last executing test programs: 7.694241121s ago: executing program 0 (id=5649): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010020000900010073797a3100000000ac000000030a010300000000000000000100000014000480080002400000000008000140000000050900030073797a30000000000900010073797a310000000008000b4000000003640008800c000140", @ANYRES8=r0], 0x92fc}}, 0x40040) 7.436494914s ago: executing program 0 (id=5652): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0xed4, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x7, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xea0, 0x2, [@TCA_FW_ACT={0xe9c, 0x4, [@m_pedit={0xe98, 0x1, 0x0, 0x0, {{0xa}, {0xe6c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe68, 0x2, {{{0x792f, 0xe0000000, 0x4, 0x9, 0x8}, 0x5, 0xc1, [{0x2, 0x8001, 0xfffffe01, 0x6, 0x1, 0xfffffff9}, {0x48000000, 0x9, 0x200, 0x3, 0x4, 0x6}, {0x7fffffff, 0x80000000, 0x9, 0xd6e4, 0x5, 0x6}]}, [{0x80000000, 0x6, 0x7, 0x8000, 0x4, 0x5}, {0xd4a, 0x4, 0x9, 0x4, 0x80000, 0xffffffff}, {0x6, 0x7, 0xa9, 0x7939, 0xffff, 0x3}, {0x8, 0x40, 0x7, 0x0, 0x2, 0x4}, {0x3934, 0x6, 0x3, 0x3, 0x0, 0xa57}, {0x6ff7fee5, 0x0, 0x244, 0xfff, 0x8, 0x2}, {0x2, 0x1, 0xed, 0x10, 0x0, 0x7ff}, {0x2, 0x9, 0x4, 0x95f, 0x7, 0x1}, {0x800, 0x200, 0x560f3a5b, 0x9, 0x2, 0x200}, {0x29, 0x3ff, 0x9, 0x1, 0x99, 0xffffff21}, {0x400, 0xe, 0x5, 0x8, 0x65c, 0x8}, {0x10, 0x7, 0x44b4, 0x101, 0xd, 0x8001}, {0x50, 0x8000, 0xffff251f, 0x1, 0x6a, 0x8}, {0x3, 0xf, 0x7fffffff, 0x7, 0x8, 0xfffffffb}, {0x2, 0x6, 0x7, 0x80, 0x9, 0x7}, {0x8, 0x8000, 0x96a2, 0x1, 0x8, 0x1}, {0xfffffff8, 0x1a, 0x5, 0xffffffe4, 0x10d1, 0x4}, {0x1c0, 0x10, 0x4, 0x7fff, 0x1, 0x4}, {0x200, 0x5, 0x6, 0x9, 0x3, 0x4}, {0xfff, 0x6, 0xcf1e, 0x3, 0x225, 0x4}, {0x581, 0x6, 0x7f, 0x400, 0x0, 0xb700000}, {0x0, 0x9913, 0x72e, 0x80, 0x8, 0x4}, {0xb8, 0x2, 0x0, 0x9, 0x8, 0x9}, {0x0, 0xa, 0x40, 0x3b, 0x100, 0x45ca}, {0x8, 0x6, 0x1, 0x7, 0x6, 0xebc}, {0x7, 0xfffffe01, 0x8, 0x4, 0x0, 0x1}, {0x317e, 0x8, 0xb, 0x7, 0x25, 0x4}, {0x9, 0x5, 0x5aed63b5, 0x7ff, 0x8}, {0xc3, 0x8001, 0x8000, 0xe32a, 0x0, 0x4}, {0x6e, 0x8, 0x0, 0xc, 0x6, 0xd}, {0x59, 0x6, 0x800, 0xed9, 0xb5, 0xb}, {0x2, 0x0, 0x6, 0x1, 0x81, 0x7}, {0xbe97c70, 0x7, 0x4, 0x1, 0x5, 0x7fffffff}, {0x2, 0x7, 0x6, 0x6, 0x7, 0xbe9a}, {0x3155, 0xa1f8, 0x0, 0x8a, 0x1}, {0x8, 0x9, 0x7ff, 0x80000001, 0x3, 0xb8f5}, {0x0, 0x1, 0xeb4c, 0x3, 0xd5, 0x5091825f}, {0x5, 0x40, 0x3, 0x8, 0x6, 0xf}, {0xed13, 0x0, 0x9f, 0x66c4, 0x2, 0x4}, {0x7, 0x2a1783ea, 0x9, 0xffffffff, 0x0, 0xd43}, {0x7, 0x7, 0x5, 0x10, 0x86, 0xaaec}, {0x0, 0x8001, 0xac0, 0x4000, 0x9}, {0x2, 0x7, 0x1, 0x9722297, 0x8, 0x3}, {0xeec, 0x9, 0x400, 0x2, 0x0, 0x7c0f}, {0x2b25, 0x189b, 0x6, 0x9, 0x0, 0x4}, {0x2, 0xfffffffd, 0x1, 0xd, 0x8001, 0x10001}, {0x5, 0x3, 0x3, 0x4, 0x800, 0x4}, {0x2, 0x1ff, 0x8, 0x3, 0x2, 0x8}, {0x5, 0x100, 0x6817, 0x80000000, 0x9, 0x6}, {0x7, 0x2, 0x3ff, 0x2, 0x3, 0x1}, {0x36f, 0x4, 0x6, 0x6, 0x4, 0xcd}, {0x7fffffff, 0x100, 0x6, 0x2, 0x60, 0x520}, {0x800, 0x3, 0x0, 0x0, 0xa969, 0x4}, {0x3, 0x7ff, 0x8001, 0x3, 0x9, 0x200}, {0x6, 0x8c05, 0x0, 0x3, 0x2, 0x5}, {0xa6ea, 0x400, 0x8, 0x45cd, 0xd7d, 0x100}, {0x7, 0x8, 0x2, 0xfffff001, 0x40, 0x1}, {0x0, 0x5, 0x9, 0xd, 0x13318d34, 0x2}, {0x1200000, 0x80, 0xffff, 0x7, 0x0, 0xe6a}, {0x3, 0x7, 0x7, 0x5, 0x1, 0x80}, {0x8, 0x8, 0x2, 0x5, 0x7, 0x9}, {0x3, 0x1, 0xf, 0x9, 0x722c, 0xfffffffc}, {0x9, 0x155, 0x400, 0x1, 0x4, 0xa003}, {0x7, 0x8, 0x5, 0x5, 0x5, 0x1}, {0x101, 0x9, 0x7a0e92a5, 0x2, 0x0, 0x1}, {0x80000000, 0x9, 0x8, 0xfff, 0xe, 0x4}, {0xff, 0x7f, 0x3, 0x5, 0x0, 0x3ff}, {0x81, 0x2, 0xcb, 0x0, 0xfffeffff, 0xfff}, {0xffff7fff, 0x1ff, 0x4, 0x8000, 0xfa, 0x7ff}, {0x10, 0xffffffff, 0x9, 0x9, 0x4, 0x9}, {0x10000, 0x9, 0x6, 0x6, 0x7, 0xf}, {0xcd, 0x6, 0x5, 0x1}, {0x2, 0x2, 0x8166, 0x3, 0xffffffff, 0x27c9}, {0x5, 0xfffffff9, 0x1, 0x8, 0x4, 0x2}, {0xfffffffa, 0x354, 0x3, 0x2, 0x7, 0x9d8c}, {0x5, 0x490f, 0x30, 0x4, 0x2, 0x200}, {0xb15a, 0x8, 0x3ad1, 0x46, 0x10, 0x8}, {0xa, 0x9, 0x7fff, 0x8001, 0x80, 0x3}, {0x0, 0xffffffff, 0x2997, 0x101, 0x3, 0x6}, {0x3, 0x52692480, 0x0, 0x7, 0x7ff, 0x728}, {0x5, 0x3, 0x4, 0x0, 0x4, 0x8}, {0x3, 0xfffffff9, 0x8, 0x373a, 0x4}, {0x1, 0x5, 0x4, 0x7, 0x6, 0xf0000000}, {0x200, 0x8000, 0x7f6, 0x8, 0x0, 0x400}, {0xa46, 0x2, 0xc, 0xbc6d, 0x9}, {0x9, 0x5, 0x4, 0x5e9b, 0x2, 0xd7}, {0x6, 0x1, 0x6, 0x0, 0x4, 0x819a}, {0x9, 0x5, 0x0, 0x5, 0xea51, 0x6}, {0x9, 0x5, 0x800, 0x0, 0x7, 0x9}, {0x4, 0x2, 0xb5f, 0x6, 0xfffffffa}, {0x6, 0x7, 0x0, 0xff, 0x9}, {0xa, 0x2, 0x0, 0x40, 0x1, 0x9}, {0x1, 0x1000, 0x9, 0x7, 0x10000, 0x8}, {0x9, 0xd6f5, 0x8, 0x6, 0x81, 0x10000}, {0x80, 0x3, 0x5, 0x7, 0x9, 0xd88}, {0x2, 0x1, 0x1, 0x8c, 0xfff, 0x7fff}, {0x0, 0x3, 0x8000, 0x0, 0xff, 0x80000000}, {0x1, 0x6, 0x0, 0x20a2, 0xb0c1, 0xffffffff}, {0x6b, 0xd, 0x4, 0x5, 0xfff, 0x2}, {0x1ff, 0x0, 0x5, 0x6, 0xc, 0x10000}, {0x6, 0x3, 0x1, 0x2, 0x7, 0xe51}, {0x4038, 0x4, 0x6, 0xfffffffe, 0x1, 0x101}, {0x5, 0x5, 0x4, 0x7f, 0x23, 0x8000}, {0x4, 0x7fffffff, 0x249, 0x100, 0x2, 0x1}, {0x0, 0x5, 0x1, 0x50eda303, 0x7ff, 0x5}, {0x97e, 0x7, 0x5, 0x6f7, 0x8, 0x1000}, {0x1, 0x401, 0x9, 0x4, 0x2, 0xfffffd00}, {0xffffff01, 0x52d, 0x4, 0xff, 0x7f, 0xa45f}, {0x1, 0xc, 0x3, 0x66, 0x8}, {0x4, 0x3, 0xfff, 0x13e96, 0x9, 0x4}, {0x8, 0x7, 0x14000, 0x1, 0x9, 0x80}, {0x7, 0xa, 0x2, 0x0, 0x4, 0xa}, {0x1, 0x3, 0x7f, 0x4, 0x0, 0x32ee71b6}, {0x30, 0x3, 0xe7, 0x6, 0x7dae9749, 0x8001}, {0x4, 0x4, 0x0, 0x9, 0x3, 0xfffffff8}, {0x9, 0x78b, 0x9, 0x5, 0x6, 0x100}, {0x9, 0x80000001, 0x2, 0x5, 0xff, 0x36f}, {0x0, 0x993b, 0x3, 0x5, 0x8, 0x1}, {0x1, 0x101, 0x3, 0x4, 0x0, 0x4}, {0x7, 0xffffffff, 0x7, 0x3, 0x3ff, 0x5}, {0x8, 0xb3f0, 0x8, 0x2, 0x2, 0x909}, {0x0, 0x6, 0x6, 0x6, 0x3}, {0x0, 0x5, 0x0, 0x80000001, 0xfff, 0xd866}, {0x6, 0x8, 0x3, 0x7, 0x7fff, 0x1}, {0x9, 0x9, 0x4, 0x1, 0x7, 0x7f}, {0x5, 0xb, 0x8, 0x7, 0x8, 0x8000}, {0x6, 0x1, 0x7fff, 0x10000, 0x6b, 0xed0}, {0x1ff, 0x4, 0x8, 0x5, 0x5, 0xfffffeff}], [{0x5}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x4}, {0x3}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x1, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x3}, {0x4}, {0x4}, {0x4}, {0x1}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x3}, {}, {0x1}, {0x4}, {0x1}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0xc20011e260ad0a46, 0x1}, {0x4}, {0x5, 0x1}, {0x4}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x1, 0x3}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x3}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x3}, {0x1}, {}, {0x4}, {0xe7e9d14b7aa06b06}, {0x4, 0x1}, {}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x7, 0x1}, {0x2}, {}, {0x5}, {0x7}, {0x0, 0x1}, {0x2, 0x1}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x81, 0x7d}}]}, 0xed4}, 0x1, 0x0, 0x0, 0x81}, 0x800) 6.808423337s ago: executing program 0 (id=5657): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x1ff003, 0x81, 0x7f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value=0x18000000}, 0x50) 6.597957995s ago: executing program 0 (id=5659): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}, 0xff91}], 0x1, 0x2400c042) 6.367851171s ago: executing program 0 (id=5661): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x68}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00/\x00'], 0x20}, 0x1, 0x0, 0x0, 0x42014}, 0x4080040) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00008d4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) r2 = socket(0x3, 0xa, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x40000000) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000001c0)={0xfff, 0xffffffffffffffff, 0x2}) syz_io_uring_setup(0xf00, 0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0x2020) r4 = socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x64, &(0x7f0000000500)={&(0x7f0000000080)=@ipv6_newnexthop={0x0, 0x68, 0x1, 0x70bd26, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x15}, [@NHA_BLACKHOLE, @NHA_BLACKHOLE]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000040) 5.990067079s ago: executing program 0 (id=5664): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 64) r2 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000002f00090027bd9f0000000000040000000c00180001ac0f0004ac0f"], 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x4) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) (async, rerun: 32) r7 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) read(r7, 0x0, 0x0) (async) r8 = socket(0x400000000010, 0x3, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000840)={0x3c, 0x0, 0x8, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x7c}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=@getchain={0x24, 0x66, 0x903, 0x70bd2e, 0x25dfdc03, {0x0, 0x0, 0x0, r6, {0xffe0, 0xb}, {0x8, 0x1ffea}, {0x6, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x8000) sendmsg$kcm(r2, &(0x7f0000002480)={&(0x7f0000000280)=@ieee802154={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000400)="f4fae3e0864bcc464982d25c9cf04f42a45fa7d9a9275bddeccfc37a298f040499c5e404c12f90aa2e3f73c8c1537b7238101f84f1eee687359645a1c28760fe8cec40c2a4a8783c3ff52ae89e5e08b299134038af842aa950af734cbc9ce11a4b5a3fbf5bdc7386a2a77d5053c1217c8e085db1b143bf5b8b5d34eb67b128d92721ad036e1a243706a2778c7483043cf3", 0x91}], 0x1, &(0x7f0000001300)=[{0x98, 0x10e, 0x3ff, "d28f1aff3763fad02832affa5699cd24ab9cab7e393c13e761821d8f872f6b256aca77933a12da71c66d665e2d9377054ab6a87e2798a69385f462e1079604c73a8155f53a7b891af596a7da027468f2f4e01f2dc35bd5927fbfdcb58e109ac2109d4810d333eeea8e2009d93057e21605fd947d9fa02da3bbb1e6f3aacb9a8ac3791654c0412398b53f2dfd"}, {0x1c, 0x104, 0xd7, "3d1e4435739fe47c440d81d28de86dec"}, {0x9c, 0x0, 0x3, "e92df9d0aa593df9b0d73a0e1b3bb4341458be02fb9aa046b77800c4b5a630cc771bc2c0a40d036e0aaad4865f9c8eca58609ba2bb94da1f3e8886c34c2ccdba8167b998fcd9cf90318f263934aada63689fe6a60227ab4765a84ee50160a67773f58864e40173129ac091c081610b32fcaf36eadee8e5de970f0b276145926492798e6c2873c9cf054c2144b50481"}, {0x100c, 0x1, 0xc, "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"}], 0x115c}, 0x4000) 5.651309764s ago: executing program 4 (id=5665): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f320bb171a220303030303030303030303030303030303030302c757365725f69643d00000000", @ANYRES16=r0, @ANYRES64=r1], 0x1, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f00000020c0)="c6cfdab7e6f83fe5e44dd3a8d886a720a29cfb7e50ef99fcf38be6c3b9a9f8c9fdb7b1332c99b85247977ad2d66a577e6f0853366c7561476cb35cf07e6fc1c21d33853a21771a8835a50d941d35a4ccb511cb67ed64259c99811f0e6f176fba1e0fa45fefe030a588f0cf64895fb12a794fd0bd176a38440328d3c6c24c85f50e95c5190eb03fb04f1eb34cae287ed75c8ca8fab2c04dc1fafa14ef93e2a721a12238700dfdabd057e94e697534e1af81921756270313d22a185c146852a5e94300bc8de9904e8c6948d5d2aed05337b9572ee74b77209c6b4710e87fa6661b19283079a46f70a538d96f484b63171bdc3622fcbab6d9bafeaacd755923209c07b8c2f39c04ea713020bcd9e6f1120ea3fbc8dd0b55986c05aa0c0b13ad52f250e9505ba53a887ed7c857e0f56282d6dd5932930efe384bbb198c50aae4b9a65e6a6ccc2904a9121a28df865011c39a54fb0f890cc1f7ef5f5172754f1c2aa8e8acf8c754f22efa88ffea91f2a14133e0a7a8a06bc80d042ce1affa2ebc74b49b48169404b33c62915e54c554d10bc432ec988f7081a8690335d58d0a819d33296db1377af876d84fd557f9a2018ee91f7d39819fc72b0a9bbdd05d6efe6cc459cd42e16f955dcb1a6a2b8b2a71b3a7e1bfa82816abf8c7d3688d53decbc480eaa3821cef557290284d9c504a63768852e15b39841ef3648f14c7edab006a30c7bd518f300df6ff307c0740150dddfdab1e408edb96b2e6ed612b0bc2fca570fa1813d86160a766fe6c11cdbc7a67014fa7645b4b1d3aad378bcce27aa4725ecf7675b2682cc5a15673136e7181ed5ef122017dc72df65af147dcb9ac702f8a6a2eb3f6824ba7db3c32fa4bfbf63dcd45e42a49b6edee22856fc2a43aeb6a3eea91dbd53a231b559ca7b38564853be3bdee7f820966faa916ed4fd335159328f8b727ba068b0ade0e11c9f2c2af4d5244f5d49f9c9f94105a6fe4c71112bcacf9c3dd2861d06cb3fa6b2159bc2028e513298b594ca7da60f4ed30edd7b066c23ca7d9b7d9555b47e687b43b7b5ca3210d939e34dd3d176d8b3d3d2f32f28518aa8b5169362fee4a4ede7d3d218db0ecc3de14789344df20188d907093bbf621fe67ab2a1f29221b2ec334dadc15345fc829005f4f81fc13ad0f5590742295812a7f2108cbbbc37387a7d4174592bf4f94f272306942e6c44b23e96d92911ef416b4159e81b19f267aad20c2aabf7fd285330cbf4c1bb8ac86493e0ef84de88eb7953fcf833e6cc5ebdd50b706bcc148971d24e9d3736ed66e28f75e6a1e2c9a4e2abba887b27815d2f5739fe5f8afe7240841337bfe7a69308186180fed5736fe3cbc2892cb991d0f4400d66952459c54a16448f06fd49995aa65501631d5c42e2abd8f0d890a6bbe49b384bfe27599afd536493981be5f7dbb15bfbc198fcd8ebfca182c53156742e237df31c1dca495e40cf030623a8a081e3bec3b8e5109ba05c0830ef00ff98a4419bae14762d8e0a790c1d517f1f683bb1712a6a0951f024a46efb5c2122460495fa0f4ebaae86286b8a626be2052874f947f18b0c2860ce681a33d5f4217415363fe7a6f8fca125742f03433988d88a5b8e2bf4f3079eb990b6e1ff381b7199717fb885f4f37351bf18bedbeeca351b7bfca5b791b91be0dcf8d169914c449829669e0577d1ebc4fa783d57e0c695cafae201014831a16d8fec47f22d9b79c2acc820f4dba9d1a2986731681ed1f8dd1e83bc2d491302d2f769e6b0bc470404930cad6511492b3adadc6f5073220590d1ce89a520b6d51d6903dd54360cd7047aed76e0a6cd3c3625e67b7c1636fd627aa48f1ee6dd567730c6ec19d1634f62a77f70c64736532455f0d2ae85003e7bb32f06b480a9f7fba5e6917305fd77e38f6936e49c1a3b2a07e242ccc2f9d629d7992937a035574b3efefd515096e30058cb60cc89d8565205f15e71d805ba5d1c4f7b971918e32bd81611a574fc651bc8094f7f3aef8a3ebf95aef1c062ec66e288b1d1ee17ab75723bc46b031744a25cf055c1bc8b083313e38d0fd5d60e832ef28fbff4c93d2d2ed283575a486167c7158e08fe7094d23984bdf38cf6000db39c5d0f7db72325af909b18247d8fddd89eff8831c294d52194a11dae2339938a79ae903eb63bc6e5535796e1c0416cdad01e1493a3075930a0b3b50ad904ff760bec5c6406b10808bf13251df73b4d6fd149a378ac277ccbbfddd9536abdf5c7a8d29e128a290f0d56c9635540f4c9a3ff1d3e0e2b974b50497ebd690dc9393f8b3acfd1650627db8ab784233727f997dab536f1e993980a41f510fa0128d6bf2c8445ed1578b25a36e05f7170b9fbe8ca63e1b4a7235c27f56790c4dd38168ce26358d12b143e9dbae1d01406778250f1c77c80643016ffd4a7a6703b9c3dfa4e7b51fa1d59605d57c9712159eb34c306a988ac95eeb15c3225ccd022d2ccf5f31a81009d2a25891b83e60efe8f718d6c124202f108d23e5e6c89e269890bda8e5681315db361cdf30e4269f2cb530a188f26621a8b263f22bb385d779b3c4eebd16656451087457892e15074abb1c796f0b7f635b9496f3a17220716c449c11c0e82b67b8f1ee6a2709a20676f40f2751df3d74db503db6cb73c955ae1d6983da44de4d349004f3d9db4ba40124416a67bd18d1d9b3c1e4706ddbb2099a2ae16e99c144860d46ef66bc6844963c0563fe2cb8c4049dea32ce5656fbfec6d1aff7ef48bac92c932c9787d9e4cb0c78fc3d70f730c452c20d077b4d9ea304f1b8a2967b1e7af7f05fd35f84d633bf5095b1af53a506f6f61abc99186eba707843e9db2a18fc1c6c77dd79ab9353eaad6457245709acbe9cb381d4458eb5571fa4f4df069ae668b1df2c97f91271be5fc2040031c3980c7555af2d4186875ea4599c873ffaf47aa08c27a0580ceef6251dce4cfd6eb175a1bf36c1fd750826f4e14966e6f196b68da0a524baf86f49ce8c09430554b50a0b387c02ebd59fae9caa1054cba1304aa6732f3990ce6b7bca6b65237f0fc3c79a102e2989dcf3f884002f2efe83e25a3fb217c24c4f66e0973e7ca62483bb52c943ccfbf31324f2b7938de0555a54f47256c903ab65489906c382d7d1022f7f302b186d18b5775e042ba83b874793420a6d854aaec01e3c819d0b11b51558fb9c10b1e2ff96639fb119d90f80aa302c9a6420b4b1230d79fd1e8105259c4ebf9cc3f1eac67f15bcb9d49ae537084c96994ad08214ac07db663c1bbce6499b5665fb5a949ab3d65062467824a2065a9de2f1edc243e03ad38f0ef227519de50a3dc2e8f4a38538be5557c5de56d0110a0759fe96b0e66d20fcb6066995f77fba9c7468434a53892cf2b3f41d58e08bd2ea3b1da2a1178acf50249d77757353943cd126b511098230698782ca88d018381f233f4331d3980f72f30caf915a18794de1253734b89303f25826a80ddd75a9bdf14c6f01690833190872ca5431ab92ab3dca92595983b11de0076125059234720906641119dab9c96be9c10d60fb54267bda61fcb85a491df037cd563b229eea02cd192796d36803b04691d385471a5f68bb76afafe9df28f50dcabfefc8e2eb334bcace928b8eb8f6449116fb5a0fa4a0c51e21b8b1f99308d396db60418cb5385bdf6bce7227e514f6cbc9a9fc50b79e8b0530fd51b21679ea1c404dba52811b3c9487f670e622ac7b1ce8028eadbd882d4325663d8dc4f0960c047c5f3099c90c6256bc11e8eef6b325e0f1ed00279a695f2828762f28ecacdc726aedf42064727ec100ffa74d38d47f383946b9f856e53cb939f98df1bb5af2a12810a619f205e030a302628ffb9b2cfcc2e881e239f33844a118a4de2a5c3d6b857c5105db775a61c5d54d1d82048670e8cd2c44a032904005125eb9f999e845efba3a063e3e26b06298f28799975b51118eece2b7fec02d4b888bfb90919bec287aba71296c66dcf749efa3abcddfccee6ef80d03a1638045f18fb96131cbd9a93e657c29eb74de40f433969e1988ac335bdd9c671b5b75ce6e2440be247775f9d597b4d8523c283e774ed0987e10b88e0c5616720502149db329babc91b225359927f88e0b42f02d41a4c9e0ad7c55a0d2c52cf45da6152c0c742f661b562c3a8ecff1145cac3f63fc053e1a14fe7a57742ab709581604fabe54ff13172b5049434d12f6ed9623265af643f725efea21e2ac1b82365033b9cff4158318f40c8894d2bcffdc954fcf7068c97ca2d2b1bf19b9232b918864e3f63fd59f4c8c578821ec5083e46363d9158451c5a92b425e68081b2c7572df44658a4aae41a439c6bb4bdd2f26ff2a357fa2946e5be5cd97ba25f73bbcc6c05fa966d0aa0cf2e45f22e0021468b37d5afebbfba3233e2cd4fd64e1578be72c38891224cd6c70c4cfd146df6a8142f1493772d48650f8fcbd1435ff704e02ec121e9f43de623eff8070f88a623cd395a02b6b1ffe4ea7ae7f443dc8bdac2cfaa126d4ac9d7788dc972c88fd87d3c8758853f1882532e4ff298b466e7d198daa9015127f2937544b34aaf545f39ee00d74e0e1017a30ff2edff701d53f3a13fc61b31fe7d9032a6c4a517c7527e48c0c44a2beebc9a9f9e6f989bc6c255e05bec5ff99547658143d9eb43a1d96aa5288638b4477aa1f84c59d41194335c09d9d5d660640acb84b53520482fb200ca616e1a6f486e6da3e6721479e85d0676ba142d95ecdf1acc76a49e9bf016f951d8b95adc7e8d4317ddbb28b678135a4a9b98fb8b8b5948b682ee70e04a31f7e3c49c52a11acbb29bd8152bbb4fedd2aae8e7ad5330365213d207677855e6cd72bf93502c14b11bd2f2d6e797efc2cc5bc198730e5cc51c92751ece5c167b3328a6deed4bd73c62623bb3874c9ef18e24997e3ac93b0ad9ca7ddd4c0401ec1b942cb21dfe6abfd3aefe2588ac1684bf6b37dc09d9b9d932d5534c707ef8fe0812a403e057d00955559ca3e0f7e70d3cdfab918b8d125061fd53374c97bd0c9d19e68bacb3db46974d36cb1c96b4475acaf4d46b88a578ed570ce09eb540f30cce4c3f853a9fd669ca36c36ff1f0432713f60e6d6bc789fdae7c7fcf4049e6166b63a12aaa3da6fc35d8783020ceb92f7f90082d4826735618905fc9fdbeb65990882ce130a7e5ebfcdc796ef293019925e80af5074bfed5f62833d9d98e324dd54e30e1d69a15e4beed5da9c6ec01a32978aa29cd26c5703a28e504e7c9264e0421718422b88ef90f6fb4e51c619f29b5fc2f600f88be036eaf28d7f5433715bd493ce55811901a59964f20ac0b06dc3a555eac123c40d3b397053501523a51e8b53a92bbd99ec3bdcd57904cfac3c0d7bcc6613b11a771d32f0f6c60c05449b42820c0a41f757ea1efebebb37f8ea567b2f7dcc4a67ebbdc00716a70f5fe255b9232e27ba05888e034fc50ac0934a43c84577183b83019008edbeb27546e8be7d8402a4c1852198c0e050b96129fd66247c39abff19338300fc3cbe20a395e5805d8bc64c2d87ba27264716e211ab023765e8d454b637aa1320cb18eb4a3dbfa94027a4d75a9a2cc784cbdc22694a8f7e97bd6cea5a4e26b538be9a9dde5637be2d386a85a79ed4df541ab7d0b1370d99d2cfd1f7bf1458bedd0a53f5e6972ee424ed08acb4b49db83cae427d315d1fea4e680258e73b3fc50fdb77692c8798bcda57ac0c34823d69a8ead14c41e9613813838ef80f63138cc9ba3a6b83dfc77b6aa1248678409bd96b64c0b625e88e33262fa0bbee94fec8f3bffedaf8b12d229d0f637848a1dba01892d80f5a5596d37ac1c9c54d32dec3ca56b49aa1157583074af418d0d95a5a46fc3c234814e377963dd4c9c8a5f7cc35aacc892afb9bcede477760688e06f0b2c5a702954f4532c715151eda02f78830129b2612de8fc62fb992d1ba52da164920eb1d1dbc7d1f8f16e31c763581f4c478cf7a84cf01ca904160475a1eabae393bcb852fd550374002bad1ba0827dadcf3f6a2354a3f8f67e6da4f567fe21f55cc34840e79f6af947561c79a141721f6da4625a20fb203f96bd1a3b7322a14a0ab4a38835e1f235f772a18643824cbb9f76664b1212c785055ae17e89f590fdb1b81535e1e3e8a726a9aaf67ae2a8e67eab8f32781bc21027cb1babd932d63bafe7faf48bc57820c5e32288583db4cf369a7fbb479e1e97ca67f63b1880fb33ccf2661d7af9041ea1afc0e90ee0b4b510d094268e4576584a17fcb21b3c3f68bf1e1c4748177cb4cab92df4c254e0d0759d507e5eb096861efcf1aa66805474e3bd32f7055a7d53d47f416d24a5ac7d5fc953206db3a012234d8693e0ff662457ddaf977eaf37d043c407a7ade1fa8eaf85b6e1b1456aec3064ee858742f4e22f2d6084e3881a4783b3a9086009202eb6eb77fc1ce2236d6384cbc62c7db9cecd2fdb06f328d49c066562cf1dee863d33b48288fbb1d4d5bcafcd1b6391879e670c7189bbebafe48214d6e2b405e36192e1067eb8d0363777a174e630467673ca968ea51476b0b8a04d598f6fc593d3f3267ab37e17831dab86a67aac3ec8336c5b6e9e416b1f46d0a9e8ec6c515d86e773baa409e2afae30ea1744f2bc777af11c42f2bf6177e95245c6d601f7cb7b589ccda76a2a314dab023da8128c667a0df682f5c7bbf842a2bb51d4d842cd09d02d67444e5d8ae1f3260c4ef2da5a1c4121fdd47e953d03ff6fea10e35db2c0c110704f513b9d1c57c9da80881ced16d92faf1be60471dc4d82529ea50fd6060be18e8e6deffb15e0a0df4e36117dc22d78bd43b3fedb24cba54c2f2e3bba015bc4c817f70fc1e8b21adb04a9d8c229e9ec178fee0f35d4f169bb7dadd14f46ddc13fc62da4e21e42270a4ed0d60b4034db31ee1e13c97d8d941b2627b255d4283cf0af9044a65765ba88dcb2010fae98a6aeb0a5605d8a904d1cfa0cf8fa67a9d29670a108f014a1b21862e20d4f0f3f0cb99c97f289c657dbd08237aba2f616804ebb0e71819fa46df1a018d8336b534391596cd24b0720dd8a95e5c74b9d047da1da93d653b2aa98e67a65c3868a0c464ad24d427c3c81b41f0b2fb78f6aecd5487c29f4fd871bec21f54d22b661eeed67c866cdf057d585beace568ed52a4399dfdcc8c9a80c94f3cb92f0974b9b33ed893e8db33cf95220e03f3d28edd8b80991b0754010e7252392d1e846011defb6c46c73ee015bcb9b288f6945771af90ddd8c548eb6649efff32b0a2b36e743e46135e47fc65d1eb3f7a580104c22bbcc75ec041813cf2496a4793d17112f40333e3c874e0bcbcd889a6bb484e43632b2f9a628a461a2a5d58808b848751642b5c426c50fd82398894dc78c56ed1f0358b626cde2a0167dcb210c8ae2f6d9c95356331cf2a21ed0dfd5165bcac2681ce070f60ffffe69dd75836c4be0aa7f8630bf345a32d246c838552cbb35a6dfdb6ea54c4ecf0ad16990901b7a72280872fc807eda1de4fdce2c223fd089e0f0eac84c1e2980b9b5a032dd1294bd2eb49372f55b9b4cf4d3c1b14050bec1344d71a8316e173bd36f5917100de4dfedfff896517a04468006e5c632c8ad15521324f3abd72545b47df874a4a95d3bb30915ebcc3ed371528f89c7e943286a8cf4ff2cca3f3496ded16b139658bd5d3323ae9007b4dab665cd24e7888735de2cce7bc1b3af39a6d92d787dd237f8d72283f7aab1d99985f3783e5cb0661cadb552293f189f75e7f3fa933c775a27415a3ad22239986364ba7a582f2d9c31e7247aa8d44d5a7e8169fec65daaf62756b34dd307ebc7fbe8a8023aac1553fbf15b48a8ee3bd0c35c7ced684f667500ab2997aa75382475eb35888e72b30ad5aad3910c5ead6797f4182adce92dafc2073f1529ff5f1a42daf3c78e499039864e8e768fb11b33c0d7779e6128579d882761f9b21fcc0696da03eeb049c90b86da8dba548058f0caddb83ec9051a04f3133341e9a17a17b72ac20cd9e242fb383365f6a2f5c795087c7ee682555adadb7305bfe2886a57f3718f30f24b52d481aa35eb2c40417df5ea9d8af1b7b871ce37fb1c84402d269e3a01a5c9a00d3c7d6ff21c90d437066850ea92773288ba925294f9368b74fd1f3c4512ae8be2f86b73641507480f3db07634df10fca86bb4431664ade710d5a8894c368660c95f7a0b8ce5ffcdae136b5c8b4ed8c3b4cd9b71079dfd6d1501df9b7f1477b516f3cceecb2def619c05061502b253af7e3deccc839de56292c95a3912e809b100897a85705cf59af66e194143d13c12b6dc1a31cd15a74fe57666931e3fd6b75512d22f063c68576b1bd6a1ab6d7f4065447daee300b7d4fe330daeda866beb44eb8ed4041d0a36bfa49871e0623eb6f5d7b967e8f969985063e2fc4f4097c2a5189b10c1776713f78193c6e0e847025936b36eaa2e817ebb45c375f18350247f6586214a200f2f17536b52b8fa196d4a6a77317807075d130a77badf745a6076b1241e47942501cba893fd0db02545e49f559e9712a60ffce9f3154459c69984de49e11192266196497c81b7c5b45997c1369c8e8490b1a748985fd4c9ab8929d07a51c331dc160c8ae8d2961351ef103e3427299e4f28faff6ac1905be2814cb02511472c7232bd104ac438d846b4a727df2ed24364e061f157c2447e7d5265b1cd75797603e220a9d2e280868f3c2c56befbc6b1b1a07be1070b293adf324b3aee5140ef5f643c952726d9b770989b07f2cdea2e1d6951027e8b386faccff07b2547dd78aa85cc113b599ab168ef602e40fc097396341a8e5b97b59032110ddf114129feaed96e85237bb4bb886b287279b96234c18947ce7d2d5e92dd5c68829edd271bfccff21b87f6a061c9b43b51252add291c8f59be1a222d00fb7719664a8b89c452e78cf1d491a036107f0a521545fd96d2548735847e278065c196153028b91f59c7b70f9883f14cfb3343bb230f4af9bd51132cc62ee5459e34e77bb2983d30e65e65ab769fa0a0578bed01f33c76f4138208659a97fbbf380f1321336c14d21012f3cc4ee2101d42321f0123d51377e319e4ff4551f7f83ca62ff9448a28b6134da582f609be7dea5d70370772ef2552f12e97cf390ee2697022168d622ae0c813d86a43c25c758162ab0aadf25c84c790fb32a459997068be01325e473871cb024ff030070434d197558b8df442e1d2ad0c7b33fe021fa6cd57b7477dd76c6a802ddf405e909d48d23321e986d791b44d32d417d63638246fcdd661e6a1453d1411ec85fa0b750354aecdd4f4b90a420d2d4f67c514f15a8fe590735f660dc5eaa7f2873c7841edaf2c0d46a92fc07c6cd22fc978f74bac72e468d96ba370fb88f9a629d4de0a8a83d43c1949aae33fe24859c1bbf8663adc6936e305cf9c56aacc84e7515caf18d0d049bec2f0a484b75a8c2c23abbca66b039a52e606f08df0a3cdd2dc6449e84ce463206d2878de0e4d0f438764a0fe360e95494e9e61581001785b081254971197024460a68ec029052f2d8841dac7e714798027696067e739cd1525df28ac9514c02e25f8ea1146e356fc5941e4661cd244dccee4a1450e4334a20cb572b842d44a8431abf4d5bb82ac6b78ce3c6d394e5969c6fe8216805f6e2db2889f27849e0dd26a5a387958a36c833a8b3d861033c00ffef267e4b09350ca1b819d5c83025e4ad69328970db92520e6ce569d5632caeb6dc42c8f6f8759256ad9c1ffe8c30a92b795bf00544714c957d5d982a4e91ec7a30dfdcacbd41ceb61f208e5442f7f7ce19ba2f0dddf50020ed1c271afe5007277e2496c3bc7f3101d6fa7f0ea2627a99de0c441a11c6afbb721037dcfc897fc5d9e0ed644b9c3aee328bc2beb3801d2bf43b1e360759c1056c74a63aa33cb6e5933b7a0b4f654113ea5830de7e8374e939e4c794be77f1f0c1e1bcedc8f584a56db0c38b6c8da60bad62b41d754d9b6cbf3379374a6126db0ef1ee2da5862acaf117408ad26c66ec8ee4f9f1844fb4cc64bc61212b303c7c622f05d29b7fd540bdc253bc948d373886e5cd4dc9bc1b551dfc514f12cc64ecc3b276ab43a4adc2142fea9c5ecf983b0841729d1771b51c2ff787ac2439f305ca3fe31cdbe24f034fcd3d41141cc0ed5cdd82e3171be1381ad4f0bf81b3be200524c98cad5a3dee3ee618c97d0678c7b4fbf729dbc2baaa2385fb63e6b906b08681c19d55200924c0edb4c3b48463fd9c2ac86510ce1e0a641def11e9e7b7fa74a629895221b06a15c995cafe55dee6c06e01b34f4f18e5ffeb76ffb412277bdfa4cee10823a1e55832c3d1d19ba5b84560668b33fafc672cfba1a85c60c61c45bd562506d9d28542c4b4795ed011a8005862f7add9dc2533dd29d0ddd534eb0a3b537b391c423b527b3ae4ce0c829a6efcf8671e9e5224df6ed6c1f20452cb46cd578a620788f9af325d45825ced3043ef3693ffebf7b881518ba2c71587251edf150772ae1e24f4415f9d9307151b8fbcb83d0da908f4b6c762b777dc406991353e962f181bc06e892ff9e49e557639dafd09b291f79720b866e46bcf14d5bd1ed15a468a8996ecec8ce3d9890fb45c96804dddfe5b7280c0e30934f129e14b344506f70d484eea40baac63b89dc71b030a6c8149ffca2434c773bffe76bbf2e778f0034666970a96bf336ee5240e765ea3715382bd8fe19c5ce5a8814717d87d4d6304a3b0d6581a6fed44975ef8a8186c19a513f5c6c0610acbd31fd58e2cb683162464cf7f50ade879461ee91f433b09d1febe058c101a0ff96cbffd547c2beab15ca343cfe592ea435f980ff03e0aeadcc80d64383d287997a6a937fc22221cec2a1aa6e8dfc1dc6e0f2e02060a18c09957376a72e165728acddf73873a958f43bcd2e9c6c71a83f744bf14c75f5e8308523a7d39bcbfd832c6597b2928b07630ae50540bb71b44b5b4040a1d172fabe8dbfb96a99e7498b12dcc8ed9e43fb36c202d019b4fbe11f715f5de76bede175c22d8355323eb004c5021d892fbe48fa7b6bf382eb03d0e447a38c63bb7fa1154c2cdf08a1cf5fa95ec75a5aa9037ebf8916cb78e6da650016a0c7ed34290e25e2122be24e4373c49c4fc81c39ec1a1ce4b658e1b80562bf911a1f6a5fc2e69d2554d4abf5ad79d9c9b7d9ac8c4122c11f590a35dcee3fbe185027832b4e2a71ebc591a60bb874b36b415b455bd942fe1a69a92b70ce1a1c867c85138449529cab5f63feab609a2ba3344191c416d8409b59962bcee1c4a40874069e28432fcade20f07c9259dec75fb978a6b84b6e8f50fdb341c7c19f55a8fa389cf085f44661c9618d56d32be0bdb3b2928fc2c372e86ea109afaee022bb832e80e869c7cb1053921b862b27599d3665f7fabfd6436743ea893ec43e4e4daa598127df8ee3249be4668d717117a038f0e734a894457df4c64dd76a9d9d42efc29f2311085c9e6fcef385f40af94f283edca078797e96b79719875aed3900252c3acc6a92e23083b3fa24057d9ebf7886df99d652e7d18cbd445560a0afc81bf7c011777837f94b32094fa1bc99472cc2a40bff245abb27d3f628b1b649fd", 0x2000, &(0x7f0000000700)={&(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x2000400, 0x1000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000040c0)="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", 0x2000, &(0x7f0000000d00)={&(0x7f0000000340)={0x50, 0xfffffffffffffff5, 0x2000000000000000, {0x7, 0x2d, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="54000000020603000000000000000000000000000d000300686173683a6e65740000000005000400000000000900020073797a31000000000c000780080008400000007005000500020300000500010006"], 0x54}}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) openat$dir(0xffffff9c, &(0x7f0000000040)='./file0/../file0\x00', 0x10d241, 0x52) r5 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x10001, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1d) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x106}, 0x1c) r7 = fcntl$dupfd(r6, 0x406, r6) setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r7, &(0x7f0000000400)=ANY=[], 0xfffffdcf) connect$unix(r7, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e23}, 0x6e) open_tree(0xffffffffffffff9c, 0x0, 0x80003) syz_io_uring_setup(0x31c5, 0x0, &(0x7f00000001c0), &(0x7f0000000100), &(0x7f0000000000)) syz_usb_connect(0x0, 0x4b, 0x0, 0x0) r8 = syz_open_dev$dvb_demux(&(0x7f0000000200), 0x1, 0x2) ioctl$DVB_DEMUX_DMX_SET_FILTER(r8, 0x403c6f2b, 0x0) ioctl$DVB_DEMUX_DMX_START(r8, 0x6f29) fsopen(0x0, 0x1) 5.042033072s ago: executing program 1 (id=5672): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="18080090ff000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000002f000000b709000000000000850000000700000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.947584763s ago: executing program 1 (id=5674): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000280)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x37}, {[@cipso={0x86, 0x77, 0xffffffff, [{0x0, 0xc, "e256b28c04000000fb52"}, {0x0, 0x9, "789607675ca638"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x2, 0x9, "e706d30bd224f8"}, {0x6, 0x7, "cfa11cab1a"}, {0x0, 0x10, "c600"/14}, {0x0, 0xa, "65807fe97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x6, 0x12, "00e600"/16}]}, @cipso={0x86, 0x6, 0x2}]}}}}}}}, 0x0) 4.804265692s ago: executing program 1 (id=5675): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008003c00fe88a43de1a400000040000000007d01ff020000000000000000000000000001"], 0xfdef) 4.701440046s ago: executing program 4 (id=5676): ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "32e72a108b"}, @NL80211_ATTR_KEY_SEQ={0x13, 0xa, "e1dbe3f4d06618b44c54d41078740b"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "3aa9c0f8a1"}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000001}, 0x840) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={&(0x7f00000001c0)="2d554726e05d2203c10e9f0477e3543ea08e337ea4afc3880b3fc3795bd2f019e89dc27c55576d3f623d7d65cdab41f477626932425ca6c67ac9c13655d4d27e9895f663688c4c6801941337fc96f5b2100bbd73ee9fdae0e3589ae6f3dc324cd9f26d33c02c530c2076f1c0f969f9f234eec9e66687b6eb24e8917861fe276585802941ec73db80a7d22db6e006fc110868c0d85f234ff2c60ac988d8c5e07937e7f83912c569a7dfa4583de85d9d833ccca08bf667fd019a5d6d3c95", &(0x7f0000000280)=""/83, &(0x7f0000000300)="199cff2b4c33e694d178a1920e3b96ae750fec7218a85b944b4320b70a1d4e74b7092db736fda1a54f5ee81c2c6fe19599e3b7684d7d4b214d3e7c7eff5c9bc91194348d49e2737c73a32d91f650c561c83afca60857c42811a2e8697e5b6e6e0ca2ca28", &(0x7f0000000380)="1822fd43ef5d0d71ec23c2cf7ec0cbad0b0bae6068535ce5c7a389d18a0233be931f81a640956c98367bb8fb17223a8692769bd4e3274103373b083799b8f0f4804825e0b61ccbae0a8a2d781aa888e2244d9fa36818230b37a331d60091f55c91987b379bf75afc8475a59e0b9a092fb6b3ab8a", 0x10001, 0x1}, 0x38) sendmmsg$sock(r0, &(0x7f0000000840)=[{{&(0x7f0000000440)=@pppoe={0x18, 0x0, {0x4, @broadcast, 'pimreg1\x00'}}, 0x80, &(0x7f0000000780)=[{&(0x7f00000004c0)="2266af4c6a57c2430fac2d613125686830f6ce29ead5a10862b20fa532f48bcb685032606c72c77179cb5b945824ac090cea5ec2a26c938982d0e1c7810dc8f3e53484c28fc0b460da40909a77ade9d99eb783f5e7afda13201e635def2f8b1c5a6f7636b003c99cf751ae983a92202c3e3e0352cbbe3c913f33810ec3e544bf667f2365756f8d0ef6dbc78dfb3738862e328b37233b646debb4bf16d8dbffd931da8b0a59f01284b67581dbebccc0a4f8b46ddb1a16fa9eba8e2a60e19ab77ce50647f1f9e197df7b8d3e7900d79d7a5bb792e76c4db6338d", 0xd9}, {&(0x7f00000005c0)="01f1070c2e1d66b349a13c505f1d2bab05b05b5797fc6e40f2e2614475979e5e33da57702764a014ddf624211bad49bb0ac892f5c1b3de104a92bd48c438ee19d40ca5103a5dacae2fe7e7a971238b6fc982e651d531d80b254cebfe5872056d5ac2cb8cad6428472040f0cf56235cd82f7e0f625053711acf471346423f592c99a3f91dc03389fc967abd16aace94724962473377efbab956680ee6ea6b09b8c5f2c91ecee38d623ae8eaab72d4cd64c62b32c10b88cc62e1f46feaa9c0ec5cc288811bf9aaa52f64b432b4324d7cfa137fe3569d59ec2df2c36f6df3248123a513884d1910d66b1e0a7308", 0xec}, {&(0x7f00000006c0)="ec305f5b832af012f6526235f4c54230c74b8ad9d139eed7138dace322ccc3cb18e719144193c09402872dc97e54975934e29f694c4b18449420a8ff2cf27f21cbd64e82e0534bb240b7450e472c53517b920b598851524c5a48e689174448ad93b8dfa6af3ff0115839703b48612e8a62ea3cc148d92146882090cf1569f6798cb8aa733e6cc8d824780c6dd432aaa66e7f005731c800a0db71928b22f370a18a52020b29148e5c73d1378220c8ba74c6", 0xb1}], 0x3, &(0x7f00000007c0)=[@txtime={{0x14, 0x1, 0x3d, 0x4}}, @txtime={{0x14, 0x1, 0x3d, 0xc2}}, @txtime={{0x14, 0x1, 0x3d, 0x1}}, @txtime={{0x14, 0x1, 0x3d, 0x2}}], 0x50}}], 0x1, 0x80c0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x38, r2, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c005}, 0x54) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f00000009c0)={0xffffffe0, 0x9, 0xff, 0x7fffffff, 0x8, 0x9}) close(r0) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000a00)={0x1, 0x6, 0x3, 0xef8}, 0x8) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000a40)={0xc, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000a80)={0x18, r3, 0x800, 0xb4d4}) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000ac0)=""/203) r4 = openat$ttyS3(0xffffff9c, &(0x7f0000000bc0), 0xa083, 0x0) syz_open_dev$I2C(&(0x7f0000000c00), 0xa33b, 0x80000) write$P9_RVERSION(r0, &(0x7f0000000c40)={0x13, 0x65, 0xffff, 0x6, 0x6, '9P2000'}, 0x13) unshare(0x10040a00) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000c80)={'syz_tun\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d40)={0x8c, r6, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x3}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x54, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x5}, @NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x7}, @NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0xa0}, @NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0x9}, @NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0xf5}, @NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x4}, @NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x6}, @NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0xaaba}, @NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x2c}, @NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0x5}]}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x5}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x7}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0xff}]}, 0x8c}}, 0x4000000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x1c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_TIMEOUT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000f80)={0x48, 0x2, r3}) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000001000)=0xf, 0x4) flock(r5, 0x9) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x44, 0x0, 0xc04, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10001}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1ff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xce6c}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x8800}, 0x4) bind$tipc(r0, &(0x7f0000001180)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x2, 0x1}}, 0x10) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4038587a, &(0x7f0000001380)={{r4, &(0x7f00000011c0)='\x00', 0x480200, &(0x7f0000001200)={@_ha_fsid={[0x8, 0x6]}, {0x7f, 0x7ff, 0x3, 0x2}}, 0x400, &(0x7f0000001240)={@_ha_fsid}, &(0x7f0000001280)=0x4}, {[0x1, 0xffffffff, 0x2]}, 0x1, 0xbe, &(0x7f00000012c0)=""/190}) shutdown(r7, 0x0) 4.244139794s ago: executing program 4 (id=5679): r0 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xd0}, 0x1a000}, 0x1c) 4.206596077s ago: executing program 1 (id=5680): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xff, 0x7fff0000}]}) socket$kcm(0x10, 0x2, 0x10) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$mtd(&(0x7f0000000000), 0x492, 0x20800) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x1000, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000040)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe2e, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10c}}, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x700, 0x3, 0x132}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1ba0, 0x20000, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7301, 0x1, 0xffffdffe, 0x351}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2a75, 0x100, 0x0, 0x1f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8, 0x2, 0x250, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x0, 0xc0107520, 0xffff}, 0x1f, r4, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 4.136702439s ago: executing program 4 (id=5681): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000005000500000a20000000000a010400000000000000000500000a0900010073797a30000000005c000000030a010400000000000000000500000a0900010073797a30000000000900030073797a30000000002800048008000140000000000800024000000001140003006e657464657673696d3000000000000008000a400000000260000000060a010400000000000000000500000a0900010073797a30000000000900020073797a300000000034000480300001800e000100696d6d6564696174650000001c0002800800014000000000100002800c000280080001800000000114000000110001"], 0x104}}, 0x0) 3.660898603s ago: executing program 4 (id=5682): msgctl$IPC_RMID(0xffffffffffffffff, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x85, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcd6, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="14c73500270001002cbd7000ffdbdf25030000007e521a143b4d4ef1eeaf733996fd1b10c6b8f1d0183c3063d46a9902bde7803f1ecc6212dd8fc1824ad3732efc2e0ade3140b3d97a3e782cacf3ca4e0ee43e"], 0x14}, 0x1, 0x0, 0x0, 0x4040841}, 0x4004990) (async) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="14c73500270001002cbd7000ffdbdf25030000007e521a143b4d4ef1eeaf733996fd1b10c6b8f1d0183c3063d46a9902bde7803f1ecc6212dd8fc1824ad3732efc2e0ade3140b3d97a3e782cacf3ca4e0ee43e"], 0x14}, 0x1, 0x0, 0x0, 0x4040841}, 0x4004990) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x802c550a, &(0x7f0000000000)=ANY=[]) r2 = io_uring_setup(0x7a52, &(0x7f0000000140)={0x0, 0x6fab, 0x8000, 0x2, 0x1}) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b0000000000900016806c0001800c0003000100000006000100280001"], 0xb8}, 0x1, 0x0, 0x0, 0xc040090}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000004340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendmsg$kcm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73f72dc9f0ba1f8483a0000005e1206021f1f00000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4840) (async) sendmsg$kcm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73f72dc9f0ba1f8483a0000005e1206021f1f00000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4840) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x7, 0x4) (async) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x7, 0x4) socket$key(0xf, 0x3, 0x2) (async) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0200001"], 0x40}}, 0x0) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020304090a00000000000000000000000300060000000e0002000000e00000090000a3b8e3e3157700000000000002000100000000000000000200000000030005000000000002000000e000000100000000000000009087f5182f269e58dd2c22f697ff7dc88d5908005ae4eae934e123541fb827b2131dab2da2f2373887def7c9552d3a2f682b19c6c8d3df9747300000de11cb232033"], 0x50}}, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000040), 0x0, 0x0, 0x1) (async) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000040), 0x0, 0x0, 0x1) add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r8) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002bbd00fc42f5972b65707064257608000600fdffffff00"/35], 0x34}, 0x1, 0x0, 0x0, 0x86}, 0x0) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002bbd00fc42f5972b65707064257608000600fdffffff00"/35], 0x34}, 0x1, 0x0, 0x0, 0x86}, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) (async) r10 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r10, &(0x7f0000000380)=""/244, 0xf4) (async) keyctl$read(0xb, r10, &(0x7f0000000380)=""/244, 0xf4) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r11 = syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x3, 0x10000051}, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r15 = io_uring_register$IORING_REGISTER_PERSONALITY(r11, 0x9, 0x0, 0x0) syz_io_uring_submit(r12, r13, r14, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, {0x0, r15}}) (async) syz_io_uring_submit(r12, r13, r14, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, {0x0, r15}}) 3.045092314s ago: executing program 2 (id=5686): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001d900000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc7c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000500003804c000080080003400000000240000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c0001400000000000010000100001800c000100636f756e746572"], 0xe0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.835708349s ago: executing program 1 (id=5687): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x20, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000021e00000000000900000000060015000a0000000c00168008000100bc"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2.770563264s ago: executing program 4 (id=5688): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf837363771309f39b44d50701e222bdbbd403d6395c94b6bce09895581b2f81e517974db9fdfa6aecb19568d7859bc28469a2bfee90f1b61528a8eae47df6c92c0c21e06dd0796e1992f1cf317467d8fc2338abf05b07bd00"/100], 0x0) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) setsockopt$sock_attach_bpf(r2, 0x1, 0xd, &(0x7f0000000800), 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x40) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f00000002c0)) r4 = dup(r0) write$UHID_INPUT(r4, &(0x7f0000001a00)={0xf, {"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", 0x1000}}, 0x1006) 2.74102942s ago: executing program 2 (id=5689): ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000700)='net/softnet_stat\x00') ftruncate(r1, 0x7fffffff) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c000440000000000000000b14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x6}]}}}]}, 0x40}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc0, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x2000000, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x2}, {0x0, 0x7ff}, 0x20000000, 0x0, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0xc0}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$vbi(&(0x7f0000000080), 0x2, 0x2) sendmsg$nl_xfrm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000240061000000000000000000000000000600040000"], 0x1c}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000001b00674c000000000000000000000000000000000000000000000000e000000200000000000000000000000000000000000000000a"], 0xb8}}, 0x0) io_uring_setup(0x104b, &(0x7f0000000700)={0x0, 0x12bd, 0x80, 0x1, 0x111}) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000020000000a3c000000120a01010000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000002140000001100010000000000000000000000000af3bed000bd1acefe014d9128371d7f2a27fcc462f42d45d73f58f09d663f50d969a3c81424f984ded714b1f1c35ce020a8d9ee970ff715bb44fb80bf653f6b261b9bd04bf2dc4eeaeeec4fdcf65d"], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r6, &(0x7f0000000840)={0x9, {"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", 0x1000}}, 0x214) 2.557779091s ago: executing program 3 (id=5691): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1100, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.467304802s ago: executing program 3 (id=5692): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000003a00)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)='d', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002fc0)='X ', 0x2}], 0x1}, 0xf0}], 0x2, 0xfc) 2.401308348s ago: executing program 2 (id=5693): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x6, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$uhid(0xffffff9c, 0x0, 0x802, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x7f}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000340)={r0, 0x9, 0x0, 0x4, 0xd}, &(0x7f0000000380)=0x14) sync() sync() sync() sync() sync() write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) fcntl$getflags(r2, 0x40a) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000200)={'tunl0\x00', 0x0, 0x80, 0x20, 0x7, 0x7, {{0x25, 0x4, 0x0, 0x3, 0x94, 0x67, 0x0, 0x1, 0x2f, 0x0, @private=0xa010102, @empty, {[@timestamp_addr={0x44, 0x34, 0x5b, 0x1, 0x8, [{@local, 0x9}, {@remote, 0xb}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@empty, 0x100}, {@loopback, 0x645}, {@broadcast, 0x3}]}, @timestamp_prespec={0x44, 0x44, 0x39, 0x3, 0x1, [{@broadcast, 0x4}, {@multicast2, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@broadcast, 0x5}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x6}, {@empty, 0x1}, {@local, 0x2}, {@loopback, 0x6}]}, @generic={0x88, 0x4, "ebe1"}, @noop]}}}}}) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r5, 0x1, 0x24, &(0x7f0000000000), 0x4) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@bridge_newneigh={0x30, 0x1c, 0x8, 0x70bd2a, 0x25dfdbfc, {0x2, 0x0, 0x0, r4, 0x1, 0x8, 0x9}, [@NDA_CACHEINFO={0x14, 0x3, {0x7, 0xfffffff9, 0x0, 0x9}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x0) ioctl$PPPIOCSACTIVE(r1, 0x40087446, &(0x7f00000007c0)={0x1, &(0x7f0000000080)=[{0x6, 0xd, 0x1, 0x2006}]}) r6 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r6, &(0x7f0000000880)={0x28, 0x0, 0x2710, @local}, 0x10) epoll_create(0x63) 2.068275928s ago: executing program 1 (id=5694): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008094) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x8007, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "09fe0891", "0aa3b9dd5fe7a771"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x1, 0x9}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) recvfrom$inet6(r0, &(0x7f0000000640)=""/248, 0xffffff1f, 0x40010002, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000200)={0x3, 'wg0\x00', {0x2}, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) chroot(&(0x7f0000000b80)='./file0\x00') setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30", 0x78}, {&(0x7f0000000580)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f00000014c0)="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", 0xdf3}], 0x5) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000500)='/sys/kernel/notes', 0x800, 0x188) lseek(r2, 0x10000033, 0x3) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000840)={&(0x7f0000000740)="8d6cba23ef11513a6a71c2b6762c739bc7577b189109223e0e3f4834b1afc569a387dd35756d3f486717d91299aca0eed3a963969855c030c8774d51b6adb85fb3743ba80672c7426b29cd8ea87f46992051c1abedb3538dc2bf6c804dac29f3614962f8f0330f8c9c970a2c1ca74f7b05edd088ad82dab6af572ecad36ce44e2fad66f7971cc8e72a87d69bc51c75ed5d0ce0742ffc0d273ca98992c032da2679f74cc911bde5fbe6ec5e5eee9b08753c0d10bca34628c55530dd0359a78c102919959ebdca5f76e94163ceb936256eaaa5c2013db8649112250b", 0xdb}) close(r0) 2.067925695s ago: executing program 3 (id=5695): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, 0x0) mq_notify(r2, &(0x7f0000000100)={0x0, 0x17}) timerfd_create(0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x0, 0x1000000002, 0x0, 0x0, 0x6}, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, 0x0, &(0x7f0000001a40)) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000300)) sendto$inet6(0xffffffffffffffff, &(0x7f0000000800), 0x0, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x3, @mcast2}, 0x1c) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010163, 0x0) r4 = syz_mount_image$fuse(0x0, 0x0, 0x3011094, &(0x7f0000000dc0)=ANY=[@ANYBLOB="06663d", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000120000,user_id', @ANYRESDEC=0xee00, @ANYBLOB=',group_id='], 0x1, 0x0, &(0x7f0000000f00)) unlinkat(r4, 0x0, 0x200) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, &(0x7f00000001c0)={0x0, @in={{0xa, 0x4, @multicast2}}, 0xffff, 0x4}, 0x90) r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xbd7, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}}, 0x24}}, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) syz_ublk_setup_queues(r12, r10, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x20000254, 0x0, r6}, &(0x7f0000000600)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x20fc, 0x10000004, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xffffdffe, 0x2034f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x1000, 0x0, 0x1f0, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x70fb, 0x200, 0x2, 0xa3, 0x0, r6}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r12, 0xc0107520, 0x0, 0x0, 0x100000, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x4, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 1.067692842s ago: executing program 2 (id=5696): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x24, r1, 0x1, 0x70bd27, 0xfffffffa, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x5810) 814.453622ms ago: executing program 3 (id=5697): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc2d536d8e5531711}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x4, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x7ffffffe}, 0x40010) 667.851217ms ago: executing program 2 (id=5698): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') pread64(r0, &(0x7f0000019080)=""/102356, 0x18fd4, 0x96) lseek(r0, 0xfffffffffffffffb, 0x3) 326.558441ms ago: executing program 3 (id=5699): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000980)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), r0) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c4357b64c299aec8c91a223cbdcc9bf9cbc1e0ac0fe2ebe517bd1bee85a338b99ab33c10b6d3375222e779523460e7c2b23a8dd623ce1de265ce203fa3da5c97688fae282370103933074ce4c761a821e086de17bc3e95b77a7893ce03cd54ec81120cdc7f5141084a617fcc7c6ed764298e7e2b5cce66f42fb8774b4a0cc53a2836ed0bb07552ccbe34f6e831faf40a3a9eeddb2661f9327ded3e6760d330ff72e1943121c764583047122ca29995e", @ANYRES16=r2, @ANYBLOB="010025bd7000fcdbdf253000000008000300", @ANYRES32=r1, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x800c}, 0x4008000) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), r3) 197.241939ms ago: executing program 2 (id=5700): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000080)={0x1c, &(0x7f00000000c0)={0x20, 0x18, 0x2, "0200"}, 0x0, 0x0}) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000780)=""/169) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0xff, 0x7fff0003}]}) close_range(r2, r2, 0x2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x51, 0x10, r3, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000780)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "ffe900", 0x40, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @private2, [@hopopts={0x3a, 0x0, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}]}}}}}}}, 0x0) 0s ago: executing program 3 (id=5701): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) kernel console output (not intermixed with test programs): intk_skb: 49 callbacks suppressed [ 1096.130344][ T30] audit: type=1804 audit(1790513542.031:6857): pid=22819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.5151" name="bus" dev="ramfs" ino=112076 res=1 errno=0 [ 1096.181881][ T30] audit: type=1804 audit(1790513542.081:6858): pid=22819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.5151" name="bus" dev="ramfs" ino=112076 res=1 errno=0 [ 1096.573101][T22858] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5165'. [ 1098.158337][T22888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1098.158751][T22888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1098.413515][ T30] audit: type=1326 audit(1790513544.311:6859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22864 comm="syz.1.5167" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f870ec code=0x0 [ 1099.214384][T22904] FAULT_INJECTION: forcing a failure. [ 1099.214384][T22904] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1099.214454][T22904] CPU: 1 UID: 0 PID: 22904 Comm: syz.2.5178 Tainted: G L syzkaller #0 PREEMPT(full) [ 1099.214481][T22904] Tainted: [L]=SOFTLOCKUP [ 1099.214488][T22904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1099.214500][T22904] Call Trace: [ 1099.214508][T22904] [ 1099.214516][T22904] dump_stack_lvl+0xe8/0x150 [ 1099.214550][T22904] should_fail_ex+0x410/0x560 [ 1099.214578][T22904] prepare_alloc_pages+0x223/0x600 [ 1099.214605][T22904] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 1099.214636][T22904] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1099.214661][T22904] ? __pfx_policy_nodemask+0x10/0x10 [ 1099.214690][T22904] ? __lock_acquire+0x747/0x2de0 [ 1099.214714][T22904] alloc_pages_mpol+0x21e/0x390 [ 1099.214743][T22904] folio_alloc_mpol_noprof+0x39/0x160 [ 1099.214770][T22904] vma_alloc_folio_noprof+0xe1/0x1e0 [ 1099.214797][T22904] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1099.214823][T22904] ? lock_acquire+0x115/0x350 [ 1099.214849][T22904] do_pte_missing+0x173a/0x34b0 [ 1099.214886][T22904] handle_mm_fault+0x1a53/0x3750 [ 1099.214922][T22904] ? handle_mm_fault+0xf1/0x3750 [ 1099.214957][T22904] ? __pfx_handle_mm_fault+0x10/0x10 [ 1099.214984][T22904] ? follow_page_pte+0x748/0xf10 [ 1099.215023][T22904] ? __pfx_follow_page_pte+0x10/0x10 [ 1099.215060][T22904] __get_user_pages+0x1675/0x2750 [ 1099.215116][T22904] populate_vma_page_range+0x2be/0x3c0 [ 1099.215143][T22904] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1099.215171][T22904] ? down_read+0x2be/0x330 [ 1099.215197][T22904] ? rwsem_wake+0xe8/0x130 [ 1099.215225][T22904] __mm_populate+0x25f/0x390 [ 1099.215250][T22904] ? __pfx___mm_populate+0x10/0x10 [ 1099.215283][T22904] do_mlock+0x622/0x730 [ 1099.215314][T22904] ? __pfx_do_mlock+0x10/0x10 [ 1099.215342][T22904] ? fput+0xa0/0xd0 [ 1099.215366][T22904] ? ksys_write+0x242/0x270 [ 1099.215400][T22904] __ia32_sys_mlock+0x76/0xa0 [ 1099.215424][T22904] __do_fast_syscall_32+0x27a/0x6a0 [ 1099.215450][T22904] ? do_fast_syscall_32+0x33/0x70 [ 1099.215474][T22904] ? asm_int80_emulation+0x1a/0x20 [ 1099.215493][T22904] ? do_int80_emulation+0x299/0x500 [ 1099.215523][T22904] do_fast_syscall_32+0x33/0x70 [ 1099.215548][T22904] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1099.215571][T22904] RIP: 0023:0xf706f0ec [ 1099.215588][T22904] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1099.215604][T22904] RSP: 002b:00000000f543c50c EFLAGS: 00000206 ORIG_RAX: 0000000000000096 [ 1099.215624][T22904] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000800000 [ 1099.215638][T22904] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1099.215649][T22904] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1099.215661][T22904] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1099.215672][T22904] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1099.215701][T22904] [ 1099.925961][T22909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5180'. [ 1100.106044][T22911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5182'. [ 1100.113101][T22911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5182'. [ 1100.562761][ T5701] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1100.595461][T22922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1100.595903][T22922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1100.685273][T22920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1100.685748][T22920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1100.734693][ T5701] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1100.754906][ T5701] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 1100.754950][ T5701] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1100.756392][ T5701] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1100.756419][ T5701] usb 4-1: Manufacturer: syz [ 1100.801048][ T5701] usb 4-1: config 0 descriptor?? [ 1101.012809][ T5701] rc_core: IR keymap rc-hauppauge not found [ 1101.012848][ T5701] Registered IR keymap rc-empty [ 1101.050401][ T5701] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1101.074729][ T5701] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input79 [ 1101.566766][ C1] igorplugusb 4-1:0.0: receive overflow invalid: 12 [ 1101.898990][T15891] usb 4-1: USB disconnect, device number 45 [ 1102.303370][T22949] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.5191'. [ 1102.303396][T22949] veth0_to_bond: default FDB implementation only supports local addresses [ 1102.655527][T15891] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1102.854000][T22958] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5193'. [ 1102.893653][T15891] usb 5-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 1102.895417][T22958] netlink: 'syz.3.5193': attribute type 4 has an invalid length. [ 1102.895470][T22958] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5193'. [ 1102.895584][T22958] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5193'. [ 1102.959964][T15891] usb 5-1: config 54 has an invalid descriptor of length 64, skipping remainder of the config [ 1102.960001][T15891] usb 5-1: config 54 interface 0 has no altsetting 0 [ 1103.096919][T15891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.096945][T15891] usb 5-1: Product: syz [ 1103.096960][T15891] usb 5-1: Manufacturer: syz [ 1103.096974][T15891] usb 5-1: SerialNumber: syz [ 1103.538714][T15891] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 1103.538771][T15891] dvb-usb: bulk message failed: -22 (3/0) [ 1103.566256][T15891] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1103.571215][T15891] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 1103.571366][T15891] usb 5-1: media controller created [ 1103.583614][T15891] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1103.755643][T22969] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5195'. [ 1103.782458][T15891] DVB: Unable to find symbol mt352_attach() [ 1103.782476][T15891] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 1103.805726][T15891] dvb-usb: bulk message failed: -22 (3/0) [ 1103.848160][T15891] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 1103.851639][T15891] usb 5-1: USB disconnect, device number 110 [ 1104.005548][T15891] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 1104.693407][T22986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5201'. [ 1104.752793][ T5701] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1104.915063][ T5701] usb 5-1: Using ep0 maxpacket: 16 [ 1104.916352][ T5701] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1104.941372][ T5701] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1104.941401][ T5701] usb 5-1: config 0 has no interface number 0 [ 1104.960187][ T5701] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.960224][ T5701] usb 5-1: Product: syz [ 1104.960233][ T5701] usb 5-1: Manufacturer: syz [ 1104.960252][ T5701] usb 5-1: SerialNumber: syz [ 1104.991247][ T5701] usb 5-1: config 0 descriptor?? [ 1105.009415][ T5701] hub 5-1:0.132: bad descriptor, ignoring hub [ 1105.009503][ T5701] hub 5-1:0.132: probe with driver hub failed with error -5 [ 1105.070584][ T5701] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.132/input/input80 [ 1105.233301][T22988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1105.233741][T22988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1105.453957][T15380] usb 5-1: USB disconnect, device number 111 [ 1105.810338][T23002] vlan6: entered allmulticast mode [ 1105.810360][T23002] bond0: entered allmulticast mode [ 1105.812767][T23002] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5208'. [ 1105.826128][T23002] bond0 (unregistering): Released all slaves [ 1105.903640][ T5717] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1106.026264][T23004] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5209'. [ 1106.053854][ T5717] usb 4-1: New USB device found, idVendor=046d, idProduct=c22e, bcdDevice= 0.00 [ 1106.056121][ T5717] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 227, changing to 11 [ 1106.056277][ T5717] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1106.065362][ T5717] usb 4-1: config 0 descriptor?? [ 1106.116809][T23007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5210'. [ 1106.592373][T23020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1106.600421][T23020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1106.718080][ T5717] usbhid 4-1:0.0: can't add hid device: -71 [ 1106.718319][ T5717] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1106.747568][ T5717] usb 4-1: USB disconnect, device number 46 [ 1107.344021][T23032] bridge0: port 1(bridge_slave_0) entered blocking state [ 1107.344213][T23032] bridge0: port 1(bridge_slave_0) entered disabled state [ 1107.344373][T23032] bridge_slave_0: entered allmulticast mode [ 1107.346308][T23032] bridge_slave_0: entered promiscuous mode [ 1107.347395][T23032] bridge0: port 1(bridge_slave_0) entered blocking state [ 1107.347498][T23032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1107.420650][T23032] bridge_slave_0: left allmulticast mode [ 1107.420679][T23032] bridge_slave_0: left promiscuous mode [ 1107.421345][T23032] bridge0: port 1(bridge_slave_0) entered disabled state [ 1108.292849][ T5701] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1108.297975][T23048] loop8: detected capacity change from 0 to 8 [ 1108.301054][T23048] Dev loop8: unable to read RDB block 8 [ 1108.301095][T23048] loop8: unable to read partition table [ 1108.301413][T23048] loop8: partition table beyond EOD, truncated [ 1108.301449][T23048] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1108.788300][T23055] netlink: 'syz.0.5223': attribute type 4 has an invalid length. [ 1109.503996][T15380] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1109.740178][T15380] usb 5-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 1109.808110][T15380] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1109.808140][T15380] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1109.951649][T15380] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.951678][T15380] usb 5-1: Product: syz [ 1109.951693][T15380] usb 5-1: Manufacturer: syz [ 1109.951706][T15380] usb 5-1: SerialNumber: syz [ 1109.992653][T15380] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 1110.012456][T15380] ums-sddr09 5-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 1110.012456][T15380] Please send a copy of this message to and [ 1110.446258][T23060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1110.511230][T23060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1110.638175][T23075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1111.053026][T23091] input: syz0 as /devices/virtual/input/input81 [ 1111.132152][T15380] scsi host1: usb-storage 5-1:1.0 [ 1111.169836][T15380] usb 5-1: USB disconnect, device number 112 [ 1111.505952][ T5701] usb 4-1: device descriptor read/64, error -71 [ 1111.587848][T23096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1111.588248][T23096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1111.772955][ T5701] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1111.896640][T23100] ipip0: entered promiscuous mode [ 1111.896664][T23100] ipip0: entered allmulticast mode [ 1111.922817][ T5701] usb 4-1: Using ep0 maxpacket: 16 [ 1111.924324][ T5701] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1111.926312][ T5701] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1111.926351][ T5701] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1111.930647][ T5701] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.930704][ T5701] usb 4-1: Product: syz [ 1111.930736][ T5701] usb 4-1: Manufacturer: syz [ 1111.930753][ T5701] usb 4-1: SerialNumber: syz [ 1112.006906][ T5701] usb 4-1: 0:2 : does not exist [ 1112.179127][ T5701] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1112.227190][T23108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5241'. [ 1112.289728][ T5701] usb 4-1: USB disconnect, device number 48 [ 1112.295210][T23110] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5240'. [ 1112.330234][T15380] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1112.330538][T23112] netlink: 'syz.1.5242': attribute type 15 has an invalid length. [ 1112.353327][T19484] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 6081 - 0 [ 1112.354999][T19484] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 6081 - 0 [ 1112.355067][T19484] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 6081 - 0 [ 1112.355137][T19484] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 6081 - 0 [ 1112.502795][T15380] usb 5-1: device descriptor read/64, error -71 [ 1112.536673][T20359] udevd[20359]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1112.604235][T23118] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5245'. [ 1112.750457][T15380] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1112.758671][T23124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1112.761785][T23124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1112.922232][T15380] usb 5-1: device descriptor read/64, error -71 [ 1112.939829][T23124] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1112.996359][T23129] netlink: 'syz.3.5249': attribute type 4 has an invalid length. [ 1113.035748][T15380] usb usb5-port1: attempt power cycle [ 1113.053831][T23127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1113.163773][T23122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1113.164226][T23122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1113.260754][T23124] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1113.394170][T15380] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1113.460709][T15380] usb 5-1: device descriptor read/8, error -71 [ 1113.529746][T23135] FAULT_INJECTION: forcing a failure. [ 1113.529746][T23135] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1113.529780][T23135] CPU: 0 UID: 0 PID: 23135 Comm: syz.3.5250 Tainted: G L syzkaller #0 PREEMPT(full) [ 1113.529806][T23135] Tainted: [L]=SOFTLOCKUP [ 1113.529814][T23135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1113.529825][T23135] Call Trace: [ 1113.529833][T23135] [ 1113.529842][T23135] dump_stack_lvl+0xe8/0x150 [ 1113.529884][T23135] should_fail_ex+0x410/0x560 [ 1113.529913][T23135] _copy_to_user+0x31/0xb0 [ 1113.529942][T23135] simple_read_from_buffer+0xe1/0x170 [ 1113.529975][T23135] proc_fail_nth_read+0x1bb/0x230 [ 1113.529994][T23135] ? common_file_perm+0x20e/0x2b0 [ 1113.530021][T23135] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1113.530044][T23135] ? rw_verify_area+0x24a/0x4c0 [ 1113.530073][T23135] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1113.530092][T23135] vfs_read+0x213/0xa80 [ 1113.530124][T23135] ? __pfx___mutex_lock+0x10/0x10 [ 1113.530151][T23135] ? __pfx_vfs_read+0x10/0x10 [ 1113.530180][T23135] ? __fget_files+0x2a/0x420 [ 1113.530209][T23135] ? __fget_files+0x3a2/0x420 [ 1113.530233][T23135] ? __fget_files+0x2a/0x420 [ 1113.530267][T23135] ksys_read+0x150/0x270 [ 1113.530296][T23135] ? __pfx_ksys_read+0x10/0x10 [ 1113.530327][T23135] ? asm_int80_emulation+0x1a/0x20 [ 1113.530352][T23135] do_int80_emulation+0x198/0x500 [ 1113.530376][T23135] ? trace_irq_disable+0x3b/0x140 [ 1113.530395][T23135] ? asm_int80_emulation+0x1a/0x20 [ 1113.530412][T23135] ? clear_bhb_loop+0x70/0xc0 [ 1113.530428][T23135] ? clear_bhb_loop+0x70/0xc0 [ 1113.530449][T23135] asm_int80_emulation+0x1a/0x20 [ 1113.530464][T23135] RIP: 0023:0xf71575ab [ 1113.530481][T23135] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1113.530494][T23135] RSP: 002b:00000000f53d44bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1113.530513][T23135] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000f53d45d0 [ 1113.530524][T23135] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1113.530533][T23135] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1113.530544][T23135] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1113.530555][T23135] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1113.530583][T23135] [ 1113.715663][T15380] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1113.814595][T15380] usb 5-1: device descriptor read/8, error -71 [ 1113.933789][T15380] usb usb5-port1: unable to enumerate USB device [ 1114.119639][T23137] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5251'. [ 1114.159336][T23139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1114.159777][T23139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1114.282080][T23137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5251'. [ 1114.299560][ T5627] Bluetooth: hci2: unexpected event for opcode 0x1001 [ 1115.070210][T23145] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 1115.070210][T23145] program syz.2.5254 not setting count and/or reply_len properly [ 1115.229988][T23147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1115.247697][T23147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1115.656535][T23154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1115.660773][T23154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1115.777660][T23157] pimreg3: entered allmulticast mode [ 1115.805961][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.806013][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.892912][ T5701] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1116.062980][ T5701] usb 5-1: Using ep0 maxpacket: 16 [ 1116.064293][ T5701] usb 5-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 1116.066716][ T5701] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 1116.066776][ T5701] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1116.066812][ T5701] usb 5-1: config 0 has no interface number 0 [ 1116.071527][ T5701] usb 5-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 1116.071589][ T5701] usb 5-1: Product: syz [ 1116.071621][ T5701] usb 5-1: Manufacturer: syz [ 1116.071635][ T5701] usb 5-1: SerialNumber: syz [ 1116.164656][ T5701] usb 5-1: config 0 descriptor?? [ 1116.213745][ T5701] uvcvideo 5-1:0.105: Found UVC 0.00 device syz (046c:14e8) [ 1116.214110][ T5701] uvcvideo 5-1:0.105: Entity type for entity Output 1 was not initialized! [ 1116.220983][ T5701] uvcvideo 5-1:0.105: Failed to create links for entity 1 [ 1116.221022][ T5701] uvcvideo 5-1:0.105: Failed to register entities (-22). [ 1117.090122][T15891] usb 5-1: USB disconnect, device number 117 [ 1117.401783][T23178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5262'. [ 1118.065613][T23189] FAULT_INJECTION: forcing a failure. [ 1118.065613][T23189] name failslab, interval 1, probability 0, space 0, times 0 [ 1118.065660][T23189] CPU: 1 UID: 0 PID: 23189 Comm: syz.4.5264 Tainted: G L syzkaller #0 PREEMPT(full) [ 1118.065685][T23189] Tainted: [L]=SOFTLOCKUP [ 1118.065691][T23189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1118.065701][T23189] Call Trace: [ 1118.065707][T23189] [ 1118.065715][T23189] dump_stack_lvl+0xe8/0x150 [ 1118.065744][T23189] should_fail_ex+0x410/0x560 [ 1118.065768][T23189] should_failslab+0xa8/0x100 [ 1118.065788][T23189] ? skb_clone+0x212/0x3a0 [ 1118.065813][T23189] kmem_cache_alloc_noprof+0xa1/0x600 [ 1118.065839][T23189] ? skb_clone+0x212/0x3a0 [ 1118.065866][T23189] skb_clone+0x212/0x3a0 [ 1118.065891][T23189] __netlink_deliver_tap+0x413/0x860 [ 1118.065918][T23189] ? netlink_deliver_tap+0x2e/0x1b0 [ 1118.065935][T23189] netlink_deliver_tap+0x19c/0x1b0 [ 1118.065952][T23189] netlink_unicast+0x781/0x940 [ 1118.065984][T23189] netlink_sendmsg+0x813/0xb40 [ 1118.065999][T23189] ? trace_irq_disable+0x3b/0x140 [ 1118.066024][T23189] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1118.066047][T23189] ? apparmor_socket_sendmsg+0x98/0x360 [ 1118.066068][T23189] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1118.066083][T23189] sock_sendmsg_nosec+0x13a/0x180 [ 1118.066103][T23189] ____sys_sendmsg+0x54e/0x850 [ 1118.066129][T23189] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1118.066166][T23189] ___sys_sendmsg+0x2a5/0x360 [ 1118.066186][T23189] ? __lock_acquire+0x747/0x2de0 [ 1118.066206][T23189] ? __pfx____sys_sendmsg+0x10/0x10 [ 1118.066227][T23189] ? get_pid_task+0x20/0x1f0 [ 1118.066243][T23189] ? get_pid_task+0x20/0x1f0 [ 1118.066256][T23189] ? get_pid_task+0x20/0x1f0 [ 1118.066298][T23189] ? __fget_files+0x2a/0x420 [ 1118.066318][T23189] ? __fget_files+0x3a2/0x420 [ 1118.066348][T23189] __sys_sendmsg+0x177/0x240 [ 1118.066380][T23189] ? __pfx___sys_sendmsg+0x10/0x10 [ 1118.066419][T23189] __do_fast_syscall_32+0x27a/0x6a0 [ 1118.066443][T23189] ? do_fast_syscall_32+0x33/0x70 [ 1118.066463][T23189] ? asm_int80_emulation+0x1a/0x20 [ 1118.066479][T23189] ? do_int80_emulation+0x299/0x500 [ 1118.066498][T23189] ? trace_irq_disable+0x3b/0x140 [ 1118.066518][T23189] do_fast_syscall_32+0x33/0x70 [ 1118.066540][T23189] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1118.066559][T23189] RIP: 0023:0xf703f0ec [ 1118.066575][T23189] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1118.066588][T23189] RSP: 002b:00000000f542d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1118.066606][T23189] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001300 [ 1118.066617][T23189] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1118.066626][T23189] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1118.066636][T23189] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1118.066646][T23189] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1118.066671][T23189] [ 1119.572275][T23208] netlink: 'syz.2.5268': attribute type 10 has an invalid length. [ 1120.044208][T23221] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5275'. [ 1120.534440][T23239] loop5: detected capacity change from 0 to 7 [ 1120.576815][T23239] Dev loop5: unable to read RDB block 7 [ 1120.576881][T23239] loop5: unable to read partition table [ 1120.577097][T23239] loop5: partition table beyond EOD, truncated [ 1120.577126][T23239] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1120.600614][T23231] syzkaller0: entered promiscuous mode [ 1120.600634][T23231] syzkaller0: entered allmulticast mode [ 1120.677510][T23231] tipc: Enabled bearer , priority 0 [ 1120.713098][T23228] tipc: Resetting bearer [ 1121.090721][T23228] tipc: Disabling bearer [ 1121.658079][T23262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1121.679969][T23262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1121.757044][T23262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1121.757494][T23262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1122.205657][ T5701] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1122.416981][ T5701] usb 5-1: Using ep0 maxpacket: 16 [ 1122.417757][ T5701] usb 5-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 1122.419137][ T5701] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 1122.419151][ T5701] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1122.419173][ T5701] usb 5-1: config 0 has no interface number 0 [ 1122.428650][ T5701] usb 5-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 1122.428676][ T5701] usb 5-1: Product: syz [ 1122.428685][ T5701] usb 5-1: Manufacturer: syz [ 1122.428703][ T5701] usb 5-1: SerialNumber: syz [ 1122.441568][ T5701] usb 5-1: config 0 descriptor?? [ 1122.469141][ T5701] uvcvideo 5-1:0.105: Found UVC 0.00 device syz (046c:14e8) [ 1122.469244][ T5701] uvcvideo 5-1:0.105: Entity type for entity Output 1 was not initialized! [ 1122.469375][ T5701] uvcvideo 5-1:0.105: Failed to create links for entity 1 [ 1122.469408][ T5701] uvcvideo 5-1:0.105: Failed to register entities (-22). [ 1123.023924][T23266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1123.060850][T23266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1123.723521][T23288] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5293'. [ 1123.752264][T23286] vlan6: entered promiscuous mode [ 1123.752287][T23286] veth0: entered promiscuous mode [ 1123.772245][ T5717] usb 5-1: USB disconnect, device number 118 [ 1123.840374][T23293] CIFS: Invalid mount helper version specified [ 1123.842309][T23293] loop4: detected capacity change from 0 to 2640 [ 1123.874343][T20359] buffer_io_error: 1479 callbacks suppressed [ 1123.874362][T20359] Buffer I/O error on dev loop4, logical block 0, async page read [ 1123.874894][T20359] Buffer I/O error on dev loop4, logical block 0, async page read [ 1123.933721][T20359] Buffer I/O error on dev loop4, logical block 0, async page read [ 1123.934245][T20359] Buffer I/O error on dev loop4, logical block 0, async page read [ 1123.934760][T20359] Buffer I/O error on dev loop4, logical block 0, async page read [ 1123.975918][ T5701] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1124.001896][T23295] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 1124.001967][T23295] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 1124.002009][T23295] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 1124.002034][T23295] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 1124.002071][T23295] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 1124.028532][T23297] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5295'. [ 1124.093343][T23299] FAULT_INJECTION: forcing a failure. [ 1124.093343][T23299] name failslab, interval 1, probability 0, space 0, times 0 [ 1124.093377][T23299] CPU: 0 UID: 0 PID: 23299 Comm: syz.0.5296 Tainted: G L syzkaller #0 PREEMPT(full) [ 1124.093403][T23299] Tainted: [L]=SOFTLOCKUP [ 1124.093411][T23299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1124.093422][T23299] Call Trace: [ 1124.093430][T23299] [ 1124.093439][T23299] dump_stack_lvl+0xe8/0x150 [ 1124.093471][T23299] should_fail_ex+0x410/0x560 [ 1124.093498][T23299] should_failslab+0xa8/0x100 [ 1124.093522][T23299] ? skb_clone+0x212/0x3a0 [ 1124.093549][T23299] kmem_cache_alloc_noprof+0xa1/0x600 [ 1124.093581][T23299] ? skb_clone+0x212/0x3a0 [ 1124.093612][T23299] skb_clone+0x212/0x3a0 [ 1124.093638][T23299] ? nfnetlink_rcv+0x4b0/0x28c0 [ 1124.093676][T23299] nfnetlink_rcv+0x4de/0x28c0 [ 1124.093705][T23299] ? kernel_text_address+0xa5/0xe0 [ 1124.093728][T23299] ? __kernel_text_address+0xd/0x30 [ 1124.093749][T23299] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1124.093769][T23299] ? arch_stack_walk+0xfb/0x150 [ 1124.093818][T23299] ? stack_trace_save+0xa9/0x100 [ 1124.093838][T23299] ? __lock_acquire+0x747/0x2de0 [ 1124.093859][T23299] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1124.093903][T23299] ? __lock_acquire+0x747/0x2de0 [ 1124.093934][T23299] ? __netlink_lookup+0xc6/0x8b0 [ 1124.093963][T23299] ? lock_acquire+0x115/0x350 [ 1124.093983][T23299] ? netlink_deliver_tap+0x2e/0x1b0 [ 1124.094007][T23299] ? netlink_deliver_tap+0x2e/0x1b0 [ 1124.094026][T23299] ? netlink_deliver_tap+0x2e/0x1b0 [ 1124.094049][T23299] netlink_unicast+0x7bd/0x940 [ 1124.094087][T23299] netlink_sendmsg+0x813/0xb40 [ 1124.094115][T23299] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1124.094142][T23299] ? apparmor_socket_sendmsg+0x98/0x360 [ 1124.094166][T23299] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1124.094185][T23299] sock_sendmsg_nosec+0x13a/0x180 [ 1124.094209][T23299] ____sys_sendmsg+0x54e/0x850 [ 1124.094240][T23299] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1124.094281][T23299] ___sys_sendmsg+0x2a5/0x360 [ 1124.094306][T23299] ? __lock_acquire+0x747/0x2de0 [ 1124.094329][T23299] ? __pfx____sys_sendmsg+0x10/0x10 [ 1124.094354][T23299] ? get_pid_task+0x20/0x1f0 [ 1124.094372][T23299] ? get_pid_task+0x20/0x1f0 [ 1124.094389][T23299] ? get_pid_task+0x20/0x1f0 [ 1124.094435][T23299] ? __fget_files+0x2a/0x420 [ 1124.094460][T23299] ? __fget_files+0x3a2/0x420 [ 1124.094495][T23299] __sys_sendmsg+0x177/0x240 [ 1124.094523][T23299] ? __pfx___sys_sendmsg+0x10/0x10 [ 1124.094567][T23299] __do_fast_syscall_32+0x27a/0x6a0 [ 1124.094595][T23299] ? do_fast_syscall_32+0x33/0x70 [ 1124.094625][T23299] ? asm_int80_emulation+0x1a/0x20 [ 1124.094642][T23299] ? do_int80_emulation+0x299/0x500 [ 1124.094671][T23299] ? trace_irq_disable+0x3b/0x140 [ 1124.094694][T23299] do_fast_syscall_32+0x33/0x70 [ 1124.094719][T23299] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1124.094741][T23299] RIP: 0023:0xf7ff60ec [ 1124.094758][T23299] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1124.094773][T23299] RSP: 002b:00000000f54b650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1124.094794][T23299] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 1124.094808][T23299] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1124.094819][T23299] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1124.094829][T23299] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1124.094841][T23299] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1124.094869][T23299] [ 1124.204036][ T5701] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1124.275209][ T5701] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1124.275315][ T5701] usb 4-1: config 1 interface 0 altsetting 34 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 1124.275373][ T5701] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1124.501001][T23308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1124.501438][T23308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1124.530292][ T5701] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1124.530350][ T5701] usb 4-1: SerialNumber: syz [ 1124.601240][ T5627] Bluetooth: hci2: unexpected event for opcode 0x2012 [ 1124.607319][T23308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1124.607730][T23308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1124.642127][ T5701] usb 4-1: No union descriptors [ 1124.843074][T15380] usb 4-1: USB disconnect, device number 49 [ 1125.086721][T23314] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 1125.086754][T23314] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1125.437422][T15891] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1125.614709][T23324] binder: 23323:23324 ioctl 4008af75 0 returned -22 [ 1125.638121][T15891] usb 5-1: Using ep0 maxpacket: 8 [ 1125.691057][T23316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1125.691481][T23316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1125.693017][T23316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1125.693453][T23316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1125.694859][T23316] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1125.739371][T15891] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1125.739419][T15891] usb 5-1: New USB device found, idVendor=001e, idProduct=0000, bcdDevice= 0.00 [ 1125.739451][T15891] usb 5-1: no configurations [ 1125.739463][T15891] usb 5-1: can't read configurations, error -22 [ 1125.791260][T23327] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5305'. [ 1125.953079][T23327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5305'. [ 1125.961255][T23335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1125.963816][T23335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1125.996292][ T5627] Bluetooth: hci4: unexpected event for opcode 0x1001 [ 1126.765623][T23342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1126.766586][T23342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1127.444891][T23353] pimreg3: entered allmulticast mode [ 1127.468135][T15891] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1127.618967][T23361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1127.627987][T23361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1127.701515][T15891] usb 4-1: Using ep0 maxpacket: 16 [ 1127.746129][T15891] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1127.811220][T15891] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 1127.811249][T15891] usb 4-1: config 0 has no interface number 0 [ 1127.945776][T15891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.945802][T15891] usb 4-1: Product: syz [ 1127.945817][T15891] usb 4-1: Manufacturer: syz [ 1127.945830][T15891] usb 4-1: SerialNumber: syz [ 1127.948655][T15891] usb 4-1: config 0 descriptor?? [ 1127.979736][T15891] hub 4-1:0.132: bad descriptor, ignoring hub [ 1127.979761][T15891] hub 4-1:0.132: probe with driver hub failed with error -5 [ 1127.983423][T15891] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input82 [ 1128.545430][T23376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5317'. [ 1129.184797][T23382] syzkaller0: entered promiscuous mode [ 1129.184855][T23382] syzkaller0: entered allmulticast mode [ 1129.239782][T23382] tc mirred to Houston: device batadv_slave_0 is down [ 1129.865111][ T4971] usb 4-1: reset high-speed USB device number 50 using dummy_hcd [ 1130.063988][ T4971] usb 4-1: device firmware changed [ 1130.065431][T15891] usb 4-1: USB disconnect, device number 50 [ 1130.312340][T15891] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1130.373370][T23398] netlink: 'syz.0.5333': attribute type 7 has an invalid length. [ 1130.373390][T23398] netlink: 'syz.0.5333': attribute type 8 has an invalid length. [ 1130.373402][T23398] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5333'. [ 1130.474145][T23403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5333'. [ 1130.474777][T23398] netlink: 'syz.0.5333': attribute type 7 has an invalid length. [ 1130.474792][T23398] netlink: 'syz.0.5333': attribute type 8 has an invalid length. [ 1130.474804][T23398] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5333'. [ 1130.529210][T15891] usb 4-1: Using ep0 maxpacket: 16 [ 1130.540319][T15891] usb 4-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40 [ 1130.555068][T15891] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1130.555164][T15891] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 37, changing to 7 [ 1130.647198][T15891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.647225][T15891] usb 4-1: Product: á•»㫟ç�³á…®é¶ˆî ¥æ½‹èŸ–䮷隢锃뭚厽뺪幡᪵蠕䛌蒎竂㞊濬Ʀ᭓茦新 [ 1130.647243][T15891] usb 4-1: Manufacturer: п [ 1130.647257][T15891] usb 4-1: SerialNumber: â ‰ [ 1130.943035][T15891] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 1131.130514][T15891] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1131.179145][T23413] macvlan2: entered promiscuous mode [ 1131.179183][T23413] macvlan2: entered allmulticast mode [ 1131.179531][T23413] team0: Device macvlan2 is already an upper device of the team interface [ 1131.191864][T15891] usb 4-1: USB disconnect, device number 51 [ 1131.258319][T20359] udevd[20359]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1131.547926][T23417] trusted_key: encrypted_key: insufficient parameters specified [ 1132.008334][T23419] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5326'. [ 1132.469834][T23430] syzkaller0: entered promiscuous mode [ 1132.469859][T23430] syzkaller0: entered allmulticast mode [ 1132.612695][T23440] fuse: Bad value for 'group_id' [ 1132.612715][T23440] fuse: Bad value for 'group_id' [ 1133.710578][ T5701] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1133.873052][ T5701] usb 5-1: Using ep0 maxpacket: 8 [ 1133.877120][ T5701] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1133.877220][ T5701] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1133.879154][ T5701] usb 5-1: config 1 has an invalid descriptor of length 94, skipping remainder of the config [ 1133.879211][ T5701] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1133.879316][ T5701] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 234, changing to 7 [ 1133.943827][ T5701] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1133.943869][ T5701] usb 5-1: Product: syz [ 1133.943900][ T5701] usb 5-1: Manufacturer: syz [ 1133.943931][ T5701] usb 5-1: SerialNumber: syz [ 1137.679913][T23440] Set syz1 is full, maxelem 65536 reached [ 1140.040212][T23455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5337'. [ 1140.100928][ T5701] usb 5-1: USB disconnect, device number 121 [ 1140.225145][T23473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1140.225602][T23473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1140.295802][T23454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1140.327397][T23454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1140.444751][T23454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1140.451079][T23454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1140.485080][T23454] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1140.485107][T23454] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1140.522956][T23454] veth1_vlan: left promiscuous mode [ 1140.525567][T23454] veth0_vlan: left promiscuous mode [ 1140.527234][T23454] veth0_vlan: entered promiscuous mode [ 1140.529859][T23454] veth1_vlan: entered promiscuous mode [ 1140.553595][T23454] veth1_macvtap: left promiscuous mode [ 1140.559783][T23454] veth0_macvtap: left promiscuous mode [ 1140.569552][T23479] IPv6: Can't replace route, no match found [ 1140.573291][T23454] veth0_macvtap: entered promiscuous mode [ 1140.585017][T23454] veth1_macvtap: entered promiscuous mode [ 1140.592102][T23454] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1140.630498][T23456] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1140.664368][T23464] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1140.793275][ T5701] usb 5-1: new full-speed USB device number 122 using dummy_hcd [ 1140.978712][ T5701] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1140.979696][ T5701] usb 5-1: not running at top speed; connect to a high speed hub [ 1140.979761][ T5701] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice=92.6a [ 1140.983520][ T5701] usb 5-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 1140.989040][ T5701] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.989094][ T5701] usb 5-1: Product: syz [ 1140.989125][ T5701] usb 5-1: Manufacturer: syz [ 1140.989139][ T5701] usb 5-1: SerialNumber: syz [ 1141.149753][T23486] futex_wake_op: syz.0.5346 tries to shift op by 32; fix this program [ 1141.161873][T15891] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1141.194662][T23486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1141.212404][T23486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1141.402384][T15891] usb 4-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 1141.475028][T15891] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1141.475072][T15891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.503482][T15891] usb 4-1: config 0 descriptor?? [ 1141.504910][ T5701] usb 5-1: USB disconnect, device number 122 [ 1141.516647][T23494] netlink: 'syz.2.5349': attribute type 11 has an invalid length. [ 1141.840960][T23498] netlink: 'syz.1.5350': attribute type 4 has an invalid length. [ 1141.841000][T23498] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5350'. [ 1141.841150][T23498] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5350'. [ 1141.988961][T15891] kye 0003:0458:5013.001E: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1141.989982][T15891] kye 0003:0458:5013.001E: unknown main item tag 0x2 [ 1141.997127][T15891] kye 0003:0458:5013.001E: hidraw0: USB HID v0.00 Joystick [HID 0458:5013] on usb-dummy_hcd.3-1/input0 [ 1141.997157][T15891] kye 0003:0458:5013.001E: tablet-enabling feature report not found [ 1141.997171][T15891] kye 0003:0458:5013.001E: tablet enabling failed [ 1142.220558][ T5701] usb 4-1: USB disconnect, device number 52 [ 1142.424274][T23503] fido_id[23503]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1142.466133][T23509] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5354'. [ 1142.485761][T23509] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5354'. [ 1143.940361][T23530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5361'. [ 1143.952945][T23530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1143.984754][T23530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1144.021930][T23534] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5360'. [ 1144.040915][T23514] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5355'. [ 1144.040945][T23514] netlink: 22 bytes leftover after parsing attributes in process `syz.0.5355'. [ 1144.594402][T23540] syzkaller0: entered promiscuous mode [ 1144.594441][T23540] syzkaller0: entered allmulticast mode [ 1144.662520][T23549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1144.676476][T23549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1144.701567][T23549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1144.701997][T23549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1144.803828][T23551] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5369'. [ 1145.077220][T23551] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 1145.276899][T15380] usb 5-1: new low-speed USB device number 123 using dummy_hcd [ 1145.447484][T15380] usb 5-1: device descriptor read/64, error -71 [ 1145.452360][T23567] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5375'. [ 1145.456666][T23567] netlink: 7 bytes leftover after parsing attributes in process `syz.1.5375'. [ 1145.633987][T23569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1145.634518][T23569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1145.727563][T15380] usb 5-1: new low-speed USB device number 124 using dummy_hcd [ 1145.803117][T23572] syz_tun: entered allmulticast mode [ 1145.835121][T23572] dvmrp8: entered allmulticast mode [ 1145.861021][T23572] syz_tun: left allmulticast mode [ 1145.893991][T15380] usb 5-1: device descriptor read/64, error -71 [ 1145.921230][T23576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5378'. [ 1145.939079][T23575] loop8: detected capacity change from 0 to 8 [ 1145.950389][T23575] Dev loop8: unable to read RDB block 8 [ 1145.950481][T23575] loop8: unable to read partition table [ 1145.950912][T23575] loop8: partition table beyond EOD, truncated [ 1145.950982][T23575] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1146.007620][T15380] usb usb5-port1: attempt power cycle [ 1146.366475][T15380] usb 5-1: new low-speed USB device number 125 using dummy_hcd [ 1146.427124][T23589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1146.427540][T23589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1146.432394][T15380] usb 5-1: device descriptor read/8, error -71 [ 1146.453154][T15891] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1146.547042][T23591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1146.547511][T23591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1146.677273][T15380] usb 5-1: new low-speed USB device number 126 using dummy_hcd [ 1146.706947][T15891] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1146.757815][T15380] usb 5-1: device descriptor read/8, error -71 [ 1146.773910][T15891] usb 4-1: config 0 interface 0 altsetting 255 bulk endpoint 0x5 has invalid maxpacket 61 [ 1146.773938][T15891] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1146.875891][T15380] usb usb5-port1: unable to enumerate USB device [ 1146.909971][T15891] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1146.910001][T15891] usb 4-1: Product: syz [ 1146.910014][T15891] usb 4-1: Manufacturer: syz [ 1146.910029][T15891] usb 4-1: SerialNumber: syz [ 1146.913060][T15891] usb 4-1: config 0 descriptor?? [ 1146.926402][T23582] raw-gadget.6 gadget.3: fail, usb_ep_enable returned -22 [ 1146.947062][T15891] usb 4-1: selecting invalid altsetting 0 [ 1147.181167][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.181505][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.181851][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.182189][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.182516][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.182844][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.183188][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.183528][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.183852][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.184190][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.184528][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.184851][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.185177][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.185509][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.185832][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.186165][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.186498][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.186825][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.187180][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.187506][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.187826][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.188175][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.188531][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.188859][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.189206][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.189540][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.189865][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.190215][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.190536][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.190867][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.191221][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.191543][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.191884][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.204364][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.204700][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.205057][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.205379][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.205703][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.206042][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.206366][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.206683][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.207017][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.207334][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.207659][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.207978][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.208302][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.216071][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.216399][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.216715][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.217057][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.217376][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.217691][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.218024][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.218343][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.218671][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.218988][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.219315][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.219640][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.219982][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.220341][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.220678][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.221025][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.222191][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.222527][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.222846][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.223181][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.223498][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.223815][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.224147][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.224465][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.224781][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.225113][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.230535][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.230860][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.231450][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.231773][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.232108][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.232429][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.232747][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.233081][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.233399][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.233717][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.234051][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.234369][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.234686][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.235019][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.235341][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.235667][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.235984][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.236306][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.236633][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.236951][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.237274][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.237601][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.237918][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.238245][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.238571][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.238887][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.239220][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.239537][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.239859][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.240198][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.240523][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.240839][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.241174][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.241492][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.241808][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.246394][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.246715][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.247047][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.247364][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.247680][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.248013][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.248333][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.248660][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.249008][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.249303][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.249621][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.249949][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.250272][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.250597][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.250914][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.251251][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.251568][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.251886][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.252211][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.252535][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.252851][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.253174][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.253499][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.253815][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.254148][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.254464][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.254779][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.255110][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.255426][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.255741][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.256075][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.256390][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.256707][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.257059][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.257393][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.257760][T23582] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1147.265306][T23609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5392'. [ 1147.671897][T23608] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1147.676496][T23608] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1147.719715][T15891] usb 4-1: USB disconnect, device number 53 [ 1147.876507][T23613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1147.876936][T23613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1147.955185][T23615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1147.955621][T23615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1148.969002][T23631] fuse: Bad value for 'fd' [ 1149.006553][T23632] tap0: tun_chr_ioctl cmd 1074025677 [ 1149.006665][T23632] tap0: linktype set to 776 [ 1150.923112][T22339] Bluetooth: hci0: command 0x0406 tx timeout [ 1150.926170][ T5627] Bluetooth: hci0: Opcode 0x206a failed: -110 [ 1150.928646][T23658] fuse: Bad value for 'fd' [ 1150.950374][T23661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1150.950808][T23661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1150.961620][T23662] syzkaller0: entered promiscuous mode [ 1150.961640][T23662] syzkaller0: entered allmulticast mode [ 1151.406890][T15891] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1151.609219][T15891] usb 4-1: Using ep0 maxpacket: 8 [ 1151.644130][T15891] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1151.710907][T15891] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1151.710940][T15891] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1151.710962][T15891] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1151.710983][T15891] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1151.711020][T15891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.992897][T23680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5417'. [ 1152.015004][T15891] usb 4-1: usb_control_msg returned -71 [ 1152.015056][T15891] usbtmc 4-1:16.0: can't read capabilities [ 1152.040411][T15891] usb 4-1: USB disconnect, device number 54 [ 1152.105853][T23680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1152.106306][T23680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1152.911906][T23693] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5420'. [ 1152.921235][T23693] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5420'. [ 1152.922337][T23693] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5420'. [ 1152.922802][T23693] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5420'. [ 1153.114537][T23691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1153.137005][T23691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1153.302307][T23700] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 1153.302307][T23700] program syz.4.5422 not setting count and/or reply_len properly [ 1153.722901][ T5614] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1153.893786][ T5614] usb 5-1: Using ep0 maxpacket: 16 [ 1153.898699][ T5614] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1153.898807][ T5614] usb 5-1: New USB device found, idVendor=eb1a, idProduct=e357, bcdDevice=4f.77 [ 1153.901827][ T5614] usb 5-1: config 2 has an invalid interface number: 4 but max is 1 [ 1153.901879][ T5614] usb 5-1: config 2 has an invalid interface number: 200 but max is 1 [ 1153.901915][ T5614] usb 5-1: config 2 has no interface number 0 [ 1153.901948][ T5614] usb 5-1: config 2 has no interface number 1 [ 1153.902046][ T5614] usb 5-1: config 2 interface 4 altsetting 9 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1153.902105][ T5614] usb 5-1: config 2 interface 4 has no altsetting 0 [ 1153.902140][ T5614] usb 5-1: config 2 interface 200 has no altsetting 0 [ 1153.993801][ T5614] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1153.993862][ T5614] usb 5-1: Product: syz [ 1153.993894][ T5614] usb 5-1: Manufacturer: syz [ 1153.993926][ T5614] usb 5-1: SerialNumber: syz [ 1154.440801][T23711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1154.444492][ T30] audit: type=1326 audit(1790513600.341:6860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23708 comm="syz.0.5426" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff60ec code=0x7ffc0000 [ 1154.444540][ T30] audit: type=1326 audit(1790513600.341:6861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23708 comm="syz.0.5426" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff60ec code=0x7ffc0000 [ 1154.444582][ T30] audit: type=1326 audit(1790513600.341:6862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23708 comm="syz.0.5426" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff60ec code=0x7ffc0000 [ 1154.445501][ T30] audit: type=1326 audit(1790513600.341:6863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23708 comm="syz.0.5426" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7ff60ec code=0x7ffc0000 [ 1154.445545][ T30] audit: type=1326 audit(1790513600.341:6864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23708 comm="syz.0.5426" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff60ec code=0x7ffc0000 [ 1154.445582][ T30] audit: type=1326 audit(1790513600.341:6865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23708 comm="syz.0.5426" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff60ec code=0x7ffc0000 [ 1154.445621][ T30] audit: type=1326 audit(1790513600.341:6866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23708 comm="syz.0.5426" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff60ec code=0x7ffc0000 [ 1154.446390][ T30] audit: type=1326 audit(1790513600.341:6867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23708 comm="syz.0.5426" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7ff60ec code=0x7ffc0000 [ 1154.446434][ T30] audit: type=1326 audit(1790513600.341:6868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23708 comm="syz.0.5426" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff60ec code=0x7ffc0000 [ 1154.446470][ T30] audit: type=1326 audit(1790513600.341:6869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23708 comm="syz.0.5426" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff60ec code=0x7ffc0000 [ 1154.504656][T23713] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5426'. [ 1154.555090][T23711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1154.915361][T23715] netlink: 'syz.4.5424': attribute type 10 has an invalid length. [ 1155.072842][T23712] 8021q: adding VLAN 0 to HW filter on device team0 [ 1155.202576][T23712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1155.783252][T23721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5430'. [ 1156.180747][T23712] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1156.180772][T23712] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1156.323828][T23712] veth1_vlan: left promiscuous mode [ 1156.350773][T23712] veth0_vlan: left promiscuous mode [ 1156.371748][T23712] veth0_vlan: entered promiscuous mode [ 1156.403815][T23712] veth1_vlan: entered promiscuous mode [ 1156.439646][T23712] veth1_macvtap: left promiscuous mode [ 1156.481801][T23712] veth0_macvtap: left promiscuous mode [ 1156.483158][T23712] veth0_macvtap: entered promiscuous mode [ 1156.485188][T23712] veth1_macvtap: entered promiscuous mode [ 1156.514017][T23712] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1156.515730][T23712] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1156.517812][T23712] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1156.523692][T23712] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1156.574279][T23712] bridge0: port 3(vlan3) entered blocking state [ 1156.575862][T23712] bridge0: port 3(vlan3) entered forwarding state [ 1156.598711][T23712] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1156.627408][T23712] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1156.743245][T23712] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1156.802690][T23712] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1156.818818][T23712] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1156.842277][T23712] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1156.878166][T23712] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1157.003955][T23715] team0 (unregistering): Port device team_slave_0 removed [ 1157.023738][T23715] team0 (unregistering): Port device team_slave_1 removed [ 1157.431014][T23724] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5432'. [ 1157.431111][T23724] netlink: 7 bytes leftover after parsing attributes in process `syz.2.5432'. [ 1157.598059][ T5614] em28xx 5-1:2.4: New device syz syz @ 480 Mbps (eb1a:e357, interface 4, class 4) [ 1157.598123][ T5614] em28xx 5-1:2.4: Audio interface 4 found (Vendor Class) [ 1157.598158][ T5614] em28xx 5-1:2.4: em28xx: device seems to have vendor AND usb audio class interfaces ! [ 1157.598158][ T5614] The vendor interface will be ignored. Please contact the developers [ 1157.669391][T19485] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.669439][T19485] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.669472][T19485] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.669504][T19485] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.673816][ T5614] em28xx 5-1:2.4: unknown em28xx chip ID (0) [ 1157.674507][ T5614] em28xx 5-1:2.4: Config register raw data: 0xfffffffb [ 1157.675126][ T5614] em28xx 5-1:2.4: AC97 chip type couldn't be determined [ 1157.675158][ T5614] em28xx 5-1:2.4: No AC97 audio processor [ 1157.727395][ T5614] em28xx 5-1:2.200: audio device (eb1a:e357): interface 200, class 1 [ 1157.749813][ T5614] usb 5-1: USB disconnect, device number 127 [ 1157.771413][ T5614] em28xx 5-1:2.4: Disconnecting em28xx [ 1157.793153][T23734] No such timeout policy "nl80211" [ 1157.793173][T23734] netlink: Failed to associated timeout policy 'nl80211' [ 1157.846773][ T5614] em28xx: Freeing device [ 1158.735744][T23752] netlink: 'syz.2.5441': attribute type 1 has an invalid length. [ 1158.860786][T23752] bond3: entered promiscuous mode [ 1158.861251][T23752] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1158.893094][T23755] sch_tbf: burst 25 is lower than device ip6gre0 mtu (1536) ! [ 1158.925112][T23757] vlan4: entered allmulticast mode [ 1158.925133][T23757] bond3: entered allmulticast mode [ 1159.316942][T23765] netlink: 'syz.2.5443': attribute type 4 has an invalid length. [ 1159.316965][T23765] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5443'. [ 1159.317028][T23765] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5443'. [ 1159.617218][T23771] netlink: 'syz.0.5445': attribute type 4 has an invalid length. [ 1159.617348][T23771] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5445'. [ 1159.617614][T23771] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5445'. [ 1159.749764][T23776] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5447'. [ 1160.456143][T23782] loop5: detected capacity change from 0 to 7 [ 1160.480926][T23782] Dev loop5: unable to read RDB block 7 [ 1160.480971][T23782] loop5: unable to read partition table [ 1160.481185][T23782] loop5: partition table beyond EOD, truncated [ 1160.481218][T23782] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1160.554081][T23785] netlink: 'syz.3.5448': attribute type 10 has an invalid length. [ 1161.519912][T23791] netlink: 84 bytes leftover after parsing attributes in process `syz.3.5451'. [ 1161.741439][T23796] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5453'. [ 1161.826296][T23799] FAULT_INJECTION: forcing a failure. [ 1161.826296][T23799] name failslab, interval 1, probability 0, space 0, times 0 [ 1161.826320][T23799] CPU: 1 UID: 0 PID: 23799 Comm: syz.2.5454 Tainted: G L syzkaller #0 PREEMPT(full) [ 1161.826335][T23799] Tainted: [L]=SOFTLOCKUP [ 1161.826339][T23799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1161.826345][T23799] Call Trace: [ 1161.826351][T23799] [ 1161.826356][T23799] dump_stack_lvl+0xe8/0x150 [ 1161.826375][T23799] should_fail_ex+0x410/0x560 [ 1161.826390][T23799] ? __alloc_skb+0x1db/0x7a0 [ 1161.826404][T23799] should_failslab+0xa8/0x100 [ 1161.826418][T23799] ? __alloc_skb+0x1db/0x7a0 [ 1161.826429][T23799] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1161.826446][T23799] ? __alloc_skb+0x18d/0x7a0 [ 1161.826458][T23799] ? __alloc_skb+0x1db/0x7a0 [ 1161.826473][T23799] __alloc_skb+0x1db/0x7a0 [ 1161.826488][T23799] netlink_ack+0x136/0xb30 [ 1161.826503][T23799] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1161.826523][T23799] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1161.826635][T23799] netlink_rcv_skb+0x2a4/0x4a0 [ 1161.826651][T23799] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1161.826664][T23799] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1161.826704][T23799] ? down_read+0x2be/0x330 [ 1161.826721][T23799] genl_rcv+0x28/0x40 [ 1161.826732][T23799] netlink_unicast+0x7bd/0x940 [ 1161.826752][T23799] netlink_sendmsg+0x813/0xb40 [ 1161.826767][T23799] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1161.826781][T23799] ? apparmor_socket_sendmsg+0x98/0x360 [ 1161.826795][T23799] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1161.826804][T23799] sock_sendmsg_nosec+0x13a/0x180 [ 1161.826818][T23799] ____sys_sendmsg+0x54e/0x850 [ 1161.826835][T23799] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1161.826857][T23799] ___sys_sendmsg+0x2a5/0x360 [ 1161.826870][T23799] ? __lock_acquire+0x747/0x2de0 [ 1161.826883][T23799] ? __pfx____sys_sendmsg+0x10/0x10 [ 1161.826896][T23799] ? get_pid_task+0x20/0x1f0 [ 1161.826906][T23799] ? get_pid_task+0x20/0x1f0 [ 1161.826915][T23799] ? get_pid_task+0x20/0x1f0 [ 1161.826940][T23799] ? __fget_files+0x2a/0x420 [ 1161.826954][T23799] ? __fget_files+0x3a2/0x420 [ 1161.826972][T23799] __sys_sendmsg+0x177/0x240 [ 1161.826984][T23799] ? irqentry_exit+0x218/0x910 [ 1161.826998][T23799] ? __pfx___sys_sendmsg+0x10/0x10 [ 1161.827021][T23799] __do_fast_syscall_32+0x27a/0x6a0 [ 1161.827035][T23799] ? do_fast_syscall_32+0x33/0x70 [ 1161.827048][T23799] ? asm_int80_emulation+0x1a/0x20 [ 1161.827059][T23799] ? do_int80_emulation+0x299/0x500 [ 1161.827074][T23799] do_fast_syscall_32+0x33/0x70 [ 1161.827088][T23799] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1161.827100][T23799] RIP: 0023:0xf706f0ec [ 1161.827111][T23799] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1161.827120][T23799] RSP: 002b:00000000f545d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1161.827132][T23799] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000400 [ 1161.827140][T23799] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1161.827146][T23799] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1161.827152][T23799] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1161.827158][T23799] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1161.827173][T23799] [ 1162.347543][T23801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1162.348004][T23801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1162.386999][T23803] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5455'. [ 1162.570194][T23806] syz_tun: entered promiscuous mode [ 1162.603227][T23806] syz_tun: left promiscuous mode [ 1162.675507][T23808] vlan6: entered allmulticast mode [ 1162.675545][T23808] bridge5: entered allmulticast mode [ 1162.832574][T23812] tipc: Enabled bearer , priority 0 [ 1162.884910][T23818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1162.885959][T23818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1163.339122][T23828] veth0: entered promiscuous mode [ 1163.339317][T23828] vlan5: entered promiscuous mode [ 1163.388327][T23829] netlink: 'syz.4.5463': attribute type 4 has an invalid length. [ 1163.388348][T23829] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5463'. [ 1163.388395][T23829] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5463'. [ 1163.623573][T23834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5467'. [ 1163.738576][T23811] tipc: Disabling bearer [ 1163.910578][T23836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1163.913988][T23836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1164.266838][T23844] fuse: Bad value for 'fd' [ 1164.393943][T23846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1164.403159][T23846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1164.548723][T23832] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1164.640787][T23852] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 1164.640821][T23852] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1165.050399][ T30] kauditd_printk_skb: 336 callbacks suppressed [ 1165.050418][ T30] audit: type=1326 audit(1790513610.941:7206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23855 comm="syz.2.5473" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 1165.050690][ T30] audit: type=1326 audit(1790513610.941:7207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23855 comm="syz.2.5473" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 1165.057063][ T30] audit: type=1326 audit(1790513610.961:7208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23855 comm="syz.2.5473" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 1165.065454][ T30] audit: type=1326 audit(1790513610.961:7209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23855 comm="syz.2.5473" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 1165.065507][ T30] audit: type=1326 audit(1790513610.961:7210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23855 comm="syz.2.5473" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 1165.065547][ T30] audit: type=1326 audit(1790513610.961:7211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23855 comm="syz.2.5473" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 1165.093603][ T30] audit: type=1326 audit(1790513610.961:7212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23855 comm="syz.2.5473" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 1165.093732][ T30] audit: type=1326 audit(1790513610.961:7213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23855 comm="syz.2.5473" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 1165.093806][ T30] audit: type=1326 audit(1790513610.961:7214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23855 comm="syz.2.5473" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 1165.123450][ T30] audit: type=1326 audit(1790513611.011:7215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23855 comm="syz.2.5473" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 1165.240896][T23859] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5473'. [ 1165.939408][T23858] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1166.051962][T23861] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 1166.062803][T18391] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 1166.062849][T18391] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 1166.062883][T18391] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 1166.062915][T18391] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 1166.434918][T23876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1166.435382][T23876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1166.480084][T23873] netlink: 766 bytes leftover after parsing attributes in process `syz.1.5478'. [ 1166.789038][T23888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1166.792478][T23888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1166.990437][T15891] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 1167.047100][T23891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1167.048189][T23891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1167.088801][T23888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1167.089236][T23888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1167.251535][T23899] netlink: 'syz.2.5487': attribute type 4 has an invalid length. [ 1167.251576][T23899] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5487'. [ 1167.251680][T23899] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5487'. [ 1167.276586][T15891] usb 5-1: device descriptor read/all, error -71 [ 1167.477390][T23904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1167.494895][T23904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1167.955611][T23911] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5491'. [ 1168.030258][T23910] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5492'. [ 1168.033499][ T25] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1168.039882][T23911] bond0: entered promiscuous mode [ 1168.039921][T23911] bond0: entered allmulticast mode [ 1168.040682][T23911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1168.215116][ T25] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1168.216738][ T25] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1168.216757][ T25] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1168.216780][ T25] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1168.221301][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.221327][ T25] usb 4-1: Product: syz [ 1168.221335][ T25] usb 4-1: Manufacturer: syz [ 1168.221342][ T25] usb 4-1: SerialNumber: syz [ 1168.299978][ T25] usb 4-1: config 0 descriptor?? [ 1168.318286][T23906] raw-gadget.6 gadget.3: fail, usb_ep_enable returned -22 [ 1168.318396][T23906] raw-gadget.6 gadget.3: fail, usb_ep_enable returned -22 [ 1168.322909][ T25] usb 4-1: ucan: probing device on interface #0 [ 1168.702519][T23921] fuse: Bad value for 'group_id' [ 1168.702537][T23921] fuse: Bad value for 'group_id' [ 1168.756065][T23921] bridge_slave_1: entered promiscuous mode [ 1168.785883][T23921] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1169.107673][ T25] ucan 4-1:0.0 can0: registered device [ 1169.367730][T23936] netlink: 100 bytes leftover after parsing attributes in process `syz.0.5502'. [ 1169.367753][T23936] netlink: 100 bytes leftover after parsing attributes in process `syz.0.5502'. [ 1169.368575][T23936] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5502'. [ 1169.428675][T23936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1169.429958][T23936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1169.453883][T23936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1169.454933][T23936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1169.466552][T23938] netlink: 100 bytes leftover after parsing attributes in process `syz.0.5502'. [ 1169.466620][T23938] netlink: 100 bytes leftover after parsing attributes in process `syz.0.5502'. [ 1169.500674][T23938] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5502'. [ 1169.525339][T23936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1169.530964][T23936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1169.537472][T23940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1169.545580][T23940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1169.554286][ T25] ucan 4-1:0.0 can0: firmware string: unknown [ 1169.603437][ T25] usb 4-1: USB disconnect, device number 55 [ 1170.060236][T23949] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 1170.414266][T15646] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1170.649302][T15646] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1170.658674][T23967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1170.659090][T23967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1170.659529][T23968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1170.659942][T23968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1170.728047][T15646] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1170.728079][T15646] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1170.728103][T15646] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1170.872101][T15646] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1170.872129][T15646] usb 5-1: Product: syz [ 1170.872143][T15646] usb 5-1: Manufacturer: syz [ 1170.872155][T15646] usb 5-1: SerialNumber: syz [ 1170.875966][T15646] usb 5-1: config 0 descriptor?? [ 1170.888824][T23952] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1170.888936][T23952] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1170.912105][T15646] usb 5-1: ucan: probing device on interface #0 [ 1171.151403][T23965] netlink: 'syz.3.5511': attribute type 4 has an invalid length. [ 1171.151442][T23965] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5511'. [ 1171.151538][T23965] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5511'. [ 1171.212037][T23971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1171.220274][T23971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1171.256008][T23971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1171.256402][T23971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1171.505235][T23975] dlm: non-version read from control device 8224 [ 1171.526739][T23971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1171.527243][T23971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1171.551849][T23971] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5513'. [ 1171.629072][T15646] ucan 5-1:0.0 can0: registered device [ 1171.924802][T15646] ucan 5-1:0.0 can0: firmware string: unknown [ 1171.959805][T15646] usb 5-1: USB disconnect, device number 4 [ 1172.208864][T23982] FAULT_INJECTION: forcing a failure. [ 1172.208864][T23982] name failslab, interval 1, probability 0, space 0, times 0 [ 1172.208930][T23982] CPU: 1 UID: 0 PID: 23982 Comm: syz.3.5517 Tainted: G L syzkaller #0 PREEMPT(full) [ 1172.208957][T23982] Tainted: [L]=SOFTLOCKUP [ 1172.208964][T23982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1172.208975][T23982] Call Trace: [ 1172.208984][T23982] [ 1172.208993][T23982] dump_stack_lvl+0xe8/0x150 [ 1172.209025][T23982] should_fail_ex+0x410/0x560 [ 1172.209054][T23982] should_failslab+0xa8/0x100 [ 1172.209079][T23982] __kmalloc_noprof+0xfe/0x720 [ 1172.209098][T23982] ? __kmalloc_noprof+0x1ab/0x720 [ 1172.209113][T23982] ? __vb2_queue_alloc+0x2a0/0x1660 [ 1172.209138][T23982] ? __vb2_queue_alloc+0x2a0/0x1660 [ 1172.209169][T23982] __vb2_queue_alloc+0x2a0/0x1660 [ 1172.209216][T23982] vb2_core_reqbufs+0xc3f/0x1470 [ 1172.209259][T23982] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 1172.209289][T23982] ? __video_do_ioctl+0x473/0xc70 [ 1172.209311][T23982] ? vb2_verify_memory_type+0x1fc/0x570 [ 1172.209338][T23982] vb2_ioctl_reqbufs+0x4bb/0x850 [ 1172.209377][T23982] __video_do_ioctl+0x8af/0xc70 [ 1172.209406][T23982] ? __pfx___video_do_ioctl+0x10/0x10 [ 1172.209439][T23982] video_usercopy+0x860/0x1430 [ 1172.209475][T23982] ? __pfx___video_do_ioctl+0x10/0x10 [ 1172.209496][T23982] ? __pfx_video_usercopy+0x10/0x10 [ 1172.209533][T23982] ? __fget_files+0x2a/0x420 [ 1172.209563][T23982] v4l2_ioctl+0x18d/0x1e0 [ 1172.209595][T23982] v4l2_compat_ioctl32+0x1c4/0x270 [ 1172.209623][T23982] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 1172.209649][T23982] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1172.209670][T23982] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1172.209697][T23982] ? __fget_files+0x3a2/0x420 [ 1172.209728][T23982] ? fput+0xa0/0xd0 [ 1172.209751][T23982] ? ksys_write+0x242/0x270 [ 1172.209790][T23982] __do_fast_syscall_32+0x27a/0x6a0 [ 1172.209817][T23982] ? do_fast_syscall_32+0x33/0x70 [ 1172.209842][T23982] ? asm_int80_emulation+0x1a/0x20 [ 1172.209860][T23982] ? do_int80_emulation+0x299/0x500 [ 1172.209890][T23982] do_fast_syscall_32+0x33/0x70 [ 1172.209914][T23982] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1172.209936][T23982] RIP: 0023:0xf7f590ec [ 1172.209954][T23982] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1172.209969][T23982] RSP: 002b:00000000f541650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1172.209990][T23982] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0145608 [ 1172.210003][T23982] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1172.210014][T23982] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1172.210026][T23982] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1172.210037][T23982] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1172.210066][T23982] [ 1172.598953][T23989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1172.599878][T23989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1172.870703][T23996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5524'. [ 1173.029301][T24005] fuse: Bad value for 'group_id' [ 1173.029339][T24005] fuse: Bad value for 'group_id' [ 1173.252885][ T25] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1173.415588][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 1173.432453][ T25] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1173.432555][ T25] usb 5-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 1173.455466][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.455524][ T25] usb 5-1: Product: 5ć￿￿ [ 1173.455558][ T25] usb 5-1: SerialNumber: syz [ 1173.561173][ T25] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 1173.941756][ T25] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1173.997103][ T25] usb 5-1: USB disconnect, device number 5 [ 1174.157860][T20359] udevd[20359]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1174.171132][T24016] ovs-dp0: entered promiscuous mode [ 1175.242836][T15646] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1175.501972][T15646] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1175.575301][T15646] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1175.575332][T15646] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1175.575355][T15646] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1175.759975][ T25] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1175.774947][T15646] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1175.774976][T15646] usb 5-1: Product: syz [ 1175.774989][T15646] usb 5-1: Manufacturer: syz [ 1175.775003][T15646] usb 5-1: SerialNumber: syz [ 1175.803875][T15646] usb 5-1: config 0 descriptor?? [ 1175.810713][T24027] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1175.810831][T24027] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1175.828639][T15646] usb 5-1: ucan: probing device on interface #0 [ 1175.960628][ T25] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1175.980043][ T25] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1175.980119][ T25] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1175.980154][ T25] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1175.980381][ T25] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1175.980442][ T25] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1175.997675][ T25] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1175.997739][ T25] usb 4-1: Product: syz [ 1175.997771][ T25] usb 4-1: Manufacturer: syz [ 1176.111315][ T25] cdc_wdm 4-1:1.0: skipping garbage [ 1176.111354][ T25] cdc_wdm 4-1:1.0: skipping garbage [ 1176.237579][ T25] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1176.237739][ T25] cdc_wdm 4-1:1.0: Unknown control protocol [ 1176.320129][T24033] syzkaller0: entered promiscuous mode [ 1176.450072][T24029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1176.450517][T24029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1176.616303][T15646] ucan 5-1:0.0 can0: registered device [ 1176.707812][T24029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1176.709424][T24029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1176.731930][T24029] __nla_validate_parse: 1 callbacks suppressed [ 1176.731968][T24029] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5534'. [ 1176.927173][T24038] bond11: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1176.933927][T24038] bond11: (slave lo): Enslaving as an active interface with an up link [ 1176.968464][T24038] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1177.222278][T15646] ucan 5-1:0.0 can0: firmware string: unknown [ 1177.227302][T15646] usb 5-1: USB disconnect, device number 6 [ 1177.277048][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.286465][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.542106][ T25] usb 4-1: USB disconnect, device number 56 [ 1177.613083][T24044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1177.613543][T24044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1177.696545][T24046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1177.698846][T24046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1178.807884][ T30] kauditd_printk_skb: 73 callbacks suppressed [ 1178.807921][ T30] audit: type=1400 audit(1790513624.711:7289): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//(@\)//&@},['%%&\#*" pid=24057 comm="syz.0.5544" [ 1179.585316][T24078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1179.587775][T24078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1179.879685][T24085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1179.881908][T24085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1179.912390][T24085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1179.913389][T24085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1180.145867][T24085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1180.181134][T24085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1180.216000][T24085] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5552'. [ 1180.588189][T24005] Set syz1 is full, maxelem 65536 reached [ 1181.362951][ T25] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1181.447557][T24105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5559'. [ 1181.448018][T24107] loop8: detected capacity change from 0 to 8 [ 1181.480167][T24107] Dev loop8: unable to read RDB block 8 [ 1181.480264][T24107] loop8: unable to read partition table [ 1181.480715][T24107] loop8: partition table beyond EOD, truncated [ 1181.480749][T24107] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1181.543477][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 1181.618314][ T25] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1181.618417][ T25] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 1181.618484][ T25] usb 5-1: no configurations [ 1181.618540][ T25] usb 5-1: can't read configurations, error -22 [ 1181.996795][T24118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1182.012128][T24118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1182.414019][T24126] syzkaller0: entered promiscuous mode [ 1182.414041][T24126] syzkaller0: entered allmulticast mode [ 1182.513810][T24126] 0: reclassify loop, rule prio 0, protocol 800 [ 1182.763103][T24127] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5567'. [ 1182.979269][T24134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5571'. [ 1182.990946][T24134] vlan7: entered allmulticast mode [ 1183.329697][T24138] syzkaller0: entered promiscuous mode [ 1183.719041][T24148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1183.720769][T24148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1183.824327][T24150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1183.825154][T24150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1183.913987][T24152] netlink: 'syz.1.5578': attribute type 23 has an invalid length. [ 1184.648857][T24174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5588'. [ 1184.720313][T15891] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 1184.741835][T24179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5590'. [ 1184.742389][T24179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5590'. [ 1184.743403][T24179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5590'. [ 1184.743914][T24179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5590'. [ 1184.884113][T15891] usb 5-1: device descriptor read/64, error -71 [ 1185.137473][T15891] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 1185.295035][T15891] usb 5-1: device descriptor read/64, error -71 [ 1185.414872][T15891] usb usb5-port1: attempt power cycle [ 1185.473126][T24202] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5594'. [ 1185.751402][T15891] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 1185.774919][T24209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5597'. [ 1185.775690][T24209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5597'. [ 1185.817497][T15891] usb 5-1: device descriptor read/8, error -71 [ 1186.074077][T15891] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 1186.141813][T15891] usb 5-1: device descriptor read/8, error -71 [ 1186.248568][T15891] usb usb5-port1: unable to enumerate USB device [ 1187.263630][T24225] syzkaller0: entered promiscuous mode [ 1187.263654][T24225] syzkaller0: entered allmulticast mode [ 1187.347909][T24225] 0: reclassify loop, rule prio 0, protocol 800 [ 1187.621609][T24232] No such timeout policy "nl80211" [ 1187.621627][T24232] netlink: Failed to associated timeout policy 'nl80211' [ 1187.739553][T24236] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 1187.946666][T24239] syzkaller0: entered promiscuous mode [ 1187.946690][T24239] syzkaller0: entered allmulticast mode [ 1187.976580][T24239] 0: reclassify loop, rule prio 0, protocol 800 [ 1188.043128][T24242] netlink: 'syz.2.5609': attribute type 23 has an invalid length. [ 1188.482108][T24255] fuse: Unknown parameter 'gro[p_id' [ 1188.504716][ T5614] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1188.639821][T24260] __nla_validate_parse: 1 callbacks suppressed [ 1188.639858][T24260] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5615'. [ 1188.684493][ T5614] usb 5-1: Using ep0 maxpacket: 32 [ 1188.685657][ T5614] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1188.687095][ T5614] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1188.729121][ T5614] usb 5-1: config 0 descriptor?? [ 1188.821126][T24262] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1188.950081][ T5614] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1188.966202][ T5614] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1188.969159][ T5614] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1188.969279][ T5614] usb 5-1: media controller created [ 1188.999061][T24264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1188.999489][T24264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1189.038034][ T5614] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1189.086474][T24266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1189.086936][T24266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1189.175013][ T5614] az6027: usb out operation failed. (-71) [ 1189.175626][ T5614] az6027: usb out operation failed. (-71) [ 1189.175666][ T5614] stb0899_attach: Driver disabled by Kconfig [ 1189.175695][ T5614] az6027: no front-end attached [ 1189.175695][ T5614] [ 1189.176223][ T5614] az6027: usb out operation failed. (-71) [ 1189.176255][ T5614] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1189.182011][ T5614] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input86 [ 1189.241958][ T5614] dvb-usb: schedule remote query interval to 400 msecs. [ 1189.241981][ T5614] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1189.264744][ T5614] usb 5-1: USB disconnect, device number 13 [ 1189.386819][ T5614] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1189.803255][T24280] syz_tun: entered promiscuous mode [ 1189.820163][T24278] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5625'. [ 1189.831356][T24280] syz_tun: left promiscuous mode [ 1189.870604][T24282] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5627'. [ 1189.930846][T24282] vlan4: entered allmulticast mode [ 1189.930867][T24282] bridge5: entered allmulticast mode [ 1190.082232][T24286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1190.082672][T24286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1190.149051][T24288] vlan5: entered promiscuous mode [ 1190.259717][T24294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1190.273818][T24294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1190.315829][T24294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1190.316272][T24294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1190.355682][T24297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1190.356113][T24297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1190.395955][T24297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1190.396400][T24297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1190.614428][T15380] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1190.717596][T24306] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 1190.717627][T24306] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1190.855759][T15380] usb 5-1: Using ep0 maxpacket: 32 [ 1190.992082][T15380] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1190.992137][T15380] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 1190.993868][T24314] binder: 24313:24314 ioctl 4008af75 0 returned -22 [ 1191.056918][T24317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1191.057362][T24317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1191.065146][T15380] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1023 [ 1191.163822][T24321] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 1191.204586][T15380] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.204618][T15380] usb 5-1: Product: syz [ 1191.204633][T15380] usb 5-1: Manufacturer: syz [ 1191.204646][T15380] usb 5-1: SerialNumber: syz [ 1191.221603][T24296] raw-gadget.7 gadget.4: fail, usb_ep_enable returned -22 [ 1191.516649][T15380] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1191.636807][T15380] usb 5-1: USB disconnect, device number 14 [ 1191.723182][T24329] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5644'. [ 1191.723318][T24329] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5644'. [ 1191.767940][T21011] udevd[21011]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1192.124968][T24338] openvswitch: netlink: Actions may not be safe on all matching packets [ 1192.220153][T24342] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5649'. [ 1192.357770][T24346] loop2: detected capacity change from 0 to 7 [ 1192.362379][T24346] Dev loop2: unable to read RDB block 7 [ 1192.362422][T24346] loop2: AHDI p1 p2 p3 [ 1192.362447][T24346] loop2: partition table partially beyond EOD, truncated [ 1192.380426][T24346] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1192.380450][T24346] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1192.669616][T24353] FAULT_INJECTION: forcing a failure. [ 1192.669616][T24353] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1192.669670][T24353] CPU: 1 UID: 0 PID: 24353 Comm: syz.1.5654 Tainted: G L syzkaller #0 PREEMPT(full) [ 1192.669696][T24353] Tainted: [L]=SOFTLOCKUP [ 1192.669704][T24353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1192.669716][T24353] Call Trace: [ 1192.669724][T24353] [ 1192.669741][T24353] dump_stack_lvl+0xe8/0x150 [ 1192.669774][T24353] should_fail_ex+0x410/0x560 [ 1192.669802][T24353] _copy_from_user+0x2d/0xb0 [ 1192.669828][T24353] get_compat_msghdr+0xb3/0x4c0 [ 1192.669848][T24353] ? irqentry_exit+0x218/0x910 [ 1192.669874][T24353] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1192.669889][T24353] ? irqentry_exit+0x218/0x910 [ 1192.669925][T24353] ___sys_sendmsg+0x201/0x360 [ 1192.669951][T24353] ? __lock_acquire+0x747/0x2de0 [ 1192.669976][T24353] ? __pfx____sys_sendmsg+0x10/0x10 [ 1192.670001][T24353] ? get_pid_task+0x20/0x1f0 [ 1192.670020][T24353] ? get_pid_task+0x20/0x1f0 [ 1192.670036][T24353] ? get_pid_task+0x20/0x1f0 [ 1192.670083][T24353] ? __fget_files+0x2a/0x420 [ 1192.670108][T24353] ? __fget_files+0x3a2/0x420 [ 1192.670143][T24353] __sys_sendmsg+0x177/0x240 [ 1192.670171][T24353] ? __pfx___sys_sendmsg+0x10/0x10 [ 1192.670216][T24353] __do_fast_syscall_32+0x27a/0x6a0 [ 1192.670243][T24353] ? do_fast_syscall_32+0x33/0x70 [ 1192.670268][T24353] ? asm_int80_emulation+0x1a/0x20 [ 1192.670286][T24353] ? do_int80_emulation+0x299/0x500 [ 1192.670316][T24353] do_fast_syscall_32+0x33/0x70 [ 1192.670342][T24353] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1192.670365][T24353] RIP: 0023:0xf7f870ec [ 1192.670382][T24353] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1192.670398][T24353] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1192.670419][T24353] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000280 [ 1192.670433][T24353] RDX: 0000000000004010 RSI: 0000000000000000 RDI: 0000000000000000 [ 1192.670445][T24353] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1192.670456][T24353] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1192.670468][T24353] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1192.670496][T24353] [ 1193.004685][T24364] fuse: Unknown parameter '01777777777777777777777' [ 1193.761961][T24380] syzkaller0: entered promiscuous mode [ 1193.761984][T24380] syzkaller0: entered allmulticast mode [ 1193.811208][T24384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5664'. [ 1193.834772][T24369] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1193.834800][T24369] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1193.867260][T24369] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1193.869358][T24369] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1193.870587][T24369] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1193.871892][T24369] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1193.873089][T24369] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1193.913809][T24369] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1193.933493][T24369] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1193.933524][T24369] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1194.160392][T24390] fuse: Unknown parameter 'roo2 ±q¢ 0000000000000000000' [ 1194.536727][T24402] netlink: 'syz.3.5670': attribute type 15 has an invalid length. [ 1194.638169][T24408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5671'. [ 1195.515601][T24423] FAULT_INJECTION: forcing a failure. [ 1195.515601][T24423] name failslab, interval 1, probability 0, space 0, times 0 [ 1195.515653][T24423] CPU: 1 UID: 0 PID: 24423 Comm: syz.3.5678 Tainted: G L syzkaller #0 PREEMPT(full) [ 1195.515678][T24423] Tainted: [L]=SOFTLOCKUP [ 1195.515686][T24423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1195.515698][T24423] Call Trace: [ 1195.515706][T24423] [ 1195.515715][T24423] dump_stack_lvl+0xe8/0x150 [ 1195.515754][T24423] should_fail_ex+0x410/0x560 [ 1195.515783][T24423] should_failslab+0xa8/0x100 [ 1195.515806][T24423] ? skb_clone+0x212/0x3a0 [ 1195.515834][T24423] kmem_cache_alloc_noprof+0xa1/0x600 [ 1195.515865][T24423] ? skb_clone+0x212/0x3a0 [ 1195.515898][T24423] skb_clone+0x212/0x3a0 [ 1195.515928][T24423] __netlink_deliver_tap+0x413/0x860 [ 1195.515960][T24423] ? netlink_deliver_tap+0x2e/0x1b0 [ 1195.515978][T24423] netlink_deliver_tap+0x19c/0x1b0 [ 1195.515999][T24423] netlink_unicast+0x781/0x940 [ 1195.516037][T24423] netlink_sendmsg+0x813/0xb40 [ 1195.516066][T24423] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1195.516094][T24423] ? apparmor_socket_sendmsg+0x98/0x360 [ 1195.516117][T24423] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1195.516135][T24423] sock_sendmsg_nosec+0x13a/0x180 [ 1195.516158][T24423] ____sys_sendmsg+0x54e/0x850 [ 1195.516188][T24423] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1195.516229][T24423] ___sys_sendmsg+0x2a5/0x360 [ 1195.516250][T24423] ? __lock_acquire+0x747/0x2de0 [ 1195.516269][T24423] ? __pfx____sys_sendmsg+0x10/0x10 [ 1195.516292][T24423] ? get_pid_task+0x20/0x1f0 [ 1195.516309][T24423] ? get_pid_task+0x20/0x1f0 [ 1195.516323][T24423] ? get_pid_task+0x20/0x1f0 [ 1195.516365][T24423] ? __fget_files+0x2a/0x420 [ 1195.516388][T24423] ? __fget_files+0x3a2/0x420 [ 1195.516420][T24423] __sys_sendmsg+0x177/0x240 [ 1195.516445][T24423] ? __pfx___sys_sendmsg+0x10/0x10 [ 1195.516489][T24423] __do_fast_syscall_32+0x27a/0x6a0 [ 1195.516514][T24423] ? do_fast_syscall_32+0x33/0x70 [ 1195.516537][T24423] ? asm_int80_emulation+0x1a/0x20 [ 1195.516554][T24423] ? do_int80_emulation+0x299/0x500 [ 1195.516582][T24423] do_fast_syscall_32+0x33/0x70 [ 1195.516608][T24423] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1195.516630][T24423] RIP: 0023:0xf7f590ec [ 1195.516648][T24423] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1195.516663][T24423] RSP: 002b:00000000f541650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1195.516683][T24423] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001000 [ 1195.516695][T24423] RDX: 0000000004008000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1195.516707][T24423] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1195.516726][T24423] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1195.516738][T24423] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1195.516767][T24423] [ 1195.533764][ T5627] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1195.551658][ T5627] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1195.569640][ T5627] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1195.589813][ T5627] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1195.590426][ T5627] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1195.723916][T22339] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1195.795056][T22339] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1195.823672][T22339] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1195.853359][T22339] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1195.853923][T22339] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1196.239808][T24435] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1196.267819][T24436] netlink: 'syz.4.5682': attribute type 10 has an invalid length. [ 1196.284732][T24435] netlink: 'syz.4.5682': attribute type 10 has an invalid length. [ 1196.379818][T24436] ipvlan0: entered allmulticast mode [ 1196.379840][T24436] veth0_vlan: entered allmulticast mode [ 1196.402811][T24441] FAULT_INJECTION: forcing a failure. [ 1196.402811][T24441] name failslab, interval 1, probability 0, space 0, times 0 [ 1196.402844][T24441] CPU: 0 UID: 0 PID: 24441 Comm: syz.3.5683 Tainted: G L syzkaller #0 PREEMPT(full) [ 1196.402869][T24441] Tainted: [L]=SOFTLOCKUP [ 1196.402876][T24441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1196.402887][T24441] Call Trace: [ 1196.402895][T24441] [ 1196.402903][T24441] dump_stack_lvl+0xe8/0x150 [ 1196.402934][T24441] should_fail_ex+0x410/0x560 [ 1196.402963][T24441] should_failslab+0xa8/0x100 [ 1196.402990][T24441] __kmalloc_noprof+0xfe/0x720 [ 1196.403010][T24441] ? __kmalloc_noprof+0x1ab/0x720 [ 1196.403027][T24441] ? __vb2_queue_alloc+0x2a0/0x1660 [ 1196.403053][T24441] ? __vb2_queue_alloc+0x2a0/0x1660 [ 1196.403086][T24441] __vb2_queue_alloc+0x2a0/0x1660 [ 1196.403139][T24441] vb2_core_reqbufs+0xc3f/0x1470 [ 1196.403182][T24441] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 1196.403213][T24441] ? __video_do_ioctl+0x473/0xc70 [ 1196.403236][T24441] ? vb2_verify_memory_type+0x1fc/0x570 [ 1196.403266][T24441] vb2_ioctl_reqbufs+0x4bb/0x850 [ 1196.403316][T24441] __video_do_ioctl+0x8af/0xc70 [ 1196.403345][T24441] ? __pfx___video_do_ioctl+0x10/0x10 [ 1196.403378][T24441] video_usercopy+0x860/0x1430 [ 1196.403405][T24441] ? __pfx___video_do_ioctl+0x10/0x10 [ 1196.403426][T24441] ? __pfx_video_usercopy+0x10/0x10 [ 1196.403463][T24441] ? __fget_files+0x2a/0x420 [ 1196.403493][T24441] v4l2_ioctl+0x18d/0x1e0 [ 1196.403525][T24441] v4l2_compat_ioctl32+0x1c4/0x270 [ 1196.403553][T24441] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 1196.403578][T24441] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1196.403600][T24441] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1196.403629][T24441] ? __fget_files+0x3a2/0x420 [ 1196.403661][T24441] ? fput+0xa0/0xd0 [ 1196.403684][T24441] ? ksys_write+0x242/0x270 [ 1196.403723][T24441] __do_fast_syscall_32+0x27a/0x6a0 [ 1196.403751][T24441] ? do_fast_syscall_32+0x33/0x70 [ 1196.403780][T24441] ? asm_int80_emulation+0x1a/0x20 [ 1196.403799][T24441] ? do_int80_emulation+0x299/0x500 [ 1196.403823][T24441] ? trace_irq_disable+0x3b/0x140 [ 1196.403847][T24441] do_fast_syscall_32+0x33/0x70 [ 1196.403873][T24441] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1196.403896][T24441] RIP: 0023:0xf7f590ec [ 1196.403914][T24441] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1196.403930][T24441] RSP: 002b:00000000f541650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1196.403950][T24441] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0145608 [ 1196.403965][T24441] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1196.403976][T24441] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1196.403988][T24441] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1196.403999][T24441] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1196.404029][T24441] [ 1197.126703][T24453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5689'. [ 1197.155074][T24453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5689'. [ 1197.333600][ T25] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1197.337140][T18391] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1197.475718][ T30] audit: type=1326 audit(1790513643.371:7290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24462 comm="syz.2.5693" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 1197.479131][ T30] audit: type=1326 audit(1790513643.371:7291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24462 comm="syz.2.5693" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 1197.509497][ T30] audit: type=1326 audit(1790513643.411:7292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24462 comm="syz.2.5693" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 1197.509541][ T30] audit: type=1326 audit(1790513643.411:7293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24462 comm="syz.2.5693" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 1197.536934][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 1197.540534][ T25] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1197.595665][ T30] audit: type=1326 audit(1790513643.491:7294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24462 comm="syz.2.5693" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 1197.595720][ T30] audit: type=1326 audit(1790513643.491:7295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24462 comm="syz.2.5693" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 1197.595760][ T30] audit: type=1326 audit(1790513643.491:7296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24462 comm="syz.2.5693" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 1197.613177][ T25] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 1197.613220][ T25] usb 5-1: config 0 has no interface number 0 [ 1197.613307][ T25] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 99, changing to 10 [ 1197.613348][ T25] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25475, setting to 1024 [ 1197.751246][ T30] audit: type=1326 audit(1790513643.641:7297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24462 comm="syz.2.5693" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 1197.751344][ T30] audit: type=1326 audit(1790513643.641:7298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24462 comm="syz.2.5693" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 1197.751438][ T30] audit: type=1326 audit(1790513643.641:7299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24462 comm="syz.2.5693" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 1197.787950][ T25] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1197.787983][ T25] usb 5-1: Product: syz [ 1197.787997][ T25] usb 5-1: SerialNumber: syz [ 1197.870545][ T25] usb 5-1: config 0 descriptor?? [ 1197.885652][ T25] cm109 5-1:0.8: invalid payload size 1024, expected 4 [ 1197.890409][ T5627] Bluetooth: hci1: command tx timeout [ 1197.891055][ T25] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input87 [ 1197.959439][T18391] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1198.286679][T18391] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1198.672353][T18391] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1198.762977][T24433] bridge0: port 1(bridge_slave_0) entered blocking state [ 1198.763088][T24433] bridge0: port 1(bridge_slave_0) entered disabled state [ 1198.763258][T24433] bridge_slave_0: entered allmulticast mode [ 1198.765189][T24433] bridge_slave_0: entered promiscuous mode [ 1198.772270][T24433] bridge0: port 2(bridge_slave_1) entered blocking state [ 1198.772370][T24433] bridge0: port 2(bridge_slave_1) entered disabled state [ 1198.772520][T24433] bridge_slave_1: entered allmulticast mode [ 1198.774383][T24433] bridge_slave_1: entered promiscuous mode [ 1198.971366][T24433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1198.995726][T24433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1199.180952][T24433] team0: Port device team_slave_0 added [ 1199.183830][T24433] team0: Port device team_slave_1 added [ 1199.414746][T24433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1199.414764][T24433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1199.414795][T24433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1199.416781][T24433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1199.416796][T24433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1199.416818][T24433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1199.656888][T24494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1199.657337][T24494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1199.824567][T24433] hsr_slave_0: entered promiscuous mode [ 1199.827511][T24433] hsr_slave_1: entered promiscuous mode [ 1199.829572][T24433] debugfs: 'hsr0' already exists in 'hsr' [ 1199.829617][T24433] Cannot create hsr debugfs directory [ 1199.839019][T15891] usb 5-1: USB disconnect, device number 15 [ 1199.839267][ C1] cm109 5-1:0.8: cm109_urb_irq_callback: urb status -71 [ 1199.839332][ C1] ------------[ cut here ]------------ [ 1199.839342][ C1] URB ffff8880772abe00 submitted while active [ 1199.839360][ C1] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x79/0x18b0, CPU#1: pr/ttyS0/16 [ 1199.890129][ C1] Modules linked in: [ 1199.894037][ C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1199.904548][ C1] Tainted: [L]=SOFTLOCKUP [ 1199.908875][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1199.918934][ C1] RIP: 0010:usb_submit_urb+0x7c/0x18b0 [ 1199.924408][ C1] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 d9 bc c8 fa 49 83 3e 00 74 40 e8 6e b8 58 fa 48 8d 3d 97 f5 18 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 53 b8 58 fa eb 05 e8 4c b8 [ 1199.944019][ C1] RSP: 0000:ffffc90000a189f8 EFLAGS: 00010087 [ 1199.950101][ C1] RAX: ffffffff876f2392 RBX: ffff8880772abe00 RCX: 0000000000040000 [ 1199.958097][ C1] RDX: ffffc90002331000 RSI: ffff8880772abe00 RDI: ffffffff90881930 [ 1199.966081][ C1] RBP: dffffc0000000000 R08: 0000000000000100 R09: 0000000000000004 [ 1199.974062][ C1] R10: dffffc0000000000 R11: fffff5200014313c R12: ffff88807691b848 [ 1199.982218][ C1] R13: ffff88807691b830 R14: ffff8880772abe08 R15: 0000000000000820 [ 1199.990206][ C1] FS: 0000000000000000(0000) GS:ffff888124dc8000(0000) knlGS:0000000000000000 [ 1199.999147][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1200.005735][ C1] CR2: 00000000f723eb54 CR3: 000000007470c000 CR4: 00000000003526f0 [ 1200.013708][ C1] Call Trace: [ 1200.016989][ C1] [ 1200.019837][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1200.025740][ C1] cm109_urb_irq_callback+0x6fb/0xca0 [ 1200.031194][ C1] __usb_hcd_giveback_urb+0x378/0x540 [ 1200.036681][ C1] dummy_timer+0xa91/0x4cf0 [ 1200.041297][ C1] ? __lock_acquire+0x747/0x2de0 [ 1200.046264][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1200.051656][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1200.056609][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1200.062419][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1200.067365][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 1200.072629][ C1] hrtimer_run_softirq+0x1e3/0x2e0 [ 1200.077750][ C1] handle_softirqs+0x226/0x860 [ 1200.082523][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 1200.087307][ C1] __irq_exit_rcu+0xcb/0x220 [ 1200.091902][ C1] irq_exit_rcu+0x9/0x30 [ 1200.096141][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1200.101773][ C1] [ 1200.104728][ C1] [ 1200.107653][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1200.113632][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 1200.120045][ C1] Code: f7 e8 4d 91 ba f5 f7 c3 00 02 00 00 74 05 e8 f0 db e6 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 b4 9e ab f5 65 48 8b 05 ec 30 ac 07 48 85 c0 74 18 5b 41 5e c3 [ 1200.139649][ C1] RSP: 0000:ffffc90000157ca8 EFLAGS: 00000206 [ 1200.145717][ C1] RAX: 0000000000000006 RBX: 0000000000000206 RCX: 8000000000000001 [ 1200.153684][ C1] RDX: 0000000000000000 RSI: ffffffff8e415dbd RDI: 0000000000000001 [ 1200.161649][ C1] RBP: ffffc90000157e18 R08: ffffffff907a637f R09: 1ffffffff20f4c6f [ 1200.169615][ C1] R10: dffffc0000000000 R11: fffffbfff20f4c70 R12: 0000000000000002 [ 1200.177580][ C1] R13: ffff88801e2a0000 R14: ffffffff9ad432c0 R15: dffffc0000000000 [ 1200.185563][ C1] nbcon_kthread_func+0x6c4/0x880 [ 1200.190617][ C1] ? nbcon_kthread_func+0x163/0x880 [ 1200.195806][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1200.201554][ C1] ? __kthread_parkme+0x71/0x1f0 [ 1200.206497][ C1] ? __kthread_parkme+0x199/0x1f0 [ 1200.211524][ C1] kthread+0x38b/0x480 [ 1200.215590][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1200.221144][ C1] ? __pfx_kthread+0x10/0x10 [ 1200.225726][ C1] ret_from_fork+0x514/0xb70 [ 1200.230312][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1200.235436][ C1] ? __switch_to+0xc89/0x1420 [ 1200.240118][ C1] ? __pfx_kthread+0x10/0x10 [ 1200.244705][ C1] ret_from_fork_asm+0x1a/0x30 [ 1200.249491][ C1] [ 1200.252530][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1200.259802][ C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1200.270311][ C1] Tainted: [L]=SOFTLOCKUP [ 1200.274625][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1200.284668][ C1] Call Trace: [ 1200.287943][ C1] [ 1200.290790][ C1] vpanic+0x56d/0xa60 [ 1200.294821][ C1] ? __pfx__printk+0x10/0x10 [ 1200.299406][ C1] ? __pfx_vpanic+0x10/0x10 [ 1200.303926][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 1200.309214][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 1200.314421][ C1] panic+0xc5/0xd0 [ 1200.318162][ C1] ? __pfx_panic+0x10/0x10 [ 1200.322594][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 1200.327538][ C1] __warn+0x315/0x4c0 [ 1200.331522][ C1] ? usb_submit_urb+0x79/0x18b0 [ 1200.336384][ C1] ? usb_submit_urb+0x79/0x18b0 [ 1200.341225][ C1] __report_bug+0x276/0x570 [ 1200.345812][ C1] ? usb_submit_urb+0x79/0x18b0 [ 1200.350656][ C1] ? __pfx___report_bug+0x10/0x10 [ 1200.355685][ C1] ? __lock_acquire+0x747/0x2de0 [ 1200.360623][ C1] report_bug_entry+0x19b/0x290 [ 1200.365475][ C1] ? usb_submit_urb+0x7c/0x18b0 [ 1200.370422][ C1] ? usb_submit_urb+0x81/0x18b0 [ 1200.375268][ C1] handle_bug+0xce/0x200 [ 1200.379519][ C1] exc_invalid_op+0x1a/0x50 [ 1200.384044][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1200.388889][ C1] RIP: 0010:usb_submit_urb+0x7c/0x18b0 [ 1200.394346][ C1] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 d9 bc c8 fa 49 83 3e 00 74 40 e8 6e b8 58 fa 48 8d 3d 97 f5 18 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 53 b8 58 fa eb 05 e8 4c b8 [ 1200.413948][ C1] RSP: 0000:ffffc90000a189f8 EFLAGS: 00010087 [ 1200.420027][ C1] RAX: ffffffff876f2392 RBX: ffff8880772abe00 RCX: 0000000000040000 [ 1200.427997][ C1] RDX: ffffc90002331000 RSI: ffff8880772abe00 RDI: ffffffff90881930 [ 1200.435961][ C1] RBP: dffffc0000000000 R08: 0000000000000100 R09: 0000000000000004 [ 1200.443925][ C1] R10: dffffc0000000000 R11: fffff5200014313c R12: ffff88807691b848 [ 1200.451890][ C1] R13: ffff88807691b830 R14: ffff8880772abe08 R15: 0000000000000820 [ 1200.459861][ C1] ? usb_submit_urb+0x72/0x18b0 [ 1200.464720][ C1] ? usb_submit_urb+0x72/0x18b0 [ 1200.469580][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1200.475399][ C1] cm109_urb_irq_callback+0x6fb/0xca0 [ 1200.480777][ C1] __usb_hcd_giveback_urb+0x378/0x540 [ 1200.486187][ C1] dummy_timer+0xa91/0x4cf0 [ 1200.490709][ C1] ? __lock_acquire+0x747/0x2de0 [ 1200.495692][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1200.501089][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1200.506044][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1200.511947][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1200.516908][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 1200.522123][ C1] hrtimer_run_softirq+0x1e3/0x2e0 [ 1200.527243][ C1] handle_softirqs+0x226/0x860 [ 1200.532013][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 1200.536795][ C1] __irq_exit_rcu+0xcb/0x220 [ 1200.541388][ C1] irq_exit_rcu+0x9/0x30 [ 1200.545636][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1200.551301][ C1] [ 1200.554248][ C1] [ 1200.557171][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1200.563152][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 1200.569590][ C1] Code: f7 e8 4d 91 ba f5 f7 c3 00 02 00 00 74 05 e8 f0 db e6 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 b4 9e ab f5 65 48 8b 05 ec 30 ac 07 48 85 c0 74 18 5b 41 5e c3 [ 1200.589196][ C1] RSP: 0000:ffffc90000157ca8 EFLAGS: 00000206 [ 1200.595262][ C1] RAX: 0000000000000006 RBX: 0000000000000206 RCX: 8000000000000001 [ 1200.603261][ C1] RDX: 0000000000000000 RSI: ffffffff8e415dbd RDI: 0000000000000001 [ 1200.611235][ C1] RBP: ffffc90000157e18 R08: ffffffff907a637f R09: 1ffffffff20f4c6f [ 1200.619236][ C1] R10: dffffc0000000000 R11: fffffbfff20f4c70 R12: 0000000000000002 [ 1200.627201][ C1] R13: ffff88801e2a0000 R14: ffffffff9ad432c0 R15: dffffc0000000000 [ 1200.635185][ C1] nbcon_kthread_func+0x6c4/0x880 [ 1200.640223][ C1] ? nbcon_kthread_func+0x163/0x880 [ 1200.645443][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1200.651198][ C1] ? __kthread_parkme+0x71/0x1f0 [ 1200.656162][ C1] ? __kthread_parkme+0x199/0x1f0 [ 1200.661209][ C1] kthread+0x38b/0x480 [ 1200.665366][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1200.670912][ C1] ? __pfx_kthread+0x10/0x10 [ 1200.675499][ C1] ret_from_fork+0x514/0xb70 [ 1200.680091][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1200.685214][ C1] ? __switch_to+0xc89/0x1420 [ 1200.689909][ C1] ? __pfx_kthread+0x10/0x10 [ 1200.694502][ C1] ret_from_fork_asm+0x1a/0x30 [ 1200.699306][ C1] [ 1200.702489][ C1] Kernel Offset: disabled [ 1200.706814][ C1] Rebooting in 86400 seconds..