last executing test programs: 2m35.872985517s ago: executing program 0 (id=3277): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)={0x60, r2, 0x101, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random="c4"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x30, 0x51, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "ae894ac6de0b656f8d12b1aa4d"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f0000002300)=""/74, &(0x7f0000002380)=0x4a) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000002b000701feffffff00000000037c00000c0001800100000001000000100002800c0001"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)={0x60, r2, 0x101, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random="c4"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x30, 0x51, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "ae894ac6de0b656f8d12b1aa4d"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x0) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f0000002300)=""/74, &(0x7f0000002380)=0x4a) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000002b000701feffffff00000000037c00000c0001800100000001000000100002800c0001"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) (async) 2m35.872770254s ago: executing program 0 (id=3278): r0 = syz_open_dev$vcsa(&(0x7f00000001c0), 0x1, 0x82) write$P9_RRENAMEAT(r0, &(0x7f0000000100)={0x7, 0x4b, 0xfffd}, 0x7) read$FUSE(r0, 0x0, 0x0) 2m35.842936197s ago: executing program 0 (id=3279): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0xffffffff85000014, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x4b) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000067c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="780000000000000002000000000000040000000000000000000000000000000004"], 0x0, 0x0, 0x0, 0x0}) getdents(r1, &(0x7f0000000700)=""/90, 0x5a) 2m34.936439317s ago: executing program 0 (id=3282): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) r2 = socket(0x23, 0x80000, 0x6) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x817, 0x200, 0x280a, 0x4, 0x0}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x9, 0x80}, &(0x7f0000000180)=0x90) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000280)={r3, 0x1, 0xfffffff0, 0x6, 0x5, 0x3, 0xfff9, 0x5, {r4, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x22}}}, 0x77e4, 0x3, 0x7, 0x3, 0x3}}, &(0x7f0000000200)=0xb0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000040)=@ethtool_sset_info={0x37, 0x5, 0xb60}}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000340)={r5, @in={{0x2, 0x4e23, @loopback}}}, &(0x7f0000000400)=0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000440)=@sack_info={r6, 0x8, 0x9}, &(0x7f0000000480)=0xc) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000240)={0x34, r7, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4044084) 2m34.850035373s ago: executing program 0 (id=3284): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)="93bffce623851797a8dc7901f0048678cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb600"/135, 0x87}, {&(0x7f0000000780)="029993440c7a1d95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e430bcb03", 0x3e}], 0x2}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000002c0)="ee3714aa7756572d12ad3cd80207f0ea76a0bc3c9248ca350afa19d6fbf95238e23db454a07c93a0831e31bdca1de56a48b55c0e56450721a31ba40ea9fb151d57852e371a2ace8bf18e4f347744d20282453e4d54f49b050ae57bc7515d2c546523d307712455c5a01a19915dceb94ccf3e2abdaf29911893b524ea0d6ca87d4825a041d818377f8477c405da221d3716f02e3fd540a49b538ddb62e1ef22a43d8beefc546acb78e429214b5ebe368617f4c2cdc1", 0xb5}, {&(0x7f0000000380)="08949a79dd9783363f6ec6795014e732a237722fd113e5b2df06331471284deb980af4fba2b20b257d426c27b35133bea57a0a9126db69cb1b4d071ca4b46a576a1a07a15e1e6d25a881c6746d9d7144673da78803763dbed0fb8b258056b77d333bca37e079e4edc895e87512f8eb46c7ca53abb303022183e6ad4ed2b524125f688a01da0fbd08bace0e4931cee109fb1a667e87f89fd34e8d959d0589655dd43f9c72e8d49aabae73b5f02a", 0xad}, {&(0x7f0000000640)="bfb665aee08189f9e638cc", 0xb}, {&(0x7f0000000440)="a11ed88992f69f03e8662746dce791f15f3513eff62810f80754890c57886c99e7305e4ad9891be383211c908efdfa5f18696fbb91a875d68f9806da294261aac2f3d35db6e676e20b9af8e41cfcae44e420d981be17428dfed1a00355b222ffdbcd45b8d0ecc80d6c6db46dea0fa69794b7e69fc1b28dc82e2e91a47db6e035", 0x80}, {&(0x7f00000000c0)="d5ff9d56d9335281cc13bf8bedad4c66a6db8c247ddbdfffe8bc9c2eeda7c13c66352b61b4e6f9ef71ae4f101a8599845214", 0x32}], 0x5}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x501, 0x10008095, 0x0, 0x0) 2m34.797606547s ago: executing program 0 (id=3285): socket$inet_sctp(0x2, 0x5, 0x84) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0xa) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180)={r3, 0x4, 0x1}, 0x8) (fail_nth: 1) 2m19.615615032s ago: executing program 32 (id=3285): socket$inet_sctp(0x2, 0x5, 0x84) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0xa) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180)={r3, 0x4, 0x1}, 0x8) (fail_nth: 1) 2m0.657078403s ago: executing program 3 (id=3464): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x1047ffffa, 0x23c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000440)={r0, 0x2000, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200"}}) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000480), 0x101000, 0x0) read$FUSE(r2, &(0x7f0000000a40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_pidfd_open(r3, 0x0) preadv2(r1, &(0x7f0000000200)=[{&(0x7f0000000000)=""/17, 0x11}], 0x1, 0xffffffff, 0x7, 0x8) 2m0.633641398s ago: executing program 3 (id=3465): r0 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, &(0x7f0000000100)={0x14, &(0x7f0000000840)=ANY=[@ANYBLOB="20080200"], 0x0}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) 1m57.541129219s ago: executing program 3 (id=3484): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000040c41090ea00000000000109022400010000002009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2001d4"], 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 1m54.387979092s ago: executing program 3 (id=3497): syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) epoll_create(0x401) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000100)={0x9}) close(0xffffffffffffffff) r5 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) close_range(r5, 0xffffffffffffffff, 0x0) 1m51.29308394s ago: executing program 3 (id=3510): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x4, {}, {0x0, 0x3}, @raw32={[0x0, 0xffffffff]}}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x316, @tick=0x6, 0x0, {}, 0x67, 0x2}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x20, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0xffffffffffffff80, {0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) 1m48.556510873s ago: executing program 3 (id=3518): r0 = syz_usb_connect(0x5, 0x207, &(0x7f0000009a00)=ANY=[@ANYBLOB="12011003a9372540f30c1010db26010203010902f50101030250070904"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async) r1 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x40080) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000140)=0xda1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x800) (async) syz_usb_disconnect(r0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0xc16, 0x3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0xc0, 0x8, [{{0x9, 0x4, 0x0, 0x7f, 0x1, 0x3, 0x1, 0x1, 0xff, {0x9, 0x21, 0x8, 0xf, 0x1, {0x22, 0x4c6}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x91, 0x8, 0x22}}}}}]}}]}}, 0x0) 1m45.405137999s ago: executing program 2 (id=3531): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) (fail_nth: 1) 1m45.00725303s ago: executing program 2 (id=3532): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffc88, &(0x7f00000000c0)={&(0x7f0000000180)={0x50, r1, 0x200, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x34}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}]}, 0x50}}, 0x0) r3 = memfd_create(&(0x7f0000002800)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x01\x00X\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\a\x00\x00\x00D\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0r0}, './file0\x00'}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x34, r12, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40014051}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r12, 0x8, 0x70bd25, 0x10000, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7c}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4000084) r14 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r14, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0}) ioctl$KVM_XEN_HVM_CONFIG(r14, 0x4038ae7a, &(0x7f0000000280)={0x80, 0x400000b4, 0x0, 0x0}) writev(r8, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 1m44.80498319s ago: executing program 2 (id=3534): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)="93bffce623851797a8dc7901f0048678cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb600"/135, 0x87}, {&(0x7f0000000780)="029993440c7a1d95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e430bcb03", 0x3e}], 0x2}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000002c0)="ee3714aa7756572d12ad3cd80207f0ea76a0bc3c9248ca350afa19d6fbf95238e23db454a07c93a0831e31bdca1de56a48b55c0e56450721a31ba40ea9fb151d57852e371a2ace8bf18e4f347744d20282453e4d54f49b050ae57bc7515d2c546523d307712455c5a01a19915dceb94ccf3e2abdaf29911893b524ea0d6ca87d4825a041d818377f8477c405da221d3716f02e3fd540a49b538ddb62e1ef22a43d8beefc546acb78e429214b5ebe368617f4c2cdc1", 0xb5}, {&(0x7f0000000380)="08949a79dd9783363f6ec6795014e732a237722fd113e5b2df06331471284deb980af4fba2b20b257d426c27b35133bea57a0a9126db69cb1b4d071ca4b46a576a1a07a15e1e6d25a881c6746d9d7144673da78803763dbed0fb8b258056b77d333bca37e079e4edc895e87512f8eb46c7ca53abb303022183e6ad4ed2b524125f688a01da0fbd08bace0e4931cee109fb1a667e87f89fd34e8d959d0589655dd43f9c72e8d49aabae73b5f02a", 0xad}, {&(0x7f0000000440)="a11ed88992f69f03e8662746dce791f15f3513eff62810f80754890c57886c99e7305e4ad9891be383211c908efdfa5f18696fbb91a875d68f9806da294261aac2f3d35db6e676e20b9af8e41cfcae44e420d981be17428dfed1a00355b222ffdbcd45b8d0ecc80d6c6db46dea0fa69794b7e69fc1b28dc82e2e91a47db6e035", 0x80}, {&(0x7f00000000c0)="d5ff9d56d9335281cc13bf8bedad4c66a6db8c247ddbdfffe8bc9c2eeda7c13c66352b61b4e6f9ef71ae4f101a8599845214", 0x32}, {&(0x7f00000001c0)="f1d5", 0x2}], 0x5}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x501, 0x10008095, 0x0, 0x0) 1m44.780290745s ago: executing program 2 (id=3536): r0 = socket(0x848000000015, 0x805, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000ec0)=[{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000005c0)="07c5174f93f79dd49a40b25c2750d507780f", 0x12}], 0x1, 0x0, 0x0, 0x20040004}], 0x1, 0x200c4811) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x10041, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="b1a9009200000b062d0000d396de492e6af1000000000000", 0x18) r4 = accept$alg(r1, 0x0, 0x0) r5 = eventfd(0x5) r6 = fcntl$dupfd(r4, 0x0, r5) write$cgroup_devices(r6, &(0x7f0000000040)=ANY=[], 0xffa8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="39fa28bd7000fcdbdf250700000008000400010000005400018014000400fe8000000000000000000000000000aa0600010041c80000050002000900000006000100020000000600010000000000080006000800000014000400fc020000000000000000000000000001"], 0x70}, 0x1, 0x0, 0x0, 0x2400c851}, 0x40) recvmsg$unix(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000380)=""/128, 0x80}], 0x1}, 0x12100) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x10}, 0x1c) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000005c0)={{}, 0x2b}, 0x10) setsockopt$inet_int(r0, 0x0, 0x15, &(0x7f0000000100)=0x4, 0x4) syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r9, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) setpgid(0x0, r9) 1m44.637209709s ago: executing program 2 (id=3537): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') fstat(r0, &(0x7f0000000080)) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000bfe000/0x400000)=nil) lseek(r0, 0x289e0cb5, 0x0) 1m44.420048345s ago: executing program 2 (id=3538): r0 = syz_usb_connect$lan78xx(0x0, 0xa1, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001c00)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001540)={0x34, &(0x7f0000002640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 1m44.256833235s ago: executing program 33 (id=3538): r0 = syz_usb_connect$lan78xx(0x0, 0xa1, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001c00)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001540)={0x34, &(0x7f0000002640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 1m33.34580427s ago: executing program 34 (id=3518): r0 = syz_usb_connect(0x5, 0x207, &(0x7f0000009a00)=ANY=[@ANYBLOB="12011003a9372540f30c1010db26010203010902f50101030250070904"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async) r1 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x40080) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000140)=0xda1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x800) (async) syz_usb_disconnect(r0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0xc16, 0x3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0xc0, 0x8, [{{0x9, 0x4, 0x0, 0x7f, 0x1, 0x3, 0x1, 0x1, 0xff, {0x9, 0x21, 0x8, 0xf, 0x1, {0x22, 0x4c6}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x91, 0x8, 0x22}}}}}]}}]}}, 0x0) 9.185153075s ago: executing program 5 (id=4154): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000800)=ANY=[@ANYBLOB="02a44601058a10162c3b70e1b617884430a755e2937e3aa6a745b5c599f0f3bfa997ef87a27939b04d3f17c73b97629a0bbe6669e10a27a93c9d5525e3623537c735129773e30c97eaecb65f3c4f99918156fca9195808cbb3b2d155e6990aea24f4eb406a48335b3aa756ff33e0f3fb2fe639d6baff50d45f3a6856032e2628da3817d4bd9c6a3408cc4ceddd6f799077360ad25626792f62", @ANYRES64=r0, @ANYRES16=r0, @ANYBLOB="ecd3ea229cb587fc59c47b1831e41dfa9f73ae691d13939d2db1b3a2b13dc07850c620b33e5c2f70239e40b183624e13c5034bb7065db5b8990afe09ed7c8934fef5d650cb7a84686a2ba62341066ecaa3cc8b8491d6fdca0a4ba66876fd4358f89f98dee8cefe209d411f4654f030f5c1f84958578ba3f61055ea6aa21b28667ef9025b1f93107170c8fb5e289cf2942bbb2ea7a431dbce93af8cb9eac2c9639bd5a780a3a6", @ANYRES64=r0, @ANYRES8=r0, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000000240)={0x14, &(0x7f0000000140)={0x0, 0x28, 0x9f, {0x9f, 0xb, "e11a966f228cdc72d959b3e6c81c2b6350718bd975694f210ed83911bd0aaa200b5937274fa3a00c4c058b66ecaf1150f33295e9d12243f8c00f0d79bdfbc1d2cabff567fde0b07bad1f7fd3116a115f8bba90038034ecf82352ca4d250cff1cc3c90b594fc41fe0186d4caa5b9bbb18b968f0cd66bf70437a915798f4751c6102064b8db36a7bf2330a1370565403e2e79af63d76b4e9ae14782954ea"}}, &(0x7f0000000200)={0x0, 0x3, 0x13, @string={0x13, 0x3, "788c723838ffe41bdcc224b1bd355fa75b"}}}, &(0x7f0000000580)={0x44, &(0x7f0000000280)={0x40, 0x10, 0xa0, "8b26e0e59f474796990032e903116d828dca383bba18d277a5eb87ebd8d61e0b3b2042a208b1a19f64fef4d2ce3a646b6446041cd1bb58a2462a3163c9bdf8812ccd38e61f99310c24eca602983a65f6a438af6d8f900c7e8bcea39ec05733ee750436e747534135e55e21ebf42ad4224de73ab7fa69d911a76221c7364faee19c88d063de900a26007164dec8b21f39f64a5dddc7a8351a5f554de6bd5747ad"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000440)={0x20, 0x81, 0x3, "b8313d"}, &(0x7f0000000480)={0x20, 0x82, 0x3, "e097af"}, &(0x7f0000000040)=ANY=[@ANYBLOB="2083010000f803ae803eef588c1f491a8f8cbba67e25996e1dcf9ff4194a966d8a70c6f973fde301538db98069a41baa68133b1602e9ba981f"], &(0x7f0000000500)={0x20, 0x84, 0x2, "1bbe"}, &(0x7f0000000540)={0x20, 0x85, 0x3, "c431a0"}}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000001640)={0x14, &(0x7f0000001500)={0x40, 0x31, 0xe6, {0xe6, 0x4, "87e3e5c1963d1b2c16f9897dacb96cc0368c6edb3e3b668f53a83951bca565064e12286378b63bd9edf20f2feb03dfef2add430f1bac1658355df70d4032750234e72e34feb8d956a77e07878aed225797822717a9156e74d81a5465d1492e46b9e89951ce0272236fcc231fb7a19c4a1caf777e06434930fcfa7fabd28a3fe11ff74e1c08e46880f7dfe5040fb1928003485bd2b4d927dc5c4581949a77ed2925ad7f36f3f921653e4eb7114ee6cc520f10b7275d5c079ed71f613eceff585f2b7502cad5194555c3262bea0bb60dfe0cae083ee6edb18fda8a5349b329dc229c672707"}}, &(0x7f0000001600)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001740)={0x1c, &(0x7f0000001680)={0x40, 0x5, 0x1, "e0"}, &(0x7f00000016c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000001700)={0x0, 0x8, 0x1, 0x1}}) syz_usb_control_io$printer(r0, &(0x7f0000000080)={0x14, &(0x7f0000000980)={0x0, 0x31, 0x101, {0x101, 0x30, "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"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140a}}}, &(0x7f0000000740)={0x34, &(0x7f00000000c0)={0x40, 0x18, 0x13, "69d393076949daaaa45c1340f768923339b5ed"}, &(0x7f0000000100)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000004c0)={0x0, 0x8, 0x1}, &(0x7f0000000ac0)={0x20, 0x0, 0xda, {0xd8, "cc2048f1645288fb15a295dd7ac330b12f9cfee44f532ba6fc2e1cd72ccc1c53c7b6f090918d8514f3033441d88fd576719b2786085dc7bab7330aafd2c0f61f3aa7de2612a9cdd0cdfc94ac217f3f234c921f61b4d6cff767e4996bbea45d423e870c1236c59bd4f07d455a32b11c682c04f35c086077b2484dffa8378e6c4d8b6ad6054d1849449dedce9863d3dd5927e16dcdd5c63cdfe04018612f67982b973ba4a1ded585bbe2d73cc987bc56404e1e285aafa98f36ff4da9252171719e92057ebf155ede227ad904c75da42016e217e73c414bce00"}}, &(0x7f0000000600)={0x20, 0x1, 0x1, 0x80}, &(0x7f0000000640)={0x20, 0x0, 0x1, 0xe}}) syz_usb_control_io(r0, 0x0, 0x0) 6.187496092s ago: executing program 5 (id=4177): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0xc0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r1}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4, 0x700000000000000}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000160f4f400d1001cbd1840000000109021b00010000000009046d0001749adc000905a1"], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000880)="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", 0xfbe}], 0x1, 0x0, 0x2) ioctl$KVM_GET_MP_STATE(r4, 0x8004ae98, &(0x7f00000002c0)) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 4.850758434s ago: executing program 4 (id=4185): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d01"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000800)=ANY=[@ANYBLOB="02a44601058a10162c3b70e1b617884430a755e2937e3aa6a745b5c599f0f3bfa997ef87a27939b04d3f17c73b97629a0bbe6669e10a27a93c9d5525e3623537c735129773e30c97eaecb65f3c4f99918156fca9195808cbb3b2d155e6990aea24f4eb406a48335b3aa756ff33e0f3fb2fe639d6baff50d45f3a6856032e2628da3817d4bd9c6a3408cc4ceddd6f799077360ad25626792f62", @ANYRES64=r0, @ANYRES16=r0, @ANYBLOB="ecd3ea229cb587fc59c47b1831e41dfa9f73ae691d13939d2db1b3a2b13dc07850c620b33e5c2f70239e40b183624e13c5034bb7065db5b8990afe09ed7c8934fef5d650cb7a84686a2ba62341066ecaa3cc8b8491d6fdca0a4ba66876fd4358f89f98dee8cefe209d411f4654f030f5c1f84958578ba3f61055ea6aa21b28667ef9025b1f93107170c8fb5e289cf2942bbb2ea7a431dbce93af8cb9eac2c9639bd5a780a3a6", @ANYRES64=r0, @ANYRES8=r0, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000000240)={0x14, &(0x7f0000000140)={0x0, 0x28, 0x9f, {0x9f, 0xb, "e11a966f228cdc72d959b3e6c81c2b6350718bd975694f210ed83911bd0aaa200b5937274fa3a00c4c058b66ecaf1150f33295e9d12243f8c00f0d79bdfbc1d2cabff567fde0b07bad1f7fd3116a115f8bba90038034ecf82352ca4d250cff1cc3c90b594fc41fe0186d4caa5b9bbb18b968f0cd66bf70437a915798f4751c6102064b8db36a7bf2330a1370565403e2e79af63d76b4e9ae14782954ea"}}, &(0x7f0000000200)={0x0, 0x3, 0x13, @string={0x13, 0x3, "788c723838ffe41bdcc224b1bd355fa75b"}}}, &(0x7f0000000580)={0x44, &(0x7f0000000280)={0x40, 0x10, 0xa0, "8b26e0e59f474796990032e903116d828dca383bba18d277a5eb87ebd8d61e0b3b2042a208b1a19f64fef4d2ce3a646b6446041cd1bb58a2462a3163c9bdf8812ccd38e61f99310c24eca602983a65f6a438af6d8f900c7e8bcea39ec05733ee750436e747534135e55e21ebf42ad4224de73ab7fa69d911a76221c7364faee19c88d063de900a26007164dec8b21f39f64a5dddc7a8351a5f554de6bd5747ad"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000440)={0x20, 0x81, 0x3, "b8313d"}, &(0x7f0000000480)={0x20, 0x82, 0x3, "e097af"}, &(0x7f0000000040)=ANY=[@ANYBLOB="2083010000f803ae803eef588c1f491a8f8cbba67e25996e1dcf9ff4194a966d8a70c6f973fde301538db98069a41baa68133b1602e9ba981f"], &(0x7f0000000500)={0x20, 0x84, 0x2, "1bbe"}, &(0x7f0000000540)={0x20, 0x85, 0x3, "c431a0"}}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000001640)={0x14, &(0x7f0000001500)={0x40, 0x31, 0xe6, {0xe6, 0x4, "87e3e5c1963d1b2c16f9897dacb96cc0368c6edb3e3b668f53a83951bca565064e12286378b63bd9edf20f2feb03dfef2add430f1bac1658355df70d4032750234e72e34feb8d956a77e07878aed225797822717a9156e74d81a5465d1492e46b9e89951ce0272236fcc231fb7a19c4a1caf777e06434930fcfa7fabd28a3fe11ff74e1c08e46880f7dfe5040fb1928003485bd2b4d927dc5c4581949a77ed2925ad7f36f3f921653e4eb7114ee6cc520f10b7275d5c079ed71f613eceff585f2b7502cad5194555c3262bea0bb60dfe0cae083ee6edb18fda8a5349b329dc229c672707"}}, &(0x7f0000001600)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001740)={0x1c, &(0x7f0000001680)={0x40, 0x5, 0x1, "e0"}, &(0x7f00000016c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000001700)={0x0, 0x8, 0x1, 0x1}}) syz_usb_control_io$printer(r0, &(0x7f0000000080)={0x14, &(0x7f0000000980)={0x0, 0x31, 0x101, {0x101, 0x30, "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"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140a}}}, &(0x7f0000000740)={0x34, &(0x7f00000000c0)={0x40, 0x18, 0x13, "69d393076949daaaa45c1340f768923339b5ed"}, &(0x7f0000000100)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000004c0)={0x0, 0x8, 0x1}, &(0x7f0000000ac0)={0x20, 0x0, 0xda, {0xd8, "cc2048f1645288fb15a295dd7ac330b12f9cfee44f532ba6fc2e1cd72ccc1c53c7b6f090918d8514f3033441d88fd576719b2786085dc7bab7330aafd2c0f61f3aa7de2612a9cdd0cdfc94ac217f3f234c921f61b4d6cff767e4996bbea45d423e870c1236c59bd4f07d455a32b11c682c04f35c086077b2484dffa8378e6c4d8b6ad6054d1849449dedce9863d3dd5927e16dcdd5c63cdfe04018612f67982b973ba4a1ded585bbe2d73cc987bc56404e1e285aafa98f36ff4da9252171719e92057ebf155ede227ad904c75da42016e217e73c414bce00"}}, &(0x7f0000000600)={0x20, 0x1, 0x1, 0x80}, &(0x7f0000000640)={0x20, 0x0, 0x1, 0xe}}) syz_usb_control_io(r0, 0x0, 0x0) 4.393052302s ago: executing program 5 (id=4186): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0a840000aaaaaaaaaabbaaaaaaaaaa3d86dd63749d3901242c"], 0x15e) 4.277743085s ago: executing program 5 (id=4188): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d01"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000800)=ANY=[@ANYBLOB="02a44601058a10162c3b70e1b617884430a755e2937e3aa6a745b5c599f0f3bfa997ef87a27939b04d3f17c73b97629a0bbe6669e10a27a93c9d5525e3623537c735129773e30c97eaecb65f3c4f99918156fca9195808cbb3b2d155e6990aea24f4eb406a48335b3aa756ff33e0f3fb2fe639d6baff50d45f3a6856032e2628da3817d4bd9c6a3408cc4ceddd6f799077360ad25626792f62", @ANYRES64=r0, @ANYRES16=r0, @ANYBLOB="ecd3ea229cb587fc59c47b1831e41dfa9f73ae691d13939d2db1b3a2b13dc07850c620b33e5c2f70239e40b183624e13c5034bb7065db5b8990afe09ed7c8934fef5d650cb7a84686a2ba62341066ecaa3cc8b8491d6fdca0a4ba66876fd4358f89f98dee8cefe209d411f4654f030f5c1f84958578ba3f61055ea6aa21b28667ef9025b1f93107170c8fb5e289cf2942bbb2ea7a431dbce93af8cb9eac2c9639bd5a780a3a6", @ANYRES64=r0, @ANYRES8=r0, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000000240)={0x14, &(0x7f0000000140)={0x0, 0x28, 0x9f, {0x9f, 0xb, "e11a966f228cdc72d959b3e6c81c2b6350718bd975694f210ed83911bd0aaa200b5937274fa3a00c4c058b66ecaf1150f33295e9d12243f8c00f0d79bdfbc1d2cabff567fde0b07bad1f7fd3116a115f8bba90038034ecf82352ca4d250cff1cc3c90b594fc41fe0186d4caa5b9bbb18b968f0cd66bf70437a915798f4751c6102064b8db36a7bf2330a1370565403e2e79af63d76b4e9ae14782954ea"}}, &(0x7f0000000200)={0x0, 0x3, 0x13, @string={0x13, 0x3, "788c723838ffe41bdcc224b1bd355fa75b"}}}, &(0x7f0000000580)={0x44, &(0x7f0000000280)={0x40, 0x10, 0xa0, "8b26e0e59f474796990032e903116d828dca383bba18d277a5eb87ebd8d61e0b3b2042a208b1a19f64fef4d2ce3a646b6446041cd1bb58a2462a3163c9bdf8812ccd38e61f99310c24eca602983a65f6a438af6d8f900c7e8bcea39ec05733ee750436e747534135e55e21ebf42ad4224de73ab7fa69d911a76221c7364faee19c88d063de900a26007164dec8b21f39f64a5dddc7a8351a5f554de6bd5747ad"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000440)={0x20, 0x81, 0x3, "b8313d"}, &(0x7f0000000480)={0x20, 0x82, 0x3, "e097af"}, &(0x7f0000000040)=ANY=[@ANYBLOB="2083010000f803ae803eef588c1f491a8f8cbba67e25996e1dcf9ff4194a966d8a70c6f973fde301538db98069a41baa68133b1602e9ba981f"], &(0x7f0000000500)={0x20, 0x84, 0x2, "1bbe"}, &(0x7f0000000540)={0x20, 0x85, 0x3, "c431a0"}}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000001640)={0x14, &(0x7f0000001500)={0x40, 0x31, 0xe6, {0xe6, 0x4, "87e3e5c1963d1b2c16f9897dacb96cc0368c6edb3e3b668f53a83951bca565064e12286378b63bd9edf20f2feb03dfef2add430f1bac1658355df70d4032750234e72e34feb8d956a77e07878aed225797822717a9156e74d81a5465d1492e46b9e89951ce0272236fcc231fb7a19c4a1caf777e06434930fcfa7fabd28a3fe11ff74e1c08e46880f7dfe5040fb1928003485bd2b4d927dc5c4581949a77ed2925ad7f36f3f921653e4eb7114ee6cc520f10b7275d5c079ed71f613eceff585f2b7502cad5194555c3262bea0bb60dfe0cae083ee6edb18fda8a5349b329dc229c672707"}}, &(0x7f0000001600)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001740)={0x1c, &(0x7f0000001680)={0x40, 0x5, 0x1, "e0"}, &(0x7f00000016c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000001700)={0x0, 0x8, 0x1, 0x1}}) syz_usb_control_io$printer(r0, &(0x7f0000000080)={0x14, &(0x7f0000000980)={0x0, 0x31, 0x101, {0x101, 0x30, "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"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140a}}}, &(0x7f0000000740)={0x34, &(0x7f00000000c0)={0x40, 0x18, 0x13, "69d393076949daaaa45c1340f768923339b5ed"}, &(0x7f0000000100)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000004c0)={0x0, 0x8, 0x1}, &(0x7f0000000ac0)={0x20, 0x0, 0xda, {0xd8, "cc2048f1645288fb15a295dd7ac330b12f9cfee44f532ba6fc2e1cd72ccc1c53c7b6f090918d8514f3033441d88fd576719b2786085dc7bab7330aafd2c0f61f3aa7de2612a9cdd0cdfc94ac217f3f234c921f61b4d6cff767e4996bbea45d423e870c1236c59bd4f07d455a32b11c682c04f35c086077b2484dffa8378e6c4d8b6ad6054d1849449dedce9863d3dd5927e16dcdd5c63cdfe04018612f67982b973ba4a1ded585bbe2d73cc987bc56404e1e285aafa98f36ff4da9252171719e92057ebf155ede227ad904c75da42016e217e73c414bce00"}}, &(0x7f0000000600)={0x20, 0x1, 0x1, 0x80}, &(0x7f0000000640)={0x20, 0x0, 0x1, 0xe}}) 4.195019562s ago: executing program 4 (id=4189): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000061401"], 0x40}}, 0x0) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0xa, [0x8000, 0x0, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x806, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x10000, 0x800, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0xc, 0x4, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x8000806d, 0x407, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0xc57, 0x5, 0x4, 0x8, 0x83ff, 0x80, 0x0, 0x5, 0x6, 0x1, 0x4, 0x10001, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff5, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6ca, 0x9, 0xfffffffc, 0x100000, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x7c, 0xea4, 0x100, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0x1, 0x1, 0x10001, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x9, 0xa, 0x4, 0x47, 0x8000, 0x1, 0xfe000000, 0x7e78, 0x2, 0x4, 0xd, 0x3, 0x5, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x5, 0x4, 0x5, 0x0, 0x1ec, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x1, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x2, 0x6, 0x38, 0x800003, 0x200, 0x9, 0x3, 0x4, 0x2950bfaf, 0x1000, 0x9f, 0x6, 0x0, 0x5, 0x6, 0xac8, 0xc3, 0xb, 0x803, 0x7ff, 0x12b, 0x4, 0x2, 0xa, 0x0, 0x405, 0x1c, 0x120000, 0x2, 0x2006, 0x80a2ed, 0x4, 0x25], [0x8, 0xbb31, 0x7, 0xb, 0x5, 0x938, 0x6, 0xb, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x56, 0xfffffff2, 0x6bd8490e, 0x101, 0x10000, 0x5, 0x7fff, 0xffff, 0xa61e, 0x1, 0x5, 0x1, 0xfffffffe, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0x5, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0xb, 0x6, 0x229, 0x5, 0x5, 0x7, 0x30b1d693, 0xa1f, 0x40000f40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0xe, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) (async) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) close(r3) (async) read$FUSE(r3, &(0x7f000000e400)={0x2020, 0x0, 0x0, 0x0}, 0x204a) syz_fuse_handle_req(r3, &(0x7f000000a3c0)="61ddaf21c1282a5a6352f350c2f614ede5b0c406f5488574ed6fcb609ce20f648ee274c8dfeaa625b1fd332f70f776ae0b6e3f959c24f3876756c20e05c82079387520764f2446820d53242898a90e51c5b68297e39b7fcf558b450e9608326c3dc6704a054216a8c6f0d689e5eb6b8564854376910eff147682d2378b9c5b95a626493ce628b1bb6b524ed7e90ebe6eb0246399eac6d624dcf4e824be2de9c1d5d06eab13f2770577304eb676106fd9868a030192067ac009482e03a817f1abd909a94702479fe30b2594ca60b4acc37148cf04e8c0e76dd69e29d243596f8174129ac6ab9dbb79ace8f0fae14234845725102a027d4163f97f3971d207500defeaa2c7318f7e82e591701f9d3f78592ea7ec28806a53278a35a20251eeb2735fa9f37bf0045b5e6faf5f751c7ad31d8426be7b09027b2092f49247159a33b580d2691ebf00797962168bdc368f57282ce5b8526eacb80952ffba771626c0016b8a010546f0b4daf470814cee0ea418b76331c34616cea0459dbd1f196364c99e4a47bcdd64b518ef51833e6f8041fbbbe86e808bdbade7009985f2c4d7ffd76a0e7dc7d542bdee1d136d2096dfa997f98ac83c6341b306a3a8cf81642566d7777480d4dc61b0182f0d418ce95d74c9aadb182326d6671412a1f0c62c93a0ba873ff5daa4ece4b2fc73ed5b02b60890374acc0cd25cbf1707016a542fafd6af098f9737304c726712c8243dcd5eb15c0996e9e03dd741d519cb3e86ea214e20408c2cc5ea607585f1bfd268ba3084ffa69425512571d263fd1ae49b488b2964bd3e78943122006489cc22191dec2900a7fdf798c9f683461f2a7b940f4112b805dc077a7b99071b5b454f7c6d2b13a6b23091f74ecc65a24ac0d11e2ffd7332fb2b2b11aeec3c809d78cc2e168f126f38dddfe3e1d0ec1c6fb25f880690f97a70dc5fbea5d25dba3b24c01d9bd228c58deca660625511127a62220429c94be65d6ad4ce7e79e97af67931b46ccfabca5dbaea11e2dc76279b0244cc2845f31beff418fe4bd892d3676079d9d4eb0251dfead9e0a07a11c0a7e597ac89ec77de60a5f6e0ff4a62374856b8e1659e885d3a0d90293daa0c7bb041cbcd54bf098b66b2ddec28dcba4cfbad969e3b97e4bf680f901485d1cd4b231a9115c22ab2f911415ad0efe0eb7f4bee15c6de7d0f818acd687a117286f9e3c33df5206df918ea4ac52927487968d88f4a18d4889a4060f20487e4cec19250fe48a16b1f9f7250a6ab81fbaa2ad451a936ee98021bf859b9a635132a0dcf7530c0e2c84a459241a1fc9fe45b4a4f32fa8e95185db92660292ece6b5ddbb0b9f69bd7435cd4944f8ff2ed51172f0683fbae1013cde202498f2e1be54d1a2e17b3984b17d1994915a477c87697f465781e41b44c6a40ae035e75a4d9f9c0926bec533db0d4c26d605cb1ae225e692ed315062e8c3283716929e25a22b25105e018d81c07cb7600d1bae16d8beec33c88f1cdb52ac988b4677ed604c28ff1cdeeeb74c332dc526cff5ee935016984cabf117694cccabae944de4d2d2daff8f281b6434475b52c1910210598c684da99c108000a53d2ca03afd42b0200691d92341616353a22a8dacd8cb7eee85953b251236603d2ef1e450675f8d0f3cd0e28ef36457f79c267d836d14ed758148e979b9749ddcef14aec903939c69567a1697aae8f9ed72a16be0267a3a967727937f609720802570287c4e08641b9b7b979c6541add0e8600dd2d75a1dc0822ceb7a7e4e1afda2940d127f488589963b46417d7a7474545e5b08a621c1a7637b3fcb62b0aee10d999505907bd14033370e391f6192ff7d718e1db3ef861d30b2d477f11cd45ecb296d4babcccc34901165e3fcdbef6fa1ee478a97f7d21dc5562582d67c448ae352d3157d83e8ab0122a2bb056bdff8043a91b8f3abe4d788fe741483997a8e3fe126626a14b4243d3ff8ada8dd555c95d5e30b68cc053dfbbb61940cbb552cc1fe211ea5ea13cbfb6a577cde339282d84e92f866145e7b1de4d5a1705fc24fc8843f1a69f4c604adf0d715ad88c6a4ac80a35375662610e0ed07af9c4c76326716a77b106ef87782804ca353eaade28a1ca522d706282ebe48c0b23fd42b2e0297f5997d3aab40615f143e868c6aaf920bc827224946db3e3b3e65ea66dbfa5fe6c45dab930877852e86df251024e4ae46ee8e04cf40f2b3239f4df40062cfddada61700959deaeed3a44fb185ce51685fcab793184435b3e668e7d80820a613acde8d61e24571b9de7ce4581a4751d70a28e8d098660e81941fe40b6844a3204b512457194e100c995c75921569f735afee321080ed6310610887ca842001f5112c5af8c9083e3d088a404b48ee82e1e8be16fd493a2a643816488447706f3e86d2d0ed48f7397aad0cf105a4a71d928a15413ab3813e42478cf7a5be2e03d15ccb90a625863cb2ca1059110f90186cf4c370469f4d7e1ccda56ed9c427cce46e7d1c82641554ffa0c7c42697cbc754702b62be5ab03c995ac8cda3145959c440c4d6ead7d6398faf189de77645a05a54d6c33c9678daec6e5ac0048f91e15b2fdb808d712e662007da5e228ddc7370f575723a0018a1da70fa27e6624c8c75047eb584bf3399a8fce999df94f6fb54fb6c1fc954b1d899459fcd2f459e57c214ae590513ed268ed2d1114d8276642510a2eb99feecb58d8476550553a9f3d1f04c9bb442dae6dd84628b60cc9fd3c1e5c4fe3b9ad5f43b5d06e31ba4644f7499c03fd68cd2207027eeb1908a8022d70eb8fc8f55fee7be7e3af525d4fb1ab3e9b458246cbb5371e8145e1d04762c62068e03795a5a6b48d8643a83927c47000b7766e320e0ef2339d5423813e8d7845b939a9567745f6e2d6070764669c905ea77943a31f0df838a5d046f25d516bb654336f759c05dcc0febbbf1d214382a76fa09aa32be9799252f1d0fd8bacfe3f32574fdc82c6ed77f1c08d4aef88c157cbdac947346e3e015af60125d3e36ec6bd8dc5127c7ab1ed773c8beffc9dba99bd9fa1498a5a49bcce4ddb13fb85e256fcac569aab1c815527710d2c350c7cc84db5a7eb243227973fd5e2d1d8450077ececa0d96884c90ac0146d37b13f1aacc1eaddec3f0d475df6ceafe73f9076fcfeaf496efcae22d09745453a5e4776876ecfb1d004361f82f76b2bfba050d0fd5060f50fd74f9908a62649955e2f90e4ac4a4f0b29484cf80eebcbecb12db8586ee58443c181a59c046c657ecbb067a1e70d4c548e8b291a5aa681624747d9a52a6184a5fc82d824d9ab6156ec5fd73a038b38d86974e7a89b55a95b609e12c98f4168c0e48139749fce33397948224641e9823588858f82247d9abf8f84250564189676325e43944e888cef6918cd2b842b3a42751475a37656b3f04a02430705f16908d638212f69cf96d5311038e00e048468810d1cfefb0a9aeaf46d1bd31f7156a97542d9373abd3c069aa096486244389312031398a35e0ebca6668ed06dbe80290ac9a2a15ac9c208cdbcb2c1e18f008741649b4fe2ac1e6ca0a19980b6276fa09c5c0e67e748c1669add6fd4c70ba522be4428df305c3313929a4eec348f03fc6a6dfd1d6740a61230a977555b6b4d5165c98323871d750e80f9205231af03ab430a720dcaad03d113f38574ebada74f5b34a05a6abb7ba9b8b280401a3a21dd7e1e026deb438ed020d09fc93ffd7376ced7b5d6c9c35072c7f28ddb7fea3ffa7b7e6766892be2015c20e2cc7fa8bcb5832b97e964947ae940d5ce215ff3a0d74851d5735f3573d533cca9b3a89f9494f150cb732139cc2282304f6a375ee1062f6f850ebf89548973b6c5e7aee8b98b18b443332d3be20fea086653d52756b40ec4f08ad52f4d0a5a61004c700f070b83548670ef36dcbd8daf13ae6d382aaba3c3bac3c1efd953781d69e7365e1393d2c3f34d3dc91999ab9a545bc167e50ea6874fe8f49e93e452ad4710d7127c430ab2caf3ec1627e6a2a6a57604a5da490087991b68cd58d456f6818f22e38007e1628c6a78f6a8a321e3f0d5d5e1bc7f9ef53c4780b451dad949962c8a6a464b25cb161159b72f40fed8280daec34135f77373b9432f411b232e9374e9cb3fcd85a599c20d0b8e294835c60c2e034eb8385c507095c6eb6748180fd1ad97cb0a4b2ffa70c90891d373459538f4106078162bc46b425572466aa4769153b994698bbff1a98b5948e40d98bb2900445eebe95c4892bcb92b4c28b734ea7e106accc9836767e0881f970c9d69063dd918de44a484ef3f860b0dcec58f22b3f1a0abb9c0c2b6cd5bdacdc194f188588c0888d6abfa2d0b79d0b33a41e3b6a0f9fbf811ba20f346025b3a4be17eb5ce583b860cad5424bcaf1ef4a255678706052c1cae9cd77cc78639f975f07737b791831c64f0c974b23a5c428091b8b8e17a037ac3c6d56da4b4c7e4752736cbbc8d67b1b823e87d51ffc95fe9752e8479fc15a6fe7b96fbd7b93dc2144381c424ec7782d7f8b2637010dca11ccdaab1bad652a9ecd8b6ba2c116fa419c8582a0ccf754a294d9de5b457d9b1a4120fd53667862e50cb028e2f92c73a38f77ff57c93b410e7f3257bd56e5aa504f0643bd2bcfae2168046ad2737a36b21f6d993de1fe7b31e9ef7c79d545e5364b65011a6d26e0a2f1018a5280ca88d3d1e30c68195f8cf1a3ece813f22e44d83867c9f711218203d1adf2869ed89babca094b8def7ae0abd0245f522930db59c4b2eeec4d564bfdb931d435a986daba4b604d5bf30b1cfdf6960986ba0dab216dfd7ad95ca2555e0573d073dccd407ddd5ed7920c788aa0213aec90b38981a91bc370ede38d171648316d59478e66c068eec33295345162e9896ffc82f8d94b995d3a3a7a4f459e564632b5918b4fd850da380937655f19e2820376e7deb48edb0f5e295521a9a153f5ef69de397d88acc20be99779d7ea2c38445bd70aeeb68cc6c68c1bc603ab580b632866497a3dbcbfd933e2074323f66f1db73129eec8331c8872aa92a33e2180fc0cf2e28d198faef4421064b8435f37b5bfb9b531332b3b0838015fe848f0ce859db8706f2e53fb07ce4d0fd017d85ac9ce2943ab172f08b13c948c3778d2469257d412b1a5305526cc8dcb4a8645f825cca66a63b7134d8b7c760db6a8fa21f2df3456e9b460867303a9d53fb01db8548800d800e49c08c8d731bbf9a642206f4cc6673e4fc0f7106661abfde1eb8a8d384b26d88c16d15f238556ff4b205145d860228038430cd8a342bc15849afd81666b55b358e3ec584fa96f119b77495c4ec36616070237bb170fc04d3befebdaff66643814eb8519abaaf1e9bf939bf5bfefa33c32fe9909055393e383268e426436305b370867db76991ca600bf6211dece3b6b7b4dc5cd4569ff4538080fec318a9e0cce4a8cf26aca8359b503781aaedc2d58b0bb1a82c163425e678b488bdc7362d0be24a7a8238deb31482c332d4d385005ca84c836933b0fce21685ec067adb9490d1a416f83e36e6e3b87d05ab6973f4e359a1fb5a4dbf2ff6a85d235e50d893f222c2a7d84252be9015e104ee3609c83cafdd796a8422257c9ca9172888d91c0f2f2afe36dccada9a713cfc026cf25e113fc543d522e9254f5e129d7ffd61b43ee25bdd63545a81a2b086b616e23abd380a7bb8e54b8341f42c663da1fc8451f21da7315aea416e6856d4d45128dcd34a0f3aeb7aed00c54c348f38888b8c8fec59028d38344a92249c95943d3ff8608bc11406102ebe8269892b2e909bd82ba467aabef127713a0993df779ba7b0816a990566699e4926d75fd47c3f1b9cae3e58771a6ae8776fdb672ee70f215fd908d6dfddb8a2ad10f27b749fa6e67171848d70d3ae135ee3defb2546bb35a3ad2d8ac0e838ff8abb1cd733d80047bc8626960a257b704b43bf0390b7fee656ca7831d23e8ba940533c16c17de68270bb3b2d3bf142b34899b3a106cf9569b4f46f148297c61390733ff9f399c669122dd045187d0a35fe54b4f17e4090c56cfcfa47498b1701a855827d35cf3624624906f997092b010b1da616325a090770694d028fae9874a91f8d21fea85804956594b8252c24d05df5775148ecbf8ab38f131c268cc263f6a2dcd375acfbf39a2defc9869801a720d83add1ff01ac7fc389bc7e35c2eee2b44f808508e6e02ea31cf23ea9f2118bce520101e307b394e5fdd28e90870a327b0a1444b552b7227134a8e5397474a6c0e1ce89d918c899d292660ea44294e07b1645ff9e85f65156f92d55ae795e134250b5359dec6c31d4892d83f363cb09632bb738c4e7f351361adc3ab54776a5c55d6ff4895516c82cc6387b1a424f3af2bb0398d0d4a71fe44c5132b7ad5fdfa732bbcff9f02395df587714072caca65f5fc1215dc9068585e1fbcee22cd69c0386a6482230540ec9ff8e373018e4e2788b9502e5be3e3247f997800c68a634e4490c91d01144a63a7a55afbfa4f0ef5ad538aeec8ea203ef2716ff989e11ce4985263898b8e36b0d3386b816ce484e81404a01ac0ed9f18ef5643f93d46705c949acddca2b74ad53441090f658d22dd081aaf49a7bb07c93ab8dfb5213cba354b4d37d9899423d3b3d45e9463c506ccd69747162d2d64b54291d11fdc6c9b89114543d6948f10e68008973cc485df080b84e0d098f962715ba009f2aa1fb41f7199ea5b9b70df0e1c378da164f7257b4ed04a9fee7cc2de065ad35a60b882d78e26d5804942ed1f2bcf85fc63795fb9164a5f94ffe6bfbf838c9197bce2160d24f88dca14c3e733d18ff1fb7acb0ebdfc4e2ce268a676fb27cc34d4b6b5d7e8db29c020c4c498d793931b0fc7d91ad68d3d8463e36a267833edbdd7062f4d62aa9fd1cb7f8e561d3939bbfa118b897167168832c0aff17fb6cdcf75ad6ef0a18e2b37fb24c85d0866f2e5f191b2ef8fe9b5997635a74cb06aec67363435eb175559629c09316f96dc56de6c7785335d121fc2e4d47c2f50c37c5bf7950ae5de07b3b73830f4299d5009742d4eca98df821a95d244967a42b5a4f3375edc41c5281ca3104bd247c14e838912634d4764c1b6e440860d98f258aa8a24e8af643497366edc2b781aec0567451884aec0343ced1fbddfae585db1012a6d9245ad85c56aa33d5bc30307515bccc8d36d7848c99884db4a49d748e1953b4673e4286393fc97c233d529435faf7ed9f9aa64029814b7cd6a36c3dd9ca7be95e5c4d48e024a3d23651cc81c00a52e2fa2d094435ebdb4ae5be8e6b53cf628ddc87a4bc2dccc98ac38019c91789a40d103fb95785bde5992de08ecdca1dff2ab7cf5013420b3d29b8a7f0af455c4e86285422b986bdf482b87297061084b50684e936acbb075a84e720a2d03892efec7dc1af2fae2a7ce7725cf0d19f39403b273be262c7a4ff638898f6caf84bfb358c580ba4adfd8664bcc539b82792e39ab4f1d8393b1f98f6dd5aae14bc6b73feeeaef7c3accde4d9b098f2d5c7ed68621851f37d27980c4b44df095d865493eeef2724db90aa53a3c37bd345ea75b4e76e8878deae1b4f3204c2957f3806e36a03e995f7633de9b863ff6b3309d330ade917c82f3286d9500105755efac22a4220f457debd861df3c0925dc4ba8913cea12b8deb93cec87c972421bb8442ef2a2a9d638471108ae0152aefdc45eac6ff786dae370a21bfe1e5777df8070bcefba8596cb8f71a516b505b1f83de1129cee91d3a4d6383daac7b9de46a99bc34661f3d805d2e138a769fd6489e4d058a3ab35ccbc81251aa2f23f83d7740bd8869465634e10e114c62bdfd640d69cebf6e78eb0970fa442746f7c3bea77d8589ab131827a95b274dd63ea04fba4c822aed4f8d0cd83ed83177d90332c7e66f103d4eb1dffb9ec0f52094bc7324a7c59819dca343776d6adb6850e7e7e83e2316db1c32feb4ea1c6f47a2ee41bb09d0a931f4fa3cdf7ada2bac7fe5ae2b997e24b8f8c52b0bee1482b74af68b407f0d78f3767bdcb42557c9f3aff0c2c2ea7745a0f588b00a751c1c8d2124a8bfd4d7f756587d239cc43a8cae1d67cf15c73dc8569a1ebdd7b8559e969541a547c272e52d57e5924ced9afc87cd2cdcdf8e30f423ebe26170393ecec06afa093839fc3a10fdc3f9ae19e79e4df6a9af6027e1129a7a6cb4517607eac80fa2b5f7853fe84028a66976ec4b4af50abe9ca959b844d7b2ab94903efec6dfc99ed9df2c329c0e8449b4d2a0a5bc2506d170884d2c6ea8aefebcaaf2abbfa3c4d9e4d201369a47792124a7909e247dc98b777b60a30b1461d857f164e3df983d9a900f8b11bddbdcf47c29d483033c9250f30e268ddf97e0ecbdd99d6fb3dc4562bb75f8f1e03d1aec424293fa5fc786444411a512fc582a9b577d5e88fb9d6f7346bd489f6eb4296e576e25c45e114fb6a3d0b6b831fb4ffe7486daadf2f0ad78aad8f8f7eba17e524de06e81a5af9c1aa09019fcc51611afc45fd30b8ecd2a2ae19758a1ffa55f79cdf53ef1bb55e49cb58d8b291664be61586ace94c7b378d685e54aeee09af828a3ce7335f9d03f8daabcf3543b8099956f60913db6ab401a427aca83772df4fce9081409ab426dae09739b50a8ab4c04a6d2e63b2c4c0b5f7fbd9dc76722057ab6cefc9ccae3abf251259f999fe09dbe1232b8ecf0e26b3d88d13a1001840f6b5942359c3ac75bfc321d9504bcc0e3f4add741125941ece20b4f90416b1f14edb4ecb1ced79cef883aa1d5193f3efeeae7e103891ae4840978fbe74d2cc90b7e02b4d839f15c75576b74e05f7a8af71823317a851bf0ff9171bdb16ffa36f57ccdef61065a62d64ba434571db0d476995e2bf4f148f0a6276b2fad82f03b91fe53f9a7acff3ecdfcedcc1eae42e52e1f7443114b8edc8a9d5c8a55727f7ee1d20e1ca55b42e51b47fc4d2313458ab9a5f05c1411dc8f11e4c57d3fe87183763bd24cfb8dc583c82ce9c0abbeb76310666d2236e2ca164c66e6336fd571967f35b2b0ba847922f5aabf97aea061d19eb9cc3cd6e764da9651f9e66577d9c8870734fe8e03d20ba107e6e2997ef7c42f940b88410c6bf46635cb5e402113411a98c75e8cfd3760235d7a486bfeea1a1dc188b7886172ac66d45a4bd87f60b8502382888f3806e47ffb74d9aef2519e91536f7798b7c22ee70566e686ae2b577f6341f7c47dc1ae41f2af983b80f7db23a3466b4f14e2afd591b19d36375acbc0c8ebf21654c8cf44ea49103299eb1ac6e96bb282a33a6ea204aa266b7d627c53757daa176f6cde932e7e0342977dbf7d5668e8ba984bf05dc610e5450eb4c3dcf7965eedc9b168a9c274ef6a050e93234a9bb5488a5aefaea9c442729b5416dcee6bac23f238bea2f1f4615c863a3ff7c7a081558237f2097b9ffa869f4b69fa32784f62c0b7a458411efd3a9108735de667c63c34af2225e382a17600acecc118ac1f81ec5ed9a26fa966bee8dc6f55c17bbd89a94932bf930b081fd310ef94c490855453551e9eb809e9d568500e6662564b65701a721208dcbef9a07650f9faa5a503d37f2e1b1912fbfb437f1f4c2d4a830a2dcfae905d323fe9a6a01cc8d88ff82a26a1c228103396b6756659b6a8a9ff8b31494cd8bde6205d6f62e698d9ae43ec740fafc60d798a85e5f8598486b6e82f23506c6004ec2f733cde633c3b45d9ef14fb223c020a67f305e33b5d3b239b5026ca679004e212725a4090818734435247b918dc9c65d2f0c580722651217ce7a2dec34c0f8c49e3dc051c01f5d445dca8675339f5c8b30ddc19f51ffa9e9c513f5fc9892dbe5ee5bc148ebf3033635401c8675f0fb43e503d73cd432e3ae2f25bf29b4088a3193c208f5ba51882364202dc3eed6f3ab9a871b4afa960f1776cc92deb7098ae6f61af30e715ab60d44f378bbb79f8fb663de164a5f4f582e6a17fd7e553e677632d1e8489a8138bc780418de30c0a95ae3ec3b0cdee51901869acc318a6725c0c06273dc67d393129278225b9384d978512befdf449f85146fbbe92e6b52cf40028b13d77ccc68e7b65e0c1a25f1f9d17b06b17f216729684fec1b4c0c3fdaf40af5dd1a3f4492d49e018f60f41d91524bc5d750789fd39b6e69cb66b1d86b2c1405331e3e793fb38dc447161f1ba02cee1519b72727aee9ede2898c5195adb0dc1c29fe6eca6598c5612a7f98bfe0d1853e44f47c94ae57bfdaee16711135226c9b44440abbeca5ed53b0aa58d34fa0faf766087135599d7b88a04d5ba7d69c148f3ebaee211a06438146d762c9f85d9007a228edd7d71ad18fe69a1af0caa6176eade25bea11504c2f0498a450d4d265bf97dea5b23c10560c9844d761702a5814fb355827ed6f46bcebb61d0a06c21746625a438c38496a941f447c2150c9125990ff7feef9d551a7adcbe0fd828ef4397c0799507599899259f61ff914f76be6077d0daa67ac0ab9093ecd0f78455b605a7885cae38a88b2955cecd37f972841f440de12831263ae64c7c78970138a738bcc66aae8c1a5c3ca0e166dde9860bbfc4c7bdb854cdb3d94ad4c723b2de03a50dfd120041a9b3107a480e7e108f729484d0df0d8e47c3a6b7ce0376e642ec5a267a91dd2bb1f1b3fe56a5097edddba482627cf79b66801fdd4ecb733067ad52e8fb9970be01a397ede6a3eaee6b8524f8e1cf00e0c5aed165b8b1533afaaeeaa82153f9840760b58b8a12e8168956db4522f2dd5a13183cf861acb0c0bb2735ff5cb683f633bd99ba2bfa7f1fcdd0a54d3b4fa9a7d3de250d7e40bd7b3a829a4f04fd71c64ed4f2503094773b45fdd821688d10ced9da17089b7c954f7e4a7f3e56226abee46d7eb93a6f3d039a7cf3dc14c18dd7502aa0e29e1c54bd1c2182138e06326f3cd4cddcf1997c9739f9e4a0899ce919f20b2def0ff103e5a9e123a1db4a544d438f789a0ed26664523bd55902364f4a21b2a92fcc111392dcdcf7ac0ece18c474d47a11d544b64836a62e3e1e0e9d15f8066315f000b7d8603f772704ed5b96798f28e4f699a671023a4d49c5a1e30d14145b9179e4b0f3424fd46cc22ca48cde74904876cc037a04aee32b53d02e4869427b6b18bf0ce7b5ffb75268788ca5029d2d12b2df068219af12d4e17e56f83e581b0fd6cb7048204803342ab8b146b0c237d6ac7aeb2ee21550c00da60286994f1e7ca53de19d874f7bb27c8c5e263fa350448ea28f4ac0cdfdc4c0d5096f2ab328d089dacb5e87f0a29814e8461470a22ee8a4a318f5e2b5317a027da39789b7b17bdcc9b26bdad1ba5e4580f671a3179a9fde91408aa41a68f47c71c524f8e413557b0656cc2a67e36da5a07ee7c55b0877ecf41a8616ec20f59d370f3eff6b10e68a6c55feff6f52f498bc9ab77224a7548ccdfa3de41ff44ee4bd32295a42d9fdac1a4c8484a7383a6bd5e39cb0249e939fe7f53075d6d4a54bcfbaec50853c5e4bfda256665ed56dcd20fbd04a1d40c200223ddac36a7229df6003f335227a6bde261f7e2f7c980e7e522c68abc63601b3b1a9ebdd4530e4f33b9986f582300", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x78, 0x0, 0x0, {0x410000003, 0x10, 0x0, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8001, 0x0, r4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1a}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e23, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x62, r2, r4}, {0x3, 0x6, 0x7, 0x5, 0x1, 0x9, 0x300000000000, 0x4}, {0x8, 0x7fffffff, 0xf, 0x5}, 0xfffffff8, 0x6e6bb9, 0x1, 0x1, 0x2, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d3, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3502, 0x4, 0x2, 0x6, 0x7, 0x7fff, 0x2}}, 0xe8) (rerun: 32) 4.157646547s ago: executing program 4 (id=4192): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x6, 0x0, 0x45, 0x1, 0xbdb], 0x1, 0x1c4213}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x10, 0x0, &(0x7f00000004c0)=[@request_death], 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$kcm(0x10, 0x7, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r3, 0x89e0, &(0x7f00000000c0)) futex_waitv(&(0x7f0000001740)=[{0xf, &(0x7f0000001380)=0x2, 0x6}], 0x1, 0x0, 0x0, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x3}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800ebfffe05e8fe50a10a000600014002020c600e41b0000900ac00bc0501000000168569f5e5b4d3ff0012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505dccd43408bb49150c58432a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xde}], 0x1}, 0x894) 3.674632119s ago: executing program 1 (id=4194): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f7b01acf", 0xe}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0x80000004000000, 0xc], 0x80a0000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x4100) 3.578000916s ago: executing program 4 (id=4195): r0 = syz_usb_connect(0x5, 0x2d, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_usb_disconnect(r0) close(0xffffffffffffffff) r3 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) close_range(r3, 0xffffffffffffffff, 0x0) 3.492961976s ago: executing program 1 (id=4196): sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8000000003080101000000000000000003000009050003003a0000003c"], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB="050000000000000000", @ANYBLOB="3d000e0080000000ffffffffffff080211000000ffffffffffff0000feffffffffffffff"], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106412, &(0x7f00000000c0)={0x0, 0x0}) r1 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d7", 0x6, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000000)=0x7ffc0000) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000a00)={0x4e8, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x7b}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xffffffff}, @NL80211_ATTR_FRAME={0x429, 0x33, @reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x2}, @device_a, @broadcast, @from_mac, {0x9}, @value=@ver_80211n={0x0, 0x6, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x1}}, 0x1012, 0x7, @device_a, {0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x4, [{0x12}, {0xc}, {0xc, 0x1}, {0x9, 0x1}]}, @val={0x2d, 0x1a, {0x300, 0x0, 0x0, 0x0, {0x10001, 0x3, 0x0, 0x259, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x8, 0x800, 0x3}}, [{0xdd, 0x13, "c0178b979ea0907e64f86dc8c879099b75bee1"}, {0xdd, 0x9a, "88d9b8d5c21239e0b21953bdfe843cd036b2d09fe760cde293125a05811e5b983addd14710acc51caeb0966ed41097077157afaf9385d1fe3303b163b88cafe118d234b5ff37c231ced120ba0f36522819481494b0f3cccd1a7c0f5e9292c5b98f08405436b43d1943b75befd8cf732371b66eaf5e2a8de5445ba39c8eb372bd7866e58eefb8d4713523cedb1d4b873b43e603f3fa21c30edb99"}, {0xdd, 0xa9, "d5a4d8297fbb8c8028ba2426756193db09436af3f391e9f8fb57810d3b71d9ae99301a8de0d3e711b4427a346d4a60ffcf7cb078cdbe2b2f2b685075b465f009a64dc2314feb46d32d6297160bb4c33660855abac6a3f721001d14f2ebe8cb924c0324bce143b348195b390aaacc68ba9f94e18aea4eddc69af2cac48020347429fe058daf5ff505cdae3d25fd9ef4fbd934a34be741d9c3499e5176116e20e5aa7f09bace36812885"}, {0xdd, 0x94, "e40d9b7894cdaf3963247290e8bc27036e97a326d1167f1edca6c27def93331b627994b9cc997bdbbaab5eb4a0d8dd5d0f465717b4949e8e5ae7abb2322969cd470445bd60b3c6f1777295fff0f928c58f0b2f4ad7a02597cc2fc309ca27787e1300158ff2cf258c7b685400a6508c28762f3d783bcf1a8c50a1ddc108c56b7edcf8b6d20938bb8fd59c22f0557470c10b543ac3"}, {0xdd, 0xd5, "2c3a0de19d84258be5670c8b009a46515ee3b108a03f155dd97b1790ff57c2f1803b26cc9e776ad948f39111b449a685f6808c988471f98cb87ebf5c177eabc67a48c63b39de322fbb397e9191661ddc4b90c164f6535f86ecf858a1d4e09dd1585b87428463251a153629f9b8834b0f881fc6a34af1feccc60fa3ee6266645588f238e684c9c86f41562c962862a24d31ee7b8e234bd127467668fab21465d359ad01bc0b7abc878ef37e1b68afbb05f53d0a7a3084305c6d7faabdd16c41cc98262d71cdc121c8fae5491a669cffba6dab60dfb7"}, {0xdd, 0x6a, "f48e7192a754ab5f2dcdd09e083dbf93438466070cec5f40d1fbff00074eee0ac62178866a45c6b02174638bdbc4c7aa9390e672864aec7b4c2f2e0703619300256db29560a5736fd0196f32315a643cd23b0ef29943c1b6e512251ec8f5f97714b9cd3fabe4633465c9"}, {0xdd, 0x9e, "c7eb2efa02debe2c942e23933974f567a22ea8e4212a8738de284f2c37d6959159eb7691a0bb8e01593b5798fc53a843a2781805fe02bb45bba707f1ccd30fbda62a097693785d8ef747ef40d7cfff8177948def618aa0c026672ffc91e4805cd289f724e46a63d4e7b7b1bb9a86c505a9cc3398fd1363c5e7b876d32cbf3300f4b0cb417b1a23519e1c7a2fbc98bd5989e92537928970ec7c1c1e96146e"}]}}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xef}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xbb0}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1000}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7e2}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x28e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2e0}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x29e}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x25d}]]}, 0x4e8}, 0x1, 0x0, 0x0, 0x24011}, 0x404c000) r4 = mq_open(&(0x7f0000000080)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxse\xee\x0e\xcd\xce6\xbf\xfa;\xb9-a\xb8\xef\x8de\x14\xbc\x9ej\xa1q\xa2\xa5\t\x98\x8a\x8f>\xba', 0x6e93ebbbcc088cf2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0xec}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000004000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0adff010000000000000dd6e4edef3d93452a09004b43370e9703890723f97e46bb", 0xd3}], 0x1}, 0x20004804) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 3.37520132s ago: executing program 1 (id=4197): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d01"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000800)=ANY=[@ANYBLOB="02a44601058a10162c3b70e1b617884430a755e2937e3aa6a745b5c599f0f3bfa997ef87a27939b04d3f17c73b97629a0bbe6669e10a27a93c9d5525e3623537c735129773e30c97eaecb65f3c4f99918156fca9195808cbb3b2d155e6990aea24f4eb406a48335b3aa756ff33e0f3fb2fe639d6baff50d45f3a6856032e2628da3817d4bd9c6a3408cc4ceddd6f799077360ad25626792f62", @ANYRES64=r0, @ANYRES16=r0, @ANYBLOB="ecd3ea229cb587fc59c47b1831e41dfa9f73ae691d13939d2db1b3a2b13dc07850c620b33e5c2f70239e40b183624e13c5034bb7065db5b8990afe09ed7c8934fef5d650cb7a84686a2ba62341066ecaa3cc8b8491d6fdca0a4ba66876fd4358f89f98dee8cefe209d411f4654f030f5c1f84958578ba3f61055ea6aa21b28667ef9025b1f93107170c8fb5e289cf2942bbb2ea7a431dbce93af8cb9eac2c9639bd5a780a3a6", @ANYRES64=r0, @ANYRES8=r0, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000000240)={0x14, &(0x7f0000000140)={0x0, 0x28, 0x9f, {0x9f, 0xb, "e11a966f228cdc72d959b3e6c81c2b6350718bd975694f210ed83911bd0aaa200b5937274fa3a00c4c058b66ecaf1150f33295e9d12243f8c00f0d79bdfbc1d2cabff567fde0b07bad1f7fd3116a115f8bba90038034ecf82352ca4d250cff1cc3c90b594fc41fe0186d4caa5b9bbb18b968f0cd66bf70437a915798f4751c6102064b8db36a7bf2330a1370565403e2e79af63d76b4e9ae14782954ea"}}, &(0x7f0000000200)={0x0, 0x3, 0x13, @string={0x13, 0x3, "788c723838ffe41bdcc224b1bd355fa75b"}}}, &(0x7f0000000580)={0x44, &(0x7f0000000280)={0x40, 0x10, 0xa0, "8b26e0e59f474796990032e903116d828dca383bba18d277a5eb87ebd8d61e0b3b2042a208b1a19f64fef4d2ce3a646b6446041cd1bb58a2462a3163c9bdf8812ccd38e61f99310c24eca602983a65f6a438af6d8f900c7e8bcea39ec05733ee750436e747534135e55e21ebf42ad4224de73ab7fa69d911a76221c7364faee19c88d063de900a26007164dec8b21f39f64a5dddc7a8351a5f554de6bd5747ad"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000440)={0x20, 0x81, 0x3, "b8313d"}, &(0x7f0000000480)={0x20, 0x82, 0x3, "e097af"}, &(0x7f0000000040)=ANY=[@ANYBLOB="2083010000f803ae803eef588c1f491a8f8cbba67e25996e1dcf9ff4194a966d8a70c6f973fde301538db98069a41baa68133b1602e9ba981f"], &(0x7f0000000500)={0x20, 0x84, 0x2, "1bbe"}, &(0x7f0000000540)={0x20, 0x85, 0x3, "c431a0"}}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000001640)={0x14, &(0x7f0000001500)={0x40, 0x31, 0xe6, {0xe6, 0x4, "87e3e5c1963d1b2c16f9897dacb96cc0368c6edb3e3b668f53a83951bca565064e12286378b63bd9edf20f2feb03dfef2add430f1bac1658355df70d4032750234e72e34feb8d956a77e07878aed225797822717a9156e74d81a5465d1492e46b9e89951ce0272236fcc231fb7a19c4a1caf777e06434930fcfa7fabd28a3fe11ff74e1c08e46880f7dfe5040fb1928003485bd2b4d927dc5c4581949a77ed2925ad7f36f3f921653e4eb7114ee6cc520f10b7275d5c079ed71f613eceff585f2b7502cad5194555c3262bea0bb60dfe0cae083ee6edb18fda8a5349b329dc229c672707"}}, &(0x7f0000001600)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001740)={0x1c, &(0x7f0000001680)={0x40, 0x5, 0x1, "e0"}, &(0x7f00000016c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000001700)={0x0, 0x8, 0x1, 0x1}}) syz_usb_control_io$printer(r0, &(0x7f0000000080)={0x14, &(0x7f0000000980)={0x0, 0x31, 0x101, {0x101, 0x30, "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"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140a}}}, &(0x7f0000000740)={0x34, &(0x7f00000000c0)={0x40, 0x18, 0x13, "69d393076949daaaa45c1340f768923339b5ed"}, &(0x7f0000000100)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000004c0)={0x0, 0x8, 0x1}, &(0x7f0000000ac0)={0x20, 0x0, 0xda, {0xd8, "cc2048f1645288fb15a295dd7ac330b12f9cfee44f532ba6fc2e1cd72ccc1c53c7b6f090918d8514f3033441d88fd576719b2786085dc7bab7330aafd2c0f61f3aa7de2612a9cdd0cdfc94ac217f3f234c921f61b4d6cff767e4996bbea45d423e870c1236c59bd4f07d455a32b11c682c04f35c086077b2484dffa8378e6c4d8b6ad6054d1849449dedce9863d3dd5927e16dcdd5c63cdfe04018612f67982b973ba4a1ded585bbe2d73cc987bc56404e1e285aafa98f36ff4da9252171719e92057ebf155ede227ad904c75da42016e217e73c414bce00"}}, &(0x7f0000000600)={0x20, 0x1, 0x1, 0x80}, &(0x7f0000000640)={0x20, 0x0, 0x1, 0xe}}) syz_usb_control_io(r0, 0x0, 0x0) 2.512238808s ago: executing program 6 (id=4200): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0) 2.485179395s ago: executing program 6 (id=4201): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="04010000110007000000000000000000ff020000000000000000000000000001e000000200006c"], 0x104}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800ff623140fd0704005026010203010902120001000000000904000000ff", @ANYRES32=0x0], 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/comedi4\x00', 0xa0040, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0x6411, 0x1) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r3, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7f}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x4090) 1.299485817s ago: executing program 6 (id=4202): waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000000), 0x1, &(0x7f0000000080)) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x40000) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000180)=0x2) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000001c0)={0x8b07, 0x56544943, 0x2, @discrete={0x33b781e7, 0x3}}) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000200), 0x2) pwrite64(r1, &(0x7f0000000240)="e5312c2f6006605ca78660e35408ef3530b83c43401383609a07d0b90424986a5a185216af01c35d2aeab582c4c087acb7836c13cb54be03f56ae31d8157bb25f54b7c65407328f3f17c7777dc2142c057b10d7445c3bf8bf2f0991d71b3c0761a37e61b0fbb0d3c12168882e40bf631e9db240216c8b80af932c5dce6c158d0ac36a69112bacc15c260fd", 0x8b, 0x101) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000300)={0x0, 0xaa, "6743d7be0445edd4b9e9c5fb69d92290f80c726eab78f4f1647d7211f58a856f84ebec558cae53218dc91a8aa36717a1064379d52b131ce2eec33208c276dcfc6a02823273a9e48c263d9bedada57b78eb92d592231bce1dedca6fa1acdd2dca62ec4ffc160d5f15e65f90a340f5a76c1973bfd9daab370bed10650947b710da2517a58c962440a9e259184745e8a20bd0d47ce877af6007e065bda01932c578d55b9a3cd621d19e9cf3"}, &(0x7f00000003c0)=0xb2) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000400)={r3, 0x7, 0x6, 0xf4c}, &(0x7f0000000440)=0x10) setsockopt$inet_buf(r0, 0x0, 0x25, &(0x7f0000000480)="8294092b1c86d99c3640a7161eda18e69972f0a7952c6a1f1c47245ea9f8d91721452c51f990fdf275e59770a4c2d3f7eb8fbd3866fc2f06fbb06274e67ec3a636d8e1c73acd63eea0eddbf78f383c97279b689f3de031cf87d30ed834157399fc3978e8b3d44c55e29e94b1a991954cc823f0accd8baac87b595a4809595545c42d5c6f6f228d6a1e5c26e8ca69e76e28d9ecda2461900c0ae309e3872ddd84643fcaaad053f29d2edf632d3a606a5243fb89", 0xb3) getpeername$unix(r0, &(0x7f0000000540), &(0x7f00000005c0)=0x6e) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000600)={0x0, 0xd, 0x8000, 0x9}, 0x10) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000640)={{0x1, 0x3, 0x3, 0x1, 0xfffffff7}}) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000680)=r3, 0x4) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f00000006c0)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000700), 0x80000) recvfrom$inet_nvme(r0, &(0x7f0000000740)=""/59, 0x3b, 0x2102, &(0x7f0000000780)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e21, 0x3}}, 0x80) recvmmsg$unix(r0, &(0x7f0000001740)=[{{&(0x7f0000000800)=@abs, 0x6e, &(0x7f0000000f00)=[{&(0x7f0000000880)=""/27, 0x1b}, {&(0x7f00000008c0)=""/249, 0xf9}, {&(0x7f00000009c0)=""/10, 0xa}, {&(0x7f0000000a00)=""/239, 0xef}, {&(0x7f0000000b00)=""/51, 0x33}, {&(0x7f0000000b40)=""/103, 0x67}, {&(0x7f0000000bc0)=""/215, 0xd7}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/10, 0xa}, {&(0x7f0000000e00)=""/230, 0xe6}], 0xa, &(0x7f0000000fc0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000001000)=""/125, 0x7d}, {&(0x7f0000001080)=""/243, 0xf3}, {&(0x7f0000001180)=""/182, 0xb6}, {&(0x7f0000001240)=""/1, 0x1}, {&(0x7f0000001280)=""/188, 0xbc}, {&(0x7f0000001340)=""/184, 0xb8}, {&(0x7f0000001400)=""/129, 0x81}, {&(0x7f00000014c0)=""/62, 0x3e}, {&(0x7f0000001500)=""/117, 0x75}], 0x9, &(0x7f0000001640)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}}], 0x2, 0x40000020, &(0x7f00000017c0)={0x77359400}) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001800), 0x210040, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r9, 0xc0189372, &(0x7f0000001840)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x400}}, './file0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PPPIOCSMRU1(r8, 0x40047452, &(0x7f0000001880)=0x8) ioctl$VT_OPENQRY(r8, 0x5600, &(0x7f00000018c0)) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001900), 0x480000, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r10, 0x8004510b, &(0x7f0000001940)) close_range(r7, r6, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001980)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f0000001c00)={{r5}, r11, 0x30, @inherit={0x78, &(0x7f0000001b80)={0x1, 0x6, 0x1ff, 0xcb0, {0x21, 0x1, 0x7, 0x0, 0x3c}, [0x4, 0x8, 0x81, 0xd4b, 0x5, 0x8000000000000001]}}, @name="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"}) 1.220843551s ago: executing program 6 (id=4203): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0800a000d608000008009f000d000000080026006c09"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fdb000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0xc, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000000000073000040"]) 1.196526917s ago: executing program 5 (id=4204): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)="93bffce623851797a8dc7901f0048678cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb600"/135, 0x87}, {&(0x7f0000000780)="029993440c7a1d95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e430bcb03", 0x3e}], 0x2}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000002c0)="ee3714aa7756572d12ad3cd80207f0ea76a0bc3c9248ca350afa19d6fbf95238e23db454a07c93a0831e31bdca1de56a48b55c0e56450721a31ba40ea9fb151d57852e371a2ace8bf18e4f347744d20282453e4d54f49b050ae57bc7515d2c546523d307712455c5a01a19915dceb94ccf3e2abdaf29911893b524ea0d6ca87d4825a041d818377f8477c405da221d3716f02e3fd540a49b538ddb62e1ef22a43d8beefc546acb78e429214b5ebe368617f4c2cdc1", 0xb5}, {&(0x7f0000000640)="bfb665aee08189f9e638cc", 0xb}, {&(0x7f0000000440)="a11ed88992f69f03e8662746dce791f15f3513eff62810f80754890c57886c99e7305e4ad9891be383211c908efdfa5f18696fbb91a875d68f9806da294261aac2f3d35db6e676e20b9af8e41cfcae44e420d981be17428dfed1a00355b222ffdbcd45b8d0ecc80d6c6db46dea0fa69794b7e69fc1b28dc82e2e91a47db6e035", 0x80}, {&(0x7f00000000c0)="d5ff9d56d9335281cc13bf8bedad4c66a6db8c247ddbdfffe8bc9c2eeda7c13c66352b61b4e6f9ef71", 0x29}], 0x4}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x501, 0x10008095, 0x0, 0x0) 1.152273629s ago: executing program 5 (id=4205): syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="1201001b765e8340980c4011f3310102030109021200010503c00109048d08005981120f"], &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000000080)={0x50, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xc080}, 0x48040) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB='d\x00\x00\x00'], 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000227bd7000fcdbdf251500000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990000000100520000000a00060008021100010000000a001a000802110000010000"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_usb_connect$uac1(0x2, 0xbc, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000106b1d01014000010203010902aa00030156c0000904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f24060205040200020001000100040c240202030202508000090111240605020507002e130a004ef10200000924030102020505f5090401000001020000092840d2e0ff0cbf8961ee0e04010101010200000905010920009301050725010003480f0904020000010200000904020101010200000905820920"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x408002, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x0, r4) write$tun(r5, &(0x7f0000000400)=ANY=[], 0xa2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f00000004c0)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0), r6, 0x2}}, 0x18) ioctl$TIOCSETD(r3, 0x5423, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r7 = syz_open_dev$cec(&(0x7f0000000180), 0x0, 0x0) r8 = syz_open_dev$cec(&(0x7f0000000180), 0x0, 0x0) ioctl$CEC_S_MODE(r8, 0x40046109, &(0x7f00000001c0)=0x2) ioctl$CEC_ADAP_S_LOG_ADDRS(r7, 0xc05c6104, &(0x7f00000001c0)={'Wc9\t', 0x9, 0x6, 0x3, 0x0, 0x0, "09000000e3ff00", "000200", "00ff0200", "798a202d", ["c2fffedbff00ffdfffffff00", "000008000000001000042371", "078d1600", "38a70ed483c9ac9f1636d333"]}) read$FUSE(0xffffffffffffffff, &(0x7f0000000800)={0x2020}, 0x2020) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x2}) r9 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4) 1.076795759s ago: executing program 6 (id=4206): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x20008005}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4000, 0x0, @remote, 0x5}, 0x1c) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0x1}], 0x1) r3 = syz_open_dev$video(&(0x7f0000000040), 0x2, 0x22200) ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, &(0x7f0000000080)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r5 = dup3(r4, r3, 0x80000) write$tun(r5, &(0x7f0000000140)=ANY=[@ANYRES32=r5], 0xfdef) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r7 = inotify_init1(0x0) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) r9 = syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r9, 0x40045612, &(0x7f0000000000)=0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2$9p(&(0x7f0000000240), 0x40000) lsetxattr$trusted_overlay_redirect(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x8, 0x6) close_range(r3, r1, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f00000007c0)=ANY=[@ANYBLOB="0a000000aaaaaaaaaabbaaaaaaaaaa3d86dd63749d3901242c"], 0x15e) 1.020015396s ago: executing program 6 (id=4207): syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) getpriority(0x1, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000000)={0xd64, 0x409, 0x6}) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000140)={0x1b0, 0x1d, &(0x7f0000000280)}) r1 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r2, 0x3ba0, &(0x7f00000007c0)={0x48, 0x8, r2, 0x0, 0x5, 0xf7, &(0x7f00000006c0)="1d561c221785ed476616c443e6e8ac1e924101b7e35f8f627dd56b8d13cbaab8fe80942f06a2ba213744f7424e2189a7bb24b738bf7fc678403661d30d8e157b21034477e9f0846b4710849c11b2c7a8322cc8bfd63a8624e32ba63e0d37f019c11c0f1def9558b69ff2bcd700318ef440c5352f4e5df11418d087c3030f044ef5cc380376ed82b9b70eeeadedd7b4953df994e8b84317d59e2719ce18ed27648991cfaa2747debac468c1801b6c10d11aeb25fa3656bf5a664145e82177c03f534a4f4aba7d2d1b8fb70fe2475c2dec50900e4c2993d226550b2d1ebba1fe4dc9cfdf73ba43b34e5d2d8f8dafa053d13982870ab3e3a3"}) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000180)=0x5, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = socket(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x41, @empty, @empty, 0x1, 0x10, 0x200, 0xa}}) socket$netlink(0x10, 0x3, 0xa) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000080)=0x0) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x1, r5}) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000240), 0x4) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="bcea"]) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r6, 0x40304580, &(0x7f00000001c0)={0x51, 0x3, 0x560c, {0x804, 0x5d5}, {0xfffa, 0x2}, @period={0x5b, 0x4, 0x1, 0x6d, 0x9ee, {0x5, 0x7, 0xfffb, 0xa}, 0x0, 0x0}}) open(0x0, 0x4200, 0x8) 443.191683ms ago: executing program 4 (id=4208): sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8000000003080101000000000000000003000009050003003a0000003c000480080002400000000008000240df05007b08000240000007ff080002"], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB="050000000000000000", @ANYBLOB="3d000e0080000000ffffffffffff080211000000ffffffffffff0000feffffffffffffff070001000406"], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000480)="d2679c4d2282c0675d952f25535f54c53b8decf641c0c23bee817ca8aae45ed8e58e00d0f16421573d2f10d3ccb404fbd509e103fbac7c672901e9e77f9726a8e85bfa732114dc443781f634a33e89a46f06f80de2d1eda0a7788d17766182d2ca3b479f55295852785e615d0f7289f007a777dba172b975603e5e729d73e8a4d4f2da7b1f600588aec011645cec", 0x8e, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x1d9002, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) io_setup(0x30, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f00000000c0), 0x4000) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r3, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000000c0)="01", 0x24}]) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 314.466446ms ago: executing program 1 (id=4209): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x26e1, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg$unix(r0, &(0x7f0000002100)={0x0, 0x0, 0x0}, 0x2100) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmsg$can_raw(r0, &(0x7f0000000280)={0x0, 0xe78, &(0x7f0000000900)=[{&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000340)=""/117, 0x75}, {&(0x7f00000004c0)=""/108, 0x6c}, {&(0x7f00000003c0)=""/143, 0x8f}, {&(0x7f0000005140)=""/4096, 0x1000}, {&(0x7f0000004140)=""/4096, 0x1000}], 0x6}, 0x40010102) 174.073416ms ago: executing program 1 (id=4210): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000440)=@ethtool_ringparam={0xe, 0x0, 0x0, 0x0, 0x0, 0x1002, 0x80000000}}) (fail_nth: 2) 51.856716ms ago: executing program 4 (id=4211): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x18, 0x0, &(0x7f0000000100)=[@exit_looper, @increfs_done={0x40106308, 0x1}], 0x0, 0x0, 0x0}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1, 0x2, 0x1b8, 0x2}) fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x3b5, 0x1fd}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000240)) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x18, 0x0, &(0x7f0000000100)=[@exit_looper, @increfs_done={0x40106308, 0x1}], 0x0, 0x0, 0x0}) (async) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1, 0x2, 0x1b8, 0x2}) (async) fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x3b5, 0x1fd}) (async) 0s ago: executing program 1 (id=4212): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d0102030109021200"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000800)=ANY=[@ANYBLOB="02a44601058a10162c3b70e1b617884430a755e2937e3aa6a745b5c599f0f3bfa997ef87a27939b04d3f17c73b97629a0bbe6669e10a27a93c9d5525e3623537c735129773e30c97eaecb65f3c4f99918156fca9195808cbb3b2d155e6990aea24f4eb406a48335b3aa756ff33e0f3fb2fe639d6baff50d45f3a6856032e2628da3817d4bd9c6a3408cc4ceddd6f799077360ad25626792f62", @ANYRES64=r0, @ANYRES16=r0, @ANYBLOB="ecd3ea229cb587fc59c47b1831e41dfa9f73ae691d13939d2db1b3a2b13dc07850c620b33e5c2f70239e40b183624e13c5034bb7065db5b8990afe09ed7c8934fef5d650cb7a84686a2ba62341066ecaa3cc8b8491d6fdca0a4ba66876fd4358f89f98dee8cefe209d411f4654f030f5c1f84958578ba3f61055ea6aa21b28667ef9025b1f93107170c8fb5e289cf2942bbb2ea7a431dbce93af8cb9eac2c9639bd5a780a3a6", @ANYRES64=r0, @ANYRES8=r0, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000000240)={0x14, &(0x7f0000000140)={0x0, 0x28, 0x9f, {0x9f, 0xb, "e11a966f228cdc72d959b3e6c81c2b6350718bd975694f210ed83911bd0aaa200b5937274fa3a00c4c058b66ecaf1150f33295e9d12243f8c00f0d79bdfbc1d2cabff567fde0b07bad1f7fd3116a115f8bba90038034ecf82352ca4d250cff1cc3c90b594fc41fe0186d4caa5b9bbb18b968f0cd66bf70437a915798f4751c6102064b8db36a7bf2330a1370565403e2e79af63d76b4e9ae14782954ea"}}, &(0x7f0000000200)={0x0, 0x3, 0x13, @string={0x13, 0x3, "788c723838ffe41bdcc224b1bd355fa75b"}}}, &(0x7f0000000580)={0x44, &(0x7f0000000280)={0x40, 0x10, 0xa0, "8b26e0e59f474796990032e903116d828dca383bba18d277a5eb87ebd8d61e0b3b2042a208b1a19f64fef4d2ce3a646b6446041cd1bb58a2462a3163c9bdf8812ccd38e61f99310c24eca602983a65f6a438af6d8f900c7e8bcea39ec05733ee750436e747534135e55e21ebf42ad4224de73ab7fa69d911a76221c7364faee19c88d063de900a26007164dec8b21f39f64a5dddc7a8351a5f554de6bd5747ad"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000440)={0x20, 0x81, 0x3, "b8313d"}, &(0x7f0000000480)={0x20, 0x82, 0x3, "e097af"}, &(0x7f0000000040)=ANY=[@ANYBLOB="2083010000f803ae803eef588c1f491a8f8cbba67e25996e1dcf9ff4194a966d8a70c6f973fde301538db98069a41baa68133b1602e9ba981f"], &(0x7f0000000500)={0x20, 0x84, 0x2, "1bbe"}, &(0x7f0000000540)={0x20, 0x85, 0x3, "c431a0"}}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000001640)={0x14, &(0x7f0000001500)={0x40, 0x31, 0xe6, {0xe6, 0x4, "87e3e5c1963d1b2c16f9897dacb96cc0368c6edb3e3b668f53a83951bca565064e12286378b63bd9edf20f2feb03dfef2add430f1bac1658355df70d4032750234e72e34feb8d956a77e07878aed225797822717a9156e74d81a5465d1492e46b9e89951ce0272236fcc231fb7a19c4a1caf777e06434930fcfa7fabd28a3fe11ff74e1c08e46880f7dfe5040fb1928003485bd2b4d927dc5c4581949a77ed2925ad7f36f3f921653e4eb7114ee6cc520f10b7275d5c079ed71f613eceff585f2b7502cad5194555c3262bea0bb60dfe0cae083ee6edb18fda8a5349b329dc229c672707"}}, &(0x7f0000001600)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001740)={0x1c, &(0x7f0000001680)={0x40, 0x5, 0x1, "e0"}, &(0x7f00000016c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000001700)={0x0, 0x8, 0x1, 0x1}}) syz_usb_control_io$printer(r0, &(0x7f0000000080)={0x14, &(0x7f0000000980)={0x0, 0x31, 0x101, {0x101, 0x30, "13557e9865d0151ef23efc8e2912b061f6bc0cf1765ca190bd13ca0fda1848298c8f0e1842d2928e565be3ab7c7a17bb9f568bbc57f77b68090947a6207e67500422e399f6f01ddf1cf6e06f971427dc32c433dbae36423d147b5a03998b337f449cd758ca600e5d16ca7047db1216813636d009ea63be007e2bec5f310192fe3a013719416e6939164219807a50e60ab3f22ec19b6368c799ca7a4fde0af56e26f89a39e04354cef0ec1149d7880de873b60cb8074fdbc4e0c04c2fa7f0666b3903fa48107523a7dd17b1fb6d36d7309d568c55c5bfd9010e9258c2a0442df30979a653f5f95baf5e07ea4c4921de7f87a8c447484827013792be07a1bc2c"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140a}}}, &(0x7f0000000740)={0x34, &(0x7f00000000c0)={0x40, 0x18, 0x13, "69d393076949daaaa45c1340f768923339b5ed"}, &(0x7f0000000100)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000004c0)={0x0, 0x8, 0x1}, &(0x7f0000000ac0)={0x20, 0x0, 0xda, {0xd8, "cc2048f1645288fb15a295dd7ac330b12f9cfee44f532ba6fc2e1cd72ccc1c53c7b6f090918d8514f3033441d88fd576719b2786085dc7bab7330aafd2c0f61f3aa7de2612a9cdd0cdfc94ac217f3f234c921f61b4d6cff767e4996bbea45d423e870c1236c59bd4f07d455a32b11c682c04f35c086077b2484dffa8378e6c4d8b6ad6054d1849449dedce9863d3dd5927e16dcdd5c63cdfe04018612f67982b973ba4a1ded585bbe2d73cc987bc56404e1e285aafa98f36ff4da9252171719e92057ebf155ede227ad904c75da42016e217e73c414bce00"}}, &(0x7f0000000600)={0x20, 0x1, 0x1, 0x80}, &(0x7f0000000640)={0x20, 0x0, 0x1, 0xe}}) kernel console output (not intermixed with test programs): 29] ? fs_reclaim_acquire+0x7d/0x100 [ 634.800134][T16729] should_fail_ex+0x414/0x560 [ 634.800164][T16729] should_failslab+0xa8/0x100 [ 634.800184][T16729] __kmalloc_noprof+0xcb/0x7f0 [ 634.800207][T16729] ? tomoyo_encode+0x28b/0x550 [ 634.800233][T16729] tomoyo_encode+0x28b/0x550 [ 634.800259][T16729] tomoyo_realpath_from_path+0x58d/0x5d0 [ 634.800282][T16729] ? tomoyo_domain+0xd9/0x130 [ 634.800309][T16729] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 634.800327][T16729] tomoyo_path_number_perm+0x1e8/0x5a0 [ 634.800348][T16729] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 634.800404][T16729] ? __fget_files+0x2a/0x420 [ 634.800429][T16729] ? __fget_files+0x3a0/0x420 [ 634.800454][T16729] ? __fget_files+0x2a/0x420 [ 634.800478][T16729] security_file_ioctl+0xcb/0x2d0 [ 634.800505][T16729] __se_sys_ioctl+0x47/0x170 [ 634.800525][T16729] do_syscall_64+0xfa/0xfa0 [ 634.800543][T16729] ? lockdep_hardirqs_on+0x9c/0x150 [ 634.800562][T16729] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.800578][T16729] ? clear_bhb_loop+0x60/0xb0 [ 634.800600][T16729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.800616][T16729] RIP: 0033:0x7f41f5d8eec9 [ 634.800632][T16729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 634.800647][T16729] RSP: 002b:00007f41f6c60038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 634.800666][T16729] RAX: ffffffffffffffda RBX: 00007f41f5fe5fa0 RCX: 00007f41f5d8eec9 [ 634.800679][T16729] RDX: 0000200000001140 RSI: 0000000000008914 RDI: 0000000000000004 [ 634.800690][T16729] RBP: 00007f41f6c60090 R08: 0000000000000000 R09: 0000000000000000 [ 634.800701][T16729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 634.800712][T16729] R13: 00007f41f5fe6038 R14: 00007f41f5fe5fa0 R15: 00007fffd80c5508 [ 634.800743][T16729] [ 634.800762][T16729] ERROR: Out of memory at tomoyo_realpath_from_path. [ 635.052933][T16729] team_slave_0: entered promiscuous mode [ 635.110583][T16733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 635.119609][T16733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 635.130444][T16734] netlink: 'syz.4.3914': attribute type 3 has an invalid length. [ 635.173265][ T1649] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 635.250408][T16742] FAULT_INJECTION: forcing a failure. [ 635.250408][T16742] name failslab, interval 1, probability 0, space 0, times 0 [ 635.265998][T16742] CPU: 0 UID: 0 PID: 16742 Comm: syz.4.3918 Not tainted syzkaller #0 PREEMPT(full) [ 635.266023][T16742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 635.266034][T16742] Call Trace: [ 635.266041][T16742] [ 635.266049][T16742] dump_stack_lvl+0x189/0x250 [ 635.266090][T16742] ? __pfx____ratelimit+0x10/0x10 [ 635.266109][T16742] ? __pfx_dump_stack_lvl+0x10/0x10 [ 635.266133][T16742] ? __pfx__printk+0x10/0x10 [ 635.266161][T16742] ? __pfx___might_resched+0x10/0x10 [ 635.266186][T16742] should_fail_ex+0x414/0x560 [ 635.266214][T16742] should_failslab+0xa8/0x100 [ 635.266233][T16742] __kmalloc_cache_noprof+0x6f/0x6f0 [ 635.266257][T16742] ? raw_open+0x8a/0x520 [ 635.266274][T16742] ? __pfx_raw_open+0x10/0x10 [ 635.266286][T16742] raw_open+0x8a/0x520 [ 635.266301][T16742] ? __pfx_raw_open+0x10/0x10 [ 635.266313][T16742] misc_open+0x2d5/0x350 [ 635.266332][T16742] chrdev_open+0x4cc/0x5e0 [ 635.266353][T16742] ? __pfx_chrdev_open+0x10/0x10 [ 635.266374][T16742] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 635.266398][T16742] ? __pfx_chrdev_open+0x10/0x10 [ 635.266415][T16742] do_dentry_open+0x953/0x13f0 [ 635.266448][T16742] vfs_open+0x3b/0x340 [ 635.266466][T16742] ? path_openat+0x2ecd/0x3830 [ 635.266485][T16742] path_openat+0x2ee5/0x3830 [ 635.266533][T16742] ? __pfx_path_openat+0x10/0x10 [ 635.266566][T16742] do_filp_open+0x1fa/0x410 [ 635.266580][T16742] ? __lock_acquire+0xab9/0xd20 [ 635.266602][T16742] ? __pfx_do_filp_open+0x10/0x10 [ 635.266637][T16742] ? _raw_spin_unlock+0x28/0x50 [ 635.266653][T16742] ? alloc_fd+0x64c/0x6c0 [ 635.266682][T16742] do_sys_openat2+0x121/0x1c0 [ 635.266707][T16742] ? __pfx_do_sys_openat2+0x10/0x10 [ 635.266731][T16742] ? exc_page_fault+0x82/0x100 [ 635.266753][T16742] ? do_user_addr_fault+0xc85/0x1380 [ 635.266775][T16742] __x64_sys_openat+0x138/0x170 [ 635.266802][T16742] do_syscall_64+0xfa/0xfa0 [ 635.266818][T16742] ? lockdep_hardirqs_on+0x9c/0x150 [ 635.266836][T16742] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.266853][T16742] ? clear_bhb_loop+0x60/0xb0 [ 635.266874][T16742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.266890][T16742] RIP: 0033:0x7f08cff8d710 [ 635.266906][T16742] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 635.266921][T16742] RSP: 002b:00007f08d0eacef0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 635.266940][T16742] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f08cff8d710 [ 635.266952][T16742] RDX: 0000000000000002 RSI: 00007f08d0011c6c RDI: 00000000ffffff9c [ 635.266964][T16742] RBP: 00007f08d0011c6c R08: 0000000000000000 R09: 0000000000000000 [ 635.266976][T16742] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 635.266986][T16742] R13: 000000000000004d R14: 0000200000000000 R15: 00007ffd2cd03f88 [ 635.267015][T16742] [ 635.552479][ C0] vkms_vblank_simulate: vblank timer overrun [ 635.568218][ T1649] usb 2-1: device descriptor read/64, error -71 [ 635.653244][ T24] usb 6-1: new low-speed USB device number 19 using dummy_hcd [ 635.687864][ T1649] usb usb2-port1: attempt power cycle [ 635.833352][ T24] usb 6-1: device descriptor read/64, error -71 [ 635.874285][T16754] kvm: pic: non byte write [ 636.043223][ T1649] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 636.078623][ T1649] usb 2-1: device descriptor read/8, error -71 [ 636.086316][ T24] usb 6-1: new low-speed USB device number 20 using dummy_hcd [ 636.214855][T15686] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 636.224429][ T24] usb 6-1: device descriptor read/64, error -71 [ 636.258830][T16772] netlink: 'syz.4.3930': attribute type 1 has an invalid length. [ 636.267772][T16772] netlink: 'syz.4.3930': attribute type 1 has an invalid length. [ 636.280206][T16772] netlink: 'syz.4.3930': attribute type 4 has an invalid length. [ 636.288044][T16772] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.3930'. [ 636.337099][ T24] usb usb6-port1: attempt power cycle [ 636.395659][T15686] usb 7-1: unable to get BOS descriptor or descriptor too short [ 636.404184][T15686] usb 7-1: not running at top speed; connect to a high speed hub [ 636.415008][T15686] usb 7-1: config 5 has an invalid interface number: 141 but max is 0 [ 636.423770][T15686] usb 7-1: config 5 has no interface number 0 [ 636.433501][T15686] usb 7-1: config 5 interface 141 has no altsetting 0 [ 636.444777][T15686] usb 7-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=31.f3 [ 636.456102][T15686] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.465861][T15686] usb 7-1: Product: syz [ 636.470037][T15686] usb 7-1: Manufacturer: syz [ 636.474979][T15686] usb 7-1: SerialNumber: syz [ 636.573590][ T1649] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 636.598728][ T1649] usb 2-1: Using ep0 maxpacket: 32 [ 636.605651][ T1649] usb 2-1: config 0 has an invalid interface number: 142 but max is 0 [ 636.614097][ T1649] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 636.624608][ T1649] usb 2-1: config 0 has no interface number 0 [ 636.630958][ T1649] usb 2-1: config 0 interface 142 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 636.644029][ T1649] usb 2-1: config 0 interface 142 has no altsetting 0 [ 636.653281][ T1649] usb 2-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice=48.3b [ 636.662371][ T1649] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.671837][ T1649] usb 2-1: Product: syz [ 636.676062][ T1649] usb 2-1: Manufacturer: syz [ 636.680676][ T1649] usb 2-1: SerialNumber: syz [ 636.685466][ T24] usb 6-1: new low-speed USB device number 21 using dummy_hcd [ 636.699356][ T1649] usb 2-1: config 0 descriptor?? [ 636.708470][T16757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 636.717423][T16757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 636.734052][ T24] usb 6-1: device descriptor read/8, error -71 [ 636.747028][T16757] sctp: [Deprecated]: syz.6.3923 (pid 16757) Use of int in max_burst socket option. [ 636.747028][T16757] Use struct sctp_assoc_value instead [ 636.774914][T15686] pcwd_usb: This driver only supports 1 device [ 636.791987][T15686] usb 7-1: USB disconnect, device number 18 [ 636.912849][ T1649] usbhid 2-1:0.142: couldn't find an input interrupt endpoint [ 636.926304][ T1649] usb 2-1: USB disconnect, device number 29 [ 636.983878][ T24] usb 6-1: new low-speed USB device number 22 using dummy_hcd [ 637.004453][ T24] usb 6-1: device descriptor read/8, error -71 [ 637.113497][ T24] usb usb6-port1: unable to enumerate USB device [ 637.504418][T16788] FAULT_INJECTION: forcing a failure. [ 637.504418][T16788] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 637.522847][T16788] CPU: 0 UID: 0 PID: 16788 Comm: syz.6.3935 Not tainted syzkaller #0 PREEMPT(full) [ 637.522872][T16788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 637.522884][T16788] Call Trace: [ 637.522891][T16788] [ 637.522900][T16788] dump_stack_lvl+0x189/0x250 [ 637.522938][T16788] ? __pfx____ratelimit+0x10/0x10 [ 637.522956][T16788] ? __pfx_dump_stack_lvl+0x10/0x10 [ 637.522980][T16788] ? __pfx__printk+0x10/0x10 [ 637.523004][T16788] ? fs_reclaim_acquire+0x7d/0x100 [ 637.523030][T16788] should_fail_ex+0x414/0x560 [ 637.523061][T16788] prepare_alloc_pages+0x213/0x610 [ 637.523086][T16788] __alloc_frozen_pages_noprof+0x123/0x370 [ 637.523111][T16788] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 637.523144][T16788] alloc_pages_bulk_noprof+0x560/0x710 [ 637.523165][T16788] ? alloc_pages_noprof+0xbe/0x190 [ 637.523186][T16788] kasan_populate_vmalloc+0xd1/0x270 [ 637.523210][T16788] ? do_raw_spin_unlock+0x122/0x240 [ 637.523231][T16788] alloc_vmap_area+0xd7a/0x14c0 [ 637.523270][T16788] ? __pfx_alloc_vmap_area+0x10/0x10 [ 637.523290][T16788] ? __kasan_kmalloc+0x93/0xb0 [ 637.523310][T16788] ? __get_vm_area_node+0x13f/0x300 [ 637.523333][T16788] ? copy_process+0x54b/0x3c20 [ 637.523354][T16788] __get_vm_area_node+0x1f8/0x300 [ 637.523384][T16788] __vmalloc_node_range_noprof+0x30c/0x12d0 [ 637.523408][T16788] ? copy_process+0x54b/0x3c20 [ 637.523436][T16788] ? percpu_ref_get_many+0x19/0x140 [ 637.523463][T16788] ? __memcg_slab_post_alloc_hook+0x517/0x7d0 [ 637.523492][T16788] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 637.523520][T16788] ? memcpy_and_pad+0x48/0x80 [ 637.523548][T16788] __vmalloc_node_noprof+0xc2/0x110 [ 637.523572][T16788] ? copy_process+0x54b/0x3c20 [ 637.523590][T16788] ? copy_process+0x54b/0x3c20 [ 637.523612][T16788] dup_task_struct+0x3d4/0x830 [ 637.523633][T16788] ? lockdep_hardirqs_on+0x9c/0x150 [ 637.523654][T16788] copy_process+0x54b/0x3c20 [ 637.523703][T16788] ? __pfx_copy_process+0x10/0x10 [ 637.523734][T16788] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 637.523759][T16788] vhost_task_create+0x1ed/0x350 [ 637.523784][T16788] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 637.523809][T16788] ? __pfx_vhost_task_create+0x10/0x10 [ 637.523840][T16788] ? __pfx_vhost_task_fn+0x10/0x10 [ 637.523880][T16788] kvm_mmu_post_init_vm+0x14c/0x300 [ 637.523900][T16788] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 637.523929][T16788] ? __mutex_trylock_common+0x153/0x260 [ 637.523955][T16788] ? __pfx___mutex_trylock_common+0x10/0x10 [ 637.523978][T16788] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 637.523995][T16788] ? rcu_is_watching+0x15/0xb0 [ 637.524016][T16788] ? trace_contention_end+0x39/0x120 [ 637.524036][T16788] ? look_up_lock_class+0x74/0x170 [ 637.524057][T16788] ? register_lock_class+0x51/0x320 [ 637.524078][T16788] ? __lock_acquire+0xab9/0xd20 [ 637.524122][T16788] kvm_vcpu_ioctl+0x95c/0xe90 [ 637.524145][T16788] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 637.524183][T16788] ? __fget_files+0x2a/0x420 [ 637.524207][T16788] ? __fget_files+0x3a0/0x420 [ 637.524224][T16788] ? __fget_files+0x2a/0x420 [ 637.524246][T16788] ? bpf_lsm_file_ioctl+0x9/0x20 [ 637.524265][T16788] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 637.524281][T16788] __se_sys_ioctl+0xfc/0x170 [ 637.524299][T16788] do_syscall_64+0xfa/0xfa0 [ 637.524316][T16788] ? lockdep_hardirqs_on+0x9c/0x150 [ 637.524333][T16788] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.524349][T16788] ? clear_bhb_loop+0x60/0xb0 [ 637.524370][T16788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.524385][T16788] RIP: 0033:0x7fabec98eec9 [ 637.524401][T16788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 637.524415][T16788] RSP: 002b:00007fabed884038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 637.524434][T16788] RAX: ffffffffffffffda RBX: 00007fabecbe5fa0 RCX: 00007fabec98eec9 [ 637.524447][T16788] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 637.524457][T16788] RBP: 00007fabed884090 R08: 0000000000000000 R09: 0000000000000000 [ 637.524468][T16788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 637.524477][T16788] R13: 00007fabecbe6038 R14: 00007fabecbe5fa0 R15: 00007ffddf71b4a8 [ 637.524508][T16788] [ 637.530632][T16793] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 637.536395][T16788] syz.6.3935: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 637.551867][T16793] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 637.556700][T16788] ,cpuset= [ 637.807415][T16799] FAULT_INJECTION: forcing a failure. [ 637.807415][T16799] name failslab, interval 1, probability 0, space 0, times 0 [ 637.810767][T16788] / [ 637.821436][T16799] CPU: 1 UID: 0 PID: 16799 Comm: syz.1.3940 Not tainted syzkaller #0 PREEMPT(full) [ 637.821460][T16799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 637.821470][T16799] Call Trace: [ 637.821478][T16799] [ 637.821485][T16799] dump_stack_lvl+0x189/0x250 [ 637.821513][T16799] ? __pfx____ratelimit+0x10/0x10 [ 637.821532][T16799] ? __pfx_dump_stack_lvl+0x10/0x10 [ 637.821555][T16799] ? __pfx__printk+0x10/0x10 [ 637.821577][T16799] ? save_netdev_trace_buffer+0x4e2/0x5e0 [ 637.821611][T16799] should_fail_ex+0x414/0x560 [ 637.821639][T16799] should_failslab+0xa8/0x100 [ 637.821659][T16799] kmem_cache_alloc_noprof+0x74/0x6e0 [ 637.821683][T16799] ? skb_clone+0x212/0x3a0 [ 637.821707][T16799] skb_clone+0x212/0x3a0 [ 637.821730][T16799] __netlink_deliver_tap+0x424/0x8b0 [ 637.821759][T16799] ? netlink_deliver_tap+0x2e/0x1b0 [ 637.821779][T16799] netlink_deliver_tap+0x19c/0x1b0 [ 637.821811][T16799] netlink_unicast+0x7fa/0x9e0 [ 637.821843][T16799] ? __pfx_netlink_unicast+0x10/0x10 [ 637.821874][T16799] ? netlink_sendmsg+0x642/0xb30 [ 637.821890][T16799] ? skb_put+0x11b/0x210 [ 637.821911][T16799] netlink_sendmsg+0x805/0xb30 [ 637.821938][T16799] ? __pfx_netlink_sendmsg+0x10/0x10 [ 637.821958][T16799] ? aa_sock_msg_perm+0xf1/0x1d0 [ 637.821981][T16799] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 637.821999][T16799] ? __pfx_netlink_sendmsg+0x10/0x10 [ 637.822017][T16799] __sock_sendmsg+0x21c/0x270 [ 637.822044][T16799] ____sys_sendmsg+0x505/0x830 [ 637.822068][T16799] ? __pfx_____sys_sendmsg+0x10/0x10 [ 637.822096][T16799] ? import_iovec+0x74/0xa0 [ 637.822120][T16799] ___sys_sendmsg+0x21f/0x2a0 [ 637.822142][T16799] ? __pfx____sys_sendmsg+0x10/0x10 [ 637.822194][T16799] ? __fget_files+0x2a/0x420 [ 637.822213][T16799] ? __fget_files+0x3a0/0x420 [ 637.822242][T16799] __x64_sys_sendmsg+0x19b/0x260 [ 637.822264][T16799] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 637.822293][T16799] ? __pfx_ksys_write+0x10/0x10 [ 637.822314][T16799] ? do_syscall_64+0xbe/0xfa0 [ 637.822337][T16799] do_syscall_64+0xfa/0xfa0 [ 637.822353][T16799] ? lockdep_hardirqs_on+0x9c/0x150 [ 637.822371][T16799] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.822391][T16799] ? clear_bhb_loop+0x60/0xb0 [ 637.822410][T16799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.822427][T16799] RIP: 0033:0x7f3299b8eec9 [ 637.822441][T16799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 637.822455][T16799] RSP: 002b:00007f329aaa2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 637.822473][T16799] RAX: ffffffffffffffda RBX: 00007f3299de5fa0 RCX: 00007f3299b8eec9 [ 637.822486][T16799] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000003 [ 637.822497][T16799] RBP: 00007f329aaa2090 R08: 0000000000000000 R09: 0000000000000000 [ 637.822508][T16799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 637.822518][T16799] R13: 00007f3299de6038 R14: 00007f3299de5fa0 R15: 00007ffdb5da9c88 [ 637.822547][T16799] [ 638.283360][ C0] vkms_vblank_simulate: vblank timer overrun [ 638.311384][T16788] ,mems_allowed=0-1 [ 638.317051][T16788] CPU: 0 UID: 0 PID: 16788 Comm: syz.6.3935 Not tainted syzkaller #0 PREEMPT(full) [ 638.317072][T16788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 638.317082][T16788] Call Trace: [ 638.317096][T16788] [ 638.317104][T16788] dump_stack_lvl+0x189/0x250 [ 638.317133][T16788] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 638.317155][T16788] ? __pfx_dump_stack_lvl+0x10/0x10 [ 638.317179][T16788] ? __pfx__printk+0x10/0x10 [ 638.317202][T16788] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 638.317226][T16788] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 638.317258][T16788] warn_alloc+0x214/0x310 [ 638.317276][T16788] ? lockdep_hardirqs_on+0x9c/0x150 [ 638.317299][T16788] ? __pfx_warn_alloc+0x10/0x10 [ 638.317321][T16788] ? copy_process+0x54b/0x3c20 [ 638.317343][T16788] ? __get_vm_area_node+0x211/0x300 [ 638.317373][T16788] __vmalloc_node_range_noprof+0x331/0x12d0 [ 638.317406][T16788] ? percpu_ref_get_many+0x19/0x140 [ 638.317433][T16788] ? __memcg_slab_post_alloc_hook+0x517/0x7d0 [ 638.317463][T16788] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 638.317490][T16788] ? memcpy_and_pad+0x48/0x80 [ 638.317518][T16788] __vmalloc_node_noprof+0xc2/0x110 [ 638.317542][T16788] ? copy_process+0x54b/0x3c20 [ 638.317560][T16788] ? copy_process+0x54b/0x3c20 [ 638.317583][T16788] dup_task_struct+0x3d4/0x830 [ 638.317604][T16788] ? lockdep_hardirqs_on+0x9c/0x150 [ 638.317626][T16788] copy_process+0x54b/0x3c20 [ 638.317674][T16788] ? __pfx_copy_process+0x10/0x10 [ 638.317707][T16788] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 638.317732][T16788] vhost_task_create+0x1ed/0x350 [ 638.317756][T16788] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 638.317780][T16788] ? __pfx_vhost_task_create+0x10/0x10 [ 638.317812][T16788] ? __pfx_vhost_task_fn+0x10/0x10 [ 638.317852][T16788] kvm_mmu_post_init_vm+0x14c/0x300 [ 638.317872][T16788] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 638.317895][T16788] ? __mutex_trylock_common+0x153/0x260 [ 638.317920][T16788] ? __pfx___mutex_trylock_common+0x10/0x10 [ 638.317943][T16788] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 638.317963][T16788] ? rcu_is_watching+0x15/0xb0 [ 638.317985][T16788] ? trace_contention_end+0x39/0x120 [ 638.318006][T16788] ? look_up_lock_class+0x74/0x170 [ 638.318027][T16788] ? register_lock_class+0x51/0x320 [ 638.318052][T16788] ? __lock_acquire+0xab9/0xd20 [ 638.318105][T16788] kvm_vcpu_ioctl+0x95c/0xe90 [ 638.318129][T16788] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 638.318168][T16788] ? __fget_files+0x2a/0x420 [ 638.318192][T16788] ? __fget_files+0x3a0/0x420 [ 638.318210][T16788] ? __fget_files+0x2a/0x420 [ 638.318233][T16788] ? bpf_lsm_file_ioctl+0x9/0x20 [ 638.318253][T16788] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 638.318269][T16788] __se_sys_ioctl+0xfc/0x170 [ 638.318289][T16788] do_syscall_64+0xfa/0xfa0 [ 638.318306][T16788] ? lockdep_hardirqs_on+0x9c/0x150 [ 638.318324][T16788] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.318341][T16788] ? clear_bhb_loop+0x60/0xb0 [ 638.318362][T16788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.318378][T16788] RIP: 0033:0x7fabec98eec9 [ 638.318393][T16788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 638.318408][T16788] RSP: 002b:00007fabed884038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 638.318426][T16788] RAX: ffffffffffffffda RBX: 00007fabecbe5fa0 RCX: 00007fabec98eec9 [ 638.318440][T16788] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 638.318450][T16788] RBP: 00007fabed884090 R08: 0000000000000000 R09: 0000000000000000 [ 638.318462][T16788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 638.318472][T16788] R13: 00007fabecbe6038 R14: 00007fabecbe5fa0 R15: 00007ffddf71b4a8 [ 638.318503][T16788] [ 638.318511][T16788] Mem-Info: [ 638.700697][T16788] active_anon:10870 inactive_anon:0 isolated_anon:0 [ 638.700697][T16788] active_file:8242 inactive_file:50378 isolated_file:1 [ 638.700697][T16788] unevictable:768 dirty:279 writeback:0 [ 638.700697][T16788] slab_reclaimable:7489 slab_unreclaimable:116385 [ 638.700697][T16788] mapped:37090 shmem:5469 pagetables:1515 [ 638.700697][T16788] sec_pagetables:0 bounce:0 [ 638.700697][T16788] kernel_misc_reclaimable:0 [ 638.700697][T16788] free:1278053 free_pcp:10114 free_cma:0 [ 638.799677][T16788] Node 0 active_anon:43424kB inactive_anon:0kB active_file:32968kB inactive_file:201308kB unevictable:1536kB isolated(anon):0kB isolated(file):4kB mapped:148300kB dirty:1120kB writeback:0kB shmem:20340kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13964kB pagetables:5472kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 638.823633][T16305] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 638.833255][T16788] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 638.884748][T16788] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 638.919192][T16788] lowmem_reserve[]: 0 2489 2490 2490 2490 [ 638.925367][T16788] Node 0 DMA32 free:1191864kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB free_highatomic:0KB active_anon:43596kB inactive_anon:0kB active_file:33068kB inactive_file:201308kB unevictable:1536kB writepending:1120kB zspages:0kB present:3129332kB managed:2549416kB mlocked:0kB bounce:0kB free_pcp:33836kB local_pcp:17212kB free_cma:0kB [ 638.958808][ C0] vkms_vblank_simulate: vblank timer overrun [ 638.971284][T16788] lowmem_reserve[]: 0 0 0 0 0 [ 638.976113][T16788] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 639.005448][ C0] vkms_vblank_simulate: vblank timer overrun [ 639.012070][T16788] lowmem_reserve[]: 0 0 0 0 0 [ 639.017087][T16788] Node 1 Normal free:3905000kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:8736kB local_pcp:1792kB free_cma:0kB [ 639.058844][T16788] lowmem_reserve[]: 0 0 0 0 0 [ 639.063813][T16788] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 639.085278][T16305] usb 2-1: unable to get BOS descriptor or descriptor too short [ 639.119712][T16305] usb 2-1: not running at top speed; connect to a high speed hub [ 639.128342][T16788] Node 0 DMA32: 636*4kB (M) 613*8kB (UME) 608*16kB (UM) 519*32kB (UME) 369*64kB (UME) 55*128kB (UME) 62*256kB (UME) 61*512kB (UME) 33*1024kB (UM) 9*2048kB (UME) 251*4096kB (M) = 1191864kB [ 639.150994][T16305] usb 2-1: config 5 has an invalid interface number: 141 but max is 0 [ 639.159451][T16305] usb 2-1: config 5 has no interface number 0 [ 639.167543][T16305] usb 2-1: config 5 interface 141 has no altsetting 0 [ 639.174620][T16788] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 639.186688][T16788] Node 1 Normal: 182*4kB (UME) 42*8kB (UME) 30*16kB (UME) 231*32kB (UME) 70*64kB (UME) 13*128kB (UME) 3*256kB (ME) 4*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 948*4096kB (M) = 3905000kB [ 639.204964][ C0] vkms_vblank_simulate: vblank timer overrun [ 639.218411][T16305] usb 2-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=31.f3 [ 639.235627][T16305] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.253510][T16305] usb 2-1: Product: syz [ 639.261151][T16305] usb 2-1: Manufacturer: syz [ 639.266523][T16788] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 639.278077][T16305] usb 2-1: SerialNumber: syz [ 639.290052][T16788] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 639.302327][T16817] binder: BINDER_SET_CONTEXT_MGR already set [ 639.306195][T16788] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 639.318568][T16788] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 639.318572][T16817] binder: 16816:16817 ioctl 4018620d 2000000002c0 returned -16 [ 639.336040][T16788] 64086 total pagecache pages [ 639.340772][T16788] 0 pages in swap cache [ 639.345789][T16788] Free swap = 124996kB [ 639.352898][T16788] Total swap = 124996kB [ 639.357238][T16788] 2097051 pages RAM [ 639.361066][T16788] 0 pages HighMem/MovableOnly [ 639.366145][T16788] 427991 pages reserved [ 639.370348][T16788] 0 pages cma reserved [ 639.403476][T16823] binder: 16816:16823 ioctl c0306201 200000000280 returned -14 [ 639.515926][T16801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 639.543765][T16801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.645214][T16801] sctp: [Deprecated]: syz.1.3941 (pid 16801) Use of int in max_burst socket option. [ 639.645214][T16801] Use struct sctp_assoc_value instead [ 639.702222][T16305] pcwd_usb: This driver only supports 1 device [ 639.729543][T16305] usb 2-1: USB disconnect, device number 30 [ 639.803439][ T24] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 639.977636][ T24] usb 7-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 639.986911][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.995203][ T24] usb 7-1: Product: syz [ 640.000521][T16846] fuse: Bad value for 'fd' [ 640.004374][ T24] usb 7-1: Manufacturer: syz [ 640.009682][ T24] usb 7-1: SerialNumber: syz [ 640.017653][T16837] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 640.018833][ T24] usb 7-1: config 0 descriptor?? [ 640.029877][T16837] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 640.032998][ T24] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 640.048129][T16837] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 640.054460][T16837] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 640.062244][T16837] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 640.071539][T16837] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 640.079937][T16837] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 640.088133][T16837] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 640.094528][T16837] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 640.104090][T16837] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 640.112648][T16837] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 640.119029][T16837] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 640.126387][T16837] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 640.243755][T16826] netlink: 'syz.6.3950': attribute type 27 has an invalid length. [ 640.457651][T16859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.473715][T16859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.499876][T15686] usb 7-1: USB disconnect, device number 19 [ 640.671604][T16867] FAULT_INJECTION: forcing a failure. [ 640.671604][T16867] name failslab, interval 1, probability 0, space 0, times 0 [ 640.686960][T16867] CPU: 1 UID: 0 PID: 16867 Comm: syz.1.3968 Not tainted syzkaller #0 PREEMPT(full) [ 640.686985][T16867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 640.686995][T16867] Call Trace: [ 640.687003][T16867] [ 640.687011][T16867] dump_stack_lvl+0x189/0x250 [ 640.687035][T16867] ? __pfx____ratelimit+0x10/0x10 [ 640.687047][T16867] ? __pfx_dump_stack_lvl+0x10/0x10 [ 640.687061][T16867] ? __pfx__printk+0x10/0x10 [ 640.687077][T16867] ? __pfx___might_resched+0x10/0x10 [ 640.687089][T16867] ? fs_reclaim_acquire+0x7d/0x100 [ 640.687102][T16867] should_fail_ex+0x414/0x560 [ 640.687120][T16867] should_failslab+0xa8/0x100 [ 640.687131][T16867] __kmalloc_noprof+0xcb/0x7f0 [ 640.687145][T16867] ? security_task_alloc+0x4d/0x360 [ 640.687155][T16867] ? perf_event_init_task+0x12d/0x4b0 [ 640.687169][T16867] security_task_alloc+0x4d/0x360 [ 640.687180][T16867] copy_process+0x1530/0x3c20 [ 640.687202][T16867] ? copy_process+0x97f/0x3c20 [ 640.687219][T16867] ? __pfx_copy_process+0x10/0x10 [ 640.687238][T16867] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 640.687253][T16867] vhost_task_create+0x1ed/0x350 [ 640.687268][T16867] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 640.687283][T16867] ? __pfx_vhost_task_create+0x10/0x10 [ 640.687301][T16867] ? __pfx_vhost_task_fn+0x10/0x10 [ 640.687325][T16867] kvm_mmu_post_init_vm+0x14c/0x300 [ 640.687337][T16867] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 640.687351][T16867] ? __mutex_trylock_common+0x153/0x260 [ 640.687366][T16867] ? __pfx___mutex_trylock_common+0x10/0x10 [ 640.687380][T16867] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 640.687391][T16867] ? rcu_is_watching+0x15/0xb0 [ 640.687403][T16867] ? trace_contention_end+0x39/0x120 [ 640.687416][T16867] ? look_up_lock_class+0x74/0x170 [ 640.687434][T16867] ? register_lock_class+0x51/0x320 [ 640.687455][T16867] ? __lock_acquire+0xab9/0xd20 [ 640.687490][T16867] kvm_vcpu_ioctl+0x95c/0xe90 [ 640.687504][T16867] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 640.687525][T16867] ? __fget_files+0x2a/0x420 [ 640.687545][T16867] ? __fget_files+0x3a0/0x420 [ 640.687556][T16867] ? __fget_files+0x2a/0x420 [ 640.687570][T16867] ? bpf_lsm_file_ioctl+0x9/0x20 [ 640.687581][T16867] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 640.687591][T16867] __se_sys_ioctl+0xfc/0x170 [ 640.687601][T16867] do_syscall_64+0xfa/0xfa0 [ 640.687612][T16867] ? lockdep_hardirqs_on+0x9c/0x150 [ 640.687622][T16867] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.687632][T16867] ? clear_bhb_loop+0x60/0xb0 [ 640.687643][T16867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.687653][T16867] RIP: 0033:0x7f3299b8eec9 [ 640.687663][T16867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 640.687672][T16867] RSP: 002b:00007f329aaa2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 640.687683][T16867] RAX: ffffffffffffffda RBX: 00007f3299de5fa0 RCX: 00007f3299b8eec9 [ 640.687690][T16867] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 640.687696][T16867] RBP: 00007f329aaa2090 R08: 0000000000000000 R09: 0000000000000000 [ 640.687702][T16867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 640.687707][T16867] R13: 00007f3299de6038 R14: 00007f3299de5fa0 R15: 00007ffdb5da9c88 [ 640.687724][T16867] [ 641.154356][ T24] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 641.305251][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 641.316316][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 641.326259][ T24] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 641.335436][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.346285][ T24] usb 6-1: config 0 descriptor?? [ 641.653287][ T5899] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 641.771871][ T24] usbhid 6-1:0.0: can't add hid device: -71 [ 641.778073][ T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 641.805309][ T24] usb 6-1: USB disconnect, device number 23 [ 641.826349][ T5899] usb 2-1: unable to get BOS descriptor or descriptor too short [ 641.840370][ T5899] usb 2-1: not running at top speed; connect to a high speed hub [ 641.865612][T16890] can: request_module (can-proto-0) failed. [ 641.872027][ T5899] usb 2-1: config 5 has an invalid interface number: 141 but max is 0 [ 641.882086][ T5899] usb 2-1: config 5 has no interface number 0 [ 641.888347][ T5899] usb 2-1: config 5 interface 141 has no altsetting 0 [ 641.906238][ T5899] usb 2-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=31.f3 [ 641.922518][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.930857][ T5899] usb 2-1: Product: syz [ 641.936493][ T5899] usb 2-1: Manufacturer: syz [ 641.941177][ T5899] usb 2-1: SerialNumber: syz [ 641.946001][ T5186] Bluetooth: hci4: command 0x0406 tx timeout [ 642.106467][ T5186] Bluetooth: hci1: command 0x0c1a tx timeout [ 642.107337][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 642.112896][ T5186] Bluetooth: hci3: command 0x0406 tx timeout [ 642.164545][T16878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 642.174399][T16878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 642.183647][ T5186] Bluetooth: hci5: command 0x0405 tx timeout [ 642.207947][T16878] sctp: [Deprecated]: syz.1.3971 (pid 16878) Use of int in max_burst socket option. [ 642.207947][T16878] Use struct sctp_assoc_value instead [ 642.253931][ T5899] pcwd_usb: This driver only supports 1 device [ 642.262551][ T5899] usb 2-1: USB disconnect, device number 31 [ 642.283901][T16305] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 642.418654][T16904] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3981'. [ 642.445181][T16305] usb 7-1: Using ep0 maxpacket: 32 [ 642.452110][T16305] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 642.468279][T16305] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 642.478141][T16305] usb 7-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 642.487460][T16305] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.512614][T16305] usb 7-1: config 0 descriptor?? [ 642.578634][T16910] 9pnet_fd: Insufficient options for proto=fd [ 642.660318][T16912] FAULT_INJECTION: forcing a failure. [ 642.660318][T16912] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 642.673655][T16912] CPU: 1 UID: 0 PID: 16912 Comm: syz.4.3983 Not tainted syzkaller #0 PREEMPT(full) [ 642.673678][T16912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 642.673690][T16912] Call Trace: [ 642.673697][T16912] [ 642.673705][T16912] dump_stack_lvl+0x189/0x250 [ 642.673734][T16912] ? __pfx____ratelimit+0x10/0x10 [ 642.673753][T16912] ? __pfx_dump_stack_lvl+0x10/0x10 [ 642.673777][T16912] ? __pfx__printk+0x10/0x10 [ 642.673811][T16912] should_fail_ex+0x414/0x560 [ 642.673841][T16912] _copy_to_user+0x31/0xb0 [ 642.673863][T16912] simple_read_from_buffer+0xe1/0x170 [ 642.673887][T16912] proc_fail_nth_read+0x1b3/0x220 [ 642.673914][T16912] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 642.673941][T16912] ? rw_verify_area+0x2a6/0x4d0 [ 642.673957][T16912] ? __lock_acquire+0xab9/0xd20 [ 642.673974][T16912] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 642.674000][T16912] vfs_read+0x200/0xa30 [ 642.674017][T16912] ? fdget_pos+0x247/0x320 [ 642.674041][T16912] ? __pfx___mutex_lock+0x10/0x10 [ 642.674061][T16912] ? __pfx_vfs_read+0x10/0x10 [ 642.674080][T16912] ? __fget_files+0x2a/0x420 [ 642.674104][T16912] ? __fget_files+0x3a0/0x420 [ 642.674123][T16912] ? __fget_files+0x2a/0x420 [ 642.674151][T16912] ksys_read+0x145/0x250 [ 642.674171][T16912] ? __pfx_ksys_read+0x10/0x10 [ 642.674193][T16912] ? do_syscall_64+0xbe/0xfa0 [ 642.674216][T16912] do_syscall_64+0xfa/0xfa0 [ 642.674233][T16912] ? lockdep_hardirqs_on+0x9c/0x150 [ 642.674251][T16912] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.674268][T16912] ? clear_bhb_loop+0x60/0xb0 [ 642.674289][T16912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.674305][T16912] RIP: 0033:0x7f08cff8d8dc [ 642.674321][T16912] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 642.674336][T16912] RSP: 002b:00007f08d0eaf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 642.674355][T16912] RAX: ffffffffffffffda RBX: 00007f08d01e5fa0 RCX: 00007f08cff8d8dc [ 642.674367][T16912] RDX: 000000000000000f RSI: 00007f08d0eaf0a0 RDI: 0000000000000004 [ 642.674378][T16912] RBP: 00007f08d0eaf090 R08: 0000000000000000 R09: 0000000000000000 [ 642.674390][T16912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 642.674400][T16912] R13: 00007f08d01e6038 R14: 00007f08d01e5fa0 R15: 00007ffd2cd03f88 [ 642.674431][T16912] [ 643.009473][T16919] netlink: 'syz.4.3985': attribute type 16 has an invalid length. [ 643.019061][T16919] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3985'. [ 643.047953][T16919] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.171746][T16305] usbhid 7-1:0.0: can't add hid device: -71 [ 643.177952][T16305] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 643.199000][T16305] usb 7-1: USB disconnect, device number 20 [ 643.522740][T16931] veth0_vlan: left promiscuous mode [ 643.785058][T16936] netlink: 'syz.6.3990': attribute type 17 has an invalid length. [ 644.023858][ T5186] Bluetooth: hci4: command 0x0406 tx timeout [ 644.152928][ T5942] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 644.180118][ T30] audit: type=1326 audit(1758934440.659:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16953 comm="syz.5.3996" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f41f5d8eec9 code=0x0 [ 644.202595][ T5186] Bluetooth: hci2: command 0x0c1a tx timeout [ 644.202638][ T5186] Bluetooth: hci1: command 0x0c1a tx timeout [ 644.203339][ T5186] Bluetooth: hci3: command 0x0406 tx timeout [ 644.263264][ T5186] Bluetooth: hci5: command 0x0405 tx timeout [ 644.326545][ T5942] usb 2-1: unable to get BOS descriptor or descriptor too short [ 644.338589][ T5942] usb 2-1: not running at top speed; connect to a high speed hub [ 644.348658][ T5942] usb 2-1: config 5 has an invalid interface number: 141 but max is 0 [ 644.357431][ T5942] usb 2-1: config 5 has no interface number 0 [ 644.364249][ T5942] usb 2-1: config 5 interface 141 has no altsetting 0 [ 644.377579][ T5942] usb 2-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=31.f3 [ 644.386736][ T5942] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.395342][ T5942] usb 2-1: Product: syz [ 644.399510][ T5942] usb 2-1: Manufacturer: syz [ 644.404533][ T5942] usb 2-1: SerialNumber: syz [ 644.423244][T16305] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 644.550838][T16963] FAULT_INJECTION: forcing a failure. [ 644.550838][T16963] name failslab, interval 1, probability 0, space 0, times 0 [ 644.564062][T16963] CPU: 0 UID: 0 PID: 16963 Comm: syz.4.4001 Not tainted syzkaller #0 PREEMPT(full) [ 644.564079][T16963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 644.564086][T16963] Call Trace: [ 644.564090][T16963] [ 644.564095][T16963] dump_stack_lvl+0x189/0x250 [ 644.564117][T16963] ? __pfx____ratelimit+0x10/0x10 [ 644.564128][T16963] ? __pfx_dump_stack_lvl+0x10/0x10 [ 644.564143][T16963] ? __pfx__printk+0x10/0x10 [ 644.564156][T16963] ? save_netdev_trace_buffer+0x4e2/0x5e0 [ 644.564176][T16963] should_fail_ex+0x414/0x560 [ 644.564195][T16963] should_failslab+0xa8/0x100 [ 644.564207][T16963] kmem_cache_alloc_noprof+0x74/0x6e0 [ 644.564228][T16963] ? skb_clone+0x212/0x3a0 [ 644.564244][T16963] skb_clone+0x212/0x3a0 [ 644.564258][T16963] __netlink_deliver_tap+0x424/0x8b0 [ 644.564276][T16963] ? netlink_deliver_tap+0x2e/0x1b0 [ 644.564287][T16963] netlink_deliver_tap+0x19c/0x1b0 [ 644.564298][T16963] netlink_unicast+0x7fa/0x9e0 [ 644.564317][T16963] ? __pfx_netlink_unicast+0x10/0x10 [ 644.564333][T16963] ? netlink_sendmsg+0x642/0xb30 [ 644.564342][T16963] ? skb_put+0x11b/0x210 [ 644.564355][T16963] netlink_sendmsg+0x805/0xb30 [ 644.564370][T16963] ? __pfx_netlink_sendmsg+0x10/0x10 [ 644.564382][T16963] ? aa_sock_msg_perm+0xf1/0x1d0 [ 644.564396][T16963] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 644.564406][T16963] ? __pfx_netlink_sendmsg+0x10/0x10 [ 644.564417][T16963] __sock_sendmsg+0x21c/0x270 [ 644.564433][T16963] ____sys_sendmsg+0x505/0x830 [ 644.564448][T16963] ? __pfx_____sys_sendmsg+0x10/0x10 [ 644.564470][T16963] ? import_iovec+0x74/0xa0 [ 644.564485][T16963] ___sys_sendmsg+0x21f/0x2a0 [ 644.564498][T16963] ? __pfx____sys_sendmsg+0x10/0x10 [ 644.564528][T16963] ? __fget_files+0x2a/0x420 [ 644.564539][T16963] ? __fget_files+0x3a0/0x420 [ 644.564556][T16963] __x64_sys_sendmsg+0x19b/0x260 [ 644.564569][T16963] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 644.564585][T16963] ? __pfx_ksys_write+0x10/0x10 [ 644.564598][T16963] ? do_syscall_64+0xbe/0xfa0 [ 644.564611][T16963] do_syscall_64+0xfa/0xfa0 [ 644.564621][T16963] ? lockdep_hardirqs_on+0x9c/0x150 [ 644.564632][T16963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.564641][T16963] ? clear_bhb_loop+0x60/0xb0 [ 644.564653][T16963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.564662][T16963] RIP: 0033:0x7f08cff8eec9 [ 644.564671][T16963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 644.564680][T16963] RSP: 002b:00007f08d0eaf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 644.564691][T16963] RAX: ffffffffffffffda RBX: 00007f08d01e5fa0 RCX: 00007f08cff8eec9 [ 644.564701][T16963] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 644.564710][T16963] RBP: 00007f08d0eaf090 R08: 0000000000000000 R09: 0000000000000000 [ 644.564719][T16963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 644.564729][T16963] R13: 00007f08d01e6038 R14: 00007f08d01e5fa0 R15: 00007ffd2cd03f88 [ 644.564756][T16963] [ 644.866336][ C0] vkms_vblank_simulate: vblank timer overrun [ 644.911239][T16943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 644.926895][T16943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 644.930026][T16965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 644.935803][T16305] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 644.953378][T16305] usb 7-1: config 0 interface 0 has no altsetting 0 [ 644.963223][T16305] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 644.972323][T16305] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 644.982417][T16305] usb 7-1: Product: syz [ 644.986670][T16305] usb 7-1: Manufacturer: syz [ 644.989485][T16943] sctp: [Deprecated]: syz.1.3993 (pid 16943) Use of int in max_burst socket option. [ 644.989485][T16943] Use struct sctp_assoc_value instead [ 644.991292][T16305] usb 7-1: SerialNumber: syz [ 645.014181][T16965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 645.030296][T16965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 645.040202][T16965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 645.054644][T16305] usb 7-1: config 0 descriptor?? [ 645.070527][T16305] usb 7-1: selecting invalid altsetting 0 [ 645.121752][ T5942] pcwd_usb: This driver only supports 1 device [ 645.132041][ T5942] usb 2-1: USB disconnect, device number 32 [ 645.374099][ T5942] usb 7-1: USB disconnect, device number 21 [ 645.393205][T16564] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 645.523268][T16564] usb 6-1: device descriptor read/64, error -71 [ 645.623703][T16974] comedi comedi4: bad chanlist[0]=0x04020006 chan=6 range length=2 [ 645.763302][T16564] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 645.871114][T16981] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.4008'. [ 645.894322][T16564] usb 6-1: device descriptor read/64, error -71 [ 645.907577][T15686] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 645.922255][T16983] input input81: cannot allocate more than FF_MAX_EFFECTS effects [ 645.931982][T16983] ieee802154 phy1 wpan1: encryption failed: -22 [ 646.003759][T16564] usb usb6-port1: attempt power cycle [ 646.077938][T15686] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 646.080442][T16988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 646.090832][T15686] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.099420][T16988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 646.123347][T15686] usb 2-1: Product: syz [ 646.127590][T15686] usb 2-1: Manufacturer: syz [ 646.132191][T15686] usb 2-1: SerialNumber: syz [ 646.263278][ T5186] Bluetooth: hci1: command 0x0c1a tx timeout [ 646.263305][T16900] Bluetooth: hci2: command 0x0c1a tx timeout [ 646.343433][T16900] Bluetooth: hci5: command 0x0405 tx timeout [ 646.343430][T16564] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 646.365420][T16564] usb 6-1: device descriptor read/8, error -71 [ 646.433254][T16305] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 646.562265][T15686] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 646.575724][T15686] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 646.588950][T15686] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 646.599122][T15686] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 646.613238][T16305] usb 7-1: Using ep0 maxpacket: 32 [ 646.618469][T16564] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 646.629649][T16305] usb 7-1: config 0 has an invalid interface number: 186 but max is 0 [ 646.638244][T16305] usb 7-1: config 0 has no interface number 0 [ 646.644884][T16564] usb 6-1: device descriptor read/8, error -71 [ 646.652675][T16305] usb 7-1: New USB device found, idVendor=0856, idProduct=ac29, bcdDevice=a8.3c [ 646.661836][T16305] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.670716][T16305] usb 7-1: Product: syz [ 646.670991][ T56] block nbd3: Possible stuck request ffff88802664e000: control (read@0,1024B). Runtime 150 seconds [ 646.675045][T16305] usb 7-1: Manufacturer: syz [ 646.686132][ T56] block nbd3: Possible stuck request ffff88802664e1c0: control (read@1024,1024B). Runtime 150 seconds [ 646.690382][T16305] usb 7-1: SerialNumber: syz [ 646.711654][ T56] block nbd3: Possible stuck request ffff88802664e380: control (read@2048,1024B). Runtime 150 seconds [ 646.724766][ T56] block nbd3: Possible stuck request ffff88802664e540: control (read@3072,1024B). Runtime 150 seconds [ 646.739755][T16305] usb 7-1: config 0 descriptor?? [ 646.753680][T16564] usb usb6-port1: unable to enumerate USB device [ 646.808603][T16995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 646.817582][T16995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 646.832764][T16995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 646.841562][T16995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 646.963204][T16305] mos7840 7-1:0.186: required endpoints missing [ 647.418131][T17001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 647.426937][T17001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 647.975194][T17004] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.4017'. [ 648.046209][T17009] FAULT_INJECTION: forcing a failure. [ 648.046209][T17009] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 648.060656][T17009] CPU: 0 UID: 0 PID: 17009 Comm: syz.4.4019 Not tainted syzkaller #0 PREEMPT(full) [ 648.060679][T17009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 648.060691][T17009] Call Trace: [ 648.060698][T17009] [ 648.060705][T17009] dump_stack_lvl+0x189/0x250 [ 648.060732][T17009] ? __pfx____ratelimit+0x10/0x10 [ 648.060761][T17009] ? __pfx_dump_stack_lvl+0x10/0x10 [ 648.060790][T17009] ? __pfx__printk+0x10/0x10 [ 648.060811][T17009] ? __might_fault+0xb0/0x130 [ 648.060843][T17009] should_fail_ex+0x414/0x560 [ 648.060872][T17009] _copy_from_user+0x2d/0xb0 [ 648.060895][T17009] ___sys_sendmsg+0x158/0x2a0 [ 648.060918][T17009] ? __pfx____sys_sendmsg+0x10/0x10 [ 648.060971][T17009] ? __fget_files+0x2a/0x420 [ 648.060990][T17009] ? __fget_files+0x3a0/0x420 [ 648.061018][T17009] __x64_sys_sendmsg+0x19b/0x260 [ 648.061041][T17009] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 648.061070][T17009] ? __pfx_ksys_write+0x10/0x10 [ 648.061096][T17009] ? do_syscall_64+0xbe/0xfa0 [ 648.061117][T17009] do_syscall_64+0xfa/0xfa0 [ 648.061134][T17009] ? lockdep_hardirqs_on+0x9c/0x150 [ 648.061152][T17009] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.061169][T17009] ? clear_bhb_loop+0x60/0xb0 [ 648.061189][T17009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.061205][T17009] RIP: 0033:0x7f08cff8eec9 [ 648.061221][T17009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 648.061236][T17009] RSP: 002b:00007f08d0eaf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 648.061254][T17009] RAX: ffffffffffffffda RBX: 00007f08d01e5fa0 RCX: 00007f08cff8eec9 [ 648.061268][T17009] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 648.061279][T17009] RBP: 00007f08d0eaf090 R08: 0000000000000000 R09: 0000000000000000 [ 648.061290][T17009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 648.061300][T17009] R13: 00007f08d01e6038 R14: 00007f08d01e5fa0 R15: 00007ffd2cd03f88 [ 648.061329][T17009] [ 648.347773][T17014] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4021'. [ 648.357609][T17014] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4021'. [ 648.363640][T17016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.377131][T17016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.635519][T17027] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.4026'. [ 648.683204][T16564] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 648.836348][T16564] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 648.848183][T16564] usb 6-1: config 0 interface 0 has no altsetting 0 [ 648.858437][T16564] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 648.869020][T16564] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 648.879202][T16564] usb 6-1: Product: syz [ 648.883729][T16564] usb 6-1: Manufacturer: syz [ 648.888411][T16564] usb 6-1: SerialNumber: syz [ 648.896827][T16564] usb 6-1: config 0 descriptor?? [ 648.913215][T16564] usb 6-1: selecting invalid altsetting 0 [ 648.931517][T17038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.942859][T17038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 649.196215][ T5942] usb 7-1: USB disconnect, device number 22 [ 649.226035][T16564] usb 6-1: USB disconnect, device number 28 [ 649.417554][ T5948] usb 2-1: USB disconnect, device number 33 [ 649.495783][T17047] wg2: entered promiscuous mode [ 649.500798][T17047] wg2: entered allmulticast mode [ 649.543441][ T5942] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 649.693367][ T5942] usb 7-1: Using ep0 maxpacket: 8 [ 649.706865][ T5942] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 649.721905][ T5942] usb 7-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=46.08 [ 649.731378][ T5942] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.742447][ T5942] usb 7-1: Product: syz [ 649.753176][ T5942] usb 7-1: Manufacturer: syz [ 649.758226][ T5942] usb 7-1: SerialNumber: syz [ 649.773716][ T5942] usb 7-1: config 0 descriptor?? [ 649.796777][ T5942] comedi comedi5: Wrong number of endpoints [ 649.802988][ T5942] dt9812 7-1:0.0: driver 'dt9812' failed to auto-configure device. [ 649.818589][T17060] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.4035'. [ 649.986422][ T5948] usb 7-1: USB disconnect, device number 23 [ 650.029710][T17069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 650.046866][T17069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.115560][ T30] audit: type=1800 audit(1758934446.599:105): pid=17070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.5.4039" name="/dri/card1" dev="devtmpfs" ino=628 res=0 errno=0 [ 650.173406][ T5942] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 650.323220][ T5942] usb 2-1: Using ep0 maxpacket: 8 [ 650.331384][ T5942] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 650.354005][ T5942] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 650.356681][T17076] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 650.375756][ T5942] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 650.386074][ T5942] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 650.397626][ T5942] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 650.419048][ T5942] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 650.429263][ T5942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.610382][ T30] audit: type=1326 audit(1758934447.089:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17081 comm="syz.6.4044" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fabec98eec9 code=0x0 [ 650.632227][ C1] vkms_vblank_simulate: vblank timer overrun [ 650.653677][ T5942] usb 2-1: usb_control_msg returned -32 [ 650.659289][ T5942] usbtmc 2-1:16.0: can't read capabilities [ 650.698575][T17084] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.4045'. [ 650.749536][T17089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 650.764298][T17089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.825159][ T5186] Bluetooth: hci5: command 0x0405 tx timeout [ 651.104304][ T5948] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 651.253549][ T5948] usb 6-1: Using ep0 maxpacket: 8 [ 651.260108][ T5948] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 651.272616][ T5948] usb 6-1: New USB device found, idVendor=0bc7, idProduct=0003, bcdDevice= 0.00 [ 651.281920][ T5948] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.289964][ T5948] usb 6-1: Product: syz [ 651.294198][ T5948] usb 6-1: Manufacturer: syz [ 651.298772][ T5948] usb 6-1: SerialNumber: syz [ 651.305612][ T5948] usb 6-1: config 0 descriptor?? [ 651.312833][ T5948] ati_remote 6-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 651.470742][T17101] FAULT_INJECTION: forcing a failure. [ 651.470742][T17101] name failslab, interval 1, probability 0, space 0, times 0 [ 651.483604][T17101] CPU: 0 UID: 0 PID: 17101 Comm: syz.6.4051 Not tainted syzkaller #0 PREEMPT(full) [ 651.483624][T17101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 651.483634][T17101] Call Trace: [ 651.483641][T17101] [ 651.483648][T17101] dump_stack_lvl+0x189/0x250 [ 651.483682][T17101] ? __pfx____ratelimit+0x10/0x10 [ 651.483699][T17101] ? __pfx_dump_stack_lvl+0x10/0x10 [ 651.483722][T17101] ? __pfx__printk+0x10/0x10 [ 651.483741][T17101] ? save_netdev_trace_buffer+0x4cd/0x5e0 [ 651.483767][T17101] should_fail_ex+0x414/0x560 [ 651.483785][T17101] should_failslab+0xa8/0x100 [ 651.483798][T17101] kmem_cache_alloc_noprof+0x74/0x6e0 [ 651.483813][T17101] ? skb_clone+0x212/0x3a0 [ 651.483828][T17101] skb_clone+0x212/0x3a0 [ 651.483842][T17101] __netlink_deliver_tap+0x424/0x8b0 [ 651.483860][T17101] ? netlink_deliver_tap+0x2e/0x1b0 [ 651.483871][T17101] netlink_deliver_tap+0x19c/0x1b0 [ 651.483882][T17101] netlink_unicast+0x7fa/0x9e0 [ 651.483905][T17101] ? __pfx_netlink_unicast+0x10/0x10 [ 651.483920][T17101] ? netlink_sendmsg+0x642/0xb30 [ 651.483930][T17101] ? skb_put+0x11b/0x210 [ 651.483942][T17101] netlink_sendmsg+0x805/0xb30 [ 651.483958][T17101] ? __pfx_netlink_sendmsg+0x10/0x10 [ 651.483970][T17101] ? aa_sock_msg_perm+0xf1/0x1d0 [ 651.483984][T17101] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 651.483995][T17101] ? __pfx_netlink_sendmsg+0x10/0x10 [ 651.484006][T17101] __sock_sendmsg+0x21c/0x270 [ 651.484022][T17101] ____sys_sendmsg+0x505/0x830 [ 651.484037][T17101] ? __pfx_____sys_sendmsg+0x10/0x10 [ 651.484054][T17101] ? import_iovec+0x74/0xa0 [ 651.484069][T17101] ___sys_sendmsg+0x21f/0x2a0 [ 651.484082][T17101] ? __pfx____sys_sendmsg+0x10/0x10 [ 651.484112][T17101] ? __fget_files+0x2a/0x420 [ 651.484124][T17101] ? __fget_files+0x3a0/0x420 [ 651.484140][T17101] __x64_sys_sendmsg+0x19b/0x260 [ 651.484153][T17101] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 651.484170][T17101] ? __pfx_ksys_write+0x10/0x10 [ 651.484182][T17101] ? do_syscall_64+0xbe/0xfa0 [ 651.484196][T17101] do_syscall_64+0xfa/0xfa0 [ 651.484205][T17101] ? lockdep_hardirqs_on+0x9c/0x150 [ 651.484216][T17101] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.484225][T17101] ? clear_bhb_loop+0x60/0xb0 [ 651.484237][T17101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.484246][T17101] RIP: 0033:0x7fabec98eec9 [ 651.484256][T17101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 651.484264][T17101] RSP: 002b:00007fabed884038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 651.484275][T17101] RAX: ffffffffffffffda RBX: 00007fabecbe5fa0 RCX: 00007fabec98eec9 [ 651.484283][T17101] RDX: 0000000000004804 RSI: 0000200000000040 RDI: 0000000000000003 [ 651.484289][T17101] RBP: 00007fabed884090 R08: 0000000000000000 R09: 0000000000000000 [ 651.484295][T17101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 651.484301][T17101] R13: 00007fabecbe6038 R14: 00007fabecbe5fa0 R15: 00007ffddf71b4a8 [ 651.484317][T17101] [ 651.519651][ T24] usb 6-1: USB disconnect, device number 29 [ 651.589129][T17103] fuse: Bad value for 'group_id' [ 651.775235][T17105] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 651.776094][T17103] fuse: Bad value for 'group_id' [ 651.918166][ T24] usb 2-1: USB disconnect, device number 34 [ 652.163231][ T5948] usb 7-1: new low-speed USB device number 24 using dummy_hcd [ 652.293250][ T5948] usb 7-1: device descriptor read/64, error -71 [ 652.533322][ T5948] usb 7-1: new low-speed USB device number 25 using dummy_hcd [ 652.663351][ T5948] usb 7-1: device descriptor read/64, error -71 [ 652.727042][T17126] netlink: 'syz.1.4060': attribute type 2 has an invalid length. [ 652.776348][T17130] fuse: Bad value for 'group_id' [ 652.781405][T17130] fuse: Bad value for 'group_id' [ 652.792615][ T5948] usb usb7-port1: attempt power cycle [ 652.851738][T17134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4063'. [ 653.143206][ T5948] usb 7-1: new low-speed USB device number 26 using dummy_hcd [ 653.163607][ T5948] usb 7-1: device descriptor read/8, error -71 [ 653.413234][ T5948] usb 7-1: new low-speed USB device number 27 using dummy_hcd [ 653.434093][ T5948] usb 7-1: device descriptor read/8, error -71 [ 653.494673][T17140] kvm: apic: phys broadcast and lowest prio [ 653.543636][ T5948] usb usb7-port1: unable to enumerate USB device [ 653.609709][T17144] FAULT_INJECTION: forcing a failure. [ 653.609709][T17144] name failslab, interval 1, probability 0, space 0, times 0 [ 653.622538][T17144] CPU: 0 UID: 0 PID: 17144 Comm: syz.5.4068 Not tainted syzkaller #0 PREEMPT(full) [ 653.622552][T17144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 653.622559][T17144] Call Trace: [ 653.622563][T17144] [ 653.622567][T17144] dump_stack_lvl+0x189/0x250 [ 653.622587][T17144] ? __pfx____ratelimit+0x10/0x10 [ 653.622598][T17144] ? __pfx_dump_stack_lvl+0x10/0x10 [ 653.622612][T17144] ? __pfx__printk+0x10/0x10 [ 653.622626][T17144] ? save_netdev_trace_buffer+0x4cd/0x5e0 [ 653.622647][T17144] should_fail_ex+0x414/0x560 [ 653.622664][T17144] should_failslab+0xa8/0x100 [ 653.622676][T17144] kmem_cache_alloc_noprof+0x74/0x6e0 [ 653.622691][T17144] ? skb_clone+0x212/0x3a0 [ 653.622706][T17144] skb_clone+0x212/0x3a0 [ 653.622719][T17144] __netlink_deliver_tap+0x424/0x8b0 [ 653.622737][T17144] ? netlink_deliver_tap+0x2e/0x1b0 [ 653.622748][T17144] netlink_deliver_tap+0x19c/0x1b0 [ 653.622759][T17144] netlink_unicast+0x7fa/0x9e0 [ 653.622778][T17144] ? __pfx_netlink_unicast+0x10/0x10 [ 653.622794][T17144] ? netlink_sendmsg+0x642/0xb30 [ 653.622804][T17144] ? skb_put+0x11b/0x210 [ 653.622825][T17144] netlink_sendmsg+0x805/0xb30 [ 653.622850][T17144] ? __pfx_netlink_sendmsg+0x10/0x10 [ 653.622872][T17144] ? aa_sock_msg_perm+0xf1/0x1d0 [ 653.622887][T17144] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 653.622898][T17144] ? __pfx_netlink_sendmsg+0x10/0x10 [ 653.622909][T17144] __sock_sendmsg+0x21c/0x270 [ 653.622925][T17144] ____sys_sendmsg+0x505/0x830 [ 653.622940][T17144] ? __pfx_____sys_sendmsg+0x10/0x10 [ 653.622956][T17144] ? import_iovec+0x74/0xa0 [ 653.622970][T17144] ___sys_sendmsg+0x21f/0x2a0 [ 653.622983][T17144] ? __pfx____sys_sendmsg+0x10/0x10 [ 653.623017][T17144] ? __fget_files+0x2a/0x420 [ 653.623028][T17144] ? __fget_files+0x3a0/0x420 [ 653.623045][T17144] __x64_sys_sendmsg+0x19b/0x260 [ 653.623058][T17144] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 653.623075][T17144] ? __pfx_ksys_write+0x10/0x10 [ 653.623087][T17144] ? do_syscall_64+0xbe/0xfa0 [ 653.623110][T17144] do_syscall_64+0xfa/0xfa0 [ 653.623126][T17144] ? lockdep_hardirqs_on+0x9c/0x150 [ 653.623143][T17144] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.623159][T17144] ? clear_bhb_loop+0x60/0xb0 [ 653.623177][T17144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.623193][T17144] RIP: 0033:0x7f41f5d8eec9 [ 653.623208][T17144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 653.623222][T17144] RSP: 002b:00007f41f6c60038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 653.623235][T17144] RAX: ffffffffffffffda RBX: 00007f41f5fe5fa0 RCX: 00007f41f5d8eec9 [ 653.623242][T17144] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 653.623248][T17144] RBP: 00007f41f6c60090 R08: 0000000000000000 R09: 0000000000000000 [ 653.623254][T17144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 653.623260][T17144] R13: 00007f41f5fe6038 R14: 00007f41f5fe5fa0 R15: 00007fffd80c5508 [ 653.623276][T17144] [ 653.924967][T17144] netlink: 'syz.5.4068': attribute type 10 has an invalid length. [ 653.945252][T17144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 653.955795][T17144] team0: Port device bond0 added [ 654.011619][T16564] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 654.018253][T17149] fuse: Bad value for 'group_id' [ 654.028409][T17149] fuse: Bad value for 'group_id' [ 654.153249][T16564] usb 2-1: device descriptor read/64, error -71 [ 654.363226][T15686] usb 7-1: new low-speed USB device number 28 using dummy_hcd [ 654.404555][T16564] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 654.493289][T15686] usb 7-1: device descriptor read/64, error -71 [ 654.533264][T16564] usb 2-1: device descriptor read/64, error -71 [ 654.643477][T16564] usb usb2-port1: attempt power cycle [ 654.733260][T15686] usb 7-1: new low-speed USB device number 29 using dummy_hcd [ 654.863228][T15686] usb 7-1: device descriptor read/64, error -71 [ 654.963407][T17167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.977419][T15686] usb usb7-port1: attempt power cycle [ 654.986036][T17167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.996498][T16564] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 655.025901][T16564] usb 2-1: device descriptor read/8, error -71 [ 655.263272][T16564] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 655.283675][T16564] usb 2-1: device descriptor read/8, error -71 [ 655.333281][T15686] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 655.358877][T15686] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 655.371881][T15686] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 655.381420][T15686] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.389451][T15686] usb 7-1: Product: syz [ 655.393479][T16564] usb usb2-port1: unable to enumerate USB device [ 655.393776][T15686] usb 7-1: Manufacturer: syz [ 655.404573][T15686] usb 7-1: SerialNumber: syz [ 655.615342][ T30] audit: type=1326 audit(1758934452.099:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17168 comm="syz.6.4078" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fabec98eec9 code=0x0 [ 655.718973][T17172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.727852][T17172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 657.073439][T16564] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 657.223424][T16564] usb 2-1: Using ep0 maxpacket: 8 [ 657.230269][T16564] usb 2-1: config index 0 descriptor too short (expected 30482, got 18) [ 657.238963][T16564] usb 2-1: config 0 has too many interfaces: 101, using maximum allowed: 32 [ 657.247827][T16564] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 101 [ 657.259587][T16564] usb 2-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 5.00 [ 657.272695][T16564] usb 2-1: New USB device strings: Mfr=253, Product=255, SerialNumber=0 [ 657.281130][T16564] usb 2-1: Product: syz [ 657.285368][T16564] usb 2-1: Manufacturer: syz [ 657.292326][T16564] usb 2-1: config 0 descriptor?? [ 657.300101][T16564] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 657.308967][T16564] usb 2-1: Detected FT2232C/D [ 657.500959][T16564] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 657.509095][T16564] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 657.517673][T16564] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 657.532105][T16564] usb 2-1: USB disconnect, device number 39 [ 657.541761][T16564] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 657.553848][T16564] ftdi_sio 2-1:0.0: device disconnected [ 657.999513][T15686] cdc_ncm 7-1:1.0: bind() failure [ 658.034183][T15686] cdc_ncm 7-1:1.1: probe with driver cdc_ncm failed with error -71 [ 658.064135][T15686] cdc_mbim 7-1:1.1: probe with driver cdc_mbim failed with error -71 [ 658.084317][T15686] usbtest 7-1:1.1: probe with driver usbtest failed with error -71 [ 658.119380][T15686] usb 7-1: USB disconnect, device number 30 [ 658.162800][T17193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 658.173544][T17193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 658.188086][T17193] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4088'. [ 658.380175][T17195] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 658.386490][T17195] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 658.392562][T17195] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 658.400888][T17195] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 658.408740][T17195] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 658.443228][T15686] usb 7-1: new low-speed USB device number 31 using dummy_hcd [ 658.573230][T15686] usb 7-1: device descriptor read/64, error -71 [ 658.732198][T17206] FAULT_INJECTION: forcing a failure. [ 658.732198][T17206] name failslab, interval 1, probability 0, space 0, times 0 [ 658.745224][T17206] CPU: 1 UID: 0 PID: 17206 Comm: syz.4.4092 Not tainted syzkaller #0 PREEMPT(full) [ 658.745246][T17206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 658.745257][T17206] Call Trace: [ 658.745264][T17206] [ 658.745271][T17206] dump_stack_lvl+0x189/0x250 [ 658.745300][T17206] ? __pfx____ratelimit+0x10/0x10 [ 658.745319][T17206] ? __pfx_dump_stack_lvl+0x10/0x10 [ 658.745342][T17206] ? __pfx__printk+0x10/0x10 [ 658.745369][T17206] ? __pfx___might_resched+0x10/0x10 [ 658.745394][T17206] should_fail_ex+0x414/0x560 [ 658.745422][T17206] should_failslab+0xa8/0x100 [ 658.745440][T17206] kmem_cache_alloc_node_noprof+0x77/0x710 [ 658.745460][T17206] ? __alloc_skb+0x112/0x2d0 [ 658.745480][T17206] __alloc_skb+0x112/0x2d0 [ 658.745499][T17206] netlink_ack+0x146/0xa50 [ 658.745512][T17206] ? __pfx_genl_rcv_msg+0x10/0x10 [ 658.745529][T17206] ? ref_tracker_free+0x63a/0x7d0 [ 658.745543][T17206] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 658.745565][T17206] ? __pfx_nl80211_post_doit+0x10/0x10 [ 658.745587][T17206] ? ____sys_sendmsg+0x505/0x830 [ 658.745604][T17206] ? ___sys_sendmsg+0x21f/0x2a0 [ 658.745621][T17206] ? __x64_sys_sendmsg+0x19b/0x260 [ 658.745639][T17206] ? do_syscall_64+0xfa/0xfa0 [ 658.745656][T17206] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.745683][T17206] netlink_rcv_skb+0x28c/0x470 [ 658.745707][T17206] ? __lock_acquire+0xab9/0xd20 [ 658.745727][T17206] ? __pfx_genl_rcv_msg+0x10/0x10 [ 658.745751][T17206] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 658.745787][T17206] ? down_read+0x1ad/0x2e0 [ 658.745810][T17206] genl_rcv+0x28/0x40 [ 658.745830][T17206] netlink_unicast+0x82f/0x9e0 [ 658.745863][T17206] ? __pfx_netlink_unicast+0x10/0x10 [ 658.745889][T17206] ? netlink_sendmsg+0x642/0xb30 [ 658.745905][T17206] ? skb_put+0x11b/0x210 [ 658.745927][T17206] netlink_sendmsg+0x805/0xb30 [ 658.745955][T17206] ? __pfx_netlink_sendmsg+0x10/0x10 [ 658.745977][T17206] ? aa_sock_msg_perm+0xf1/0x1d0 [ 658.745999][T17206] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 658.746017][T17206] ? __pfx_netlink_sendmsg+0x10/0x10 [ 658.746036][T17206] __sock_sendmsg+0x21c/0x270 [ 658.746064][T17206] ____sys_sendmsg+0x505/0x830 [ 658.746089][T17206] ? __pfx_____sys_sendmsg+0x10/0x10 [ 658.746118][T17206] ? import_iovec+0x74/0xa0 [ 658.746143][T17206] ___sys_sendmsg+0x21f/0x2a0 [ 658.746166][T17206] ? __pfx____sys_sendmsg+0x10/0x10 [ 658.746222][T17206] ? __fget_files+0x2a/0x420 [ 658.746240][T17206] ? __fget_files+0x3a0/0x420 [ 658.746267][T17206] __x64_sys_sendmsg+0x19b/0x260 [ 658.746285][T17206] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 658.746302][T17206] ? __pfx_ksys_write+0x10/0x10 [ 658.746314][T17206] ? do_syscall_64+0xbe/0xfa0 [ 658.746327][T17206] do_syscall_64+0xfa/0xfa0 [ 658.746336][T17206] ? lockdep_hardirqs_on+0x9c/0x150 [ 658.746347][T17206] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.746356][T17206] ? clear_bhb_loop+0x60/0xb0 [ 658.746368][T17206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.746377][T17206] RIP: 0033:0x7f08cff8eec9 [ 658.746387][T17206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 658.746395][T17206] RSP: 002b:00007f08d0eaf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 658.746406][T17206] RAX: ffffffffffffffda RBX: 00007f08d01e5fa0 RCX: 00007f08cff8eec9 [ 658.746414][T17206] RDX: 0000000000000010 RSI: 0000200000000240 RDI: 0000000000000005 [ 658.746420][T17206] RBP: 00007f08d0eaf090 R08: 0000000000000000 R09: 0000000000000000 [ 658.746426][T17206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 658.746431][T17206] R13: 00007f08d01e6038 R14: 00007f08d01e5fa0 R15: 00007ffd2cd03f88 [ 658.746448][T17206] [ 658.783202][T16564] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 658.853244][T15686] usb 7-1: new low-speed USB device number 32 using dummy_hcd [ 659.005133][T16564] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 659.149100][T16564] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 659.158111][T15686] usb 7-1: device descriptor read/64, error -71 [ 659.162413][T16564] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 659.173949][T16564] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 659.181941][T16564] usb 2-1: SerialNumber: syz [ 659.194584][T16564] usb 2-1: 0:2 : does not exist [ 659.274189][T15686] usb usb7-port1: attempt power cycle [ 659.601112][T16564] usb 2-1: USB disconnect, device number 40 [ 659.613401][T15686] usb 7-1: new low-speed USB device number 33 using dummy_hcd [ 659.643783][T15686] usb 7-1: device descriptor read/8, error -71 [ 659.883268][T15686] usb 7-1: new low-speed USB device number 34 using dummy_hcd [ 659.903666][T15686] usb 7-1: device descriptor read/8, error -71 [ 660.014082][T15686] usb usb7-port1: unable to enumerate USB device [ 660.224652][T17223] fuse: Bad value for 'fd' [ 660.344067][ T5186] Bluetooth: hci4: command 0x0406 tx timeout [ 660.413502][T15686] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 660.424037][ T5186] Bluetooth: hci5: command 0x0405 tx timeout [ 660.430074][ T5186] Bluetooth: hci1: command 0x0c1a tx timeout [ 660.431294][T16900] Bluetooth: hci2: command 0x0c1a tx timeout [ 660.436235][ T5186] Bluetooth: hci3: command 0x0406 tx timeout [ 660.476739][T17227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.485560][T17227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.494992][T17227] tmpfs: Bad value for 'mpol' [ 660.516345][T17227] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4100'. [ 660.525421][ T5942] usb 7-1: new low-speed USB device number 35 using dummy_hcd [ 660.613314][T15686] usb 6-1: Using ep0 maxpacket: 32 [ 660.619794][T15686] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 660.628527][T15686] usb 6-1: config 0 has no interface number 0 [ 660.634665][T15686] usb 6-1: config 0 interface 196 has no altsetting 0 [ 660.644009][T15686] usb 6-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 660.655174][T15686] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.663211][ T5942] usb 7-1: device descriptor read/64, error -71 [ 660.669536][T15686] usb 6-1: Product: syz [ 660.673718][T15686] usb 6-1: Manufacturer: syz [ 660.678316][T15686] usb 6-1: SerialNumber: syz [ 660.687432][T15686] usb 6-1: config 0 descriptor?? [ 660.900237][T17219] syzkaller1: entered promiscuous mode [ 660.906043][ T5942] usb 7-1: new low-speed USB device number 36 using dummy_hcd [ 660.907908][T17219] syzkaller1: entered allmulticast mode [ 660.932668][T17235] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4096'. [ 660.942688][T17219] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4096'. [ 661.043239][ T5942] usb 7-1: device descriptor read/64, error -71 [ 661.153547][ T5942] usb usb7-port1: attempt power cycle [ 661.195861][T15686] ipheth 6-1:0.196: Unable to find endpoints [ 661.212859][T15686] usb 6-1: USB disconnect, device number 30 [ 661.349174][T17247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.358259][T17247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.485218][T17252] fuse: Bad value for 'fd' [ 661.522395][ T30] audit: type=1107 audit(1758934457.999:108): pid=17254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 661.763214][T15686] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 661.899850][T17257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.908748][T17257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.921582][T17257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.930352][T17257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.968429][T17257] sctp: [Deprecated]: syz.4.4110 (pid 17257) Use of int in max_burst socket option. [ 661.968429][T17257] Use struct sctp_assoc_value instead [ 662.013216][T15686] usb 6-1: Using ep0 maxpacket: 8 [ 662.020144][T15686] usb 6-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 662.031860][T15686] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 662.043728][T15686] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 97, changing to 10 [ 662.054907][T15686] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 24929, setting to 1024 [ 662.066166][T15686] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 662.080949][T15686] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 662.092262][T15686] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 662.100452][T15686] usb 6-1: Product: syz [ 662.108035][T15686] usb 6-1: Manufacturer: syz [ 662.112634][T15686] usb 6-1: SerialNumber: syz [ 662.119640][T15686] usb 6-1: config 0 descriptor?? [ 662.243198][ T43] usb 2-1: new low-speed USB device number 41 using dummy_hcd [ 662.326562][T15686] radio-si470x 6-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 662.333478][T15686] radio-si470x 6-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 662.383239][ T43] usb 2-1: device descriptor read/64, error -71 [ 662.527204][T15686] radio-si470x 6-1:0.0: software version 0, hardware version 0 [ 662.535851][T15686] radio-si470x 6-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 662.543713][T17261] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4112'. [ 662.550816][T15686] radio-si470x 6-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 662.606223][T17263] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4113'. [ 662.623575][ T43] usb 2-1: new low-speed USB device number 42 using dummy_hcd [ 662.728289][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 662.735004][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 662.741594][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 662.748670][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 662.755594][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 662.762350][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 662.769139][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 662.775908][ T43] usb 2-1: device descriptor read/64, error -71 [ 662.782613][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 662.789734][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 662.796691][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 662.803602][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 662.813641][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 662.820610][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 662.827465][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 662.834206][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 662.840822][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 662.847477][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 662.854099][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 662.860727][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 662.867682][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 662.874290][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 662.880910][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 662.887508][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 662.894125][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 662.903810][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 662.910681][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 662.917297][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 662.923900][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 662.930777][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 662.937396][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 662.944019][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 662.950640][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 662.957272][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 662.963882][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 662.970504][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 662.977427][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 662.984158][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 662.990774][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 662.997458][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.008135][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.016056][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.022649][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.029250][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.035843][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.042418][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.049021][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.055671][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.062214][T15686] radio-si470x 6-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 663.071015][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.077722][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.084274][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.090788][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.097357][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.104068][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.110591][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.120164][ T43] usb usb2-port1: attempt power cycle [ 663.127299][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.133851][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.140469][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.147135][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.153751][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.160422][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.167079][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.173689][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.175973][T17275] fuse: Bad value for 'fd' [ 663.180283][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.193229][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.200198][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.207236][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.215432][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.223943][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.230575][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.237203][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.243851][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.250448][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.257049][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.263676][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.270318][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.276997][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.283600][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.290212][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.296826][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.303619][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.313012][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.319781][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.326401][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.333004][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.339620][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.346257][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.352879][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.359497][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.366285][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.373346][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.379981][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.386590][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.393207][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.399801][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.406412][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.417974][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.424960][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.431950][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.440547][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.447313][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.453927][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.460554][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.467187][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.473800][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.480419][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.487159][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.493796][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.500416][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.507052][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.513656][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.523406][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.530023][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.536738][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.543637][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.550556][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.557187][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.563793][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.570422][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.577097][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.583781][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.590386][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.593441][ T30] audit: type=1326 audit(1758934460.029:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17282 comm="syz.4.4120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08cff8eec9 code=0x7ffc0000 [ 663.596987][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.627846][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.635534][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.642162][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.648830][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.655462][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.662119][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.668778][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.675386][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.682003][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.688643][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.695297][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.701980][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.709772][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.716756][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.726072][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.732690][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.739352][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.743204][ T30] audit: type=1326 audit(1758934460.029:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17282 comm="syz.4.4120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08cff8eec9 code=0x7ffc0000 [ 663.745953][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.775065][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.781680][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.788455][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.795111][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.801840][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.808463][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.815083][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.821803][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.831058][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.837689][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.844300][ C1] radio-si470x 6-1:0.0: non-zero urb status (-71) [ 663.850943][ T30] audit: type=1326 audit(1758934460.029:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17282 comm="syz.4.4120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f08cff8eec9 code=0x7ffc0000 [ 663.873901][T15686] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -22 [ 663.887648][ T30] audit: type=1326 audit(1758934460.029:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17282 comm="syz.4.4120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08cff8eec9 code=0x7ffc0000 [ 663.897323][T15686] usb 6-1: USB disconnect, device number 31 [ 663.923787][ T30] audit: type=1326 audit(1758934460.029:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17282 comm="syz.4.4120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08cff8eec9 code=0x7ffc0000 [ 663.951744][ T30] audit: type=1326 audit(1758934460.029:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17282 comm="syz.4.4120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f08cff8eec9 code=0x7ffc0000 [ 663.974130][ T30] audit: type=1326 audit(1758934460.029:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17282 comm="syz.4.4120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08cff8eec9 code=0x7ffc0000 [ 663.997216][ T30] audit: type=1326 audit(1758934460.029:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17282 comm="syz.4.4120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f08cff8eec9 code=0x7ffc0000 [ 664.019780][ T30] audit: type=1326 audit(1758934460.039:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17282 comm="syz.4.4120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08cff8eec9 code=0x7ffc0000 [ 664.053276][ T43] usb 2-1: new low-speed USB device number 43 using dummy_hcd [ 664.056991][ T9] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 664.084039][ T43] usb 2-1: device descriptor read/8, error -71 [ 664.138901][T17290] fuse: Unknown parameter 'grou00000000000000000000' [ 664.239660][ T9] usb 7-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.02 [ 664.250355][ T9] usb 7-1: New USB device strings: Mfr=0, Product=232, SerialNumber=255 [ 664.259495][ T9] usb 7-1: Product: syz [ 664.264338][ T9] usb 7-1: SerialNumber: syz [ 664.280198][ T9] usb 7-1: config 0 descriptor?? [ 664.333288][ T43] usb 2-1: new low-speed USB device number 44 using dummy_hcd [ 664.363949][ T43] usb 2-1: device descriptor read/8, error -71 [ 664.473867][ T43] usb usb2-port1: unable to enumerate USB device [ 664.505506][ T9] ldusb 7-1:0.0: Interrupt in endpoint not found [ 664.524806][ T9] usb 7-1: USB disconnect, device number 38 [ 665.019199][T17304] can0: slcan on pty28. [ 665.144169][T17303] can0 (unregistered): slcan off pty28. [ 665.181131][T17310] 9pnet_fd: p9_fd_create_unix (17310): problem connecting socket: ./file0: -111 [ 665.321084][T17321] fuse: Unknown parameter 'grou00000000000000000000' [ 665.556154][T17330] netlink: 'syz.6.4133': attribute type 1 has an invalid length. [ 665.566378][T17330] netlink: 'syz.6.4133': attribute type 1 has an invalid length. [ 665.648267][T17342] FAULT_INJECTION: forcing a failure. [ 665.648267][T17342] name failslab, interval 1, probability 0, space 0, times 0 [ 665.653420][T17330] netlink: 'syz.6.4133': attribute type 1 has an invalid length. [ 665.701682][T17342] CPU: 0 UID: 0 PID: 17342 Comm: syz.5.4137 Not tainted syzkaller #0 PREEMPT(full) [ 665.701708][T17342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 665.701719][T17342] Call Trace: [ 665.701727][T17342] [ 665.701735][T17342] dump_stack_lvl+0x189/0x250 [ 665.701763][T17342] ? __pfx____ratelimit+0x10/0x10 [ 665.701782][T17342] ? __pfx_dump_stack_lvl+0x10/0x10 [ 665.701805][T17342] ? __pfx__printk+0x10/0x10 [ 665.701828][T17342] ? save_netdev_trace_buffer+0x4e2/0x5e0 [ 665.701863][T17342] should_fail_ex+0x414/0x560 [ 665.701891][T17342] should_failslab+0xa8/0x100 [ 665.701910][T17342] kmem_cache_alloc_noprof+0x74/0x6e0 [ 665.701933][T17342] ? skb_clone+0x212/0x3a0 [ 665.701959][T17342] skb_clone+0x212/0x3a0 [ 665.701982][T17342] __netlink_deliver_tap+0x424/0x8b0 [ 665.702018][T17342] ? netlink_deliver_tap+0x2e/0x1b0 [ 665.702035][T17342] netlink_deliver_tap+0x19c/0x1b0 [ 665.702053][T17342] netlink_unicast+0x7fa/0x9e0 [ 665.702086][T17342] ? __pfx_netlink_unicast+0x10/0x10 [ 665.702112][T17342] ? netlink_sendmsg+0x642/0xb30 [ 665.702127][T17342] ? skb_put+0x11b/0x210 [ 665.702149][T17342] netlink_sendmsg+0x805/0xb30 [ 665.702177][T17342] ? __pfx_netlink_sendmsg+0x10/0x10 [ 665.702199][T17342] ? aa_sock_msg_perm+0xf1/0x1d0 [ 665.702222][T17342] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 665.702239][T17342] ? __pfx_netlink_sendmsg+0x10/0x10 [ 665.702258][T17342] __sock_sendmsg+0x21c/0x270 [ 665.702286][T17342] ____sys_sendmsg+0x505/0x830 [ 665.702310][T17342] ? __pfx_____sys_sendmsg+0x10/0x10 [ 665.702338][T17342] ? import_iovec+0x74/0xa0 [ 665.702361][T17342] ___sys_sendmsg+0x21f/0x2a0 [ 665.702382][T17342] ? __pfx____sys_sendmsg+0x10/0x10 [ 665.702434][T17342] ? __fget_files+0x2a/0x420 [ 665.702454][T17342] ? __fget_files+0x3a0/0x420 [ 665.702482][T17342] __x64_sys_sendmsg+0x19b/0x260 [ 665.702505][T17342] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 665.702534][T17342] ? __pfx_ksys_write+0x10/0x10 [ 665.702554][T17342] ? do_syscall_64+0xbe/0xfa0 [ 665.702576][T17342] do_syscall_64+0xfa/0xfa0 [ 665.702593][T17342] ? lockdep_hardirqs_on+0x9c/0x150 [ 665.702612][T17342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.702628][T17342] ? clear_bhb_loop+0x60/0xb0 [ 665.702648][T17342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.702663][T17342] RIP: 0033:0x7f41f5d8eec9 [ 665.702679][T17342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 665.702693][T17342] RSP: 002b:00007f41f6c60038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 665.702712][T17342] RAX: ffffffffffffffda RBX: 00007f41f5fe5fa0 RCX: 00007f41f5d8eec9 [ 665.702725][T17342] RDX: 0000000000004804 RSI: 0000200000000040 RDI: 0000000000000003 [ 665.702736][T17342] RBP: 00007f41f6c60090 R08: 0000000000000000 R09: 0000000000000000 [ 665.702747][T17342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 665.702757][T17342] R13: 00007f41f5fe6038 R14: 00007f41f5fe5fa0 R15: 00007fffd80c5508 [ 665.702788][T17342] [ 666.266775][T17363] fuse: Unknown parameter 'grou00000000000000000000' [ 666.275755][T17360] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4141'. [ 666.683259][ T9] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 666.771751][T17391] FAULT_INJECTION: forcing a failure. [ 666.771751][T17391] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 666.796118][T17391] CPU: 0 UID: 0 PID: 17391 Comm: syz.1.4156 Not tainted syzkaller #0 PREEMPT(full) [ 666.796143][T17391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 666.796154][T17391] Call Trace: [ 666.796162][T17391] [ 666.796170][T17391] dump_stack_lvl+0x189/0x250 [ 666.796206][T17391] ? __pfx____ratelimit+0x10/0x10 [ 666.796225][T17391] ? __pfx_dump_stack_lvl+0x10/0x10 [ 666.796249][T17391] ? __pfx__printk+0x10/0x10 [ 666.796269][T17391] ? fs_reclaim_acquire+0x7d/0x100 [ 666.796292][T17391] should_fail_ex+0x414/0x560 [ 666.796320][T17391] prepare_alloc_pages+0x213/0x610 [ 666.796342][T17391] __alloc_frozen_pages_noprof+0x123/0x370 [ 666.796363][T17391] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 666.796384][T17391] ? aa_file_perm+0x44d/0x1550 [ 666.796406][T17391] ? _parse_integer_limit+0x1ae/0x1f0 [ 666.796425][T17391] alloc_pages_mpol+0x232/0x4a0 [ 666.796447][T17391] alloc_pages_noprof+0xa9/0x190 [ 666.796465][T17391] get_free_pages_noprof+0xf/0x80 [ 666.796481][T17391] vcs_write+0xf3/0x1260 [ 666.796498][T17391] ? get_pid_task+0x20/0x1f0 [ 666.796540][T17391] ? __pfx_vcs_write+0x10/0x10 [ 666.796555][T17391] ? bpf_lsm_file_permission+0x9/0x20 [ 666.796572][T17391] ? security_file_permission+0x75/0x290 [ 666.796596][T17391] ? rw_verify_area+0x255/0x4d0 [ 666.796610][T17391] ? __lock_acquire+0xab9/0xd20 [ 666.796626][T17391] ? __pfx_vcs_write+0x10/0x10 [ 666.796643][T17391] vfs_write+0x27e/0xb30 [ 666.796665][T17391] ? __pfx_vfs_write+0x10/0x10 [ 666.796684][T17391] ? __fget_files+0x2a/0x420 [ 666.796706][T17391] ? __fget_files+0x2a/0x420 [ 666.796723][T17391] ? __fget_files+0x3a0/0x420 [ 666.796741][T17391] ? __fget_files+0x2a/0x420 [ 666.796768][T17391] ksys_write+0x145/0x250 [ 666.796787][T17391] ? __pfx_ksys_write+0x10/0x10 [ 666.796808][T17391] ? do_syscall_64+0xbe/0xfa0 [ 666.796830][T17391] do_syscall_64+0xfa/0xfa0 [ 666.796846][T17391] ? lockdep_hardirqs_on+0x9c/0x150 [ 666.796864][T17391] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.796880][T17391] ? clear_bhb_loop+0x60/0xb0 [ 666.796900][T17391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.796916][T17391] RIP: 0033:0x7f3299b8eec9 [ 666.796930][T17391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 666.796944][T17391] RSP: 002b:00007f329aaa2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 666.796963][T17391] RAX: ffffffffffffffda RBX: 00007f3299de5fa0 RCX: 00007f3299b8eec9 [ 666.796976][T17391] RDX: 0000000000000007 RSI: 0000200000000100 RDI: 0000000000000003 [ 666.796987][T17391] RBP: 00007f329aaa2090 R08: 0000000000000000 R09: 0000000000000000 [ 666.796997][T17391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 666.797008][T17391] R13: 00007f3299de6038 R14: 00007f3299de5fa0 R15: 00007ffdb5da9c88 [ 666.797036][T17391] [ 667.117569][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 667.124522][ T9] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 667.132750][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 667.134781][T17388] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 667.142704][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 667.150618][T17388] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 667.162475][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 667.166498][T17388] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 667.174553][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 667.181516][T17388] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 667.193716][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 667.209993][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.219013][T17388] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 667.430540][ T9] usb 6-1: GET_CAPABILITIES returned 0 [ 667.436214][ T9] usbtmc 6-1:16.0: can't read capabilities [ 667.553491][ T5948] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 667.583221][T16564] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 667.683637][T17373] usbtmc 6-1:16.0: INITIATE_CLEAR returned dc [ 667.699356][ T43] usb 6-1: USB disconnect, device number 32 [ 667.703233][ T5948] usb 7-1: Using ep0 maxpacket: 16 [ 667.721546][ T5948] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 667.735712][T16564] usb 2-1: no configurations [ 667.740361][T16564] usb 2-1: can't read configurations, error -22 [ 667.752729][ T5948] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 667.753049][T17404] fuse: Unknown parameter 'group_i00000000000000000000' [ 667.764429][ T5948] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.785252][ T5948] usb 7-1: config 0 descriptor?? [ 667.828839][T17406] FAULT_INJECTION: forcing a failure. [ 667.828839][T17406] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 667.842567][T17406] CPU: 0 UID: 0 PID: 17406 Comm: syz.5.4153 Not tainted syzkaller #0 PREEMPT(full) [ 667.842592][T17406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 667.842603][T17406] Call Trace: [ 667.842611][T17406] [ 667.842619][T17406] dump_stack_lvl+0x189/0x250 [ 667.842650][T17406] ? __pfx____ratelimit+0x10/0x10 [ 667.842669][T17406] ? __pfx_dump_stack_lvl+0x10/0x10 [ 667.842693][T17406] ? __pfx__printk+0x10/0x10 [ 667.842716][T17406] ? __might_fault+0xb0/0x130 [ 667.842748][T17406] should_fail_ex+0x414/0x560 [ 667.842777][T17406] _copy_from_user+0x2d/0xb0 [ 667.842799][T17406] ___sys_sendmsg+0x158/0x2a0 [ 667.842823][T17406] ? __pfx____sys_sendmsg+0x10/0x10 [ 667.842883][T17406] ? __might_fault+0xb0/0x130 [ 667.842910][T17406] __sys_sendmmsg+0x227/0x430 [ 667.842935][T17406] ? __pfx___sys_sendmmsg+0x10/0x10 [ 667.842965][T17406] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 667.843007][T17406] ? ksys_write+0x22a/0x250 [ 667.843028][T17406] ? __pfx_ksys_write+0x10/0x10 [ 667.843050][T17406] __x64_sys_sendmmsg+0xa0/0xc0 [ 667.843072][T17406] do_syscall_64+0xfa/0xfa0 [ 667.843089][T17406] ? lockdep_hardirqs_on+0x9c/0x150 [ 667.843105][T17406] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.843120][T17406] ? clear_bhb_loop+0x60/0xb0 [ 667.843141][T17406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.843157][T17406] RIP: 0033:0x7f41f5d8eec9 [ 667.843173][T17406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 667.843188][T17406] RSP: 002b:00007f41f6c60038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 667.843207][T17406] RAX: ffffffffffffffda RBX: 00007f41f5fe5fa0 RCX: 00007f41f5d8eec9 [ 667.843220][T17406] RDX: 00000000000003e8 RSI: 0000200000002340 RDI: 0000000000000003 [ 667.843231][T17406] RBP: 00007f41f6c60090 R08: 0000000000000000 R09: 0000000000000000 [ 667.843243][T17406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 667.843253][T17406] R13: 00007f41f5fe6038 R14: 00007f41f5fe5fa0 R15: 00007fffd80c5508 [ 667.843282][T17406] [ 668.068394][T16564] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 668.223698][T16564] usb 2-1: no configurations [ 668.229931][T16564] usb 2-1: can't read configurations, error -22 [ 668.236506][T16564] usb usb2-port1: attempt power cycle [ 668.285560][ T5948] mcp2221 0003:04D8:00DD.003D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 668.333426][ T43] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 668.463206][ T43] usb 6-1: device descriptor read/64, error -71 [ 668.573282][T16564] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 668.596470][T16564] usb 2-1: no configurations [ 668.601114][T16564] usb 2-1: can't read configurations, error -22 [ 668.687529][T15686] usb 7-1: USB disconnect, device number 39 [ 668.703949][ T43] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 668.753477][T16564] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 668.774238][T16564] usb 2-1: no configurations [ 668.778856][T16564] usb 2-1: can't read configurations, error -22 [ 668.785606][T16564] usb usb2-port1: unable to enumerate USB device [ 668.843211][ T43] usb 6-1: device descriptor read/64, error -71 [ 668.953911][ T43] usb usb6-port1: attempt power cycle [ 669.143840][ T5861] Bluetooth: hci4: command 0x0406 tx timeout [ 669.223365][ T5186] Bluetooth: hci1: command 0x0c1a tx timeout [ 669.223375][T16900] Bluetooth: hci2: command 0x0c1a tx timeout [ 669.233270][T16900] Bluetooth: hci3: command 0x0406 tx timeout [ 669.235520][ T5861] Bluetooth: hci5: command 0x0405 tx timeout [ 669.303449][ T43] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 669.323932][ T43] usb 6-1: device descriptor read/8, error -71 [ 669.569447][T17419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 669.578063][ T43] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 669.579976][T17419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 669.608445][ T43] usb 6-1: device descriptor read/8, error -71 [ 669.675184][T17426] fuse: Unknown parameter 'group_i00000000000000000000' [ 669.724051][ T43] usb usb6-port1: unable to enumerate USB device [ 669.749441][T17430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 669.758150][T17430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 669.771357][T17430] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4164'. [ 670.409407][T17447] fuse: Unknown parameter 'group_i00000000000000000000' [ 670.587316][T17458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 670.596650][T17458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 670.773215][ T43] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 670.923206][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 670.930492][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 670.941967][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 670.951792][ T43] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 670.964634][ T43] usb 2-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00 [ 670.973738][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.983806][ T43] usb 2-1: config 0 descriptor?? [ 671.191641][T17456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.208124][T17456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.279991][T17467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.290939][T17467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.487685][ T43] usbhid 2-1:0.0: can't add hid device: -71 [ 671.496494][ T43] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 671.506160][T15686] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 671.518743][ T43] usb 2-1: USB disconnect, device number 49 [ 671.674770][T15686] usb 6-1: config 0 has an invalid interface number: 109 but max is 0 [ 671.683027][T15686] usb 6-1: config 0 has no interface number 0 [ 671.689769][T15686] usb 6-1: config 0 interface 109 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 671.701482][T15686] usb 6-1: config 0 interface 109 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 671.721790][T15686] usb 6-1: config 0 interface 109 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 671.731911][T15686] usb 6-1: New USB device found, idVendor=100d, idProduct=cb01, bcdDevice=84.d1 [ 671.740981][T15686] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.750872][T15686] usb 6-1: config 0 descriptor?? [ 671.759520][T15686] cxacru 6-1:0.109: cxacru_bind: interface has incorrect endpoints [ 671.767643][T15686] cxacru 6-1:0.109: usbatm_usb_probe: bind failed: -19! [ 671.884666][T17481] FAULT_INJECTION: forcing a failure. [ 671.884666][T17481] name failslab, interval 1, probability 0, space 0, times 0 [ 671.898678][T17481] CPU: 0 UID: 60928 PID: 17481 Comm: syz.4.4181 Not tainted syzkaller #0 PREEMPT(full) [ 671.898694][T17481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 671.898700][T17481] Call Trace: [ 671.898705][T17481] [ 671.898709][T17481] dump_stack_lvl+0x189/0x250 [ 671.898729][T17481] ? __pfx____ratelimit+0x10/0x10 [ 671.898741][T17481] ? __pfx_dump_stack_lvl+0x10/0x10 [ 671.898754][T17481] ? __pfx__printk+0x10/0x10 [ 671.898771][T17481] ? __pfx___might_resched+0x10/0x10 [ 671.898786][T17481] ? fs_reclaim_acquire+0x7d/0x100 [ 671.898806][T17481] should_fail_ex+0x414/0x560 [ 671.898823][T17481] ? __pfx_proc_alloc_inode+0x10/0x10 [ 671.898832][T17481] should_failslab+0xa8/0x100 [ 671.898844][T17481] ? __pfx_proc_alloc_inode+0x10/0x10 [ 671.898852][T17481] kmem_cache_alloc_lru_noprof+0x79/0x6d0 [ 671.898866][T17481] ? proc_alloc_inode+0x2a/0xc0 [ 671.898877][T17481] ? __pfx_proc_alloc_inode+0x10/0x10 [ 671.898886][T17481] proc_alloc_inode+0x2a/0xc0 [ 671.898895][T17481] alloc_inode+0x6a/0x1b0 [ 671.898907][T17481] new_inode+0x22/0x170 [ 671.898921][T17481] proc_pid_make_inode+0x21/0x130 [ 671.898934][T17481] proc_pid_instantiate+0x53/0x2b0 [ 671.898944][T17481] ? proc_pid_lookup+0xa4/0x420 [ 671.898956][T17481] ? proc_pid_lookup+0xa4/0x420 [ 671.898967][T17481] proc_pid_lookup+0x2fa/0x420 [ 671.898980][T17481] proc_root_lookup+0x20/0x50 [ 671.898991][T17481] __lookup_slow+0x297/0x3d0 [ 671.899006][T17481] ? __pfx___lookup_slow+0x10/0x10 [ 671.899028][T17481] ? down_read+0x1ad/0x2e0 [ 671.899042][T17481] lookup_slow+0x53/0x70 [ 671.899056][T17481] link_path_walk+0x935/0xea0 [ 671.899078][T17481] path_openat+0x28c/0x3830 [ 671.899105][T17481] ? __pfx_path_openat+0x10/0x10 [ 671.899125][T17481] do_filp_open+0x1fa/0x410 [ 671.899132][T17481] ? __lock_acquire+0xab9/0xd20 [ 671.899144][T17481] ? __pfx_do_filp_open+0x10/0x10 [ 671.899159][T17481] ? __pfx_kfree_link+0x10/0x10 [ 671.899175][T17481] ? _raw_spin_unlock+0x28/0x50 [ 671.899184][T17481] ? alloc_fd+0x64c/0x6c0 [ 671.899201][T17481] do_sys_openat2+0x121/0x1c0 [ 671.899217][T17481] ? __pfx_do_sys_openat2+0x10/0x10 [ 671.899232][T17481] ? ksys_write+0x22a/0x250 [ 671.899243][T17481] ? __pfx_ksys_write+0x10/0x10 [ 671.899254][T17481] __x64_sys_openat+0x138/0x170 [ 671.899270][T17481] do_syscall_64+0xfa/0xfa0 [ 671.899282][T17481] ? lockdep_hardirqs_on+0x9c/0x150 [ 671.899299][T17481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.899314][T17481] ? clear_bhb_loop+0x60/0xb0 [ 671.899334][T17481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.899349][T17481] RIP: 0033:0x7f08cff8d710 [ 671.899364][T17481] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 671.899378][T17481] RSP: 002b:00007f08d0eaef10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 671.899392][T17481] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f08cff8d710 [ 671.899399][T17481] RDX: 0000000000000002 RSI: 00007f08d0eaefa0 RDI: 00000000ffffff9c [ 671.899405][T17481] RBP: 00007f08d0eaefa0 R08: 0000000000000000 R09: 00007f08d0eaecd5 [ 671.899411][T17481] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 671.899417][T17481] R13: 00007f08d01e6038 R14: 00007f08d01e5fa0 R15: 00007ffd2cd03f88 [ 671.899433][T17481] [ 672.297515][ T9] usb 6-1: USB disconnect, device number 37 [ 672.471154][T17491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 672.480313][T17491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 672.533223][ T43] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 672.685403][ T43] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 672.695747][ T43] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 672.705665][ T43] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 672.714780][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 672.722754][ T43] usb 2-1: SerialNumber: syz [ 672.949623][ T43] usb 2-1: 0:2 : does not exist [ 672.961894][ T43] usb 2-1: unit 5 not found! [ 672.980899][ T43] usb 2-1: USB disconnect, device number 50 [ 673.030858][T10976] udevd[10976]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 673.099812][T17499] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4189'. [ 673.176818][T17507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 673.186618][T17507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 673.333404][ T9] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 673.403204][ T5948] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 673.483840][ T9] usb 6-1: no configurations [ 673.488522][ T9] usb 6-1: can't read configurations, error -22 [ 673.521402][T17509] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 673.531346][T17509] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 673.540488][T17509] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 673.548703][T17509] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 673.553348][ T5948] usb 7-1: Using ep0 maxpacket: 8 [ 673.578312][ T5948] usb 7-1: config 162 has an invalid interface number: 84 but max is 2 [ 673.587682][ T5948] usb 7-1: config 162 has an invalid descriptor of length 0, skipping remainder of the config [ 673.598488][ T5948] usb 7-1: config 162 has 2 interfaces, different from the descriptor's value: 3 [ 673.607959][ T5948] usb 7-1: config 162 has no interface number 0 [ 673.614849][ T5948] usb 7-1: config 162 has no interface number 1 [ 673.621198][ T5948] usb 7-1: config 162 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 673.643264][ T9] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 673.651037][ T5948] usb 7-1: config 162 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 673.665155][ T5948] usb 7-1: config 162 interface 2 altsetting 1 has an endpoint descriptor with address 0x38, changing to 0x8 [ 673.677625][ T5948] usb 7-1: config 162 interface 2 altsetting 1 bulk endpoint 0x8 has invalid maxpacket 58 [ 673.687758][ T5948] usb 7-1: config 162 interface 84 has no altsetting 0 [ 673.694972][ T5948] usb 7-1: config 162 interface 2 has no altsetting 0 [ 673.705869][ T5948] usb 7-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23 [ 673.715340][ T5948] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.723488][ T5948] usb 7-1: Product: syz [ 673.727833][ T5948] usb 7-1: Manufacturer: syz [ 673.732480][ T5948] usb 7-1: SerialNumber: syz [ 673.816462][ T9] usb 6-1: no configurations [ 673.822819][ T9] usb 6-1: can't read configurations, error -22 [ 673.829594][ T9] usb usb6-port1: attempt power cycle [ 673.967543][ T5948] usb 7-1: USB disconnect, device number 40 [ 674.173288][ T9] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 674.193214][ T43] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 674.194342][ T9] usb 6-1: no configurations [ 674.205480][ T9] usb 6-1: can't read configurations, error -22 [ 674.333277][ T9] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 674.346044][ T43] usb 2-1: no configurations [ 674.350772][ T43] usb 2-1: can't read configurations, error -22 [ 674.356174][ T9] usb 6-1: no configurations [ 674.361605][ T9] usb 6-1: can't read configurations, error -22 [ 674.368303][ T9] usb usb6-port1: unable to enumerate USB device [ 674.483200][ T43] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 674.644887][ T43] usb 2-1: no configurations [ 674.653199][ T43] usb 2-1: can't read configurations, error -22 [ 674.662081][ T43] usb usb2-port1: attempt power cycle [ 674.797405][T17527] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4200'. [ 674.849048][T17529] netlink: 220 bytes leftover after parsing attributes in process `syz.6.4201'. [ 675.003222][ T43] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 675.026364][ T43] usb 2-1: no configurations [ 675.031079][ T43] usb 2-1: can't read configurations, error -22 [ 675.093332][ T9] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 675.163198][ T43] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 675.184358][ T43] usb 2-1: no configurations [ 675.190804][ T43] usb 2-1: can't read configurations, error -22 [ 675.199250][ T43] usb usb2-port1: unable to enumerate USB device [ 675.249030][ T9] usb 7-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 675.258176][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.266236][ T9] usb 7-1: Product: syz [ 675.270410][ T9] usb 7-1: Manufacturer: syz [ 675.275088][ T9] usb 7-1: SerialNumber: syz [ 675.281548][ T9] usb 7-1: config 0 descriptor?? [ 675.289591][ T9] usb 7-1: Waiting for MOTU Microbook II to boot up... [ 675.297905][ T9] usb 7-1: failed setting the sample rate for Motu MicroBook II: -22 [ 675.306134][ T9] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 675.492680][ T43] usb 7-1: USB disconnect, device number 41 [ 676.513477][ T43] usb 6-1: new full-speed USB device number 42 using dummy_hcd [ 676.553201][T15686] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 676.685151][ T43] usb 6-1: unable to get BOS descriptor or descriptor too short [ 676.694016][ T43] usb 6-1: not running at top speed; connect to a high speed hub [ 676.702755][ T43] usb 6-1: config 5 has an invalid interface number: 141 but max is 0 [ 676.711893][T15686] usb 7-1: Using ep0 maxpacket: 8 [ 676.717059][ T43] usb 6-1: config 5 has no interface number 0 [ 676.723305][ T43] usb 6-1: config 5 interface 141 has no altsetting 0 [ 676.734935][T15686] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 676.743657][T15686] usb 7-1: config 179 has no interface number 0 [ 676.749956][T15686] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 676.761510][T15686] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 676.772974][ T43] usb 6-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=31.f3 [ 676.782073][ T56] block nbd3: Possible stuck request ffff88802664e000: control (read@0,1024B). Runtime 180 seconds [ 676.792873][ T56] block nbd3: Possible stuck request ffff88802664e1c0: control (read@1024,1024B). Runtime 180 seconds [ 676.803940][ T56] block nbd3: Possible stuck request ffff88802664e380: control (read@2048,1024B). Runtime 180 seconds [ 676.814991][ T56] block nbd3: Possible stuck request ffff88802664e540: control (read@3072,1024B). Runtime 180 seconds [ 676.826280][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.836378][ T43] usb 6-1: Product: syz [ 676.840549][ T43] usb 6-1: Manufacturer: syz [ 676.846920][T15686] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 676.858098][ T43] usb 6-1: SerialNumber: syz [ 676.865253][T15686] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 676.877928][T15686] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 676.891263][T15686] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 676.900655][T15686] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.924750][T17541] raw-gadget.4 gadget.6: fail, usb_ep_enable returned -22 [ 677.110352][T17550] FAULT_INJECTION: forcing a failure. [ 677.110352][T17550] name failslab, interval 1, probability 0, space 0, times 0 [ 677.114159][T17537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 677.140546][T17537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 677.145288][T17550] CPU: 0 UID: 0 PID: 17550 Comm: syz.1.4210 Not tainted syzkaller #0 PREEMPT(full) [ 677.145311][T17550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 677.145322][T17550] Call Trace: [ 677.145329][T17550] [ 677.145337][T17550] dump_stack_lvl+0x189/0x250 [ 677.145365][T17550] ? __pfx____ratelimit+0x10/0x10 [ 677.145384][T17550] ? __pfx_dump_stack_lvl+0x10/0x10 [ 677.145406][T17550] ? __pfx__printk+0x10/0x10 [ 677.145434][T17550] ? __pfx___might_resched+0x10/0x10 [ 677.145453][T17550] ? fs_reclaim_acquire+0x7d/0x100 [ 677.145473][T17550] should_fail_ex+0x414/0x560 [ 677.145502][T17550] should_failslab+0xa8/0x100 [ 677.145521][T17550] __kmalloc_noprof+0xcb/0x7f0 [ 677.145549][T17550] ? tomoyo_encode+0x28b/0x550 [ 677.145574][T17550] tomoyo_encode+0x28b/0x550 [ 677.145602][T17550] tomoyo_realpath_from_path+0x58d/0x5d0 [ 677.145624][T17550] ? tomoyo_domain+0xd9/0x130 [ 677.145649][T17550] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 677.145666][T17550] tomoyo_path_number_perm+0x1e8/0x5a0 [ 677.145685][T17550] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 677.145738][T17550] ? __fget_files+0x2a/0x420 [ 677.145761][T17550] ? __fget_files+0x3a0/0x420 [ 677.145779][T17550] ? __fget_files+0x2a/0x420 [ 677.145811][T17550] security_file_ioctl+0xcb/0x2d0 [ 677.145837][T17550] __se_sys_ioctl+0x47/0x170 [ 677.145856][T17550] do_syscall_64+0xfa/0xfa0 [ 677.145874][T17550] ? lockdep_hardirqs_on+0x9c/0x150 [ 677.145891][T17550] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.145915][T17550] ? clear_bhb_loop+0x60/0xb0 [ 677.145935][T17550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.145951][T17550] RIP: 0033:0x7f3299b8eec9 [ 677.145966][T17550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 677.145981][T17550] RSP: 002b:00007f329aaa2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 677.145998][T17550] RAX: ffffffffffffffda RBX: 00007f3299de5fa0 RCX: 00007f3299b8eec9 [ 677.146010][T17550] RDX: 0000200000001440 RSI: 00000000000089f0 RDI: 0000000000000003 [ 677.146021][T17550] RBP: 00007f329aaa2090 R08: 0000000000000000 R09: 0000000000000000 [ 677.146031][T17550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 677.146041][T17550] R13: 00007f3299de6038 R14: 00007f3299de5fa0 R15: 00007ffdb5da9c88 [ 677.146070][T17550] [ 677.146159][T17550] ERROR: Out of memory at tomoyo_realpath_from_path. [ 677.230876][T17537] sctp: [Deprecated]: syz.5.4205 (pid 17537) Use of int in max_burst socket option. [ 677.230876][T17537] Use struct sctp_assoc_value instead [ 677.350948][T17558] binder: BINDER_SET_CONTEXT_MGR already set [ 677.403405][ T31] INFO: task syz.0.3285:14901 blocked for more than 143 seconds. [ 677.414703][T17558] binder: 17555:17558 ioctl 4018620d 200000000240 returned -16 [ 677.466085][ T31] Not tainted syzkaller #0 [ 677.481658][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 677.504130][ T43] pcwd_usb: This driver only supports 1 device [ 677.513420][ T31] task:syz.0.3285 state:D stack:23432 pid:14901 tgid:14900 ppid:12589 task_flags:0x400040 flags:0x00080003 [ 677.537199][ T43] usb 6-1: USB disconnect, device number 42 [ 677.562004][ T31] Call Trace: [ 677.573258][ T31] [ 677.576546][ T31] __schedule+0x1798/0x4cc0 [ 677.581149][ T31] ? __lock_acquire+0xab9/0xd20 [ 677.586255][ T31] ? __pfx___schedule+0x10/0x10 [ 677.591264][ T31] ? schedule+0x91/0x360 [ 677.595684][ T31] schedule+0x165/0x360 [ 677.599924][ T31] io_schedule+0x80/0xd0 [ 677.605578][ T31] folio_wait_bit_common+0x6b0/0xb80 [ 677.610995][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 677.616999][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 677.622646][ T31] ? __pfx_compaction_alloc+0x10/0x10 [ 677.628616][ T31] ? page_has_movable_ops+0x10b/0x400 [ 677.634616][ T31] migrate_pages_batch+0x14cd/0x35e0 [ 677.635570][ T5925] usb 7-1: USB disconnect, device number 42 [ 677.639967][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 677.640018][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 677.640630][ T31] ? rcu_is_watching+0x15/0xb0 [ 677.669398][ T31] ? __pfx_compaction_alloc+0x10/0x10 [ 677.674915][ T24] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 677.675328][ T31] ? __pfx_compaction_free+0x10/0x10 [ 677.688324][ T31] ? __pfx_migrate_pages_batch+0x10/0x10 [ 677.695285][ T31] ? __pfx___schedule+0x10/0x10 [ 677.700173][ T31] ? css_rstat_updated+0x23a/0x4f0 [ 677.706051][ T31] ? rcu_is_watching+0x15/0xb0 [ 677.710937][ T31] migrate_pages+0x2038/0x2930 [ 677.715826][ T31] ? __pfx_compaction_free+0x10/0x10 [ 677.721228][ T31] ? __pfx_compaction_alloc+0x10/0x10 [ 677.726709][ T31] ? __pfx___might_resched+0x10/0x10 [ 677.732122][ T31] ? __pfx_migrate_pages+0x10/0x10 [ 677.737324][ T31] ? kasan_check_range+0x7d/0x2c0 [ 677.742357][ T31] ? rcu_is_watching+0x15/0xb0 [ 677.747202][ T31] ? isolate_migratepages_block+0x394f/0x4160 [ 677.757163][ T31] compact_zone+0x23e1/0x4ab0 [ 677.761940][ T31] ? __pfx_compact_zone+0x10/0x10 [ 677.767242][ T31] sysctl_compaction_handler+0x3a4/0x7b0 [ 677.772893][ T31] ? __pfx_sysctl_compaction_handler+0x10/0x10 [ 677.779308][ T31] ? trace_kmalloc+0x1f/0xd0 [ 677.784173][ T31] ? __kvmalloc_node_noprof+0x5ed/0x910 [ 677.789775][ T31] ? proc_sys_call_handler+0x3cf/0x700 [ 677.795472][ T31] proc_sys_call_handler+0x4cb/0x700 [ 677.800774][ T31] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 677.806762][ T31] ? __asan_memset+0x22/0x50 [ 677.811366][ T31] iter_file_splice_write+0x975/0x10e0 [ 677.817035][ T31] ? __pfx_iter_file_splice_write+0x10/0x10 [ 677.823075][ T31] ? rcu_read_lock_any_held+0xb3/0x120 [ 677.828632][ T31] ? __pfx_iter_file_splice_write+0x10/0x10 [ 677.834661][ T31] direct_splice_actor+0x101/0x160 [ 677.839846][ T31] splice_direct_to_actor+0x5a8/0xcc0 [ 677.845581][ T31] ? __pfx_direct_splice_actor+0x10/0x10 [ 677.847403][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 677.853909][ T31] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 677.869731][ T24] usb 2-1: config 0 has no interfaces? [ 677.875549][ T31] ? futex_private_hash_put+0x4b/0x280 [ 677.878071][ T24] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 677.881032][ T31] do_splice_direct+0x181/0x270 [ 677.881064][ T31] ? __pfx_do_splice_direct+0x10/0x10 [ 677.890895][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.895592][ T31] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 677.900818][ T24] usb 2-1: Product: syz [ 677.909187][ T31] ? rw_verify_area+0x255/0x4d0 [ 677.918241][ T24] usb 2-1: Manufacturer: syz [ 677.918981][ T31] do_sendfile+0x4da/0x7e0 [ 677.923874][ T24] usb 2-1: SerialNumber: syz [ 677.931251][ T31] ? __pfx_do_sendfile+0x10/0x10 [ 677.938020][ T24] usb 2-1: config 0 descriptor?? [ 677.942537][ T31] __se_sys_sendfile64+0xd9/0x190 [ 677.952428][ T31] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 677.960019][ T31] ? do_syscall_64+0xbe/0xfa0 [ 677.964827][ T31] do_syscall_64+0xfa/0xfa0 [ 677.969342][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 677.974826][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.980901][ T31] ? clear_bhb_loop+0x60/0xb0 [ 677.985787][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.991691][ T31] RIP: 0033:0x7f66bb58eec9 [ 677.996302][ T31] RSP: 002b:00007f66bc44c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 678.005017][ T31] RAX: ffffffffffffffda RBX: 00007f66bb7e5fa0 RCX: 00007f66bb58eec9 [ 678.013069][ T31] RDX: 00002000000000c0 RSI: 0000000000000004 RDI: 0000000000000005 [ 678.021673][ T31] RBP: 00007f66bb611f91 R08: 0000000000000000 R09: 0000000000000000 [ 678.032037][ T31] R10: 000000000000000a R11: 0000000000000246 R12: 0000000000000000 [ 678.041426][ T31] R13: 00007f66bb7e6038 R14: 00007f66bb7e5fa0 R15: 00007ffd54fc4a68 [ 678.049932][ T31] [ 678.054023][ T31] [ 678.054023][ T31] Showing all locks held in the system: [ 678.066073][ T31] 1 lock held by khungtaskd/31: [ 678.071086][ T31] #0: ffffffff8e53d320 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 678.081797][ T31] 2 locks held by getty/5622: [ 678.086849][ T31] #0: ffff8880316f10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 678.097093][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 678.107349][ T31] 1 lock held by udevd/10111: [ 678.112040][ T31] #0: ffff88802651b358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 678.121639][ T31] 1 lock held by syz.0.3285/14901: [ 678.126808][ T31] #0: ffff88805a2bc420 (sb_writers#3){.+.+}-{0:0}, at: direct_splice_actor+0x49/0x160 [ 678.136848][ T31] 1 lock held by syz.3.3518/15606: [ 678.141975][ T31] #0: ffff88802651b358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 678.151448][ T31] [ 678.153950][ T31] ============================================= [ 678.153950][ T31] [ 678.163788][ T31] NMI backtrace for cpu 0 [ 678.163804][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 678.163823][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 678.163835][ T31] Call Trace: [ 678.163843][ T31] [ 678.163850][ T31] dump_stack_lvl+0x189/0x250 [ 678.163881][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 678.163905][ T31] ? __pfx__printk+0x10/0x10 [ 678.163938][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 678.163965][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 678.163990][ T31] ? __pfx__printk+0x10/0x10 [ 678.164016][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 678.164037][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 678.164061][ T31] watchdog+0xf60/0xfa0 [ 678.164082][ T31] ? watchdog+0x1e2/0xfa0 [ 678.164104][ T31] kthread+0x711/0x8a0 [ 678.164132][ T31] ? __pfx_watchdog+0x10/0x10 [ 678.164150][ T31] ? __pfx_kthread+0x10/0x10 [ 678.164176][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 678.164194][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 678.164212][ T31] ? __pfx_kthread+0x10/0x10 [ 678.164235][ T31] ret_from_fork+0x4bc/0x870 [ 678.164257][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 678.164277][ T31] ? __switch_to_asm+0x39/0x70 [ 678.164292][ T31] ? __switch_to_asm+0x33/0x70 [ 678.164307][ T31] ? __pfx_kthread+0x10/0x10 [ 678.164329][ T31] ret_from_fork_asm+0x1a/0x30 [ 678.164360][ T31] [ 678.164367][ T31] Sending NMI from CPU 0 to CPUs 1: [ 678.310906][ C1] NMI backtrace for cpu 1 [ 678.310922][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 678.310945][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 678.310956][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 678.310978][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 d1 1f 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 678.310993][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 678.311007][ C1] RAX: c0d60f50dc69eb00 RBX: ffffffff81976677 RCX: c0d60f50dc69eb00 [ 678.311020][ C1] RDX: 0000000000000001 RSI: ffffffff8dc8715f RDI: ffffffff8c056e60 [ 678.311032][ C1] RBP: ffffc90000197f10 R08: ffff8880b8732fdb R09: 1ffff110170e65fb [ 678.311044][ C1] R10: dffffc0000000000 R11: ffffed10170e65fc R12: ffffffff8fe49c70 [ 678.311055][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003b51b58 [ 678.311066][ C1] FS: 0000000000000000(0000) GS:ffff8881258b7000(0000) knlGS:0000000000000000 [ 678.311079][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 678.311090][ C1] CR2: 00007ffddf719f88 CR3: 000000002582a000 CR4: 00000000003526f0 [ 678.311104][ C1] Call Trace: [ 678.311110][ C1] [ 678.311116][ C1] default_idle+0x13/0x20 [ 678.311136][ C1] default_idle_call+0x73/0xb0 [ 678.311156][ C1] do_idle+0x1e7/0x510 [ 678.311177][ C1] ? __pfx_do_idle+0x10/0x10 [ 678.311202][ C1] cpu_startup_entry+0x44/0x60 [ 678.311221][ C1] start_secondary+0x101/0x110 [ 678.311237][ C1] common_startup_64+0x13e/0x147 [ 678.311266][ C1] [ 678.311949][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 678.477803][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 678.486925][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 678.496965][ T31] Call Trace: [ 678.500238][ T31] [ 678.503157][ T31] dump_stack_lvl+0x99/0x250 [ 678.507752][ T31] ? __asan_memcpy+0x40/0x70 [ 678.512349][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 678.517538][ T31] ? __pfx__printk+0x10/0x10 [ 678.522118][ T31] vpanic+0x237/0x6d0 [ 678.526082][ T31] ? __pfx_vpanic+0x10/0x10 [ 678.530569][ T31] ? preempt_schedule_common+0x83/0xd0 [ 678.536011][ T31] panic+0xb9/0xc0 [ 678.539821][ T31] ? __pfx_panic+0x10/0x10 [ 678.544217][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 678.549573][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 678.555714][ T31] watchdog+0xf9f/0xfa0 [ 678.559857][ T31] ? watchdog+0x1e2/0xfa0 [ 678.564167][ T31] kthread+0x711/0x8a0 [ 678.568234][ T31] ? __pfx_watchdog+0x10/0x10 [ 678.572909][ T31] ? __pfx_kthread+0x10/0x10 [ 678.577487][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 678.582751][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 678.587935][ T31] ? __pfx_kthread+0x10/0x10 [ 678.592527][ T31] ret_from_fork+0x4bc/0x870 [ 678.597100][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 678.602193][ T31] ? __switch_to_asm+0x39/0x70 [ 678.606943][ T31] ? __switch_to_asm+0x33/0x70 [ 678.611710][ T31] ? __pfx_kthread+0x10/0x10 [ 678.616306][ T31] ret_from_fork_asm+0x1a/0x30 [ 678.621082][ T31] [ 678.624346][ T31] Kernel Offset: disabled [ 678.628659][ T31] Rebooting in 86400 seconds..