last executing test programs: 2m8.2676782s ago: executing program 2 (id=422): r0 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) r1 = dup(r0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r3, r4, r5, &(0x7f00000002c0)={0x2e, 0x2, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000100)=@new_dev={0x1, 0x67, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x40}}}, &(0x7f0000000340)=0x0) syz_ublk_setup_queues(r1, r6, &(0x7f0000000380)={0x0, 0xef64, 0x0, 0x1, 0x109, 0x0, r2}, &(0x7f0000000740)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ea6, 0x8, 0x1, 0x263, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2a1, 0x40, 0x1, 0x3d8, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c24, 0x0, 0x0, 0x39d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x674d, 0x80, 0x3, 0x1e7}}], 0x4, &(0x7f00000019c0)={0x2e, 0x8, 0x0, r1, 0xc0107520, 0x0, 0xf0ffffff7f0000, 0x0, 0x1, {0x7}, 0x0, 0x0, '\x00', {0x3, 0x2e5, 0x0, 0x0}}, &(0x7f0000001a40)) 2m8.127636505s ago: executing program 2 (id=425): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f0000000300)='p:_est/event1 .#file0:0x0 _rg_=%bx', 0x22) 2m7.804424307s ago: executing program 2 (id=427): socket$nl_route(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd01000000000014eb22006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 2m7.515909909s ago: executing program 2 (id=428): r0 = socket$netlink(0x10, 0x3, 0x0) sendto(r0, &(0x7f00000000c0)="68000000300005050100000000000000000000005400018050000180090001006761746500000000400002801800020000000000000000000100000000000000000000001800058014000180080003000000000008000500640000000c000700e803ffe40000eeff", 0x68, 0x0, 0x0, 0x0) 2m7.452721465s ago: executing program 2 (id=429): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) socket$l2tp6(0xa, 0x2, 0x73) r1 = syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x1, 0xb, 0x0, "a0e0161b1216acc6bf584c71af9cb429f1d40007499dcb43c4bdf45200", 0x32315559}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a300000000005000500020000001400078005001500000000000800124000000001050004000000000011000300686173683a6970"], 0x60}, 0x1, 0x0, 0x0, 0x11}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0xffffffffffffffcf, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x20a000, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1f6) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x1010800, 0x0) mount(0x0, &(0x7f0000000200)='./sys/kernel/tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) read$dsp(r4, &(0x7f0000000580)=""/246, 0xf6) bind$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x404000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7cfd1f0f, 0x1}, 0x20) 2m7.360539895s ago: executing program 2 (id=430): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20044001}, 0x0) recvmmsg(r0, &(0x7f000000b400)=[{{0x0, 0x300, 0x0}, 0x5dd7}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000002c80)=""/178, 0xb2}, {&(0x7f0000000180)=""/164, 0xa4}, {&(0x7f00000003c0)=""/187, 0xbb}, {&(0x7f0000002fc0)=""/171, 0xab}, {&(0x7f00000002c0)=""/125, 0x7d}, {&(0x7f0000000740)=""/4086, 0xff6}, {&(0x7f0000000500)=""/236, 0xec}], 0x7}, 0x3}, {{0x0, 0x0, 0x0}, 0x4}], 0x3, 0x2, 0x0) 1m52.051750236s ago: executing program 32 (id=430): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20044001}, 0x0) recvmmsg(r0, &(0x7f000000b400)=[{{0x0, 0x300, 0x0}, 0x5dd7}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000002c80)=""/178, 0xb2}, {&(0x7f0000000180)=""/164, 0xa4}, {&(0x7f00000003c0)=""/187, 0xbb}, {&(0x7f0000002fc0)=""/171, 0xab}, {&(0x7f00000002c0)=""/125, 0x7d}, {&(0x7f0000000740)=""/4086, 0xff6}, {&(0x7f0000000500)=""/236, 0xec}], 0x7}, 0x3}, {{0x0, 0x0, 0x0}, 0x4}], 0x3, 0x2, 0x0) 1m38.242772968s ago: executing program 1 (id=640): r0 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) r1 = dup(r0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r3, r4, r5, &(0x7f00000002c0)={0x2e, 0x2, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000100)=@new_dev={0x1, 0x67, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x40}}}, &(0x7f0000000340)=0x0) syz_ublk_setup_queues(r1, r6, &(0x7f0000000380)={0x0, 0xef64, 0x0, 0x1, 0x109, 0x0, r2}, &(0x7f0000000740)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ea6, 0x8, 0x1, 0x263, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2a1, 0x40, 0x1, 0x3d8, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c24, 0x0, 0x0, 0x39d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x674d, 0x80, 0x3, 0x1e7}}], 0x4, &(0x7f00000019c0)={0x2e, 0x8, 0x0, r1, 0xc0107520, 0x0, 0x400000000000000, 0x0, 0x1, {0x7}, 0x0, 0x0, '\x00', {0x3, 0x2e5, 0x0, 0x0}}, &(0x7f0000001a40)) 1m38.099674013s ago: executing program 1 (id=644): socket$nl_route(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140081006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 1m37.940243178s ago: executing program 1 (id=646): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20044001}, 0x0) recvmmsg(r0, &(0x7f000000b400)=[{{0x0, 0x0, 0x0}, 0x5dd7}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000002c80)=""/178, 0xb2}, {&(0x7f0000000180)=""/164, 0xa4}, {&(0x7f00000003c0)=""/187, 0xbb}, {&(0x7f0000002fc0)=""/171, 0xab}, {&(0x7f00000002c0)=""/125, 0x7d}, {&(0x7f0000000740)=""/4086, 0xff6}, {&(0x7f0000000500)=""/236, 0xec}], 0x7}, 0x3}, {{0x0, 0x0, 0x0}, 0x4}], 0x3, 0x2, 0x0) (fail_nth: 10) 1m37.733414182s ago: executing program 1 (id=648): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x2a532d1, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0) (async) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0) landlock_create_ruleset(&(0x7f0000000100)={0x10008, 0x7, 0x0, 0x1041, 0x1, 0x1}, 0x30, 0x3) (async) landlock_create_ruleset(&(0x7f0000000100)={0x10008, 0x7, 0x0, 0x1041, 0x1, 0x1}, 0x30, 0x3) umount2(&(0x7f0000000080)='./file0/../file0/file0\x00', 0x2) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x58}}, 0x0) socket$kcm(0x10, 0x3, 0x10) (async) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x9006000, &(0x7f00000030c0)=[{&(0x7f0000000180)="1400000016001963d25a80648c56915a15aa2bfe", 0x14}], 0x1}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r3, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="13", 0x1}], 0x1}, 0x48043) (async) sendmsg$inet6(r3, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="13", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x2, 0x20}, 0xc) r5 = dup(r3) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f00000004c0)=@assoc_value={0x0, 0xb6e}, 0x8) write$P9_RSETATTR(r7, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) (async) write$P9_RSETATTR(r7, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r6, 0x0, r3, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) (async) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0xfffffff7, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) write(r0, &(0x7f0000000000)="680000001800050602000000000000000a400000fe0400010000000014000b0020010db800a000000000000000000001080006000001000008000400010000000600150003000000200016800c0001001234567890abcdef0500080020000000f5eb05ff52cebdd3", 0x68) 1m36.522908776s ago: executing program 1 (id=660): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000840)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x160, 0x8}}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 32) socket$tipc(0x1e, 0x2, 0x0) 1m36.254322988s ago: executing program 1 (id=664): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000740)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f030000ff000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) 1m35.92318934s ago: executing program 33 (id=664): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000740)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f030000ff000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) 4.074698245s ago: executing program 4 (id=1231): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x443b3af723a8488e) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000060a0b0400000000000000000200000038000480340001800b0001007461726765744100240002800c0001004e465155455545000a000300000000100000000008000240000000030900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) 3.723794581s ago: executing program 4 (id=1234): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x6, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b032200e0ff25a60200475400f6a13bb1000000080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@flushsa={0x78, 0x1c, 0x100, 0x70bd26, 0x25dfdbff, {0x2b}, [@coaddr={0x14, 0xe, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x1}, @user_kmaddress={0x2c, 0x13, {@in6=@mcast1, @in6=@remote, 0x0, 0xa}}, @etimer_thresh={0x8}, @lastused={0xc, 0xf, 0x9}, @etimer_thresh={0x8, 0xc, 0x3}]}, 0x78}}, 0x24000080) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1001042}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0xfff, 0x1]}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x200]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24001880}, 0x8000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x44040}, 0x4000000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x40048c4, &(0x7f0000000100)={0xa, 0x4e23, 0x1, @mcast2, 0x38}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000000200)=0x3c9, 0x4) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b04, &(0x7f0000000040)={'wlan0\x00'}) 3.516460496s ago: executing program 4 (id=1236): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80402, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b87a000f00d80f300f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x64}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000d40)={{r0, &(0x7f0000000000)='/dev/kvm\x00', 0x400001, &(0x7f0000000040)={@align=0x800, {0x4, 0x4db, 0x4, 0xb1ce}}, 0x200, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000005c0)=0x1}, 0x7, &(0x7f0000000c40)=[{0x3, 0x1, &(0x7f0000000600)='/dev/kvm\x00', &(0x7f0000000640)="34aaf4515a1d4bf71c94504f5ac53fbed014c05e21f06ac24f009dad939692ca76e3858d71960e0df6d9613529021c13884b6efa5203e6ea13a1153fb6c4edb37eb28b6d62279153a1ed55e185d3030d66696da8813d2d9ab06932848b003ba5ac5b57f7239af1d22c778ef2bf58535a5ccac3843b", 0x75, 0x10}, {0x1, 0x8, &(0x7f00000006c0)='\x00', &(0x7f0000000700)="3a41f69d63f1167f9031eb36e4fdb7d8", 0x10, 0x12}, {0x1, 0xffff0001, &(0x7f0000000740)='/dev/kvm\x00', &(0x7f0000000780)="631d8f5303b1ae1c09fcdbb17530e255611029e993fa56b8c4de289a3eafa48b8ed36b7b2b49b94079b1322228", 0x2d, 0x20}, {0x3, 0x401, &(0x7f00000007c0)='\x00', &(0x7f0000000800)="bf7a9971a6907a6247b70ebad183b5dd8a048563c1c9840cacfac9cbb33cd7d4cd3fa1d24d6d3a56fa50f52f7a736417a7390811b319b0f10ebeca112989b733a980f5eb0cee09b582005df48d5e8071ef0ed70bd7326da7ef6507e0cdd2503c1ec3962ccf076a96b92b8aa01ad8830b58d4f3c1753e76586242749758110544863d9c40ddab17e6385a8d33086c6bcab803e992d3fb51d8b0ca63fc6e7cbb5bb360dd81922632544fafdf336078e545e109ba752d94cb192711c59646a81d4b03ac52d9e81fc5812c3d37fcc3c5ed2e4d4cd23b1a6dec03", 0xd8, 0x20}, {0x0, 0x7, &(0x7f0000000900)='/dev/kvm\x00', &(0x7f0000000940)="418cb8e84c18f7493abe3af2eba07a1f673c6e285cd159803f0083705bf92702cae08d1033abbda0b3199a61582210118098b0fa580bcb94295cd83015c247387ded5c06c6ecc8bd8ef12b8fdf0491596b481d298c1597fdbd5ef157ebe4a76e22bf5acc3da7cd6b82c88856bbabbf89d3ffd3b41be460322923298a3c3fb461a50c912050de21b81d39caba9656d81e36aca3faeede616458834b6c31c3789d9a75248e90f438ef44c3952b874e9943f7f520e97d43704cba654ff3c505ace9cf728921c421095ebec0c1e3be82346a349b1e92a13801de0f1f66f790b60384ef9a02", 0xe3, 0x2}, {0x1, 0x7fffffff, &(0x7f0000000a40)='+-)!}+$%\x00', &(0x7f0000000a80)="60b1dd5d3cbed90a52e035508e76ba24dc7269b01f056985d21cb09b268b205a3490c2e1c7c69c8fcb0f913b777222a98143f4aec48f7352f717e0ba4ed50ce868884f7f2d416fc01354040a63556fad55f1fa49629fdfd4a0c0e1be57363274981a46d71974fcfd2acf0dc965900c89dc5eb8a04721fcae30d685050b679e7de15e5ff1b16f255790c40a8b8653929ac44b33f7f0157d09755a2bfcd5a12652a9ce0e86df44dd4e78182ce54326a2786610f8554f477e280d3f58cce579bc1faea7e45b4dd86629567a0e49224e43b8a7766694fa771c8677c93a044e5c96f5de88b7b3080e39f42c95f6dd68173a9cab8dfa97", 0xf4, 0x1a}, {0x2, 0x8, &(0x7f0000000b80)='@*$^\x00', &(0x7f0000000bc0)="e01fbc8a07252f06ff5ae897ea500d8881dd951ce23489935d917a1af4e5f432c60de5f9cf7a43967b48b69d8f61c4d1b5a146c96700a9b3fff57f29ca92ddd5b2c353caa19f6244fcba08c12217bf85cbc50477cc8e965e83f11ddbe528bd8334698335717dd4df4599cc3d8954fb", 0x6f, 0x20}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.707906364s ago: executing program 5 (id=1243): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000740)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f0300000000000a040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) 2.505896368s ago: executing program 5 (id=1245): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000100005000000000000000000006aff0a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000068000000060a01040000000000000000010000004000048020000180070001007274000014000280080002400000000108000140000000031c0001800b00010072656a65637400000c000280080001400000000108000b40000000000900010073797a300000000014000000110001"], 0xf0}}, 0x0) 2.402039877s ago: executing program 5 (id=1246): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="58000000020603000000000000000000070000000c000780080006400000dcda0500010006000000050005000200000005000400000000000900020073797a310000000014000300686173683a69702c706f729307697000"], 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004090) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x40, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x2200, 0x1) unlink(&(0x7f0000000040)='./file0\x00') mknod$loop(&(0x7f0000000000)='./file0\x00', 0x208c, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./myproc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/iomem\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000740)=""/4101, 0x1005, 0xb9) 2.336460286s ago: executing program 0 (id=1247): r0 = socket(0x1e, 0x4, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000000140)) syz_usb_connect(0x4, 0x2d, &(0x7f0000000240)=ANY=[@ANYRESOCT=r0, @ANYBLOB="02fcf6f71136a68379e196e0fd27bafb449282cff2d7403df5093634e425b399343f1e86920768b964cc7df0fed95f8c20d7095a04f3c40852b11959664d5a778d591a0d9eb4eae963df4ece242121b2342e8b3588c139e94e893c5363d9d63f560448374c3a93db173131eb74ff212bc28cc217baf5ade77dc490fa7cfe529ab45a3d6de427d5b421bcdbc868ca79", @ANYRESHEX=r0], 0x0) syz_usb_connect(0x0, 0x5d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414001824d0072413"], 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f00000000c0)={0x400, 0x5}) 2.295930642s ago: executing program 4 (id=1249): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000180)={0xfffffffffffffffc, 0x0, 0x2, r3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000240)={0x277fffffffc, 0x0, 0x0, r3}) unshare(0x2c020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r4, 0x1, &(0x7f0000000740)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0xb, 0x0, 0x0) r7 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) r8 = syz_pidfd_open(r7, 0x0) waitid$P_PIDFD(0x3, r8, 0x0, 0xa000000c, 0x0) 2.060566733s ago: executing program 5 (id=1251): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="000086dd0203050009000a004000683739ed112889fffe8000000000000000000003000000aaff020000000000000000000000000001"], 0xfdef) 1.731382446s ago: executing program 0 (id=1252): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x4, 0x1a7, 0x3}) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000080)) r2 = syz_open_dev$loop(&(0x7f00000000c0), 0x90000000000000, 0x40280) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000100)={0xffffffffffffffff, 0x2, {0x0, 0x0, 0x0, 0xfffffffffffff001, 0x4, 0x0, 0x2, 0x20, 0x10, "9ccd5bb00db7c3438d7fb795f97af1021f86cb95ec708a435c18eed0dba03e8ede50614890a8fcd90eb0593f1e7b1f67b3650ebaab49376dfe649157a653fe56", "5cb90d6a13845a808a5f91dae9687527bba939095f6e321e8f7ee206e80c6807a2e6ae558ade2f22b3d9a4cea7ce26b28e48928803dab56d25c68b59c27aa216", "f2b65a05b1089bbfb135b0aedf278fe5035a2bad1fc430c95c066ec8c3d8582e", [0x3, 0x6]}}) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000240)={0x27, 0x0}, &(0x7f00000002c0)=0x60, 0x0) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x8, 0x1) ioctl$BLKRRPART(r2, 0x125f, 0x0) getsockopt$MRT6(0xffffffffffffffff, 0x29, 0xce, &(0x7f0000000380), &(0x7f00000003c0)=0x4) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000640)=0x0) sendmmsg$nfc_llcp(r3, &(0x7f0000004000)=[{&(0x7f0000000400)={0x27, r4, 0x1, 0x0, 0xf8, 0x8, "5f5a29147b834a0d935f1a73c1ede87e447367fac9be522cd63bb235c4e3b10350aa795a5d5e91ab8555d91626f3d0d67add5c296799f1788785bcf01b7d7a", 0x25}, 0x60, &(0x7f0000000600)=[{&(0x7f0000000480)="32a54d5891378a406853f65cb7f3c1e2359509401abdcec926e43222db46a2e07f92345784c55fccbe62202c2afd96a61ead9a5ce844c889182672ee737b717a674b1445e6755f594a444f8466b7f30116c77ab3d6856cf2ac21c57b0ce98b956cca5c651a3abb833d330bb9bf3ffc0332949c48666c363fb6433b295d2f1086840f70fda61cab4436f9d1ea82a1395a891dd9688a4f4efb3e3b0f3268dcfd4a", 0xa0}, {&(0x7f0000000540)="1ddd62fcf9499fd4325ce473e6fdcdaf828206b3ec23d570067bc7852f588dc87aa179b0a163206b8c0f850f51a1048d2b50f58279e2062962b86f1c4beaa0865d3642290525ec3a044752b08a24ddb61463f994f122e18af3970d5151dc8c08bd0a536cec23bd4bffcce2139130daa127664191c95ee3735e101c027c8d7ecd773f7f4f256f7ae388a154ffff9a8cfc47dcdf46ea2b503c0a95a02552", 0x9d}], 0x2, 0x0, 0x0, 0x4000000}, {&(0x7f0000000680)={0x27, r5, 0xffffffffffffffff, 0x6, 0x9, 0x40, "416a6e1e24921898f773148bfb6f7f9f429826f2e8deb3a15aa950ffc35b7c6ae159d46400ec1334eb08a5d5b4053cd79188c30d356df9be5f54956e4f61a0", 0x4}, 0x60, &(0x7f00000029c0)=[{&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000001700)="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", 0x1000}, {&(0x7f0000002700)="ea32dab0d58f0503c8bef6bceebb185bbb98ed595d91cf60612c22c965a3aa21d74d3db8577ff18488d4b8736693ca542dd6ca8503b0319193ed8b383025f02eb08f94af9d949131d3553d597ccce8ad5f4cafd5d95200b4e6b08c84e8a7b209677820352b0992ddd5fe41abfc9687bf216954e7b58c0ab8d37a211965e65bd1d33bbf91ae7eb7972ae0ee0fdd16c4686f6e315584bfe42afda75ad4c123aeb55f52c0fb90d1af811c035c47246f76ca278163831cf6f1ae6dd5e87ce836", 0xbe}, {&(0x7f00000027c0)="2436ea9e6db881f36935ccc059972047b4a99204cbd090bcc714f73d755bf1ac03ebedcda39d2641e2a6003cbb2bc75c05eb315c87a45c468798e9324aa0a8be6275166ac904341b16fe0a8e38e4ac18363607962c91b10050382b5fee2a7a24f72783140e8173da88771e5dc29d4c886ba873a9b220474f6971532388ec0c0341eb0d6c766e441a2052d241f9c185056b3edf320e2f0d291c110942fe43a1bb2623aaa513eda75877dc460807d65d2a2c8a613eba30285e0f839b9df1aa793ea64d37a161e46cd7207684834efcb9d0bc8ae597a33d871817966cc9cf382e7f9c315c989fca4f511032b9872cd7a84e56d893d5", 0xf4}, {&(0x7f00000028c0)="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", 0xfd}], 0x5, &(0x7f0000002a40)={0x38, 0x107, 0x4, "6f8c039d67b28cfcb77ad9e616ff6ec224f455055d336c7e51b88d44f0f6c4e0c7"}, 0x38, 0x8080}, {&(0x7f0000002a80)={0x27, r4, 0x1, 0x7, 0xa, 0x8, "e5ad5a1a81a84b82972301c76c7f78a8da0de0c4d82b953b0777396afbf5bc1f00a762687bea2410a3bdf5fff3fb55a4d17348ce36ba64675437e4dae48e9e", 0x7}, 0x60, &(0x7f0000002f40)=[{&(0x7f0000002b00)="530551524f2e49c8f9a43cc95b11210c988acfebc1211c87aeaf9041d1e2ede6b34000e91248034b38eeeed67ef5622c948fbce84ed74b9a9e0386ffb11953db8e9401788e226e69a6721b7449193b1697c756180e98ac359ba06bf9821887439d37a935ff2dee60b3117c5339be9dd9171e9c3fac28db239c2337975f6cacd1cbbece90109c7f5318cb918f3e150f5c95b7eaca0b8df5d53cdb41aac6816aad6f1f6cabafa508e03652fea56036c35aa292e2a851525229c0c5688e94cb1d0b7c2e169436f2d7363d9a67da78572210767d", 0xd2}, {&(0x7f0000002c00)="17cf38a305b67d33db09b6e438cd8c7b19c4af5bdb929fb7d87efb31cb456c10b97b3fa9d9e329711031e11f23e1db1704701422989b076835c8124d25102444df25d7f143465299e8ac1e4f0c5385b59dc32b6b788cec3bfcd3210a1ed8dca68d545b2701a6523fc90c9973fcec15ab655508750c3c64545210d187839da7286ee9c805c70ec91f3f47fbe14f6d61368bb923e22f5817b161349bb2d449a1011f06ee240e6b7a8ee23e1f158c91eb", 0xaf}, {&(0x7f0000002cc0)="1d0c4f4ce542c7518eb2fbfd878d271f69817f1168df4740614469aa62246fe69c7fb158edf32bec932798f47d8806161b19e8d0962090a9ce093ae692a82fe76d8afafaa8af035721a9e3e1a291ee6cb11c539ad59c9d4b7715d3b1cdef00d05c7d93fb7b5dfbb384", 0x69}, {&(0x7f0000002d40)="5cfdef854675d3bd2c31b5e272138acc878b80f215d08f1f586ee9b78b41b6e405d5fcb2ca2ea440e68a0058cadabaa489cc1eed059bc96edb8ea160e5884a020fa5b6442694e763b1fcdfb9c821fe1a2d8078009c295ebb0bba9301f173588a8a4f157d0f7f7c42d248952464d7d8d5ecd57237e36d41906adb404cdf86b13a2e82521267d3727129f99e48e7dcb3be5cea046b3edc13e5e96ff00fd3aed174dfc25fc20821934efeff95a3e023b3748caafc91c6db9cf45a821a5dd8289a81b8fbd0a5813ceaaada057b6f89ca", 0xce}, {&(0x7f0000002e40)="ab7666ca2c953b0954be6ac1eda57a93bb83528391c2915a145bd523df7873f23e1042847cade3d8ebacfae12e009dbd5be5d60c38be3ec2fcc7a822a451b37d0106d0bc9974781e63f5108404f5331edadda9b2da381db3238bf533ba574b1af8ad32ef64957eb83eac10cf473c2b54a09c56900b5146a2b79758441e56d77d286965a00227861a897bdaeb94666a2be7fcb7aa760d872d1bec7520145534a18ebf2aa0a71b84ab0810a87289e8fd19ccfb492827b3942a52875e9becd937f0cb467e7ee05f5ead25ccc05306b59064e93e60933f836624b37b8983cf9ae72045186838155df8a25010672a64c05b9dfa94c5", 0xf3}], 0x5, &(0x7f0000002fc0)={0x1010, 0x29, 0xe8d5, "87b195025b3c3a16225e1471cf13b1658bd99810caec93dd7f4d7e918ebb24a05fd3dda8d42166ea871fdd0001195e79c3048d16c31f2b0d3e4bd963c12c418155bd90ac31eee85bcfba98ce3c831821eaa4690a98ae0dc319bfeb88db4dc14b34acd5e1ccb77bac9f179cfadc09655f4f43ff6b1a56892326a2f8091b5470f9d42407cda39e6a1c3d4cecb2d46daeb0db73bf54b8cf6bedee7661eef5abd91188399566f517d378b6d7f85b0a9e408a5845e8010eab61db832c2e71ca38b901e5f2968f22cbb26ce7e6eee8dca6106c126543105b8cdf95e15120e211ddeadb89f1fb8e21b7b46cfddc59243635c328e7b45730403874743e033aad310f317733d81d544155e6a89df062c47e0a561cc7fa23befbfa8522f3d51c705cd37ff0429fbe827fbafb678b51c25e54ee7e2dc1f321dca86ac4470d3a9369aafeaa245560f9e899de7c0435d9cc925e92d2c3bd40686bb2ac5d7225a0888c79b3e9e34e80df725f5619ceb0bf3a7e435fa045dcf73e2ff6288c9e8c178b8e38ed4beadbfd27d756c7506b522640b564002b7d329262c9c96b468dc08eff6ab4db3e6a494fecddb8ade0f0f2e4a97fc9d3548cecc056488a810c06330d221353b8d12fefeec3a140babb3022bf588212668e4a0c37383846ba24f78a3dbd6b11450cb06f3aec5d9ad767cb2a48bc4bca0d959551977929aa0e2cd5815210fbb3f65f64d00238033951e0e6fe270053792c595a9fe66c48a7c8b4829476275290c588d5fc2759d0e4c8bad829a865815a9a331230c505e235fb437f362538e2a46c56b6421febc42cb8d1efabce9630643fc341b23fc70d8362f5bb2bcbd584d6138759745242c4a7edc37fd13a12589f2b1875bce690aa5ef233981b2f50c93968ff0019ba9f13515d1213bd69178ca797670fee6914eaf682d48fb62c8a01e2a682803bc23f94b8b2c61648595d3cedccfd280eb359848cc570fab0dd6d85cd8b1e8839c1a22300052eab1dcf08ff1db8172172ee59def7cadee1d31bc874d68360636e1304dcd6b1d6624377ef92d9bff6e8242e8ea42d06c556418b37b2f7a31f1dcee6fd6f407d86e3ad7aad1b99f380b8a9b80447ae9a2c63132c98ca8c332d3e4c35768f145a359b68835f03f9a1329b3a4037b45dc45e9c294a8b775f4575bd032b54279aea67415b90496f1867943e6b9a502cfda12d10f3e57bc74095b7f719cf940962690b92ac8e90548e2d2f4e5398113ebf2c0fb655edaa6e2b1e1b5a147b680f645a5abeeadd8ea4b8b896c1f33b96477d16a4204e51d3c28b52bbbc70e852adc973870a6883bee994b46940c1a42ef1401524ecb6d1e5d7efd7b04ba9ee25b9dba59321b9ea5bb1e46dd1fb7f77f0984c8da4bbc2a95e41ec69a2f21e99c5b0a54735310813d12d74020192f5d1dccd481d3f97f043e1a36d172a3f37100c46510ef6b73aeb0b00854b300bde252f87f04c84b9f0cf8e01d36b236fa66d5944016acb4f226baeab311b7d3975846dbc4a3851c0d826ef70490651a1d5269ed28cc48f88e4e6965585f4dac7557c54fe35c6bfe9946c8cfd6577cc6440a49d897edd872b37f439f5f499ef56de86183bd217eca008d4e0201917022c76ac68f6077905395fbb6f05085f314b201a5d9e0ba8da91e423bf32110e6ed9e1dfffc3004e054fefe48137014f946dfb37f6d50fbe2fb2d53d0795fc1b0ede920368d5de0495f526c8298502074d6c32399884ab0f3eae510ab3951ae46deab51f8a41f55fa06224da3506d85378915c3384bc3379d6ec5d9214b3d4f7823c553465947f0f3387f04e7fcf706a4038f29194980cc208a694a870d88ca4d469cc80492f8d1ff7a289f9cfabb9ea8c965d004b500ee04b9e6bebdf852f927eec4c7961446e209a9438c8b9c8303fee76d064cbccd8511bd0141c988df9a412a8ad52ec947bbca96c63418726f1e530761d45eb4b24ab419b58d0bec52821d73c8b54162c9507b2552367d8dac14bb23d6cad61c6ba65152f83ea32ce4a7e1d34777441f88873e935212e92d79aa54dda73320cfc642d5ef8356babc1ccb846ae3d8f41593f1b50dc40669296c22b6a6176a4422702eebbeae3d13655a41d6261e89b49fcdf06ce298cdfaf6c4db0a561254c6707579980efb3f79dc158940fe97aaee04d2fba843e6f1c7ba8683d3744e08326a6aaa4fbe959d6256ea720b6ea26184a703d9fe3c191f05954465d9f54e1bd1895bd31daba4be73abb145cddab3023b0f198441154b13c195488302473be2947a961adb78bd81a6b26e05a7f2686dcab1cdace0855bc201c1dd829aff0cedddadce100769a3cf1425a911454d6e37689edb5effb6407077bf0e0a65b4cc0f9106065e7c88b7b12d821e013ec88640b7fed8b49eefa15193fb7c3244572b1cb7277bf485c7da1ad2bf84f660a8e7e11bc8adaec5995ed6e609f5bbc0e243556cb13702bbb59b02186abadc558e00edf9a49a107271aa552d73fb5d569837b463955a5b997b24c4b12c07abc898740250f67565de96fd4342e9e10ed020b217084f00c5f6c5a7c77b178c4761bca48495904aa3f9922b2835b2776f48de924bf9df67f7c4e35cc45867338b34855746bff0df55e93ff9581ed120f8ded39deb5dfe36b6e306ee7c6f0ed4b0a6c7aa824bec7b89535a7da57e9dc91219272b81b74b7dee2759dfd2cf8a9c2ad927c71170d68fcd9a2ff940c9dfc451eabb2d72fc798cd018d664fe68daa825e93a8c6223d7f81007c005334da0861ce89bced2fd7583fa61a0316ada6395bd6cdf3c59d60ee3369b5c0bf29d31cdd80dd27d3695ce0361b87b265ac3489c132f99a794b82611b2280dec188fb48f66003c58e70a554afb737aa05d72121bdd20ae0f7bd3ec2c88eeeb9e1df23ac66c896fdba4c227395b4561eda7ff6fb57579b409b62c9c30b5d3badc00e0d74a32ed8926e8a715cf2662a7df4e8d80045d95575856ebc7cfd4ea5da147bb1d424de146ea1db7357a7754d46f7324246a71e7767e8be030f9defada08b626f582b824e4dfdceca696bb47f8e7effc690fc480bb98b038bb257c2a4078e57813e076101733989adca99d794ede7cec7b25822c9dcd587205fdcde553fa2683b15daa7d252d20dcb9f2c388c541abf5bbb62e1f51099984cb22747fcd62333ca7f620bc69bd0a07a42efa904f2b2028365313257c09e5d5612d0317f8eb9e19c14301d7eba938aace748e3adfcf09aaadc5ce2e867d00e5d319e9eb24cc3458fe5460245bcac6a34fd0a240c90660cd773137156140e76d7fd60ee4a438c3b1f51b8667bd096667539eec6b7eccf47babb3afc0ee67109d413641980cfd0cb288ed6ae5cd1bbbfc361359400f126263c2c91ae665593b143c9b490e4217b26d15333a92a98d86caf0f6e0a492a183cdb33ce474c969757d375a905d73111d9263c858a322f7928f90b2fa5f7714c14cbbaf24fb776df3897a2282dd6296ed5e1d63f465ca791b46b8bcd0d4d3d059256872047217b7691d4843561e066ac049beddcf553ad2b0e502b949ce5fa031cdd8c2cf58737b3dd08771b91a898fe4ffec883dde42eef65f623145e98cf75468c1f73c3c544dcd0092de8c4e40130cba20babe59fd697a8669dd7b8a1c8f96a7eeabb14f60b5a0d596766c0e5cbb93a29b5f3f098297e6b570d18e7a0afefc0c4e183b100f41c18c8915c6fa47874cb8fb01b3dc19c57175d83ca9bc485a7f1ede561e18f538efa818bf0244de1d149d3a2f428ab20a1b625d87e0bafbfa1722128aacfe9c5faa12fba6caab80a3926b17e61a6d9bb2109b3c5dcd382cb1aeada6c16dbffb79d35a5f759d47f0cecfde9f09806bd5951538f3e187574cd5cb11c88f5b6ae446694c4097b7baed89f74ea810a6f951e4a41fa4038b4ef5e6572959735e7afdfb0b7c0a7ed39a47351845ae4ee2e69c1c161a8a24eaf7f9066c60257eb4db9bab610c4d2026a9d3b38b15c67c646169752a87035667419ffc08c8605eda0f5386fe45a8de4d38fc5fcc4e9e1f682b0c6abd54f48106ab297cd3da05be74ab03787d47e273f98765a918cd5f5fe026b937ec80010750a6b95131ea7eb9304a591abb548fc227ce788cb36d734e8a79d3bbec2f78caffcb5b4eea9bde7144a3cba9778b385c7c84e3bfac1c3da8e26a07f2c70db1e8123968851f3e1eb7b708d4ac4f51c17df5da352974278b01b72acbb766096db8b5ac6a53329297a9eff5b510a951c44cffd97f0f32d044f31204f86b115a43314c5a5c6157aa8b9c857062d751db7a44610e601388caf1a2268172807aac2ef4de5aaf0881d3e4d34a6a449f95804d0cf25d9ed65479c429d47f44b6f219b92e04fa7a2cd8e387cafe7c18c28272ca69747dac5045b7963fb404d2146bf0fef2acacd92e1d95115d67dba64a4b34c6ad9b903b0e7cc052338cc79a09c7df89385d768eca11dab49b9c447486488f6e8d5590b9c60b52a52d133da3d3911521fb5c345e0f249219249deb2f849172a5e4c94c86fee175eb0d7ac74bb25ee86cc6d68773efcbfa2478c8e1bbd98f402378e269c0b53e1a3fd283c0de4612279e7b2a3e34b448528da91aac63bb5f8eb87ffd83c97ef07cc1ea24a20fd07306e9a4f7ebd39621555ae1f1ae64a27e1d010ddcccfdeecc6f9095fa112273629e29378c8db01eb13f8c5f5221fb45daca11cc4ccf297ee720dd754f2fff69c89971c4644f3359e81cf92f84c8c5be0332b170d8e284717b81043eb44060bcd2367655a86a63f3799f3af4baa20fdd80767fc28ce3e1f173cbd3f43403f7bc54d559b1a584a6976e923f070f2862fb06050fafd2312a09efd84718fcf5b99f0d5bd5c5def59cb28e7bb17f2c76b4921949f36f3448841a5db2a1715faa55dcd985f3ac9ff2c96ac8f7246fb88e3fb90a316c665e4c309cbd2b5a14af8229a8599057741f9bbaf2afbcc3702ceceb899aa1e9b649a2bae811bba10812fe684fdad859b83b58d2a40aceee068df05b776bbb536639ebab7fa25f0e4d4bf9a13ba02ff5234745521d1cdb1757aececd71d5240c2f01b1b734464c31437a2dd9615f4882c778a7126c018ecacd6af430a8bb9cd671ade34e762a3d101b248d23d7084663fdcb2543dc2bf72d89af2717c2885c7ad754188dfcce6b4151762d227a89bf7b4e2d3bfc73c5589f2e5e88939d4c91d25c0f346afb1132bc138653ef5514cf3304aa5c6e02fd67a3359515b84c01d7b54a337b45e27a14ab65840e8b2093083c901c1d76a1bf6f10195cf5e4a101a0339f4ccaf1362b2b2ab127429807888369c9dcdd06426761c6e65914086227c82dbd14d951c65544e9e6adc0b08c9ebcad45fa97a1ef7a3ae04ef33272f9c280cd2304b247c429f5dc58ddc9a2aa6fd87239edaddb7779d6d7c73f07d3308bd3a8e78d07fa80275cbdab187d04ef9963af366d36660f96c3f55befedd938f007b8805b322612d8d368ff6f6ad4b3af9541de5d71796fdb851f11c9992fa1e4195430cac914103bcc9d17aad19a7a50b183f76514274f2c5abaa37371730d449b8bb81d46aad39492ddde4e5de26c26ce66469b428e53181a6240dc4c01e297c6400bf73ecdd993f1a66785f5d29a82882d5db4a77ecf81a509561793ec1ba712dac983fe0eea6d9353541d44a249766b51d923e3626fd86a3239d99a3d9e1c98334c0b06d6e62abe8ac3dc12b305bdfd8dfca2b18be03216c4065d6262d9c6821bd18e8eb1ff921bac4fe9490f5c7fc63d5d15ce1d00bb4e5584e71d72a"}, 0x1010, 0x20000000}], 0x3, 0x20040005) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f00000040c0)={0xfff, "7bb47cc084a582db41149cff3d93de630d1c6d9f6efbae2307ef2fb7bba08f12", 0x5, 0x4, 0x4, 0x15, 0x8, 0x4, 0x7, 0x1}) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3b) ioctl$KVM_SET_TSS_ADDR(r6, 0xae47, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000004140)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000004200)={{r3}, r7, 0x10, @inherit={0x60, &(0x7f0000004180)={0x1, 0x3, 0x9, 0x4, {0x20, 0x6, 0x7f, 0xe6, 0x4}, [0x380, 0x6, 0x1]}}, @subvolid}) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000005200)) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000005300), 0x4) ioctl$KVM_GET_PIT2(r6, 0x8070ae9f, &(0x7f0000005340)) ioctl$XFS_IOC_SCRUBV_METADATA(r6, 0xc0285840, &(0x7f0000005400)={0x4, 0x1, 0x0, 0x0, 0x8001, 0x1, 0x0, &(0x7f00000053c0)=[{0xf, 0x101, 0x100}]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f00000054c0)={{r3}, r7, 0x8, @inherit={0x78, &(0x7f0000005440)={0x0, 0x6, 0x7, 0x6, {0x0, 0x5, 0x100000001, 0x4}, [0x7, 0x3, 0x3, 0x10000, 0x8, 0x8]}}, @name="8192c8b04c4959d81b097e57669f0f657530156da7e4e9053f66720caf01fbf1d08bd41af42b39bf2069e04e56a049fab8718ad4b941c6642add5f4357a25bc3ee14d0ab10c68e6a815ab0e3393ebf0f42a18bccca625edef8e04c206424de817707c5e8c896d8a76dcb25e1fd927051d319373a1911274628b50752d96574e5768c572eb330e1db54066b33d3edd1e22471768005793427aa9b46eeb70085a29c1b6622b7282c321ad5e7c3306c5334f511e47b1a307641e234eee1dea5a131b6c13eb3344019e0ae9f85a8386209f8ae9600d366c65eab6d736fd9903c6405e970c9a0220fc1cb6245269b24e8a85e7b1993eb6a59666cf186df01a5559e4cd73f06028b29baa864699caa9bf9e6a98c6760d10bde0fe0b2d1e262a47b6c3b8ad2a644b39be015cb655b769ad8f065d0615ed45d92c6c44823ec39ba36a27a9e482dcb88cdf1750136f5149b417ee1735eeac8c274f0d23d2e8a18db6ddfa56cf4c89b4b22697b2328ac673d2f32fd6f2c923cf9a184c0e29713016ad9216578a7130514a0a2c58c0495495073ab60324cc1d44531b9213ba2de31b42175014044a49afef5cc3b3e95be968214df26b16750bec4389871b5d835e08fa75ea4e8fa6b4535f2f6806088cf922a93c04db005aa447c5191fedfa00c9d52edea124d7182921b6f77d837982bdbcd3d118409375795eb841ee2cdcc2721172d0efd7f092c627d03b16d1c1bf0ef18d43f52560feb129cc23389813ff97f742aaf6477c14195afced0ced3cadc7a44cf24c9692cb723271bef09cdc81b4770d44c1ac9050f18acb7c75f0723178b2bb910c2edd61bf5b7cc23a5e1681388760ed3ff743b0e37121c4d0bdcbc85f0b7ead255d5816170803428a9e195345b6839200388434787673260a429c2e569a1b4d4dad6027ccc47da04cca2ec47ecebab37997503f8d19bd49c3b7ceb8517707330b8a3cc106ffc5dd3c41b8ab522bb6095562e775019549de0063cdab9337200f931be1f3485565c391e3667daa9f89f7837d908335d745d2de5054ad3df8a23cf0e84c4f1870c4f9721737d87e2dc53dfae9f6f5a0ebe18b639b7b58f578e6b62030e64854692f44493a10afdcf94b905f51494c21f52b5a3e12807e731e27e235efa7894a85b0d793d4142a46db7a9d40e3a32cdd933e9e6514ef4643f2f1933c7335df079721324b9e6e625bde0c905e802f3d9a61e7275880f7e12af825cb75f67d40d1a1521fcffdcbe1e2a6c23265d277cc6140b604af30f3d0bcf34599ff164e718a41a2ef6a9c815fca09f432e722203cd049a385005029701e32d6a8daaf860cbbb468ba7da69060361844f199dac6b675b9166d9f7ecc7f1f352ed5d0483c1b349bbd95dc29e50dc240c936571d9d1254925f822c523ccb12b1ca4ffab849add798f2e7f6888e37c880100251052285ef07cd88ad5b6311309f6bc7a9115f02e1f47568a6c11ed951fffed0f4bfe7aa9ba388975a41c719d27625507b5fabed83e71e4b4838235a4391fcc9170cf7c0bb017d2e6b0d66c1e72aac92ddd4591c8b95e52cbb41e75167b6d3e17b3d15fbf6e7c248140d4d6d63d911f1c5bf8ed05756952fbf6c708fd87da31c02f21a869bce8e5efcfc9b93963f990ec8f89dfa0ed30fa6918bc2a857ca4807369f67300c45be28efdcce0a02759b0061c493df985d1bdde326e161f77f1006901e50697ded893978396eff7ba4b57a5ef1e0ddbe890b90fbb8c21235a2d72f0e647ca491b7b1c7e878583b97dd8e16e3c73559e6c2329c5c4b26bb89dd6533d75ae7d6c784e2c69fc530efaecfc32b8c9dc63975b4e509da65f6b54ce698b13a808650983bc275dc646ca200820f81fcd6a33ffff1771a8ac0cf71a96c7db8ce1bd2e1c4d9c9ec9b9ce56152e5deeda1535c00418ffaef4592e5d4ffbc58977cc4d9fa086d2148b826aaecca5e6cf41251856a65262c1b8234bd1a66bf7961530f0bb0d582b0d3424fdaf3adf06fd8fbba8b551c5ca622330126e26f00ccd9e27c157b8d3d6164cb70c2069b496d748a6c6e7ed72d8809b74e4f19d81f15f99080f22e417f74645eeb081c6a1d4a960d1d6f221adffd4927442b51963de71b5cd6ce422e749daad1ff898f057b3cc6455ce5f6f644972c5479d812359c107539040415938a5742fc85bb34fe60763fd36d57a39b204f506d302576f7f3c15cf653544be29c127488a6d505fa6bcc690976abcafc45c19eafc1623ef2d9c8669f89f907c24f83937cc78be22373ac787107c9aa7ac7c1c07529c4ade162f83ff2d3e93b181f08a83aa8b416645b73f1b8cbc7bbee7dd5c819c7000cecc92f51a409fc111dfdbd766d494e9f908c0fe4c0feec9fa7e3cdf90b65aa1e959ac976e5f38b3656898b013fa9d31e0d1b93aabe4b88a101725a1cb6b2d229bd7f3ad8b1a0685556a9659c0704bbb2f2fa10dbb92f615974e6af33c0df6ae08a0d395d9817a3fae0992efa45c2d7b1912f4cb013fac0cd252e2b2f269497d1594d827355bc9ce24cb46d77091273da87d0ac8239cce39c72af684a69dde7b2b40e77165e33c6d5811459b789dc2fa11bad6e105ee72102c4fe3d1e2d4ab91ab8c19adadd761b3d72be1dba16f7fd0a0c70e0ac2dd4d3dfca04dbdfde937305cf88a783c368de813f5d8e6195a609737db48e74cdb90d5efffd28e30e216df10cfd1cae823f2c6fe7a0f3b23c8679108eec4b1c385739ec12851848372cbaf7fc0e44ddf0a3d0b17961d06995e0d6fd0464887ada31f3ccb65168c094157ec2ca55b3107f9835810e22cb024351af9c882a634d3a370add7b72c4e7c0c41f12626c6b63dac4d036ec25b9e183abc308e0f9d63508137cb05786cb620b6ca546c26e093f2c39665dfa9692f6aff89b332ab6c21cefb42b641fd4be14c5582c4bf9adda3d033beb351bf713b72561fa51dffea47433bd55d1a58e5d80fbb53db5df02c8cae71d395f8762a90f1db6d9ce95f587d027b37d017209da6223ef0a32962ce629b031fa676a1147d85599d8716645c88ae12b1c69b18ebdfb91cb1cf1673f1174d81204fffb1271a189e337585cd96626152dfa28b5b94f9373aeb56bea4752ea96215efc3ba618850fb31ede6b9876b5e5ca5e5b794b3245835a9ec86ffc947b4eb37d1bebcef9a369483be32e3e576bec4754240ed3ead4c9435e8c55a78c1757365818cb38f922311f53bfae72512c62c764782aba2eb5573dba5893aa60cc289359c339d287fb1bde8ab2626608c77ab4da67c044b349a9722258a2558f83bd4819721d7560c529810b1f460a79835c7485601bbb3ad4968042745f095c3c9bd7b8467ad488a343d366ced52bb2dcb5a7da5e7da291dfa3b588231c2868ed8cc495c9c5df80e38497c9920332af1fe693ce7d16c25bb1b64d4c8c8fed5c26beb7f0ad8e0b3647d7c16c38aed55f606bf924d9fe2830aeec330df019e7b443ac305b6cd6c373669b60a8c1dcdaf370cf7a0128f11775e72882c8de67031c4a2ec44b8db907acc7fb9cde0c7cee7162345c127d0904a207d4c74938d04aece99b08a74bd4f286175b4253dd78a0c3b47e81226aadd371304eec074fcde34051c03378ddea0b13b4a62e2acecd1c154afe2c600024a2a32c008aa145181576785fa035d88a8b56f69b591eaa8315a2c9cac82594f4d26d318938937d8ba17e54482cbb7195d5acce705999237e354e644008880fcd3636941ff92a292cee5aef061c05c4f5009931c84ef8b2d9ee354891a828a59e73f4563bb0e3b33fdd7fb24bd1d8da742a798113a09f2c8b24618fd41499962beb9c31fd05774b4b6790467d9558ac3c97374e55c60193e591c7ebf71941dd76a135a74595a34eeec2f4a3b2c9d16b4a48efdb80f0f43f143f9e0d653b3dfd0c66f34e83188e353b8e634974395c1d8f8aa62beb0c2f96124660f20795216d051495f9b600ae4e24db8b59e5dd7d5e00b66880e36dca72e834a9361c1e9ef2191c50a71f34e69acb6187640e7b384bdf1e560c743c6dcf736f8152bfa3d444bc75502049f9e574420f3cf9f012e0e0cdfdf49e50dcf841ffdccdd11baca4e62bb49af3fc3ab23cddeef166f799dbc1e2552152729aab9c8f25a5c593d073c619a84a42b3eaa79b086961e290bb2a462b0f391dd746c029cdb960dc26d131f495af0f10016624fe35d750fd679c6b046ab48ed01553c45c670e4445fe57f3c64ece76eaf3ede91dbc5e8f54a09ce307bcf794ba4f0f37a6718dd2eb477136f82da5fa9618cd7d741c70565cb555d8bc0842aecb0fff512d1a9afecf4299135a35b029926ee8fc398dc68a0d326301f820788b216a6ec28b29185c5ac3e6f67e6586ad8103bc3c2186048ec7fa57ac47f9c5e44c43ed3163794cc3cbb010e8414081162ad3bd754e0a60492c6b66efa937429cab62adc76e1515c3bb7b128d8ec44f2e438a681cb635402e9e14948a8ee14f79312227097f48e329ff8357a9f064858121dd13dfb3a205ae0575d9b90e4160aee59bd2952ab0ab232caab6402f189840b2567ab45bcb4c1db8f8d242d7ca326d8f69aa999323744ba105efac384aa1489ed94f8cf13ab1ed5a61f42ce8d6e8003f29ec90c2fbf1a7210cd942817ba15dc06b22c26783f1302ebd105bab22a7271e36b7ea08987e003a714eec04979484abd0773a9c94aad16c64ab454ff17d0e8f58608ce1db45b28126743078a9661fc0c70dada14e2dbc0f14a54240b755522e71f7eb40611401e4032854b8beed047764c2227ce1ec9647f51c2e67dbf6ad0126f34387947b5250b18cc3e4cddd3c52ac00ebec39a06fa988f8609e352cc011a144daf4fade763abca386a3ab31f6886618b1c4d0d047286acba3891eba91f56e4ae3532323586da94a1e6583a180e8df7146e729fda5234f8ba71e1d1d26918f4ebca438991d3965adb86e9c553659ba1bd7777224db334ad1a19e8d7bf3cb3974dc1c26e077813ad5ba3691212ac429d187993c6dd437dc271f7d80a4cf25073b5c9020f4cd56ffff04e15a31b738846bb61fdff96b67c6dc5346b92674aa0fa4d3919ad8f0cfc45861941e6858026d418e49305aaa531e097bed704e105edffeb42f3f2108f3705bad6fe6a1fb7afbff6bf7c0b770b749dbd46d0b5db80476b5ff3d07e0bbe8e108666427f5991bfa233cd15e2e7894b3b384f46d48fea6b17e9c150485fb33908f66d614e2bdd3cddd7650f979a6609268fb70699f8e3a75a77c2b11a4ac0749431ce40a34e575a2d398fdb37c5fb3c498e355a8204cf396a6df6bfceda92035cd0a6b5d3b50a0f9abf4e1f4573731cde02ca9ae05965870c39b205aac146e9af4d216141eadd0df09388e11c4e5fd5ae3e40ba73006b696cefc48446f9a8efe1c562805c16725afcb8717dc4eadc63942c6df23c7b110d32dfee9942b9a714773049df801b54de98c961e53782352b3e131487c1e9781ff0e148a3ad77ba72c608af79ece0e7b81926648106f5fc603dc06d0070dc02232e5f80465c0f1e20625d06c018009988ba14283e7d95d1084265857d13684f18c7705182700af9f08e43c3e5a8d09c5b46f2fea32b0851fe8d2c02e3b77113fcba92dd7750b6da988f711aa6d6e16e2fc98146e17a7ec911377bae8eab7460c78f66b3d6915cd0140988da122e472f8f48293090c6c973218a65b4f982d4d01f5d"}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000064c0)={0x10000, 0x4, 0xe000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) syz_io_uring_setup(0x72c0, &(0x7f0000006500)={0x0, 0x9fbc, 0x80000, 0x0, 0x1d}, &(0x7f0000006580), &(0x7f00000065c0), &(0x7f0000006600)=0x0) syz_io_uring_submit(0x0, 0x0, r8, &(0x7f0000006640)=@IORING_OP_TEE={0x21, 0x40, 0x0, @fd=r2, 0x0, 0x0, 0x80000001, 0x2, 0x1, {0x0, 0x0, r6}}) ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f00000066c0)) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000006700)='/sys/kernel/hardlockup_count', 0x610000, 0x4) tee(r9, r6, 0x7fffffffffffffff, 0xb) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r10, &(0x7f0000006840)={&(0x7f0000006740), 0xc, &(0x7f0000006800)={&(0x7f00000067c0)={0x2c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}}, 0x2c}, 0x1, 0x0, 0x0, 0x4048884}, 0x8000) 1.621482486s ago: executing program 3 (id=1253): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x242) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000040)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0xffffffffffffffd3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xe8a]}) 1.535506288s ago: executing program 5 (id=1254): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001f5ffffffffffffff000000000a20000000000a01010000000300000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a4000000003280004800800024000000012080001"], 0xa4}}, 0x0) 1.461620304s ago: executing program 0 (id=1255): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003f0007012bbd700000000000027c0088dd76e2800c00018006", @ANYRES32, @ANYRES16], 0x30}, 0x1, 0x0, 0x18000000, 0x48895}, 0xc020) 1.41880245s ago: executing program 3 (id=1256): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1200}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}, @NFTA_SET_ELEM_KEY_END={0x10, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, "f81f3fe70a58a077"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x100}}, 0x0) 1.243709867s ago: executing program 5 (id=1257): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4000000) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) syz_open_dev$admmidi(&(0x7f00000001c0), 0x20, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x532]}, 0x8) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x2c, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0xffffffffffffffda, r5, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x5, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x7fff}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000004200)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea2105600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009900", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x581bc0488f52ec67}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r4, &(0x7f0000009480)="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", 0x2000, &(0x7f00000093c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x18, 0x0, 0x4000000000009, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RLERRORu(r6, &(0x7f0000000240)=ANY=[], 0x1a) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0x1}) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x2, 0x0, 0x0, 0xfa, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4, 0x4}, {0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x1, 0x0, 0x800000002}, {0xeda7, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x20, 0xff}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000001c0)={0x1fd, 0x7, 0xeeef0000, 0x1000, &(0x7f00006c0000/0x1000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x7, 0x1000000000080, 0xfffffffffffffff8, 0x0, 0x0, 0x2004cb, 0x4, 0x100000000000000, 0x0, 0x0, 0xfffffffffffff2eb, 0x2000000000002ff, 0x4, 0x0, 0x4c3], 0x0, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 1.216872969s ago: executing program 0 (id=1258): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_VDPA_SET_STATUS(r0, 0x4001af72, &(0x7f0000000080)) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffdfe) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, &(0x7f0000000480)=""/61, 0x54000}) syz_clone(0x41200900, &(0x7f00000000c0)="1aba000c18e4f8922155086c0009418722ecb4929e29f6af76b2b296af30cd64b7a17bb79ee27c6dc8c5d340b0901851892c6057243b3e0d649306dac4a71cf6359c626cca1ec86bf7d3ce2b2f27012aff29d1884ccf9e2f1b002fc25fa060a0eb4d296b8e2e6f67056ab3246cf6ed3711cef9ca740084078304a72390a272efc2954afe5a198c5714d9c8f1ecd571b949b0e9f42f7d29e5a479f6c1cf6887453b2bdac1c237459473754d4a7630e6dc28df9acc77", 0xb5, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000300)="1ce43f6388340ce87cf4195e7cb5be0f0261ea2480d983288cb89bbae315eb77eefaa71e8df835250800809513adf7b4f9c6a89feeac012db8a89776bedb2c35494b43c6a5754b6b665a3b0e7aa7cab0400aca1c93a6ca79858c40d5438e9e0067ce53ce5fe368439236bf10a85570547473bb470b99ce272ae9a3d38705db06dd5504423572db16bd322c42d2d80a152c59d9c0b5226bb53e6a96a83ae5ff6c9be2a8a5ffdbf71e3a201476c72f31cb2ba0cee0315af008a2b0") r2 = syz_open_dev$I2C(&(0x7f0000003840), 0x0, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f00000000c0)={0x1, 0xb, 0x4, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000980)={0x84, 0x0, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) 1.19705971s ago: executing program 3 (id=1259): r0 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) r1 = dup(r0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r3, r4, r5, &(0x7f00000002c0)={0x2e, 0x2, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000100)=@new_dev={0x1, 0x67, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x40}}}, &(0x7f0000000340)=0x0) syz_ublk_setup_queues(r1, r6, &(0x7f0000000380)={0x0, 0xef64, 0x0, 0x1, 0x109, 0x0, r2}, &(0x7f0000000740)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ea6, 0x8, 0x1, 0x263, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2a1, 0x40, 0x1, 0x3d8, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c24, 0x0, 0x0, 0x39d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x674d, 0x80, 0x3, 0x1e7}}], 0x4, &(0x7f00000019c0)={0x2e, 0x8, 0x0, r1, 0xc0107520, 0x0, 0x0, 0xb00, 0x1, {0x7}, 0x0, 0x0, '\x00', {0x3, 0x2e5, 0x0, 0x0}}, &(0x7f0000001a40)) 1.009601963s ago: executing program 3 (id=1260): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = socket(0x11, 0x2, 0x0) bind$packet(r3, &(0x7f0000000500)={0x11, 0x0, r2, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x14) writev(r0, &(0x7f0000000a00)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff060000000100000045fffc0025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) 970.526753ms ago: executing program 4 (id=1261): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f0000000040)="666f6f23646e736572726f723d3120a11909b98b6beb329196f9ebdda50c906a5588df6996f431972ae2e0562c4bbf91f648e52712e630a2a4e61cee9abcc8dc8fd958ba81afcc3c2ec38670a5a73af75f8d1f4cc923e4c715a93f6fc8eb839f57bdce1c83de28f664ee0ff01c12cc9bd4cf7002f85ec3af38c609dd1ff5584b0ed274d40f2e2e2b6a1758167073ed7ad1d4fb180db81bd4ff6788487b93e926b77d9628da7f299365d2d3482f0c06cf6b3b524518c18aa8e3c218c91710063c00", 0xc1, 0xfffffffffffffffe) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) r4 = dup(r3) write$cgroup_subtree(r4, &(0x7f00000001c0)=ANY=[], 0x32600) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0x3}}, 0x20) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r5, 0x541c, &(0x7f0000000080)) ioctl$TCSBRKP(r0, 0x5425, 0x2) sendfile(r0, r1, 0x0, 0x20000023896) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000140)=0x0) syz_open_procfs(r6, &(0x7f0000000180)='net/xfrm_stat\x00') 563.462772ms ago: executing program 3 (id=1262): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1100, 0xffffffffffffffff}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x0, 0x5}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff9, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x118a, 0x0, 0x60}, @flat=@weak_binder={0x77622a85, 0x1100}, @flat=@handle={0x73682a85, 0x101}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 407.664279ms ago: executing program 3 (id=1263): r0 = gettid() set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) unshare(0x100000) openat(0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0x48000, 0x44) (async) openat(0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0x48000, 0x44) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mount$fuseblk(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x0, 0x201886, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_FW_DOWNLOAD(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r2, 0x101, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c040) setns(0xc9, 0x0) r3 = syz_open_procfs(r0, &(0x7f0000000000)='net/tcp\x00') pread64(r3, &(0x7f0000001340)=""/102390, 0x18ff6, 0x96) 259.724047ms ago: executing program 0 (id=1264): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="c4000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000500000000000000fbffffffffffffff0000000000000000000000000000400000000000000000020000000000000000020000000000000000000000000000000c0015006dc7350002"], 0xc4}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000300e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087"], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 135.808541ms ago: executing program 4 (id=1265): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2400000024000100000000000000000908000000", @ANYRES32=r0, @ANYBLOB="d581ac00f1ffffff38afd1bdfc6833c11078954b050000006a3100"], 0x24}], 0x1}, 0x80) 0s ago: executing program 0 (id=1266): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703110000001f03000000000010040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84d0f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) kernel console output (not intermixed with test programs): 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 145.575559][ T5707] usb 1-1: config 0 interface 0 has no altsetting 0 [ 145.575592][ T5707] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.594324][ T5707] usb 1-1: config 0 descriptor?? [ 146.008429][ T7166] netlink: 'syz.0.507': attribute type 12 has an invalid length. [ 146.008481][ T7166] netlink: 132 bytes leftover after parsing attributes in process `syz.0.507'. [ 146.039535][ T5707] wacom 0003:056A:0213.0004: ignoring exceeding usage max [ 146.050814][ T5707] wacom 0003:056A:0213.0004: unknown main item tag 0x0 [ 146.050845][ T5707] wacom 0003:056A:0213.0004: unknown main item tag 0x0 [ 146.050890][ T5707] wacom 0003:056A:0213.0004: unknown main item tag 0x0 [ 146.050917][ T5707] wacom 0003:056A:0213.0004: unknown main item tag 0x0 [ 146.050944][ T5707] wacom 0003:056A:0213.0004: unknown main item tag 0x0 [ 146.050970][ T5707] wacom 0003:056A:0213.0004: unknown main item tag 0x0 [ 146.050998][ T5707] wacom 0003:056A:0213.0004: unknown main item tag 0x0 [ 146.051024][ T5707] wacom 0003:056A:0213.0004: unknown main item tag 0x0 [ 146.051050][ T5707] wacom 0003:056A:0213.0004: unknown main item tag 0x0 [ 146.051077][ T5707] wacom 0003:056A:0213.0004: unknown main item tag 0x0 [ 146.124881][ T5707] wacom 0003:056A:0213.0004: Unknown device_type for 'HID 056a:0213'. Ignoring. [ 146.228711][ T5707] usb 1-1: USB disconnect, device number 33 [ 146.448454][ T7188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.448889][ T7188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.530754][ T7189] comedi: valid board names for 8255 driver are: [ 146.530770][ T7189] 8255 [ 146.530777][ T7189] comedi: valid board names for vmk80xx driver are: [ 146.530786][ T7189] vmk80xx [ 146.530793][ T7189] comedi: valid board names for usbduxsigma driver are: [ 146.530802][ T7189] usbduxsigma [ 146.530809][ T7189] comedi: valid board names for usbduxfast driver are: [ 146.530817][ T7189] usbduxfast [ 146.530824][ T7189] comedi: valid board names for usbdux driver are: [ 146.530833][ T7189] usbdux [ 146.530840][ T7189] comedi: valid board names for ni6501 driver are: [ 146.530848][ T7189] ni6501 [ 146.530855][ T7189] comedi: valid board names for dt9812 driver are: [ 146.530863][ T7189] dt9812 [ 146.530869][ T7189] comedi: valid board names for ni_labpc_cs driver are: [ 146.530878][ T7189] ni_labpc_cs [ 146.530885][ T7189] comedi: valid board names for ni_daq_700 driver are: [ 146.530894][ T7189] ni_daq_700 [ 146.530901][ T7189] comedi: valid board names for labpc_pci driver are: [ 146.530910][ T7189] labpc_pci [ 146.530916][ T7189] comedi: valid board names for adl_pci9118 driver are: [ 146.530925][ T7189] pci9118dg [ 146.530932][ T7189] pci9118hg [ 146.530938][ T7189] pci9118hr [ 146.530945][ T7189] comedi: valid board names for 8255_pci driver are: [ 146.530954][ T7189] 8255_pci [ 146.530961][ T7189] comedi: valid board names for s526 driver are: [ 146.530969][ T7189] s526 [ 146.530976][ T7189] comedi: valid board names for multiq3 driver are: [ 146.530984][ T7189] multiq3 [ 146.530991][ T7189] comedi: valid board names for pcmuio driver are: [ 146.530999][ T7189] pcmuio48 [ 146.531006][ T7189] pcmuio96 [ 146.531012][ T7189] comedi: valid board names for pcmmio driver are: [ 146.531020][ T7189] pcmmio [ 146.531026][ T7189] comedi: valid board names for pcmda12 driver are: [ 146.531035][ T7189] pcmda12 [ 146.531041][ T7189] comedi: valid board names for pcmad driver are: [ 146.531050][ T7189] pcmad12 [ 146.531056][ T7189] pcmad16 [ 146.531063][ T7189] comedi: valid board names for ni_labpc driver are: [ 146.531072][ T7189] lab-pc-1200 [ 146.531078][ T7189] lab-pc-1200ai [ 146.531085][ T7189] lab-pc+ [ 146.531092][ T7189] comedi: valid board names for atmio16 driver are: [ 146.531100][ T7189] atmio16 [ 146.531107][ T7189] atmio16d [ 146.531113][ T7189] comedi: valid board names for ni_at_ao driver are: [ 146.531122][ T7189] at-ao-6 [ 146.531128][ T7189] at-ao-10 [ 146.531135][ T7189] comedi: valid board names for ni_at_a2150 driver are: [ 146.531144][ T7189] ni_at_a2150 [ 146.531151][ T7189] comedi: valid board names for adq12b driver are: [ 146.531159][ T7189] adq12b [ 146.531166][ T7189] comedi: valid board names for mpc624 driver are: [ 146.531174][ T7189] mpc624 [ 146.531181][ T7189] comedi: valid board names for c6xdigio driver are: [ 146.531190][ T7189] c6xdigio [ 146.531196][ T7189] comedi: valid board names for aio_iiro_16 driver are: [ 146.531205][ T7189] aio_iiro_16 [ 146.531212][ T7189] comedi: valid board names for aio_aio12_8 driver are: [ 146.531221][ T7189] aio_aio12_8 [ 146.531227][ T7189] aio_ai12_8 [ 146.531234][ T7189] aio_ao12_4 [ 146.531240][ T7189] comedi: valid board names for fl512 driver are: [ 146.531249][ T7189] fl512 [ 146.531256][ T7189] comedi: valid board names for dmm32at driver are: [ 146.531264][ T7189] dmm32at [ 146.531271][ T7189] comedi: valid board names for dt282x driver are: [ 146.531279][ T7189] dt2821 [ 146.531286][ T7189] dt2821-f [ 146.531293][ T7189] dt2821-g [ 146.531299][ T7189] dt2823 [ 146.531306][ T7189] dt2824-pgh [ 146.531312][ T7189] dt2824-pgl [ 146.531319][ T7189] dt2825 [ 146.531325][ T7189] dt2827 [ 146.531331][ T7189] dt2828 [ 146.531338][ T7189] dt2829 [ 146.531344][ T7189] dt21-ez [ 146.531351][ T7189] dt23-ez [ 146.531358][ T7189] dt24-ez [ 146.531364][ T7189] dt24-ez-pgl [ 146.531371][ T7189] comedi: valid board names for dt2817 driver are: [ 146.531379][ T7189] dt2817 [ 146.531386][ T7189] comedi: valid board names for dt2815 driver are: [ 146.531395][ T7189] dt2815 [ 146.531418][ T7189] comedi: valid board names for dt2814 driver are: [ 146.531427][ T7189] dt2814 [ 146.531434][ T7189] comedi: valid board names for dt2811 driver are: [ 146.531443][ T7189] dt2811-pgh [ 146.531451][ T7189] dt2811-pgl [ 146.531458][ T7189] comedi: valid board names for dt2801 driver are: [ 146.531467][ T7189] dt2801 [ 146.531474][ T7189] comedi: valid board names for das6402 driver are: [ 146.531484][ T7189] das6402-12 [ 146.531491][ T7189] das6402-16 [ 146.531498][ T7189] comedi: valid board names for das1800 driver are: [ 146.531532][ T7189] das-1701st [ 146.531540][ T7189] das-1701st-da [ 146.531547][ T7189] das-1702st [ 146.531554][ T7189] das-1702st-da [ 146.531561][ T7189] das-1702hr [ 146.531568][ T7189] das-1702hr-da [ 146.531576][ T7189] das-1701ao [ 146.531583][ T7189] das-1702ao [ 146.531590][ T7189] das-1801st [ 146.531597][ T7189] das-1801st-da [ 146.531605][ T7189] das-1802st [ 146.531612][ T7189] das-1802st-da [ 146.531619][ T7189] das-1802hr [ 146.531625][ T7189] das-1802hr-da [ 146.531632][ T7189] das-1801hc [ 146.531638][ T7189] das-1802hc [ 146.531645][ T7189] das-1801ao [ 146.531651][ T7189] das-1802ao [ 146.531658][ T7189] comedi: valid board names for das800 driver are: [ 146.531666][ T7189] das-800 [ 146.531673][ T7189] cio-das800 [ 146.531679][ T7189] das-801 [ 146.531685][ T7189] cio-das801 [ 146.531692][ T7189] das-802 [ 146.531698][ T7189] cio-das802 [ 146.531704][ T7189] cio-das802/16 [ 146.531711][ T7189] comedi: valid board names for isa-das08 driver are: [ 146.531719][ T7189] isa-das08 [ 146.531726][ T7189] das08-pgm [ 146.531732][ T7189] das08-pgh [ 146.531739][ T7189] das08-pgl [ 146.531746][ T7189] das08-aoh [ 146.531753][ T7189] das08-aol [ 146.531759][ T7189] das08-aom [ 146.531766][ T7189] das08/jr-ao [ 146.531772][ T7189] das08jr-16-ao [ 146.531779][ T7189] pc104-das08 [ 146.531786][ T7189] das08jr/16 [ 146.531793][ T7189] comedi: valid board names for das16m1 driver are: [ 146.531802][ T7189] das16m1 [ 146.531809][ T7189] comedi: valid board names for dac02 driver are: [ 146.531818][ T7189] dac02 [ 146.531825][ T7189] comedi: valid board names for rti802 driver are: [ 146.531834][ T7189] rti802 [ 146.531841][ T7189] comedi: valid board names for rti800 driver are: [ 146.531849][ T7189] rti800 [ 146.531855][ T7189] rti815 [ 146.531862][ T7189] comedi: valid board names for pcm3724 driver are: [ 146.531872][ T7189] pcm3724 [ 146.531879][ T7189] comedi: valid board names for pcl818 driver are: [ 146.531888][ T7189] pcl818l [ 146.531895][ T7189] pcl818h [ 146.531902][ T7189] pcl818hd [ 146.531909][ T7189] pcl818hg [ 146.531916][ T7189] pcl818 [ 146.531934][ T7189] pcl718 [ 146.531941][ T7189] pcm3718 [ 146.531947][ T7189] comedi: valid board names for pcl816 driver are: [ 146.531956][ T7189] pcl816 [ 146.531963][ T7189] pcl814b [ 146.531969][ T7189] comedi: valid board names for pcl812 driver are: [ 146.555311][ T7192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.567369][ T7192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.598387][ T7189] pcl812 [ 146.598428][ T7189] pcl812pg [ 146.598442][ T7189] acl8112pg [ 146.598468][ T7189] acl8112dg [ 146.598510][ T7189] acl8112hg [ 146.598529][ T7189] a821pgl [ 146.598550][ T7189] a821pglnda [ 146.598570][ T7189] a821pgh [ 146.598589][ T7189] a822pgl [ 146.598602][ T7189] a822pgh [ 146.598621][ T7189] a823pgl [ 146.598641][ T7189] a823pgh [ 146.598672][ T7189] pcl813 [ 146.598691][ T7189] pcl813b [ 146.598711][ T7189] acl8113 [ 146.598743][ T7189] iso813 [ 146.598756][ T7189] acl8216 [ 146.598776][ T7189] a826pg [ 146.598815][ T7189] comedi: valid board names for pcl730 driver are: [ 146.598839][ T7189] pcl730 [ 146.598859][ T7189] iso730 [ 146.598880][ T7189] acl7130 [ 146.598901][ T7189] pcm3730 [ 146.598914][ T7189] pcl725 [ 146.598934][ T7189] p8r8dio [ 146.598954][ T7189] acl7225b [ 146.598976][ T7189] p16r16dio [ 146.598990][ T7189] pcl733 [ 146.599004][ T7189] pcl734 [ 146.599024][ T7189] opmm-1616-xt [ 146.599057][ T7189] pearl-mm-p [ 146.599077][ T7189] ir104-pbf [ 146.599098][ T7189] comedi: valid board names for pcl726 driver are: [ 146.599126][ T7189] pcl726 [ 146.599145][ T7189] pcl727 [ 146.599172][ T7189] pcl728 [ 146.599191][ T7189] acl6126 [ 146.599211][ T7189] acl6128 [ 146.599230][ T7189] comedi: valid board names for pcl724 driver are: [ 146.599260][ T7189] pcl724 [ 146.599279][ T7189] pcl722 [ 146.599291][ T7189] pcl731 [ 146.599310][ T7189] acl7122 [ 146.599331][ T7189] acl7124 [ 146.599344][ T7189] pet48dio [ 146.601256][ T7189] pcmio48 [ 146.601285][ T7189] onyx-mm-dio [ 146.601306][ T7189] comedi: valid board names for pcl711 driver are: [ 146.601330][ T7189] pcl711 [ 146.601348][ T7189] pcl711b [ 146.601355][ T7189] acl8112hg [ 146.601362][ T7189] acl8112dg [ 146.601391][ T7189] comedi: valid board names for amplc_pc263 driver are: [ 146.601425][ T7189] pc263 [ 146.601445][ T7189] comedi: valid board names for amplc_pc236 driver are: [ 146.601487][ T7189] pc36at [ 146.601509][ T7189] comedi: valid board names for amplc_dio200 driver are: [ 146.601537][ T7189] pc212e [ 146.601557][ T7189] pc214e [ 146.601577][ T7189] pc215e [ 146.601597][ T7189] pc218e [ 146.601610][ T7189] pc272e [ 146.601630][ T7189] comedi: valid board names for comedi_parport driver are: [ 146.601788][ T7189] comedi_parport [ 146.601816][ T7189] comedi: valid board names for comedi_test driver are: [ 146.601838][ T7189] comedi_test [ 146.601858][ T7189] comedi: valid board names for comedi_bond driver are: [ 146.601880][ T7189] comedi_bond [ 147.768662][ T5623] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 147.772209][ T5623] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 147.792438][ T5623] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 147.800509][ T5623] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 147.801146][ T5623] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 147.846971][ T7207] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 147.873383][ T25] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 148.026943][ T25] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 148.032111][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.032136][ T25] usb 1-1: Product: syz [ 148.032151][ T25] usb 1-1: Manufacturer: syz [ 148.032165][ T25] usb 1-1: SerialNumber: syz [ 148.108328][ T7216] netlink: 'syz.1.524': attribute type 10 has an invalid length. [ 148.108380][ T7216] netlink: 40 bytes leftover after parsing attributes in process `syz.1.524'. [ 148.363999][ T7224] netlink: 'syz.1.526': attribute type 10 has an invalid length. [ 148.364022][ T7224] netlink: 40 bytes leftover after parsing attributes in process `syz.1.526'. [ 148.401739][ T59] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.471543][ T25] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 148.471605][ T25] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 148.669726][ T59] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.764959][ T7233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.765327][ T7233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.857915][ T59] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.928025][ T59] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.232350][ T59] dummy0: left allmulticast mode [ 149.244943][ T59] dummy0: left promiscuous mode [ 149.245844][ T59] bridge0: port 4(dummy0) entered disabled state [ 149.276962][ T59] bridge0: port 3(team0) entered disabled state [ 149.300165][ T59] bridge_slave_1: left allmulticast mode [ 149.300203][ T59] bridge_slave_1: left promiscuous mode [ 149.300449][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.346375][ T59] bridge_slave_0: left allmulticast mode [ 149.346398][ T59] bridge_slave_0: left promiscuous mode [ 149.346636][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.731015][ T25] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 149.853161][ T5623] Bluetooth: hci4: command tx timeout [ 149.935766][ T25] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001000. ret = -EPROTO [ 149.936293][ T25] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 149.936343][ T25] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 149.985342][ T25] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 150.015240][ T25] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 150.038682][ T25] usb 1-1: USB disconnect, device number 34 [ 150.042489][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.074168][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.078380][ T59] bond0 (unregistering): Released all slaves [ 150.349763][ T5276] 8021q: adding VLAN 0 to HW filter on device eth1 [ 150.406277][ T7204] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.406438][ T7204] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.406545][ T7204] bridge_slave_0: entered allmulticast mode [ 150.408014][ T7204] bridge_slave_0: entered promiscuous mode [ 150.451140][ T7204] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.451298][ T7204] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.451441][ T7204] bridge_slave_1: entered allmulticast mode [ 150.478125][ T7204] bridge_slave_1: entered promiscuous mode [ 150.599247][ T7286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.599746][ T7286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.631142][ T7204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.645348][ T7204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.694503][ T7204] team0: Port device team_slave_0 added [ 150.718040][ T7204] team0: Port device team_slave_1 added [ 150.777989][ T59] hsr_slave_0: left promiscuous mode [ 150.778774][ T59] hsr_slave_1: left promiscuous mode [ 150.779806][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.779840][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.781092][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.781114][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.844206][ T59] veth1_macvtap: left promiscuous mode [ 150.844757][ T59] veth0_macvtap: left promiscuous mode [ 150.844882][ T59] veth1_vlan: left promiscuous mode [ 150.844966][ T59] veth0_vlan: left promiscuous mode [ 151.220602][ T59] team_slave_1 (unregistering): left promiscuous mode [ 151.220632][ T59] team_slave_1 (unregistering): left allmulticast mode [ 151.221788][ T59] team0 (unregistering): Port device team_slave_1 removed [ 151.257892][ T59] team_slave_0 (unregistering): left promiscuous mode [ 151.257918][ T59] team_slave_0 (unregistering): left allmulticast mode [ 151.258918][ T59] team0 (unregistering): Port device team_slave_0 removed [ 151.474874][ T7204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.474889][ T7204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.474908][ T7204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.502580][ T5276] 8021q: adding VLAN 0 to HW filter on device eth2 [ 151.519264][ T7204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.519280][ T7204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.519306][ T7204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.650117][ T7204] hsr_slave_0: entered promiscuous mode [ 151.651065][ T7204] hsr_slave_1: entered promiscuous mode [ 151.801453][ T7309] jffs2: notice: (7309) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 151.942910][ T5623] Bluetooth: hci4: command tx timeout [ 152.001342][ T59] IPVS: stop unused estimator thread 0... [ 152.037230][ T7320] netlink: 'syz.0.544': attribute type 4 has an invalid length. [ 152.037631][ T7320] netlink: 'syz.0.544': attribute type 4 has an invalid length. [ 152.353922][ T7328] rust_binder: 7327:7328 error while translating object: EINVAL [ 152.354002][ T7328] rust_binder: Failure in copy_transaction_data: EINVAL [ 152.354028][ T7328] rust_binder: 7327:7328 transaction call to 7327:0 failed EINVAL, code 0 size 72-24 [ 152.354428][ T25] rust_binder: 7327: undelivered TRANSACTION_ERROR: 29201 [ 152.361706][ T5276] 8021q: adding VLAN 0 to HW filter on device eth3 [ 152.417539][ T7204] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 152.418614][ T7332] netlink: 12 bytes leftover after parsing attributes in process `syz.3.547'. [ 152.457680][ T7204] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 152.458589][ T7204] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 152.481497][ T7204] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 152.491807][ T7204] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 152.508510][ T7204] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 152.531333][ T7204] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 152.556862][ T7204] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 152.775749][ T7204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.821811][ T7204] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.846211][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.846305][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.849168][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.849257][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.547376][ T5276] 8021q: adding VLAN 0 to HW filter on device eth4 [ 153.669778][ T7394] netlink: 'syz.3.559': attribute type 10 has an invalid length. [ 153.669802][ T7394] netlink: 40 bytes leftover after parsing attributes in process `syz.3.559'. [ 153.888849][ T7403] netlink: 'syz.3.560': attribute type 10 has an invalid length. [ 153.888874][ T7403] netlink: 40 bytes leftover after parsing attributes in process `syz.3.560'. [ 153.932162][ T7204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.013160][ T5623] Bluetooth: hci4: command tx timeout [ 154.419715][ T7419] netlink: 'syz.0.564': attribute type 3 has an invalid length. [ 154.672713][ T5766] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 154.694417][ T7204] veth0_vlan: entered promiscuous mode [ 154.710527][ T7204] veth1_vlan: entered promiscuous mode [ 154.746764][ T7204] veth0_macvtap: entered promiscuous mode [ 154.760414][ T7204] veth1_macvtap: entered promiscuous mode [ 154.777250][ T7430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.777755][ T7430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.790440][ T7432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.791482][ T7432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.805954][ T7204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.824095][ T5766] usb 1-1: Using ep0 maxpacket: 16 [ 154.830048][ T5766] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 154.831065][ T5766] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 154.831095][ T5766] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 154.842113][ T5766] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.842136][ T5766] usb 1-1: Product: syz [ 154.842148][ T5766] usb 1-1: Manufacturer: syz [ 154.842162][ T5766] usb 1-1: SerialNumber: syz [ 154.849898][ T7204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.898612][ T5766] usb 1-1: config 0 descriptor?? [ 154.911282][ T5766] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 154.911320][ T5766] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 154.966796][ T283] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.966840][ T283] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.966875][ T283] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.992864][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.047856][ T283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.047879][ T283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.099425][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.099449][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.442680][ T5347] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 155.522092][ T5766] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 155.528179][ T5766] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 155.593170][ T5347] usb 5-1: Using ep0 maxpacket: 16 [ 155.595084][ T5347] usb 5-1: unable to get BOS descriptor or descriptor too short [ 155.595130][ T5347] usb 5-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40 [ 155.596146][ T5347] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.637910][ T5347] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.637940][ T5347] usb 5-1: Product: syz [ 155.637957][ T5347] usb 5-1: Manufacturer: syz [ 155.637973][ T5347] usb 5-1: SerialNumber: syz [ 155.801068][ T7459] FAULT_INJECTION: forcing a failure. [ 155.801068][ T7459] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.801101][ T7459] CPU: 1 UID: 0 PID: 7459 Comm: syz.3.574 Not tainted syzkaller #0 PREEMPT(full) [ 155.801125][ T7459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 155.801139][ T7459] Call Trace: [ 155.801148][ T7459] [ 155.801157][ T7459] dump_stack_lvl+0xe8/0x150 [ 155.801194][ T7459] should_fail_ex+0x3eb/0x540 [ 155.801226][ T7459] _copy_to_iter+0x59c/0x1810 [ 155.801266][ T7459] ? __pfx__copy_to_iter+0x10/0x10 [ 155.801308][ T7459] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 155.801340][ T7459] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 155.801374][ T7459] __skb_datagram_iter+0xf8/0x980 [ 155.801398][ T7459] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 155.801446][ T7459] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 155.801481][ T7459] skb_copy_datagram_iter+0xb5/0x240 [ 155.801514][ T7459] netlink_recvmsg+0x2b9/0xa50 [ 155.801554][ T7459] ? __pfx_netlink_recvmsg+0x10/0x10 [ 155.801581][ T7459] ? lock_acquire+0x115/0x350 [ 155.801615][ T7459] ? __lock_acquire+0x747/0x2de0 [ 155.801653][ T7459] ? __pfx_netlink_recvmsg+0x10/0x10 [ 155.801683][ T7459] sock_recvmsg_nosec+0x130/0x170 [ 155.801718][ T7459] ____sys_recvmsg+0x3e3/0x4a0 [ 155.801752][ T7459] ? __pfx_____sys_recvmsg+0x10/0x10 [ 155.801794][ T7459] ? import_iovec+0x73/0xa0 [ 155.801826][ T7459] ___sys_recvmsg+0x213/0x5a0 [ 155.801857][ T7459] ? __pfx____sys_recvmsg+0x10/0x10 [ 155.801896][ T7459] ? lock_acquire+0x115/0x350 [ 155.801956][ T7459] do_recvmmsg+0x31a/0x7f0 [ 155.801991][ T7459] ? __pfx_do_recvmmsg+0x10/0x10 [ 155.802029][ T7459] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 155.802052][ T7459] ? __fget_files+0x3a2/0x420 [ 155.802092][ T7459] __x64_sys_recvmmsg+0x198/0x250 [ 155.802122][ T7459] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 155.802160][ T7459] do_syscall_64+0x166/0x520 [ 155.802180][ T7459] ? trace_irq_disable+0x3b/0x140 [ 155.802211][ T7459] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.802234][ T7459] ? clear_bhb_loop+0x70/0xc0 [ 155.802262][ T7459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.802284][ T7459] RIP: 0033:0x7f5a89f9e159 [ 155.802304][ T7459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.802324][ T7459] RSP: 002b:00007f5a8ad8f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 155.802348][ T7459] RAX: ffffffffffffffda RBX: 00007f5a8a225fa0 RCX: 00007f5a89f9e159 [ 155.802365][ T7459] RDX: 0000000000000003 RSI: 000020000000b400 RDI: 0000000000000003 [ 155.802379][ T7459] RBP: 00007f5a8ad8f090 R08: 0000000000000000 R09: 0000000000000000 [ 155.802393][ T7459] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 155.802406][ T7459] R13: 00007f5a8a226038 R14: 00007f5a8a225fa0 R15: 00007ffd9662f7b8 [ 155.802440][ T7459] [ 156.095277][ T5623] Bluetooth: hci4: command tx timeout [ 156.130481][ T5347] snd-ua101 5-1:1.1: sample format descriptor not found [ 156.130509][ T5347] snd-ua101 5-1:1.0: invalid num_altsetting [ 156.156176][ T5766] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 156.156824][ T5766] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 156.178676][ T5347] usb 5-1: USB disconnect, device number 2 [ 156.235951][ T7463] netlink: 'syz.3.576': attribute type 10 has an invalid length. [ 156.256915][ T7461] netlink: 'syz.1.575': attribute type 64 has an invalid length. [ 156.256937][ T7461] netlink: 36 bytes leftover after parsing attributes in process `syz.1.575'. [ 156.290455][ T7464] netlink: 1788 bytes leftover after parsing attributes in process `syz.3.576'. [ 156.705273][ T7482] netlink: 'syz.4.580': attribute type 4 has an invalid length. [ 156.711374][ T7482] netlink: 'syz.4.580': attribute type 4 has an invalid length. [ 156.807340][ T7485] rust_binder: 7484:7485 error while translating object: EINVAL [ 156.807464][ T7485] rust_binder: Failure in copy_transaction_data: EINVAL [ 156.807496][ T7485] rust_binder: 7484:7485 transaction call to 7484:0 failed EINVAL, code 0 size 72-24 [ 156.807976][ T5692] rust_binder: 7484: undelivered TRANSACTION_ERROR: 29201 [ 156.911050][ T5766] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 156.922029][ T5766] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 156.939712][ T5766] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 156.953357][ T5766] usb 1-1: USB disconnect, device number 35 [ 157.040007][ T7491] netlink: 12 bytes leftover after parsing attributes in process `syz.4.583'. [ 157.354532][ T7478] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 157.354656][ T7478] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 157.406694][ T7478] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 157.411656][ T7478] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 157.411724][ T7478] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 157.435844][ T7478] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 157.437507][ T7478] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 157.437728][ T7478] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 157.440826][ T7478] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 157.468621][ T7478] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 157.468686][ T7478] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 157.475803][ T7478] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 157.503863][ T7510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.512377][ T7510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.653599][ T7517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.591'. [ 157.655520][ T7517] rust_binder: 7516:7517 failed to claim space for a BINDER_TYPE_PTR (offset: 112, limit: 112, size: 13) [ 157.655545][ T7517] rust_binder: 7516:7517 error while translating object: EINVAL [ 157.655571][ T7517] rust_binder: Failure in copy_transaction_data: EINVAL [ 157.655588][ T7517] rust_binder: 7516:7517 transaction async to 7516:0 failed EINVAL, code 0 size 88-24 [ 157.656085][ T1556] rust_binder: 7516: undelivered TRANSACTION_ERROR: 29201 [ 157.808038][ T7524] netlink: 16 bytes leftover after parsing attributes in process `syz.4.594'. [ 157.897081][ T7527] netlink: 'syz.1.595': attribute type 10 has an invalid length. [ 157.897102][ T7527] netlink: 40 bytes leftover after parsing attributes in process `syz.1.595'. [ 157.919065][ T7528] netlink: 'syz.4.596': attribute type 10 has an invalid length. [ 157.919112][ T7528] netlink: 40 bytes leftover after parsing attributes in process `syz.4.596'. [ 157.919844][ T7528] bridge0: port 3(dummy0) entered blocking state [ 157.920436][ T7528] bridge0: port 3(dummy0) entered disabled state [ 157.920832][ T7528] dummy0: entered allmulticast mode [ 157.930742][ T7528] dummy0: entered promiscuous mode [ 157.937407][ T7528] bridge0: port 3(dummy0) entered blocking state [ 157.937590][ T7528] bridge0: port 3(dummy0) entered forwarding state [ 158.193540][ T7538] netlink: 60 bytes leftover after parsing attributes in process `syz.3.600'. [ 158.216387][ T7538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.217679][ T7538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.591909][ T7552] ieee802154 phy0 wpan0: encryption failed: -22 [ 158.653028][ T5623] Bluetooth: hci1: command 0x0c1a tx timeout [ 158.736064][ T7560] FAULT_INJECTION: forcing a failure. [ 158.736064][ T7560] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.736096][ T7560] CPU: 1 UID: 0 PID: 7560 Comm: syz.4.610 Not tainted syzkaller #0 PREEMPT(full) [ 158.736119][ T7560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 158.736132][ T7560] Call Trace: [ 158.736140][ T7560] [ 158.736149][ T7560] dump_stack_lvl+0xe8/0x150 [ 158.736181][ T7560] should_fail_ex+0x3eb/0x540 [ 158.736218][ T7560] _copy_to_iter+0x59c/0x1810 [ 158.736258][ T7560] ? __pfx__copy_to_iter+0x10/0x10 [ 158.736286][ T7560] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 158.736319][ T7560] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 158.736352][ T7560] __skb_datagram_iter+0xf8/0x980 [ 158.736376][ T7560] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 158.736407][ T7560] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 158.736440][ T7560] skb_copy_datagram_iter+0xb5/0x240 [ 158.736469][ T7560] netlink_recvmsg+0x2b9/0xa50 [ 158.736506][ T7560] ? __pfx_netlink_recvmsg+0x10/0x10 [ 158.736530][ T7560] ? lock_acquire+0x115/0x350 [ 158.736563][ T7560] ? __lock_acquire+0x747/0x2de0 [ 158.736599][ T7560] ? __pfx_netlink_recvmsg+0x10/0x10 [ 158.736645][ T7560] sock_recvmsg_nosec+0x130/0x170 [ 158.736679][ T7560] ____sys_recvmsg+0x3e3/0x4a0 [ 158.736715][ T7560] ? __pfx_____sys_recvmsg+0x10/0x10 [ 158.736756][ T7560] ? import_iovec+0x73/0xa0 [ 158.736787][ T7560] ___sys_recvmsg+0x213/0x5a0 [ 158.736818][ T7560] ? __pfx____sys_recvmsg+0x10/0x10 [ 158.736849][ T7560] ? lock_acquire+0x115/0x350 [ 158.736909][ T7560] do_recvmmsg+0x31a/0x7f0 [ 158.736943][ T7560] ? __pfx_do_recvmmsg+0x10/0x10 [ 158.736981][ T7560] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 158.737005][ T7560] ? __fget_files+0x3a2/0x420 [ 158.737043][ T7560] __x64_sys_recvmmsg+0x198/0x250 [ 158.737073][ T7560] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 158.737112][ T7560] do_syscall_64+0x166/0x520 [ 158.737131][ T7560] ? trace_irq_disable+0x3b/0x140 [ 158.737162][ T7560] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.737190][ T7560] ? clear_bhb_loop+0x70/0xc0 [ 158.737217][ T7560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.737240][ T7560] RIP: 0033:0x7f4bcd59e159 [ 158.737260][ T7560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.737279][ T7560] RSP: 002b:00007f4bce3e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 158.737322][ T7560] RAX: ffffffffffffffda RBX: 00007f4bcd825fa0 RCX: 00007f4bcd59e159 [ 158.737340][ T7560] RDX: 0000000000000003 RSI: 000020000000b400 RDI: 0000000000000003 [ 158.737354][ T7560] RBP: 00007f4bce3e2090 R08: 0000000000000000 R09: 0000000000000000 [ 158.737369][ T7560] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 158.737383][ T7560] R13: 00007f4bcd826038 R14: 00007f4bcd825fa0 R15: 00007ffefdc57508 [ 158.737418][ T7560] [ 158.974094][ T1556] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 159.057659][ T7562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.060044][ T7562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.124324][ T1556] usb 1-1: New USB device found, idVendor=0c70, idProduct=f010, bcdDevice= 0.00 [ 159.125207][ T1556] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.125227][ T1556] usb 1-1: config 0 interface 0 has no altsetting 0 [ 159.125265][ T1556] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.127786][ T1556] usb 1-1: config 0 descriptor?? [ 159.333004][ T7558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.335461][ T7558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.359198][ T5692] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 159.452850][ T5626] Bluetooth: hci3: command 0x0c1a tx timeout [ 159.452958][ T5623] Bluetooth: hci2: command 0x0c1a tx timeout [ 159.514523][ T5692] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 159.515526][ T5692] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 159.515554][ T5692] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 159.515574][ T5692] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 159.515613][ T5692] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.519199][ T7564] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 159.533467][ T5623] Bluetooth: hci4: command 0x0c1a tx timeout [ 159.542385][ T5692] cyberjack 5-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 159.604517][ T5692] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 159.645022][ T1556] usbhid 1-1:0.0: can't add hid device: -71 [ 159.645114][ T1556] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 159.661771][ T1556] usb 1-1: USB disconnect, device number 36 [ 159.730823][ T5692] usb 5-1: USB disconnect, device number 3 [ 159.751878][ T5692] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 159.752533][ T5692] cyberjack 5-1:1.0: device disconnected [ 159.832367][ T7575] netlink: 'syz.3.614': attribute type 4 has an invalid length. [ 159.832868][ T7575] netlink: 'syz.3.614': attribute type 4 has an invalid length. [ 159.895454][ T7577] nvme_fabrics: unknown parameter or missing value 'ctrl_loss_tmo=' in ctrl creation request [ 159.950839][ T7580] rust_binder: 7579:7580 error while translating object: EINVAL [ 159.950901][ T7580] rust_binder: Failure in copy_transaction_data: EINVAL [ 159.950919][ T7580] rust_binder: 7579:7580 transaction call to 7579:0 failed EINVAL, code 0 size 72-24 [ 159.951266][ T1556] rust_binder: 7579: undelivered TRANSACTION_ERROR: 29201 [ 160.025470][ T7582] __nla_validate_parse: 1 callbacks suppressed [ 160.025485][ T7582] netlink: 12 bytes leftover after parsing attributes in process `syz.3.617'. [ 160.233396][ T7593] netlink: 'syz.0.620': attribute type 33 has an invalid length. [ 160.233419][ T7593] netlink: 'syz.0.620': attribute type 13 has an invalid length. [ 160.233432][ T7593] netlink: 152 bytes leftover after parsing attributes in process `syz.0.620'. [ 160.238261][ T40] bridge0: port 3(dummy0) entered disabled state [ 160.564535][ T7607] netlink: 12 bytes leftover after parsing attributes in process `syz.4.627'. [ 160.565180][ T7609] netlink: 12 bytes leftover after parsing attributes in process `syz.4.627'. [ 160.649841][ T7612] netlink: 'syz.4.629': attribute type 10 has an invalid length. [ 160.649864][ T7612] netlink: 40 bytes leftover after parsing attributes in process `syz.4.629'. [ 160.650668][ T7612] bridge0: port 4(team0) entered blocking state [ 160.650855][ T7612] bridge0: port 4(team0) entered disabled state [ 160.650974][ T7612] team0: entered allmulticast mode [ 160.650990][ T7612] team_slave_0: entered allmulticast mode [ 160.651006][ T7612] team_slave_1: entered allmulticast mode [ 160.703719][ T7612] team0: entered promiscuous mode [ 160.703740][ T7612] team_slave_0: entered promiscuous mode [ 160.703966][ T7612] team_slave_1: entered promiscuous mode [ 160.704981][ T7612] bridge0: port 4(team0) entered blocking state [ 160.705116][ T7612] bridge0: port 4(team0) entered forwarding state [ 160.733176][ T5623] Bluetooth: hci1: command 0x0c1a tx timeout [ 160.837444][ T7618] netlink: 'syz.4.631': attribute type 10 has an invalid length. [ 160.837469][ T7618] netlink: 40 bytes leftover after parsing attributes in process `syz.4.631'. [ 161.389187][ T7643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.389586][ T7643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.538260][ T5626] Bluetooth: hci3: command 0x0c1a tx timeout [ 161.538439][ T5623] Bluetooth: hci2: command 0x0c1a tx timeout [ 161.606252][ T7656] FAULT_INJECTION: forcing a failure. [ 161.606252][ T7656] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 161.606282][ T7656] CPU: 0 UID: 0 PID: 7656 Comm: syz.1.646 Not tainted syzkaller #0 PREEMPT(full) [ 161.606304][ T7656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 161.606316][ T7656] Call Trace: [ 161.606323][ T7656] [ 161.606332][ T7656] dump_stack_lvl+0xe8/0x150 [ 161.606362][ T7656] should_fail_ex+0x3eb/0x540 [ 161.606389][ T7656] prepare_alloc_pages+0x21e/0x5f0 [ 161.606428][ T7656] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 161.606471][ T7656] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 161.606505][ T7656] ? lock_acquire+0x115/0x350 [ 161.606534][ T7656] ? policy_nodemask+0x2cc/0x8e0 [ 161.606556][ T7656] ? __lock_acquire+0x747/0x2de0 [ 161.606587][ T7656] alloc_pages_mpol+0x21e/0x390 [ 161.606614][ T7656] folio_alloc_mpol_noprof+0x39/0x160 [ 161.606656][ T7656] vma_alloc_folio_noprof+0xe1/0x1e0 [ 161.606683][ T7656] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 161.606708][ T7656] ? lock_acquire+0x115/0x350 [ 161.606744][ T7656] do_pte_missing+0x173a/0x34b0 [ 161.606791][ T7656] handle_mm_fault+0x1a53/0x3750 [ 161.606827][ T7656] ? handle_mm_fault+0xf1/0x3750 [ 161.606863][ T7656] ? __pfx_handle_mm_fault+0x10/0x10 [ 161.606900][ T7656] ? __pfx___up_read+0x10/0x10 [ 161.606927][ T7656] ? lock_mm_and_find_vma+0xa7/0x340 [ 161.606959][ T7656] do_user_addr_fault+0x7f6/0x1480 [ 161.607005][ T7656] exc_page_fault+0x6a/0xc0 [ 161.607038][ T7656] asm_exc_page_fault+0x26/0x30 [ 161.607058][ T7656] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 161.607084][ T7656] Code: 71 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 161.607102][ T7656] RSP: 0018:ffffc90004c0f4f8 EFLAGS: 00050202 [ 161.607121][ T7656] RAX: ffff888067642001 RBX: ffff888067642211 RCX: 000000000000006b [ 161.607135][ T7656] RDX: 0000000000000000 RSI: ffff888067642251 RDI: 0000200000003000 [ 161.607148][ T7656] RBP: ffffc90004c0f670 R08: ffff8880676422bb R09: 1ffff1100cec8457 [ 161.607162][ T7656] R10: dffffc0000000000 R11: ffffed100cec8458 R12: dffffc0000000000 [ 161.607177][ T7656] R13: 00000000000000ab R14: 000020000000306b R15: 00007ffffffff000 [ 161.607207][ T7656] _copy_to_iter+0x619/0x1810 [ 161.607254][ T7656] ? __pfx__copy_to_iter+0x10/0x10 [ 161.607282][ T7656] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 161.607334][ T7656] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 161.607371][ T7656] __skb_datagram_iter+0xf8/0x980 [ 161.607398][ T7656] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 161.607431][ T7656] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 161.607476][ T7656] skb_copy_datagram_iter+0xb5/0x240 [ 161.607508][ T7656] netlink_recvmsg+0x2b9/0xa50 [ 161.607549][ T7656] ? __pfx_netlink_recvmsg+0x10/0x10 [ 161.607577][ T7656] ? lock_acquire+0x115/0x350 [ 161.607614][ T7656] ? __lock_acquire+0x747/0x2de0 [ 161.607653][ T7656] ? __pfx_netlink_recvmsg+0x10/0x10 [ 161.607685][ T7656] sock_recvmsg_nosec+0x130/0x170 [ 161.607720][ T7656] ____sys_recvmsg+0x3e3/0x4a0 [ 161.607755][ T7656] ? __pfx_____sys_recvmsg+0x10/0x10 [ 161.607799][ T7656] ? import_iovec+0x73/0xa0 [ 161.607832][ T7656] ___sys_recvmsg+0x213/0x5a0 [ 161.607865][ T7656] ? __pfx____sys_recvmsg+0x10/0x10 [ 161.607897][ T7656] ? lock_acquire+0x115/0x350 [ 161.607959][ T7656] do_recvmmsg+0x31a/0x7f0 [ 161.607996][ T7656] ? __pfx_do_recvmmsg+0x10/0x10 [ 161.608036][ T7656] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 161.608061][ T7656] ? __fget_files+0x3a2/0x420 [ 161.608102][ T7656] __x64_sys_recvmmsg+0x198/0x250 [ 161.608132][ T7656] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 161.608172][ T7656] do_syscall_64+0x166/0x520 [ 161.608193][ T7656] ? trace_irq_disable+0x3b/0x140 [ 161.608226][ T7656] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.608250][ T7656] ? clear_bhb_loop+0x70/0xc0 [ 161.608279][ T7656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.608302][ T7656] RIP: 0033:0x7f310679e159 [ 161.608323][ T7656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.608343][ T7656] RSP: 002b:00007f31075e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 161.608367][ T7656] RAX: ffffffffffffffda RBX: 00007f3106a25fa0 RCX: 00007f310679e159 [ 161.608384][ T7656] RDX: 0000000000000003 RSI: 000020000000b400 RDI: 0000000000000003 [ 161.608399][ T7656] RBP: 00007f31075e5090 R08: 0000000000000000 R09: 0000000000000000 [ 161.608414][ T7656] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 161.608427][ T7656] R13: 00007f3106a26038 R14: 00007f3106a25fa0 R15: 00007ffcda9d8be8 [ 161.608472][ T7656] [ 161.612901][ T5623] Bluetooth: hci4: command 0x0c1a tx timeout [ 162.197118][ T7662] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 162.197147][ T7662] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 162.200815][ T7662] vhci_hcd vhci_hcd.0: Device attached [ 162.216732][ T7665] vhci_hcd: connection closed [ 162.237469][ T141] vhci_hcd vhci_hcd.0: stop threads [ 162.237865][ T141] vhci_hcd vhci_hcd.0: release socket [ 162.237915][ T141] vhci_hcd vhci_hcd.0: disconnect device [ 162.283899][ T7669] netlink: 'syz.4.650': attribute type 4 has an invalid length. [ 162.284223][ T7669] netlink: 'syz.4.650': attribute type 4 has an invalid length. [ 162.355293][ T7676] rust_binder: 7675:7676 error while translating object: EINVAL [ 162.355379][ T7676] rust_binder: Failure in copy_transaction_data: EINVAL [ 162.355432][ T7676] rust_binder: 7675:7676 transaction call to 7675:0 failed EINVAL, code 0 size 72-24 [ 162.355792][ T1556] rust_binder: 7675: undelivered TRANSACTION_ERROR: 29201 [ 162.477133][ T7680] netlink: 12 bytes leftover after parsing attributes in process `syz.4.653'. [ 162.815213][ T5623] Bluetooth: hci1: command 0x0c1a tx timeout [ 162.994419][ T5766] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 163.172857][ T5766] usb 5-1: Using ep0 maxpacket: 16 [ 163.173434][ T5766] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 163.178353][ T5766] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.178379][ T5766] usb 5-1: Product: syz [ 163.178396][ T5766] usb 5-1: Manufacturer: syz [ 163.178413][ T5766] usb 5-1: SerialNumber: syz [ 163.220489][ T5766] usb 5-1: config 0 descriptor?? [ 163.231301][ T5766] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 163.415054][ T59] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.568476][ T59] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.612732][ T5626] Bluetooth: hci3: command 0x0c1a tx timeout [ 163.612782][ T5623] Bluetooth: hci2: command 0x0c1a tx timeout [ 163.650053][ T7720] netlink: 'syz.3.667': attribute type 10 has an invalid length. [ 163.650079][ T7720] netlink: 40 bytes leftover after parsing attributes in process `syz.3.667'. [ 163.666474][ T5766] usb 5-1: clie_3_5_startup: get interface number bad return length: 0 [ 163.666848][ T5766] visor 5-1:0.0: probe with driver visor failed with error -5 [ 163.693073][ T5623] Bluetooth: hci4: command 0x0c1a tx timeout [ 163.806573][ T59] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.836702][ T5626] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 163.838757][ T5626] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 163.839857][ T5626] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 163.841301][ T5626] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 163.842572][ T5626] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 163.971540][ T59] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.545811][ T59] dummy0: left allmulticast mode [ 164.545988][ T59] dummy0: left promiscuous mode [ 164.546268][ T59] bridge0: port 4(dummy0) entered disabled state [ 164.579091][ T59] bridge0: port 3(team0) entered disabled state [ 164.597351][ T59] bridge_slave_1: left allmulticast mode [ 164.597378][ T59] bridge_slave_1: left promiscuous mode [ 164.597608][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.628143][ T59] bridge_slave_0: left allmulticast mode [ 164.628171][ T59] bridge_slave_0: left promiscuous mode [ 164.628365][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.998936][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.014287][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.015912][ T59] bond0 (unregistering): Released all slaves [ 165.796626][ T25] usb 5-1: USB disconnect, device number 4 [ 165.942683][ T5623] Bluetooth: hci0: command tx timeout [ 165.994025][ T59] hsr_slave_0: left promiscuous mode [ 165.996387][ T59] hsr_slave_1: left promiscuous mode [ 165.997232][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.997253][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.999681][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.999702][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.045772][ T59] veth1_macvtap: left promiscuous mode [ 166.045809][ T59] veth0_macvtap: left promiscuous mode [ 166.045902][ T59] veth1_vlan: left promiscuous mode [ 166.045967][ T59] veth0_vlan: left promiscuous mode [ 166.418020][ T59] team_slave_1 (unregistering): left promiscuous mode [ 166.418051][ T59] team_slave_1 (unregistering): left allmulticast mode [ 166.419212][ T59] team0 (unregistering): Port device team_slave_1 removed [ 166.452972][ T59] team_slave_0 (unregistering): left promiscuous mode [ 166.452994][ T59] team_slave_0 (unregistering): left allmulticast mode [ 166.454062][ T59] team0 (unregistering): Port device team_slave_0 removed [ 166.980129][ T7724] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.980306][ T7724] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.980430][ T7724] bridge_slave_0: entered allmulticast mode [ 166.982356][ T7724] bridge_slave_0: entered promiscuous mode [ 166.993945][ T7724] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.994419][ T7724] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.994732][ T7724] bridge_slave_1: entered allmulticast mode [ 166.999812][ T7724] bridge_slave_1: entered promiscuous mode [ 167.065752][ T7724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.071070][ T7724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.122102][ T7724] team0: Port device team_slave_0 added [ 167.128971][ T7724] team0: Port device team_slave_1 added [ 167.171054][ T7724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.171072][ T7724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.171097][ T7724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.176479][ T7724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.176515][ T7724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.176578][ T7724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.304600][ T7724] hsr_slave_0: entered promiscuous mode [ 167.305645][ T7724] hsr_slave_1: entered promiscuous mode [ 167.306310][ T7724] debugfs: 'hsr0' already exists in 'hsr' [ 167.306328][ T7724] Cannot create hsr debugfs directory [ 167.660197][ T7724] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 167.668373][ T7724] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 167.669863][ T7724] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 167.688336][ T7724] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 167.689483][ T7724] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 167.692516][ T7724] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 167.716366][ T7724] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 167.720529][ T7724] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 167.828216][ T7724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.851258][ T7724] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.862404][ T7842] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.862507][ T7842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.896837][ T7842] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.896955][ T7842] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.013966][ T5623] Bluetooth: hci0: command tx timeout [ 168.422301][ T7724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.719924][ T7724] veth0_vlan: entered promiscuous mode [ 168.731832][ T7724] veth1_vlan: entered promiscuous mode [ 168.769046][ T7724] veth0_macvtap: entered promiscuous mode [ 168.780175][ T7724] veth1_macvtap: entered promiscuous mode [ 168.810844][ T7724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.818076][ T5276] 8021q: adding VLAN 0 to HW filter on device eth5 [ 168.835831][ T7724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.864086][ T7842] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.864126][ T7842] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.864158][ T7842] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.864190][ T7842] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.978270][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.978293][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.045494][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.045516][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.432338][ T5276] 8021q: adding VLAN 0 to HW filter on device eth6 [ 169.812669][ T5276] 8021q: adding VLAN 0 to HW filter on device eth7 [ 170.092846][ T5623] Bluetooth: hci0: command tx timeout [ 170.190999][ T5276] 8021q: adding VLAN 0 to HW filter on device eth8 [ 172.172792][ T5623] Bluetooth: hci0: command tx timeout [ 194.255808][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.255867][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 203.323164][ T8017] netlink: 'syz.3.682': attribute type 10 has an invalid length. [ 203.323188][ T8017] netlink: 40 bytes leftover after parsing attributes in process `syz.3.682'. [ 203.361832][ T8021] netlink: 'syz.5.683': attribute type 10 has an invalid length. [ 203.361853][ T8021] netlink: 40 bytes leftover after parsing attributes in process `syz.5.683'. [ 203.362094][ T8021] bridge0: port 3(dummy0) entered blocking state [ 203.362259][ T8021] bridge0: port 3(dummy0) entered disabled state [ 203.362404][ T8021] dummy0: entered allmulticast mode [ 203.401543][ T8021] dummy0: entered promiscuous mode [ 203.402175][ T8021] bridge0: port 3(dummy0) entered blocking state [ 203.402270][ T8021] bridge0: port 3(dummy0) entered forwarding state [ 203.517848][ T8028] FAULT_INJECTION: forcing a failure. [ 203.517848][ T8028] name failslab, interval 1, probability 0, space 0, times 0 [ 203.517881][ T8028] CPU: 0 UID: 0 PID: 8028 Comm: syz.3.685 Not tainted syzkaller #0 PREEMPT(full) [ 203.517907][ T8028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 203.517920][ T8028] Call Trace: [ 203.517930][ T8028] [ 203.517940][ T8028] dump_stack_lvl+0xe8/0x150 [ 203.517976][ T8028] should_fail_ex+0x3eb/0x540 [ 203.518005][ T8028] should_failslab+0xa8/0x100 [ 203.518029][ T8028] ? skb_clone+0x212/0x3a0 [ 203.518056][ T8028] kmem_cache_alloc_noprof+0x9c/0x600 [ 203.518090][ T8028] ? skb_clone+0x212/0x3a0 [ 203.518122][ T8028] skb_clone+0x212/0x3a0 [ 203.518153][ T8028] __netlink_deliver_tap+0x413/0x860 [ 203.518194][ T8028] ? netlink_deliver_tap+0x2e/0x1b0 [ 203.518225][ T8028] netlink_deliver_tap+0x19c/0x1b0 [ 203.518255][ T8028] netlink_dump+0x95b/0xee0 [ 203.518296][ T8028] ? __pfx_netlink_dump+0x10/0x10 [ 203.518346][ T8028] netlink_recvmsg+0x683/0xa50 [ 203.518386][ T8028] ? __pfx_netlink_recvmsg+0x10/0x10 [ 203.518415][ T8028] ? lock_acquire+0x115/0x350 [ 203.518462][ T8028] ? __lock_acquire+0x747/0x2de0 [ 203.518498][ T8028] ? __pfx_netlink_recvmsg+0x10/0x10 [ 203.518526][ T8028] sock_recvmsg_nosec+0x130/0x170 [ 203.518558][ T8028] ____sys_recvmsg+0x3e3/0x4a0 [ 203.518591][ T8028] ? __pfx_____sys_recvmsg+0x10/0x10 [ 203.518654][ T8028] ? import_iovec+0x73/0xa0 [ 203.518685][ T8028] ___sys_recvmsg+0x213/0x5a0 [ 203.518714][ T8028] ? __pfx____sys_recvmsg+0x10/0x10 [ 203.518744][ T8028] ? lock_acquire+0x115/0x350 [ 203.518802][ T8028] do_recvmmsg+0x31a/0x7f0 [ 203.518834][ T8028] ? __pfx_do_recvmmsg+0x10/0x10 [ 203.518870][ T8028] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 203.518892][ T8028] ? __fget_files+0x3a2/0x420 [ 203.518922][ T8028] __x64_sys_recvmmsg+0x198/0x250 [ 203.518944][ T8028] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 203.518972][ T8028] do_syscall_64+0x166/0x520 [ 203.518987][ T8028] ? trace_irq_disable+0x3b/0x140 [ 203.519010][ T8028] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.519028][ T8028] ? clear_bhb_loop+0x70/0xc0 [ 203.519049][ T8028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.519065][ T8028] RIP: 0033:0x7f5a89f9e159 [ 203.519081][ T8028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.519096][ T8028] RSP: 002b:00007f5a8ad8f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 203.519115][ T8028] RAX: ffffffffffffffda RBX: 00007f5a8a225fa0 RCX: 00007f5a89f9e159 [ 203.519128][ T8028] RDX: 0000000000000003 RSI: 000020000000b400 RDI: 0000000000000003 [ 203.519138][ T8028] RBP: 00007f5a8ad8f090 R08: 0000000000000000 R09: 0000000000000000 [ 203.519149][ T8028] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 203.519158][ T8028] R13: 00007f5a8a226038 R14: 00007f5a8a225fa0 R15: 00007ffd9662f7b8 [ 203.519184][ T8028] [ 203.557142][ T7795] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 203.744499][ T5692] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 203.785840][ T7795] usb 1-1: Using ep0 maxpacket: 32 [ 203.802259][ T7795] usb 1-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 203.802303][ T7795] usb 1-1: too many configurations: 155, using maximum allowed: 8 [ 203.837633][ T7795] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 64 [ 203.837676][ T7795] usb 1-1: can't read configurations, error -22 [ 203.904294][ T5692] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 203.905336][ T5692] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 203.905360][ T5692] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 203.907675][ T5692] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.907701][ T5692] usb 5-1: Product: syz [ 203.907719][ T5692] usb 5-1: Manufacturer: syz [ 203.907735][ T5692] usb 5-1: SerialNumber: syz [ 203.937809][ T5692] usb 5-1: config 0 descriptor?? [ 203.968908][ T8031] netlink: 28 bytes leftover after parsing attributes in process `syz.5.687'. [ 203.971522][ T5692] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 204.022677][ T7795] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 204.172692][ T7795] usb 1-1: Using ep0 maxpacket: 32 [ 204.173265][ T7795] usb 1-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 204.173313][ T7795] usb 1-1: too many configurations: 155, using maximum allowed: 8 [ 204.174570][ T7795] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 64 [ 204.174607][ T7795] usb 1-1: can't read configurations, error -22 [ 204.175126][ T7795] usb usb1-port1: attempt power cycle [ 204.431740][ T8050] netlink: 'syz.4.684': attribute type 10 has an invalid length. [ 204.513644][ T7795] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 204.534898][ T7795] usb 1-1: Using ep0 maxpacket: 32 [ 204.535492][ T7795] usb 1-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 204.535537][ T7795] usb 1-1: too many configurations: 155, using maximum allowed: 8 [ 204.536530][ T7795] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 64 [ 204.536567][ T7795] usb 1-1: can't read configurations, error -22 [ 204.663393][ T7795] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 204.684425][ T7795] usb 1-1: Using ep0 maxpacket: 32 [ 204.684942][ T7795] usb 1-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 204.684978][ T7795] usb 1-1: too many configurations: 155, using maximum allowed: 8 [ 204.685906][ T7795] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 64 [ 204.685937][ T7795] usb 1-1: can't read configurations, error -22 [ 204.686193][ T7795] usb usb1-port1: unable to enumerate USB device [ 204.844856][ T8064] process 'syz.5.696' launched './file2' with NULL argv: empty string added [ 204.901756][ T5692] usb 5-1: USB disconnect, device number 5 [ 204.921593][ T8067] netlink: 'syz.5.697': attribute type 10 has an invalid length. [ 204.921612][ T8067] netlink: 40 bytes leftover after parsing attributes in process `syz.5.697'. [ 204.921716][ T8067] team0: entered promiscuous mode [ 204.921731][ T8067] team_slave_0: entered promiscuous mode [ 204.921893][ T8067] team_slave_1: entered promiscuous mode [ 204.922090][ T8067] team0: entered allmulticast mode [ 204.922108][ T8067] team_slave_0: entered allmulticast mode [ 204.922122][ T8067] team_slave_1: entered allmulticast mode [ 204.931725][ T8067] bridge0: port 4(team0) entered blocking state [ 204.965738][ T8067] bridge0: port 4(team0) entered disabled state [ 205.002525][ T8067] bridge0: port 4(team0) entered blocking state [ 205.002789][ T8067] bridge0: port 4(team0) entered forwarding state [ 205.062518][ T8069] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 205.062544][ T8069] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 205.062988][ T8069] vhci_hcd vhci_hcd.0: Device attached [ 205.097440][ T8070] usbip_core: unknown command [ 205.097456][ T8070] vhci_hcd: unknown pdu 0 [ 205.097469][ T8070] usbip_core: unknown command [ 205.098752][ T7831] vhci_hcd vhci_hcd.3: stop threads [ 205.098772][ T7831] vhci_hcd vhci_hcd.3: release socket [ 205.098793][ T7831] vhci_hcd vhci_hcd.3: disconnect device [ 205.099718][ T5623] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 205.229663][ T7433] hid_parser_main: 1 callbacks suppressed [ 205.229687][ T7433] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 205.251148][ T7433] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 205.545629][ T8081] netlink: 'syz.4.702': attribute type 4 has an invalid length. [ 205.546067][ T8081] netlink: 'syz.4.702': attribute type 4 has an invalid length. [ 205.935488][ T7795] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 205.939231][ T8098] netlink: 'syz.3.709': attribute type 10 has an invalid length. [ 205.939245][ T8098] netlink: 40 bytes leftover after parsing attributes in process `syz.3.709'. [ 206.005311][ T8100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.005898][ T8100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.009826][ T8100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.010245][ T8100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.113215][ T7795] usb 6-1: New USB device found, idVendor=0c70, idProduct=f010, bcdDevice= 0.00 [ 206.114227][ T7795] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.114246][ T7795] usb 6-1: config 0 interface 0 has no altsetting 0 [ 206.114267][ T7795] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.116651][ T7795] usb 6-1: config 0 descriptor?? [ 206.458550][ T8108] 9p: Bad value for 'wfdno' [ 206.566555][ T8123] netlink: 'syz.3.716': attribute type 4 has an invalid length. [ 206.566919][ T8123] netlink: 'syz.3.716': attribute type 4 has an invalid length. [ 206.706974][ T7795] usbhid 6-1:0.0: can't add hid device: -71 [ 206.707104][ T7795] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 206.729431][ T7795] usb 6-1: USB disconnect, device number 2 [ 206.781490][ T8127] syzkaller0: entered promiscuous mode [ 206.781511][ T8127] syzkaller0: entered allmulticast mode [ 207.279368][ T8140] netlink: 'syz.4.723': attribute type 10 has an invalid length. [ 207.279392][ T8140] netlink: 40 bytes leftover after parsing attributes in process `syz.4.723'. [ 207.527301][ T8152] netlink: 40 bytes leftover after parsing attributes in process `syz.5.729'. [ 207.794377][ T8166] syzkaller1: entered promiscuous mode [ 207.794399][ T8166] syzkaller1: entered allmulticast mode [ 207.822119][ T8163] null_blk: nullb1: using native zone append [ 208.082368][ T8163] null_blk: disk nullb1 created [ 208.106982][ T8175] rust_binder: Write failure EINVAL in pid:457 [ 208.558367][ T8193] validate_nla: 3 callbacks suppressed [ 208.558391][ T8193] netlink: 'syz.3.742': attribute type 10 has an invalid length. [ 208.558408][ T8193] netlink: 40 bytes leftover after parsing attributes in process `syz.3.742'. [ 208.811181][ T8209] netlink: 20 bytes leftover after parsing attributes in process `syz.3.749'. [ 208.870468][ T8212] netlink: 'syz.3.750': attribute type 10 has an invalid length. [ 208.870483][ T8212] netlink: 40 bytes leftover after parsing attributes in process `syz.3.750'. [ 208.914227][ T7788] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 209.064534][ T7788] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 209.067293][ T7788] usb 6-1: config 0 has an invalid interface number: 255 but max is 0 [ 209.067330][ T7788] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.067344][ T7788] usb 6-1: config 0 has no interface number 0 [ 209.067365][ T7788] usb 6-1: config 0 interface 255 has no altsetting 0 [ 209.546957][ T8233] FAULT_INJECTION: forcing a failure. [ 209.546957][ T8233] name failslab, interval 1, probability 0, space 0, times 0 [ 209.546991][ T8233] CPU: 1 UID: 0 PID: 8233 Comm: syz.0.756 Tainted: G L syzkaller #0 PREEMPT(full) [ 209.547020][ T8233] Tainted: [L]=SOFTLOCKUP [ 209.547027][ T8233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 209.547040][ T8233] Call Trace: [ 209.547048][ T8233] [ 209.547058][ T8233] dump_stack_lvl+0xe8/0x150 [ 209.547091][ T8233] should_fail_ex+0x3eb/0x540 [ 209.547121][ T8233] should_failslab+0xa8/0x100 [ 209.547146][ T8233] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 209.547189][ T8233] ? __d_alloc+0x37/0x6f0 [ 209.547217][ T8233] ? __d_alloc+0x37/0x6f0 [ 209.547250][ T8233] __d_alloc+0x37/0x6f0 [ 209.547289][ T8233] d_alloc_pseudo+0x21/0xc0 [ 209.547338][ T8233] alloc_path_pseudo+0x107/0x220 [ 209.547369][ T8233] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 209.547400][ T8233] ? do_raw_spin_lock+0x12b/0x2f0 [ 209.547435][ T8233] alloc_file_pseudo+0xa8/0x1e0 [ 209.547465][ T8233] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 209.547494][ T8233] ? _raw_spin_unlock+0x28/0x50 [ 209.547527][ T8233] ? alloc_fd+0x651/0x6c0 [ 209.547560][ T8233] sock_alloc_file+0xb8/0x2e0 [ 209.547588][ T8233] ? __sys_socket+0x12b/0x1b0 [ 209.547625][ T8233] __sys_socket+0x13f/0x1b0 [ 209.547663][ T8233] __x64_sys_socket+0x7a/0x90 [ 209.547698][ T8233] do_syscall_64+0x166/0x520 [ 209.547719][ T8233] ? trace_irq_disable+0x3b/0x140 [ 209.547753][ T8233] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.547778][ T8233] ? clear_bhb_loop+0x70/0xc0 [ 209.547806][ T8233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.547830][ T8233] RIP: 0033:0x7f8f22b9e159 [ 209.547852][ T8233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.547872][ T8233] RSP: 002b:00007f8f23ad4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 209.547897][ T8233] RAX: ffffffffffffffda RBX: 00007f8f22e25fa0 RCX: 00007f8f22b9e159 [ 209.547915][ T8233] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 209.547930][ T8233] RBP: 00007f8f22c3503b R08: 0000000000000000 R09: 0000000000000000 [ 209.547945][ T8233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 209.547959][ T8233] R13: 00007f8f22e26038 R14: 00007f8f22e25fa0 R15: 00007ffded410b68 [ 209.547995][ T8233] [ 210.160656][ T5623] Bluetooth: hci3: unexpected event for opcode 0x042f [ 210.206518][ T8240] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 210.464520][ T8251] netlink: 'syz.4.764': attribute type 10 has an invalid length. [ 210.464544][ T8251] netlink: 40 bytes leftover after parsing attributes in process `syz.4.764'. [ 210.518558][ T8255] netlink: 20 bytes leftover after parsing attributes in process `syz.0.766'. [ 210.645538][ T8265] netlink: 'syz.3.768': attribute type 10 has an invalid length. [ 210.645555][ T8265] netlink: 40 bytes leftover after parsing attributes in process `syz.3.768'. [ 210.888980][ T8272] netlink: 48 bytes leftover after parsing attributes in process `syz.4.772'. [ 210.889003][ T8272] netlink: 12 bytes leftover after parsing attributes in process `syz.4.772'. [ 210.915371][ T8272] netlink: 52 bytes leftover after parsing attributes in process `syz.4.772'. [ 211.078887][ T7794] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 211.103223][ T7794] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 211.521594][ T8295] netlink: 'syz.3.781': attribute type 4 has an invalid length. [ 211.541310][ T8295] netlink: 'syz.3.781': attribute type 4 has an invalid length. [ 211.605030][ T7794] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 211.607189][ T8298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.607649][ T8298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.616619][ T8298] openvswitch: netlink: Duplicate key (type 6). [ 211.694664][ T7788] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.714104][ T7788] usb 6-1: config 0 descriptor?? [ 211.716368][ T7788] usb 6-1: can't set config #0, error -71 [ 211.721850][ T7788] usb 6-1: USB disconnect, device number 3 [ 211.762669][ T7794] usb 5-1: Using ep0 maxpacket: 8 [ 211.763889][ T7794] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 211.764814][ T8300] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 211.765157][ T7794] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.765187][ T7794] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 211.765212][ T7794] usb 5-1: config 0 interface 0 has no altsetting 0 [ 211.765242][ T7794] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.768306][ T8301] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 211.771251][ T7794] usb 5-1: config 0 descriptor?? [ 211.781439][ T8301] cramfs: block size(16384) > page size(4096) not supported by filesystem [ 211.788876][ T8301] cramfs: wrong magic [ 211.800115][ T8300] cramfs: block size(16384) > page size(4096) not supported by filesystem [ 211.813962][ T30] usb 1-1: new low-speed USB device number 41 using dummy_hcd [ 211.828474][ T8300] cramfs: wrong magic [ 211.838078][ T5623] Bluetooth: hci2: unexpected event for opcode 0x080f [ 211.848890][ T8298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.782'. [ 211.963519][ T30] usb 1-1: device descriptor read/64, error -71 [ 212.119595][ T8309] netlink: 'syz.5.785': attribute type 10 has an invalid length. [ 212.189439][ T7794] konepure 0003:1E7D:2DBE.0007: unexpected long global item [ 212.191709][ T7794] konepure 0003:1E7D:2DBE.0007: parse failed [ 212.191776][ T7794] konepure 0003:1E7D:2DBE.0007: probe with driver konepure failed with error -22 [ 212.213218][ T30] usb 1-1: new low-speed USB device number 42 using dummy_hcd [ 212.356661][ T30] usb 1-1: device descriptor read/64, error -71 [ 212.458238][ T5692] usb 5-1: USB disconnect, device number 6 [ 212.476694][ T30] usb usb1-port1: attempt power cycle [ 212.820342][ T30] usb 1-1: new low-speed USB device number 43 using dummy_hcd [ 212.843291][ T30] usb 1-1: device descriptor read/8, error -71 [ 213.085321][ T30] usb 1-1: new low-speed USB device number 44 using dummy_hcd [ 213.103789][ T30] usb 1-1: device descriptor read/8, error -71 [ 213.213288][ T30] usb usb1-port1: unable to enumerate USB device [ 213.319574][ T8317] Bluetooth: MGMT ver 1.23 [ 213.910609][ T8337] netlink: 'syz.5.797': attribute type 16 has an invalid length. [ 213.910626][ T8337] netlink: 'syz.5.797': attribute type 2 has an invalid length. [ 213.910635][ T8337] __nla_validate_parse: 2 callbacks suppressed [ 213.910642][ T8337] netlink: 64102 bytes leftover after parsing attributes in process `syz.5.797'. [ 213.947124][ T8337] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 214.112897][ T7433] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 214.264317][ T7433] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 214.266693][ T7433] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.266726][ T7433] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.270458][ T7433] usb 5-1: config 0 descriptor?? [ 214.309421][ T7433] pwc: Askey VC010 type 2 USB webcam detected. [ 214.712256][ T7433] pwc: recv_control_msg error -32 req 02 val 2b00 [ 214.991084][ T8356] netlink: 'syz.0.803': attribute type 10 has an invalid length. [ 214.991143][ T8356] netlink: 40 bytes leftover after parsing attributes in process `syz.0.803'. [ 215.081625][ T7433] pwc: recv_control_msg error -71 req 02 val 2c00 [ 215.091026][ T7433] pwc: recv_control_msg error -71 req 04 val 1000 [ 215.098332][ T7433] pwc: recv_control_msg error -71 req 04 val 1300 [ 215.098807][ T7433] pwc: recv_control_msg error -71 req 04 val 1400 [ 215.099402][ T7433] pwc: recv_control_msg error -71 req 02 val 2000 [ 215.100526][ T7433] pwc: recv_control_msg error -71 req 02 val 2100 [ 215.101861][ T7433] pwc: recv_control_msg error -71 req 04 val 1500 [ 215.123134][ T7433] pwc: recv_control_msg error -71 req 02 val 2500 [ 215.136583][ T7433] pwc: recv_control_msg error -71 req 02 val 2400 [ 215.150204][ T7433] pwc: recv_control_msg error -71 req 02 val 2600 [ 215.151059][ T7433] pwc: recv_control_msg error -71 req 02 val 2900 [ 215.159526][ T7433] pwc: recv_control_msg error -71 req 02 val 2800 [ 215.172938][ T7433] pwc: recv_control_msg error -71 req 04 val 1100 [ 215.179691][ T7433] pwc: recv_control_msg error -71 req 04 val 1200 [ 215.189674][ T7433] pwc: Registered as video103. [ 215.200052][ T7433] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input14 [ 215.223297][ T7433] usb 5-1: USB disconnect, device number 7 [ 215.337358][ T8361] netlink: 20 bytes leftover after parsing attributes in process `syz.5.805'. [ 215.755423][ T8371] netlink: 'syz.0.809': attribute type 10 has an invalid length. [ 215.755446][ T8371] netlink: 40 bytes leftover after parsing attributes in process `syz.0.809'. [ 215.854421][ T5623] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 215.854622][ T5623] Bluetooth: hci2: Injecting HCI hardware error event [ 215.856506][ T5626] Bluetooth: hci2: hardware error 0x00 [ 216.398789][ T8394] netlink: 'syz.4.817': attribute type 4 has an invalid length. [ 216.461971][ T8394] netlink: 'syz.4.817': attribute type 4 has an invalid length. [ 216.507717][ T8399] netlink: 'syz.5.819': attribute type 3 has an invalid length. [ 216.610021][ T8403] netlink: 'syz.0.820': attribute type 10 has an invalid length. [ 216.610046][ T8403] netlink: 40 bytes leftover after parsing attributes in process `syz.0.820'. [ 217.185963][ T30] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 217.343823][ T30] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 217.355356][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 217.355466][ T30] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 217.355559][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 217.355627][ T30] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 217.355718][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.445919][ T30] usb 5-1: config 0 descriptor?? [ 217.718409][ T30] hdpvr 5-1:0.0: firmware version 0x12 dated @27BD^jvi0 [ 217.718409][ T30] pY [ 217.797147][ T8443] netlink: 'syz.0.830': attribute type 10 has an invalid length. [ 217.797170][ T8443] netlink: 40 bytes leftover after parsing attributes in process `syz.0.830'. [ 217.935709][ T5626] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 218.046817][ T30] hdpvr 5-1:0.0: device init failed [ 218.046904][ T30] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 218.082942][ T30] usb 5-1: USB disconnect, device number 8 [ 218.122735][ T7433] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 218.272958][ T7433] usb 1-1: Using ep0 maxpacket: 32 [ 218.273548][ T7433] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 218.274543][ T7433] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 218.274578][ T7433] usb 1-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 218.274607][ T7433] usb 1-1: config 0 interface 0 has no altsetting 0 [ 218.274639][ T7433] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.352707][ T7433] usb 1-1: config 0 descriptor?? [ 218.577487][ T7433] steelseries 0003:1038:1410.0008: item fetching failed at offset 2/6 [ 218.578240][ T7433] steelseries 0003:1038:1410.0008: parse failed [ 218.578348][ T7433] steelseries 0003:1038:1410.0008: probe with driver steelseries failed with error -22 [ 218.772502][ T7433] usb 1-1: USB disconnect, device number 45 [ 219.336187][ T8489] netlink: 'syz.5.843': attribute type 10 has an invalid length. [ 219.336212][ T8489] netlink: 40 bytes leftover after parsing attributes in process `syz.5.843'. [ 219.592333][ T7831] IPVS: starting estimator thread 0... [ 219.673291][ T8497] IPVS: using max 28 ests per chain, 67200 per kthread [ 219.720146][ T8500] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 219.780523][ T8503] netlink: 'syz.0.847': attribute type 10 has an invalid length. [ 219.780547][ T8503] netlink: 40 bytes leftover after parsing attributes in process `syz.0.847'. [ 220.548800][ T8532] rust_binder: 8531:8532 error while translating object: EINVAL [ 220.548902][ T8532] rust_binder: Failure in copy_transaction_data: EINVAL [ 220.548928][ T8532] rust_binder: 8531:8532 transaction call to 8531:0 failed EINVAL, code 0 size 72-24 [ 220.549362][ T5726] rust_binder: 8531: undelivered TRANSACTION_ERROR: 29201 [ 221.283525][ T5726] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 221.311632][ T8557] netlink: 'syz.4.867': attribute type 10 has an invalid length. [ 221.311654][ T8557] netlink: 40 bytes leftover after parsing attributes in process `syz.4.867'. [ 221.446478][ T5726] usb 1-1: New USB device found, idVendor=046d, idProduct=c548, bcdDevice= 0.40 [ 221.449913][ T5726] usb 1-1: config 1 interface 0 has no altsetting 0 [ 221.478220][ T5726] usb 1-1: string descriptor 0 read error: -22 [ 221.478364][ T5726] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.001081][ T5726] logitech-djreceiver 0003:046D:C548.0009: unknown main item tag 0x0 [ 222.001117][ T5726] logitech-djreceiver 0003:046D:C548.0009: unknown main item tag 0x0 [ 222.001142][ T5726] logitech-djreceiver 0003:046D:C548.0009: unknown main item tag 0x0 [ 222.001165][ T5726] logitech-djreceiver 0003:046D:C548.0009: unknown main item tag 0x0 [ 222.001188][ T5726] logitech-djreceiver 0003:046D:C548.0009: unknown main item tag 0x0 [ 222.001212][ T5726] logitech-djreceiver 0003:046D:C548.0009: unknown main item tag 0x0 [ 222.001236][ T5726] logitech-djreceiver 0003:046D:C548.0009: unknown main item tag 0x0 [ 222.001261][ T5726] logitech-djreceiver 0003:046D:C548.0009: unknown main item tag 0x0 [ 222.001285][ T5726] logitech-djreceiver 0003:046D:C548.0009: unknown main item tag 0x0 [ 222.001309][ T5726] logitech-djreceiver 0003:046D:C548.0009: unknown main item tag 0x0 [ 222.116507][ T8568] netlink: 'syz.3.871': attribute type 4 has an invalid length. [ 222.121587][ T8568] netlink: 'syz.3.871': attribute type 4 has an invalid length. [ 222.178798][ T5726] logitech-djreceiver 0003:046D:C548.0009: hidraw0: USB HID v0.22 Device [HID 046d:c548] on usb-dummy_hcd.0-1/input0 [ 222.237669][ T8572] rust_binder: 8571:8572 error while translating object: EINVAL [ 222.237760][ T8572] rust_binder: Failure in copy_transaction_data: EINVAL [ 222.237790][ T8572] rust_binder: 8571:8572 transaction call to 8571:0 failed EINVAL, code 0 size 72-24 [ 222.238176][ T7788] rust_binder: 8571: undelivered TRANSACTION_ERROR: 29201 [ 222.430850][ T8550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.431508][ T8550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.433085][ T7433] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 222.511483][ T8580] openvswitch: netlink: VXLAN extension 54 out of range max 1 [ 222.536516][ T8581] openvswitch: netlink: VXLAN extension 54 out of range max 1 [ 222.603431][ T7433] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 222.604730][ T7433] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 222.604763][ T7433] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.606303][ T7433] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 222.606328][ T7433] usb 5-1: Product: syz [ 222.606344][ T7433] usb 5-1: Manufacturer: syz [ 222.700310][ T7433] hub 5-1:4.0: USB hub found [ 222.904291][ T7433] hub 5-1:4.0: 1 port detected [ 223.069055][ T8587] netlink: 'syz.3.879': attribute type 10 has an invalid length. [ 223.069078][ T8587] netlink: 40 bytes leftover after parsing attributes in process `syz.3.879'. [ 223.126166][ T7433] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 223.168056][ T8589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.172276][ T7433] usb 5-1: USB disconnect, device number 9 [ 223.191616][ T8589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.251458][ T8590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.251927][ T8590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.281280][ T8590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.298450][ T8590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.299780][ T8590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.329201][ T8590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.330323][ T8590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.330828][ T8590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.372489][ T8590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.377255][ T8590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.510644][ T8596] netlink: 'syz.3.881': attribute type 10 has an invalid length. [ 223.510666][ T8596] netlink: 40 bytes leftover after parsing attributes in process `syz.3.881'. [ 223.697820][ T8600] netlink: 80 bytes leftover after parsing attributes in process `syz.3.883'. [ 223.855801][ T8602] netlink: 'syz.4.885': attribute type 4 has an invalid length. [ 223.884200][ T8602] netlink: 'syz.4.885': attribute type 4 has an invalid length. [ 224.301581][ T8613] netlink: 20 bytes leftover after parsing attributes in process `syz.0.889'. [ 224.366306][ T8616] kvm: kvm [8614]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x40000031) [ 224.457932][ T8618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.458531][ T8618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.605087][ T7433] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 224.753552][ T7433] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 224.754724][ T7433] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.754771][ T7433] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.791685][ T7433] usb 5-1: config 0 descriptor?? [ 224.817542][ T8622] netlink: 'syz.5.893': attribute type 10 has an invalid length. [ 224.817564][ T8622] netlink: 40 bytes leftover after parsing attributes in process `syz.5.893'. [ 225.009883][ T7433] usbhid 5-1:0.0: can't add hid device: -71 [ 225.009983][ T7433] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 225.030934][ T7433] usb 5-1: USB disconnect, device number 10 [ 225.358072][ T8638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.358641][ T8638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.522964][ T7433] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 225.674669][ T7433] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 225.677245][ T7433] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.677294][ T7433] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.705048][ T7433] usb 5-1: config 0 descriptor?? [ 226.221608][ T8662] netlink: 'syz.3.909': attribute type 10 has an invalid length. [ 226.221631][ T8662] netlink: 40 bytes leftover after parsing attributes in process `syz.3.909'. [ 226.376491][ T8664] netlink: 'syz.3.911': attribute type 10 has an invalid length. [ 226.376515][ T8664] netlink: 40 bytes leftover after parsing attributes in process `syz.3.911'. [ 226.650183][ T8674] netlink: 80 bytes leftover after parsing attributes in process `syz.5.914'. [ 226.992869][ T7788] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 227.085789][ T8690] netlink: 'syz.3.922': attribute type 4 has an invalid length. [ 227.090305][ T8690] netlink: 'syz.3.922': attribute type 4 has an invalid length. [ 227.146421][ T7788] usb 6-1: Using ep0 maxpacket: 8 [ 227.147329][ T7788] usb 6-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 227.147653][ T7433] aiptek 5-1:0.0: Aiptek using 400 ms programming speed [ 227.163853][ T7788] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 227.191593][ T7788] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.191618][ T7788] usb 6-1: Product: syz [ 227.191632][ T7788] usb 6-1: Manufacturer: syz [ 227.191646][ T7788] usb 6-1: SerialNumber: syz [ 227.232365][ T7788] ch9200 6-1:2.0: probe with driver ch9200 failed with error -22 [ 227.234562][ T7433] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input15 [ 227.347779][ T8693] netlink: 'syz.3.923': attribute type 1 has an invalid length. [ 227.347803][ T8693] netlink: 244 bytes leftover after parsing attributes in process `syz.3.923'. [ 227.376889][ T31] kauditd_printk_skb: 19 callbacks suppressed [ 227.376907][ T31] audit: type=1326 audit(1789186586.312:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8698 comm="syz.0.925" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8f22b9e159 code=0x0 [ 227.436370][ T7788] usb 6-1: USB disconnect, device number 4 [ 227.909734][ T8717] netlink: 'syz.3.928': attribute type 10 has an invalid length. [ 227.909774][ T8717] netlink: 40 bytes leftover after parsing attributes in process `syz.3.928'. [ 227.987260][ T8719] netlink: 'syz.3.929': attribute type 6 has an invalid length. [ 228.371285][ T31] audit: type=1400 audit(1789186587.302:33): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="//o" pid=8726 comm="syz.3.933" name="//o" offset=35 [ 228.810646][ T8748] [U]  [ 228.810666][ T8748] [U] K{ [ 228.810703][ T8748] [U] t 1ŠFfˊ`GJgo/mC [ 228.810751][ T8748] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 228.810783][ T8748] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 228.810874][ T8748] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 228.810984][ T8748] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 228.811044][ T8748] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 228.811065][ T8748] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 228.811125][ T8748] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 228.811388][ T8748] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 228.811423][ T8748] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 228.811440][ T8748] [U] 22Ʃx?0;3u [ 228.811573][ T8748] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 228.811630][ T8748] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 228.811654][ T8748] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 228.811669][ T8748] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 228.811695][ T8748] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 228.811733][ T8748] [U] ec [ 228.811748][ T8748] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 228.824342][ T8744] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 228.947569][ T7433] usb 5-1: USB disconnect, device number 11 [ 228.947718][ C0] aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 229.222802][ T8751] netlink: 'syz.3.942': attribute type 4 has an invalid length. [ 229.229154][ T8751] netlink: 'syz.3.942': attribute type 4 has an invalid length. [ 229.309373][ T8753] FAULT_INJECTION: forcing a failure. [ 229.309373][ T8753] name failslab, interval 1, probability 0, space 0, times 0 [ 229.309407][ T8753] CPU: 1 UID: 0 PID: 8753 Comm: syz.5.943 Tainted: G L syzkaller #0 PREEMPT(full) [ 229.309435][ T8753] Tainted: [L]=SOFTLOCKUP [ 229.309442][ T8753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 229.309458][ T8753] Call Trace: [ 229.309466][ T8753] [ 229.309475][ T8753] dump_stack_lvl+0xe8/0x150 [ 229.309507][ T8753] should_fail_ex+0x3eb/0x540 [ 229.309536][ T8753] should_failslab+0xa8/0x100 [ 229.309579][ T8753] __kmalloc_cache_noprof+0x9e/0x600 [ 229.309613][ T8753] ? alloc_fs_context+0x66/0xd00 [ 229.309644][ T8753] ? alloc_fs_context+0x66/0xd00 [ 229.309683][ T8753] alloc_fs_context+0x66/0xd00 [ 229.309719][ T8753] ? bpf_lsm_namespace_init+0x9/0x20 [ 229.309757][ T8753] mq_init_ns+0x10d/0x770 [ 229.309803][ T8753] copy_ipcs+0x460/0x6c0 [ 229.309835][ T8753] create_new_namespaces+0x210/0x6b0 [ 229.309862][ T8753] ? security_capable+0x7e/0x2c0 [ 229.309892][ T8753] unshare_nsproxy_namespaces+0x144/0x190 [ 229.309919][ T8753] ksys_unshare+0x5a7/0x950 [ 229.309951][ T8753] ? __pfx_ksys_unshare+0x10/0x10 [ 229.309978][ T8753] ? rcu_is_watching+0x16/0xb0 [ 229.310010][ T8753] __x64_sys_unshare+0x38/0x50 [ 229.310036][ T8753] do_syscall_64+0x166/0x520 [ 229.310056][ T8753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.310078][ T8753] ? clear_bhb_loop+0x70/0xc0 [ 229.310104][ T8753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.310124][ T8753] RIP: 0033:0x7fe3c579e159 [ 229.310143][ T8753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.310161][ T8753] RSP: 002b:00007fe3c65ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 229.310184][ T8753] RAX: ffffffffffffffda RBX: 00007fe3c5a25fa0 RCX: 00007fe3c579e159 [ 229.310199][ T8753] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 229.310213][ T8753] RBP: 00007fe3c583503b R08: 0000000000000000 R09: 0000000000000000 [ 229.310225][ T8753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 229.310238][ T8753] R13: 00007fe3c5a26038 R14: 00007fe3c5a25fa0 R15: 00007ffd7ef2f3c8 [ 229.310269][ T8753] [ 229.661121][ T8762] rust_binder: 8761:8762 error while translating object: EINVAL [ 229.661219][ T8762] rust_binder: Failure in copy_transaction_data: EINVAL [ 229.661269][ T8762] rust_binder: 8761:8762 transaction call to 8761:0 failed EINVAL, code 0 size 72-24 [ 229.661947][ T5726] rust_binder: 8761: undelivered TRANSACTION_ERROR: 29201 [ 229.828114][ T8769] fuse: Bad value for 'group_id' [ 229.828137][ T8769] fuse: Bad value for 'group_id' [ 229.829769][ T8769] netlink: 60 bytes leftover after parsing attributes in process `syz.4.948'. [ 229.928416][ T8773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.948'. [ 230.246215][ T8786] netlink: 20 bytes leftover after parsing attributes in process `syz.5.955'. [ 230.288071][ T8788] netlink: 'syz.3.956': attribute type 4 has an invalid length. [ 230.292419][ T8788] netlink: 'syz.3.956': attribute type 4 has an invalid length. [ 230.623616][ T8806] rust_binder: 8803:8806 error while translating object: EINVAL [ 230.623722][ T8806] rust_binder: Failure in copy_transaction_data: EINVAL [ 230.623748][ T8806] rust_binder: 8803:8806 transaction call to 8803:0 failed EINVAL, code 0 size 72-24 [ 230.624195][ T30] rust_binder: 8803: undelivered TRANSACTION_ERROR: 29201 [ 230.699147][ T8802] tmpfs: Unknown parameter 'usrquotaD' [ 231.098703][ T8825] netlink: 4 bytes leftover after parsing attributes in process `syz.3.972'. [ 231.262150][ T8838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.290246][ T7433] hid_parser_main: 1204 callbacks suppressed [ 231.290271][ T7433] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 231.297893][ T8838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.323111][ T8833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.323513][ T8833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.375003][ T7433] hid-generic 0000:0000:0000.000A: hidraw1: HID v0.00 Device [syz1] on syz0 [ 231.449161][ T8844] fido_id[8844]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 231.499184][ T8836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.499749][ T8836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.658902][ T8848] rust_binder: 8847:8848 error while translating object: EINVAL [ 231.658990][ T8848] rust_binder: Failure in copy_transaction_data: EINVAL [ 231.659018][ T8848] rust_binder: 8847:8848 transaction call to 8847:0 failed EINVAL, code 0 size 72-24 [ 231.659429][ T7788] rust_binder: 8847: undelivered TRANSACTION_ERROR: 29201 [ 231.745226][ T8850] jffs2: notice: (8850) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 232.030232][ T8862] netlink: 'syz.5.980': attribute type 10 has an invalid length. [ 232.030282][ T8862] netlink: 40 bytes leftover after parsing attributes in process `syz.5.980'. [ 232.342705][ T5726] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 232.402723][ T7433] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 232.515278][ T5726] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 232.518541][ T5726] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.518565][ T5726] usb 5-1: Product: syz [ 232.518578][ T5726] usb 5-1: Manufacturer: syz [ 232.518624][ T5726] usb 5-1: SerialNumber: syz [ 232.533019][ T7433] usb 6-1: device descriptor read/64, error -71 [ 232.772684][ T7433] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 232.862344][ T8882] netlink: 'syz.0.992': attribute type 10 has an invalid length. [ 232.862366][ T8882] netlink: 40 bytes leftover after parsing attributes in process `syz.0.992'. [ 232.902668][ T7433] usb 6-1: device descriptor read/64, error -71 [ 232.935955][ T8884] rust_binder: 8883:8884 error while translating object: EINVAL [ 232.936055][ T8884] rust_binder: Failure in copy_transaction_data: EINVAL [ 232.936088][ T8884] rust_binder: 8883:8884 transaction call to 8883:0 failed EINVAL, code 0 size 72-24 [ 232.936485][ T30] rust_binder: 8883: undelivered TRANSACTION_ERROR: 29201 [ 232.975901][ T5726] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 232.975959][ T5726] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 232.976527][ T5726] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 233.011778][ T5726] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 233.021887][ T7433] usb usb6-port1: attempt power cycle [ 233.266355][ T8894] netlink: 20 bytes leftover after parsing attributes in process `syz.0.998'. [ 233.362725][ T7433] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 233.385221][ T7433] usb 6-1: device descriptor read/8, error -71 [ 233.471654][ T8902] netlink: 'syz.0.1001': attribute type 4 has an invalid length. [ 233.471958][ T8902] netlink: 'syz.0.1001': attribute type 4 has an invalid length. [ 233.624802][ T7433] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 233.645791][ T7433] usb 6-1: device descriptor read/8, error -71 [ 233.753220][ T7433] usb usb6-port1: unable to enumerate USB device [ 234.818588][ T8936] rust_binder: 8934:8936 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 234.821160][ T8937] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 234.822166][ T8938] rust_binder: 8934:8938 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 235.037446][ T8948] netlink: 'syz.0.1016': attribute type 46 has an invalid length. [ 235.052148][ T8948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.061981][ T8948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.123456][ T7433] usb 5-1: USB disconnect, device number 12 [ 235.247028][ T8954] netlink: 'syz.4.1019': attribute type 10 has an invalid length. [ 235.247056][ T8954] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1019'. [ 235.444930][ T8958] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 235.645342][ T8977] netlink: 'syz.5.1026': attribute type 10 has an invalid length. [ 235.645364][ T8977] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1026'. [ 235.843776][ T8983] rust_binder: 8982:8983 error while translating object: EINVAL [ 235.843869][ T8983] rust_binder: Failure in copy_transaction_data: EINVAL [ 235.843909][ T8983] rust_binder: 8982:8983 transaction call to 8982:0 failed EINVAL, code 0 size 72-24 [ 235.844356][ T7433] rust_binder: 8982: undelivered TRANSACTION_ERROR: 29201 [ 236.073909][ T8992] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1034'. [ 236.607508][ T9010] netlink: 'syz.0.1042': attribute type 10 has an invalid length. [ 236.607533][ T9010] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1042'. [ 236.835530][ T9012] dvmrp0: entered allmulticast mode [ 236.961385][ T9015] netlink: 'syz.0.1044': attribute type 4 has an invalid length. [ 237.016804][ T9016] netlink: 'syz.0.1044': attribute type 4 has an invalid length. [ 237.512455][ T9033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.524358][ T9033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.565858][ T9037] netlink: 'syz.0.1052': attribute type 10 has an invalid length. [ 237.616144][ T9037] syz_tun: entered promiscuous mode [ 237.648090][ T9040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.648685][ T9040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.705972][ T9037] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 238.458634][ T9055] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1057'. [ 238.570539][ T9057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.581189][ T9057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.637579][ T9057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.661455][ T9057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.759606][ T9069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.760020][ T9069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.809469][ T9072] netlink: 'syz.5.1060': attribute type 10 has an invalid length. [ 238.809495][ T9072] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1060'. [ 239.750405][ T9105] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1069'. [ 239.998435][ T9112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.000812][ T9112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.028469][ T9112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.048403][ T9112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.051811][ T9112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.063895][ T9112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.083665][ T9112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.088286][ T9112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.381118][ T9120] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1073'. [ 240.503718][ T9125] netlink: 'syz.5.1076': attribute type 10 has an invalid length. [ 240.503743][ T9125] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1076'. [ 240.604266][ T9128] netlink: 'syz.4.1075': attribute type 4 has an invalid length. [ 240.633381][ T9128] netlink: 'syz.4.1075': attribute type 4 has an invalid length. [ 240.871245][ T9138] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 241.123589][ T30] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 241.274605][ T30] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 241.280137][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.280194][ T30] usb 5-1: Product: syz [ 241.280211][ T30] usb 5-1: Manufacturer: syz [ 241.280228][ T30] usb 5-1: SerialNumber: syz [ 241.568908][ T9155] rust_binder: Failure in copy_transaction_data: EFAULT [ 241.568990][ T9155] rust_binder: 9154:9155 transaction call to 9154:0 failed EFAULT, code 0 size 40-24 [ 241.569416][ T7795] rust_binder: 9154: undelivered TRANSACTION_ERROR: 29201 [ 241.617246][ T30] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 241.617324][ T30] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 241.617363][ T30] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 241.665730][ T30] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 241.827475][ T9157] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1085'. [ 242.146331][ T9166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.162742][ T9166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.434478][ T9178] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1091'. [ 242.625999][ T9181] netlink: 'syz.5.1093': attribute type 10 has an invalid length. [ 242.626021][ T9181] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1093'. [ 242.799112][ T9183] netlink: 'syz.0.1094': attribute type 4 has an invalid length. [ 242.821696][ T9183] netlink: 'syz.0.1094': attribute type 4 has an invalid length. [ 242.927976][ T9185] netlink: 'syz.5.1095': attribute type 10 has an invalid length. [ 242.928001][ T9185] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1095'. [ 243.130525][ T9189] FAULT_INJECTION: forcing a failure. [ 243.130525][ T9189] name failslab, interval 1, probability 0, space 0, times 0 [ 243.130562][ T9189] CPU: 0 UID: 0 PID: 9189 Comm: syz.3.1096 Tainted: G L syzkaller #0 PREEMPT(full) [ 243.130598][ T9189] Tainted: [L]=SOFTLOCKUP [ 243.130607][ T9189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 243.130649][ T9189] Call Trace: [ 243.130658][ T9189] [ 243.130667][ T9189] dump_stack_lvl+0xe8/0x150 [ 243.130702][ T9189] should_fail_ex+0x3eb/0x540 [ 243.130731][ T9189] should_failslab+0xa8/0x100 [ 243.130756][ T9189] __kmalloc_cache_noprof+0x9e/0x600 [ 243.130789][ T9189] ? __kmalloc_noprof+0x1a6/0x710 [ 243.130818][ T9189] ? mpi_alloc+0x52/0x140 [ 243.130842][ T9189] ? mpi_alloc+0x52/0x140 [ 243.130873][ T9189] mpi_alloc+0x52/0x140 [ 243.130900][ T9189] mpi_read_raw_data+0x139/0x970 [ 243.130933][ T9189] rsa_set_pub_key+0x30a/0x5b0 [ 243.130973][ T9189] ? __pfx_rsa_set_pub_key+0x10/0x10 [ 243.131017][ T9189] ? __kmalloc_noprof+0x387/0x710 [ 243.131052][ T9189] rsassa_pkcs1_set_pub_key+0xba/0x1a0 [ 243.131089][ T9189] public_key_verify_signature+0x57a/0x9e0 [ 243.131125][ T9189] ? __pfx_public_key_verify_signature+0x10/0x10 [ 243.131162][ T9189] ? asymmetric_key_generate_id+0x60/0x170 [ 243.131192][ T9189] ? asymmetric_key_id_same+0x67/0xe0 [ 243.131230][ T9189] x509_check_for_self_signed+0x326/0x430 [ 243.131258][ T9189] x509_cert_parse+0x622/0x7a0 [ 243.131285][ T9189] x509_key_preparse+0x64/0x6d0 [ 243.131308][ T9189] ? down_read+0x2b9/0x320 [ 243.131336][ T9189] asymmetric_key_preparse+0xb9/0x1b0 [ 243.131370][ T9189] __key_create_or_update+0x3a4/0xa70 [ 243.131416][ T9189] ? __pfx___key_create_or_update+0x10/0x10 [ 243.131461][ T9189] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 243.131495][ T9189] key_create_or_update+0x42/0x60 [ 243.131525][ T9189] __se_sys_add_key+0x349/0x420 [ 243.131560][ T9189] ? __pfx___se_sys_add_key+0x10/0x10 [ 243.131599][ T9189] ? __x64_sys_add_key+0x20/0xc0 [ 243.131631][ T9189] do_syscall_64+0x166/0x520 [ 243.131650][ T9189] ? trace_irq_disable+0x3b/0x140 [ 243.131681][ T9189] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.131703][ T9189] ? clear_bhb_loop+0x70/0xc0 [ 243.131730][ T9189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.131750][ T9189] RIP: 0033:0x7f5a89f9e159 [ 243.131770][ T9189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.131788][ T9189] RSP: 002b:00007f5a8ad8f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 243.131812][ T9189] RAX: ffffffffffffffda RBX: 00007f5a8a225fa0 RCX: 00007f5a89f9e159 [ 243.131828][ T9189] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 243.131844][ T9189] RBP: 00007f5a8a03503b R08: ffffffffffffffff R09: 0000000000000000 [ 243.131858][ T9189] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 243.131871][ T9189] R13: 00007f5a8a226038 R14: 00007f5a8a225fa0 R15: 00007ffd9662f7b8 [ 243.131905][ T9189] [ 243.641420][ T9198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.641875][ T9198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.845693][ T9202] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1102'. [ 243.930626][ T30] usb 5-1: USB disconnect, device number 13 [ 244.172137][ T9213] netlink: 'syz.4.1105': attribute type 21 has an invalid length. [ 244.172159][ T9213] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1105'. [ 244.172244][ T9213] netlink: 'syz.4.1105': attribute type 4 has an invalid length. [ 244.172259][ T9213] netlink: 'syz.4.1105': attribute type 5 has an invalid length. [ 244.172271][ T9213] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1105'. [ 244.221287][ T9213] netlink: 'syz.4.1105': attribute type 21 has an invalid length. [ 244.221311][ T9213] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1105'. [ 244.221363][ T9213] netlink: 'syz.4.1105': attribute type 4 has an invalid length. [ 244.221378][ T9213] netlink: 'syz.4.1105': attribute type 5 has an invalid length. [ 245.005641][ T7795] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 245.176282][ T9256] bond0: (slave bond_slave_0): Releasing backup interface [ 245.177234][ T7795] usb 6-1: unable to get BOS descriptor or descriptor too short [ 245.177295][ T7795] usb 6-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 245.178722][ T7795] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.181253][ T7795] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.181284][ T7795] usb 6-1: Product: syz [ 245.181301][ T7795] usb 6-1: Manufacturer: syz [ 245.181317][ T7795] usb 6-1: SerialNumber: syz [ 245.246294][ T7795] usb 6-1: config 0 descriptor?? [ 245.248818][ T7795] pn533_usb 6-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 245.459546][ T9240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.461787][ T9240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.480966][ T7795] usb 6-1: USB disconnect, device number 9 [ 246.011918][ T9276] __nla_validate_parse: 197 callbacks suppressed [ 246.011941][ T9276] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1128'. [ 246.145977][ T9282] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1129'. [ 246.296906][ T9288] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1133'. [ 246.578349][ T30] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 246.729194][ T30] usb 6-1: unable to get BOS descriptor or descriptor too short [ 246.729242][ T30] usb 6-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=b0.82 [ 246.730408][ T30] usb 6-1: config 5 has an invalid interface number: 88 but max is 0 [ 246.730431][ T30] usb 6-1: config 5 has no interface number 0 [ 246.730458][ T30] usb 6-1: config 5 interface 88 has no altsetting 0 [ 246.739266][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.739328][ T30] usb 6-1: Product: syz [ 246.739367][ T30] usb 6-1: Manufacturer: syz [ 246.739470][ T30] usb 6-1: SerialNumber: syz [ 246.912687][ T7795] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 246.978541][ T9290] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1132'. [ 246.983013][ T9289] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.011366][ T30] comedi comedi5: Wrong number of endpoints [ 247.011389][ T30] dt9812 6-1:5.88: driver 'dt9812' failed to auto-configure device. [ 247.039595][ T30] usb 6-1: USB disconnect, device number 10 [ 247.083472][ T7795] usb 5-1: New USB device found, idVendor=05cc, idProduct=3350, bcdDevice=4a.7d [ 247.084736][ T7795] usb 5-1: config 1 has an invalid interface number: 165 but max is 1 [ 247.084763][ T7795] usb 5-1: config 1 has no interface number 1 [ 247.084801][ T7795] usb 5-1: config 1 interface 165 has no altsetting 0 [ 247.088807][ T7795] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.088833][ T7795] usb 5-1: Product: syz [ 247.088851][ T7795] usb 5-1: Manufacturer: syz [ 247.088867][ T7795] usb 5-1: SerialNumber: syz [ 247.248886][ T9311] rust_binder: 9310:9311 error while translating object: EINVAL [ 247.248970][ T9311] rust_binder: Failure in copy_transaction_data: EINVAL [ 247.249043][ T9311] rust_binder: 9310:9311 transaction call to 9310:0 failed EINVAL, code 0 size 247-24 [ 247.249552][ T5726] rust_binder: 9310: undelivered TRANSACTION_ERROR: 29201 [ 247.345707][ T9315] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1144'. [ 247.726275][ T9328] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1150'. [ 248.012102][ T9334] tipc: Enabling of bearer rejected, failed to enable media [ 248.109173][ T9337] validate_nla: 296 callbacks suppressed [ 248.109188][ T9337] netlink: 'syz.3.1154': attribute type 4 has an invalid length. [ 248.128949][ T9337] netlink: 'syz.3.1154': attribute type 4 has an invalid length. [ 248.153060][ T7433] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 248.215765][ T9339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.216251][ T9339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.256352][ T7795] usb 5-1: reset high-speed USB device number 14 using dummy_hcd [ 248.322954][ T7433] usb 6-1: Using ep0 maxpacket: 16 [ 248.325558][ T7433] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 248.326907][ T7433] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 248.326936][ T7433] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 248.329417][ T7433] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.329443][ T7433] usb 6-1: Product: syz [ 248.329460][ T7433] usb 6-1: Manufacturer: syz [ 248.329477][ T7433] usb 6-1: SerialNumber: syz [ 248.370837][ T7433] usb 6-1: config 0 descriptor?? [ 248.401849][ T7433] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 248.401896][ T7433] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 248.637934][ T7795] usb 5-1: failed to restore interface 165 altsetting 7 (error=-71) [ 248.644810][ T7795] ueagle-atm 5-1:1.165: usbatm_usb_probe: bind failed: -19! [ 248.663297][ T7795] usb 5-1: [UEAGLE-ATM] interface 1 not found [ 248.663317][ T7795] ueagle-atm 5-1:1.0: usbatm_usb_probe: bind failed: -19! [ 248.667683][ T7795] usb 5-1: USB disconnect, device number 14 [ 248.994045][ T7433] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 248.995542][ T7433] em28xx 6-1:0.0: Config register raw data: 0x9a [ 249.237032][ T9351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.238268][ T9351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.263160][ T9351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.263681][ T9351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.305745][ T7433] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 249.305766][ T7433] em28xx 6-1:0.0: No AC97 audio processor [ 249.328010][ T9350] rust_binder: 9348:9350 error while translating object: EINVAL [ 249.328131][ T9350] rust_binder: Failure in copy_transaction_data: EINVAL [ 249.328162][ T9350] rust_binder: 9348:9350 transaction call to 9348:0 failed EINVAL, code 0 size 248-24 [ 249.330445][ T5726] rust_binder: 9348: undelivered TRANSACTION_ERROR: 29201 [ 249.375619][ T7433] usb 6-1: USB disconnect, device number 11 [ 249.380501][ T7433] em28xx 6-1:0.0: Disconnecting em28xx [ 249.419681][ T7433] em28xx: Freeing device [ 250.389825][ T9399] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1177'. [ 250.409491][ T9393] raw_sendmsg: syz.5.1175 forgot to set AF_INET. Fix it! [ 251.386124][ T9450] netlink: 'syz.4.1190': attribute type 4 has an invalid length. [ 251.426659][ T9450] netlink: 'syz.4.1190': attribute type 4 has an invalid length. [ 251.514349][ T9454] netlink: 'syz.3.1193': attribute type 10 has an invalid length. [ 251.514371][ T9454] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1193'. [ 251.749695][ T9465] netlink: 'syz.0.1196': attribute type 10 has an invalid length. [ 251.749718][ T9465] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1196'. [ 251.955164][ T5692] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 252.020990][ T9477] rust_binder: 9476:9477 error while translating object: EINVAL [ 252.021074][ T9477] rust_binder: Failure in copy_transaction_data: EINVAL [ 252.021103][ T9477] rust_binder: 9476:9477 transaction call to 9476:0 failed EINVAL, code 0 size 4089-24 [ 252.021445][ T7795] rust_binder: 9476: undelivered TRANSACTION_ERROR: 29201 [ 252.120105][ T5692] usb 5-1: unable to get BOS descriptor or descriptor too short [ 252.120154][ T5692] usb 5-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 252.125124][ T5692] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 252.125190][ T5692] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 252.125418][ T5692] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 252.159390][ T5692] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 252.159414][ T5692] usb 5-1: Product: syz [ 252.159428][ T5692] usb 5-1: Manufacturer: syz [ 252.219168][ T5692] uvcvideo 5-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 252.626882][ T9461] CUSE: unknown device info "" [ 252.626901][ T9461] CUSE: unknown device info "" [ 252.626910][ T9461] CUSE: unknown device info "" [ 252.626919][ T9461] CUSE: unknown device info "" [ 252.626928][ T9461] CUSE: unknown device info "" [ 252.626936][ T9461] CUSE: unknown device info "" [ 252.626945][ T9461] CUSE: unknown device info "" [ 252.626953][ T9461] CUSE: unknown device info "" [ 252.626962][ T9461] CUSE: unknown device info "" [ 252.627001][ T9461] CUSE: unknown device info "r" [ 252.627010][ T9461] CUSE: unknown device info "" [ 252.627019][ T9461] CUSE: unknown device info "#" [ 252.627028][ T9461] CUSE: unknown device info "" [ 252.627036][ T9461] CUSE: unknown device info "" [ 252.627044][ T9461] CUSE: unknown device info "" [ 252.627054][ T9461] CUSE: DEVNAME unspecified [ 253.147801][ T9511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.152526][ T9511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.306695][ T9521] netlink: 'syz.0.1210': attribute type 4 has an invalid length. [ 253.326851][ T9521] netlink: 'syz.0.1210': attribute type 4 has an invalid length. [ 253.398842][ T9523] netlink: 'syz.5.1211': attribute type 10 has an invalid length. [ 253.398896][ T9523] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1211'. [ 253.480427][ T5692] uvcvideo 5-1:1.0: Failed to query (GET_INFO) UVC control 20 on unit 1: -71 (exp. 1). [ 253.480632][ T5692] uvcvideo 5-1:1.0: No streaming interface found for terminal 32770. [ 253.531858][ T5692] usb 5-1: USB disconnect, device number 15 [ 253.565500][ T9527] netlink: 'syz.0.1212': attribute type 10 has an invalid length. [ 253.565522][ T9527] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1212'. [ 254.162643][ T7433] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 254.312654][ T7433] usb 6-1: Using ep0 maxpacket: 8 [ 254.313837][ T7433] usb 6-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 254.315209][ T7433] usb 6-1: too many endpoints for config 0 interface 0 altsetting 9: 255, using maximum allowed: 30 [ 254.315253][ T7433] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 254.315279][ T7433] usb 6-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 254.315305][ T7433] usb 6-1: config 0 interface 0 has no altsetting 0 [ 254.315338][ T7433] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.388465][ T7433] usb 6-1: config 0 descriptor?? [ 254.499550][ T9558] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1221'. [ 254.815481][ T9539] xfrm0 speed is unknown, defaulting to 1000 [ 254.815592][ T9539] xfrm0 speed is unknown, defaulting to 1000 [ 254.843170][ T9569] netlink: 'syz.3.1224': attribute type 4 has an invalid length. [ 254.862293][ T9539] xfrm0 speed is unknown, defaulting to 1000 [ 254.887237][ T9569] netlink: 'syz.3.1224': attribute type 4 has an invalid length. [ 254.906205][ T9539] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 254.906271][ T9539] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 254.906313][ T9539] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 254.909976][ T9573] netlink: 'syz.4.1225': attribute type 10 has an invalid length. [ 254.910023][ T9573] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1225'. [ 255.064447][ T9539] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 255.303811][ T9539] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 255.619768][ T9539] xfrm0 speed is unknown, defaulting to 1000 [ 255.628789][ T9539] xfrm0 speed is unknown, defaulting to 1000 [ 255.636916][ T9539] xfrm0 speed is unknown, defaulting to 1000 [ 255.657078][ T9539] xfrm0 speed is unknown, defaulting to 1000 [ 255.699059][ T7433] usbhid 6-1:0.0: can't add hid device: -71 [ 255.699170][ T7433] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 255.699439][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.699494][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.733517][ T7433] usb 6-1: USB disconnect, device number 12 [ 255.828115][ T9605] IPv4: Oversized IP packet from 172.20.20.24 [ 255.830544][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 255.831600][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 256.399261][ T9630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.411439][ T9630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.426690][ T9632] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1239'. [ 256.427901][ T9630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.428366][ T9630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.430363][ T9630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.431997][ T9630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.462074][ T9630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.497549][ T9630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.498598][ T9630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.519620][ T9630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.531732][ T9630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.532164][ T9630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.891660][ T9649] netlink: 'syz.5.1243': attribute type 10 has an invalid length. [ 256.891684][ T9649] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1243'. [ 256.973913][ T9651] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 257.148165][ T9658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.151604][ T9658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.069334][ T9686] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1254'. [ 258.549458][ T9692] xfrm0 speed is unknown, defaulting to 1000 [ 258.628052][ T9701] netlink: 'syz.3.1260': attribute type 4 has an invalid length. [ 258.655037][ T9701] netlink: 'syz.3.1260': attribute type 4 has an invalid length. [ 258.782445][ T9704] Option 'dnserror' to dns_resolver key: bad/missing value [ 258.998912][ T9709] rust_binder: Failed to allocate buffer. len:65560, is_oneway:false [ 258.998955][ T9709] rust_binder: Failure in copy_transaction_data: ENOSPC [ 258.998987][ T9709] rust_binder: 9708:9709 transaction call to 9708:0 failed ENOSPC, code 0 size 65529-24 [ 258.999306][ T7795] rust_binder: 9708: undelivered TRANSACTION_ERROR: 29201 [ 259.285044][ T31] audit: type=1326 audit(1789186625.214:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9691 comm="syz.5.1257" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe3c579e159 code=0x0 [ 259.532968][ T32] INFO: task kworker/0:4:5618 blocked for more than 143 seconds. [ 259.532998][ T32] Tainted: G L syzkaller #0 [ 259.533027][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 259.533037][ T32] task:kworker/0:4 state:D stack:25288 pid:5618 tgid:5618 ppid:2 task_flags:0x4288060 flags:0x00080000 [ 259.533107][ T32] Workqueue: usb_hub_wq hub_event [ 259.533135][ T32] Call Trace: [ 259.533145][ T32] [ 259.533159][ T32] __schedule+0x17dd/0x5940 [ 259.533195][ T32] ? __lock_acquire+0x747/0x2de0 [ 259.533257][ T32] ? __pfx___schedule+0x10/0x10 [ 259.533288][ T32] ? lock_acquire+0x115/0x350 [ 259.533330][ T32] ? schedule+0x90/0x2b0 [ 259.533366][ T32] schedule+0x164/0x2b0 [ 259.533405][ T32] schedule_timeout+0xc0/0x2c0 [ 259.533435][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 259.533466][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 259.533505][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 259.533539][ T32] ? wait_for_completion+0x26d/0x5d0 [ 259.533574][ T32] wait_for_completion+0x2c5/0x5d0 [ 259.533622][ T32] ? __pfx_wait_for_completion+0x10/0x10 [ 259.533665][ T32] ? kobject_put+0x50f/0x550 [ 259.533697][ T32] i2c_del_adapter+0x292/0x440 [ 259.533743][ T32] ? __pfx_i2c_del_adapter+0x10/0x10 [ 259.533774][ T32] ? __pfx_ft260_remove+0x10/0x10 [ 259.533806][ T32] ? kernfs_put+0x7b9/0x820 [ 259.533842][ T32] ? sysfs_remove_group+0x238/0x2e0 [ 259.533880][ T32] ? __pfx_ft260_remove+0x10/0x10 [ 259.533909][ T32] ft260_remove+0x5d/0x80 [ 259.533942][ T32] hid_device_remove+0xc5/0x1c0 [ 259.533971][ ** replaying previous printk message ** [ 259.533971][ T32] ? __pfx_hid_device_remove+0x10/0x10 [ 259.533996][ T32] device_release_driver_internal+0x48b/0x880 [ 259.534035][ T32] bus_remove_device+0x444/0x560 [ 259.534067][ T32] ? __pfx_bus_remove_device+0x10/0x10 [ 259.534112][ T32] ? kernfs_remove_by_name_ns+0x101/0x140 [ 259.536612][ T32] device_del+0x524/0x8f0 [ 259.536653][ T32] ? __pfx_device_del+0x10/0x10 [ 259.536687][ T32] hid_destroy_device+0x6b/0x1b0 [ 259.536714][ T32] usbhid_disconnect+0x9f/0xc0 [ 259.536771][ T32] usb_unbind_interface+0x295/0x9f0 [ 259.536794][ T32] ? kernfs_remove_by_name_ns+0x101/0x140 [ 259.536822][ T32] ? kernfs_remove_by_name_ns+0x101/0x140 [ 259.536845][ T32] ? __pfx_usb_unbind_interface+0x10/0x10 [ 259.536866][ T32] device_release_driver_internal+0x4f5/0x880 [ 259.536899][ T32] bus_remove_device+0x444/0x560 [ 259.536925][ T32] ? __pfx_bus_remove_device+0x10/0x10 [ 259.536949][ T32] ? kernfs_remove_by_name_ns+0x101/0x140 [ 259.536974][ T32] device_del+0x524/0x8f0 [ 259.537006][ T32] ? __pfx_device_del+0x10/0x10 [ 259.537030][ T32] ? kobject_put+0x516/0x550 [ 259.537060][ T32] usb_disable_device+0x3d4/0x8d0 [ 259.537100][ T32] usb_disconnect+0x346/0x9a0 [ 259.537136][ T32] hub_event+0x1bbb/0x4d30 [ 259.537170][ T32] ? register_lock_class+0x31/0x2e0 [ 259.537227][ T32] ? __pfx_hub_event+0x10/0x10 [ 259.537254][ T32] ? rcu_is_watching+0x16/0xb0 [ 259.537278][ T32] ? process_scheduled_works+0x97a/0x1630 [ 259.537308][ T32] process_scheduled_works+0xc3d/0x1630 [ 259.537395][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 259.537430][ T32] ? assign_work+0x3cf/0x5d0 [ 259.537463][ T32] worker_thread+0xa47/0xfb0 [ 259.537506][ T32] ? __kthread_parkme+0x71/0x1f0 [ 259.537546][ T32] kthread+0x38b/0x480 [ 259.537579][ T32] ? __pfx_worker_thread+0x10/0x10 [ 259.537606][ T32] ? __pfx_kthread+0x10/0x10 [ 259.537641][ T32] ret_from_fork+0x514/0xb70 [ 259.537677][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 259.537710][ T32] ? __switch_to+0xc89/0x1420 [ 259.537748][ T32] ? __pfx_kthread+0x10/0x10 [ 259.537783][ T32] ret_from_fork_asm+0x1a/0x30 [ 259.537831][ T32] [ 259.537913][ T32] [ 259.537913][ T32] Showing all locks held in the system: [ 259.537928][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 259.537946][ T32] #0: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 259.538010][ T32] locks held by kworker/u8:4/59: 7, last CPU#1: [ 259.538027][ T32] #0: ffff88801bebe140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 259.538088][ T32] #1: ffffc9000200fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 259.539725][ T32] #2: ffffffff9045c4e8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 259.539763][ T32] #3: ffffffff9046ad40 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x28e/0x8f0 [ 259.539800][ T32] #4: ffff8880326e4850 (&in_dev->mc_tomb_lock){+.-.}-{3:3}, at: igmpv3_clear_delrec+0x29/0x650 [ 259.539838][ T32] #5: ffff8880b8528298 (hrtimer_bases.lock){-.-.}-{2:2}, at: __hrtimer_rearm_deferred+0x99/0x4b0 [ 259.539879][ T32] #6: ffffffff9ac9d748 (&____s->seqcount#2){----}-{0:0}, at: ktime_get+0x45/0x220 [ 259.539945][ T32] locks held by getty/5373: 2, on CPU#0: [ 259.539956][ T32] #0: ffff8880364b70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 259.540003][ T32] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 259.540047][ T32] locks held by syz-executor/5615: 4, last CPU#1: [ 259.540058][ T32] #0: ffffffff8f0367f0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x470 [ 259.540097][ T32] #1: ffff88807da7a9f8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 259.540141][ T32] #2: ffff8880203bc378 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 259.540188][ T32] #3: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 259.540232][ T32] locks held by kworker/0:4/5618: 6, on CPU#0: [ 259.540244][ T32] #0: ffff8880226d5d40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 259.540286][ T32] #1: ffffc90003d9fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 259.540328][ T32] #2: ffff888029a6f1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 259.540366][ T32] #3: ffff88802a6b71d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xfc/0x9a0 [ 259.540414][ T32] #4: ffff88802a6b31a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 259.540459][ T32] #5: ffff888075ec9a58 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 259.540509][ T32] locks held by syz.4.1249/9674: 5, last CPU#0: [ 259.540521][ T32] #0: ffff88807a944460 (sb_writers#5){.+.+}-{0:0}, at: vfs_coredump+0x976/0xde0 [ 259.540566][ T32] #1: ffff88802468b6b8 (&mm->mmap_lock){++++}-{4:4}, at: dump_user_range+0x1c2/0xd30 [ 259.540608][ T32] #2: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: do_pte_missing+0x140c/0x34b0 [ 259.540663][ T32] #3: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: filemap_map_pages+0x1d1/0x2170 [ 259.540715][ T32] #4: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 259.540777][ T32] locks held by syz.3.1263/9712: 4, last CPU#1: [ 259.540791][ T32] #0: ffff888029ec9078 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 259.540844][ T32] #1: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 259.540895][ T32] #2: ffff88802d29eb58 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 259.540953][ T32] #3: ffff8880b8524408 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 259.540999][ T32] locks held by syz.4.1265/9718: 1, on CPU#0: [ 259.541013][ T32] #0: ffffffff9046ad40 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 259.541064][ T32] [ 259.541069][ T32] ============================================= [ 259.541069][ T32] [ 259.541078][ T32] NMI backtrace for cpu 0 [ 259.541093][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 259.541119][ T32] Tainted: [L]=SOFTLOCKUP [ 259.541126][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 259.541137][ T32] Call Trace: [ 259.541148][ T32] [ 259.541156][ T32] dump_stack_lvl+0xe8/0x150 [ 259.541182][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 259.541209][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 259.541239][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 259.541267][ T32] sys_info+0x135/0x170 [ 259.541289][ T32] watchdog+0x1058/0x10d0 [ 259.541323][ T32] ? watchdog+0x209/0x10d0 [ 259.541359][ T32] kthread+0x38b/0x480 [ 259.541386][ T32] ? __pfx_watchdog+0x10/0x10 [ 259.541412][ T32] ? __pfx_kthread+0x10/0x10 [ 259.541440][ T32] ret_from_fork+0x514/0xb70 [ 259.541470][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 259.541498][ T32] ? __switch_to+0xc89/0x1420 [ 259.541524][ T32] ? __pfx_kthread+0x10/0x10 [ 259.541552][ T32] ret_from_fork_asm+0x1a/0x30 [ 259.541592][ T32] [ 259.541627][ T32] Sending NMI from CPU 0 to CPUs 1: [ 259.541664][ C1] NMI backtrace for cpu 1 [ 259.541678][ C1] CPU: 1 UID: 0 PID: 9712 Comm: syz.3.1263 Tainted: G L syzkaller #0 PREEMPT(full) [ 259.541700][ C1] Tainted: [L]=SOFTLOCKUP [ 259.541706][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 259.541716][ C1] RIP: 0010:folio_remove_rmap_ptes+0x296/0xe40 [ 259.541744][ C1] Code: 31 ff e8 9d 41 a3 ff 49 83 e6 01 0f 85 af 0a 00 00 48 89 df be 08 00 00 00 e8 56 67 13 00 48 89 d8 48 c1 e8 03 48 89 44 24 30 <42> 80 3c 28 00 74 08 48 89 df e8 cb 64 13 00 4c 8b 33 4c 89 f6 48 [ 259.541760][ C1] RSP: 0018:ffffc9000473f328 EFLAGS: 00000a02 [ 259.541775][ C1] RAX: 1ffffd400032f610 RBX: ffffea000197b080 RCX: ffffffff8224c92a [ 259.541787][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffea000197b080 [ 259.541798][ C1] RBP: 0000000000000001 R08: ffffea000197b087 R09: 1ffffd400032f610 [ 259.541810][ C1] R10: dffffc0000000000 R11: fffff9400032f611 R12: ffffea000197b080 [ 259.541823][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffea000197b0b0 [ 259.541835][ C1] FS: 0000000000000000(0000) GS:ffff88812495b000(0000) knlGS:0000000000000000 [ 259.541848][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 259.541860][ C1] CR2: 00007f8f239556c8 CR3: 0000000075534000 CR4: 00000000003526f0 [ 259.541874][ C1] Call Trace: [ 259.541880][ C1] [ 259.541887][ C1] ? page_table_check_clear+0x1d0/0x590 [ 259.541904][ C1] ? page_table_check_clear+0x530/0x590 [ 259.541922][ C1] __zap_vma_range+0x2302/0x4f70 [ 259.541947][ C1] ? __kasan_slab_free+0x5c/0x80 [ 259.541961][ C1] ? kfree+0x1c5/0x650 [ 259.542003][ C1] ? __pfx___zap_vma_range+0x10/0x10 [ 259.542033][ C1] ? mas_find+0x6d6/0xcb0 [ 259.542049][ C1] unmap_vmas+0x38b/0x550 [ 259.542077][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 259.542099][ C1] ? mas_next_slot+0xc91/0xd70 [ 259.542134][ C1] exit_mmap+0x293/0x9f0 [ 259.542155][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 259.542186][ C1] ? __pfx_exit_aio+0x10/0x10 [ 259.542214][ C1] ? uprobe_clear_state+0x2a4/0x3d0 [ 259.542242][ C1] __mmput+0x118/0x420 [ 259.542260][ C1] exit_mm+0x221/0x2d0 [ 259.542284][ C1] do_exit+0x6cd/0x2360 [ 259.542310][ C1] ? __pfx_do_exit+0x10/0x10 [ 259.542333][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 259.542357][ C1] do_group_exit+0x22d/0x2f0 [ 259.542379][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 259.542403][ C1] get_signal+0x1216/0x12c0 [ 259.542431][ C1] arch_do_signal_or_restart+0xbb/0x860 [ 259.542453][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 259.542482][ C1] exit_to_user_mode_loop+0x10e/0x770 [ 259.542506][ C1] ? rcu_is_watching+0x16/0xb0 [ 259.542524][ C1] do_syscall_64+0x328/0x520 [ 259.542538][ C1] ? trace_irq_disable+0x3b/0x140 [ 259.542564][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.542583][ C1] ? clear_bhb_loop+0x70/0xc0 [ 259.542606][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.542624][ C1] RIP: 0033:0x7f5a89f9e159 [ 259.542637][ C1] Code: Unable to access opcode bytes at 0x7f5a89f9e12f. [ 259.542645][ C1] RSP: 002b:00007f5a8ad8f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 259.542661][ C1] RAX: fffffffffffffe00 RBX: 00007f5a8a225fa8 RCX: 00007f5a89f9e159 [ 259.542673][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5a8a225fa8 [ 259.542684][ C1] RBP: 00007f5a8a225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 259.542694][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.542704][ C1] R13: 00007f5a8a226038 R14: 00007ffd9662f6d0 R15: 00007ffd9662f7b8 [ 259.542725][ C1] [ 259.705545][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 260.742988][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 260.753681][ T32] Tainted: [L]=SOFTLOCKUP [ 260.758012][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 260.768088][ T32] Call Trace: [ 260.771388][ T32] [ 260.774343][ T32] vpanic+0x56d/0xa70 [ 260.778361][ T32] ? __pfx___schedule+0x10/0x10 [ 260.783248][ T32] ? __pfx_vpanic+0x10/0x10 [ 260.787796][ T32] panic+0xc5/0xd0 [ 260.791549][ T32] ? __pfx_panic+0x10/0x10 [ 260.795997][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 260.801497][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 260.806905][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 260.813096][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 260.819312][ T32] watchdog+0x10cc/0x10d0 [ 260.823684][ T32] ? watchdog+0x209/0x10d0 [ 260.828145][ T32] kthread+0x38b/0x480 [ 260.832245][ T32] ? __pfx_watchdog+0x10/0x10 [ 260.836962][ T32] ? __pfx_kthread+0x10/0x10 [ 260.841579][ T32] ret_from_fork+0x514/0xb70 [ 260.846225][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 260.851357][ T32] ? __switch_to+0xc89/0x1420 [ 260.856048][ T32] ? __pfx_kthread+0x10/0x10 [ 260.860679][ T32] ret_from_fork_asm+0x1a/0x30 [ 260.865488][ T32] [ 260.869161][ T32] Kernel Offset: disabled [ 260.873496][ T32] Rebooting in 86400 seconds..