last executing test programs: 35.747425275s ago: executing program 3 (id=303): r0 = open(&(0x7f0000000580)='./file1\x00', 0x80342, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r0, &(0x7f00000003c0)={0xa0, 0xffffffffffffffda, 0x0, {{0x8, 0x3, 0x5, 0x8, 0x3, 0x1, {0x1, 0x17f, 0x20ff, 0x5, 0x89, 0xd615, 0xb, 0x80000000, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r0, r0, &(0x7f0000000080), 0x7f03) (fail_nth: 33) 35.444257633s ago: executing program 3 (id=304): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="b80400001600010a00000600000000000a"], 0x4b8}, 0x1, 0x0, 0x0, 0x844}, 0x0) 35.357049316s ago: executing program 3 (id=306): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 34.463027868s ago: executing program 3 (id=308): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket(0xa, 0x3, 0xff) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10408, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x13) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = gettid() timer_create(0x3, &(0x7f0000000040)={0x0, 0x11, 0x4, @tid=r4}, &(0x7f0000044000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000001340)='./file0\x00', 0x80101, 0x8c) r6 = dup2(r5, r2) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setuid(0xee00) prlimit64(r7, 0x9, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0xa, 0x7, @mcast2}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000180)="671723d7c6012c", 0x7}, {&(0x7f0000000280)="9e91d91a92dc7c8fff658bb539e2ffb332c99223a7dfe52c1f51218206f5abfd2a33a3", 0x23}], 0x2}, 0x20008b88) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='f2fs\x00', 0x0, &(0x7f00000002c0)='cache=none') recvmmsg(r0, &(0x7f00000019c0)=[{{&(0x7f00000001c0)=@ax25={{0x3, @bcast}, [@netrom, @null, @rose, @remote, @remote, @bcast, @remote, @default]}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000300)=""/197, 0xc5}], 0x1, &(0x7f0000000400)=""/230, 0xe6}, 0x5}, {{&(0x7f0000000500)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f0000000680)=""/240, 0xf0}, {&(0x7f0000000780)=""/224, 0xe0}, {&(0x7f0000000880)=""/123, 0x7b}, {&(0x7f0000000240)=""/36, 0x24}, {&(0x7f0000000a40)=""/213, 0xd5}, {&(0x7f0000000900)=""/169, 0xa9}], 0x7, &(0x7f0000001c40)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000000bc0)=@un=@abs, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c40)=""/106, 0x6a}, {&(0x7f0000000cc0)=""/110, 0x6e}], 0x2}, 0x7}, {{&(0x7f0000000d80)=@caif=@util, 0x80, &(0x7f0000001300)=[{&(0x7f0000000e00)=""/23, 0x17}, {&(0x7f0000000e40)=""/105, 0x69}, {&(0x7f0000000ec0)=""/229, 0xe5}, {&(0x7f0000000fc0)=""/244, 0xf4}, {&(0x7f00000010c0)=""/42, 0x2a}, {&(0x7f0000001100)=""/176, 0xb0}, {&(0x7f00000011c0)=""/1, 0x1}, {&(0x7f0000001200)=""/179, 0xb3}, {&(0x7f00000012c0)=""/28, 0x1c}, {&(0x7f0000002c40)=""/4096, 0x1000}], 0xa, &(0x7f00000013c0)=""/137, 0x89}, 0x8bc}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001480)=""/124, 0x7c}, {&(0x7f0000001500)=""/106, 0x6a}, {&(0x7f0000001580)=""/169, 0xa9}, {&(0x7f0000001700)=""/142, 0x8e}, {&(0x7f00000017c0)=""/137, 0x89}, {&(0x7f0000001880)=""/183, 0xb7}], 0x6}, 0x7fff}], 0x5, 0x40000000, &(0x7f0000001640)) 34.343277928s ago: executing program 3 (id=309): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x0) read$usbmon(r1, &(0x7f0000000000)=""/93, 0x5d) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0xb0, 0x5, "", [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x7, 0x1, 0x2, 0x61, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x5, 0x9}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0xe1, 0xe7, 0xdb}}]}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0xf, 0x8, 0x7f, 0x20, 0xfa}, 0x2e, &(0x7f0000000100)={0x5, 0xf, 0x2e, 0x4, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "6340f63b254329a3edb87b32ca4c64d9"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x40, 0x8, 0x6, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x0, 0x3, 0x1}]}, 0x6, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x2024}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x4ff}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x41d}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xfcff}}, {0xc2, &(0x7f0000000240)=@string={0xc2, 0x3, "f7c895444a1f9d52d83174c5b4978cde99e47f8b883551ca2c7a2e6a69603cb906e9b532adf48abec953d2c922d6998b2536965e59da74cba038cd64e2c1f3b50a514df8e1129fb00958ee8e66488500ce16f52068945927d541aca9f8a876c3566ad7799065729a7bc95c9770fcdd65ee5edaa2cc5b3a5d62f3853c3cb8c6651d09204ab3d25db0fcb241ecb09014464976b7c4669bfdf8d6c4ac14c663762f68731b484468cb639278c42a12e06315cab01f3e380ad57768e5a18b1cb83eb7"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x100a}}]}) r2 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 34.053494776s ago: executing program 3 (id=311): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x6, 0x2bdb2872175b3cd9, 0x7, 0x1, 0x8}) (async) ioctl$KVM_ASSIGN_SET_MSIX_NR(0xffffffffffffffff, 0x4008ae73, &(0x7f0000000000)={0x800, 0x101}) 33.826565315s ago: executing program 32 (id=311): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x6, 0x2bdb2872175b3cd9, 0x7, 0x1, 0x8}) (async) ioctl$KVM_ASSIGN_SET_MSIX_NR(0xffffffffffffffff, 0x4008ae73, &(0x7f0000000000)={0x800, 0x101}) 9.977906489s ago: executing program 2 (id=437): shmget$private(0x0, 0x800000, 0x0, &(0x7f0000173000/0x800000)=nil) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000001c0)={0x1, 0x0, [{0x1d9, 0x0, 0x9}]}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x488c4) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16, @ANYBLOB="be60565a6e9678a12fb58a6ee480a61974a59bbb659c5b267d1ebad57ae84c341ebcbb0534afd88aceb2060a09f395510c1dc4d97242b081f541dc311e"], 0x0) syz_usb_control_io(r3, &(0x7f0000000100)={0x14, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0}, 0x0) 8.029291188s ago: executing program 2 (id=450): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) futex_waitv(&(0x7f0000001b00)=[{0x3, &(0x7f0000000940)=0x400020000000a, 0x6}], 0x1, 0x0, 0x0, 0x2) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) read$alg(r1, &(0x7f0000000200)=""/96, 0x60) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write(r3, &(0x7f0000000700)="f5", 0x1) splice(r3, &(0x7f0000000040), r2, 0x0, 0x6, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000040)='veth1\x00') r4 = syz_open_dev$dri(&(0x7f0000000380), 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000001c0)={0x0, 0x5, 0x3, "7cc3b3"}, 0xb) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000180)=@ethtool_flash={0x33, 0x2, './file0\x00'}}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r4, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x15, 0x0, 0x36f}) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYRES8=r4, @ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000000904"], 0x0) syz_usb_connect$uac2(0x2, 0xf9, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe7, 0x3, 0x1, 0x7f, 0x40, 0x0, {0x8, 0xb, 0x2, 0x2, 0x1, 0x2, 0x20, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xf7, 0x6, 0x3e}, [@effect_unit={0xd, 0x24, 0x7, 0x6, 0x3, 0x6, [0x0, 0x1, 0x3]}, @selector_unit={0xc, 0x24, 0xb, 0x0, 0x7, "f3514f1f9df79d"}, @input_terminal={0x10, 0x24, 0x2, 0x2, 0x400, 0x2, 0x8, 0x7, 0x9, 0x8, 0xc0, 0xae}, @output_terminal={0xc, 0x24, 0x3, 0x4, 0x0, 0x1, 0x5, 0xa, 0x8000, 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x6, 0x8, 0x2, 0x1001, 0x9, 0x16, 0xdd}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x7, 0x9, 0x5, '\"'}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x40, 0x1, 0x10, {0x8, 0x25, 0x1, 0x2, 0x14, 0x0, 0xbb}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1, 0x5, 0x1, 0xec}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xdf, 0x2, 0xd2, 0x0, "", "b736"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x1c, 0x3, 0x6, 0x16, "cd5064"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x81, 0x5, 0x83, "e6b7475447014d"}]}, {{0x9, 0x5, 0x82, 0x9, 0x240, 0x85, 0xff, 0x2, {0x8, 0x25, 0x1, 0x81, 0xf, 0x9, 0xfff3}}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x110, 0x6, 0x4, 0x8, 0x20, 0x1}, 0x4d, &(0x7f0000000400)={0x5, 0xf, 0x4d, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x80, 0x66, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0x6, 0x0, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x3, 0x1, 0xfffe}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0xe, 0x6, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x4, 0x0, 0xff}, @ssp_cap={0x1c, 0x10, 0xa, 0x4, 0x4, 0x800, 0xf, 0x8, [0xc0, 0x0, 0x0, 0xc0]}]}, 0x1, [{0x2f, &(0x7f0000000480)=@string={0x2f, 0x3, "5ebfeab426595ec3db70807ace5a667afa5e1180d0aaf18a1d3457d117a6e65d6fdec3813423cbb737b7a4ecae"}}]}) syz_usb_connect(0x5, 0xb48, &(0x7f0000001b40)={{0x12, 0x1, 0x200, 0x11, 0x24, 0x2, 0x8, 0x2c4e, 0x102, 0x2a35, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb36, 0x2, 0x5a, 0x9, 0x80, 0xc, "", [{{0x9, 0x4, 0xd0, 0x3, 0xb, 0xff, 0xff, 0xff, 0x9, [@generic={0x3e, 0x22, "44686dbe04b3dbccce70c3c394fdfaca346ca4faee11b3de14c34ea20c12f29940a73711763538509c4a05bcf8ce49c2adee815db5b2fa938cd47e2b"}], [{{0x9, 0x5, 0x2, 0x0, 0x40, 0x5, 0x5, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0x3}]}}, {{0x9, 0x5, 0xc, 0x10, 0x400, 0x0, 0xf8, 0x3, [@generic={0x19, 0x5, "b72855bb2d5dd9acfbc25af16a89eeefd5ac7f27ef664a"}]}}, {{0x9, 0x5, 0x9, 0x2, 0x40, 0x9, 0x5, 0x7b}}, {{0x9, 0x5, 0xe, 0x2, 0x200, 0x2, 0x2f, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x2}, @generic={0x101, 0x2c, "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"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x0, 0xf9, 0x7f, 0x1c}}, {{0x9, 0x5, 0xd, 0x8, 0x40, 0x9, 0xf, 0x7f, [@generic={0xd6, 0x10, "36164c24278b08a03633e7cff2e01a053c4e2439c98cb1e0ea77b1e4141d7e9fcfb518de30c89341c28d61e737b3acfd4b3b85d6684b747b216c66bbcc0ea25bc3407b1e087650ec995b6e103dfc733d45cd67123db93d7779498aefce54902af1b98fc253669a1491ea50e6a6e58b2b98ee16ee0b29d11ec514d9d2df4c21aa845952dc1ad7b8e0d9e5cecc65d70bb06bcd28c2537d4ac6baf02b87f3f5fca9167f292d41aae3810726187d45f1f6abfc42147acea03f350b3de0522546ae7d940d303fa101d3ac567f0dda8fda81c13817e936"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x400, 0x0, 0x4, 0x4, [@generic={0x4b, 0xe, "cdf9f122c347643a702fbb5c876640df8ea16100337c52c4a43a58056817ac1302cf9aaefea3b60a6996251a752fc88f9c5cdb1ad963cc1ea684c25ae4d40d42e2f19bb6f59e216062"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xf2, 0x4}]}}, {{0x9, 0x5, 0x2, 0x10, 0x8, 0x1, 0x8, 0x8}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x9, 0x8, 0x3, [@generic={0x8a, 0x23, "e1af3be4fa19e8b6db45a923850c9fa816e48d985585d464502721f372dbb897f6fb7ad3ce3aacd2b08339e82ac1ab25a885451372b98c071e1156ad7815a5e6e95d2caa5f35515fb95336b3ffc3a2838e7409515b6c9e66fa0839cb746e193745544644bf89ee9ebedd0fa45ef9d36b0a6781112a49b503e93352931f5816256153ecc55b9b0803"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0x9, 0x4, 0x80, [@generic={0x5b, 0x23, "f2946834f6e85fbe565d19714931f5ebbc6130db74ad73f8b053a6b12fbececd2ea43b2a2eca0cf858ef6646b159d20bb4047a49fc348c547779064bc2246386abc92187df5360120df930acb9a2082e5095437dc7e9237eed"}, @generic={0x96, 0x6, "557d288f86fafa840bff247538f02c2c31437ef41cdca58a22d366bc97111d8e9f9b3cfccb87ec87266c8c5efcff384b98cad27ba7510b34b1dd0288a79731ef301bc151e784330b07b003b2116b3772340f99cd8f085b9a24751e832ef2e344cff4bca0f50d2c41fd5cc3e8b63048a25f16cb7776185c01137d543ec483a429695ed1ffab3b6c0fd080d38bdaa904c179a881df"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x5, 0x1, 0x17, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x8000}, @generic={0xe0, 0x10, "610db6240eadbc469d2b62475fbcfd29bf4c1a707f1eb6d414f7fbd7425fe1102b6537542b154825fda2b8b62d31b47df3069d7615713286df34bc8745de4f6ccb3b55f879cf5796aa250c19d22bb47134cff5e455704247a818687a506e87c0bd00b691fb549ecd0a88f15ae04d7ec73064c3b953ba3bfecdbe46e859f1f5a5528ba147718dac59e6f03ec9346eef02caeb68ecb1e196ba1c3876a6ece8327afaf2e87f19053741d07537ec09a714cc9770ba67b4828a89d7769c1e9ea1148536e046e295fbd6e27376e6949999b930b625ea94fd3b75786c2462944de2"}]}}]}}, {{0x9, 0x4, 0xe, 0x9, 0x10, 0xbf, 0x62, 0xe1, 0x7, [@generic={0x32, 0x23, "5c05eec10394b808e9b9e4c787de01dd8ab2b2afa9b438249847c4f87c1e6a11a4f260af8e72e6299ce944fe719fbe36"}], [{{0x9, 0x5, 0x8, 0x10, 0x210, 0xf, 0x2, 0x8}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x5, 0x6, 0xe1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0x9}]}}, {{0x9, 0x5, 0x6, 0x8, 0x8, 0x8, 0x0, 0x2}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x3, 0x5, 0x2, [@generic={0xc0, 0x1, "52507e160ede7877d2c61798345afb19a0a04abde2c7902107324a0e46fb2cbe2f72572a42b8eaa7ea5e5add92d90c8c5394dfd0bfa5b6f4fe64048c7a0ad165ebcc611bc5a28582b41c1081a85f7490a81845cc07f91416656b08306e79bf02574d6057cf4b4462270914b04d6fc6e90a4454085a755dc202ea5a621afc37642d6a1e950067a35ca4bdd2c40c33807fe7581be60d52ae18d0e364a8ad27bb92c16feb51473dfe211f4f2eff843fb5e71bd3d9a038bb368f5285eb73c866"}, @generic={0x4d, 0x31, "4882633b6fdded823e26a325cbed2d7496f6d5b45db4fbf587bc6401b1a1e36de731065b2acd2d16b2668ab8d07999ed24ff5aac86aafd30f6dd70f2f74505ee4dc2aded4b1a1b4a672299"}]}}, {{0x9, 0x5, 0x0, 0xc, 0x200, 0x9, 0x9e, 0x0, [@generic={0xc3, 0x23, "2a3703ad229f2a53c9c61534686077407a0c6a7689eedc0317297007ff5198fc0b841a7d8afe84f78ef40d2a6248fbf1f18e1251dbe47554d00e0ce5630dea4f93f1d3c848fbf9aead815d6c161b428f05d162b0c4eeee1b23e6f048f4f1fc96ddf2560f536686fc31ccc843e0d43a511ef7a0787f71d78ed6c3a5d6c0e08a0f7e0f8abfeb73cf833281e1d58c21b1d61ca07d4fd0020859c9dd22a07f421e962ea77cf9054a6a69953775bf282567773897bc15e03622292dfaf97ef7fcd42f85"}, @generic={0x1a, 0x21, "d3a530ff8b535bfd2a61c4d0d23408e6345eb6ee1d791772"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x50, 0xd, 0xba, 0x3}}, {{0x9, 0x5, 0x80, 0x10, 0x40, 0x1, 0x1, 0x57, [@generic={0x86, 0x11, "57e1942332def3a794ae74202bc2821396449ce92a71808f3d7e3d8d50a23a3adc3122268dd3ba39d5f14ce7dbe846fad0c7b55068f9ec89d1bcaa10b69e1b60a67220d40fe571c274e188acdb3465355c0c81b0df504ed91bf33617afd654e03793d49bc03e491b8b262a957b2733dea368a9331d04912e0b8cbf154286398b4b39ccc9"}, @generic={0xb7, 0x6, "33b9255068a07989e34ae5bfbc686a4844122da68dceb9f06cad5fb9ef780aa0c40e928c7de7b0439b9a1dfd6a7a0e5e4f9760f54393198895940f24b2624ba9688806168a360ec44ffef22f107221968688ffb7e72850f4e0b252c3618bf8dc941109208bf243f8940ebc2c5d2c3d8e0f7959721cac03de013ec2ee59c4b657b9109d5e87d50092aba502232f235189c97677c41634310331e61399369f6b8faa7bda3ee7ffd14d795699cf6e3e52c32755f4b070"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x200, 0x60, 0x3, 0x3f}}, {{0x9, 0x5, 0xa, 0x2, 0x220, 0x5, 0x40, 0xbd}}, {{0x9, 0x5, 0x3, 0x0, 0x58, 0x8, 0x5, 0x55, [@generic={0x25, 0x20, "2df47e3fdcee48dd84f22bcc85e3da87b221a020c32b6b6c30ed7cf9ecae076ff5c60b"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x306}]}}, {{0x9, 0x5, 0xe, 0x1, 0x20, 0x5c, 0x6, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0x4}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x0, 0x2c, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x1, 0x400}, @generic={0x37, 0x2, "6eba80447a177154a383bf456e2d61f7554720e159bc22211b68853f9cd9fb0c51c3a17da45acba61ca004a79598d4891d556b7bc9"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x5bf, 0xf9, 0x8, 0x1}}, {{0x9, 0x5, 0x8, 0x4, 0x48, 0x40, 0x3, 0x8, [@generic={0x67, 0x24, "6c47f18863a5f5507ad33cb5541850b307f3b1854efcc97d6cfe6b7570fd02db5aca1eb952969f60111e79ad95f2aa994e06779d44364fe9a9be230061babf6853cdef50561d5a7907f14e62e6b5bb4df5a2073f6d3b32c77ef5521f72ba752e9f7eed3612"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x0, 0xe8, 0x12}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0xd0, 0x8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x6}, @generic={0xeb, 0x24, "d70c3eb4975b8e4d641df67efe5e517360404d12b636b6bf664a4c0d3d0d45c3429ca101c152a77fedfc3b93d54dd8da075e708864435caa263697db404eb9cd1ecf49a8b009834a1aac202dbea529b50dd8bc8c909aeaf6d3490c1d0ebb7075f60d0a885ed1329d0ea97629ab17fe90853d1c9b3ffbf10ab979bc09d9fa073d4e3cc58a5e1797521f9f188de366e622bb4215754407dae96de00873911bbcc34e48f501ddfd6956ab8159ec214b177efad17904ed46818905adc0dbead292d7b52fa700ead9ee480aecd9b1da66a7b482c44136b07dad639e367a4477ed627a21021f9bf9779959eb"}]}}]}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x81, 0x6, 0x22, 0xff, 0x70}, 0x17, &(0x7f0000000100)={0x5, 0xf, 0x17, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x5, 0xc, 0x7ff}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x5f, 0x10, 0x80, 0xfd}]}, 0x1, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x426}}]}) 5.001769725s ago: executing program 2 (id=468): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x204, r1, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xa8, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc6c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7f5f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x10727ff3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x856d}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5de84cda}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb3a9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x57715fa2}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3a01636f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7981}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x270d810e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x66c4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2e73b9a7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7631}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5395aaf3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x244634ef}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaf07}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5e46}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x18, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x31b77e42}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x15}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xe8, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5825c850}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x17}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x35e4c3ec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5657b62e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x48}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x69fdea82}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x17}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x14}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4396f4e3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7e595815}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x281a341f}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5a8ce926}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1fb256a5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x25}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x90}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x52bddf5c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x75259fb9}]}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x4014}, 0x4000040) r2 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xaf\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x95\x84u\x85\xddg\x8e\'b\"\xed\xb2{\xb8A\b\x84\x8f\xed\xf1nH\x82v\x1aeLn\xcf\x10IV\x99\x83\x9b=\xe9\t\xf2\x1f\xeb\xc5&\xa2+\xdd\xfc\xea\t8\xd9\xc5\xae\x1b(\x95\xbb\x16\xc8\xa8\xa8\xca\xe7\xb1[\xa8\xe3\x05\xb07\f\xefnS\x18\xbb\xf2\x9azc\xa3.\xbb\xc9\xa7h\\\x96\x85/\x05\n', 0x0) fsetxattr$security_ima(r2, &(0x7f00000000c0), &(0x7f0000000040)=@md5={0x1, "63474e6d781ce49593365a00"}, 0xfffffffffffffdb1, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) (fail_nth: 33) 4.379210463s ago: executing program 2 (id=471): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_DESTROY(r0, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x3}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="d542f6300b61ca7913e7cd7b4036afcfddb3c77fc63db30ef223f1cc4fcdcbb56655be4873ea15e1a9d348fadc935180e702560acae65d42d95f6ddcae59879a1ce7e78eb197a0c8231a504b2614ac6dfd9a5760fe75ba4204694d382eb51806597cde99cedde3f0edd8bd3fce154f83e47f422d0e5bf427c23771a122bd0369cec32bbe791bfc2c0fce202d51df0862c31baa7b80bab6d64c1d5826a7f4c1982e3693e7a0677f2ad388ce872b890394a3ecfd1cec45ba7966945271fc033565d4a9bb17a41aacf550c4510ba99a24b48eab32e5d7549de9bae7954e0f750b55f706de3d5001638a1260dd8d2ad735d9ec409711851badf7e170fc50", 0xfc}, {&(0x7f0000000780)="92bdcafd7ac9e21583ea71b9eb5feeb69b7eeb919260393d59069611e6d460fd38481da64e5ad543477ed7b768b1a06c0a5d60edf6c5610c123e3572a7c3bd74b7bd876c6f1c54709ef06cb9187fa5ddecc04cdc8fd3e74782c0aa0579531662e6d5fcdddc53becdd0b8a59c3a97fe428e75e7707525647bd822", 0x7a}, {&(0x7f0000000580)}, {&(0x7f0000000a80)="190e431aa3b287c28be2f5404c8034cc87b917c381ccff6f8d431e872be3df64fee6c95001ceff12f2e942df6a8738cd4ad9ef7ad532fd0c824bf8d36d616e99807b3be837b3145efe65f7c6b66b9813e122d9be7799ebf0160d4bd329ac230e639a58a6538ec01e2de41722469556b03344f32eac19", 0x76}], 0x4, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad12b3e3de940a99238945935184cd93dd174b70ecb9c3c99d2df9dd0cbef6a9e230f7dd8367384f034a7a011388990e94cd43e9f80ec3358dc596926960604b9f051", 0x83}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d356257181e43b6e60349f69ec5f529734f76708a6c5eccb57005c1a513d8030d12c", 0x41}, {&(0x7f0000000d00)}, {0x0}, {&(0x7f00000010c0)="978d1129fddf5e2f1be8be48f935ef4f71893a57f79be3e44522d3987ccee23f4e717d8c8e14573937040fb658a24f1c9e0c7f98a24fa1209a6ea754e1244234c715713d120b6929614443fd6b4223bc04c3a8c9241ccbb6a8b0bb19fe4eedae48642a74e97588dc36bf06a4c1fb17b47b39240a6a8e9b5daa97e63d777e665841a349c52022252eafc1c129e154ab390624dd7fb8ac1e44c203140d6aab524f61cd8642ee0f380ebb21dc9267a8fbefa6eec89ff97e7800f44f89b17d43206217941c34067892c05465382550a1da2519", 0xd1}, {&(0x7f0000000800)="b56380b7487ff3b0cd079ed795bdeeb3ad75fe878a", 0x15}, {&(0x7f00000011c0)}, {&(0x7f0000001200)="43979d4537ac96f6e22b12acd1fdd3ffc7ef440e65e2e70d511a408f743d4ce7516f4364a00a041dc7b1ffe56ebc713b158ea1aab13ce3db53ab8af3f76ffaa86df636018175c4a8ea922a193ad08ca30d5031b27a4a87bff93dc12a98b6e4f25b5550d98a5bf3e040a8902083eea93bdbde6da91df3a730dd2b8215e9840f04dd0ab667500fe952fa1b8845c2cee50f8322175049c4a994def6599287fb0f8d61029188945e9b273cded03bf8a0c2da5168461dafc53f865fab513453ed3d95bd82ab0bb24a32deb3a229be42837b0c57e0c60c042d83c7bf866828342f3e6e1bdef6", 0xe3}, {&(0x7f0000001300)="ceff7472ad7240514c6f826361e8daefdb50fe704622e5641d1b096ad682a5682aa51b6eea91858d93228379d70f8489a6de471b8361073ce93c3bf35183529235eed04037cb6851e51dec4562fe30f99bd5de546427fecd0aa008bcbb2983ce2cfff078d49f7ecf297f85da5c094c0e7f07b12ec543a068bd2d654348f0e303f208c9190f58b7a9e0e1d2ba846bc248a3ec1530f702a9bd45a1d7bec2b2ccf08c24fec06bd18667119d193444ed6c60c641f54a3826524167885f2542", 0xbd}], 0x9, &(0x7f00000014c0)}}], 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000880)="562f2edb8e8c8229195820c788783ff270fb0f06936fe49376e5519e3fa8f998387d7011fc5d8c9f5fc8e0e1663c9f6919128a8941ae935aaba3f683642630f5a74535b0e1f886ea2807f04d3a68ff4285f2bf581674a033cb5ecf8c756e8df3968c959df5326ed67c09d8b72eceeb87023f6188e15cb258cd8c85be3eddaac311ee4cb17a08ef47157753606ce7996162ea4b18214763730e2b944b468575927829842ee7f6f8a3603a7a522025c55284c9ca0ab899626f86c9336ead2278445733db5e643e10fa93339be48ff1592bc6bcf2b68b4536951c600a0e6d1b5d5b0cdbdf85122560b431", 0xe9}, {&(0x7f0000000540)}, {&(0x7f00000006c0)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0c", 0x46}, {0x0}, {0x0}, {0x0}], 0x6}}], 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000100)=0xc) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.875050986s ago: executing program 2 (id=479): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @bcast}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) sendto$netrom(r0, 0x0, 0x0, 0x40, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299fce372fd99128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x20040800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000380)={0x1, @pix_mp={0x0, 0x0, 0x32314752}}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20200, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) r9 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000280)={0x0, &(0x7f0000000600)=[@nested_amd_vmsave={0x183, 0x18, 0x3}, @enable_nested={0x12c, 0x18}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x400, 0x6012}}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @set_irq_handler={0xc8, 0x20, {0xa7}}], 0x98}) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000006c0)=[@text64={0x40, &(0x7f0000000500)="650f001a0f01cfc74424007e000000c7442402f17f0000c7442406000000000f011c24c7442400aa000000c744240200000000ff1c240f01cfc4216972d100430f30440f005c5f0048b8a79e39b0a01e7b140f23d80f21f835400000b00f23f80f793f", 0x63}], 0x1, 0x46, &(0x7f0000000700)=[@flags={0x3, 0x4}, @cr4={0x1, 0x2040}], 0x2) 3.015119288s ago: executing program 0 (id=485): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='c 8:', @ANYRESOCT=r1], 0xd) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x2007}) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r3) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffffffffffff070007003a3a0909140002"], 0x44}, 0x1, 0x1000000}, 0x0) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10dfe000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003000601000004000200110000", 0x5b}, {&(0x7f0000000680)='\'', 0x1}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x0, 0xfffffffd}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x200, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20000000, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) process_vm_writev(r8, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000200)="0b041000e0ff02000200477baa96a13bb100000000008864110071225aac5791", 0x20, 0x4008000, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x77, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@broadcast}}, &(0x7f0000000440)=0xe8) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001400000227bd7000fddbdf25ac14143a000000000000000000000000ac1414190000000000000000000000004e20e6c24e247fff020080003c000000", @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="b96b810001009c232d3e040003004e244e20000000000000370000000000ffff64010100"], 0x6c}, 0x1, 0x0, 0x0, 0x100}, 0x0) getsockname(r0, &(0x7f0000000200)=@ethernet={0x0, @random}, &(0x7f0000000080)=0x80) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) r13 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, &(0x7f0000000300)={0x2c, 0xb, r12, 0xc, r13}, 0x10) 2.909464657s ago: executing program 2 (id=487): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0xf, {"a2e3ad21ed0d1bf91b4d090955f70e06d038e7ff7fc6e5539b0d3f0e8b089b3f35076c090890e0878f0e1ac6e7049b3346959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07580936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x96d) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r3, &(0x7f0000000840)={&(0x7f0000000000)={0xa, 0x4e21, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x180}, 0x1c, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="c0000000000000002900000037000000321400000000000001020000c20400000008040107c910fc000000000000000000000000000000040130010700000000000000df76d40a5d703da4be0c8d8be468d50c756a84bb1d5abaf64c12e3ea927db9d2047c30ae0267d82eef8bdcb9fbd5b1a7869c4bcdec2cc8a1ccc709b20b1fc3379f4b01c7420a1f9a244a73ffe424c749a36743d14c96886914d3a3db2f69baef5556076509236e959cc2c86cd23289b86503951c8368790900010000001400000000000000290000000b00000000000007000000001400000000000000290000000b000000ff"], 0xf0}, 0x4008000) r4 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r4, &(0x7f0000000340)={&(0x7f0000000080)=@alg, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)=""/114, 0x72}, {&(0x7f0000000180)=""/252, 0xfc}], 0x2, &(0x7f0000000280)=""/182, 0xb6}, 0x12022) 2.369138119s ago: executing program 1 (id=493): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x3}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="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", 0xfb}, {&(0x7f0000000780)="92bdcafd7ac9e21583ea71b9eb5feeb69b7eeb919260393d59069611e6d460fd38481da64e5ad543477ed7b768b1a06c0a5d60edf6c5610c123e3572a7c3bd74b7bd876c6f1c54709ef06cb9187fa5ddecc04cdc8fd3e74782c0aa0579531662e6d5fcdddc53becdd0b8a59c3a97fe428e75e7707525647bd822", 0x7a}, {&(0x7f0000000580)}], 0x3, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad12b3e3de940a99238945935184cd93dd174b70ecb9c3c99d2df9dd0cbef6a9e230f7dd8367384f034a7a011388990e94cd43e9f80ec3358dc596926960604b9f051", 0x83}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d356257181e43b6e60349f69ec5f529734f76708a6c5eccb57005c1a513d8030d12c", 0x41}, {&(0x7f0000000d00)="dc6e94ac2db166801ffce85f6f44f2cb071c6b5113bc6bbf2f503d468253693a01102fcb8157c6e8a2b5620efa5d22400147cce896821150f95c0c69fa587a1f99fcb28cfeb09f45cb836f0ff891be10bb209dc04adc202ef866f27b74faa5ad3a2e5d40ebd6785c4e4a97ac13238c746d1109d12af5446c4e84591f121a494251e43bed18f6269bdd2e56f9c211dd7145f664286911b8bb3acf76a1b5ece94183a6c8cc47f2e1dd4e91dc10be8732e92e8620fa060fb15016c2dc9b6da18325e778660d499aec6215b0f9f679fa76d22cdd4ae3776203e2054240594f1c9b77ad77cf3f5631012fa0788c5b17f98cc34720b0", 0xf3}, {&(0x7f0000000fc0)="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", 0xfc}, {&(0x7f00000010c0)="978d1129fddf5e2f1be8be48f935ef4f71893a57f79be3e44522d3987ccee23f4e717d8c8e14573937040fb658a24f1c9e0c7f98a24fa1209a6ea754e1244234c715713d120b6929614443fd6b4223bc04c3a8c9241ccbb6a8b0bb19fe4eedae48642a74e97588dc36bf06a4c1fb17b47b39240a6a8e9b5daa97e63d777e665841a349c52022252eafc1c129e154ab390624dd7fb8ac1e44c203140d6aab524f61cd8642ee0f380ebb21dc9267a8fbefa6eec89ff97e7800f44f89b17d43206217941c34067892c05465382550a1da2519", 0xd1}, {&(0x7f0000000800)="b56380b7487ff3b0cd079ed795bdeeb3ad75fe878a", 0x15}, {&(0x7f00000011c0)}, {&(0x7f0000001200)="43979d4537ac96f6e22b12acd1fdd3ffc7ef440e65e2e70d511a408f743d4ce7516f4364a00a041dc7b1ffe56ebc713b158ea1aab13ce3db53ab8af3f76ffaa86df636018175c4a8ea922a193ad08ca30d5031b27a4a87bff93dc12a98b6e4f25b5550d98a5bf3e040a8902083eea93bdbde6da91df3a730dd2b8215e9840f04dd0ab667500fe952fa1b8845c2cee50f8322175049c4a994def6599287fb0f8d61029188945e9b273cded0", 0xab}, {&(0x7f0000001300)}], 0x9, &(0x7f00000014c0)}}], 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{0x0}, {&(0x7f0000000540)}, {&(0x7f00000006c0)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95be", 0x8b}, {0x0}, {0x0}, {0x0}], 0x6}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000540)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={r4, 0x9}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000880)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x3}, &(0x7f0000000580)=0x90) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000e00)={r4, 0x800, 0x8, 0x1, 0xc, 0x86d7, 0x4, 0x3, {r5, @in6={{0xa, 0x4e21, 0xffffffff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}}, 0x0, 0x7, 0x0, 0x70000000, 0x7}}, &(0x7f0000000940)=0xb0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r7) r8 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0xfe4f, &(0x7f0000000a80)=[{&(0x7f00000012c0)=""/212}, {&(0x7f00000015c0)=""/164}], 0x2, 0x0, 0x3}, 0x22) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 2.209605055s ago: executing program 0 (id=494): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9add713bf6cc972d3213738279aa20a6b22ba3cc23d2a2bf6e60ed92d10000000037a7e78637e11d", @ANYRES16=r1, @ANYBLOB="010027bd7000fedbdf252700000008000300", @ANYRES32=r3, @ANYBLOB="0a0006000802110000010000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r4, 0x0) ftruncate(r4, 0xa) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r5, r5, 0x0) mincore(&(0x7f0000185000/0x3000)=nil, 0x3000, &(0x7f0000000240)=""/68) 2.080410493s ago: executing program 0 (id=495): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x3}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="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", 0xfb}, {&(0x7f0000000780)="92bdcafd7ac9e21583ea71b9eb5feeb69b7eeb919260393d59069611e6d460fd38481da64e5ad543477ed7b768b1a06c0a5d60edf6c5610c123e3572a7c3bd74b7bd876c6f1c54709ef06cb9187fa5ddecc04cdc8fd3e74782c0aa0579531662e6d5fcdddc53becdd0b8a59c3a97fe428e75e7707525647bd822", 0x7a}, {&(0x7f0000000580)}], 0x3, &(0x7f0000000b40)}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad12b3e3de940a99238945935184cd93dd174b70ecb9c3c99d2df9dd0cbef6a9e230f7dd8367384f034a7a011388990e94cd43e9f80ec3358dc596926960604b9f051", 0x83}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d356257181e43b6e60349f69ec5f529734f76708a6c5eccb57005c1a513d8030d12c", 0x41}, {&(0x7f0000000d00)="dc6e94ac2db166801ffce85f6f44f2cb071c6b5113bc6bbf2f503d468253693a01102fcb8157c6e8a2b5620efa5d22400147cce896821150f95c0c69fa587a1f99fcb28cfeb09f45cb836f0ff891be10bb209dc04adc202ef866f27b74faa5ad3a2e5d40ebd6785c4e4a97ac13238c746d1109d12af5446c4e84591f121a494251e43bed18f6269bdd2e56f9c211dd7145f664286911b8bb3acf76a1b5ece94183a6c8cc47f2e1dd4e91dc10be8732e92e8620fa060fb1", 0xb7}, {&(0x7f0000000880)="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", 0xfc}, {&(0x7f00000010c0)="978d1129fddf5e2f1be8be48f935ef4f71893a57f79be3e44522d3987ccee23f4e717d8c8e14573937040fb658a24f1c9e0c7f98a24fa1209a6ea754e1244234c715713d120b6929614443fd6b4223bc04c3a8c9241ccbb6a8b0bb19fe4eedae48642a74e97588dc36bf06a4c1fb17b47b39240a6a8e9b5daa97e63d777e665841a349c52022252eafc1c129e154ab390624dd7fb8ac1e44c203140d6aab524f61cd8642ee0f380ebb21dc9267a8fbefa6eec89ff97e7800f44f89b17d43206217941c34067892c05465382550a1da2519", 0xd1}, {&(0x7f0000000800)="b56380b7487ff3b0cd079ed795bdeeb3ad75fe878a", 0x15}, {&(0x7f00000011c0)}, {&(0x7f0000001200)="43979d4537ac96f6e22b12acd1fdd3ffc7ef440e65e2e70d511a408f743d4ce7516f4364a00a041dc7b1ffe56ebc713b158ea1aab13ce3db53ab8af3f76ffaa86df636018175c4a8ea922a193ad08ca30d5031b27a4a87bff93dc12a98b6e4f25b5550d98a5bf3e040a8902083eea93bdbde6da91df3a730dd2b8215e9840f04dd0ab667500fe952fa1b8845c2cee50f8322175049c4a994def6599287fb0f8d61029188945e9b273cded0", 0xab}, {&(0x7f0000001300)="ceff7472ad7240514c6f826361e8daefdb50fe704622e5641d1b096ad682a5682aa51b6eea91858d93228379d70f8489a6de471b8361073ce93c3bf35183529235eed04037cb6851e51dec4562fe30f99bd5de546427fecd0aa008bcbb2983ce2cfff078d49fab95405d518340bd4c0e7f07b12ec543a068bd2d654348f0e303f208c9190f58b7a9e0e1d2ba846bc248a3ec1530f702a9bd45a1d7bec2b2ccf08c24fec06bd18667119d193444ed6c60c641f54a3826524167885f2542b1bef1", 0xc0}], 0x9, &(0x7f00000014c0)}}], 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{0x0}, {&(0x7f0000000540)}, {&(0x7f00000006c0)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95be", 0x8b}, {0x0}, {0x0}, {0x0}], 0x6}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) pipe(&(0x7f00000045c0)) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffe1c, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000140007800800064020000000080013400000000005000100060000000900020073797a32000000000500040000000000050005000a00000011000300686173683a69702c6d61726b"], 0x60}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.848721925s ago: executing program 0 (id=496): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000000801010000000000000000070000060c000480080006400000000306000240080600000900010073797a3000000000050003"], 0x3c}}, 0x800) 1.755135586s ago: executing program 0 (id=497): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xfd0f, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="240003"], 0x10e0}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, r5, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000850}, 0x6000005) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$sierra_net(r2, 0x0, 0x0) syz_usb_control_io$sierra_net(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) syz_usb_control_io$sierra_net(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000500)={0x2c, &(0x7f0000000240)={0x0, 0x23, 0x13, {0x13, 0xc, "5b9368d87c8ab9a3e1b4743bbf5c094be1"}}, &(0x7f0000000380)={0x0, 0x3, 0xc3, @string={0xc3, 0x3, "0b3d392c97c812730b2327d5c9862ade00e5fcdfa333039efca54ee6701d9dfe2dc5749cde3f045425b18510c1dd3d52fddb846e1f8d77e0c7fddcfd2f0535887e1be0dfb103198a72bba9de20eb232f9c699b7e456a01f403cbcfdb4e37246db64888c1420cf93ebdc512d167d7aa1515b7185d733930fe185a7980e1ba08c6a5d3c95bf072f13c2d7007231c4cb64b8fae5f997b6f9ffc757f45f7696c5275bf21fd53291a0141f3299d0b44da18833add49f670691f9580246ceabcedc8baa4"}}, &(0x7f0000000280)={0x0, 0xf, 0x7d, {0x5, 0xf, 0x7d, 0x4, [@ssp_cap={0x1c, 0x10, 0xa, 0xc, 0x4, 0x7ffffff, 0xf00, 0xc3, [0x0, 0xffff30, 0xffc0c0, 0x3f00]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x9, 0x5, 0x200}, @generic={0x47, 0x10, 0x4, "feb4cbeabab1ea3f14f7709d3486726738cafe44fc58f9b31f5b289c288cc113425ac7f0933a9118ddb1878495284cf0db8b6d33ad6d0f1f7b5877a319bb0ff517110672"}, @wireless={0xb, 0x10, 0x1, 0x0, 0x29, 0xff, 0xb3, 0x4008, 0xb}]}}, &(0x7f0000000480)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x0, 0x7f, 0x0, "a4b7dd13", "592a4df3"}}, &(0x7f00000004c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xb2, 0x0, 0x1, 0x7, 0x78, 0x26, 0x6}}}, &(0x7f0000000a40)={0x84, &(0x7f0000000540)={0x0, 0x11, 0x53, "e32687d08adc8bd3b9b147c9850eb746a89d3620f9835e3bd3a38c234d0d1fc6679ff9c18ee6e963e7d472b760723468f3355564dc60ed18dd8b9ca36fe9d6fb3a8370a1c4154de454e5c50079ec9daab7ee58"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0xa}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000000680)={0x20, 0x0, 0x8, {0x100, 0x40, [0xf]}}, &(0x7f00000006c0)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000700)={0x40, 0x9, 0x1, 0xff}, &(0x7f0000000740)={0x40, 0xb, 0x2, "dddc"}, &(0x7f0000000780)={0x40, 0xf, 0x2}, &(0x7f00000007c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, &(0x7f0000000800)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000840)={0x40, 0x19, 0x2, 'J '}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0xe0}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0x6}}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="001c4d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), r1) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, r7, 0x200, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xa8a}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000001}, 0x4000000) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, 0x40, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x8f}]}, @nested={0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 1.574191286s ago: executing program 4 (id=498): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000000801010000000000000000070000060c000480080006400000000306000240080600000900010073797a3000000000050003"], 0x3c}}, 0x800) (fail_nth: 2) 1.242790064s ago: executing program 4 (id=499): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000004c0)={0x79, 0x0, 0x3}) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000540)={0x81, 0x0, 0x5}) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000000)={0x0, 0x0}) io_setup(0xea, &(0x7f00000000c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000940)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4000, 0x2}]) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000008c0)={"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"}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000100), &(0x7f0000000140)=0xe) ioctl$sock_qrtr_TIOCOUTQ(r5, 0x5411, &(0x7f00000000c0)) ioctl$sock_ax25_SIOCDELRT(r5, 0x890c, &(0x7f0000000040)={@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast]}) 1.128847798s ago: executing program 1 (id=500): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x400c0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r3) sendmsg$NLBL_MGMT_C_PROTOCOLS(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="011b26b67000fddbdf2507"], 0x58}, 0x1, 0x0, 0x0, 0x5}, 0x404c044) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x4c, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{}]}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) 973.415052ms ago: executing program 1 (id=501): sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x34, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b122bec}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x31}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2e}]}]}]}, 0x34}}, 0x4080004) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0xe, 0x80, 0x2, 0x3, 0xb819, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x2, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x8002, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0x2, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x80, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0xa, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x8, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0xa, 0x5, 0x5, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x4, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x3, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0x400, 0x5, 0xfffffffe, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x6, 0x1, 0x2, 0x14c, 0x60a7, 0x4, 0x4, 0xffffffff, 0x80000000, 0x7, 0x4, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2d, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0x9, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x3, 0xc, 0x0, 0x75, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x8, 0xfffffff8, 0x8, 0xff, 0xff}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=r4, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) 887.915452ms ago: executing program 0 (id=502): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r4}}) write$nci(r0, &(0x7f0000000300)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x2, @f_listen={0xf5, 0x0, 0x5, 0x82, 0x1b, 0x80, 0x2, {0xf, "d8c975cabcf3995477ce68d3a5e893"}, 0x3, 0x81, 0x3, 0x80}}, 0x1f) 767.619464ms ago: executing program 4 (id=503): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x101101) ioctl$USBDEVFS_ALLOC_STREAMS(r1, 0x8008551c, &(0x7f0000000180)=ANY=[]) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r2, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x20000000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, 0x0, 0xffffffffffffff24}}], 0x1, 0x20004855) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f02feff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd00000010000100050c10000000000000000000", 0x58}], 0x1) 649.437089ms ago: executing program 1 (id=504): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)={0x1bc, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x108, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x88, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, @CTA_EXPECT_NAT={0xa0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x34, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @broadcast}}}]}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0x6000000}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 641.851722ms ago: executing program 4 (id=505): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000200)="2e9b5b00ace03dd65193dfb6c561963d86dd606706000000060000000000449c34dcf74b5c85cd6d59f50000f5a81543b0c1", 0x32}, {&(0x7f0000000040)="a126001200000000", 0x8}, {&(0x7f0000000680)="37bcb3983785779d77392b7d63586b7d44a9eabc0e407f48", 0x18}], 0x3) 612.122276ms ago: executing program 1 (id=506): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f00000000c0)=0x58000) r2 = socket$inet(0x2, 0x2, 0x1) r3 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) close(r3) r4 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r4}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x11}, @val={0x8, 0x3, r6}, @void}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x40) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r3, 0x3b65, 0x1) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000000)={0x48, 0xa, r2, 0x0, r4}) syz_open_dev$char_usb(0xc, 0xb4, 0x5) 0s ago: executing program 4 (id=509): clock_settime(0xfffffff4, &(0x7f0000000040)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x124, r2, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xb6, 0xa8, @random="942bd167eec2935383165003dc50469740a633828c07664b93c29f4be15dd39cde0668001dad175eeb741b14d9c95bbd28556e0453455be50296b09cf62523fbb8e020eb448b2b348f02b1b1f48bbab57141285eb06283d1f4781f20d1a53c44f8d741a8bda3429720bc6542356025220c221eb7abca329971b198b8f2208c2634aabf7fda5b658cb4502efc0219fd7ba8023797d4a9b354b1ff22d74fe2757e842158163133c3b67794099bb81f3524d7a7"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x124}, 0x1, 0x0, 0x0, 0x4c010}, 0x4044000) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) clock_nanosleep(0xac83fced65038730, 0x225c17d03, 0x0, 0x0) (async) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000300)={0x1100, 0x4, 0x5, 0xfffd}) kernel console output (not intermixed with test programs): ] RAX: ffffffffffffffda RBX: 00007eff0ae16090 RCX: 00007eff0ab9c799 [ 123.411855][ T6527] RDX: 0000000000000079 RSI: 0000000000000084 RDI: 0000000000000003 [ 123.411864][ T6527] RBP: 00007eff0baac090 R08: 0000000000000008 R09: 0000000000000000 [ 123.411873][ T6527] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 123.411881][ T6527] R13: 00007eff0ae16128 R14: 00007eff0ae16090 R15: 00007ffd2efb09f8 [ 123.411907][ T6527] [ 123.734770][ T5955] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.745849][ T5955] usb 3-1: config 0 interface 0 has no altsetting 0 [ 123.772994][ T5955] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 123.782278][ T5955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.790542][ T5955] usb 3-1: Product: syz [ 123.795886][ T5955] usb 3-1: Manufacturer: syz [ 123.801557][ T5955] usb 3-1: SerialNumber: syz [ 123.860499][ T5955] usb 3-1: config 0 descriptor?? [ 123.884456][ T5955] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 123.889734][ T6534] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 123.911987][ T5955] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 123.922312][ T5955] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 123.932110][ T5955] usb 3-1: media controller created [ 123.942500][ T6534] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 123.972428][ T5955] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 124.146171][ T5955] DVB: Unable to find symbol tda10046_attach() [ 124.168102][ T5955] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 124.177367][ T5955] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 124.601980][ T6518] netlink: 'syz.2.191': attribute type 10 has an invalid length. [ 124.657393][ T6521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.706161][ T6521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.741199][ T6518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.757108][ T6562] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 124.764547][ T6518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.782940][ T5955] dvb_usb_m920x 3-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 124.815969][ T5955] usb 3-1: USB disconnect, device number 15 [ 124.869220][ T6565] Unsupported ieee802154 address type: 0 [ 124.922733][ T6565] block nbd3: NBD_DISCONNECT [ 125.005752][ T51] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 125.020103][ T51] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 125.551288][ T5955] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 125.580892][ T5888] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 125.680958][ T5896] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 125.700828][ T5955] usb 2-1: Using ep0 maxpacket: 32 [ 125.707707][ T5955] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.720592][ T5955] usb 2-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice= b.8c [ 125.729760][ T5955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.737919][ T5888] usb 1-1: Invalid ep0 maxpacket: 64 [ 125.743430][ T5955] usb 2-1: Product: syz [ 125.748335][ T5955] usb 2-1: Manufacturer: syz [ 125.753674][ T5955] usb 2-1: SerialNumber: syz [ 125.800987][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 125.831601][ T5896] usb 3-1: Using ep0 maxpacket: 8 [ 125.838433][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 125.849635][ T5896] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 125.858842][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.870826][ T5888] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 125.878561][ T5896] usb 3-1: config 0 descriptor?? [ 125.960809][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 125.966404][ T6576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.970233][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 125.976077][ T6576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.994187][ T9] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 126.007671][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 126.011115][ T5955] empeg 2-1:1.0: empeg converter detected [ 126.018026][ T9] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 126.022045][ T5955] empeg 2-1:1.0: probe with driver empeg failed with error -71 [ 126.029509][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.044577][ T5955] usb 2-1: USB disconnect, device number 14 [ 126.051218][ T5888] usb 1-1: Invalid ep0 maxpacket: 64 [ 126.057081][ T5888] usb usb1-port1: attempt power cycle [ 126.058360][ T9] usb 4-1: Product: syz [ 126.068619][ T9] usb 4-1: Manufacturer: syz [ 126.073998][ T9] usb 4-1: SerialNumber: syz [ 126.083646][ T9] usb 4-1: config 0 descriptor?? [ 126.094594][ T6583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.106685][ T6583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.119351][ T51] Bluetooth: hci1: Malformed LE Event: 0x0d [ 126.129895][ T5896] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 126.330509][ T6583] veth1_vlan: mtu greater than device maximum [ 126.342448][ T5955] usb 3-1: USB disconnect, device number 16 [ 126.411429][ T5888] usb 1-1: new low-speed USB device number 17 using dummy_hcd [ 126.432368][ T5888] usb 1-1: Invalid ep0 maxpacket: 64 [ 126.493998][ T9] gs_usb 4-1:0.0: Couldn't get device config: (err=-32) [ 126.502256][ T9] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -32 [ 126.583100][ T5888] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 126.621857][ T5888] usb 1-1: Invalid ep0 maxpacket: 64 [ 126.627426][ T5888] usb usb1-port1: unable to enumerate USB device [ 127.490799][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 127.640836][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 127.647613][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.658772][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.668664][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 127.677870][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.691517][ T10] usb 3-1: config 0 descriptor?? [ 127.920319][ T10] logitech 0003:046D:C50C.0005: unknown main item tag 0x0 [ 127.936787][ T10] logitech 0003:046D:C50C.0005: unknown main item tag 0x0 [ 127.953996][ T10] logitech 0003:046D:C50C.0005: unknown main item tag 0x0 [ 127.962189][ T10] logitech 0003:046D:C50C.0005: unknown main item tag 0x0 [ 127.969463][ T10] logitech 0003:046D:C50C.0005: unknown main item tag 0x0 [ 127.979216][ T10] logitech 0003:046D:C50C.0005: unknown main item tag 0x0 [ 127.986744][ T10] logitech 0003:046D:C50C.0005: unknown main item tag 0x0 [ 127.994412][ T10] logitech 0003:046D:C50C.0005: unknown main item tag 0x0 [ 128.001925][ T10] logitech 0003:046D:C50C.0005: unknown main item tag 0x0 [ 128.009246][ T10] logitech 0003:046D:C50C.0005: unknown main item tag 0x0 [ 128.017161][ T10] logitech 0003:046D:C50C.0005: collection stack underflow [ 128.024652][ T10] logitech 0003:046D:C50C.0005: item 0 4 0 12 parsing failed [ 128.032679][ T10] logitech 0003:046D:C50C.0005: parse failed [ 128.039432][ T10] logitech 0003:046D:C50C.0005: probe with driver logitech failed with error -22 [ 128.186463][ T10] usb 3-1: USB disconnect, device number 17 [ 128.310868][ T5896] usb 1-1: new low-speed USB device number 19 using dummy_hcd [ 128.563618][ T5955] usb 4-1: USB disconnect, device number 11 [ 128.782470][ T5896] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 128.930904][ T5955] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 128.950887][ T5896] usb 1-1: Using ep0 maxpacket: 32 [ 128.958654][ T5896] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 128.967108][ T5896] usb 1-1: config 0 has no interface number 0 [ 128.973751][ T5896] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 128.983688][ T5896] usb 1-1: config 0 interface 89 has no altsetting 0 [ 128.993508][ T5896] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 129.003015][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.011356][ T5896] usb 1-1: Product: syz [ 129.015554][ T5896] usb 1-1: Manufacturer: syz [ 129.020137][ T5896] usb 1-1: SerialNumber: syz [ 129.027232][ T5896] usb 1-1: config 0 descriptor?? [ 129.036925][ T5896] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 129.050907][ T5896] em28xx 1-1:0.89: Video interface 89 found: [ 129.090829][ T5955] usb 4-1: Using ep0 maxpacket: 8 [ 129.097617][ T5955] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 129.108264][ T5955] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 129.117524][ T5955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.125781][ T5955] usb 4-1: Product: syz [ 129.129984][ T5955] usb 4-1: Manufacturer: syz [ 129.134629][ T5955] usb 4-1: SerialNumber: syz [ 129.141487][ T5955] usb 4-1: config 0 descriptor?? [ 129.150186][ T5955] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 129.158331][ T5955] usb 4-1: setting power ON [ 129.163176][ T5955] dvb-usb: bulk message failed: -22 (2/0) [ 129.173223][ T5955] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 129.183616][ T5955] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 129.192199][ T5955] usb 4-1: media controller created [ 129.206599][ T5955] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 129.223864][ T5955] usb 4-1: selecting invalid altsetting 6 [ 129.229886][ T5955] usb 4-1: digital interface selection failed (-22) [ 129.237666][ T5955] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 129.247151][ T5955] usb 4-1: setting power OFF [ 129.252051][ T5955] dvb-usb: bulk message failed: -22 (2/0) [ 129.257919][ T5955] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 129.267301][ T5955] (NULL device *): no alternate interface [ 129.292046][ T5955] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 129.366450][ T5955] usb 4-1: USB disconnect, device number 12 [ 129.561193][ T6634] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 129.638904][ T5896] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 129.962775][ T6646] fuse: blksize only supported for fuseblk [ 130.560986][ T5888] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 130.716911][ T5888] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 130.726093][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.734189][ T5888] usb 4-1: Product: syz [ 130.738573][ T5888] usb 4-1: Manufacturer: syz [ 130.743310][ T5888] usb 4-1: SerialNumber: syz [ 130.747962][ T5955] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 130.758054][ T5888] usb 4-1: config 0 descriptor?? [ 130.766394][ T5888] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 130.912310][ T5896] em28xx 1-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 130.923097][ T5896] em28xx 1-1:0.89: board has no eeprom [ 130.928755][ T5955] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 130.937126][ T5955] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 130.947630][ T5955] usb 3-1: config 220 has no interface number 2 [ 130.954273][ T5955] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 130.967939][ T5955] usb 3-1: config 220 interface 0 has no altsetting 0 [ 130.981720][ T5955] usb 3-1: config 220 interface 76 has no altsetting 0 [ 130.988892][ T5955] usb 3-1: config 220 interface 1 has no altsetting 0 [ 130.996138][ T5888] gspca_sunplus: reg_r err -71 [ 130.998247][ T5888] usb 4-1: USB disconnect, device number 13 [ 131.020812][ T5896] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 131.028491][ T5896] em28xx 1-1:0.89: analog set to bulk mode. [ 131.035092][ T50] em28xx 1-1:0.89: Registering V4L2 extension [ 131.041544][ T5955] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 131.052246][ T5955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.064958][ T5955] usb 3-1: Product: syz [ 131.085050][ T5896] usb 1-1: USB disconnect, device number 20 [ 131.092649][ T5955] usb 3-1: Manufacturer: syz [ 131.105156][ T5955] usb 3-1: SerialNumber: syz [ 131.112456][ T5896] em28xx 1-1:0.89: Disconnecting em28xx [ 131.169924][ T50] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 131.182843][ T50] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 131.197405][ T50] em28xx 1-1:0.89: No AC97 audio processor [ 131.206791][ T6670] binder: BINDER_SET_CONTEXT_MGR already set [ 131.215085][ T6670] binder: 6669:6670 ioctl 4018620d 200000004a80 returned -16 [ 131.228680][ T50] usb 1-1: Decoder not found [ 131.233637][ T50] em28xx 1-1:0.89: failed to create media graph [ 131.239965][ T50] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 131.249660][ T50] em28xx 1-1:0.89: Registering snapshot button... [ 131.257084][ T50] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input22 [ 131.270610][ T50] em28xx 1-1:0.89: Remote control support is not available for this card. [ 131.280596][ T5896] em28xx 1-1:0.89: Closing input extension [ 131.288158][ T5896] em28xx 1-1:0.89: Deregistering snapshot button [ 131.305727][ T5896] em28xx 1-1:0.89: Freeing device [ 131.366100][ T5955] usb 3-1: selecting invalid altsetting 0 [ 131.388497][ T5955] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 131.396511][ T5955] uvcvideo 3-1:220.0: No valid video chain found. [ 131.407317][ T5955] usb 3-1: selecting invalid altsetting 0 [ 131.414328][ T5955] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 131.426111][ T5955] usb 3-1: USB disconnect, device number 18 [ 131.473657][ T5842] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 131.496276][ T51] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 131.654621][ T5842] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 131.663968][ T5842] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.672363][ T5842] usb 2-1: Product: syz [ 131.676653][ T5842] usb 2-1: Manufacturer: syz [ 131.681769][ T5842] usb 2-1: SerialNumber: syz [ 131.688463][ T5842] usb 2-1: config 0 descriptor?? [ 131.696045][ T5842] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 131.740850][ T5896] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 131.891075][ T5896] usb 1-1: Using ep0 maxpacket: 8 [ 131.899235][ T5896] usb 1-1: config 0 has an invalid interface number: 8 but max is 2 [ 131.907833][ T5896] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 131.917435][ T5896] usb 1-1: config 0 has an invalid interface number: 4 but max is 2 [ 131.925966][ T5896] usb 1-1: config 0 has an invalid interface number: 235 but max is 2 [ 131.936278][ T5896] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 131.949020][ T5896] usb 1-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 131.959347][ T5896] usb 1-1: config 0 has no interface number 0 [ 131.963789][ T6681] netlink: 16 bytes leftover after parsing attributes in process `syz.2.243'. [ 131.965620][ T5896] usb 1-1: config 0 has no interface number 1 [ 131.975123][ T6681] netlink: 16 bytes leftover after parsing attributes in process `syz.2.243'. [ 131.981397][ T5896] usb 1-1: config 0 has no interface number 2 [ 131.994207][ T6681] netlink: 'syz.2.243': attribute type 5 has an invalid length. [ 131.996462][ T5896] usb 1-1: config 0 interface 8 altsetting 175 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 132.018973][ T5896] usb 1-1: config 0 interface 8 altsetting 175 bulk endpoint 0xB has invalid maxpacket 8 [ 132.029903][ T5896] usb 1-1: config 0 interface 8 altsetting 175 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 132.059595][ T5896] usb 1-1: config 0 interface 8 altsetting 175 bulk endpoint 0xE has invalid maxpacket 32 [ 132.070010][ T5896] usb 1-1: config 0 interface 8 altsetting 175 has a duplicate endpoint with address 0x9, skipping [ 132.081762][ T5896] usb 1-1: config 0 interface 8 altsetting 175 bulk endpoint 0x3 has invalid maxpacket 32 [ 132.091789][ T5896] usb 1-1: config 0 interface 8 altsetting 175 has an invalid descriptor for endpoint zero, skipping [ 132.104178][ T5896] usb 1-1: config 0 interface 8 altsetting 175 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 132.120430][ T5896] usb 1-1: config 0 interface 4 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 132.133584][ T5896] usb 1-1: config 0 interface 4 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 132.144796][ T5896] usb 1-1: config 0 interface 4 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 132.159316][ T5896] usb 1-1: config 0 interface 4 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 132.176868][ T5896] usb 1-1: config 0 interface 4 altsetting 8 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 132.187803][ T5896] usb 1-1: config 0 interface 4 altsetting 8 has a duplicate endpoint with address 0x3, skipping [ 132.203550][ T5896] usb 1-1: config 0 interface 4 altsetting 8 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 132.217832][ T5896] usb 1-1: config 0 interface 4 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 132.228647][ T5896] usb 1-1: config 0 interface 4 altsetting 8 has a duplicate endpoint with address 0x9, skipping [ 132.267152][ T5896] usb 1-1: config 0 interface 4 altsetting 8 has a duplicate endpoint with address 0x6, skipping [ 132.291296][ T5896] usb 1-1: config 0 interface 4 altsetting 8 has a duplicate endpoint with address 0xD, skipping [ 132.302784][ T5896] usb 1-1: config 0 interface 4 altsetting 8 has a duplicate endpoint with address 0xD, skipping [ 132.313736][ T5896] usb 1-1: config 0 interface 4 altsetting 8 has a duplicate endpoint with address 0x1, skipping [ 132.325394][ T5896] usb 1-1: config 0 interface 4 altsetting 8 has a duplicate endpoint with address 0x5, skipping [ 132.336117][ T5896] usb 1-1: config 0 interface 235 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 132.347043][ T5896] usb 1-1: config 0 interface 235 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 132.359564][ T5896] usb 1-1: config 0 interface 235 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 132.373721][ T5896] usb 1-1: config 0 interface 8 has no altsetting 0 [ 132.380364][ T5896] usb 1-1: config 0 interface 4 has no altsetting 0 [ 132.405317][ T5896] usb 1-1: config 0 interface 235 has no altsetting 0 [ 132.416681][ T5896] usb 1-1: New USB device found, idVendor=413c, idProduct=81b3, bcdDevice= 0.b1 [ 132.426019][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.435881][ T5896] usb 1-1: Product: 江睆㤇絙㐀㒟宰⥈⢟駴顏쳿衉摙㈎횧杕뾷嚥艩彥ୀ햞㌝䂕쿐짻亼ퟷ๗湦壺됴覧흛砀闘ᤒ뷖굀镦齾∐릯ᒒ嚟ꐳ﹄郿铹穠ॊ愦汹ἣ橇ॱ痪赽䩮쌎䤁 [ 132.479581][ T5896] usb 1-1: Manufacturer: 継᳂颇ٷ빕᥿ẩ巒볲鹆␛໓柘细億ය旰햄៽✼⿶㠗㈱㥡緿窤띣먔쾝္뻊堰⡢醚ꞣ䠗饓痝䚔＿䶶突Ϗ遽鿴뜘쟺储⓭霴尐૵璇왂敯鉎첝➱ຏ蓆訤뇼⒙ﻘ璣郇绱㝳㪎쳝빼晴嬦ꝉ龤Ὢㄩ擽櫗铢ꍲ䳛᫕ꗠ堃곒詰鏘㫥㢚႔ὁ䟴⼽驆繷ⶠ诃麰높０㹎弍뎱扜뾒寅ڙ [ 132.520522][ T5896] usb 1-1: SerialNumber: syz [ 132.526666][ T6692] binder: 6691:6692 ioctl 4018620d 0 returned -22 [ 132.539921][ T5896] usb 1-1: config 0 descriptor?? [ 132.553374][ T6679] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 132.563534][ T6679] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 132.571658][ T6679] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 132.737727][ T6672] netlink: 12 bytes leftover after parsing attributes in process `syz.1.241'. [ 132.753479][ T5842] gspca_sunplus: reg_w_riv err -71 [ 132.765271][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 132.777146][ T5842] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 132.791417][ T5842] usb 2-1: USB disconnect, device number 15 [ 132.942726][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.953051][ T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 132.960751][ T9] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 132.971257][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.982036][ T9] usb 3-1: config 0 descriptor?? [ 132.990830][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 133.140783][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 133.147640][ T10] usb 4-1: config 0 has no interfaces? [ 133.153233][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 133.162352][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.174789][ T10] usb 4-1: config 0 descriptor?? [ 133.395012][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 133.421300][ T5896] usb 1-1: USB disconnect, device number 21 [ 133.421893][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 133.445846][ T10] usb 4-1: USB disconnect, device number 14 [ 133.474104][ T9] pwc: recv_control_msg error -71 req 02 val 2c00 [ 133.506022][ T9] pwc: recv_control_msg error -71 req 04 val 1000 [ 133.516306][ T9] pwc: recv_control_msg error -71 req 04 val 1300 [ 133.533023][ T9] pwc: recv_control_msg error -71 req 04 val 1400 [ 133.546905][ T9] pwc: recv_control_msg error -71 req 02 val 2000 [ 133.561193][ T9] pwc: recv_control_msg error -71 req 02 val 2100 [ 133.575390][ T9] pwc: recv_control_msg error -71 req 04 val 1500 [ 133.593918][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 133.605545][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 133.618865][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 133.631555][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 133.638550][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 133.655222][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 133.662985][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 133.683880][ T6708] binder: 6707:6708 ioctl b703 0 returned -22 [ 133.694082][ T9] pwc: Registered as video103. [ 133.703343][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input23 [ 133.759300][ T9] usb 3-1: USB disconnect, device number 19 [ 134.016592][ T6717] overlayfs: workdir and upperdir must reside under the same mount [ 134.240126][ T29] audit: type=1326 audit(1774429579.193:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6712 comm="syz.0.256" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdfe0f9c799 code=0x0 [ 134.350825][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 134.435894][ T6733] netlink: 184 bytes leftover after parsing attributes in process `syz.1.261'. [ 134.523328][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.534740][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 134.546899][ T9] usb 3-1: New USB device found, idVendor=0e41, idProduct=4642, bcdDevice= 0.40 [ 134.556473][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.565133][ T9] usb 3-1: Product: syz [ 134.569449][ T9] usb 3-1: Manufacturer: syz [ 134.574123][ T9] usb 3-1: SerialNumber: syz [ 135.007789][ T6750] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 135.348160][ T6759] FAULT_INJECTION: forcing a failure. [ 135.348160][ T6759] name failslab, interval 1, probability 0, space 0, times 0 [ 135.362816][ T6759] CPU: 1 UID: 0 PID: 6759 Comm: syz.1.267 Tainted: G L syzkaller #0 PREEMPT(full) [ 135.362844][ T6759] Tainted: [L]=SOFTLOCKUP [ 135.362850][ T6759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 135.362860][ T6759] Call Trace: [ 135.362867][ T6759] [ 135.362874][ T6759] dump_stack_lvl+0xe8/0x150 [ 135.362904][ T6759] should_fail_ex+0x412/0x560 [ 135.362929][ T6759] should_failslab+0xa8/0x100 [ 135.362950][ T6759] __kmalloc_cache_noprof+0x88/0x660 [ 135.362966][ T6759] ? __rdma_create_id+0x65/0x7b0 [ 135.362996][ T6759] ? __pfx_ucma_event_handler+0x10/0x10 [ 135.363012][ T6759] ? __pfx_ucma_event_handler+0x10/0x10 [ 135.363026][ T6759] __rdma_create_id+0x65/0x7b0 [ 135.363042][ T6759] ? do_raw_spin_unlock+0xf5/0x210 [ 135.363061][ T6759] ? __pfx_ucma_event_handler+0x10/0x10 [ 135.363082][ T6759] rdma_create_user_id+0x81/0xc0 [ 135.363102][ T6759] ucma_create_id+0x22e/0x380 [ 135.363121][ T6759] ? __pfx_ucma_create_id+0x10/0x10 [ 135.363146][ T6759] ucma_write+0x24e/0x2f0 [ 135.363164][ T6759] ? __pfx_ucma_write+0x10/0x10 [ 135.363178][ T6759] ? security_file_permission+0x75/0x260 [ 135.363201][ T6759] ? rw_verify_area+0x255/0x4d0 [ 135.363220][ T6759] vfs_writev+0x4bd/0x990 [ 135.363241][ T6759] ? __pfx_ucma_write+0x10/0x10 [ 135.363264][ T6759] ? __pfx_vfs_writev+0x10/0x10 [ 135.363293][ T6759] ? __fget_files+0x2a/0x420 [ 135.363317][ T6759] ? __fget_files+0x3a0/0x420 [ 135.363335][ T6759] ? __fget_files+0x2a/0x420 [ 135.363362][ T6759] do_writev+0x154/0x2e0 [ 135.363392][ T6759] ? __pfx_do_writev+0x10/0x10 [ 135.363420][ T6759] do_syscall_64+0x14d/0xf80 [ 135.363440][ T6759] ? trace_irq_disable+0x3b/0x140 [ 135.363457][ T6759] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.363473][ T6759] ? clear_bhb_loop+0x40/0x90 [ 135.363490][ T6759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.363506][ T6759] RIP: 0033:0x7fcd1d79c799 [ 135.363523][ T6759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.363536][ T6759] RSP: 002b:00007fcd1e6c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 135.363554][ T6759] RAX: ffffffffffffffda RBX: 00007fcd1da16090 RCX: 00007fcd1d79c799 [ 135.363565][ T6759] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000004 [ 135.363574][ T6759] RBP: 00007fcd1e6c3090 R08: 0000000000000000 R09: 0000000000000000 [ 135.363584][ T6759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.363593][ T6759] R13: 00007fcd1da16128 R14: 00007fcd1da16090 R15: 00007ffe9693a1d8 [ 135.363619][ T6759] [ 135.627606][ T5888] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 135.789551][ T5888] usb 4-1: config index 0 descriptor too short (expected 61796, got 100) [ 135.798980][ T5888] usb 4-1: config 1 has an invalid interface number: 1 but max is 0 [ 135.807715][ T5888] usb 4-1: config 1 has an invalid interface number: 1 but max is 0 [ 135.818693][ T5888] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.891610][ T5888] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 135.902363][ T5888] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.914402][ T5888] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 135.925109][ T5888] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 135.942097][ T5888] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 135.951582][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.959613][ T5888] usb 4-1: Product: syz [ 135.964526][ T5888] usb 4-1: Manufacturer: syz [ 135.969179][ T5888] usb 4-1: SerialNumber: syz [ 136.207669][ T6765] binder: BINDER_SET_CONTEXT_MGR already set [ 136.227095][ T6765] binder: 6764:6765 ioctl 4018620d 200000004a80 returned -16 [ 136.355078][ T9] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 136.450049][ T9] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 136.470629][ T9] snd_usb_pod 3-1:1.0: Line 6 BassPODxt Live found [ 136.479187][ T9] usb 3-1: selecting invalid altsetting 1 [ 136.486313][ T9] snd_usb_pod 3-1:1.0: set_interface failed [ 136.492974][ T9] snd_usb_pod 3-1:1.0: Line 6 BassPODxt Live now disconnected [ 136.501501][ T9] snd_usb_pod 3-1:1.0: probe with driver snd_usb_pod failed with error -22 [ 136.518709][ T9] usb 3-1: USB disconnect, device number 20 [ 136.562868][ T6212] udevd[6212]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 136.647773][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.658115][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.013191][ T6781] FAULT_INJECTION: forcing a failure. [ 137.013191][ T6781] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.042298][ T6781] CPU: 1 UID: 0 PID: 6781 Comm: syz.2.274 Tainted: G L syzkaller #0 PREEMPT(full) [ 137.042327][ T6781] Tainted: [L]=SOFTLOCKUP [ 137.042333][ T6781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 137.042354][ T6781] Call Trace: [ 137.042361][ T6781] [ 137.042367][ T6781] dump_stack_lvl+0xe8/0x150 [ 137.042396][ T6781] should_fail_ex+0x412/0x560 [ 137.042420][ T6781] _copy_from_user+0x2d/0xb0 [ 137.042447][ T6781] binder_ioctl_write_read+0x16a/0xa590 [ 137.042472][ T6781] ? is_bpf_text_address+0x26/0x2b0 [ 137.042495][ T6781] ? is_bpf_text_address+0x292/0x2b0 [ 137.042512][ T6781] ? is_bpf_text_address+0x26/0x2b0 [ 137.042530][ T6781] ? kernel_text_address+0xa5/0xe0 [ 137.042548][ T6781] ? __kernel_text_address+0xd/0x30 [ 137.042563][ T6781] ? unwind_get_return_address+0x4d/0x90 [ 137.042579][ T6781] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 137.042598][ T6781] ? arch_stack_walk+0xfb/0x150 [ 137.042621][ T6781] ? stack_trace_save+0xa9/0x100 [ 137.042636][ T6781] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 137.042650][ T6781] ? kasan_save_free_info+0x46/0x50 [ 137.042668][ T6781] ? stack_depot_save_flags+0x33/0x810 [ 137.042690][ T6781] ? __lock_acquire+0x6b5/0x2cf0 [ 137.042718][ T6781] ? binder_debug+0x155/0x1d0 [ 137.042736][ T6781] ? __pfx_binder_debug+0x10/0x10 [ 137.042750][ T6781] ? do_raw_spin_lock+0x12b/0x2f0 [ 137.042774][ T6781] ? _raw_spin_unlock+0x28/0x50 [ 137.042797][ T6781] ? binder_get_thread+0x177/0x6d0 [ 137.042815][ T6781] binder_ioctl+0x423/0x1b10 [ 137.042832][ T6781] ? tomoyo_path_number_perm+0x219/0x630 [ 137.042851][ T6781] ? tomoyo_path_number_perm+0x219/0x630 [ 137.042869][ T6781] ? do_vfs_ioctl+0x1166/0x1530 [ 137.042882][ T6781] ? __pfx_binder_ioctl+0x10/0x10 [ 137.042897][ T6781] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 137.042918][ T6781] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 137.042949][ T6781] ? __fget_files+0x2a/0x420 [ 137.042966][ T6781] ? __fget_files+0x2a/0x420 [ 137.042980][ T6781] ? __fget_files+0x3a0/0x420 [ 137.042995][ T6781] ? __fget_files+0x2a/0x420 [ 137.043012][ T6781] ? bpf_lsm_file_ioctl+0x9/0x20 [ 137.043024][ T6781] ? __pfx_binder_ioctl+0x10/0x10 [ 137.043040][ T6781] __se_sys_ioctl+0xfc/0x170 [ 137.043054][ T6781] do_syscall_64+0x14d/0xf80 [ 137.043070][ T6781] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.043083][ T6781] ? clear_bhb_loop+0x40/0x90 [ 137.043098][ T6781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.043110][ T6781] RIP: 0033:0x7f7c8099c799 [ 137.043125][ T6781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.043135][ T6781] RSP: 002b:00007f7c817a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 137.043149][ T6781] RAX: ffffffffffffffda RBX: 00007f7c80c15fa0 RCX: 00007f7c8099c799 [ 137.043158][ T6781] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 137.043174][ T6781] RBP: 00007f7c817a8090 R08: 0000000000000000 R09: 0000000000000000 [ 137.043180][ T6781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.043187][ T6781] R13: 00007f7c80c16038 R14: 00007f7c80c15fa0 R15: 00007ffff865ae78 [ 137.043210][ T6781] [ 137.043242][ T6781] binder: 6780:6781 ioctl c0306201 2000000001c0 returned -14 [ 137.400870][ T9] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 137.439278][ T6786] netlink: 220 bytes leftover after parsing attributes in process `syz.2.276'. [ 137.448925][ T6786] netlink: 'syz.2.276': attribute type 2 has an invalid length. [ 137.563344][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 137.574248][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 137.584134][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice= 0.40 [ 137.594187][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.603303][ T9] usb 1-1: Product: syz [ 137.607751][ T9] usb 1-1: Manufacturer: syz [ 137.613167][ T9] usb 1-1: SerialNumber: syz [ 137.859339][ T9] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input24 [ 137.899838][ T5197] bcm5974 1-1:1.0: could not read from device [ 137.912237][ T5197] bcm5974 1-1:1.0: could not read from device [ 137.923471][ T9] usb 1-1: USB disconnect, device number 22 [ 137.936931][ T5197] bcm5974 1-1:1.0: could not read from device [ 138.165332][ T5888] cdc_ncm 4-1:1.0: bind() failure [ 138.179801][ T5888] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 138.189485][ T5888] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 138.199027][ T5888] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 138.214968][ T5888] usb 4-1: USB disconnect, device number 15 [ 138.450573][ T6802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.281'. [ 138.461490][ T6802] block nbd0: Unsupported socket: should be TCP or UNIX. [ 139.180600][ T6838] kvm: emulating exchange as write [ 139.194182][ T6838] dvmrp12: entered allmulticast mode [ 139.281064][ T5888] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 139.400846][ T50] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 139.431167][ T5888] usb 3-1: Using ep0 maxpacket: 16 [ 139.454584][ T5888] usb 3-1: unable to get BOS descriptor or descriptor too short [ 139.466799][ T5888] usb 3-1: config 127 has an invalid interface number: 124 but max is 0 [ 139.479270][ T5888] usb 3-1: config 127 has no interface number 0 [ 139.486496][ T5888] usb 3-1: config 127 interface 124 has no altsetting 0 [ 139.495801][ T5888] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 139.505207][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.513452][ T5888] usb 3-1: Product: syz [ 139.518237][ T5888] usb 3-1: Manufacturer: syz [ 139.523173][ T5888] usb 3-1: SerialNumber: syz [ 139.570983][ T50] usb 2-1: Using ep0 maxpacket: 16 [ 139.577659][ T50] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 139.586205][ T50] usb 2-1: config 1 has no interface number 0 [ 139.592436][ T50] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 139.602535][ T50] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 139.612642][ T50] usb 2-1: config 1 interface 105 has no altsetting 0 [ 139.622174][ T50] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 139.631308][ T50] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 139.639380][ T50] usb 2-1: Product: syz [ 139.643596][ T50] usb 2-1: Manufacturer: syz [ 139.648203][ T50] usb 2-1: SerialNumber: syz [ 139.656082][ T6840] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 139.663549][ T6840] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 139.700815][ T9] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 139.730803][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 139.850785][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 139.858330][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 139.867479][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.877687][ T9] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 139.886881][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 139.894770][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 139.905956][ T9] usb 1-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 139.915239][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.923389][ T9] usb 1-1: Product: syz [ 139.928413][ T9] usb 1-1: Manufacturer: syz [ 139.933252][ T10] usb 4-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 139.942358][ T9] usb 1-1: SerialNumber: syz [ 139.947000][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.956424][ T10] usb 4-1: Product: syz [ 139.961565][ T10] usb 4-1: Manufacturer: syz [ 139.966541][ T10] usb 4-1: SerialNumber: syz [ 140.077693][ T6840] input: syz0 as /devices/virtual/input/input25 [ 140.103743][ T6840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.115374][ T6840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.125523][ T6840] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 140.133611][ T6840] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 140.180396][ T6847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.189136][ T6846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.192539][ T6847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.198598][ T6846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.269047][ T9] usb 1-1: 0:2 : does not exist [ 140.286077][ T10] usb 4-1: USB disconnect, device number 16 [ 140.347766][ T6840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.372737][ T9] usb 1-1: disable ehci-hcd to run US-144 [ 140.373926][ T5888] usb 3-1: reset high-speed USB device number 21 using dummy_hcd [ 140.401875][ T9] usb 1-1: USB disconnect, device number 23 [ 140.415418][ T6840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.426116][ T6217] udevd[6217]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 140.500206][ T50] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 140.525689][ T50] aqc111 2-1:1.105: probe with driver aqc111 failed with error -71 [ 140.557874][ T5888] usb 3-1: unable to get BOS descriptor or descriptor too short [ 140.577916][ T50] usb 2-1: USB disconnect, device number 16 [ 140.630256][ T5888] usb 3-1: device firmware changed [ 140.657852][ T5847] udevd[5847]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 140.681129][ T5888] usb 3-1: USB disconnect, device number 21 [ 140.706470][ T6855] FAULT_INJECTION: forcing a failure. [ 140.706470][ T6855] name failslab, interval 1, probability 0, space 0, times 0 [ 140.725743][ T6855] CPU: 0 UID: 0 PID: 6855 Comm: syz.1.298 Tainted: G L syzkaller #0 PREEMPT(full) [ 140.725769][ T6855] Tainted: [L]=SOFTLOCKUP [ 140.725775][ T6855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 140.725792][ T6855] Call Trace: [ 140.725799][ T6855] [ 140.725811][ T6855] dump_stack_lvl+0xe8/0x150 [ 140.725846][ T6855] should_fail_ex+0x412/0x560 [ 140.725879][ T6855] should_failslab+0xa8/0x100 [ 140.725899][ T6855] __kmalloc_cache_noprof+0x88/0x660 [ 140.725916][ T6855] ? vhost_task_create+0x123/0x380 [ 140.725940][ T6855] vhost_task_create+0x123/0x380 [ 140.725958][ T6855] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 140.725975][ T6855] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 140.725993][ T6855] ? __pfx_vhost_task_create+0x10/0x10 [ 140.726017][ T6855] ? __pfx_vhost_task_fn+0x10/0x10 [ 140.726044][ T6855] ? __lock_acquire+0x6b5/0x2cf0 [ 140.726068][ T6855] ? kasan_save_track+0x4f/0x80 [ 140.726080][ T6855] ? kasan_save_track+0x3e/0x80 [ 140.726092][ T6855] ? kasan_save_free_info+0x46/0x50 [ 140.726110][ T6855] ? __kasan_slab_free+0x5c/0x80 [ 140.726123][ T6855] ? kfree+0x1c5/0x640 [ 140.726144][ T6855] kvm_mmu_post_init_vm+0x147/0x2d0 [ 140.726172][ T6855] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 140.726197][ T6855] ? __mutex_trylock_common+0x158/0x260 [ 140.726212][ T6855] ? look_up_lock_class+0x57/0x110 [ 140.726231][ T6855] ? register_lock_class+0x31/0x2e0 [ 140.726250][ T6855] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 140.726270][ T6855] ? __lock_acquire+0x6b5/0x2cf0 [ 140.726291][ T6855] ? __mutex_lock+0x320/0x1420 [ 140.726316][ T6855] ? kasan_quarantine_put+0xbb/0x1f0 [ 140.726348][ T6855] ? do_raw_write_lock+0x11d/0x260 [ 140.726378][ T6855] kvm_vcpu_ioctl+0xa62/0xfd0 [ 140.726401][ T6855] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 140.726416][ T6855] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 140.726454][ T6855] ? __fget_files+0x2a/0x420 [ 140.726474][ T6855] ? __fget_files+0x2a/0x420 [ 140.726490][ T6855] ? __fget_files+0x3a0/0x420 [ 140.726506][ T6855] ? __fget_files+0x2a/0x420 [ 140.726525][ T6855] ? bpf_lsm_file_ioctl+0x9/0x20 [ 140.726549][ T6855] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 140.726565][ T6855] __se_sys_ioctl+0xfc/0x170 [ 140.726585][ T6855] do_syscall_64+0x14d/0xf80 [ 140.726604][ T6855] ? trace_irq_disable+0x3b/0x140 [ 140.726622][ T6855] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.726638][ T6855] ? clear_bhb_loop+0x40/0x90 [ 140.726657][ T6855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.726672][ T6855] RIP: 0033:0x7fcd1d79c799 [ 140.726688][ T6855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.726700][ T6855] RSP: 002b:00007fcd1e6c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 140.726718][ T6855] RAX: ffffffffffffffda RBX: 00007fcd1da16090 RCX: 00007fcd1d79c799 [ 140.726728][ T6855] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 140.726737][ T6855] RBP: 00007fcd1e6c3090 R08: 0000000000000000 R09: 0000000000000000 [ 140.726746][ T6855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.726754][ T6855] R13: 00007fcd1da16128 R14: 00007fcd1da16090 R15: 00007ffe9693a1d8 [ 140.726782][ T6855] [ 141.110554][ T6857] 8021q: VLANs not supported on ip_vti0 [ 141.133628][ T6860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.300'. [ 141.298351][ T6866] FAULT_INJECTION: forcing a failure. [ 141.298351][ T6866] name failslab, interval 1, probability 0, space 0, times 0 [ 141.311970][ T6866] CPU: 1 UID: 0 PID: 6866 Comm: syz.3.303 Tainted: G L syzkaller #0 PREEMPT(full) [ 141.311991][ T6866] Tainted: [L]=SOFTLOCKUP [ 141.311995][ T6866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 141.312001][ T6866] Call Trace: [ 141.312005][ T6866] [ 141.312010][ T6866] dump_stack_lvl+0xe8/0x150 [ 141.312030][ T6866] should_fail_ex+0x412/0x560 [ 141.312046][ T6866] should_failslab+0xa8/0x100 [ 141.312058][ T6866] __kmalloc_noprof+0xe8/0x760 [ 141.312067][ T6866] ? ktime_get_coarse_real_ts64_mg+0x1c5/0x1e0 [ 141.312083][ T6866] ? iter_file_splice_write+0x1da/0x10f0 [ 141.312100][ T6866] iter_file_splice_write+0x1da/0x10f0 [ 141.312114][ T6866] ? __lock_acquire+0x6b5/0x2cf0 [ 141.312134][ T6866] ? atime_needs_update+0x3ac/0x6d0 [ 141.312147][ T6866] ? __pfx_iter_file_splice_write+0x10/0x10 [ 141.312160][ T6866] ? direct_splice_actor+0x49/0x160 [ 141.312194][ T6866] ? direct_splice_actor+0x49/0x160 [ 141.312214][ T6866] ? __pfx_iter_file_splice_write+0x10/0x10 [ 141.312228][ T6866] direct_splice_actor+0x101/0x160 [ 141.312244][ T6866] splice_direct_to_actor+0x53a/0xc70 [ 141.312262][ T6866] ? __pfx_direct_splice_actor+0x10/0x10 [ 141.312280][ T6866] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 141.312298][ T6866] do_splice_direct+0x195/0x290 [ 141.312313][ T6866] ? __pfx_do_splice_direct+0x10/0x10 [ 141.312326][ T6866] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 141.312344][ T6866] ? rw_verify_area+0x255/0x4d0 [ 141.312355][ T6866] do_sendfile+0x535/0x7d0 [ 141.312372][ T6866] ? __pfx_do_sendfile+0x10/0x10 [ 141.312393][ T6866] __se_sys_sendfile64+0xdf/0x1a0 [ 141.312406][ T6866] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 141.312422][ T6866] do_syscall_64+0x14d/0xf80 [ 141.312436][ T6866] ? trace_irq_disable+0x3b/0x140 [ 141.312447][ T6866] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.312457][ T6866] ? clear_bhb_loop+0x40/0x90 [ 141.312471][ T6866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.312493][ T6866] RIP: 0033:0x7eff0ab9c799 [ 141.312508][ T6866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.312520][ T6866] RSP: 002b:00007eff0bacd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 141.312537][ T6866] RAX: ffffffffffffffda RBX: 00007eff0ae15fa0 RCX: 00007eff0ab9c799 [ 141.312548][ T6866] RDX: 0000200000000080 RSI: 0000000000000003 RDI: 0000000000000003 [ 141.312557][ T6866] RBP: 00007eff0bacd090 R08: 0000000000000000 R09: 0000000000000000 [ 141.312563][ T6866] R10: 0000000000007f03 R11: 0000000000000246 R12: 0000000000000002 [ 141.312568][ T6866] R13: 00007eff0ae16038 R14: 00007eff0ae15fa0 R15: 00007ffd2efb09f8 [ 141.312583][ T6866] [ 141.651269][ T5888] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 141.810924][ T5888] usb 1-1: Using ep0 maxpacket: 32 [ 141.819859][ T5888] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 141.830458][ T5888] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 141.843028][ T5888] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 141.852594][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.860598][ T5888] usb 1-1: Product: ࡃ [ 141.865212][ T5888] usb 1-1: Manufacturer: Ꮽ颀膑Ꞗ算㎟׉튭孒ᅠ袴뢼ෙ ꮶ轜焸黎愦ꊠ瑴봁ఒ賢꣛̬奁䈕 [ 141.879037][ T5888] usb 1-1: SerialNumber: 큞慄ᅉ몯ặ岱賋畓胣ፍ塥錳蛖퀲㟄杭㥻峋荤姝︷髎芅睟㠌ꑁ쐶薙ꇧ랛領ᔜፍ⇼᫾굋䤅얱俐홑䋓ႇᵰ鱾褣끾㤌鏔헽࠭耑﬊ว譣垉ᄆ땘੝뜃㵈衿㢞䰜엫ﵩ榼!짩⊕ᛞ鹛鬥nj〦毟缄䮐ե￙㪭냟ᇪ✆ﭰ荻羺ů테mꋘ싵짎堘쮢ᰄ聄呯㎕﹫⍢潆㧜䕻낺ꞑ哟鉰풓⛒ [ 141.980802][ T5842] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 141.988641][ T9] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 142.121808][ T6864] netlink: 20 bytes leftover after parsing attributes in process `syz.0.302'. [ 142.151665][ T6864] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.166899][ T5842] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 142.185271][ T5842] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 142.194604][ T6864] bridge_slave_1 (unregistering): left allmulticast mode [ 142.196479][ T5842] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 142.204135][ T6864] bridge_slave_1 (unregistering): left promiscuous mode [ 142.213249][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 142.231371][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 142.242421][ T5842] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 142.244143][ T6864] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.255482][ T9] usb 3-1: New USB device found, idVendor=12ba, idProduct=0100, bcdDevice= 0.00 [ 142.272699][ T5842] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 142.282418][ T5842] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.291461][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.318972][ T9] usb 3-1: config 0 descriptor?? [ 142.324906][ T5842] usb 2-1: config 0 descriptor?? [ 142.337438][ T6872] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 142.363405][ T5888] cdc_ncm 1-1:1.0: bind() failure [ 142.380270][ T5888] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 142.388422][ T5888] cdc_ncm 1-1:1.1: bind() failure [ 142.400227][ T5888] usb 1-1: USB disconnect, device number 24 [ 142.568518][ T6872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.579984][ T6872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.801361][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 142.807458][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 142.819714][ T9] usb 3-1: USB disconnect, device number 22 [ 143.064346][ T1116] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.089319][ T6874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.098713][ T6874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.165585][ T1116] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.185836][ T5842] usbhid 2-1:0.0: can't add hid device: -71 [ 143.192972][ T5842] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 143.208215][ T5842] usb 2-1: USB disconnect, device number 17 [ 143.292904][ T1116] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.416827][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 143.438096][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 143.447831][ T1116] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.458303][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 143.461302][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 143.476217][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 143.590150][ T6897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.317'. [ 143.911752][ T5896] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 143.938112][ T1116] bridge_slave_1: left allmulticast mode [ 143.945001][ T1116] bridge_slave_1: left promiscuous mode [ 143.954693][ T1116] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.980452][ T1116] bridge_slave_0: left allmulticast mode [ 143.986329][ T1116] bridge_slave_0: left promiscuous mode [ 143.994897][ T1116] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.081020][ T5896] usb 3-1: Using ep0 maxpacket: 32 [ 144.089798][ T5896] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 144.098370][ T5896] usb 3-1: config 0 has no interface number 0 [ 144.107987][ T5896] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 144.117834][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.127425][ T5896] usb 3-1: Product: syz [ 144.132634][ T5896] usb 3-1: Manufacturer: syz [ 144.137391][ T5896] usb 3-1: SerialNumber: syz [ 144.149651][ T5896] usb 3-1: config 0 descriptor?? [ 144.159644][ T5896] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 144.209506][ T1116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.223427][ T1116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.235567][ T1116] bond0 (unregistering): Released all slaves [ 144.335978][ T6888] chnl_net:caif_netlink_parms(): no params data found [ 144.369287][ T5896] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 144.383096][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 9 [ 144.404994][ T5896] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 144.593257][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 144.603635][ T5896] usb 3-1: USB disconnect, device number 23 [ 144.650627][ T5896] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 144.752657][ T5896] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 144.779188][ T6916] FAULT_INJECTION: forcing a failure. [ 144.779188][ T6916] name failslab, interval 1, probability 0, space 0, times 0 [ 144.797173][ T6916] CPU: 0 UID: 0 PID: 6916 Comm: syz.0.319 Tainted: G L syzkaller #0 PREEMPT(full) [ 144.797197][ T6916] Tainted: [L]=SOFTLOCKUP [ 144.797202][ T6916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 144.797210][ T6916] Call Trace: [ 144.797217][ T6916] [ 144.797223][ T6916] dump_stack_lvl+0xe8/0x150 [ 144.797251][ T6916] should_fail_ex+0x412/0x560 [ 144.797273][ T6916] ? __d_alloc+0x37/0x6f0 [ 144.797296][ T6916] should_failslab+0xa8/0x100 [ 144.797316][ T6916] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 144.797347][ T6916] __d_alloc+0x37/0x6f0 [ 144.797369][ T6916] ? __lock_acquire+0x6b5/0x2cf0 [ 144.797394][ T6916] d_alloc_parallel+0xe6/0x1610 [ 144.797411][ T6916] ? __follow_mount_rcu+0x1d8/0x560 [ 144.797432][ T6916] ? look_up_lock_class+0x57/0x110 [ 144.797454][ T6916] ? register_lock_class+0x31/0x2e0 [ 144.797474][ T6916] ? lockdep_hardirqs_on+0x7a/0x110 [ 144.797496][ T6916] ? __lock_acquire+0x6b5/0x2cf0 [ 144.797521][ T6916] ? __pfx_d_alloc_parallel+0x10/0x10 [ 144.797535][ T6916] ? do_raw_spin_lock+0x12b/0x2f0 [ 144.797557][ T6916] ? __raw_spin_lock_init+0x45/0x100 [ 144.797577][ T6916] ? __init_waitqueue_head+0xa9/0x150 [ 144.797600][ T6916] __lookup_slow+0x137/0x410 [ 144.797624][ T6916] ? __pfx___lookup_slow+0x10/0x10 [ 144.797657][ T6916] ? down_read+0x270/0x2e0 [ 144.797675][ T6916] lookup_slow+0x53/0x70 [ 144.797704][ T6916] path_lookupat+0x3f5/0x8c0 [ 144.797739][ T6916] filename_lookup+0x256/0x5d0 [ 144.797764][ T6916] ? __pfx_filename_lookup+0x10/0x10 [ 144.797808][ T6916] ? strncpy_from_user+0x150/0x2b0 [ 144.797831][ T6916] ? do_getname+0x151/0x250 [ 144.797852][ T6916] do_readlinkat+0xe3/0x510 [ 144.797876][ T6916] ? __pfx_do_readlinkat+0x10/0x10 [ 144.797897][ T6916] ? __pfx_ksys_write+0x10/0x10 [ 144.797920][ T6916] __x64_sys_readlink+0x7f/0x90 [ 144.797942][ T6916] do_syscall_64+0x14d/0xf80 [ 144.797962][ T6916] ? trace_irq_disable+0x3b/0x140 [ 144.797979][ T6916] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.797996][ T6916] ? clear_bhb_loop+0x40/0x90 [ 144.798019][ T6916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.798034][ T6916] RIP: 0033:0x7fdfe0f9c799 [ 144.798051][ T6916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.798072][ T6916] RSP: 002b:00007fdfe1ead028 EFLAGS: 00000246 ORIG_RAX: 0000000000000059 [ 144.798090][ T6916] RAX: ffffffffffffffda RBX: 00007fdfe1215fa0 RCX: 00007fdfe0f9c799 [ 144.798102][ T6916] RDX: 0000000000000097 RSI: 00002000000021c0 RDI: 0000200000002000 [ 144.798112][ T6916] RBP: 00007fdfe1ead090 R08: 0000000000000000 R09: 0000000000000000 [ 144.798122][ T6916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.798131][ T6916] R13: 00007fdfe1216038 R14: 00007fdfe1215fa0 R15: 00007ffd1a9c0978 [ 144.798157][ T6916] [ 144.805209][ T5896] quatech2 3-1:0.51: device disconnected [ 145.183215][ T6929] sg_write: data in/out 294879/136 bytes for SCSI command 0x2-- guessing data in; [ 145.183215][ T6929] program syz.1.320 not setting count and/or reply_len properly [ 145.318025][ T6888] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.336626][ T6888] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.359170][ T6888] bridge_slave_0: entered allmulticast mode [ 145.376793][ T6888] bridge_slave_0: entered promiscuous mode [ 145.385354][ T6888] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.397961][ T6888] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.411358][ T6934] picdev_read: 9 callbacks suppressed [ 145.411381][ T6934] kvm: pic: non byte read [ 145.412469][ T6888] bridge_slave_1: entered allmulticast mode [ 145.417205][ T6934] kvm: pic: non byte read [ 145.435056][ T6934] kvm: pic: non byte read [ 145.435243][ T6888] bridge_slave_1: entered promiscuous mode [ 145.440354][ T6934] kvm: pic: single mode not supported [ 145.445744][ T6934] kvm: pic: level sensitive irq not supported [ 145.454708][ T6934] kvm: pic: non byte read [ 145.466835][ T6934] kvm: pic: single mode not supported [ 145.466854][ T6934] kvm: pic: level sensitive irq not supported [ 145.473116][ T6934] kvm: pic: non byte read [ 145.484035][ T6934] kvm: pic: single mode not supported [ 145.484096][ T6934] kvm: pic: non byte read [ 145.492081][ T6937] No source specified [ 145.494423][ T6934] kvm: pic: single mode not supported [ 145.499174][ T6934] kvm: pic: non byte read [ 145.509093][ T1116] hsr_slave_0: left promiscuous mode [ 145.514083][ T6934] kvm: pic: non byte read [ 145.518859][ T1116] hsr_slave_1: left promiscuous mode [ 145.519182][ T6934] kvm: pic: non byte read [ 145.524340][ T51] Bluetooth: hci2: command tx timeout [ 145.545356][ T1116] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.553444][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.565836][ T1116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.574642][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.590610][ T1116] veth1_macvtap: left promiscuous mode [ 145.597058][ T1116] veth0_macvtap: left promiscuous mode [ 145.612828][ T1116] veth1_vlan: left promiscuous mode [ 145.618316][ T1116] veth0_vlan: left promiscuous mode [ 145.740801][ T10] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 145.890863][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 145.919897][ T10] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 145.946480][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.961688][ T10] usb 3-1: Product: syz [ 145.965990][ T10] usb 3-1: Manufacturer: syz [ 145.971543][ T10] usb 3-1: SerialNumber: syz [ 145.978921][ T10] usb 3-1: config 0 descriptor?? [ 145.992782][ T10] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 146.024215][ T6952] kvm: requested 81295 ns i8254 timer period limited to 200000 ns [ 146.034660][ T6952] kvm: requested 45257 ns i8254 timer period limited to 200000 ns [ 146.043352][ T6952] kvm: requested 42742 ns i8254 timer period limited to 200000 ns [ 146.053616][ T6952] kvm: requested 166781 ns i8254 timer period limited to 200000 ns [ 146.062010][ T6952] kvm: requested 181028 ns i8254 timer period limited to 200000 ns [ 146.072851][ T6952] kvm: requested 196952 ns i8254 timer period limited to 200000 ns [ 146.082114][ T6952] kvm: requested 15923 ns i8254 timer period limited to 200000 ns [ 146.102246][ T6952] kvm: requested 33523 ns i8254 timer period limited to 200000 ns [ 146.120546][ T6952] kvm: requested 166781 ns i8254 timer period limited to 200000 ns [ 146.134889][ T6952] kvm: requested 109790 ns i8254 timer period limited to 200000 ns [ 146.159508][ T1116] team0 (unregistering): Port device team_slave_1 removed [ 146.205641][ T1116] team0 (unregistering): Port device team_slave_0 removed [ 146.531724][ T6888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.549720][ T6888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.644180][ T6888] team0: Port device team_slave_0 added [ 146.653231][ T6888] team0: Port device team_slave_1 added [ 146.724831][ T6888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.749534][ T6888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 146.814031][ T6888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.836484][ T6888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.844868][ T6888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 146.871642][ T6888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.916595][ T6970] FAULT_INJECTION: forcing a failure. [ 146.916595][ T6970] name failslab, interval 1, probability 0, space 0, times 0 [ 146.929599][ T6970] CPU: 0 UID: 0 PID: 6970 Comm: syz.0.331 Tainted: G L syzkaller #0 PREEMPT(full) [ 146.929623][ T6970] Tainted: [L]=SOFTLOCKUP [ 146.929629][ T6970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 146.929636][ T6970] Call Trace: [ 146.929645][ T6970] [ 146.929652][ T6970] dump_stack_lvl+0xe8/0x150 [ 146.929683][ T6970] should_fail_ex+0x412/0x560 [ 146.929708][ T6970] should_failslab+0xa8/0x100 [ 146.929724][ T6970] ? __kernfs_new_node+0xea/0x970 [ 146.929744][ T6970] kmem_cache_alloc_noprof+0x87/0x650 [ 146.929772][ T6970] __kernfs_new_node+0xea/0x970 [ 146.929797][ T6970] ? __pfx___kernfs_new_node+0x10/0x10 [ 146.929817][ T6970] ? kernfs_root+0x1c/0x230 [ 146.929838][ T6970] ? kernfs_root+0x1c/0x230 [ 146.929854][ T6970] ? kernfs_root+0x1c/0x230 [ 146.929868][ T6970] ? kernfs_root+0x1c/0x230 [ 146.929901][ T6970] kernfs_new_node+0x102/0x210 [ 146.929925][ T6970] __kernfs_create_file+0x4b/0x2e0 [ 146.929943][ T6970] sysfs_add_file_mode_ns+0x238/0x300 [ 146.929967][ T6970] internal_create_group+0x673/0x1180 [ 146.930000][ T6970] ? __pfx_internal_create_group+0x10/0x10 [ 146.930024][ T6970] ? up_write+0x1ab/0x410 [ 146.930045][ T6970] sysfs_create_groups+0x59/0x120 [ 146.930066][ T6970] device_add_attrs+0xdd/0x5b0 [ 146.930087][ T6970] ? __pfx_device_add_attrs+0x10/0x10 [ 146.930105][ T6970] ? device_add_class_symlinks+0x21f/0x240 [ 146.930125][ T6970] device_add+0x496/0xb70 [ 146.930139][ T6970] ? device_initialize+0x26a/0x460 [ 146.930154][ T6970] netdev_register_kobject+0x178/0x310 [ 146.930176][ T6970] register_netdevice+0x12c0/0x1cf0 [ 146.930206][ T6970] ? __pfx_register_netdevice+0x10/0x10 [ 146.930228][ T6970] ? netif_carrier_off+0xaa/0xd0 [ 146.930250][ T6970] register_netdev+0x40/0x60 [ 146.930265][ T6970] slcan_open+0x357/0x440 [ 146.930293][ T6970] tty_ldisc_open+0xa1/0x100 [ 146.930317][ T6970] tty_set_ldisc+0x373/0x560 [ 146.930342][ T6970] tty_ioctl+0xc37/0xde0 [ 146.930362][ T6970] ? __pfx_tty_ioctl+0x10/0x10 [ 146.930382][ T6970] __se_sys_ioctl+0xfc/0x170 [ 146.930401][ T6970] do_syscall_64+0x14d/0xf80 [ 146.930419][ T6970] ? trace_irq_disable+0x3b/0x140 [ 146.930435][ T6970] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.930451][ T6970] ? clear_bhb_loop+0x40/0x90 [ 146.930470][ T6970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.930485][ T6970] RIP: 0033:0x7fdfe0f9c799 [ 146.930509][ T6970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.930522][ T6970] RSP: 002b:00007fdfe1ead028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 146.930538][ T6970] RAX: ffffffffffffffda RBX: 00007fdfe1215fa0 RCX: 00007fdfe0f9c799 [ 146.930548][ T6970] RDX: 00002000000002c0 RSI: 0000000000005423 RDI: 0000000000000004 [ 146.930557][ T6970] RBP: 00007fdfe1ead090 R08: 0000000000000000 R09: 0000000000000000 [ 146.930565][ T6970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 146.930574][ T6970] R13: 00007fdfe1216038 R14: 00007fdfe1215fa0 R15: 00007ffd1a9c0978 [ 146.930601][ T6970] [ 147.237771][ T5842] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 147.266793][ T6970] slcan: can't register candev [ 147.301200][ T10] gspca_ov534_9: reg_w failed -110 [ 147.395487][ T6888] hsr_slave_0: entered promiscuous mode [ 147.403932][ T5842] usb 2-1: Using ep0 maxpacket: 16 [ 147.404755][ T6888] hsr_slave_1: entered promiscuous mode [ 147.425249][ T5842] usb 2-1: unable to get BOS descriptor or descriptor too short [ 147.431951][ T6979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.332'. [ 147.442998][ T5842] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.443824][ T6888] debugfs: 'hsr0' already exists in 'hsr' [ 147.453472][ T5842] usb 2-1: config 1 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 147.459663][ T6888] Cannot create hsr debugfs directory [ 147.473724][ T5842] usb 2-1: config 1 interface 0 has no altsetting 0 [ 147.494771][ T5842] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 147.503962][ T5842] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.514451][ T5842] usb 2-1: Product: syz [ 147.518643][ T5842] usb 2-1: Manufacturer: syz [ 147.524444][ T5842] usb 2-1: SerialNumber: syz [ 147.600899][ T51] Bluetooth: hci2: command tx timeout [ 147.621093][ T10] gspca_ov534_9: Unknown sensor 0000 [ 147.621223][ T10] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 147.652925][ T6984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.333'. [ 147.755123][ T5842] cdc_ether 2-1:1.0: GUID doesn't match [ 147.786652][ T5842] usb 2-1: USB disconnect, device number 18 [ 147.987734][ T6888] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 148.000566][ T6888] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 148.013474][ T6888] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 148.028670][ T6888] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 148.137231][ T6888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.151057][ T92] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 148.164811][ T6888] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.187277][ T757] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.194588][ T757] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.208305][ T757] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.215528][ T757] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.336978][ T92] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.360892][ T92] usb 1-1: string descriptor 0 read error: -22 [ 148.367570][ T92] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.9a [ 148.390172][ T92] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.443800][ T92] gspca_main: spca501-2.14.0 probing 0000:0000 [ 148.546153][ T5896] usb 3-1: USB disconnect, device number 24 [ 148.685697][ T6989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.701466][ T6989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.709742][ T6888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.732072][ T6989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.752891][ T6989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.142968][ T5842] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 149.187849][ T6888] veth0_vlan: entered promiscuous mode [ 149.207314][ T6888] veth1_vlan: entered promiscuous mode [ 149.270098][ T6888] veth0_macvtap: entered promiscuous mode [ 149.279235][ T51] Bluetooth: hci1: unexpected event for opcode 0x0c23 [ 149.290556][ T6888] veth1_macvtap: entered promiscuous mode [ 149.305622][ T5842] usb 2-1: device descriptor read/64, error -71 [ 149.322381][ T92] gspca_spca501: reg write: error -110 [ 149.331044][ T6888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.335583][ T92] spca501 1-1:1.0: Reg write failed for 0x02,0xa048,0x00 [ 149.343029][ T6888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.379058][ T92] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 149.388769][ T757] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.398731][ T757] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.424274][ T757] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.454325][ T757] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.552682][ T5842] usb 2-1: new low-speed USB device number 20 using dummy_hcd [ 149.630152][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.649830][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.682133][ T51] Bluetooth: hci2: command tx timeout [ 149.701155][ T5842] usb 2-1: device descriptor read/64, error -71 [ 149.722548][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.731575][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.823932][ T5842] usb usb2-port1: attempt power cycle [ 149.855069][ T7061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.900141][ T7061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.935749][ T7061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.956957][ T7061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.181068][ T5842] usb 2-1: new low-speed USB device number 21 using dummy_hcd [ 150.211606][ T5842] usb 2-1: device descriptor read/8, error -71 [ 150.440880][ T5921] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 150.452336][ T5842] usb 2-1: new low-speed USB device number 22 using dummy_hcd [ 150.471644][ T5842] usb 2-1: device descriptor read/8, error -71 [ 150.559952][ T7073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.573020][ T7073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.582029][ T5921] usb 5-1: device descriptor read/64, error -71 [ 150.588985][ T5842] usb usb2-port1: unable to enumerate USB device [ 150.830910][ T5921] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 150.970812][ T5921] usb 5-1: device descriptor read/64, error -71 [ 151.081030][ T5921] usb usb5-port1: attempt power cycle [ 151.106719][ T7081] netlink: 12 bytes leftover after parsing attributes in process `syz.2.349'. [ 151.116083][ T7081] openvswitch: netlink: Flow key attr not present in new flow. [ 151.133434][ T7081] netlink: 16 bytes leftover after parsing attributes in process `syz.2.349'. [ 151.420987][ T5921] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 151.441550][ T5921] usb 5-1: device descriptor read/8, error -71 [ 151.580781][ T5888] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 151.681049][ T5921] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 151.701228][ T5921] usb 5-1: device descriptor read/8, error -71 [ 151.730806][ T5888] usb 3-1: Using ep0 maxpacket: 8 [ 151.737404][ T5888] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.747898][ T5888] usb 3-1: config 0 has no interfaces? [ 151.755607][ T5888] usb 3-1: New USB device found, idVendor=0bda, idProduct=8155, bcdDevice=c3.4d [ 151.765051][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.773079][ T51] Bluetooth: hci2: command tx timeout [ 151.778510][ T5888] usb 3-1: Product: syz [ 151.783470][ T5888] usb 3-1: Manufacturer: syz [ 151.788076][ T5888] usb 3-1: SerialNumber: syz [ 151.796753][ T5888] r8152-cfgselector 3-1: Unknown version 0x0000 [ 151.803157][ T5888] r8152-cfgselector 3-1: config 0 descriptor?? [ 151.814531][ T5921] usb usb5-port1: unable to enumerate USB device [ 151.942530][ T7097] netlink: 36 bytes leftover after parsing attributes in process `syz.1.353'. [ 152.067936][ T7098] FAULT_INJECTION: forcing a failure. [ 152.067936][ T7098] name failslab, interval 1, probability 0, space 0, times 0 [ 152.100979][ T7098] CPU: 0 UID: 0 PID: 7098 Comm: syz.2.352 Tainted: G L syzkaller #0 PREEMPT(full) [ 152.101005][ T7098] Tainted: [L]=SOFTLOCKUP [ 152.101011][ T7098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 152.101020][ T7098] Call Trace: [ 152.101027][ T7098] [ 152.101034][ T7098] dump_stack_lvl+0xe8/0x150 [ 152.101063][ T7098] should_fail_ex+0x412/0x560 [ 152.101088][ T7098] should_failslab+0xa8/0x100 [ 152.101107][ T7098] __kmalloc_cache_noprof+0x88/0x660 [ 152.101125][ T7098] ? ucma_alloc_ctx+0x4e/0x340 [ 152.101148][ T7098] ucma_alloc_ctx+0x4e/0x340 [ 152.101168][ T7098] ucma_create_id+0x1e3/0x380 [ 152.101186][ T7098] ? __pfx_ucma_create_id+0x10/0x10 [ 152.101213][ T7098] ucma_write+0x24e/0x2f0 [ 152.101232][ T7098] ? __pfx_ucma_write+0x10/0x10 [ 152.101247][ T7098] ? security_file_permission+0x75/0x260 [ 152.101267][ T7098] ? rw_verify_area+0x255/0x4d0 [ 152.101286][ T7098] vfs_writev+0x4bd/0x990 [ 152.101306][ T7098] ? __pfx_ucma_write+0x10/0x10 [ 152.101325][ T7098] ? __pfx_vfs_writev+0x10/0x10 [ 152.101356][ T7098] ? __fget_files+0x2a/0x420 [ 152.101377][ T7098] ? __fget_files+0x3a0/0x420 [ 152.101395][ T7098] ? __fget_files+0x2a/0x420 [ 152.101420][ T7098] do_writev+0x154/0x2e0 [ 152.101441][ T7098] ? __pfx_do_writev+0x10/0x10 [ 152.101468][ T7098] do_syscall_64+0x14d/0xf80 [ 152.101488][ T7098] ? trace_irq_disable+0x3b/0x140 [ 152.101506][ T7098] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.101522][ T7098] ? clear_bhb_loop+0x40/0x90 [ 152.101541][ T7098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.101555][ T7098] RIP: 0033:0x7f7c8099c799 [ 152.101571][ T7098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.101584][ T7098] RSP: 002b:00007f7c81787028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 152.101602][ T7098] RAX: ffffffffffffffda RBX: 00007f7c80c16090 RCX: 00007f7c8099c799 [ 152.101612][ T7098] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000005 [ 152.101620][ T7098] RBP: 00007f7c81787090 R08: 0000000000000000 R09: 0000000000000000 [ 152.101629][ T7098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.101637][ T7098] R13: 00007f7c80c16128 R14: 00007f7c80c16090 R15: 00007ffff865ae78 [ 152.101661][ T7098] [ 152.102211][ T7100] netlink: 244 bytes leftover after parsing attributes in process `syz.1.354'. [ 152.630817][ T5888] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 152.780822][ T5888] usb 2-1: Using ep0 maxpacket: 8 [ 152.787336][ T5888] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.798183][ T5888] usb 2-1: config 0 has no interfaces? [ 152.805832][ T5888] usb 2-1: New USB device found, idVendor=0bda, idProduct=8155, bcdDevice=c3.4d [ 152.815319][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.823502][ T5888] usb 2-1: Product: syz [ 152.827697][ T5888] usb 2-1: Manufacturer: syz [ 152.832841][ T5888] usb 2-1: SerialNumber: syz [ 152.840971][ T5888] r8152-cfgselector 2-1: Unknown version 0x0000 [ 152.847253][ T5888] r8152-cfgselector 2-1: config 0 descriptor?? [ 153.254040][ T7109] netlink: 'syz.4.356': attribute type 44 has an invalid length. [ 153.254978][ T7110] netlink: 'syz.4.356': attribute type 44 has an invalid length. [ 153.725470][ T7131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.736021][ T7131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.750842][ T5888] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 153.902697][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.913891][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.923985][ T51] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 153.924477][ T51] Bluetooth: hci0: Injecting HCI hardware error event [ 153.925652][ T5837] Bluetooth: hci0: hardware error 0x00 [ 153.934578][ T5888] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 153.959168][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.969490][ T5888] usb 5-1: config 0 descriptor?? [ 154.372413][ T10] r8152-cfgselector 3-1: USB disconnect, device number 25 [ 154.395079][ T5888] hid_parser_main: 48 callbacks suppressed [ 154.395111][ T5888] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 154.479348][ T5888] cp2112 0003:10C4:EA90.0006: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 154.653928][ T7140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.663083][ T7140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.090790][ T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 155.263844][ T10] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 155.278793][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.295153][ T10] usb 3-1: config 0 descriptor?? [ 155.308314][ T10] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 155.322163][ T7143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.367'. [ 155.415955][ T9] r8152-cfgselector 2-1: USB disconnect, device number 23 [ 155.671302][ T7156] FAULT_INJECTION: forcing a failure. [ 155.671302][ T7156] name failslab, interval 1, probability 0, space 0, times 0 [ 155.671349][ T7156] CPU: 0 UID: 0 PID: 7156 Comm: syz.0.372 Tainted: G L syzkaller #0 PREEMPT(full) [ 155.671369][ T7156] Tainted: [L]=SOFTLOCKUP [ 155.671375][ T7156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 155.671383][ T7156] Call Trace: [ 155.671390][ T7156] [ 155.671396][ T7156] dump_stack_lvl+0xe8/0x150 [ 155.671427][ T7156] should_fail_ex+0x412/0x560 [ 155.671463][ T7156] should_failslab+0xa8/0x100 [ 155.671483][ T7156] __kmalloc_cache_noprof+0x88/0x660 [ 155.671498][ T7156] ? __kasan_kmalloc+0x93/0xb0 [ 155.671514][ T7156] ? con_insert_unipair+0x140/0x210 [ 155.671531][ T7156] ? __kmalloc_cache_noprof+0x15b/0x660 [ 155.671550][ T7156] con_insert_unipair+0x140/0x210 [ 155.671570][ T7156] con_set_unimap+0x2ee/0x660 [ 155.671595][ T7156] vt_ioctl+0x12aa/0x20c0 [ 155.671619][ T7156] ? __pfx_vt_ioctl+0x10/0x10 [ 155.671649][ T7156] ? __fget_files+0x2a/0x420 [ 155.671673][ T7156] ? __fget_files+0x3a0/0x420 [ 155.671691][ T7156] ? __fget_files+0x2a/0x420 [ 155.671712][ T7156] tty_ioctl+0x928/0xde0 [ 155.671733][ T7156] ? __pfx_tty_ioctl+0x10/0x10 [ 155.671754][ T7156] __se_sys_ioctl+0xfc/0x170 [ 155.671772][ T7156] do_syscall_64+0x14d/0xf80 [ 155.671792][ T7156] ? trace_irq_disable+0x3b/0x140 [ 155.671809][ T7156] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.671823][ T7156] ? clear_bhb_loop+0x40/0x90 [ 155.671841][ T7156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.671856][ T7156] RIP: 0033:0x7fdfe0f9c799 [ 155.671871][ T7156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.671885][ T7156] RSP: 002b:00007fdfe1ead028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 155.671902][ T7156] RAX: ffffffffffffffda RBX: 00007fdfe1215fa0 RCX: 00007fdfe0f9c799 [ 155.671913][ T7156] RDX: 0000200000000480 RSI: 0000000000004b67 RDI: 0000000000000003 [ 155.671922][ T7156] RBP: 00007fdfe1ead090 R08: 0000000000000000 R09: 0000000000000000 [ 155.671930][ T7156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.671939][ T7156] R13: 00007fdfe1216038 R14: 00007fdfe1215fa0 R15: 00007ffd1a9c0978 [ 155.671964][ T7156] [ 155.724108][ T10] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 155.928785][ T10] gspca_cpia1: usb_control_msg 01, error -71 [ 155.928807][ T10] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 155.934256][ T10] usb 3-1: USB disconnect, device number 26 [ 155.956773][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 156.000802][ T5837] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 156.122636][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.133220][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 156.143866][ T9] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 156.152959][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 156.161534][ T9] usb 2-1: SerialNumber: syz [ 156.532211][ T9] usb 2-1: 0:2 : does not exist [ 156.616731][ T5888] cp2112 0003:10C4:EA90.0006: error requesting version [ 156.662590][ T7172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.674782][ T5888] cp2112 0003:10C4:EA90.0006: probe with driver cp2112 failed with error -71 [ 156.685702][ T9] usb 2-1: USB disconnect, device number 24 [ 156.700152][ T7172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.766122][ T5888] usb 5-1: USB disconnect, device number 6 [ 156.867686][ T7175] netlink: 20 bytes leftover after parsing attributes in process `syz.4.376'. [ 157.926243][ T7181] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.307724][ T7183] netlink: 'syz.1.378': attribute type 29 has an invalid length. [ 158.651882][ T7185] FAULT_INJECTION: forcing a failure. [ 158.651882][ T7185] name failslab, interval 1, probability 0, space 0, times 0 [ 158.735390][ T7185] CPU: 1 UID: 0 PID: 7185 Comm: syz.0.379 Tainted: G L syzkaller #0 PREEMPT(full) [ 158.735417][ T7185] Tainted: [L]=SOFTLOCKUP [ 158.735424][ T7185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 158.735433][ T7185] Call Trace: [ 158.735441][ T7185] [ 158.735448][ T7185] dump_stack_lvl+0xe8/0x150 [ 158.735477][ T7185] should_fail_ex+0x412/0x560 [ 158.735502][ T7185] should_failslab+0xa8/0x100 [ 158.735522][ T7185] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 158.735539][ T7185] ? __kasan_kmalloc+0x93/0xb0 [ 158.735558][ T7185] ? __request_module+0x2ec/0x630 [ 158.735581][ T7185] ? __kmalloc_cache_noprof+0x31c/0x660 [ 158.735600][ T7185] kstrdup+0x42/0x100 [ 158.735628][ T7185] __request_module+0x2ec/0x630 [ 158.735655][ T7185] ? __pfx___request_module+0x10/0x10 [ 158.735675][ T7185] ? lockdep_hardirqs_on+0x7a/0x110 [ 158.735708][ T7185] ? security_capable+0x7e/0x2c0 [ 158.735734][ T7185] ? dev_load+0x21/0x1f0 [ 158.735755][ T7185] dev_load+0x190/0x1f0 [ 158.735774][ T7185] dev_ioctl+0x837/0x1150 [ 158.735797][ T7185] sock_ioctl+0x75f/0x7f0 [ 158.735817][ T7185] ? __pfx_sock_ioctl+0x10/0x10 [ 158.735836][ T7185] ? __fget_files+0x3a0/0x420 [ 158.735856][ T7185] ? __fget_files+0x2a/0x420 [ 158.735878][ T7185] ? bpf_lsm_file_ioctl+0x9/0x20 [ 158.735894][ T7185] ? __pfx_sock_ioctl+0x10/0x10 [ 158.735911][ T7185] __se_sys_ioctl+0xfc/0x170 [ 158.735930][ T7185] do_syscall_64+0x14d/0xf80 [ 158.735951][ T7185] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.735967][ T7185] ? clear_bhb_loop+0x40/0x90 [ 158.735986][ T7185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.736002][ T7185] RIP: 0033:0x7fdfe0f9c799 [ 158.736017][ T7185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.736030][ T7185] RSP: 002b:00007fdfe1ead028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 158.736048][ T7185] RAX: ffffffffffffffda RBX: 00007fdfe1215fa0 RCX: 00007fdfe0f9c799 [ 158.736059][ T7185] RDX: 0000200000000100 RSI: 00000000000089f6 RDI: 0000000000000003 [ 158.736070][ T7185] RBP: 00007fdfe1ead090 R08: 0000000000000000 R09: 0000000000000000 [ 158.736079][ T7185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.736088][ T7185] R13: 00007fdfe1216038 R14: 00007fdfe1215fa0 R15: 00007ffd1a9c0978 [ 158.736113][ T7185] [ 160.057249][ T5848] udevd[5848]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 160.096171][ T6212] udevd[6212]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 160.097088][ T7199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.116212][ T7199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.147535][ T7201] netlink: 840 bytes leftover after parsing attributes in process `syz.2.385'. [ 160.159221][ T7201] FAULT_INJECTION: forcing a failure. [ 160.159221][ T7201] name failslab, interval 1, probability 0, space 0, times 0 [ 160.173298][ T7201] CPU: 0 UID: 0 PID: 7201 Comm: syz.2.385 Tainted: G L syzkaller #0 PREEMPT(full) [ 160.173323][ T7201] Tainted: [L]=SOFTLOCKUP [ 160.173328][ T7201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 160.173336][ T7201] Call Trace: [ 160.173342][ T7201] [ 160.173349][ T7201] dump_stack_lvl+0xe8/0x150 [ 160.173376][ T7201] should_fail_ex+0x412/0x560 [ 160.173405][ T7201] should_failslab+0xa8/0x100 [ 160.173424][ T7201] __kmalloc_cache_noprof+0x88/0x660 [ 160.173439][ T7201] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 160.173459][ T7201] ? kobject_uevent_env+0x28c/0x9e0 [ 160.173479][ T7201] ? __pfx_dev_uevent_name+0x10/0x10 [ 160.173498][ T7201] kobject_uevent_env+0x28c/0x9e0 [ 160.173521][ T7201] device_add+0x557/0xb70 [ 160.173541][ T7201] device_create+0x269/0x300 [ 160.173559][ T7201] ? timer_init_key+0x161/0x2c0 [ 160.173580][ T7201] ? __pfx_device_create+0x10/0x10 [ 160.173597][ T7201] ? ieee80211_alloc_hw_nm+0x191d/0x1fa0 [ 160.173627][ T7201] mac80211_hwsim_new_radio+0x427/0x5ba0 [ 160.173687][ T7201] ? _printk+0xdd/0x130 [ 160.173711][ T7201] ? __pfx__printk+0x10/0x10 [ 160.173727][ T7201] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 160.173746][ T7201] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 160.173763][ T7201] ? do_trace_netlink_extack+0x80/0x1d0 [ 160.173784][ T7201] hwsim_new_radio_nl+0xf6a/0x1c00 [ 160.173819][ T7201] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 160.173844][ T7201] ? rcu_is_watching+0x15/0xb0 [ 160.173862][ T7201] ? trace_kmalloc+0x2a/0xf0 [ 160.173880][ T7201] ? __nla_parse+0x40/0x60 [ 160.173901][ T7201] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 160.173914][ T7201] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 160.173933][ T7201] genl_family_rcv_msg_doit+0x22a/0x330 [ 160.173951][ T7201] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 160.173974][ T7201] ? bpf_lsm_capable+0x9/0x20 [ 160.173988][ T7201] ? security_capable+0x7e/0x2c0 [ 160.174012][ T7201] genl_rcv_msg+0x61c/0x7a0 [ 160.174030][ T7201] ? __pfx_genl_rcv_msg+0x10/0x10 [ 160.174042][ T7201] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 160.174063][ T7201] ? __pfx_ref_tracker_free+0x10/0x10 [ 160.174079][ T7201] ? __skb_clone+0x63/0x7a0 [ 160.174103][ T7201] netlink_rcv_skb+0x232/0x4b0 [ 160.174120][ T7201] ? __pfx_genl_rcv_msg+0x10/0x10 [ 160.174133][ T7201] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 160.174153][ T7201] ? genl_rcv+0x19/0x40 [ 160.174178][ T7201] ? down_read+0x270/0x2e0 [ 160.174189][ T7201] ? genl_rcv+0xd/0x40 [ 160.174203][ T7201] genl_rcv+0x28/0x40 [ 160.174214][ T7201] netlink_unicast+0x80f/0x9b0 [ 160.174236][ T7201] ? __pfx_netlink_unicast+0x10/0x10 [ 160.174252][ T7201] ? netlink_sendmsg+0x650/0xb40 [ 160.174267][ T7201] ? skb_put+0x11b/0x210 [ 160.174286][ T7201] netlink_sendmsg+0x813/0xb40 [ 160.174310][ T7201] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.174329][ T7201] ? aa_sock_msg_perm+0xf1/0x1b0 [ 160.174349][ T7201] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 160.174370][ T7201] ____sys_sendmsg+0x972/0x9f0 [ 160.174390][ T7201] ? __might_fault+0xaf/0x130 [ 160.174414][ T7201] ? __pfx_____sys_sendmsg+0x10/0x10 [ 160.174440][ T7201] ? import_iovec+0x73/0xa0 [ 160.174462][ T7201] ___sys_sendmsg+0x2a5/0x360 [ 160.174480][ T7201] ? __lock_acquire+0x6b5/0x2cf0 [ 160.174502][ T7201] ? __pfx____sys_sendmsg+0x10/0x10 [ 160.174549][ T7201] ? __fget_files+0x2a/0x420 [ 160.174566][ T7201] ? __fget_files+0x3a0/0x420 [ 160.174590][ T7201] __x64_sys_sendmsg+0x1bd/0x2a0 [ 160.174611][ T7201] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 160.174637][ T7201] ? __pfx_ksys_write+0x10/0x10 [ 160.174661][ T7201] do_syscall_64+0x14d/0xf80 [ 160.174693][ T7201] ? trace_irq_disable+0x3b/0x140 [ 160.174707][ T7201] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.174721][ T7201] ? clear_bhb_loop+0x40/0x90 [ 160.174738][ T7201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.174752][ T7201] RIP: 0033:0x7f7c8099c799 [ 160.174766][ T7201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.174777][ T7201] RSP: 002b:00007f7c817a8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.174792][ T7201] RAX: ffffffffffffffda RBX: 00007f7c80c15fa0 RCX: 00007f7c8099c799 [ 160.174801][ T7201] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 160.174810][ T7201] RBP: 00007f7c817a8090 R08: 0000000000000000 R09: 0000000000000000 [ 160.174818][ T7201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 160.174825][ T7201] R13: 00007f7c80c16038 R14: 00007f7c80c15fa0 R15: 00007ffff865ae78 [ 160.174849][ T7201] [ 160.628622][ T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 160.636370][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 160.801022][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 160.808112][ T10] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 160.816449][ T10] usb 5-1: config 0 has no interface number 0 [ 160.823235][ T10] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 160.834990][ T9] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 160.844190][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.852352][ T9] usb 2-1: Product: syz [ 160.856519][ T9] usb 2-1: Manufacturer: syz [ 160.861158][ T9] usb 2-1: SerialNumber: syz [ 160.867420][ T10] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 160.876511][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.884549][ T10] usb 5-1: Product: syz [ 160.888693][ T10] usb 5-1: Manufacturer: syz [ 160.893377][ T10] usb 5-1: SerialNumber: syz [ 160.900001][ T10] usb 5-1: config 0 descriptor?? [ 160.908488][ T7195] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 160.921108][ T5955] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 161.082447][ T5955] usb 3-1: Using ep0 maxpacket: 8 [ 161.143594][ T7188] netlink: 40 bytes leftover after parsing attributes in process `syz.1.380'. [ 161.153888][ T7195] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 161.162735][ T5955] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.190762][ T5955] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 161.202450][ T5955] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 161.240271][ T5955] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice=10.40 [ 161.260579][ T5955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.282598][ T5955] usb 3-1: Product: syz [ 161.289867][ T5955] usb 3-1: Manufacturer: syz [ 161.306447][ T5955] usb 3-1: SerialNumber: syz [ 161.660874][ T7203] raw_sendmsg: syz.2.386 forgot to set AF_INET. Fix it! [ 162.000672][ T7248] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 162.007412][ T7248] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 162.019639][ T7248] vhci_hcd vhci_hcd.0: Device attached [ 162.030407][ T7250] vhci_hcd: connection closed [ 162.035008][ T1158] vhci_hcd vhci_hcd.0: stop threads [ 162.048343][ T1158] vhci_hcd vhci_hcd.0: release socket [ 162.054590][ T1158] vhci_hcd vhci_hcd.0: disconnect device [ 162.196098][ T10] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 162.208276][ T10] asix 5-1:0.188: probe with driver asix failed with error -71 [ 162.228316][ T10] usb 5-1: USB disconnect, device number 7 [ 162.639549][ T7271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.656428][ T7271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.334056][ T7297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.346287][ T7297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.507920][ T7300] delete_channel: no stack [ 163.514000][ T7300] delete_channel: no stack [ 163.734747][ T5955] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 163.780461][ T7306] fuse: Bad value for 'fd' [ 163.877121][ T5955] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 163.893857][ T9] usb 2-1: unit 5 not found! [ 163.906660][ T5955] usb 3-1: USB disconnect, device number 27 [ 163.917343][ T9] usb 2-1: unit 102 not found! [ 163.996502][ T5847] udevd[5847]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 164.099656][ T9] usb 2-1: USB disconnect, device number 25 [ 164.189998][ T7319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.213851][ T7319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.339917][ T7306] fuse: Bad value for 'fd' [ 164.349537][ T7326] tipc: Started in network mode [ 164.357084][ T7326] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 164.368698][ T7326] tipc: Enabled bearer , priority 10 [ 164.516905][ T7328] Invalid ELF header type: 3 != 1 [ 164.529299][ T7328] Invalid ELF header type: 3 != 1 [ 164.537866][ T7328] Invalid ELF header type: 2 != 1 [ 164.544986][ T7328] Invalid ELF header type: 3 != 1 [ 164.633468][ T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 164.796074][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.827313][ T9] usb 2-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 164.838361][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.863215][ T9] usb 2-1: config 0 descriptor?? [ 164.880936][ T50] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 164.887825][ T9] option 2-1:0.0: GSM modem (1-port) converter detected [ 164.936372][ T7348] netlink: 60 bytes leftover after parsing attributes in process `syz.0.418'. [ 165.054974][ T50] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 165.069548][ T50] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 165.082837][ T50] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 165.093230][ T9] usb 2-1: USB disconnect, device number 26 [ 165.095386][ T50] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 165.112307][ T9] option 2-1:0.0: device disconnected [ 165.119264][ T50] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 165.130079][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.150460][ T50] usb 5-1: config 0 descriptor?? [ 165.180783][ T5896] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 165.192275][ T7361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.202426][ T7361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.350815][ T5896] usb 3-1: Using ep0 maxpacket: 32 [ 165.357587][ T5896] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 165.366241][ T5896] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 165.377661][ T5896] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 165.386719][ T5896] usb 3-1: config 1 has no interface number 0 [ 165.392944][ T5896] usb 3-1: config 1 interface 1 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 165.403728][ T5896] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 165.416744][ T5896] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 165.426294][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.443537][ T5896] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 165.482770][ T9] tipc: Node number set to 4269801492 [ 165.582253][ T50] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 165.589726][ T50] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 165.597243][ T50] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 165.604702][ T50] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 165.612317][ T50] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 165.658801][ T50] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 165.761184][ T5896] snd_usb_pod 3-1:1.1: endpoint not available, using fallback values [ 165.780134][ T5896] snd_usb_pod 3-1:1.1: invalid control EP [ 165.798663][ T5896] snd_usb_pod 3-1:1.1: cannot start listening: -22 [ 165.813794][ T5896] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 165.832884][ T5896] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 165.874205][ T5842] usb 5-1: USB disconnect, device number 8 [ 165.941255][ T50] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 165.947058][ T7370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.961078][ T7370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.976937][ T5896] usb 3-1: USB disconnect, device number 28 [ 166.090786][ T50] usb 2-1: Using ep0 maxpacket: 32 [ 166.097677][ T50] usb 2-1: unable to get BOS descriptor or descriptor too short [ 166.106956][ T50] usb 2-1: config 128 has an invalid interface number: 34 but max is 0 [ 166.115588][ T50] usb 2-1: config 128 has no interface number 0 [ 166.122101][ T50] usb 2-1: config 128 interface 34 has no altsetting 0 [ 166.130967][ T50] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00ab, bcdDevice=99.38 [ 166.140115][ T50] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.148541][ T50] usb 2-1: Product: syz [ 166.152767][ T50] usb 2-1: Manufacturer: syz [ 166.157359][ T50] usb 2-1: SerialNumber: syz [ 166.841366][ T50] dvb-usb: found a 'Terratec Cinergy T USB XXS (HD)/ T3' in warm state. [ 166.879617][ T50] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 166.919171][ T50] dvbdev: DVB: registering new adapter (Terratec Cinergy T USB XXS (HD)/ T3) [ 166.942142][ T50] usb 2-1: media controller created [ 166.993852][ T50] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 167.030821][ T5888] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 167.171601][ T50] DVB: Unable to find symbol dib7000p_attach() [ 167.183550][ T5888] usb 5-1: device descriptor read/64, error -71 [ 167.202977][ T50] dvb-usb: no frontend was attached by 'Terratec Cinergy T USB XXS (HD)/ T3' [ 167.251394][ T7413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.263323][ T7413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.322299][ T50] rc_core: IR keymap rc-dib0700-rc5 not found [ 167.328574][ T50] Registered IR keymap rc-empty [ 167.333943][ T50] dvb-usb: could not initialize remote control. [ 167.340350][ T50] dvb-usb: Terratec Cinergy T USB XXS (HD)/ T3 successfully initialized and connected. [ 167.361031][ T50] usb 2-1: USB disconnect, device number 27 [ 167.424837][ T50] dvb-usb: Terratec Cinergy T USB XXS (HD)/ T3 successfully deinitialized and disconnected. [ 167.453646][ T5888] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 167.470939][ T5842] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 167.640822][ T5842] usb 3-1: Using ep0 maxpacket: 16 [ 167.652499][ T5842] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.670733][ T5842] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.682740][ T5842] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 167.697107][ T5842] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 167.710731][ T5842] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.731834][ T5842] usb 3-1: config 0 descriptor?? [ 167.915608][ T7430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.938827][ T7431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.949310][ T7430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.957870][ T7431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.019832][ T7430] netlink: 12 bytes leftover after parsing attributes in process `syz.0.443'. [ 168.019836][ T7434] netlink: 12 bytes leftover after parsing attributes in process `syz.0.443'. [ 168.043789][ T7430] ucma_write: process 350 (syz.0.443) changed security contexts after opening file descriptor, this is not allowed. [ 168.057018][ T7430] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.443'. [ 168.060333][ T7435] netlink: 60 bytes leftover after parsing attributes in process `syz.4.444'. [ 168.066521][ T9] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 168.150026][ T7410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.161951][ T7410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.249950][ T7435] overlayfs: statfs failed on './file0' [ 168.255794][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 168.267342][ T9] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 168.277231][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.285412][ T9] usb 2-1: Product: syz [ 168.289614][ T9] usb 2-1: Manufacturer: syz [ 168.295636][ T9] usb 2-1: SerialNumber: syz [ 168.304664][ T9] usb 2-1: config 0 descriptor?? [ 168.314991][ T9] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 168.378850][ T5842] usbhid 3-1:0.0: can't add hid device: -71 [ 168.391274][ T5842] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 168.403857][ T5842] usb 3-1: USB disconnect, device number 29 [ 168.454768][ T7441] autofs: Unknown parameter '' [ 168.774754][ T7425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.789265][ T7425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.190424][ T29] audit: type=1326 audit(1774429614.143:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7459 comm="syz.4.452" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0f27d9c799 code=0x0 [ 169.341113][ T5842] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 169.470800][ T5842] usb 3-1: device descriptor read/64, error -71 [ 169.622041][ T9] gspca_ov534_9: reg_w failed -71 [ 169.710824][ T5842] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 169.850783][ T5842] usb 3-1: device descriptor read/64, error -71 [ 169.950902][ T9] gspca_ov534_9: Unknown sensor 0000 [ 169.951018][ T9] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 169.966428][ T5842] usb usb3-port1: attempt power cycle [ 169.974043][ T9] usb 2-1: USB disconnect, device number 28 [ 170.322988][ T5842] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 170.351197][ T5842] usb 3-1: device descriptor read/8, error -71 [ 170.430854][ T5888] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 170.520776][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 170.582131][ T5888] usb 2-1: config 0 has no interfaces? [ 170.588575][ T5888] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 170.597737][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 170.605935][ T5888] usb 2-1: SerialNumber: syz [ 170.611004][ T5842] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 170.613716][ T5888] usb 2-1: config 0 descriptor?? [ 170.653881][ T5842] usb 3-1: device descriptor read/8, error -71 [ 170.680793][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 170.687527][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.698202][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 170.709309][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 170.719140][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 170.729076][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 170.743468][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 170.753405][ T9] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 170.761647][ T9] usb 5-1: Manufacturer: syz [ 170.766619][ T5842] usb usb3-port1: unable to enumerate USB device [ 170.775911][ T9] usb 5-1: config 0 descriptor?? [ 170.830425][ T7468] netlink: 'syz.1.455': attribute type 2 has an invalid length. [ 170.839541][ T5888] usb 2-1: USB disconnect, device number 29 [ 170.950309][ T7474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.959619][ T7474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.030766][ T9] rc_core: IR keymap rc-hauppauge not found [ 171.036692][ T9] Registered IR keymap rc-empty [ 171.046098][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 171.070890][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 171.092025][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 171.105159][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input28 [ 171.119524][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 171.140856][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 171.161067][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 171.180901][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 171.201113][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 171.220916][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 171.240828][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 171.260842][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 171.280894][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 171.300812][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 171.323222][ T9] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 171.332414][ T9] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 171.404274][ T7478] input: syz0 as /devices/virtual/input/input29 [ 171.449579][ T9] usb 5-1: USB disconnect, device number 11 [ 171.789129][ T7492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.799540][ T7492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.818211][ T7492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.829353][ T7492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.058230][ T7501] FAULT_INJECTION: forcing a failure. [ 172.058230][ T7501] name failslab, interval 1, probability 0, space 0, times 0 [ 172.094642][ T7503] FAULT_INJECTION: forcing a failure. [ 172.094642][ T7503] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.100275][ T7501] CPU: 1 UID: 0 PID: 7501 Comm: syz.2.468 Tainted: G L syzkaller #0 PREEMPT(full) [ 172.100317][ T7501] Tainted: [L]=SOFTLOCKUP [ 172.100323][ T7501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 172.100332][ T7501] Call Trace: [ 172.100339][ T7501] [ 172.100346][ T7501] dump_stack_lvl+0xe8/0x150 [ 172.100377][ T7501] should_fail_ex+0x412/0x560 [ 172.100402][ T7501] should_failslab+0xa8/0x100 [ 172.100419][ T7501] ? radix_tree_node_alloc+0x7e/0x3a0 [ 172.100440][ T7501] kmem_cache_alloc_noprof+0x87/0x650 [ 172.100471][ T7501] radix_tree_node_alloc+0x7e/0x3a0 [ 172.100496][ T7501] idr_get_free+0x2b3/0xa70 [ 172.100525][ T7501] idr_alloc_u32+0x18d/0x320 [ 172.100550][ T7501] ? __pfx_idr_alloc_u32+0x10/0x10 [ 172.100581][ T7501] idr_alloc+0x6e/0xd0 [ 172.100603][ T7501] shrinker_alloc+0x1f6/0xad0 [ 172.100620][ T7501] ? __raw_spin_lock_init+0x45/0x100 [ 172.100652][ T7501] alloc_super+0x789/0xab0 [ 172.100682][ T7501] sget_fc+0x329/0xa40 [ 172.100705][ T7501] ? __pfx_set_anon_super_fc+0x10/0x10 [ 172.100718][ T7501] ? __pfx_ovl_fill_super+0x10/0x10 [ 172.100738][ T7501] get_tree_nodev+0x2a/0x150 [ 172.100755][ T7501] vfs_get_tree+0x92/0x2a0 [ 172.100773][ T7501] do_new_mount+0x341/0xd30 [ 172.100791][ T7501] ? apparmor_capable+0x126/0x170 [ 172.100830][ T7501] ? __pfx_do_new_mount+0x10/0x10 [ 172.100849][ T7501] ? ns_capable+0x89/0xe0 [ 172.100878][ T7501] ? path_mount+0x690/0x10e0 [ 172.100902][ T7501] ? user_path_at+0xd4/0x160 [ 172.100924][ T7501] __se_sys_mount+0x31d/0x420 [ 172.100949][ T7501] ? __pfx___se_sys_mount+0x10/0x10 [ 172.100974][ T7501] ? __x64_sys_mount+0x20/0xc0 [ 172.100995][ T7501] do_syscall_64+0x14d/0xf80 [ 172.101014][ T7501] ? trace_irq_disable+0x3b/0x140 [ 172.101031][ T7501] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.101046][ T7501] ? clear_bhb_loop+0x40/0x90 [ 172.101065][ T7501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.101080][ T7501] RIP: 0033:0x7f7c8099c799 [ 172.101095][ T7501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.101107][ T7501] RSP: 002b:00007f7c817a8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 172.101125][ T7501] RAX: ffffffffffffffda RBX: 00007f7c80c15fa0 RCX: 00007f7c8099c799 [ 172.101136][ T7501] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 0000000000000000 [ 172.101145][ T7501] RBP: 00007f7c817a8090 R08: 00002000000000c0 R09: 0000000000000000 [ 172.101155][ T7501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 172.101164][ T7501] R13: 00007f7c80c16038 R14: 00007f7c80c15fa0 R15: 00007ffff865ae78 [ 172.101190][ T7501] [ 172.372328][ T7503] CPU: 1 UID: 0 PID: 7503 Comm: syz.4.469 Tainted: G L syzkaller #0 PREEMPT(full) [ 172.372353][ T7503] Tainted: [L]=SOFTLOCKUP [ 172.372375][ T7503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 172.372384][ T7503] Call Trace: [ 172.372390][ T7503] [ 172.372396][ T7503] dump_stack_lvl+0xe8/0x150 [ 172.372421][ T7503] should_fail_ex+0x412/0x560 [ 172.372442][ T7503] _copy_from_iter+0x1d3/0x1670 [ 172.372463][ T7503] ? rcu_is_watching+0x15/0xb0 [ 172.372481][ T7503] ? __pfx__copy_from_iter+0x10/0x10 [ 172.372504][ T7503] ? netlink_sendmsg+0x650/0xb40 [ 172.372522][ T7503] ? skb_put+0x11b/0x210 [ 172.372544][ T7503] netlink_sendmsg+0x6c0/0xb40 [ 172.372568][ T7503] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.372588][ T7503] ? aa_sock_msg_perm+0xf1/0x1b0 [ 172.372604][ T7503] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 172.372625][ T7503] ____sys_sendmsg+0x972/0x9f0 [ 172.372646][ T7503] ? __might_fault+0xaf/0x130 [ 172.372670][ T7503] ? __pfx_____sys_sendmsg+0x10/0x10 [ 172.372706][ T7503] ? import_iovec+0x73/0xa0 [ 172.372728][ T7503] ___sys_sendmsg+0x2a5/0x360 [ 172.372748][ T7503] ? __lock_acquire+0x6b5/0x2cf0 [ 172.372773][ T7503] ? __pfx____sys_sendmsg+0x10/0x10 [ 172.372818][ T7503] ? __fget_files+0x2a/0x420 [ 172.372836][ T7503] ? __fget_files+0x3a0/0x420 [ 172.372862][ T7503] __x64_sys_sendmsg+0x1bd/0x2a0 [ 172.372884][ T7503] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 172.372915][ T7503] ? __pfx_ksys_write+0x10/0x10 [ 172.372939][ T7503] do_syscall_64+0x14d/0xf80 [ 172.372957][ T7503] ? trace_irq_disable+0x3b/0x140 [ 172.372973][ T7503] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.372987][ T7503] ? clear_bhb_loop+0x40/0x90 [ 172.373004][ T7503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.373020][ T7503] RIP: 0033:0x7f0f27d9c799 [ 172.373035][ T7503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.373046][ T7503] RSP: 002b:00007f0f28b8d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.373062][ T7503] RAX: ffffffffffffffda RBX: 00007f0f28015fa0 RCX: 00007f0f27d9c799 [ 172.373073][ T7503] RDX: 0000000000000010 RSI: 0000200000000380 RDI: 0000000000000003 [ 172.373082][ T7503] RBP: 00007f0f28b8d090 R08: 0000000000000000 R09: 0000000000000000 [ 172.373091][ T7503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.373099][ T7503] R13: 00007f0f28016038 R14: 00007f0f28015fa0 R15: 00007fff9f1d1d48 [ 172.373123][ T7503] [ 172.996277][ T7526] hfs: can't find a HFS filesystem on dev nbd4 [ 173.159928][ T7533] FAULT_INJECTION: forcing a failure. [ 173.159928][ T7533] name failslab, interval 1, probability 0, space 0, times 0 [ 173.186343][ T7533] CPU: 0 UID: 0 PID: 7533 Comm: syz.4.478 Tainted: G L syzkaller #0 PREEMPT(full) [ 173.186372][ T7533] Tainted: [L]=SOFTLOCKUP [ 173.186378][ T7533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 173.186386][ T7533] Call Trace: [ 173.186409][ T7533] [ 173.186416][ T7533] dump_stack_lvl+0xe8/0x150 [ 173.186444][ T7533] should_fail_ex+0x412/0x560 [ 173.186469][ T7533] should_failslab+0xa8/0x100 [ 173.186493][ T7533] ? skb_clone+0x212/0x3a0 [ 173.186510][ T7533] kmem_cache_alloc_noprof+0x87/0x650 [ 173.186540][ T7533] skb_clone+0x212/0x3a0 [ 173.186558][ T7533] __netlink_deliver_tap+0x404/0x850 [ 173.186590][ T7533] ? netlink_deliver_tap+0x2e/0x1b0 [ 173.186610][ T7533] netlink_deliver_tap+0x19c/0x1b0 [ 173.186634][ T7533] netlink_sendskb+0x68/0x140 [ 173.186655][ T7533] netlink_unicast+0x3a3/0x9b0 [ 173.186681][ T7533] ? __pfx_netlink_unicast+0x10/0x10 [ 173.186708][ T7533] xfrm_alloc_userspi+0xa9d/0xd50 [ 173.186754][ T7533] ? __pfx_xfrm_alloc_userspi+0x10/0x10 [ 173.186772][ T7533] ? __nla_parse+0x40/0x60 [ 173.186798][ T7533] xfrm_user_rcv_msg+0x7ae/0xc40 [ 173.186827][ T7533] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 173.186882][ T7533] ? __pfx___mutex_trylock_common+0x10/0x10 [ 173.186903][ T7533] ? rcu_is_watching+0x15/0xb0 [ 173.186919][ T7533] ? trace_contention_end+0x3d/0x140 [ 173.186937][ T7533] ? __mutex_lock+0x320/0x1420 [ 173.186966][ T7533] netlink_rcv_skb+0x232/0x4b0 [ 173.186985][ T7533] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 173.187009][ T7533] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 173.187041][ T7533] ? netlink_deliver_tap+0x2e/0x1b0 [ 173.187059][ T7533] ? netlink_deliver_tap+0x2e/0x1b0 [ 173.187081][ T7533] xfrm_netlink_rcv+0x79/0x90 [ 173.187103][ T7533] netlink_unicast+0x80f/0x9b0 [ 173.187130][ T7533] ? __pfx_netlink_unicast+0x10/0x10 [ 173.187149][ T7533] ? netlink_sendmsg+0x650/0xb40 [ 173.187167][ T7533] ? skb_put+0x11b/0x210 [ 173.187191][ T7533] netlink_sendmsg+0x813/0xb40 [ 173.187219][ T7533] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.187242][ T7533] ? aa_sock_msg_perm+0xf1/0x1b0 [ 173.187264][ T7533] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 173.187288][ T7533] ____sys_sendmsg+0x972/0x9f0 [ 173.187311][ T7533] ? __might_fault+0xaf/0x130 [ 173.187338][ T7533] ? __pfx_____sys_sendmsg+0x10/0x10 [ 173.187369][ T7533] ? import_iovec+0x73/0xa0 [ 173.187394][ T7533] ___sys_sendmsg+0x2a5/0x360 [ 173.187415][ T7533] ? __lock_acquire+0x6b5/0x2cf0 [ 173.187439][ T7533] ? __pfx____sys_sendmsg+0x10/0x10 [ 173.187500][ T7533] ? __fget_files+0x2a/0x420 [ 173.187520][ T7533] ? __fget_files+0x3a0/0x420 [ 173.187550][ T7533] __x64_sys_sendmsg+0x1bd/0x2a0 [ 173.187575][ T7533] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 173.187610][ T7533] ? __pfx_ksys_write+0x10/0x10 [ 173.187637][ T7533] do_syscall_64+0x14d/0xf80 [ 173.187657][ T7533] ? trace_irq_disable+0x3b/0x140 [ 173.187674][ T7533] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.187690][ T7533] ? clear_bhb_loop+0x40/0x90 [ 173.187710][ T7533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.187725][ T7533] RIP: 0033:0x7f0f27d9c799 [ 173.187743][ T7533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.187756][ T7533] RSP: 002b:00007f0f28b8d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.187773][ T7533] RAX: ffffffffffffffda RBX: 00007f0f28015fa0 RCX: 00007f0f27d9c799 [ 173.187785][ T7533] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 173.187795][ T7533] RBP: 00007f0f28b8d090 R08: 0000000000000000 R09: 0000000000000000 [ 173.187804][ T7533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 173.187814][ T7533] R13: 00007f0f28016038 R14: 00007f0f28015fa0 R15: 00007fff9f1d1d48 [ 173.187842][ T7533] [ 173.647411][ T7539] FAULT_INJECTION: forcing a failure. [ 173.647411][ T7539] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.708333][ T7539] CPU: 0 UID: 0 PID: 7539 Comm: syz.4.481 Tainted: G L syzkaller #0 PREEMPT(full) [ 173.708359][ T7539] Tainted: [L]=SOFTLOCKUP [ 173.708365][ T7539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 173.708373][ T7539] Call Trace: [ 173.708380][ T7539] [ 173.708386][ T7539] dump_stack_lvl+0xe8/0x150 [ 173.708416][ T7539] should_fail_ex+0x412/0x560 [ 173.708440][ T7539] _copy_from_user+0x2d/0xb0 [ 173.708462][ T7539] ___sys_sendmsg+0x1c6/0x360 [ 173.708490][ T7539] ? __lock_acquire+0x6b5/0x2cf0 [ 173.708523][ T7539] ? __pfx____sys_sendmsg+0x10/0x10 [ 173.708557][ T7539] ? kstrtouint+0x6e/0xe0 [ 173.708595][ T7539] ? __fget_files+0x2a/0x420 [ 173.708620][ T7539] ? __fget_files+0x3a0/0x420 [ 173.708647][ T7539] __sys_sendmmsg+0x27c/0x4e0 [ 173.708674][ T7539] ? __pfx___sys_sendmmsg+0x10/0x10 [ 173.708692][ T7539] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 173.708732][ T7539] ? ksys_write+0x242/0x270 [ 173.708749][ T7539] ? __pfx_ksys_write+0x10/0x10 [ 173.708768][ T7539] __x64_sys_sendmmsg+0xa0/0xc0 [ 173.708790][ T7539] do_syscall_64+0x14d/0xf80 [ 173.708808][ T7539] ? trace_irq_disable+0x3b/0x140 [ 173.708823][ T7539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.708839][ T7539] ? clear_bhb_loop+0x40/0x90 [ 173.708856][ T7539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.708869][ T7539] RIP: 0033:0x7f0f27d9c799 [ 173.708885][ T7539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.708896][ T7539] RSP: 002b:00007f0f28b8d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 173.708913][ T7539] RAX: ffffffffffffffda RBX: 00007f0f28015fa0 RCX: 00007f0f27d9c799 [ 173.708923][ T7539] RDX: 0000000000000001 RSI: 0000200000000a80 RDI: 0000000000000003 [ 173.708931][ T7539] RBP: 00007f0f28b8d090 R08: 0000000000000000 R09: 0000000000000000 [ 173.708956][ T7539] R10: 000000000004c040 R11: 0000000000000246 R12: 0000000000000001 [ 173.708965][ T7539] R13: 00007f0f28016038 R14: 00007f0f28015fa0 R15: 00007fff9f1d1d48 [ 173.708989][ T7539] [ 173.933964][ T7542] netlink: 12 bytes leftover after parsing attributes in process `syz.1.483'. [ 173.950530][ T7542] netlink: 24 bytes leftover after parsing attributes in process `syz.1.483'. [ 174.171797][ T7559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.486'. [ 174.420846][ T5842] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 174.581703][ T5842] usb 3-1: Using ep0 maxpacket: 16 [ 174.597590][ T5842] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 174.610555][ T5842] usb 3-1: config 0 has no interface number 0 [ 174.617714][ T5842] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 174.642645][ T5842] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 174.660436][ T5842] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 174.684903][ T5842] usb 3-1: Product: syz [ 174.692999][ T5842] usb 3-1: SerialNumber: syz [ 174.709051][ T5842] usb 3-1: config 0 descriptor?? [ 174.720143][ T5842] cm109 3-1:0.8: invalid payload size 24, expected 4 [ 174.737836][ T5842] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input30 [ 175.322997][ T7590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.337698][ T7590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.378632][ T7590] openvswitch: netlink: Key type 143 is out of range max 32 [ 175.448791][ T7593] FAULT_INJECTION: forcing a failure. [ 175.448791][ T7593] name failslab, interval 1, probability 0, space 0, times 0 [ 175.481614][ T7593] CPU: 0 UID: 0 PID: 7593 Comm: syz.4.498 Tainted: G L syzkaller #0 PREEMPT(full) [ 175.481640][ T7593] Tainted: [L]=SOFTLOCKUP [ 175.481645][ T7593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 175.481654][ T7593] Call Trace: [ 175.481662][ T7593] [ 175.481668][ T7593] dump_stack_lvl+0xe8/0x150 [ 175.481697][ T7593] should_fail_ex+0x412/0x560 [ 175.481724][ T7593] should_failslab+0xa8/0x100 [ 175.481742][ T7593] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 175.481764][ T7593] ? __alloc_skb+0x186/0x7d0 [ 175.481783][ T7593] ? __alloc_skb+0x1d0/0x7d0 [ 175.481799][ T7593] ? __local_bh_enable_ip+0xd0/0x130 [ 175.481833][ T7593] __alloc_skb+0x1d0/0x7d0 [ 175.481857][ T7593] netlink_sendmsg+0x5d4/0xb40 [ 175.481887][ T7593] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.481909][ T7593] ? aa_sock_msg_perm+0xf1/0x1b0 [ 175.481926][ T7593] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 175.481950][ T7593] ____sys_sendmsg+0x972/0x9f0 [ 175.481974][ T7593] ? __might_fault+0xaf/0x130 [ 175.482001][ T7593] ? __pfx_____sys_sendmsg+0x10/0x10 [ 175.482030][ T7593] ? import_iovec+0x73/0xa0 [ 175.482054][ T7593] ___sys_sendmsg+0x2a5/0x360 [ 175.482074][ T7593] ? __lock_acquire+0x6b5/0x2cf0 [ 175.482099][ T7593] ? __pfx____sys_sendmsg+0x10/0x10 [ 175.482163][ T7593] ? __fget_files+0x2a/0x420 [ 175.482182][ T7593] ? __fget_files+0x3a0/0x420 [ 175.482209][ T7593] __x64_sys_sendmsg+0x1bd/0x2a0 [ 175.482235][ T7593] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 175.482263][ T7593] ? __pfx_ksys_write+0x10/0x10 [ 175.482289][ T7593] do_syscall_64+0x14d/0xf80 [ 175.482311][ T7593] ? trace_irq_disable+0x3b/0x140 [ 175.482327][ T7593] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.482343][ T7593] ? clear_bhb_loop+0x40/0x90 [ 175.482362][ T7593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.482378][ T7593] RIP: 0033:0x7f0f27d9c799 [ 175.482395][ T7593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.482408][ T7593] RSP: 002b:00007f0f28b8d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 175.482425][ T7593] RAX: ffffffffffffffda RBX: 00007f0f28015fa0 RCX: 00007f0f27d9c799 [ 175.482436][ T7593] RDX: 0000000000000800 RSI: 0000200000000380 RDI: 0000000000000003 [ 175.482445][ T7593] RBP: 00007f0f28b8d090 R08: 0000000000000000 R09: 0000000000000000 [ 175.482455][ T7593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.482463][ T7593] R13: 00007f0f28016038 R14: 00007f0f28015fa0 R15: 00007fff9f1d1d48 [ 175.482489][ T7593] [ 176.423782][ T5888] kernel read not supported for file /virtual_nci (pid: 5888 comm: kworker/1:3) [ 176.531013][ T7620] netlink: 14 bytes leftover after parsing attributes in process `syz.1.506'. [ 176.544499][ T7620] hsr_slave_0: left promiscuous mode [ 176.568445][ T7620] hsr_slave_1: left promiscuous mode [ 176.857630][ T7624] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 176.896382][ T7624] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 177.150292][ C0] cm109 3-1:0.8: cm109_urb_irq_callback: urb status -71 [ 177.157335][ C0] ------------[ cut here ]------------ [ 177.163142][ C0] URB ffff888027654b00 submitted while active [ 177.169239][ C0] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x7b/0x18b0, CPU#0: ksoftirqd/0/15 [ 177.179259][ C0] Modules linked in: [ 177.183452][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 177.194248][ C0] Tainted: [L]=SOFTLOCKUP [ 177.198590][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 177.208676][ C0] RIP: 0010:usb_submit_urb+0x7e/0x18b0 [ 177.214170][ C0] Code: 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 27 47 eb fa 49 83 3e 00 74 40 e8 bc d8 81 fa 48 8d 3d a5 f6 1c 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 a1 d8 81 fa eb 05 e8 9a d8 [ 177.233797][ C0] RSP: 0018:ffffc900001477a0 EFLAGS: 00010087 [ 177.239905][ C0] RAX: ffffffff8744b2e4 RBX: ffff888027654b00 RCX: 0000000000040000 [ 177.247908][ C0] RDX: ffffc90002051000 RSI: ffff888027654b00 RDI: ffffffff9061a990 [ 177.255908][ C0] RBP: 000000000000000f R08: 0000000000000003 R09: 0000000000000004 [ 177.263894][ C0] R10: dffffc0000000000 R11: fffff52000028ef4 R12: 0000000000000820 [ 177.271870][ C0] R13: ffff88807a3b4830 R14: ffff888027654b08 R15: dffffc0000000000 [ 177.279836][ C0] FS: 0000000000000000(0000) GS:ffff888124ff2000(0000) knlGS:0000000000000000 [ 177.288755][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 177.295331][ C0] CR2: 00007f0f27de9e80 CR3: 000000002667c000 CR4: 00000000003526f0 [ 177.303308][ C0] Call Trace: [ 177.306592][ C0] [ 177.309520][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 177.315347][ C0] ? ___ratelimit+0x58c/0x8d0 [ 177.320025][ C0] cm109_urb_irq_callback+0x6e2/0xc90 [ 177.325398][ C0] __usb_hcd_giveback_urb+0x376/0x540 [ 177.330767][ C0] dummy_timer+0xbc0/0x4650 [ 177.335270][ C0] ? pwq_dec_nr_in_flight+0xbc1/0xf60 [ 177.340649][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 177.345625][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 177.350610][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 177.355647][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 177.360582][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 177.365510][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 177.371322][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 177.376249][ C0] __hrtimer_run_queues+0x3c0/0xa20 [ 177.381452][ C0] hrtimer_run_softirq+0x17a/0x240 [ 177.386592][ C0] handle_softirqs+0x22a/0x840 [ 177.391356][ C0] ? schedule+0x90/0x360 [ 177.395596][ C0] ? run_ksoftirqd+0x36/0x60 [ 177.400180][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 177.405210][ C0] run_ksoftirqd+0x36/0x60 [ 177.409617][ C0] smpboot_thread_fn+0x541/0xa50 [ 177.414553][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 177.419579][ C0] kthread+0x388/0x470 [ 177.423643][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 177.429091][ C0] ? __pfx_kthread+0x10/0x10 [ 177.433758][ C0] ret_from_fork+0x51e/0xb90 [ 177.438348][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 177.443475][ C0] ? __switch_to+0xc7d/0x1420 [ 177.448151][ C0] ? __pfx_kthread+0x10/0x10 [ 177.452751][ C0] ret_from_fork_asm+0x1a/0x30 [ 177.457513][ C0] [ 177.460532][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 177.467805][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 177.479464][ C0] Tainted: [L]=SOFTLOCKUP [ 177.484754][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 177.494904][ C0] Call Trace: [ 177.498192][ C0] [ 177.501216][ C0] vpanic+0x56c/0xa60 [ 177.505204][ C0] ? __pfx__printk+0x10/0x10 [ 177.509794][ C0] ? __pfx_vpanic+0x10/0x10 [ 177.514301][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 177.519601][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 177.524808][ C0] panic+0xc5/0xd0 [ 177.528534][ C0] ? __pfx_panic+0x10/0x10 [ 177.532970][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 177.538004][ C0] __warn+0x315/0x4c0 [ 177.541998][ C0] ? usb_submit_urb+0x7b/0x18b0 [ 177.546869][ C0] ? usb_submit_urb+0x7b/0x18b0 [ 177.551735][ C0] __report_bug+0x29a/0x540 [ 177.556249][ C0] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 177.561639][ C0] ? usb_submit_urb+0x7b/0x18b0 [ 177.566505][ C0] ? __pfx___report_bug+0x10/0x10 [ 177.571531][ C0] ? mark_lock+0x180/0x190 [ 177.575962][ C0] ? dev_printk_emit+0xee/0x140 [ 177.580821][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 177.585805][ C0] report_bug_entry+0x19a/0x290 [ 177.590862][ C0] ? usb_submit_urb+0x7e/0x18b0 [ 177.595720][ C0] ? usb_submit_urb+0x83/0x18b0 [ 177.600573][ C0] handle_bug+0xce/0x200 [ 177.604817][ C0] exc_invalid_op+0x1a/0x50 [ 177.609350][ C0] asm_exc_invalid_op+0x1a/0x20 [ 177.614226][ C0] RIP: 0010:usb_submit_urb+0x7e/0x18b0 [ 177.619702][ C0] Code: 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 27 47 eb fa 49 83 3e 00 74 40 e8 bc d8 81 fa 48 8d 3d a5 f6 1c 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 a1 d8 81 fa eb 05 e8 9a d8 [ 177.639306][ C0] RSP: 0018:ffffc900001477a0 EFLAGS: 00010087 [ 177.645392][ C0] RAX: ffffffff8744b2e4 RBX: ffff888027654b00 RCX: 0000000000040000 [ 177.653374][ C0] RDX: ffffc90002051000 RSI: ffff888027654b00 RDI: ffffffff9061a990 [ 177.661349][ C0] RBP: 000000000000000f R08: 0000000000000003 R09: 0000000000000004 [ 177.669315][ C0] R10: dffffc0000000000 R11: fffff52000028ef4 R12: 0000000000000820 [ 177.677277][ C0] R13: ffff88807a3b4830 R14: ffff888027654b08 R15: dffffc0000000000 [ 177.685247][ C0] ? usb_submit_urb+0x74/0x18b0 [ 177.690132][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 177.695960][ C0] ? ___ratelimit+0x58c/0x8d0 [ 177.700642][ C0] cm109_urb_irq_callback+0x6e2/0xc90 [ 177.706029][ C0] __usb_hcd_giveback_urb+0x376/0x540 [ 177.711397][ C0] dummy_timer+0xbc0/0x4650 [ 177.715919][ C0] ? pwq_dec_nr_in_flight+0xbc1/0xf60 [ 177.721300][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 177.726246][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 177.731197][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 177.736123][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 177.741049][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 177.745974][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 177.751799][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 177.756726][ C0] __hrtimer_run_queues+0x3c0/0xa20 [ 177.761925][ C0] hrtimer_run_softirq+0x17a/0x240 [ 177.767050][ C0] handle_softirqs+0x22a/0x840 [ 177.771812][ C0] ? schedule+0x90/0x360 [ 177.776050][ C0] ? run_ksoftirqd+0x36/0x60 [ 177.780645][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 177.785681][ C0] run_ksoftirqd+0x36/0x60 [ 177.790087][ C0] smpboot_thread_fn+0x541/0xa50 [ 177.795119][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 177.800168][ C0] kthread+0x388/0x470 [ 177.804252][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 177.809733][ C0] ? __pfx_kthread+0x10/0x10 [ 177.814324][ C0] ret_from_fork+0x51e/0xb90 [ 177.818924][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 177.824039][ C0] ? __switch_to+0xc7d/0x1420 [ 177.828722][ C0] ? __pfx_kthread+0x10/0x10 [ 177.833311][ C0] ret_from_fork_asm+0x1a/0x30 [ 177.838077][ C0] [ 177.841599][ C0] Kernel Offset: disabled [ 177.845921][ C0] Rebooting in 86400 seconds..