0x10
[  916.192878][T14437]  ? do_futex+0x3e7/0x4e0
[  916.192922][T14437]  ? ksys_write+0x248/0x270
[  916.192947][T14437]  ? __pfx___se_sys_futex+0x10/0x10
[  916.192968][T14437]  ? __pfx_ksys_write+0x10/0x10
[  916.192997][T14437]  __x64_sys_bpf+0xba/0xd0
[  916.193027][T14437]  do_syscall_64+0x166/0x520
[  916.193053][T14437]  ? trace_irq_disable+0x3b/0x140
[  916.193078][T14437]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  916.193099][T14437]  ? clear_bhb_loop+0x70/0xc0
[  916.193123][T14437]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  916.193142][T14437] RIP: 0033:0x7effd827e159
[  916.193163][T14437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  916.193182][T14437] RSP: 002b:00007effd64d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  916.193205][T14437] RAX: ffffffffffffffda RBX: 00007effd8505fa0 RCX: 00007effd827e159
[  916.193221][T14437] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 0000000000000000
[  916.193235][T14437] RBP: 00007effd831503b R08: 0000000000000000 R09: 0000000000000000
[  916.193249][T14437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  916.193262][T14437] R13: 00007effd8506038 R14: 00007effd8505fa0 R15: 00007ffc94437718
[  916.193296][T14437]  </TASK>
[  916.215507][T11034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  916.471635][T10621] usb 8-1: new high-speed USB device number 29 using dummy_hcd
[  916.471925][    C1] raw-gadget.0 gadget.7: ignoring, device is not running
[  916.601632][T10621] usb 8-1: device descriptor read/64, error -32
[  916.824438][ T8565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  916.984346][T10621] usb 8-1: new high-speed USB device number 30 using dummy_hcd
[  917.251598][T10621] usb 8-1: Using ep0 maxpacket: 16
[  917.254756][T10621] usb 8-1: unable to get BOS descriptor or descriptor too short
[  917.254809][T10621] usb 8-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7
[  917.257770][T10621] usb 8-1: config 9 has an invalid interface number: 57 but max is 0
[  917.257795][T10621] usb 8-1: config 9 has no interface number 0
[  917.261054][T10621] usb 8-1: config 9 interface 57 has no altsetting 0
[  917.345423][T14457] PKCS7: Unknown OID: [4] 0.0
[  917.345603][T14457] PKCS7: Only support pkcs7_signedData type
[  917.975207][T10621] usb 8-1: string descriptor 0 read error: -22
[  917.975370][T10621] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  918.011637][ T8565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  918.730132][ T2927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  918.730558][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  918.798494][T14458] cgroup: fork rejected by pids controller in /syz0
[  919.157618][T10621] video4linux radio48: keene_cmd_set failed (-71)
[  919.157662][T10621] radio-keene 8-1:9.57: V4L2 device registered as radio48
[  919.182970][T10621] usb 8-1: USB disconnect, device number 30
[  919.191621][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  919.691719][T10621] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  919.844667][T10621] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  919.848554][T10621] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  919.966192][T10621] usb 2-1: config 0 descriptor??
[  920.530406][ T5700] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  920.705556][ T3317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  920.707467][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  920.745558][ T5700] usb 1-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00
[  920.804583][ T5700] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  920.804885][ T5700] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  920.852876][ T5682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  920.890816][ T5700] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  920.890834][ T5700] usb 1-1: Product: syz
[  920.891086][ T5700] usb 1-1: Manufacturer: syz
[  920.891096][ T5700] usb 1-1: SerialNumber: syz
[  920.985394][T10621] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  921.477488][ T5700] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 40 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900
[  921.495087][T10621] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1
[  921.495103][T10621] [drm] Initialized udl on minor 1
[  921.867064][T11034] usb 1-1: USB disconnect, device number 40
[  921.892721][ T5700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  922.009636][T14600] FAULT_INJECTION: forcing a failure.
[  922.009636][T14600] name failslab, interval 1, probability 0, space 0, times 0
[  922.009817][T14600] CPU: 1 UID: 0 PID: 14600 Comm: syz.5.2753 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  922.009847][T14600] Tainted: [L]=SOFTLOCKUP
[  922.009856][T14600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  922.009872][T14600] Call Trace:
[  922.009882][T14600]  <TASK>
[  922.009892][T14600]  dump_stack_lvl+0xe8/0x150
[  922.009929][T14600]  should_fail_ex+0x46b/0x600
[  922.009960][T14600]  ? alloc_inode+0xb8/0x1b0
[  922.009992][T14600]  should_failslab+0xa8/0x100
[  922.010025][T14600]  kmem_cache_alloc_lru_noprof+0xa2/0x680
[  922.010055][T14600]  ? alloc_inode+0xb8/0x1b0
[  922.010092][T14600]  alloc_inode+0xb8/0x1b0
[  922.010124][T14600]  create_pipe_files+0x52/0x7d0
[  922.010158][T14600]  __do_pipe_flags+0x46/0x1f0
[  922.010188][T14600]  do_pipe2+0xaa/0x190
[  922.010220][T14600]  ? __pfx_do_pipe2+0x10/0x10
[  922.010249][T14600]  ? rcu_is_watching+0x16/0xb0
[  922.010290][T14600]  __x64_sys_pipe+0x3a/0x50
[  922.010317][T14600]  do_syscall_64+0x166/0x520
[  922.010344][T14600]  ? trace_irq_disable+0x3b/0x140
[  922.010370][T14600]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  922.010392][T14600]  ? clear_bhb_loop+0x70/0xc0
[  922.010418][T14600]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  922.010439][T14600] RIP: 0033:0x7f7cae70e159
[  922.010458][T14600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  922.010478][T14600] RSP: 002b:00007f7cac966028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016
[  922.010500][T14600] RAX: ffffffffffffffda RBX: 00007f7cae995fa0 RCX: 00007f7cae70e159
[  922.010517][T14600] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  922.010530][T14600] RBP: 00007f7cae7a503b R08: 0000000000000000 R09: 0000000000000000
[  922.010544][T14600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  922.010557][T14600] R13: 00007f7cae996038 R14: 00007f7cae995fa0 R15: 00007fff9612d4a8
[  922.010590][T14600]  </TASK>
[  922.348566][T11034] usblp0: removed
[  922.932116][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  923.984618][ T8565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  924.020589][ T5788] blk_print_req_error: 134 callbacks suppressed
[  924.020608][ T5788] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  924.020629][ T5788] Buffer I/O error on dev nbd0, logical block 0, async page read
[  924.095665][ T5788] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2
[  924.095699][ T5788] Buffer I/O error on dev nbd0, logical block 1, async page read
[  924.095719][ T5788] Buffer I/O error on dev nbd0, logical block 2, async page read
[  924.095737][ T5788] Buffer I/O error on dev nbd0, logical block 3, async page read
[  924.096317][ T5788] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  924.096343][ T5788] Buffer I/O error on dev nbd0, logical block 0, async page read
[  924.096362][ T5788] Buffer I/O error on dev nbd0, logical block 1, async page read
[  924.096379][ T5788] Buffer I/O error on dev nbd0, logical block 2, async page read
[  924.096396][ T5788] Buffer I/O error on dev nbd0, logical block 3, async page read
[  924.096779][ T5788] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  924.096804][ T5788] Buffer I/O error on dev nbd0, logical block 0, async page read
[  924.096822][ T5788] Buffer I/O error on dev nbd0, logical block 1, async page read
[  924.099609][ T5788] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  924.100409][ T5788] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  924.100674][ T5788] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  924.101198][ T5788] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  924.152396][ T5788] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  924.164421][T14618] ldm_validate_partition_table(): Disk read failed.
[  924.164680][ T5788] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  924.175157][T14618] Dev nbd0: unable to read RDB block 0
[  924.214478][ T5700] usb 7-1: new high-speed USB device number 34 using dummy_hcd
[  924.434460][ T5700] usb 7-1: Using ep0 maxpacket: 8
[  924.436476][T14618]  nbd0: unable to read partition table
[  924.439014][ T5700] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  924.475908][ T5700] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  924.476016][ T5700] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  924.495538][T14619] ldm_validate_partition_table(): Disk read failed.
[  924.498396][T14619] Dev nbd0: unable to read RDB block 0
[  924.512845][T14619]  nbd0: unable to read partition table
[  924.544389][ T3317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  924.544606][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  924.571219][ T5700] usb 7-1: config 0 descriptor??
[  924.619612][ T5700] gspca_main: vc032x-2.14.0 probing 046d:0892
[  924.809103][T14624] FAULT_INJECTION: forcing a failure.
[  924.809103][T14624] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  924.809143][T14624] CPU: 0 UID: 0 PID: 14624 Comm: syz.5.2762 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  924.809172][T14624] Tainted: [L]=SOFTLOCKUP
[  924.809181][T14624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  924.809194][T14624] Call Trace:
[  924.809203][T14624]  <TASK>
[  924.809213][T14624]  dump_stack_lvl+0xe8/0x150
[  924.809249][T14624]  should_fail_ex+0x46b/0x600
[  924.809283][T14624]  _copy_from_user+0x2d/0xb0
[  924.809345][T14624]  core_sys_select+0x673/0xb40
[  924.809393][T14624]  ? __pfx_core_sys_select+0x10/0x10
[  924.809423][T14624]  ? reacquire_held_locks+0x117/0x1a0
[  924.809478][T14624]  ? __pfx_set_user_sigmask+0x10/0x10
[  924.809507][T14624]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  924.809540][T14624]  __se_sys_pselect6+0x267/0x320
[  924.809577][T14624]  ? __pfx___se_sys_pselect6+0x10/0x10
[  924.809617][T14624]  ? __x64_sys_pselect6+0x21/0xf0
[  924.809651][T14624]  do_syscall_64+0x166/0x520
[  924.809679][T14624]  ? trace_irq_disable+0x3b/0x140
[  924.809705][T14624]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  924.809726][T14624]  ? clear_bhb_loop+0x70/0xc0
[  924.809751][T14624]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  924.809772][T14624] RIP: 0033:0x7f7cae70e159
[  924.809791][T14624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  924.809810][T14624] RSP: 002b:00007f7cac966028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e
[  924.809833][T14624] RAX: ffffffffffffffda RBX: 00007f7cae995fa0 RCX: 00007f7cae70e159
[  924.809849][T14624] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000000000000040
[  924.809864][T14624] RBP: 00007f7cae7a503b R08: 0000200000000340 R09: 0000200000000400
[  924.809879][T14624] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000000
[  924.809893][T14624] R13: 00007f7cae996038 R14: 00007f7cae995fa0 R15: 00007fff9612d4a8
[  924.809925][T14624]  </TASK>
[  925.025991][ T8565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  925.370201][T14634] input: syz0 as /devices/virtual/input/input86
[  925.621780][ T5700] gspca_vc032x: reg_r err -71
[  925.622033][ T5700] vc032x 7-1:0.0: probe with driver vc032x failed with error -71
[  925.644359][   T36] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  925.700472][ T5700] usb 7-1: USB disconnect, device number 34
[  925.762933][ T3317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  925.777264][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  925.843692][   T36] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  925.845619][   T36] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  925.845655][   T36] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11
[  925.851351][   T36] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  925.851367][   T36] usb 6-1: Product: syz
[  925.851375][   T36] usb 6-1: Manufacturer: syz
[  925.851383][   T36] usb 6-1: SerialNumber: syz
[  926.005606][   T36] usb 6-1: selecting invalid altsetting 1
[  926.052626][ T5682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  926.575514][T10621] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92
[  926.614930][T10621] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  926.652801][T10621] usb 2-1: USB disconnect, device number 40
[  926.843872][   T36] usb 6-1: selecting invalid altsetting 1
[  926.844166][   T36] cdc_ncm 6-1:1.0: bind() failure
[  927.102396][ T5682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  927.164286][ T5700] usb 6-1: USB disconnect, device number 24
[  928.132432][T10621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  928.184605][T14692] debugfs: 'netdev:syzkaller0' already exists in 'phy6'
[  928.321381][T14701] TCP: tcp_parse_options: Illegal window scaling value 16 > 14 received
[  928.579098][   T37] audit: type=1400 audit(1789462092.420:521): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":]" requested=w pid=14706 comm="syz.5.2796" daddr=::ffff:172.20.20.8
[  929.182301][ T5700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  929.697584][T14733] PKCS7: Unknown OID: [4] 0.0
[  929.697603][T14733] PKCS7: Only support pkcs7_signedData type
[  930.048871][T14738] netlink: 'syz.7.2810': attribute type 3 has an invalid length.
[  930.048893][T14738] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2810'.
[  930.102522][T10621] usb 7-1: new full-speed USB device number 35 using dummy_hcd
[  930.163950][T14742] FAULT_INJECTION: forcing a failure.
[  930.163950][T14742] name fail_futex, interval 1, probability 0, space 0, times 0
[  930.163993][T14742] CPU: 0 UID: 0 PID: 14742 Comm: syz.0.2811 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  930.164023][T14742] Tainted: [L]=SOFTLOCKUP
[  930.164031][T14742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  930.164044][T14742] Call Trace:
[  930.164053][T14742]  <TASK>
[  930.164064][T14742]  dump_stack_lvl+0xe8/0x150
[  930.164112][T14742]  should_fail_ex+0x46b/0x600
[  930.164146][T14742]  get_futex_key+0x1b4/0x1580
[  930.164181][T14742]  ? kasan_save_stack+0x4d/0x60
[  930.164209][T14742]  ? call_rcu+0xee/0x8b0
[  930.164238][T14742]  ? fput_close_sync+0x11f/0x240
[  930.164257][T14742]  ? __x64_sys_close+0x7e/0x110
[  930.164279][T14742]  ? __pfx_get_futex_key+0x10/0x10
[  930.164321][T14742]  futex_wake+0x119/0x600
[  930.164351][T14742]  ? __pfx_futex_wake+0x10/0x10
[  930.164391][T14742]  do_futex+0x458/0x4e0
[  930.164409][T14742]  ? call_rcu+0x64d/0x8b0
[  930.164443][T14742]  ? __pfx_do_futex+0x10/0x10
[  930.164473][T14742]  __se_sys_futex+0x3a8/0x450
[  930.164497][T14742]  ? fput_close_sync+0x11f/0x240
[  930.164517][T14742]  ? __pfx___se_sys_futex+0x10/0x10
[  930.164547][T14742]  ? __x64_sys_futex+0x21/0xf0
[  930.164570][T14742]  do_syscall_64+0x166/0x520
[  930.164598][T14742]  ? trace_irq_disable+0x3b/0x140
[  930.164625][T14742]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  930.164646][T14742]  ? clear_bhb_loop+0x70/0xc0
[  930.164671][T14742]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  930.164691][T14742] RIP: 0033:0x7f8ec445e159
[  930.164710][T14742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  930.164728][T14742] RSP: 002b:00007f8ec26b60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  930.164752][T14742] RAX: ffffffffffffffda RBX: 00007f8ec46e5fa8 RCX: 00007f8ec445e159
[  930.164768][T14742] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8ec46e5fac
[  930.164782][T14742] RBP: 00007f8ec46e5fa0 R08: 3fffffffffffffff R09: 0000000000000000
[  930.164796][T14742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  930.164809][T14742] R13: 00007f8ec46e6038 R14: 00007fffb97d29a0 R15: 00007fffb97d2a88
[  930.164842][T14742]  </TASK>
[  930.292858][ T3317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  930.293034][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  930.429096][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  930.504425][T10621] usb 7-1: not running at top speed; connect to a high speed hub
[  930.504467][T10621] usb 7-1: New USB device found, idVendor=05c6, idProduct=9002, bcdDevice=95.b5
[  930.505696][T10621] usb 7-1: config 64 has an invalid interface number: 3 but max is 2
[  930.505720][T10621] usb 7-1: config 64 has an invalid interface number: 118 but max is 2
[  930.505754][T10621] usb 7-1: config 64 has an invalid interface number: 156 but max is 2
[  930.505776][T10621] usb 7-1: config 64 has no interface number 0
[  930.505793][T10621] usb 7-1: config 64 has no interface number 1
[  930.505810][T10621] usb 7-1: config 64 has no interface number 2
[  930.505867][T10621] usb 7-1: config 64 interface 118 has no altsetting 0
[  930.505886][T10621] usb 7-1: config 64 interface 156 has no altsetting 0
[  930.508440][T10621] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  930.508464][T10621] usb 7-1: Product: syz
[  930.508479][T10621] usb 7-1: Manufacturer: syz
[  930.508493][T10621] usb 7-1: SerialNumber: syz
[  930.942319][ T2915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  930.942530][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  930.946940][T10621] usb 7-1: USB disconnect, device number 35
[  931.219481][T14759] PKCS7: Unknown OID: [4] 0.0
[  931.219646][T14759] PKCS7: Only support pkcs7_signedData type
[  931.937878][ T1330] ieee802154 phy1 wpan1: encryption failed: -22
[  931.985850][ T5700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  932.014698][T14756] pimreg0: tun_chr_ioctl cmd 1074025677
[  932.058850][   T37] audit: type=1400 audit(1789462095.900:522): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":]" requested=w pid=14763 comm="syz.1.2818" daddr=::ffff:172.20.20.170 dest=20005
[  932.062584][T14756] pimreg0: linktype set to 23
[  932.406230][T14768] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2821'.
[  932.730329][T14783] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead
[  932.730357][T14783] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead
[  932.730387][T14783] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xd368 instead
[  932.730407][T14783] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xc14b instead
[  932.730438][T14783] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead
[  932.730456][T14783] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead
[  932.730474][T14783] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead
[  932.730494][T14783] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead
[  932.730524][T14783] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead
[  932.730555][T14783] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead
[  932.730572][T14783] jffs2: Further such events for this erase block will not be printed
[  932.730870][T14783] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead
[  932.730887][T14783] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead
[  932.730905][T14783] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xd368 instead
[  932.730924][T14783] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xc14b instead
[  932.730940][T14783] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead
[  932.730957][T14783] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead
[  932.730974][T14783] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead
[  932.730993][T14783] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead
[  932.731022][T14783] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead
[  932.731052][T14783] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead
[  932.731069][T14783] jffs2: Further such events for this erase block will not be printed
[  932.734493][T14783] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes
[  932.734509][T14783] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32
[  932.743631][ T5931] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  932.913512][ T5931] usb 1-1: Using ep0 maxpacket: 8
[  932.927272][ T5931] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  932.950447][ T5931] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  932.950476][ T5931] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  932.950500][ T5931] usb 1-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86
[  932.950525][ T5931] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024
[  932.950551][ T5931] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024
[  932.950574][ T5931] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  932.950614][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  933.080454][T14788] FAULT_INJECTION: forcing a failure.
[  933.080454][T14788] name failslab, interval 1, probability 0, space 0, times 0
[  933.080931][T14788] CPU: 0 UID: 0 PID: 14788 Comm: syz.1.2828 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  933.080962][T14788] Tainted: [L]=SOFTLOCKUP
[  933.080970][T14788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  933.080983][T14788] Call Trace:
[  933.080992][T14788]  <TASK>
[  933.081002][T14788]  dump_stack_lvl+0xe8/0x150
[  933.081041][T14788]  should_fail_ex+0x46b/0x600
[  933.081074][T14788]  should_failslab+0xa8/0x100
[  933.081109][T14788]  __kmalloc_noprof+0xfb/0x790
[  933.081136][T14788]  ? tomoyo_realpath_from_path+0xef/0x640
[  933.081165][T14788]  ? tomoyo_realpath_from_path+0xef/0x640
[  933.081202][T14788]  tomoyo_realpath_from_path+0xef/0x640
[  933.081241][T14788]  ? tomoyo_path2_perm+0x299/0x760
[  933.081267][T14788]  tomoyo_path2_perm+0x2c5/0x760
[  933.081299][T14788]  ? __pfx_tomoyo_path2_perm+0x10/0x10
[  933.081324][T14788]  ? __asan_memset+0x22/0x50
[  933.081349][T14788]  ? current_check_refer_path+0x411/0x1390
[  933.081416][T14788]  tomoyo_path_rename+0x14e/0x1b0
[  933.081437][T14788]  ? __pfx_tomoyo_path_rename+0x10/0x10
[  933.081468][T14788]  security_path_rename+0x248/0x460
[  933.081495][T14788]  filename_renameat2+0x4ba/0x9b0
[  933.081537][T14788]  ? __pfx_filename_renameat2+0x10/0x10
[  933.081585][T14788]  ? do_getname+0x151/0x250
[  933.081618][T14788]  __se_sys_rename+0x55/0x2c0
[  933.081640][T14788]  do_syscall_64+0x166/0x520
[  933.081669][T14788]  ? trace_irq_disable+0x3b/0x140
[  933.081694][T14788]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  933.081717][T14788]  ? clear_bhb_loop+0x70/0xc0
[  933.081743][T14788]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  933.081764][T14788] RIP: 0033:0x7f702be8e159
[  933.081783][T14788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  933.081821][T14788] RSP: 002b:00007f702a0e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[  933.081851][T14788] RAX: ffffffffffffffda RBX: 00007f702c115fa0 RCX: 00007f702be8e159
[  933.081867][T14788] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000200000000040
[  933.081882][T14788] RBP: 00007f702bf2503b R08: 0000000000000000 R09: 0000000000000000
[  933.081896][T14788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  933.081909][T14788] R13: 00007f702c116038 R14: 00007f702c115fa0 R15: 00007ffd2ce08898
[  933.081945][T14788]  </TASK>
[  933.106667][T14788] ERROR: Out of memory at tomoyo_realpath_from_path.
[  933.341744][T10621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  933.379854][ T5931] usb 1-1: GET_CAPABILITIES returned 0
[  933.379883][ T5931] usbtmc 1-1:16.0: can't read capabilities
[  933.639984][ T5931] usb 1-1: USB disconnect, device number 41
[  933.777384][T14801] kernel read not supported for file events/kvm/kvm_hv_stimer_cleanup/trigger (pid: 14801 comm: syz.7.2833)
[  933.998366][T14809] ieee802154 phy1 wpan1: encryption failed: -22
[  934.023963][T14811] netlink: 'syz.1.2838': attribute type 1 has an invalid length.
[  934.477332][ T5682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  935.117043][T14838] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2846'.
[  935.413910][T11034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  935.440181][ T3317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  935.441239][T11034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  935.470856][T11034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  935.770787][T10621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  935.967040][T14846] input: syz0 as /devices/virtual/input/input87
[  936.672568][ T2927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  936.672761][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  936.697473][   T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  936.779986][T14849] FAULT_INJECTION: forcing a failure.
[  936.779986][T14849] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  936.780036][T14849] CPU: 0 UID: 0 PID: 14849 Comm: syz.0.2850 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  936.780067][T14849] Tainted: [L]=SOFTLOCKUP
[  936.780075][T14849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  936.780088][T14849] Call Trace:
[  936.780097][T14849]  <TASK>
[  936.780107][T14849]  dump_stack_lvl+0xe8/0x150
[  936.780142][T14849]  should_fail_ex+0x46b/0x600
[  936.780176][T14849]  strncpy_from_user+0x36/0x2c0
[  936.780204][T14849]  getname_long+0x88/0x130
[  936.780228][T14849]  do_getname+0x181/0x250
[  936.780263][T14849]  __se_sys_symlink+0x3a/0x2b0
[  936.780296][T14849]  do_syscall_64+0x166/0x520
[  936.780325][T14849]  ? trace_irq_disable+0x3b/0x140
[  936.780352][T14849]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  936.780374][T14849]  ? clear_bhb_loop+0x70/0xc0
[  936.780404][T14849]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  936.780425][T14849] RIP: 0033:0x7f8ec445e159
[  936.780444][T14849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  936.780463][T14849] RSP: 002b:00007f8ec26b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058
[  936.780491][T14849] RAX: ffffffffffffffda RBX: 00007f8ec46e5fa0 RCX: 00007f8ec445e159
[  936.780507][T14849] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000000
[  936.780522][T14849] RBP: 00007f8ec44f503b R08: 0000000000000000 R09: 0000000000000000
[  936.780536][T14849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  936.780550][T14849] R13: 00007f8ec46e6038 R14: 00007f8ec46e5fa0 R15: 00007fffb97d2a88
[  936.780584][T14849]  </TASK>
[  937.599909][T14870] program syz.6.2858 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  937.661033][T14859] tun0: tun_chr_ioctl cmd 1074025675
[  937.661058][T14859] tun0: persist enabled
[  937.662839][T14862] tun0: tun_chr_ioctl cmd 1074025675
[  937.662859][T14862] tun0: persist enabled
[  937.803826][T14875] FAULT_INJECTION: forcing a failure.
[  937.803826][T14875] name failslab, interval 1, probability 0, space 0, times 0
[  937.803866][T14875] CPU: 0 UID: 0 PID: 14875 Comm: syz.6.2860 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  937.803906][T14875] Tainted: [L]=SOFTLOCKUP
[  937.803915][T14875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  937.803928][T14875] Call Trace:
[  937.803936][T14875]  <TASK>
[  937.803947][T14875]  dump_stack_lvl+0xe8/0x150
[  937.803986][T14875]  should_fail_ex+0x46b/0x600
[  937.804018][T14875]  should_failslab+0xa8/0x100
[  937.804054][T14875]  __kmalloc_noprof+0xfb/0x790
[  937.804081][T14875]  ? security_key_alloc+0x51/0x390
[  937.804106][T14875]  ? security_key_alloc+0x51/0x390
[  937.804146][T14875]  security_key_alloc+0x51/0x390
[  937.804176][T14875]  key_alloc+0x7fd/0xfe0
[  937.804217][T14875]  keyring_alloc+0x45/0xb0
[  937.804242][T14875]  join_session_keyring+0x13b/0x440
[  937.804275][T14875]  lookup_user_key+0x4e6/0x1150
[  937.804303][T14875]  ? __futex_wait+0x35a/0x410
[  937.804331][T14875]  ? __pfx_lookup_user_key+0x10/0x10
[  937.804362][T14875]  ? __pfx_lookup_user_key_possessed+0x10/0x10
[  937.804400][T14875]  ? try_to_wake_up+0x84b/0x1430
[  937.804426][T14875]  keyctl_get_persistent+0x24e/0x7a0
[  937.804453][T14875]  ? __pfx_keyctl_get_persistent+0x10/0x10
[  937.804473][T14875]  ? futex_wait+0x2a2/0x390
[  937.804500][T14875]  ? __pfx_futex_wait+0x10/0x10
[  937.804540][T14875]  __se_sys_keyctl+0x797/0x9d0
[  937.804568][T14875]  ? __pfx___se_sys_keyctl+0x10/0x10
[  937.804597][T14875]  ? __pfx_do_futex+0x10/0x10
[  937.804617][T14875]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  937.804648][T14875]  ? __se_sys_futex+0x3a8/0x450
[  937.804676][T14875]  ? rcu_is_watching+0x16/0xb0
[  937.804714][T14875]  ? __x64_sys_keyctl+0x20/0xc0
[  937.804743][T14875]  do_syscall_64+0x166/0x520
[  937.804769][T14875]  ? trace_irq_disable+0x3b/0x140
[  937.804795][T14875]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  937.804815][T14875]  ? clear_bhb_loop+0x70/0xc0
[  937.804840][T14875]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  937.804861][T14875] RIP: 0033:0x7effd827e159
[  937.804890][T14875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  937.804910][T14875] RSP: 002b:00007effd64d6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[  937.804933][T14875] RAX: ffffffffffffffda RBX: 00007effd8505fa0 RCX: 00007effd827e159
[  937.804949][T14875] RDX: fffffffffffffffd RSI: ffffffffffffffff RDI: 0000000000000016
[  937.804962][T14875] RBP: 00007effd831503b R08: 0000000000000000 R09: 0000000000000000
[  937.804975][T14875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  937.804988][T14875] R13: 00007effd8506038 R14: 00007effd8505fa0 R15: 00007ffc94437718
[  937.805020][T14875]  </TASK>
[  938.472540][T11034] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  938.542396][ T3577] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  938.642648][T11034] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  938.643924][T11034] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  938.643955][T11034] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  938.643989][T11034] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  938.650922][T11034] usb 6-1: config 0 descriptor??
[  938.692912][ T3577] usb 1-1: Using ep0 maxpacket: 16
[  938.696339][ T3577] usb 1-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00
[  938.712280][ T3577] usb 1-1: config 0 interface 0 has no altsetting 0
[  938.712317][ T3577] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  938.762293][ T5931] usb 8-1: new high-speed USB device number 31 using dummy_hcd
[  938.770571][ T3577] usb 1-1: config 0 descriptor??
[  938.915103][ T5931] usb 8-1: Using ep0 maxpacket: 16
[  938.918723][ T5931] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  938.949584][ T5931] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  938.949611][ T5931] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  938.963600][T11034] usbhid 6-1:0.0: can't add hid device: -71
[  938.963892][T11034] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  939.012358][   T36] net_ratelimit: 3 callbacks suppressed
[  939.012377][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  939.017874][ T5931] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  939.018557][ T5931] usb 8-1: Product: syz
[  939.018577][ T5931] usb 8-1: Manufacturer: syz
[  939.019498][ T5931] usb 8-1: SerialNumber: syz
[  939.044093][T11034] usb 6-1: USB disconnect, device number 25
[  939.255311][ T3577] elo 0003:04E7:0009.0022: ignoring exceeding usage max
[  939.256187][ T3577] elo 0003:04E7:0009.0022: unknown main item tag 0x1
[  939.256223][ T3577] elo 0003:04E7:0009.0022: unknown main item tag 0x0
[  939.256250][ T3577] elo 0003:04E7:0009.0022: unknown main item tag 0x0
[  939.256276][ T3577] elo 0003:04E7:0009.0022: unknown main item tag 0x0
[  939.256302][ T3577] elo 0003:04E7:0009.0022: unknown main item tag 0x0
[  939.256330][ T3577] elo 0003:04E7:0009.0022: unknown main item tag 0x0
[  939.256355][ T3577] elo 0003:04E7:0009.0022: unknown main item tag 0x0
[  939.256381][ T3577] elo 0003:04E7:0009.0022: unknown main item tag 0x0
[  939.256399][ T3577] elo 0003:04E7:0009.0022: unknown main item tag 0x0
[  939.256415][ T3577] elo 0003:04E7:0009.0022: unknown main item tag 0x0
[  939.256430][ T3577] elo 0003:04E7:0009.0022: item fetching failed at offset 36/40
[  939.257755][ T3577] elo 0003:04E7:0009.0022: parse failed
[  939.273988][ T3577] elo 0003:04E7:0009.0022: probe with driver elo failed with error -22
[  939.285263][ T5931] usb 8-1: 0:2 : does not exist
[  939.455261][ T3577] usb 1-1: USB disconnect, device number 42
[  939.465774][ T5931] usb 8-1: 5:0: failed to get current value for ch 0 (-22)
[  939.542237][T11034] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  939.637631][ T5931] usb 8-1: USB disconnect, device number 31
[  939.703107][T11034] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[  939.705448][T11034] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  939.705480][T11034] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  939.705518][T11034] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  939.909167][T11034] usb 6-1: config 0 descriptor??
[  940.010355][T14924] PKCS7: Unknown OID: [4] 0.0
[  940.010509][T14924] PKCS7: Only support pkcs7_signedData type
[  940.799235][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  941.004835][T11034] aiptek 6-1:0.0: Aiptek using 400 ms programming speed
[  941.236748][T14932] PKCS7: Unknown OID: [4] 0.0
[  941.236766][T14932] PKCS7: Only support pkcs7_signedData type
[  941.597173][T11034] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input88
[  941.704517][T11034] input: failed to attach handler kbd to device input88, error: -5
[  941.812709][T10621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  941.820638][T14949] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2886'.
[  941.854840][T14949] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2886'.
[  941.913721][T11034] usb 6-1: USB disconnect, device number 26
[  942.317145][T14957] Invalid argument reading file caps for ./file0
[  942.452742][ T8640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  942.452937][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  942.453863][ T2927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  942.454036][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  942.886674][T14971] FAULT_INJECTION: forcing a failure.
[  942.886674][T14971] name failslab, interval 1, probability 0, space 0, times 0
[  942.886714][T14971] CPU: 1 UID: 0 PID: 14971 Comm: syz.7.2898 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  942.886744][T14971] Tainted: [L]=SOFTLOCKUP
[  942.886752][T14971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  942.886765][T14971] Call Trace:
[  942.886773][T14971]  <TASK>
[  942.886784][T14971]  dump_stack_lvl+0xe8/0x150
[  942.886821][T14971]  should_fail_ex+0x46b/0x600
[  942.886854][T14971]  should_failslab+0xa8/0x100
[  942.886886][T14971]  ? prepare_creds+0x30/0x820
[  942.886911][T14971]  kmem_cache_alloc_noprof+0x9e/0x690
[  942.886938][T14971]  ? prepare_creds+0x30/0x820
[  942.886967][T14971]  prepare_creds+0x30/0x820
[  942.886995][T14971]  cap_task_prctl+0x25a/0xaa0
[  942.887027][T14971]  security_task_prctl+0xf6/0x190
[  942.887065][T14971]  __se_sys_prctl+0xbf/0x1910
[  942.887094][T14971]  ? __pfx___se_sys_prctl+0x10/0x10
[  942.887124][T14971]  ? __x64_sys_prctl+0x20/0xc0
[  942.887149][T14971]  do_syscall_64+0x166/0x520
[  942.887177][T14971]  ? trace_irq_disable+0x3b/0x140
[  942.887203][T14971]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  942.887225][T14971]  ? clear_bhb_loop+0x70/0xc0
[  942.887250][T14971]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  942.887271][T14971] RIP: 0033:0x7fb660d6e159
[  942.887291][T14971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  942.887310][T14971] RSP: 002b:00007fb65efc6028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d
[  942.887333][T14971] RAX: ffffffffffffffda RBX: 00007fb660ff5fa0 RCX: 00007fb660d6e159
[  942.887350][T14971] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000018
[  942.887363][T14971] RBP: 00007fb660e0503b R08: 0000000000000000 R09: 0000000000000000
[  942.887376][T14971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  942.887389][T14971] R13: 00007fb660ff6038 R14: 00007fb660ff5fa0 R15: 00007fff9ec02f88
[  942.887423][T14971]  </TASK>
[  943.047480][T14965] PKCS7: Unknown OID: [4] 0.0
[  943.047512][T14965] PKCS7: Only support pkcs7_signedData type
[  943.182184][T10621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  943.321660][   T36] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  943.492993][   T36] usb 2-1: Using ep0 maxpacket: 16
[  943.494454][   T36] usb 2-1: New USB device found, idVendor=044f, idProduct=b300, bcdDevice= 0.00
[  943.496054][   T36] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0
[  943.496080][   T36] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  943.496105][   T36] usb 2-1: config 0 interface 0 has no altsetting 0
[  943.496134][   T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  943.563514][   T36] usb 2-1: config 0 descriptor??
[  943.874053][   T37] audit: type=1400 audit(1789462107.720:523): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":]" requested=w pid=14986 comm="syz.5.2903" dest=20002
[  944.067737][   T36] thrustmaster 0003:044F:B300.0023: can't find FF field in output reports
[  944.081210][   T36] thrustmaster 0003:044F:B300.0023: hidraw0: USB HID v0.00 Joystick [HID 044f:b300] on usb-dummy_hcd.1-1/input0
[  944.221749][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  944.266046][ T5682] usb 2-1: USB disconnect, device number 41
[  944.508558][T15003] fido_id[15003]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory
[  944.676957][T15005] PKCS7: Unknown OID: [4] 0.0
[  944.676976][T15005] PKCS7: Only support pkcs7_signedData type
[  945.257839][ T3403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  945.261697][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  945.263419][T10621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  945.708642][T15015] FAULT_INJECTION: forcing a failure.
[  945.708642][T15015] name failslab, interval 1, probability 0, space 0, times 0
[  945.708684][T15015] CPU: 1 UID: 0 PID: 15015 Comm: syz.6.2911 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  945.708714][T15015] Tainted: [L]=SOFTLOCKUP
[  945.708720][T15015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  945.708732][T15015] Call Trace:
[  945.708739][T15015]  <TASK>
[  945.708748][T15015]  dump_stack_lvl+0xe8/0x150
[  945.708785][T15015]  should_fail_ex+0x46b/0x600
[  945.708819][T15015]  should_failslab+0xa8/0x100
[  945.708850][T15015]  ? alloc_empty_file+0x5b/0x1d0
[  945.708879][T15015]  kmem_cache_alloc_noprof+0x9e/0x690
[  945.708907][T15015]  ? alloc_empty_file+0x5b/0x1d0
[  945.708944][T15015]  alloc_empty_file+0x5b/0x1d0
[  945.708974][T15015]  dentry_open+0x44/0xa0
[  945.709005][T15015]  open_detached_copy+0x3f3/0x540
[  945.709037][T15015]  vfs_open_tree+0x35d/0x3d0
[  945.709065][T15015]  ? __pfx_vfs_open_tree+0x10/0x10
[  945.709103][T15015]  __x64_sys_open_tree+0x96/0x110
[  945.709133][T15015]  do_syscall_64+0x166/0x520
[  945.709161][T15015]  ? trace_irq_disable+0x3b/0x140
[  945.709201][T15015]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  945.709222][T15015]  ? clear_bhb_loop+0x70/0xc0
[  945.709247][T15015]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  945.709268][T15015] RIP: 0033:0x7effd827e159
[  945.709287][T15015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  945.709306][T15015] RSP: 002b:00007effd64d6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac
[  945.709330][T15015] RAX: ffffffffffffffda RBX: 00007effd8505fa0 RCX: 00007effd827e159
[  945.709346][T15015] RDX: 0000000000089901 RSI: 0000200000000180 RDI: 0000000000000003
[  945.709361][T15015] RBP: 00007effd831503b R08: 0000000000000000 R09: 0000000000000000
[  945.709376][T15015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  945.709389][T15015] R13: 00007effd8506038 R14: 00007effd8505fa0 R15: 00007ffc94437718
[  945.709425][T15015]  </TASK>
[  946.161987][   T36] usb 1-1: new full-speed USB device number 43 using dummy_hcd
[  946.273099][ T3403] IPVS: starting estimator thread 0...
[  946.285537][T15027] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  946.297500][ T5682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  946.316309][   T36] usb 1-1: unable to get BOS descriptor or descriptor too short
[  946.317806][   T36] usb 1-1: not running at top speed; connect to a high speed hub
[  946.317843][   T36] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  946.353788][   T36] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4
[  946.373786][   T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  946.373814][   T36] usb 1-1: Product: syz
[  946.373829][   T36] usb 1-1: Manufacturer: syz
[  946.373845][   T36] usb 1-1: SerialNumber: syz
[  946.381685][T15032] IPVS: using max 10 ests per chain, 24000 per kthread
[  946.699982][   T36] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  946.880882][   T36] usb 1-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  946.880912][   T36] usb 1-1: found format II with max.bitrate = 4, frame size=7372
[  946.906281][ T3577] usb 7-1: new high-speed USB device number 36 using dummy_hcd
[  947.092253][ T3577] usb 7-1: Using ep0 maxpacket: 16
[  947.093392][ T3577] usb 7-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00
[  947.094721][ T3577] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  947.094769][ T3577] usb 7-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  947.094798][ T3577] usb 7-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0
[  947.094821][ T3577] usb 7-1: config 0 interface 0 has no altsetting 0
[  947.094850][ T3577] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  947.101275][ T3577] usb 7-1: config 0 descriptor??
[  947.292332][   T36] usb 1-1: invalid uac2 rates
[  947.292529][   T36] usb 1-1: invalid uac2 rates
[  947.298743][   T36] usb 1-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  947.298769][   T36] usb 1-1: found format II with max.bitrate = 4, frame size=7372
[  947.361822][ T5700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  947.493477][   T36] usb 1-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0)
[  947.612203][   T36] usb 1-1: USB disconnect, device number 43
[  947.642999][ T3577] glorious 0003:258A:0033.0024: unknown main item tag 0x0
[  947.643041][ T3577] glorious 0003:258A:0033.0024: unknown main item tag 0x0
[  947.643066][ T3577] glorious 0003:258A:0033.0024: item fetching failed at offset 2/40
[  947.643835][ T3577] glorious 0003:258A:0033.0024: probe with driver glorious failed with error -22
[  947.870585][T15048] Invalid argument reading file caps for ./file0
[  948.015230][ T5682] usb 7-1: USB disconnect, device number 36
[  948.104939][T15051] PKCS7: Unknown OID: [4] 0.0
[  948.104958][T15051] PKCS7: Only support pkcs7_signedData type
[  948.216256][ T5799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  948.216628][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  948.385895][T10621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  948.528162][T10001] udevd[10001]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  948.998347][T15062] FAULT_INJECTION: forcing a failure.
[  948.998347][T15062] name failslab, interval 1, probability 0, space 0, times 0
[  948.998400][T15062] CPU: 0 UID: 0 PID: 15062 Comm: syz.5.2930 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  948.998431][T15062] Tainted: [L]=SOFTLOCKUP
[  948.998440][T15062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  948.998453][T15062] Call Trace:
[  948.998462][T15062]  <TASK>
[  948.998472][T15062]  dump_stack_lvl+0xe8/0x150
[  948.998509][T15062]  should_fail_ex+0x46b/0x600
[  948.998542][T15062]  should_failslab+0xa8/0x100
[  948.998572][T15062]  ? do_getname+0x2e/0x250
[  948.998602][T15062]  kmem_cache_alloc_noprof+0x9e/0x690
[  948.998629][T15062]  ? do_getname+0x2e/0x250
[  948.998663][T15062]  do_getname+0x2e/0x250
[  948.998693][T15062]  ? getname_flags+0x11/0x20
[  948.998724][T15062]  __se_sys_quotactl+0x1f1/0x9f0
[  948.998778][T15062]  ? __se_sys_futex+0x3a8/0x450
[  948.998804][T15062]  ? __pfx___se_sys_quotactl+0x10/0x10
[  948.998833][T15062]  ? rcu_is_watching+0x16/0xb0
[  948.998873][T15062]  do_syscall_64+0x166/0x520
[  948.998909][T15062]  ? trace_irq_disable+0x3b/0x140
[  948.998935][T15062]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  948.998957][T15062]  ? clear_bhb_loop+0x70/0xc0
[  948.998982][T15062]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  948.999002][T15062] RIP: 0033:0x7f7cae70e159
[  948.999021][T15062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  948.999039][T15062] RSP: 002b:00007f7cac966028 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3
[  948.999062][T15062] RAX: ffffffffffffffda RBX: 00007f7cae995fa0 RCX: 00007f7cae70e159
[  948.999078][T15062] RDX: 000000000000ee00 RSI: 0000200000000040 RDI: ffffffff80000501
[  948.999093][T15062] RBP: 00007f7cae7a503b R08: 0000000000000000 R09: 0000000000000000
[  948.999107][T15062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  948.999119][T15062] R13: 00007f7cae996038 R14: 00007f7cae995fa0 R15: 00007fff9612d4a8
[  948.999151][T15062]  </TASK>
[  949.044001][T15066] FAULT_INJECTION: forcing a failure.
[  949.044001][T15066] name failslab, interval 1, probability 0, space 0, times 0
[  949.044050][T15066] CPU: 1 UID: 0 PID: 15066 Comm: syz.1.2932 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  949.044077][T15066] Tainted: [L]=SOFTLOCKUP
[  949.044084][T15066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  949.044097][T15066] Call Trace:
[  949.044105][T15066]  <TASK>
[  949.044114][T15066]  dump_stack_lvl+0xe8/0x150
[  949.044149][T15066]  should_fail_ex+0x46b/0x600
[  949.044180][T15066]  should_failslab+0xa8/0x100
[  949.044210][T15066]  ? create_new_namespaces+0x33/0x6b0
[  949.044237][T15066]  kmem_cache_alloc_noprof+0x9e/0x690
[  949.044263][T15066]  ? create_new_namespaces+0x33/0x6b0
[  949.044296][T15066]  create_new_namespaces+0x33/0x6b0
[  949.044323][T15066]  ? bpf_lsm_capable+0x9/0x20
[  949.044346][T15066]  ? security_capable+0x7e/0x2c0
[  949.044381][T15066]  unshare_nsproxy_namespaces+0x149/0x190
[  949.044418][T15066]  ksys_unshare+0x5a7/0x950
[  949.044454][T15066]  ? __pfx_ksys_unshare+0x10/0x10
[  949.044483][T15066]  ? rcu_is_watching+0x16/0xb0
[  949.044524][T15066]  __x64_sys_unshare+0x38/0x50
[  949.044552][T15066]  do_syscall_64+0x166/0x520
[  949.044581][T15066]  ? trace_irq_disable+0x3b/0x140
[  949.044606][T15066]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  949.044625][T15066]  ? clear_bhb_loop+0x70/0xc0
[  949.044649][T15066]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  949.044668][T15066] RIP: 0033:0x7f702be8e159
[  949.044687][T15066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  949.044704][T15066] RSP: 002b:00007f702a0e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  949.044725][T15066] RAX: ffffffffffffffda RBX: 00007f702c115fa0 RCX: 00007f702be8e159
[  949.044740][T15066] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000006020400
[  949.044753][T15066] RBP: 00007f702bf2503b R08: 0000000000000000 R09: 0000000000000000
[  949.044766][T15066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  949.044778][T15066] R13: 00007f702c116038 R14: 00007f702c115fa0 R15: 00007ffd2ce08898
[  949.044810][T15066]  </TASK>
[  949.412488][ T5682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  949.472569][   T36] usb 8-1: new high-speed USB device number 32 using dummy_hcd
[  949.495899][ T8774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  949.544513][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  949.622873][   T36] usb 8-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00
[  949.630832][   T36] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  949.630902][   T36] usb 8-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  949.660485][   T36] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  949.660511][   T36] usb 8-1: Product: syz
[  949.660526][   T36] usb 8-1: Manufacturer: syz
[  949.660540][   T36] usb 8-1: SerialNumber: syz
[  949.780052][   T36] usb-storage 8-1:1.0: USB Mass Storage device detected
[  949.799411][   T36] usb-storage 8-1:1.0: Quirks match for vid 174c pid 55aa: 400000
[  950.025251][   T36] scsi host1: usb-storage 8-1:1.0
[  950.605628][T15093] PKCS7: Unknown OID: [4] 0.0
[  950.605648][T15093] PKCS7: Only support pkcs7_signedData type
[  950.650316][ T8565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  950.685897][T15087] FAULT_INJECTION: forcing a failure.
[  950.685897][T15087] name failslab, interval 1, probability 0, space 0, times 0
[  950.685936][T15087] CPU: 0 UID: 0 PID: 15087 Comm: syz.1.2940 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  950.685964][T15087] Tainted: [L]=SOFTLOCKUP
[  950.685975][T15087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  950.685988][T15087] Call Trace:
[  950.685997][T15087]  <TASK>
[  950.686007][T15087]  dump_stack_lvl+0xe8/0x150
[  950.686043][T15087]  should_fail_ex+0x46b/0x600
[  950.686075][T15087]  should_failslab+0xa8/0x100
[  950.686106][T15087]  __kmalloc_cache_noprof+0xa1/0x680
[  950.686133][T15087]  ? alloc_fdtable+0xc0/0x2c0
[  950.686150][T15087]  ? alloc_fdtable+0xc0/0x2c0
[  950.686170][T15087]  ? rt_spin_unlock+0x159/0x200
[  950.686195][T15087]  alloc_fdtable+0xc0/0x2c0
[  950.686213][T15087]  ? dup_fd+0x818/0xb20
[  950.686243][T15087]  dup_fd+0x821/0xb20
[  950.686289][T15087]  __se_sys_close_range+0x1c1/0x910
[  950.686320][T15087]  ? __pfx___se_sys_close_range+0x10/0x10
[  950.686354][T15087]  do_syscall_64+0x166/0x520
[  950.686379][T15087]  ? trace_irq_disable+0x3b/0x140
[  950.686404][T15087]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  950.686423][T15087]  ? clear_bhb_loop+0x70/0xc0
[  950.686447][T15087]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  950.686466][T15087] RIP: 0033:0x7f702be8e159
[  950.686485][T15087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  950.686502][T15087] RSP: 002b:00007f702a0e6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  950.686523][T15087] RAX: ffffffffffffffda RBX: 00007f702c115fa0 RCX: 00007f702be8e159
[  950.686539][T15087] RDX: 0000000000000002 RSI: ffffffffffffffff RDI: ffffffffffffffff
[  950.686554][T15087] RBP: 00007f702bf2503b R08: 0000000000000000 R09: 0000000000000000
[  950.686567][T15087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  950.686581][T15087] R13: 00007f702c116038 R14: 00007f702c115fa0 R15: 00007ffd2ce08898
[  950.686614][T15087]  </TASK>
[  950.900176][ T8640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  950.923738][ T3577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  950.958959][   T36] usb 8-1: USB disconnect, device number 32
[  951.018196][ T5682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  951.245823][T15103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  951.288708][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  951.418625][   T37] audit: type=1400 audit(1789462115.260:524): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":]" requested=w pid=15105 comm="syz.6.2944" daddr=::ffff:0.0.0.0 dest=20010
[  952.240210][T15117] input: syz0 as /devices/virtual/input/input91
[  952.422621][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  952.895795][T15121] input: syz1 as /devices/virtual/input/input92
[  952.979633][T15124] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2951'.
[  953.593381][T15122] binder: 15119:15122 ioctl c0306201 200000001a80 returned -14
[  953.934470][T15145] input: syz1 as /devices/virtual/input/input93
[  954.162260][ T5931] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  954.313271][ T5931] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  954.320093][ T5931] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  954.320120][ T5931] usb 6-1: Product: syz
[  954.320135][ T5931] usb 6-1: Manufacturer: syz
[  954.320148][ T5931] usb 6-1: SerialNumber: syz
[  954.611896][ T8565] net_ratelimit: 3 callbacks suppressed
[  954.611915][ T8565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  954.613276][ T5799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  954.613455][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  954.614352][ T2915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  955.543803][T15163] input: syz0 as /devices/virtual/input/input94
[  955.625222][ T5682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  955.627079][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  955.787422][ T8565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  955.972148][ T2915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  955.987904][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  955.991160][ T8565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  956.075832][T15176] ima: policy update failed
[  956.075974][   T37] audit: type=1802 audit(1789462119.920:525): pid=15176 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.7.2972" res=0 errno=0
[  956.200077][T15180] netlink: 'syz.1.2973': attribute type 11 has an invalid length.
[  956.780201][ T3577] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  957.011131][ T5682] usb 6-1: USB disconnect, device number 27
[  957.039572][ T3577] usb 6-1: ath9k_htc: Unable to allocate URBs
[  957.117077][ T5682] usb 6-1: ath9k_htc: USB layer deinitialized
[  957.695802][T15206] input: syz0 as /devices/virtual/input/input95
[  958.675334][T15214] input: syz0 as /devices/virtual/input/input96
[  958.725915][T15218] netlink: 'syz.1.2988': attribute type 1 has an invalid length.
[  958.725930][T15218] netlink: 192 bytes leftover after parsing attributes in process `syz.1.2988'.
[  958.725950][T15218] netlink: 33 bytes leftover after parsing attributes in process `syz.1.2988'.
[  958.752104][T15219] FAULT_INJECTION: forcing a failure.
[  958.752104][T15219] name fail_futex, interval 1, probability 0, space 0, times 0
[  958.752142][T15219] CPU: 1 UID: 0 PID: 15219 Comm: syz.6.2987 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  958.752170][T15219] Tainted: [L]=SOFTLOCKUP
[  958.752178][T15219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  958.752191][T15219] Call Trace:
[  958.752200][T15219]  <TASK>
[  958.752210][T15219]  dump_stack_lvl+0xe8/0x150
[  958.752246][T15219]  should_fail_ex+0x46b/0x600
[  958.752278][T15219]  get_futex_key+0x8e2/0x1580
[  958.752318][T15219]  ? __pfx_get_futex_key+0x10/0x10
[  958.752344][T15219]  ? futex_unqueue+0x22/0x240
[  958.752373][T15219]  ? __futex_wait+0x1e3/0x410
[  958.752404][T15219]  futex_requeue+0x2a0/0x1ac0
[  958.752442][T15219]  ? try_to_wake_up+0x84b/0x1430
[  958.752462][T15219]  ? __pfx_futex_requeue+0x10/0x10
[  958.752494][T15219]  ? futex_wait+0x2a2/0x390
[  958.752519][T15219]  ? __pfx_futex_wait+0x10/0x10
[  958.752566][T15219]  do_futex+0x41b/0x4e0
[  958.752593][T15219]  ? __pfx_do_futex+0x10/0x10
[  958.752611][T15219]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  958.752642][T15219]  __se_sys_futex+0x3a8/0x450
[  958.752668][T15219]  ? __pfx___se_sys_futex+0x10/0x10
[  958.752687][T15219]  ? rcu_is_watching+0x16/0xb0
[  958.752722][T15219]  ? __x64_sys_futex+0x21/0xf0
[  958.752744][T15219]  do_syscall_64+0x166/0x520
[  958.752769][T15219]  ? trace_irq_disable+0x3b/0x140
[  958.752793][T15219]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  958.752814][T15219]  ? clear_bhb_loop+0x70/0xc0
[  958.752838][T15219]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  958.752857][T15219] RIP: 0033:0x7effd827e159
[  958.752875][T15219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  958.752893][T15219] RSP: 002b:00007effd64d6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  958.752915][T15219] RAX: ffffffffffffffda RBX: 00007effd8505fa0 RCX: 00007effd827e159
[  958.752931][T15219] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000200000000200
[  958.752944][T15219] RBP: 00007effd831503b R08: 0000000000000000 R09: 0000000034fffffd
[  958.752958][T15219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  958.752970][T15219] R13: 00007effd8506038 R14: 00007effd8505fa0 R15: 00007ffc94437718
[  958.753001][T15219]  </TASK>
[  958.852124][    T9] usb 8-1: new high-speed USB device number 33 using dummy_hcd
[  959.183045][    T9] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  959.191349][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  959.191376][    T9] usb 8-1: Product: syz
[  959.191390][    T9] usb 8-1: Manufacturer: syz
[  959.191406][    T9] usb 8-1: SerialNumber: syz
[  959.240197][    T9] usb 8-1: config 0 descriptor??
[  959.309672][T15231] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2993'.
[  959.451892][ T5682] usb 7-1: new high-speed USB device number 37 using dummy_hcd
[  959.676352][ T1161] net_ratelimit: 5 callbacks suppressed
[  959.676374][ T1161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  959.676952][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  959.791582][ T5682] usb 7-1: Using ep0 maxpacket: 16
[  959.793219][ T5682] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  959.794991][ T5682] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  959.795020][ T5682] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  959.795043][ T5682] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  959.795070][ T5682] usb 7-1: config 0 interface 0 has no altsetting 0
[  959.795103][ T5682] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  959.805627][ T5682] usb 7-1: config 0 descriptor??
[  959.835112][T15239] PKCS7: Unknown OID: [4] 0.0
[  959.835126][T15239] PKCS7: Only support pkcs7_signedData type
[  959.917851][    T9] usb 8-1: Firmware: major: 58, minor: 44, hardware type: UNKNOWN (24)
[  959.989465][T15241] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2996'.
[  960.123467][    T9] usb 8-1: failed to fetch extended address, random address set
[  960.123511][    T9] usb 8-1: atusb_probe: initialization failed, error = -524
[  960.125793][    T9] atusb 8-1:0.0: probe with driver atusb failed with error -524
[  960.163786][    T9] usb 8-1: USB disconnect, device number 33
[  960.323174][ T5682] hid (null): report_id 34376 is invalid
[  960.323212][ T5682] hid (null): invalid report_size 29285
[  960.323338][ T5682] hid (null): invalid report_size 29285
[  960.323375][ T5682] hid (null): report_id 34376 is invalid
[  960.323405][ T5682] hid (null): report_id 0 is invalid
[  960.323422][ T5682] hid (null): global environment stack underflow
[  960.323437][ T5682] hid (null): unknown global tag 0xc
[  960.323562][ T5682] hid (null): unknown global tag 0xe
[  960.323569][ T5682] hid (null): unknown global tag 0xc
[  960.323592][ T5682] hid (null): unknown global tag 0xc
[  960.571567][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  960.586377][    T9] usb 7-1: USB disconnect, device number 37
[  960.840456][T15259] FAULT_INJECTION: forcing a failure.
[  960.840456][T15259] name failslab, interval 1, probability 0, space 0, times 0
[  960.840495][T15259] CPU: 1 UID: 0 PID: 15259 Comm: syz.5.3004 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  960.840524][T15259] Tainted: [L]=SOFTLOCKUP
[  960.840532][T15259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  960.840544][T15259] Call Trace:
[  960.840553][T15259]  <TASK>
[  960.840562][T15259]  dump_stack_lvl+0xe8/0x150
[  960.840598][T15259]  should_fail_ex+0x46b/0x600
[  960.840629][T15259]  should_failslab+0xa8/0x100
[  960.840660][T15259]  __kmalloc_cache_noprof+0xa1/0x680
[  960.840687][T15259]  ? hugetlbfs_init_fs_context+0x53/0x370
[  960.840748][T15259]  ? hugetlbfs_init_fs_context+0x53/0x370
[  960.840778][T15259]  hugetlbfs_init_fs_context+0x53/0x370
[  960.840803][T15259]  alloc_fs_context+0x9a3/0xd00
[  960.840838][T15259]  __se_sys_fsopen+0xa5/0x2c0
[  960.840867][T15259]  do_syscall_64+0x166/0x520
[  960.840890][T15259]  ? trace_irq_disable+0x3b/0x140
[  960.840909][T15259]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  960.840926][T15259]  ? clear_bhb_loop+0x70/0xc0
[  960.840946][T15259]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  960.840961][T15259] RIP: 0033:0x7f7cae70e159
[  960.840976][T15259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  960.840990][T15259] RSP: 002b:00007f7cac966028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae
[  960.841010][T15259] RAX: ffffffffffffffda RBX: 00007f7cae995fa0 RCX: 00007f7cae70e159
[  960.841022][T15259] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000040
[  960.841032][T15259] RBP: 00007f7cae7a503b R08: 0000000000000000 R09: 0000000000000000
[  960.841043][T15259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  960.841053][T15259] R13: 00007f7cae996038 R14: 00007f7cae995fa0 R15: 00007fff9612d4a8
[  960.841078][T15259]  </TASK>
[  961.575310][T10621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  961.600413][T15283] ieee802154 phy1 wpan1: encryption failed: -22
[  961.603904][T15284] netlink: 5 bytes leftover after parsing attributes in process `syz.5.3013'.
[  961.617799][T15282] PKCS7: Unknown OID: [4] 0.0
[  961.617813][T15282] PKCS7: Only support pkcs7_signedData type
[  962.392241][T15304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  962.392720][T15304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  962.393277][T15304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  962.393954][T15304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  962.394328][T15304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  962.395842][T15304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  964.424270][T15323] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3029'.
[  964.984526][T15329] input: syz0 as /devices/virtual/input/input97
[  965.579968][ T2915] net_ratelimit: 4 callbacks suppressed
[  965.579988][ T2915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  965.580272][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  965.705460][ T5682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  965.957358][T15431] bridge0: entered allmulticast mode
[  965.977641][T15431] bridge0: left allmulticast mode
[  966.630989][T15441] PKCS7: Unknown OID: [4] 0.0
[  966.631008][T15441] PKCS7: Only support pkcs7_signedData type
[  966.801557][T10621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  966.871989][T15445] binder: 15444:15445 ioctl c0306201 2000000003c0 returned -14
[  968.554493][ T5682] usb 8-1: new high-speed USB device number 34 using dummy_hcd
[  968.623360][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  968.702930][ T5682] usb 8-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00
[  968.704238][ T5682] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  968.704256][ T5682] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  968.706942][ T5682] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  968.706966][ T5682] usb 8-1: Product: syz
[  968.706980][ T5682] usb 8-1: Manufacturer: syz
[  968.706994][ T5682] usb 8-1: SerialNumber: syz
[  969.093330][ T5682] usblp 8-1:1.0: usblp0: USB Bidirectional printer dev 34 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900
[  969.481178][T15464] input: syz0 as /devices/virtual/input/input98
[  970.090977][ T9141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  970.091168][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  970.132540][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  970.260038][ T3577] usb 8-1: USB disconnect, device number 34
[  970.277442][ T3577] usblp0: removed
[  970.355169][T15468] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3045'.
[  970.647362][T15473] size and base must be multiples of 4 kiB
[  970.647388][T15473] CPU: 1 UID: 0 PID: 15473 Comm: syz.7.3048 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  970.647418][T15473] Tainted: [L]=SOFTLOCKUP
[  970.647426][T15473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  970.647439][T15473] Call Trace:
[  970.647448][T15473]  <TASK>
[  970.647458][T15473]  dump_stack_lvl+0xe8/0x150
[  970.647504][T15473]  mtrr_add+0xd5/0x100
[  970.647538][T15473]  mtrr_ioctl+0xca4/0x13c0
[  970.647567][T15473]  ? smk_tskacc+0x2fb/0x370
[  970.647592][T15473]  ? __pfx_mtrr_ioctl+0x10/0x10
[  970.647621][T15473]  ? smack_file_ioctl+0x265/0x370
[  970.647660][T15473]  ? __fget_files+0x2a/0x420
[  970.647680][T15473]  ? __fget_files+0x3a8/0x420
[  970.647701][T15473]  ? __fget_files+0x2a/0x420
[  970.647722][T15473]  ? __pfx_mtrr_ioctl+0x10/0x10
[  970.647753][T15473]  proc_reg_unlocked_ioctl+0x1df/0x2d0
[  970.647782][T15473]  ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10
[  970.647810][T15473]  __se_sys_ioctl+0xff/0x170
[  970.647839][T15473]  do_syscall_64+0x166/0x520
[  970.647867][T15473]  ? trace_irq_disable+0x3b/0x140
[  970.647894][T15473]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  970.647915][T15473]  ? clear_bhb_loop+0x70/0xc0
[  970.647940][T15473]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  970.647960][T15473] RIP: 0033:0x7fb660d6e159
[  970.647979][T15473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  970.647997][T15473] RSP: 002b:00007fb65efc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  970.648020][T15473] RAX: ffffffffffffffda RBX: 00007fb660ff5fa0 RCX: 00007fb660d6e159
[  970.648036][T15473] RDX: 00002000000001c0 RSI: 00000000400c4d01 RDI: 0000000000000003
[  970.648050][T15473] RBP: 00007fb660e0503b R08: 0000000000000000 R09: 0000000000000000
[  970.648064][T15473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  970.648078][T15473] R13: 00007fb660ff6038 R14: 00007fb660ff5fa0 R15: 00007fff9ec02f88
[  970.648111][T15473]  </TASK>
[  971.203190][T15480] PKCS7: Unknown OID: [4] 0.0
[  971.203210][T15480] PKCS7: Only support pkcs7_signedData type
[  971.222508][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  971.256272][ T5799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  971.278914][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  971.510779][T15488] FAULT_INJECTION: forcing a failure.
[  971.510779][T15488] name failslab, interval 1, probability 0, space 0, times 0
[  971.510815][T15488] CPU: 0 UID: 0 PID: 15488 Comm: syz.6.3054 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  971.510839][T15488] Tainted: [L]=SOFTLOCKUP
[  971.510845][T15488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  971.510856][T15488] Call Trace:
[  971.510864][T15488]  <TASK>
[  971.510872][T15488]  dump_stack_lvl+0xe8/0x150
[  971.510902][T15488]  should_fail_ex+0x46b/0x600
[  971.510929][T15488]  should_failslab+0xa8/0x100
[  971.510959][T15488]  ? locks_get_lock_context+0x95/0x5a0
[  971.510982][T15488]  kmem_cache_alloc_noprof+0x9e/0x690
[  971.511006][T15488]  ? locks_get_lock_context+0x95/0x5a0
[  971.511028][T15488]  ? futex_unqueue+0x22/0x240
[  971.511054][T15488]  locks_get_lock_context+0x95/0x5a0
[  971.511075][T15488]  ? futex_unqueue+0x211/0x240
[  971.511096][T15488]  ? __futex_wait+0x1e3/0x410
[  971.511118][T15488]  flock_lock_inode+0xfe/0x1310
[  971.511144][T15488]  ? __pfx_smack_log+0x10/0x10
[  971.511173][T15488]  ? __pfx_flock_lock_inode+0x10/0x10
[  971.511204][T15488]  locks_lock_inode_wait+0x114/0x470
[  971.511226][T15488]  ? __pfx_locks_lock_inode_wait+0x10/0x10
[  971.511257][T15488]  ? __rt_spin_lock_init+0x3e/0x50
[  971.511282][T15488]  __se_sys_flock+0x4e0/0x680
[  971.511311][T15488]  ? __pfx___se_sys_flock+0x10/0x10
[  971.511330][T15488]  ? do_futex+0x3e7/0x4e0
[  971.511373][T15488]  ? rcu_is_watching+0x16/0xb0
[  971.511410][T15488]  do_syscall_64+0x166/0x520
[  971.511453][T15488]  ? trace_irq_disable+0x3b/0x140
[  971.511475][T15488]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  971.511494][T15488]  ? clear_bhb_loop+0x70/0xc0
[  971.511516][T15488]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  971.511534][T15488] RIP: 0033:0x7effd827e159
[  971.511551][T15488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  971.511567][T15488] RSP: 002b:00007effd64d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000049
[  971.511587][T15488] RAX: ffffffffffffffda RBX: 00007effd8505fa0 RCX: 00007effd827e159
[  971.511601][T15488] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000003
[  971.511612][T15488] RBP: 00007effd831503b R08: 0000000000000000 R09: 0000000000000000
[  971.511623][T15488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  971.511634][T15488] R13: 00007effd8506038 R14: 00007effd8505fa0 R15: 00007ffc94437718
[  971.511663][T15488]  </TASK>
[  972.272484][ T5682] usb 8-1: new full-speed USB device number 35 using dummy_hcd
[  972.311591][ T8565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  972.411724][   T36] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  972.460303][ T5682] usb 8-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  972.475595][ T5682] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  972.475663][ T5682] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  972.475689][ T5682] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  972.475715][ T5682] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  972.475739][ T5682] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  972.543536][ T5682] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  972.543565][ T5682] usb 8-1: Product: syz
[  972.543579][ T5682] usb 8-1: Manufacturer: syz
[  972.543594][ T5682] usb 8-1: SerialNumber: syz
[  972.577696][ T5682] usb 8-1: config 0 descriptor??
[  972.593995][   T36] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  972.599909][   T36] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  972.599963][   T36] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18
[  972.599984][   T36] usb 1-1: config 1 interface 0 has no altsetting 1
[  972.646217][   T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  972.646246][   T36] usb 1-1: SerialNumber: syz
[  972.688220][   T36] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22
[  972.799068][ T5682] radio-si470x 8-1:0.0: DeviceID=0x0000 ChipID=0x0000
[  972.799095][ T5682] radio-si470x 8-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[  973.000935][ T5682] radio-si470x 8-1:0.0: software version 0, hardware version 0
[  973.001032][ T5682] radio-si470x 8-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0.
[  973.001056][ T5682] radio-si470x 8-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org
[  973.205888][ T5682] radio-si470x 8-1:0.0: submitting int urb failed (-90)
[  973.361973][T10621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  973.668593][ T5682] radio-si470x 8-1:0.0: si470x_set_report: usb_control_msg returned -71
[  973.668963][ T5682] radio-si470x 8-1:0.0: probe with driver radio-si470x failed with error -22
[  973.707604][ T5682] usb 8-1: USB disconnect, device number 35
[  974.060933][T15533] FAULT_INJECTION: forcing a failure.
[  974.060933][T15533] name failslab, interval 1, probability 0, space 0, times 0
[  974.060970][T15533] CPU: 1 UID: 0 PID: 15533 Comm: syz.6.3072 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  974.060999][T15533] Tainted: [L]=SOFTLOCKUP
[  974.061008][T15533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  974.061020][T15533] Call Trace:
[  974.061029][T15533]  <TASK>
[  974.061039][T15533]  dump_stack_lvl+0xe8/0x150
[  974.061076][T15533]  should_fail_ex+0x46b/0x600
[  974.061109][T15533]  should_failslab+0xa8/0x100
[  974.061143][T15533]  __kmalloc_noprof+0xfb/0x790
[  974.061180][T15533]  ? udpv6_init_sock+0x1a9/0x3c0
[  974.061272][T15533]  ? udpv6_init_sock+0x1a9/0x3c0
[  974.061300][T15533]  udpv6_init_sock+0x1a9/0x3c0
[  974.061326][T15533]  inet6_create+0xf0b/0x1280
[  974.061387][T15533]  ? inet6_create+0x80/0x1280
[  974.061422][T15533]  __sock_create+0x4b3/0x9d0
[  974.061458][T15533]  __sys_socket+0xd6/0x1b0
[  974.061489][T15533]  __x64_sys_socket+0x7a/0x90
[  974.061517][T15533]  do_syscall_64+0x166/0x520
[  974.061546][T15533]  ? trace_irq_disable+0x3b/0x140
[  974.061574][T15533]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  974.061595][T15533]  ? clear_bhb_loop+0x70/0xc0
[  974.061620][T15533]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  974.061640][T15533] RIP: 0033:0x7effd827e159
[  974.061660][T15533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  974.061677][T15533] RSP: 002b:00007effd64d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  974.061700][T15533] RAX: ffffffffffffffda RBX: 00007effd8505fa0 RCX: 00007effd827e159
[  974.061716][T15533] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000a
[  974.061730][T15533] RBP: 00007effd831503b R08: 0000000000000000 R09: 0000000000000000
[  974.061743][T15533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  974.061757][T15533] R13: 00007effd8506038 R14: 00007effd8505fa0 R15: 00007ffc94437718
[  974.061791][T15533]  </TASK>
[  974.674559][T15537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  974.688236][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  975.347135][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  975.432691][T15539] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3074'.
[  975.516229][T10621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  975.564106][ T3577] usb 1-1: USB disconnect, device number 44
[  975.742627][ T8774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  976.533747][   T36] net_ratelimit: 1 callbacks suppressed
[  976.533767][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  976.610015][T15559] FAULT_INJECTION: forcing a failure.
[  976.610015][T15559] name failslab, interval 1, probability 0, space 0, times 0
[  976.610041][T15559] CPU: 0 UID: 0 PID: 15559 Comm: syz.6.3083 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  976.610057][T15559] Tainted: [L]=SOFTLOCKUP
[  976.610061][T15559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  976.610069][T15559] Call Trace:
[  976.610075][T15559]  <TASK>
[  976.610080][T15559]  dump_stack_lvl+0xe8/0x150
[  976.610102][T15559]  should_fail_ex+0x46b/0x600
[  976.610120][T15559]  should_failslab+0xa8/0x100
[  976.610137][T15559]  ? copy_fs_struct+0x4f/0x270
[  976.610147][T15559]  kmem_cache_alloc_noprof+0x9e/0x690
[  976.610161][T15559]  ? copy_fs_struct+0x4f/0x270
[  976.610175][T15559]  copy_fs_struct+0x4f/0x270
[  976.610186][T15559]  ksys_unshare+0x463/0x950
[  976.610206][T15559]  ? __pfx_ksys_unshare+0x10/0x10
[  976.610221][T15559]  ? rcu_is_watching+0x16/0xb0
[  976.610241][T15559]  __x64_sys_unshare+0x38/0x50
[  976.610256][T15559]  do_syscall_64+0x166/0x520
[  976.610270][T15559]  ? trace_irq_disable+0x3b/0x140
[  976.610283][T15559]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  976.610294][T15559]  ? clear_bhb_loop+0x70/0xc0
[  976.610307][T15559]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  976.610318][T15559] RIP: 0033:0x7effd827e159
[  976.610329][T15559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  976.610339][T15559] RSP: 002b:00007effd64d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  976.610352][T15559] RAX: ffffffffffffffda RBX: 00007effd8505fa0 RCX: 00007effd827e159
[  976.610360][T15559] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000028000600
[  976.610366][T15559] RBP: 00007effd831503b R08: 0000000000000000 R09: 0000000000000000
[  976.610373][T15559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  976.610379][T15559] R13: 00007effd8506038 R14: 00007effd8505fa0 R15: 00007ffc94437718
[  976.610396][T15559]  </TASK>
[  977.151654][    T9] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  977.315194][    T9] usb 1-1: Using ep0 maxpacket: 32
[  977.315993][    T9] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  977.317285][    T9] usb 1-1: config 0 has an invalid interface number: 184 but max is 0
[  977.317310][    T9] usb 1-1: config 0 has no interface number 0
[  977.317355][    T9] usb 1-1: config 0 interface 184 has no altsetting 0
[  977.319823][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  977.319847][    T9] usb 1-1: Product: syz
[  977.319862][    T9] usb 1-1: Manufacturer: syz
[  977.319876][    T9] usb 1-1: SerialNumber: syz
[  977.335886][    T9] usb 1-1: config 0 descriptor??
[  977.851750][   T36] usb 8-1: new high-speed USB device number 36 using dummy_hcd
[  978.002594][   T36] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01
[  978.004229][   T36] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  978.004283][   T36] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  978.004307][   T36] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  978.037014][    T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  978.037042][    T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  978.072920][   T36] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  978.072948][   T36] usb 8-1: Product: syz
[  978.072962][   T36] usb 8-1: Manufacturer: syz
[  978.114015][T15596] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[  978.133701][   T36] garmin_gps 8-1:1.0: Garmin GPS usb/tty converter detected
[  978.265733][   T36] usb 8-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[  978.462289][   T36] usb 8-1: USB disconnect, device number 36
[  978.479990][    T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71
[  978.480020][    T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71
[  978.480040][    T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  978.480410][    T9] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71
[  978.612860][ T5682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  978.653930][    T9] usb 1-1: USB disconnect, device number 45
[  978.687051][   T36] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[  978.688862][   T36] garmin_gps 8-1:1.0: device disconnected
[  979.132981][T15621] Invalid argument reading file caps for ./file0
[  979.622245][    T9] usb 8-1: new high-speed USB device number 37 using dummy_hcd
[  979.662168][ T5682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  979.727054][ T3577] usb 2-1: new full-speed USB device number 42 using dummy_hcd
[  979.802190][    T9] usb 8-1: Using ep0 maxpacket: 8
[  979.802886][    T9] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  979.804068][    T9] usb 8-1: config index 0 descriptor too short (expected 301, got 45)
[  979.804101][    T9] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  979.804113][    T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  979.804127][    T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  979.804139][    T9] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  979.804161][    T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  979.884216][ T3577] usb 2-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00
[  979.886459][ T3577] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  979.886564][ T3577] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  979.886592][ T3577] usb 2-1: config 0 interface 0 has no altsetting 0
[  979.886623][ T3577] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  980.028096][ T3577] usb 2-1: config 0 descriptor??
[  980.030859][    T9] usb 8-1: usb_control_msg returned -32
[  980.030887][    T9] usbtmc 8-1:16.0: can't read capabilities
[  980.548164][ T3577] uclogic 0003:28BD:0074.0026: interface is invalid, ignoring
[  980.694130][   T36] usb 2-1: USB disconnect, device number 42
[  980.699600][ T5682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  980.721632][ T8565] usb 8-1: USB disconnect, device number 37
[  981.055966][T15769] loop4: detected capacity change from 0 to 7
[  981.138617][T15769] Dev loop4: unable to read RDB block 7
[  981.138674][T15769]  loop4: unable to read partition table
[  981.138893][T15769] loop4: partition table beyond EOD, truncated
[  981.144384][T15769] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5)
[  981.965907][T15778] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  981.977003][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  982.560011][ T5799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  982.560220][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  982.664321][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  982.772879][   T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  982.773087][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  983.196621][T15787] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3137'.
[  983.556432][T15793] input: syz0 as /devices/virtual/input/input99
[  984.354254][ T5682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  984.371699][ T3577] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  984.569764][ T3577] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  984.591834][ T3577] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  984.591868][ T3577] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255
[  984.594436][ T3577] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  984.594461][ T3577] usb 6-1: Product: syz
[  984.594477][ T3577] usb 6-1: Manufacturer: syz
[  984.594492][ T3577] usb 6-1: SerialNumber: syz
[  984.614317][ T3577] usb 6-1: config 0 descriptor??
[  984.638117][T15792] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  984.638887][T15792] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  984.843639][T15899] FAULT_INJECTION: forcing a failure.
[  984.843639][T15899] name failslab, interval 1, probability 0, space 0, times 0
[  984.843680][T15899] CPU: 1 UID: 0 PID: 15899 Comm: syz.7.3139 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  984.843709][T15899] Tainted: [L]=SOFTLOCKUP
[  984.843718][T15899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  984.843739][T15899] Call Trace:
[  984.843748][T15899]  <TASK>
[  984.843759][T15899]  dump_stack_lvl+0xe8/0x150
[  984.843794][T15899]  should_fail_ex+0x46b/0x600
[  984.843827][T15899]  should_failslab+0xa8/0x100
[  984.843861][T15899]  kmem_cache_alloc_node_noprof+0xac/0x660
[  984.843888][T15899]  ? __alloc_skb+0x1db/0x7a0
[  984.844025][T15899]  ? __alloc_skb+0x1db/0x7a0
[  984.844060][T15899]  __alloc_skb+0x1db/0x7a0
[  984.844094][T15899]  vhci_write+0xc2/0x480
[  984.844194][T15899]  vfs_write+0x61e/0xbb0
[  984.844228][T15899]  ? __pfx_vfs_write+0x10/0x10
[  984.844261][T15899]  ? __fget_files+0x2a/0x420
[  984.844290][T15899]  ksys_write+0x156/0x270
[  984.844318][T15899]  ? __pfx_ksys_write+0x10/0x10
[  984.844352][T15899]  do_syscall_64+0x166/0x520
[  984.844384][T15899]  ? trace_irq_disable+0x3b/0x140
[  984.844411][T15899]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  984.844432][T15899]  ? clear_bhb_loop+0x70/0xc0
[  984.844457][T15899]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  984.844478][T15899] RIP: 0033:0x7fb660d2e98e
[  984.844498][T15899] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  984.844515][T15899] RSP: 002b:00007fb65efc5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  984.844538][T15899] RAX: ffffffffffffffda RBX: 00007fb65efc66c0 RCX: 00007fb660d2e98e
[  984.844553][T15899] RDX: 0000000000000004 RSI: 0000200000000380 RDI: 00000000000000ca
[  984.844567][T15899] RBP: 00007fb660e0503b R08: 0000000000000000 R09: 0000000000000000
[  984.844580][T15899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  984.844593][T15899] R13: 00007fb660ff6038 R14: 00007fb660ff5fa0 R15: 00007fff9ec02f88
[  984.844623][T15899]  </TASK>
[  985.002920][T15792] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  985.005001][T15792] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  985.381666][ T8565] usb 1-1: new full-speed USB device number 46 using dummy_hcd
[  985.411982][T10621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  985.428772][ T3577] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00
[  985.543526][ T8565] usb 1-1: unable to get BOS descriptor or descriptor too short
[  985.544419][ T8565] usb 1-1: not running at top speed; connect to a high speed hub
[  985.544458][ T8565] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  985.546542][ T8565] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4
[  985.551121][ T8565] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  985.551144][ T8565] usb 1-1: Product: syz
[  985.551159][ T8565] usb 1-1: Manufacturer: syz
[  985.551173][ T8565] usb 1-1: SerialNumber: syz
[  985.681638][   T36] usb 7-1: new high-speed USB device number 38 using dummy_hcd
[  985.845818][   T36] usb 7-1: New USB device found, idVendor=1199, idProduct=0fff, bcdDevice= 0.00
[  985.888376][   T36] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  985.888406][   T36] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  985.888446][   T36] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  985.938326][   T36] usb-storage 7-1:1.0: USB Mass Storage device detected
[  985.955591][ T8565] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  986.080213][ T3577] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): Error reading MODE_CTRL
[  986.097161][ T3577] usb 6-1: USB disconnect, device number 28
[  986.135224][ T8565] usb 1-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  986.135254][ T8565] usb 1-1: found format II with max.bitrate = 4, frame size=7372
[  986.160627][   T36] scsi host1: usb-storage 7-1:1.0
[  986.462465][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  986.548125][ T8565] usb 1-1: invalid uac2 rates
[  986.548256][ T8565] usb 1-1: invalid uac2 rates
[  986.548808][ T8565] usb 1-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  986.548830][ T8565] usb 1-1: found format II with max.bitrate = 4, frame size=7372
[  986.749590][ T8565] usb 1-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0)
[  986.913656][ T8565] usb 1-1: USB disconnect, device number 46
[  987.059167][T10001] udevd[10001]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  987.344809][    T9] usb 7-1: USB disconnect, device number 38
[  987.498423][ T8565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  987.891999][T15945] FAULT_INJECTION: forcing a failure.
[  987.891999][T15945] name failslab, interval 1, probability 0, space 0, times 0
[  987.892038][T15945] CPU: 1 UID: 0 PID: 15945 Comm: syz.1.3155 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  987.892067][T15945] Tainted: [L]=SOFTLOCKUP
[  987.892075][T15945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  987.892088][T15945] Call Trace:
[  987.892098][T15945]  <TASK>
[  987.892107][T15945]  dump_stack_lvl+0xe8/0x150
[  987.892146][T15945]  should_fail_ex+0x46b/0x600
[  987.892181][T15945]  should_failslab+0xa8/0x100
[  987.892214][T15945]  ? skb_clone+0x212/0x3a0
[  987.892238][T15945]  kmem_cache_alloc_noprof+0x9e/0x690
[  987.892267][T15945]  ? skb_clone+0x212/0x3a0
[  987.892290][T15945]  ? run_filter+0x23/0x270
[  987.892324][T15945]  skb_clone+0x212/0x3a0
[  987.892344][T15945]  ? packet_rcv+0x563/0x16f0
[  987.892374][T15945]  packet_rcv+0x65d/0x16f0
[  987.892413][T15945]  __netif_receive_skb_core+0x270b/0x30c0
[  987.892543][T15945]  ? __pfx___skb_flow_dissect+0x10/0x10
[  987.892599][T15945]  ? __lock_acquire+0x747/0x2de0
[  987.892635][T15945]  ? __pfx___netif_receive_skb_core+0x10/0x10
[  987.892661][T15945]  ? __lock_acquire+0x747/0x2de0
[  987.892710][T15945]  ? netif_receive_skb+0x102/0xbf0
[  987.892765][T15945]  ? netif_receive_skb+0x102/0xbf0
[  987.892792][T15945]  netif_receive_skb+0x1fe/0xbf0
[  987.892824][T15945]  ? __pfx_netif_receive_skb+0x10/0x10
[  987.892849][T15945]  ? rcu_is_watching+0x16/0xb0
[  987.892875][T15945]  ? __local_bh_disable_ip+0x3d/0x420
[  987.892905][T15945]  ? tun_rx_batched+0x194/0x760
[  987.892988][T15945]  ? tun_rx_batched+0x194/0x760
[  987.893015][T15945]  tun_rx_batched+0x1f1/0x760
[  987.893044][T15945]  ? rcu_is_watching+0x16/0xb0
[  987.893074][T15945]  ? __pfx_tun_rx_batched+0x10/0x10
[  987.893111][T15945]  ? lock_acquire+0x115/0x350
[  987.893144][T15945]  ? __local_bh_enable_ip+0x1ad/0x2b0
[  987.893171][T15945]  ? lockdep_hardirqs_on+0x7b/0x110
[  987.893243][T15945]  tun_get_user+0x2be6/0x44e0
[  987.893272][T15945]  ? tun_get_user+0x27a0/0x44e0
[  987.893314][T15945]  ? __futex_queue+0x150/0x160
[  987.893350][T15945]  ? __pfx_tun_get_user+0x10/0x10
[  987.893378][T15945]  ? __lock_acquire+0x747/0x2de0
[  987.893417][T15945]  ? ref_tracker_alloc+0x353/0x4c0
[  987.893445][T15945]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  987.893475][T15945]  ? lock_acquire+0x115/0x350
[  987.893511][T15945]  ? tun_get+0x1c/0x2f0
[  987.893544][T15945]  ? tun_get+0x1c/0x2f0
[  987.893575][T15945]  ? tun_get+0x1c/0x2f0
[  987.893607][T15945]  tun_chr_write_iter+0x119/0x200
[  987.893638][T15945]  vfs_write+0x61e/0xbb0
[  987.893672][T15945]  ? __pfx_vfs_write+0x10/0x10
[  987.893709][T15945]  ? __fget_files+0x2a/0x420
[  987.893741][T15945]  ksys_write+0x156/0x270
[  987.893769][T15945]  ? __pfx_ksys_write+0x10/0x10
[  987.893806][T15945]  do_syscall_64+0x166/0x520
[  987.893834][T15945]  ? trace_irq_disable+0x3b/0x140
[  987.893860][T15945]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  987.893889][T15945]  ? clear_bhb_loop+0x70/0xc0
[  987.893913][T15945]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  987.893933][T15945] RIP: 0033:0x7f702be4e98e
[  987.893953][T15945] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  987.893971][T15945] RSP: 002b:00007f702a0e5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  987.893994][T15945] RAX: ffffffffffffffda RBX: 00007f702a0e66c0 RCX: 00007f702be4e98e
[  987.894010][T15945] RDX: 0000000000000072 RSI: 0000200000000a40 RDI: 00000000000000c8
[  987.894025][T15945] RBP: 00007f702bf2503b R08: 0000000000000000 R09: 0000000000000000
[  987.894038][T15945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  987.894052][T15945] R13: 00007f702c116038 R14: 00007f702c115fa0 R15: 00007ffd2ce08898
[  987.894085][T15945]  </TASK>
[  987.895936][ T3403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  987.924254][  T987] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  988.385369][  T987] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  988.385592][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  988.568271][ T8565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  989.572057][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  989.723278][    T9] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  989.872614][    T9] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  989.873861][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  989.873898][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  989.878144][    T9] usb 1-1: config 0 descriptor??
[  990.042131][ T3577] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  990.152637][    T9] usbhid 1-1:0.0: can't add hid device: -71
[  990.152710][    T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  990.162697][    T9] usb 1-1: USB disconnect, device number 47
[  990.193021][ T3577] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  990.200607][ T3577] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  990.239532][ T3577] usb 6-1: config 0 descriptor??
[  990.260333][ T3577] gspca_main: cpia1-2.14.0 probing 0813:0001
[  990.682379][    T9] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  990.732171][ T3577] cpia1 6-1:0.0: unexpected state after lo power cmd: 00
[  990.735494][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  990.879538][T15991] input: syz0 as /devices/virtual/input/input100
[  991.702198][    T9] usb 1-1: Using ep0 maxpacket: 32
[  991.731399][    T9] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  991.744393][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  991.744741][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  991.823422][T10621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  991.885591][ T3577] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0)
[  991.904887][    T9] usb 1-1: config 0 descriptor??
[  991.913839][    T9] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  991.999345][    T9] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  992.101155][ T5682] usb 6-1: USB disconnect, device number 29
[  992.141653][ T5700] usb 7-1: new high-speed USB device number 39 using dummy_hcd
[  992.302962][ T5700] usb 7-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  992.304655][ T5700] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  992.304705][ T5700] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  992.304729][ T5700] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  992.304752][ T5700] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  992.304792][ T5700] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  992.355006][T16001] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3176'.
[  992.588011][ T3577] usb 1-1: USB disconnect, device number 48
[  992.599744][ T3577] ldusb 1-1:0.0: LD USB Device #0 now disconnected
[  992.818480][ T5591] block nbd1: Receive control failed (result -107)
[  992.846727][ T5591] 
[  992.849069][ T5591] ======================================================
[  992.856100][ T5591] WARNING: possible circular locking dependency detected
[  992.863155][ T5591] syzkaller #0 Tainted: G             L     
[  992.869120][ T5591] ------------------------------------------------------
[  992.876178][ T5591] kworker/u9:3/5591 is trying to acquire lock:
[  992.882357][ T5591] ffff88806a32b298 (sk_lock-AF_INET){+.+.}-{0:0}, at: inet_shutdown+0x6a/0x390
[  992.891418][ T5591] 
[  992.891418][ T5591] but task is already holding lock:
[  992.898768][ T5591] ffff88802761a660 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cf7/0x1e40
[  992.907700][ T5591] 
[  992.907700][ T5591] which lock already depends on the new lock.
[  992.907700][ T5591] 
[  992.918083][ T5591] 
[  992.918083][ T5591] the existing dependency chain (in reverse order) is:
[  992.927077][ T5591] 
[  992.927077][ T5591] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[  992.934763][ T5591]        mutex_lock_nested+0x5a/0x1d0
[  992.940124][ T5591]        nbd_queue_rq+0x373/0x1000
[  992.945222][ T5591]        blk_mq_dispatch_rq_list+0x4af/0x1a00
[  992.951301][ T5591]        __blk_mq_sched_dispatch_requests+0xd45/0x1590
[  992.958132][ T5591]        blk_mq_sched_dispatch_requests+0xda/0x1a0
[  992.964613][ T5591]        blk_mq_run_work_fn+0x16f/0x300
[  992.970141][ T5591]        process_scheduled_works+0xc3d/0x1630
[  992.976194][ T5591]        worker_thread+0xa47/0xfb0
[  992.981293][ T5591]        kthread+0x38b/0x470
[  992.985864][ T5591]        ret_from_fork+0x514/0xb70
[  992.990959][ T5591]        ret_from_fork_asm+0x1a/0x30
[  992.996225][ T5591] 
[  992.996225][ T5591] -> #5 (&cmd->lock){+.+.}-{4:4}:
[  993.003416][ T5591]        mutex_lock_nested+0x5a/0x1d0
[  993.008792][ T5591]        nbd_queue_rq+0xc1/0x1000
[  993.013818][ T5591]        blk_mq_dispatch_rq_list+0x4af/0x1a00
[  993.019874][ T5591]        __blk_mq_sched_dispatch_requests+0xd45/0x1590
[  993.026706][ T5591]        blk_mq_sched_dispatch_requests+0xda/0x1a0
[  993.033189][ T5591]        blk_mq_run_work_fn+0x16f/0x300
[  993.038719][ T5591]        process_scheduled_works+0xc3d/0x1630
[  993.044772][ T5591]        worker_thread+0xa47/0xfb0
[  993.049868][ T5591]        kthread+0x38b/0x470
[  993.054440][ T5591]        ret_from_fork+0x514/0xb70
[  993.059534][ T5591]        ret_from_fork_asm+0x1a/0x30
[  993.064802][ T5591] 
[  993.064802][ T5591] -> #4 (set->srcu){.+.+}-{0:0}:
[  993.071906][ T5591]        __synchronize_srcu+0xc9/0x2f0
[  993.077350][ T5591]        elevator_switch+0x1e8/0x7b0
[  993.082621][ T5591]        elevator_change+0x2fa/0x480
[  993.087892][ T5591]        elevator_set_default+0x375/0x440
[  993.093600][ T5591]        blk_register_queue+0x3f3/0x4e0
[  993.099127][ T5591]        __add_disk+0x6b8/0xdb0
[  993.103960][ T5591]        add_disk_fwnode+0x100/0x3a0
[  993.109228][ T5591]        nbd_dev_add+0x733/0xb60
[  993.114152][ T5591]        nbd_init+0x168/0x1f0
[  993.118921][ T5591]        do_one_initcall+0x250/0x870
[  993.124195][ T5591]        do_initcall_level+0x10a/0x1a0
[  993.129703][ T5591]        do_initcalls+0x59/0xa0
[  993.134533][ T5591]        kernel_init_freeable+0x29d/0x3e0
[  993.140233][ T5591]        kernel_init+0x22/0x1d0
[  993.145068][ T5591]        ret_from_fork+0x514/0xb70
[  993.150160][ T5591]        ret_from_fork_asm+0x1a/0x30
[  993.155430][ T5591] 
[  993.155430][ T5591] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[  993.163237][ T5591]        mutex_lock_nested+0x5a/0x1d0
[  993.168595][ T5591]        elevator_change+0x1af/0x480
[  993.173869][ T5591]        elv_iosched_store+0x504/0x630
[  993.179316][ T5591]        queue_attr_store+0x207/0x2b0
[  993.184676][ T5591]        kernfs_fop_write_iter+0x3a5/0x540
[  993.190508][ T5591]        vfs_write+0x61e/0xbb0
[  993.195270][ T5591]        ksys_write+0x156/0x270
[  993.200108][ T5591]        do_syscall_64+0x166/0x520
[  993.205214][ T5591]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  993.211617][ T5591] 
[  993.211617][ T5591] -> #2 (&q->q_usage_counter(io)#66){++++}-{0:0}:
[  993.220210][ T5591]        blk_alloc_queue+0x54c/0x690
[  993.225487][ T5591]        __blk_mq_alloc_disk+0x194/0x390
[  993.231102][ T5591]        null_add_dev+0xe8a/0x1d70
[  993.236257][ T5591]        null_init+0x1e3/0x390
[  993.241004][ T5591]        do_one_initcall+0x250/0x870
[  993.246281][ T5591]        do_initcall_level+0x10a/0x1a0
[  993.251723][ T5591]        do_initcalls+0x59/0xa0
[  993.256556][ T5591]        kernel_init_freeable+0x29d/0x3e0
[  993.262259][ T5591]        kernel_init+0x22/0x1d0
[  993.267092][ T5591]        ret_from_fork+0x514/0xb70
[  993.272185][ T5591]        ret_from_fork_asm+0x1a/0x30
[  993.277456][ T5591] 
[  993.277456][ T5591] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  993.284648][ T5591]        fs_reclaim_acquire+0x71/0x100
[  993.290092][ T5591]        kmem_cache_alloc_node_noprof+0x68/0x660
[  993.296403][ T5591]        __alloc_skb+0x1db/0x7a0
[  993.301327][ T5591]        tcp_stream_alloc_skb+0x3f/0x5c0
[  993.307021][ T5591]        tcp_sendmsg_locked+0x1392/0x5400
[  993.312758][ T5591]        tcp_sendmsg+0x2f/0x50
[  993.317510][ T5591]        sock_sendmsg_nosec+0x10e/0x180
[  993.323042][ T5591]        sock_write_iter+0x2e4/0x3f0
[  993.328315][ T5591]        vfs_write+0x61e/0xbb0
[  993.333068][ T5591]        ksys_write+0x156/0x270
[  993.337903][ T5591]        do_syscall_64+0x166/0x520
[  993.343004][ T5591]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  993.349402][ T5591] 
[  993.349402][ T5591] -> #0 (sk_lock-AF_INET){+.+.}-{0:0}:
[  993.357027][ T5591]        __lock_acquire+0x164c/0x2de0
[  993.362391][ T5591]        lock_acquire+0x115/0x350
[  993.367410][ T5591]        lock_sock_nested+0x41/0x130
[  993.372690][ T5591]        inet_shutdown+0x6a/0x390
[  993.377712][ T5591]        nbd_mark_nsock_dead+0x2cb/0x550
[  993.383341][ T5591]        recv_work+0x1d0c/0x1e40
[  993.388276][ T5591]        process_scheduled_works+0xc3d/0x1630
[  993.394336][ T5591]        worker_thread+0xa47/0xfb0
[  993.399441][ T5591]        kthread+0x38b/0x470
[  993.404019][ T5591]        ret_from_fork+0x514/0xb70
[  993.409116][ T5591]        ret_from_fork_asm+0x1a/0x30
[  993.414382][ T5591] 
[  993.414382][ T5591] other info that might help us debug this:
[  993.414382][ T5591] 
[  993.424591][ T5591] Chain exists of:
[  993.424591][ T5591]   sk_lock-AF_INET --> &cmd->lock --> &nsock->tx_lock
[  993.424591][ T5591] 
[  993.437178][ T5591]  Possible unsafe locking scenario:
[  993.437178][ T5591] 
[  993.444612][ T5591]        CPU0                    CPU1
[  993.449958][ T5591]        ----                    ----
[  993.455330][ T5591]   lock(&nsock->tx_lock);
[  993.459733][ T5591]                                lock(&cmd->lock);
[  993.466217][ T5591]                                lock(&nsock->tx_lock);
[  993.473135][ T5591]   lock(sk_lock-AF_INET);
[  993.477536][ T5591] 
[  993.477536][ T5591]  *** DEADLOCK ***
[  993.477536][ T5591] 
[  993.485660][ T5591] locks held by kworker/u9:3/5591: 3, last CPU#0:
[  993.492118][ T5591]  #0: ffff888027d52138 ((wq_completion)nbd1-recv){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  993.503377][ T5591]  #1: ffffc90005c37c40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  993.515113][ T5591]  #2: ffff88802761a660 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cf7/0x1e40
[  993.524414][ T5591] 
[  993.524414][ T5591] stack backtrace:
[  993.530340][ T5591] CPU: 0 UID: 0 PID: 5591 Comm: kworker/u9:3 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  993.541865][ T5591] Tainted: [L]=SOFTLOCKUP
[  993.546169][ T5591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  993.556206][ T5591] Workqueue: nbd1-recv recv_work
[  993.561141][ T5591] Call Trace:
[  993.564408][ T5591]  <TASK>
[  993.567325][ T5591]  dump_stack_lvl+0xe8/0x150
[  993.571918][ T5591]  print_circular_bug+0x2e2/0x300
[  993.576938][ T5591]  check_noncircular+0x12f/0x150
[  993.581869][ T5591]  __lock_acquire+0x164c/0x2de0
[  993.586711][ T5591]  ? irqentry_exit+0x218/0x910
[  993.591464][ T5591]  ? lockdep_hardirqs_on+0x7b/0x110
[  993.596657][ T5591]  lock_acquire+0x115/0x350
[  993.601150][ T5591]  ? inet_shutdown+0x6a/0x390
[  993.605816][ T5591]  lock_sock_nested+0x41/0x130
[  993.610566][ T5591]  ? inet_shutdown+0x6a/0x390
[  993.615237][ T5591]  inet_shutdown+0x6a/0x390
[  993.619747][ T5591]  nbd_mark_nsock_dead+0x2cb/0x550
[  993.624856][ T5591]  recv_work+0x1d0c/0x1e40
[  993.629271][ T5591]  ? lockdep_unlock+0x5c/0xd0
[  993.633941][ T5591]  ? __lock_acquire+0x1511/0x2de0
[  993.638963][ T5591]  ? __pfx_recv_work+0x10/0x10
[  993.643719][ T5591]  ? lockdep_hardirqs_on+0x7b/0x110
[  993.648911][ T5591]  ? irqentry_exit+0x218/0x910
[  993.653674][ T5591]  ? trace_irq_disable+0x3b/0x140
[  993.658710][ T5591]  ? rcu_is_watching+0x16/0xb0
[  993.663468][ T5591]  ? process_scheduled_works+0x97a/0x1630
[  993.669178][ T5591]  process_scheduled_works+0xc3d/0x1630
[  993.674724][ T5591]  ? __pfx_process_scheduled_works+0x10/0x10
[  993.680694][ T5591]  ? assign_work+0x3cf/0x5d0
[  993.685271][ T5591]  worker_thread+0xa47/0xfb0
[  993.689857][ T5591]  ? __kthread_parkme+0x71/0x1f0
[  993.694786][ T5591]  kthread+0x38b/0x470
[  993.698838][ T5591]  ? __pfx_worker_thread+0x10/0x10
[  993.703943][ T5591]  ? __pfx_kthread+0x10/0x10
[  993.708560][ T5591]  ret_from_fork+0x514/0xb70
[  993.713147][ T5591]  ? __pfx_ret_from_fork+0x10/0x10
[  993.718244][ T5591]  ? __switch_to+0xc89/0x1420
[  993.722947][ T5591]  ? __pfx_kthread+0x10/0x10
[  993.727522][ T5591]  ret_from_fork_asm+0x1a/0x30
[  993.732278][ T5591]  </TASK>
[  993.742887][ T8774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  993.743018][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  993.773180][ T5682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
SYZFAIL: failed to send rpc
fd=3 want=100800 sent=0 n=-1 (errno 32: Broken pipe)
[  993.803002][ T1330] ieee802154 phy1 wpan1: encryption failed: -22
[  993.975121][   T91] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  994.292554][ T8774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  994.292692][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  994.868417][T10621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  994.904175][T15221] syz_tun (unregistering): left allmulticast mode
[  994.932341][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  995.284154][   T91] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  995.555024][ T5700] gud 7-1:1.0: USB-1: Failed to add properties (ret=-71)
[  995.555066][ T5700] gud 7-1:1.0: Failed to get connectors (error=-71)
[  995.555091][ T5700] gud 7-1:1.0: probe with driver gud failed with error -71
[  995.581027][ T5700] usb 7-1: USB disconnect, device number 39
[  995.732953][   T91] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  995.896804][ T5700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  995.992932][   T91] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  996.332618][   T91] bridge_slave_1: left allmulticast mode
[  996.332645][   T91] bridge_slave_1: left promiscuous mode
[  996.332795][   T91] bridge0: port 2(bridge_slave_1) entered disabled state
[  996.512952][   T91] bridge_slave_0: left allmulticast mode
[  996.512980][   T91] bridge_slave_0: left promiscuous mode
[  996.513132][   T91] bridge0: port 1(bridge_slave_0) entered disabled state
[  997.272847][   T91] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  997.352227][   T91] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  997.393300][   T91] bond0 (unregistering): Released all slaves
[  997.513132][ T5248] 8021q: adding VLAN 0 to HW filter on device eth13
[  997.760694][ T5248] 8021q: adding VLAN 0 to HW filter on device eth14
[  998.313477][ T5248] 8021q: adding VLAN 0 to HW filter on device eth15
[  998.632932][   T91] hsr_slave_0: left promiscuous mode
[  998.671680][   T91] hsr_slave_1: left promiscuous mode
[  998.672376][   T91] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  998.672390][   T91] batman_adv: batadv0: Removing interface: batadv_slave_0
[  998.713271][   T91] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  998.713294][   T91] batman_adv: batadv0: Removing interface: batadv_slave_1
[  998.772463][   T91] veth1_macvtap: left promiscuous mode
[  998.772499][   T91] veth0_macvtap: left promiscuous mode
[  998.772625][   T91] veth1_vlan: left promiscuous mode
[  998.772678][   T91] veth0_vlan: left promiscuous mode
[  999.522445][   T91] team0 (unregistering): Port device team_slave_1 removed
[  999.562293][   T91] team0 (unregistering): Port device team_slave_0 removed
[  999.834082][ T5248] 8021q: adding VLAN 0 to HW filter on device eth16
[ 1001.033085][   T91] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1001.252807][   T91] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1001.462666][   T91] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1001.682977][   T91] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1002.042999][   T91] bridge_slave_1: left allmulticast mode
[ 1002.043026][   T91] bridge_slave_1: left promiscuous mode
[ 1002.043180][   T91] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1002.172636][   T91] bridge_slave_0: left allmulticast mode
[ 1002.172655][   T91] bridge_slave_0: left promiscuous mode
[ 1002.172758][   T91] bridge0: port 1(bridge_slave_0) entered disabled state