last executing test programs: 9m50.742144036s ago: executing program 0 (id=511): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r1, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4800}, 0x4044000) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r3, &(0x7f0000009780)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000600)={0x10, 0x0, r4}, 0x10) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f0000000ac0)=ANY=[@ANYBLOB="407f04000000677afef2"], 0x0, 0x0}) 9m50.153858967s ago: executing program 0 (id=517): sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0xc004080) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0xe, 0xf, 0x57}, 0x2c) socket$nl_generic(0x10, 0x3, 0x10) 9m49.974551898s ago: executing program 0 (id=518): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, 0x0}}], 0x1, 0x24008001) 9m49.795820861s ago: executing program 0 (id=519): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000080)={@broadcast, @empty, 0x1, "e09558a13f0e430fd58f897c39d7ba4919ac4e79a7678442c14cad075b454e67", 0x0, 0x7fff, 0x8, 0x8}, 0x3c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1ec) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x101000, 0xc1) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8018, 0x1f7) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x201, 0x4000003e, r1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8}) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc50d440829c82ae", 0x0, 0x0, 0x0, 0x2}, 0x3c) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) llistxattr(&(0x7f00000000c0)='./sys/file0\x00', &(0x7f0000000100)=""/181, 0xb5) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/netdevsim/del_device\x00', 0x444081, 0x20d) write(r4, &(0x7f0000000500)='1', 0x1) 9m49.326608976s ago: executing program 0 (id=521): r0 = openat(0xffffffffffffff9c, 0x0, 0x101c42, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xfffffee2) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000480)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000007d00), r3) 9m48.900696858s ago: executing program 0 (id=524): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x8002, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000440)={'pcl724\x00', [0x300, 0xc0000000, 0x2, 0x400, 0x3, 0x800005, 0x7, 0x6, 0x8, 0x56, 0x2, 0x1, 0x8001, 0xfffffffc, 0x10000b, 0x0, 0x5, 0x4007a, 0x3, 0xf4, 0x89, 0x0, 0x7f, 0x3000000, 0x5, 0xe65, 0x1, 0x2000004, 0xa6b3, 0x0, 0x45]}) (fail_nth: 4) 9m48.636195039s ago: executing program 32 (id=524): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x8002, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000440)={'pcl724\x00', [0x300, 0xc0000000, 0x2, 0x400, 0x3, 0x800005, 0x7, 0x6, 0x8, 0x56, 0x2, 0x1, 0x8001, 0xfffffffc, 0x10000b, 0x0, 0x5, 0x4007a, 0x3, 0xf4, 0x89, 0x0, 0x7f, 0x3000000, 0x5, 0xe65, 0x1, 0x2000004, 0xa6b3, 0x0, 0x45]}) (fail_nth: 4) 8m31.022586314s ago: executing program 1 (id=1027): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="2e9b3d0007e03dd65193dfb6c575963f8848", 0x12}], 0x1) 8m30.788474085s ago: executing program 1 (id=1023): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000480)={{0x5, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x80000, 0xf, 0xfffffffd, 0x592e, 0x9, 0x0, 0xfffffffe, 0x4, 0x7, 0xffffff81, 0x7, 0x7ff, 0xfffffffe, 0xfffffffffffffffe, 0x40, 0x0, 0x4, 0x100000001, 0x8, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x400, 0x0, 0x20000000, 0x0, 0x7ff, 0x0, 0x2, 0x80000000000000, 0x2, 0xfffffffffffffffd, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x103, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffc, 0x0, 0x0, 0x49, 0xfffffffffffffffa, 0x0, 0x401, 0x0, 0x8000000000000002, 0x0, 0x0, 0x0, 0x400000000000, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x2000000000000, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0x1, 0x8, 0x412, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0xb5, 0x4, 0x80000000, 0x0, 0x0, 0x0, 0x9, 0x7, 0x0, 0x100000000]}) 8m30.738296619s ago: executing program 1 (id=1025): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/user\x00') open_by_handle_at(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64=r0], 0x101c40) 8m30.659402471s ago: executing program 1 (id=1026): mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/os_desc/qw_sign\x00', 0x20801, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, r1) setpgid(0x0, r1) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x4, @local}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@cswp={0x58, 0x114, 0x7, {{0x0, 0x1}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xe, 0x2, 0x1}}], 0x58}, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01864c2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r2, 0xc01864cd, &(0x7f00000002c0)={0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r5 = fanotify_init(0xf00, 0x1) fanotify_mark(r5, 0x105, 0x40009965, r4, 0x0) mq_notify(r4, &(0x7f0000000140)={0x0, 0x3a, 0x9c2084d4ca1ccfc1, @thr={&(0x7f0000000180)="9f60d052859b996e2106fcfe9a113afbef32c32a7177a383612c121b7529532d1e46f346e3767ee4ed095548dabec1326c2d78f8c9bc50ee2326a11329cc391650eed44ffefcfb41ad1300422603c74027f08245d9b649ffc9ad2c2f2222847e3bb9a2b81eb547c2cb8a928d779c9bf27cbbed81930968711441bd5e033000cd78d16ab25299e1b0e7", &(0x7f0000000240)="bdfc21274282603aa9e3fcc9cda1675e4de47ba0cb4af984826d1039a7db5bfb624aa607dd77b2b48d25dcf044e4bc356d3629e4625c72fcc45d992b635326d47fc630ca582590532d6a2e84f45e3dc2f4226f71c7fbde6690412fb07aff90df2770f4a7e1d0ce229668823ecfd7d4f1efe636bf4be7234fe48080c94468647f3b4456e3b2f3952cd2c9993721e252e071caed120acd1e97cdeff137da9f04ec97fde4957927742d3b7cb2c3"}}) stat(&(0x7f0000001ac0)='./config/usb_gadget/g1/os_desc/qw_sign\x00', &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000001b80)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xffffffffffffffff}}, './config/file0\x00'}) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000b80)='./config/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001a80), 0x20001a, &(0x7f0000001bc0)={'trans=virtio,', {[{@debug={'debug', 0x3d, 0x7f}}, {@access_uid={'access', 0x3d, 0xee01}}, {@access_uid={'access', 0x3d, r6}}, {@posixacl}, {@loose}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@dont_measure}, {@uid_gt={'uid>', r7}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@flag='lazytime'}]}}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x49, &(0x7f0000000b40)=0xfffffffe, 0x4) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="d3"], 0x32) 8m30.552106518s ago: executing program 1 (id=1029): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001002dbd700000000000e0000001000000000000000000000000ff01000000000000", @ANYBLOB="000000000000000000000000000000000000000032000000ff010000000000000000000000000001"], 0x1a4}}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x8004) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) (fail_nth: 4) 8m30.23250823s ago: executing program 1 (id=1031): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0xbc129e7eab79ddfa) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x2e, 0x61, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x98, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000003c0)=@new_dev={0x1, 0x518, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x102}}}, &(0x7f0000000500)) landlock_restrict_self(r1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0xa) landlock_restrict_self(r2, 0x3) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000140)={0x100, r3}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x4) r4 = landlock_create_ruleset(&(0x7f0000000240)={0x20, 0x0, 0x1}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x81c0, 0x6) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0/file0\x00', 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000080), 0x10, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="03002368", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=r5, @ANYRES64=r6/1000+10000, @ANYBLOB="000000c001000000020000000202000035b8b6bca8c00b3d"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x24008801) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000450)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000401e09030001000102000109022700010100c0320904000003ffffff00070581034000010705020240"], 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 8m30.02672069s ago: executing program 33 (id=1031): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0xbc129e7eab79ddfa) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x2e, 0x61, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x98, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000003c0)=@new_dev={0x1, 0x518, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x102}}}, &(0x7f0000000500)) landlock_restrict_self(r1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0xa) landlock_restrict_self(r2, 0x3) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000140)={0x100, r3}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x4) r4 = landlock_create_ruleset(&(0x7f0000000240)={0x20, 0x0, 0x1}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x81c0, 0x6) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0/file0\x00', 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000080), 0x10, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="03002368", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=r5, @ANYRES64=r6/1000+10000, @ANYBLOB="000000c001000000020000000202000035b8b6bca8c00b3d"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x24008801) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000450)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000401e09030001000102000109022700010100c0320904000003ffffff00070581034000010705020240"], 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 8m16.26968905s ago: executing program 5 (id=1104): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000585000/0x3000)=nil, 0x301f) 8m16.21411704s ago: executing program 5 (id=1105): sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0xc004080) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0xe, 0xf, 0x57}, 0x2c) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000020c0)={0x28, 0x44, 0x1, 0x70bd29, 0x4, {0x1}, [@nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x75, 0x0, 0x1, [@nested={0xc, 0x80, 0x0, 0x1, [@nested={0x8, 0x129, 0x0, 0x1, [@nested={0x4, 0x57}]}]}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) 8m16.136231143s ago: executing program 5 (id=1106): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) pidfd_send_signal(r0, 0x1b, &(0x7f00000000c0)={0x5, 0x7, 0x2}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000002080)=0x99, 0x23b) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000380)='2', 0x1) r3 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101175129205705092006c70102010109022400010200100009045819028ab53800090506020001000006090582020002"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001080)={0x6c, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@nested={0x4c, 0xf8, 0x0, 0x1, [@typed={0x14, 0x133, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @nested={0x31, 0xfb, 0x0, 0x1, [@generic="b5416b2b80f72979594745504f3a0aa6b036f86ce32d83591c6224e53de96804e6172083eaaa90cf56dd042b72"]}]}]}, @nested={0x8, 0x5, 0x0, 0x1, [@nested={0x4, 0x60}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x5}, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x7a, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f01000000000000000000063d1b0000000c241b3500f3ff0005008005090581030002000000090401"], 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r4, &(0x7f0000000cc0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c80)={&(0x7f0000000980)={0x2bc, r5, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x13f, 0x33}}}}, [@NL80211_ATTR_IE={0x267, 0x2a, [@perr={0x84, 0xb6, {0x8, 0xc, [{{0x0, 0x1}, @broadcast, 0x2, @value, 0x40}, {{0x0, 0x1}, @broadcast, 0x6, @value=@device_b, 0x19}, {{0x0, 0x1}, @broadcast, 0x4, @value=@device_b, 0x1c}, {{}, @device_b, 0x0, @void, 0x11}, {{}, @device_b, 0x5a, @void, 0x11}, {{}, @device_b, 0x3, @void, 0x4}, {{0x0, 0x1}, @device_a, 0x23, @value=@device_b, 0xa}, {{}, @device_b, 0x7ff, @void, 0x13}, {{}, @broadcast, 0xe, @void, 0x26}, {{}, @broadcast, 0x0, @void, 0xf}, {{}, @device_a, 0x1, @void, 0x1b}, {{}, @device_b, 0x4, @void, 0x3d}]}}, @tim={0x5, 0xf5, {0x8, 0x3f, 0xe, "6d9cee171c2a36c3c9a1ba0364d88f43ebc75e513a28bbd139ec31e96749b61c3d72d8e23869d8590cfd855a79815a4f1db6cc6d70a2ea27b51a573a708cfdf04b2023e82a61e6b6e828211b7baf47989b3d5af9ff68e0b6b0174e7c4b2ab8d6f6e109aad062603f9f049a9ed5c80f49e87350ea2f0f8f17c7f842d0f5ff1194e4416e52cc8b5399bb56810a5e87d31c1d22690f31725f635a58f24a8f6b5b8c3225e66677916d2d0d6c02fee121677e5f48b6830c6426f1ca25296a0a25666877ffe12edbc4c2bbb47ce8257217af4e8b1300046164c74220f879aead4dee6e773e21acf9ae14ec6ec742c75d7ffee3154f"}}, @measure_req={0x26, 0xa4, {0xb, 0xb1, 0xff, "0f78fa8b5fc25a70f1ebcfb3a75e91da337205907ddf840a4184213859acc10ad750f23511d0f1f1febffe153106c88086bc42073bcd90ca9b483a5385b4b4b3a130401402f1d7e77c9004ede8122b7fa5ef4e4765a7c9cb8b7ac3ddb38ad07d0fba241f2e05548a11c8feaee0168b27694f77dec9a0cf65790c1adedb316575ee7f6305ab467986ae02472781d501630096ef5ce8d8b0a7d3312202214d05af3a"}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x0, 0x0, 0x8}}, @mesh_chsw={0x76, 0x6, {0x5, 0x5, 0x6, 0x5}}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x67}, @NL80211_ATTR_IE={0xc, 0x2a, [@cf={0x4, 0x6, {0x0, 0x0, 0xf9}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x58}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x480c1}, 0x80) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io$uac2(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000580)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', &(0x7f0000000240), &(0x7f0000000280)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/midi1_num_groups\x00', 0x4f, 0x5) r6 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/midi1_num_groups\x00', 0x1, 0x0) write(r6, &(0x7f0000000000)="320d9f925ab0787ed97f2ac837bd4303c0e8f1e341b60b04a50e15d89f41a26edf0cb4a8663144a6303704b23b4c5c256d1407498edb1322eab5bebf36abbd7310095969b2d02bee1a96f00363317743602ad854c4298e6aec01edb1ce498c4c27d396eb49a7251cbbab9e", 0x6b) symlinkat(&(0x7f0000000880)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000008c0)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00') sendmsg$NFT_BATCH(r4, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELSETELEM={0x28, 0xe, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWFLOWTABLE={0x104, 0x16, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_FLOWTABLE_HOOK={0xac, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x63}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vxcan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'geneve1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x154}, 0x1, 0x0, 0x0, 0x40}, 0x20004050) r7 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r7, &(0x7f0000000940)='dummy_udc.0', 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) 8m13.939064225s ago: executing program 5 (id=1118): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='file0\x00', 0x42, 0x1ff) ftruncate(r0, 0xf4240) mkdir(&(0x7f0000000180)='./config\x00', 0x1ff) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x8001}], 0x1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x10, @mcast2}, 0x1c) sendto$inet6(r2, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_clone3(&(0x7f0000002100)={0x1000000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) write(r3, &(0x7f00000003c0)='file0', 0x5) 8m13.46454975s ago: executing program 5 (id=1121): r0 = socket$netlink(0x10, 0x3, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./lower\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./lower/file1\x00', 0x42, 0x1ff) mount(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000340)='lowerdir=lower,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') unlinkat(0xffffffffffffff9c, &(0x7f00000004c0)='./mnt/file1\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./my_configfs/dlm/cluster1/comms/1/addr\x00', 0x1, 0x0) write(r2, &(0x7f0000001100)="0200"/128, 0x80) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, r0) umount2(&(0x7f0000000580)='./mnt\x00', 0x0) mount(0x0, &(0x7f00000005c0)='./mnt\x00', &(0x7f0000000600)='overlay\x00', 0x0, &(0x7f0000000640)='lowerdir=lower,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getown(r4, 0x9) fcntl$setsig(r3, 0xa, 0x21) fcntl$setlease(r3, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB='lock me'], 0x9) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x3) 8m13.144236968s ago: executing program 5 (id=1124): sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0xc004080) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0xe, 0xf, 0x57}, 0x2c) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000020c0)={0x28, 0x44, 0x1, 0x70bd29, 0x4, {0x1}, [@nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x75, 0x0, 0x1, [@nested={0xc, 0x80, 0x0, 0x1, [@nested={0x8, 0x129, 0x0, 0x1, [@nested={0x4, 0x57}]}]}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) 8m12.647801597s ago: executing program 34 (id=1124): sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0xc004080) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0xe, 0xf, 0x57}, 0x2c) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000020c0)={0x28, 0x44, 0x1, 0x70bd29, 0x4, {0x1}, [@nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x75, 0x0, 0x1, [@nested={0xc, 0x80, 0x0, 0x1, [@nested={0x8, 0x129, 0x0, 0x1, [@nested={0x4, 0x57}]}]}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) 26.724365348s ago: executing program 2 (id=4047): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x4) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000240)="00214500002c00000000400600000a0000010a00000200500050000000010000f801601003000000000001010101", 0x2e}], 0x1, 0x0, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="002145000014000b0000400600000a0000010a000002005000500000000200000002601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) (fail_nth: 5) 26.616963298s ago: executing program 2 (id=4048): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120150026ae63240cd0c800086b201020301090224000202ecb08d0904"], &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) sendmmsg$inet(r2, &(0x7f00000016c0)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}}], 0x1, 0x2800c844) sendmsg$inet6(r2, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x84) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f00000001c0)=0x4000, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$can_raw(r4, &(0x7f0000000400)={&(0x7f00000000c0)={0x1d, r5}, 0x10, &(0x7f00000003c0)={&(0x7f0000000380)=@can={{0x0, 0x1, 0x1}, 0x2, 0x1, 0x0, 0x0, "67a71ec6ffe75ca1"}, 0x10}, 0x1, 0x0, 0x0, 0x4048840}, 0xc000) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000001080)={@private1, @dev={0xfe, 0x80, '\x00', 0xd}, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x0, 0x2, 0x6, 0x100, 0x1, 0x1000000, r5}) sendmmsg$inet6(r3, &(0x7f0000002ec0)=[{{&(0x7f0000000140)={0xa, 0x4e24, 0x80000001, @empty, 0x8}, 0x1c, &(0x7f0000000300), 0x0, &(0x7f0000000640)}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000008c0)="589d8f2fa6a73335cbf2383792aed3688a22300fc483bf1d19cb50d68ef3e7d51030ff376e256f60f80a59c352c17624f8ba18631f106cfc3a10bbf476fdd635ffb6866aa3c66dddb33daa5dd8a0341917d9e93ac5660734d1b87f055a9c8baf3368d0c5b60777608ec004aa0db174cc31a2f76a79e1585a8bb64dd63f42b49533d502dd92f444470d463a5403378065658aeaee295167977f662f99a726a58d8e2a6d79c2b727a317ef3bf35597ad3f7aac2f09c7b4d766acb81dbd2d0fda96450b8998bb3dc1cda6979e79e32d846fbc26d3d0303de7", 0xd7}, {&(0x7f0000000b00)="fe632125f7b1915e124b14b394f76999e35dd29eb53188a71d6fa6b6bbb4b7cbb12669e8fa1f996606013571f0b1c1600a1be8032a0adc5f157488c59ea9694e548f7bf02628dc3f6e7ec21b727ccbdddd5df4f2", 0x54}], 0x2}}, {{&(0x7f0000000180)={0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c, &(0x7f0000002a00)=[{&(0x7f0000000c40)="bfb944dca9d1915f436ab347074f82328f7e5192a7abe5f30f6a1986265894b4f9ed99b37477b9e672733743a76593444243a693cd7eb7676d1cdbcad6adc31f75f0302f52556b63f683bd0ba7fe99fbc09ec312fc8a35306bff125c8ea2631ed982ade659229385d56092ffa0239602ad0c1a6d0f4b2991af8a64da5f6f4e8abc54df69d48033c5c6329400419d4c7b58cc621507ec3f427b60a24d4202a6a09acc7c2662bcc2333ec3cda12ad06b31d217f4e04b615557f6fb4df2690eeaaecc3bd6", 0xc3}, {0xfffffffffffffffe}, {&(0x7f0000000dc0)="4a1a8bc154559da9f30942b0066218c26f0ee493feb69a5f4307991f0c73b3141526389b25c557f0581295cdd2459cc04a76855bfbc6194421388711c6c4ada770df02571229aa5fde5980baecebca251c64324c8b28262d1785ca232e4d1fa6f367f33be1deca098c759b3188403df31ec00f7abadb0e36a5d6aad118d0294e034708e4df0bb090240fa6bc5de86cc596b525384eddda6b1877c89be4a9dc5ebd74ecf8342f47b83b23dd1e707afeefe9368925ef0498d81829523c1317b7011735f59319c60de1b05f09b8ebc54c09e40efb295108a8ef2074d078d93bfb04d2649732510b611626e05c0d3bd4", 0xee}, {&(0x7f00000019c0)="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", 0xfff}, {&(0x7f00000029c0)="b8d9ee243452edaac26738ef4f90509b4d48674cef3c5b", 0x17}], 0x5, &(0x7f0000002a80)=ANY=[@ANYBLOB="20000000004a7fd5b08296924bf7c80af037268800000029000000040000003b"], 0x20}}, {{&(0x7f0000002ac0)={0xa, 0x4e20, 0x9, @loopback, 0x55e2}, 0x1c, &(0x7f0000002e40)=[{&(0x7f0000002b00)="3234ad5e5d8b030bb336027f5fdd4635a0219f396328686c34093b3dcbd455f17d699eca0b806d750418707f79b3538fe02699a1962ccea1d9eb2b53bd86cf05dd916a7a3c8e2efc871b373c4b8a02061583f7e1c872b0b7715c605b84a43d40a247a318e242bd46b2fe21158c768cc3b0e0d8dc1d1fefc483bf08f674d1377fd734f309c12faec4b2d16d38f0ae07015521882f3de01faa287cfb054d5e524054de8ee837b5a29289e007859990279134a7541d46a02f7147c826cc3511534c958efad803cfd9728ffbff05b307eff96fd4808692043357807e", 0xda}, {&(0x7f0000000ec0)="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", 0x192}, {&(0x7f0000002d00)="5d202a0461f8a9b54e6977678e650ff34f1f6ab1f8b6a5bc66617471aba27de25c8906a0f4f8f38199a6a373d1305c2608fd1b2189151b69e438f406c420299958d4085a9bd15bc4b036327e5ffee2dabda419d852ffc33cdd0d3aa07ebbc884cc95ff7a2dc4e8304a75e38ead463e49649b3aac765a9e6b3cb6", 0x7a}, {&(0x7f0000002d80)="0255975fa63f64ed69eea9d3b2855e5baab4611fb36144c8caeb8df33f2c582d0570f4a96feee3a7d0dd45434ebe4d9bbbd440b0753c4d7afabd26c3a3dadf24a353874767897a6c66dcec535f06f8a1f0cfb12cc859f45546e1fa33b1348b7679a6a94840205543ae5673c7057b578b7052f83cc3598969fc6df57f8084641a56", 0x81}], 0x4, &(0x7f0000002e80)=[@flowinfo={{0x14, 0x29, 0xb, 0x5}}], 0x18}}], 0x4, 0x20000080) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000a00)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="201108"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7c5400d0cb12720000005cd65a87d7788f41050349126460000000000000e0000003000000000000002200000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000002000000000000000000000000000000000000000000000000000000000000000000000100000000c4000500e0000001000000000000000000000000000000003c00000000000000e00000010000000000000000000000000200000000000000feffffff0000000000000000fe880000000000000000000000000001000000003c00000000000000fe80000000000000000000000000000000000000040000000100000000000000000000007f000001000000000000000000000000000400003200000008000000fc010000000000000000000000000000000000000400"/308], 0x17c}}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_POWER(r7, 0x112, 0x9, &(0x7f0000000080)=0x6, 0x1) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_clone(0x6e0a0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000001640)={0x92080000, 0x0, 0x0, 0x0, {0x32}, 0x0, 0x0, 0x0, 0x0}, 0x58) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x9, 0x202, 0x7, 0x101}, 0x10) 23.546995682s ago: executing program 2 (id=4066): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e20, 0x7, @loopback, 0xc88}}, 0x0, 0x0, 0xa, 0x0, "25c633e7eb9cc056ed394ba71b6e5d7bf4d988ea7c340885973233ddc0946fbd53f014e2854b661b3f9f55a7e67ba35c3537ea83c3817a08930cf99a34dfc5e167b887734921da2397b9cc8b1e235b95"}, 0xd8) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @loopback, 0x3681}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x2, &(0x7f00000000c0)="1a00000022000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e24, 0xfffffffe, @loopback, 0x9}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000340), 0x3) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "b5d4c27c5c778dd0", "5f128fd81908609c81286d4f6a539024ffb7007ed672afb4be7aec5ca3d27dbf", '\x00', "b690a3fabf2cb970"}, 0x38) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20.518502957s ago: executing program 2 (id=4077): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000480)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) umount2(&(0x7f0000000040)='./file0/../file0\x00', 0xc) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xffff, 0x647, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @dev={0xfe, 0x80, '\x00', 0x3f}, 0xc}, r1, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) prctl$PR_GET_IO_FLUSHER(0x3a) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='hpfs\x00', 0x2801, 0x0) mkdir(&(0x7f0000000040)='./my_configfs/target/usb_gadget/file0\x00', 0x123) 20.428194489s ago: executing program 2 (id=4078): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x7, 0x4) (async) r1 = syz_open_dev$I2C(&(0x7f0000000500), 0x0, 0x20000) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000100)={0x0, 0x10, 0x6, &(0x7f0000000080)={0x22, "aa00000000b7eec457134bada33a2e61825ed3d49f5d126ca400"}}) (async) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0x40405515, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, '\x00', 0x4000}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0xfffffffffffffffc, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xb6, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10000, 0x200000000000, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8000000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7ad, 0x0, 0x0, 0xc7, 0x0, 0xfffffffffffffbf7, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fff, 0x7, 0x0, 0x8, 0x0, 0x0, 0x6]}) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)={0x2c, 0x12, 0x1, 0x70bd26, 0x25dfdbfe, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0xce, 0x0, 0x0, @u64}]}, @nested={0xc, 0x1d, 0x0, 0x1, [@typed={0x8, 0x68, 0x0, 0x0, @u32=0x2da6}]}]}, 0x2c}], 0x1, 0x0, 0x0, 0x4000}, 0x4000800) 20.052630902s ago: executing program 2 (id=4080): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000680)={0x48, 0x2, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000400)={0x28, 0x2, r1, 0x0, &(0x7f0000000000/0x400000)=nil, 0x400000, 0x7ffffffe}) (fail_nth: 5) 19.829799902s ago: executing program 35 (id=4080): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000680)={0x48, 0x2, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000400)={0x28, 0x2, r1, 0x0, &(0x7f0000000000/0x400000)=nil, 0x400000, 0x7ffffffe}) (fail_nth: 5) 6.030385904s ago: executing program 4 (id=4149): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x24) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key(&(0x7f0000000580)='dns_resolver\x00', 0x0, &(0x7f0000000a40)='\x00\x00', 0x2, r2) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f00000008c0)=ANY=[], 0x0, 0x0}) r4 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) keyctl$reject(0x13, r2, 0x100, 0x6, r2) syz_usb_control_io(r4, &(0x7f00000002c0)={0x2c, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRESDEC=r2], &(0x7f0000000180)=ANY=[@ANYRES16=r3], &(0x7f00000001c0)=ANY=[@ANYBLOB="000f42000000050ffa2a020f1003c3f39fda5bd872539de92c7a2e10029a2f88b1c95bd6566dacc7e8ab125e90d288b96880d901d48c84fb45bfc726ec52467c17388961963aba5d"], &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x0, 0x96, 0xb, "2e8edf78", "eeff0200"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x2, 0x6, 0x0, 0x7, 0xff, 0x2}}}, &(0x7f0000000800)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB="40300a003eaca78a9536d0731e943196"], &(0x7f0000000340)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xf3}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000b80)=ANY=[@ANYBLOB="2000a74362a80000000000000000dec9141dfb7dae7af133fd21e42af1c5f9d971650b2ca1f74ce27b29effc28972f5c4af056997804534113825d368a05126bce5e8e8655eed595b0a87fd1674e28ed058bed0f2cd201aec7825b97599261dd4b9427fd527ca8e28587284bfe8a7f8bf055807dbf049ea508f5430f86abb5d421fc66a08b5bdd533099543b94365b7422716f2eca8d6c25b3d2c536cae92bd89fbcd8c8ebc788eaacb639c7999a3450d56ba5ec2c31bc6a000000000000000000000000000000006e991653af16c42292c6dabbfeca9af9bdbcd7c60ebb283e72a055e00bd0e08c9dcdde0afaa57bb63a88b7f0d84a9b2cd4fa6da535884d5050d3b2116c34426f1466f6c9f2c6a65191108134ced4eb33d4fcf30376997ec8ebcb38"], &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000540)={0x40, 0xb, 0x2, "f173"}, &(0x7f0000000580)={0x40, 0xf, 0x2}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @local}, &(0x7f0000000600)={0x40, 0x17, 0x6, @link_local}, &(0x7f0000000640)={0x40, 0x19, 0x2, "90cf"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x5}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0xbe}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x9}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$I2C(&(0x7f0000000000), 0x7, 0x4800) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="1201100363863510f30c101087360102030109021200017f0450000904"], &(0x7f0000000480)={0x0, 0x0, 0x5, 0x0}) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x84) r7 = socket(0x8, 0x2, 0x0) bind$xdp(r7, &(0x7f0000000140)={0x2d, 0x3, 0x0, 0xd}, 0x10) fchdir(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80) r8 = socket(0x11, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'veth1_to_hsr\x00', 0x0}) bind$packet(r8, &(0x7f0000000180)={0x11, 0x0, r10}, 0x14) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r8, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000980)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600000060600ac141414e0000003808a8972bd0b72e4a139697dc26942d2061fd7fdfe4b88942a8597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab42e32a097dbd4be5ffca88faca0000"], 0xdd12}, {&(0x7f0000000440)=ANY=[], 0x10}], 0x2}, 0x0) openat(r6, &(0x7f0000000040)='.\x00', 0x0, 0x0) 4.757449061s ago: executing program 3 (id=4158): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000086a05e50000000000000109022400010008a028090400060303000600092108003e01221800090581031000000100"], 0x0) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000240)={0x2, 0x4e23, @remote}, 0x10) (async) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) (async) syz_usb_control_io$uac3(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000340)=ANY=[@ANYBLOB="0014af"], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r2, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000a80)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r2, 0x0, 0x0) setns(0xc9, 0x0) r3 = socket(0x2a, 0x6, 0xb) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r3) (async) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000740)={0x40, 0x17, 0x1, "98"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac3(r2, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000540)={0x0, 0x0, 0x5f, "fee890a818cc78c9d825302452e7c41b855b4593368b31547e2c34e9895d852b3efb6ad750d3980e9fe99414439a6cc608e76fe17697a838e9e6f18b4624f790d3f7899242ad7f30c5c47a9d559161b6b7b706d09b5837108d3431f054e866"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000380)={0x2c, &(0x7f00000001c0)={0x0, 0xd, 0x4, "6c57ef8b"}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000001540)={0x34, &(0x7f0000001380)={0x20, 0x8, 0x4, "494e6ad8"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) (async) r4 = syz_usb_connect$printer(0x5, 0x36, &(0x7f00000003c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xd, 0xc0, 0xf9, "", [{{0x9, 0x4, 0x0, 0xf2, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x9, 0xff, 0x6}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x2, 0x3, 0x4}}]}}}]}}]}}, &(0x7f0000000a40)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x250, 0x89, 0x1, 0x9, 0x10, 0x9}, 0x8, &(0x7f0000000780)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x3, [{0x85, &(0x7f0000000880)=@string={0x85, 0x3, "50e5eb1662eb3cfa453b44681df96495b47bc41a6042dcb72ed2991af7324b890b8890bbe3f7eda66a35544c2c3ef7ecc1fc187c3d659f6aeb43b9ba7af43d6390fd54287c1c8498b2874284e03d40321a0758123a86664911541593d9d9cb3f1d60d457c2c06e8201ca85009091da4fa58bdbaace85bf5bdd11dc329759263f0f322d"}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x861}}, {0x8f, &(0x7f0000000980)=@string={0x8f, 0x3, "e47cd1a7f622ff9470578e369daaa83f90ec2f9abd657ef0d2030807b0142fef120b25a96681a30f96069cb31316b8be024cd7d9d49aa489078a15d72fae17ca844560bdf23b5aef04c8dc8a748f1f546c57187a25ac989ec97fa69ba1d06aeb40fe12df50a72bcc24dc50219f6efbba1acdbf2426d81a9ed17441e9e05b424b5f43409d38d560ca05e583884d"}}]}) syz_usb_control_io(r4, 0x0, &(0x7f0000000680)={0xffffffffffffffc2, &(0x7f0000000ac0)={0x40, 0x17, 0x160, "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"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$rtl8150(r2, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x20, 0x3, 0x2b, {0x2b, 0xd, "488ed89e70413bc2a7f1dd36e2bb7978466d6fadeeb7e99de8811378b5722ab69b32deb5fab406ece1"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4}}}, &(0x7f0000000340)={0x2c, &(0x7f0000000180)={0x0, 0x0, 0xaf, "4ad02f96c6c99822207b8011631de98871b6dbba917ba4e62d4d0b29ffdaedea9264aa4023e411bf67077b710a581648f36f389281841c83427d24984da12c36d5959677284717193a18f1aeced9ed2f1f29c22794a7d49376e943c2534446d21101233b1229d96c6c61c8925d436c8cdf01f23ce2048b8f8ed271736b5ea3a40b2359bf304fabbbfa92634c72bf175ef9c309b0890d14648e8b1e7a7cd69d579e42fa3dafd8c7d92acae1c74b170f"}, &(0x7f0000000240)={0x0, 0xa, 0x1}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000002c0)={0xc0, 0x5, 0x4, "8a350425"}, &(0x7f0000000300)={0x40, 0x5, 0x3, "6a041d"}}) (async) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) (async) syz_usb_disconnect(r2) 4.644341818s ago: executing program 3 (id=4159): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120150026ae63240cd0c800086b201020301090224000202ecb08d0904"], &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) sendmmsg$inet(r2, &(0x7f00000016c0)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}}], 0x1, 0x2800c844) sendmsg$inet6(r2, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x84) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f00000001c0)=0x4000, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$can_raw(r4, &(0x7f0000000400)={&(0x7f00000000c0)={0x1d, r5}, 0x10, &(0x7f00000003c0)={&(0x7f0000000380)=@can={{0x0, 0x1, 0x1}, 0x2, 0x1, 0x0, 0x0, "67a71ec6ffe75ca1"}, 0x10}, 0x1, 0x0, 0x0, 0x4048840}, 0xc000) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000001080)={@private1, @dev={0xfe, 0x80, '\x00', 0xd}, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x0, 0x2, 0x6, 0x100, 0x1, 0x1000000, r5}) sendmmsg$inet6(r3, &(0x7f0000002ec0)=[{{&(0x7f0000000140)={0xa, 0x4e24, 0x80000001, @empty, 0x8}, 0x1c, &(0x7f0000000300), 0x0, &(0x7f0000000640)}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000008c0)="589d8f2fa6a73335cbf2383792aed3688a22300fc483bf1d19cb50d68ef3e7d51030ff376e256f60f80a59c352c17624f8ba18631f106cfc3a10bbf476fdd635ffb6866aa3c66dddb33daa5dd8a0341917d9e93ac5660734d1b87f055a9c8baf3368d0c5b60777608ec004aa0db174cc31a2f76a79e1585a8bb64dd63f42b49533d502dd92f444470d463a5403378065658aeaee295167977f662f99a726a58d8e2a6d79c2b727a317ef3bf35597ad3f7aac2f09c7b4d766acb81dbd2d0fda96450b8998bb3dc1cda6979e79e32d846fbc26d3d0303de7", 0xd7}, {&(0x7f0000000b00)="fe632125f7b1915e124b14b394f76999e35dd29eb53188a71d6fa6b6bbb4b7cbb12669e8fa1f996606013571f0b1c1600a1be8032a0adc5f157488c59ea9694e548f7bf02628dc3f6e7ec21b727ccbdddd5df4f2c69dbb5e1f5e47042d0e16b6e755f0ac36c298db58d8b468db772b1fc239b013562eaba79d720d2631c31c5b775555c3df5e70a2f1829d52045b24991578cd", 0x93}], 0x2}}, {{&(0x7f0000000180)={0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c, &(0x7f0000002a00)=[{&(0x7f0000000c40)="bfb944dca9d1915f436ab347074f82328f7e5192a7abe5f30f6a1986265894b4f9ed99b37477b9e672733743a76593444243a693cd7eb7676d1cdbcad6adc31f75f0302f52556b63f683bd0ba7fe99fbc09ec312fc8a35306bff125c8ea2631ed982ade659229385d56092ffa0239602ad0c1a6d0f4b2991af8a64da5f6f4e8abc54df69d48033c5c6329400419d4c7b58cc621507ec3f427b60a24d4202a6a09acc7c2662bcc2333ec3cda12ad06b31d217f4e04b615557f6fb4df2690eeaaecc3bd6", 0xc3}, {0xfffffffffffffffe}, {&(0x7f0000000dc0)="4a1a8bc154559da9f30942b0066218c26f0ee493feb69a5f4307991f0c73b3141526389b25c557f0581295cdd2459cc04a76855bfbc6194421388711c6c4ada770df02571229aa5fde5980baecebca251c64324c8b28262d1785ca232e4d1fa6f367f33be1deca098c759b3188403df31ec00f7abadb0e36a5d6aad118d0294e034708e4df0bb090240fa6bc5de86cc596b525384eddda6b1877c89be4a9dc5ebd74ecf8342f47b83b23dd1e707afeefe9368925ef0498d81829523c1317b7011735f59319c60de1b05f09b8ebc54c09e40efb295108a8ef2074d078d93bfb04d2649732510b611626e05c0d3bd4", 0xee}, {&(0x7f00000019c0)="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", 0xfff}, {&(0x7f00000029c0)="b8d9ee243452edaac26738ef4f90509b4d48674cef3c5b", 0x17}], 0x5, &(0x7f0000002a80)=ANY=[@ANYBLOB="20000000004a7fd5b08296924bf7c80af037268800000029000000040000003b"], 0x20}}, {{&(0x7f0000002ac0)={0xa, 0x4e20, 0x9, @loopback, 0x55e2}, 0x1c, &(0x7f0000002e40)=[{&(0x7f0000002b00)="3234ad5e5d8b030bb336027f5fdd4635a0219f396328686c34093b3dcbd455f17d699eca0b806d750418707f79b3538fe02699a1962ccea1d9eb2b53bd86cf05dd916a7a3c8e2efc871b373c4b8a02061583f7e1c872b0b7715c605b84a43d40a247a318e242bd46b2fe21158c768cc3b0e0d8dc1d1fefc483bf08f674d1377fd734f309c12faec4b2d16d38f0ae07015521882f3de01faa287cfb054d5e524054de8ee837b5a29289e007859990279134a7541d46a02f7147c826cc3511534c958efad803cfd9728ffbff05b307eff96fd4808692043357807e", 0xda}, {&(0x7f0000000ec0)="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", 0x192}, {&(0x7f0000002d00)="5d202a0461f8a9b54e6977678e650ff34f1f6ab1f8b6a5bc66617471aba27de25c8906a0f4f8f38199a6a373d1305c2608fd1b2189151b69e438f406c420299958d4085a9bd15bc4b036327e5ffee2dabda419d852ffc33cdd0d3aa07ebbc884cc95ff7a2dc4e8304a75e38ead463e49649b3aac765a9e6b3cb6", 0x7a}, {&(0x7f0000002d80)="0255975fa63f64ed69eea9d3b2855e5baab4611fb36144c8caeb8df33f2c582d0570f4a96feee3a7d0dd45434ebe4d9bbbd440b0753c4d7afabd26c3a3dadf24a353874767897a6c66dcec535f06f8a1f0cfb12cc859f45546e1fa33b1348b7679a6a94840205543ae5673c7057b578b7052f83cc3598969fc6df57f8084641a56", 0x81}], 0x4, &(0x7f0000002e80)=[@flowinfo={{0x14, 0x29, 0xb, 0x5}}], 0x18}}], 0x4, 0x20000080) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000a00)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="201108"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7c5400d0cb12720000005cd65a87d7788f41050349126460000000000000e0000003000000000000002200000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000002000000000000000000000000000000000000000000000000000000000000000000000100000000c4000500e0000001000000000000000000000000000000003c00000000000000e00000010000000000000000000000000200000000000000feffffff0000000000000000fe880000000000000000000000000001000000003c00000000000000fe80000000000000000000000000000000000000040000000100000000000000000000007f000001000000000000000000000000000400003200000008000000fc010000000000000000000000000000000000000400"/308], 0x17c}}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_POWER(r7, 0x112, 0x9, &(0x7f0000000080)=0x6, 0x1) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_clone(0x6e0a0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000001640)={0x92080000, 0x0, 0x0, 0x0, {0x32}, 0x0, 0x0, 0x0, 0x0}, 0x58) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x9, 0x202, 0x7, 0x101}, 0x10) 3.963035512s ago: executing program 7 (id=4162): openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000180)={'raw\x00', 0x0, [0xffffffff, 0x2, 0xfff, 0x472, 0x9]}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0xc, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x3, 0x439, 0x6, 0x9, 0x4, 0x8, '\x00', 0x4, 0x4}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.840910031s ago: executing program 4 (id=4163): r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f00000004c0)='127D0.%\a\xe4\x85\x953n@ort\x00\xfdma8\x05\xde\xa7\x123\xa6\xf6\xb9/\xa9\xa7*\xf0\xdf\bgQ-\x9b\xc1`O\x1a\xcf\xd0?\xcc\x01\x1bj\xf3YkL1X\x9f\xaeG\xc7-r\xfe\x18\xaaxeA\xc4\b)\xb9+\x0e\x02\xd8LW\xbe\x10\xf3\xc1\x97\xfb*\"k\xcb\xc3\x1e:A:\x18\xe5\xe4Q\xfa', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='vers\x00', &(0x7f0000000280)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000340)='mountproto\x00', &(0x7f0000000380)='udp\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='timeo\x00', &(0x7f0000000400)='1\x00', 0x0) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x75, 0x5000, 0x0, 0x3) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f00000002c0)=0x7e6, 0x4) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000440)='retrans\x00', &(0x7f0000000300)='1\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r3, 0x1, 0x70bd28, 0x25dfdb7e, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x6, 0x4) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e1d, 0x1, @mcast1, 0x8}, 0x1c) setsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendto$inet6(r5, 0x0, 0xffffffffffffff5a, 0x400a591, &(0x7f00000000c0)={0xa, 0x4e22, 0x5b5, @private0, 0x8}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0x29}], 0x1}}], 0x1, 0x0) pipe(&(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0), 0xff7) 3.649165486s ago: executing program 7 (id=4164): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x41, 0x1c0862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x82843, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000040)={r1, 0x1000, {0x0, 0x0, 0x0, 0x1, 0x4000080000001001, 0x0, 0x0, 0x2, 0x1c, "faf98317e5a1149989958dbe53ea6accb396a2503dc3eb3fe37d58128bbad0099cebdc35f50160c9e6d6e3ab8588070000000000120000000000000000002200", "32d8cc26f7061a74df2cfc72c89f3d9e234b30c5099fd3bcf409ff2176ff7bfe55cd4a5d83cd4a5249d3ffe70c7f3f800b2f1c6aa54cc50a1fcaed33ba1fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffcdf, 0x200006]}}) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket(0x28, 0x801, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, 0x0, &(0x7f00000000c0)) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r5, 0xcb71}, &(0x7f0000000280)=0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000070000000900010073797a300000000054000000090a010400000000000000000700000008000a40000000030900020073797a31010073797a300000000008000540000000080800034000000008080007400000002908000640000000003c0000000c0a0101000000000000000007004044100003800c00008008000340000000020900050000007a31000000000900017a3000000000140000001000010000000000000000000084000a"], 0xd8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r5, @in={{0x2, 0x4e24, @multicast1}}}, &(0x7f00000001c0)=0x84) sendfile(r2, r0, 0x0, 0x210) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r3) 2.52733628s ago: executing program 7 (id=4167): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x1000000, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x7, 0x0, 0x3, 0x6c4ba42, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xb4, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x3, 0x7fffffffffffffff, 0x2, 0x0, 0x8e665f0, 0x0, 0x92c, 0x3, 0x7f, 0x0, 0x1000, 0x4, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x800, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5c8e, 0x0, 0x2, 0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x9, 0x0, 0xfffffffffffffffb, 0x1, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x400000, 0x200, 0x0, 0x40000000000, 0x2000007ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0xfffffffffffffffe, 0x2, 0x1, 0x3, 0x10, 0x4000100000001]}) 2.470867722s ago: executing program 4 (id=4168): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x11}, 0x0) syz_usb_connect(0x2, 0xb3, &(0x7f0000000240)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e2405"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) 2.423358109s ago: executing program 7 (id=4169): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, 0x0, &(0x7f0000000040)=0xc00) ioctl$TIOCL_SELLOADLUT(r0, 0x541c, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000340)=0x1) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r3 = socket(0x1d, 0x80802, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000380)={0x1d, r4, 0x1, {0x0, 0xf0, 0x3}, 0xfe}, 0x18) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d45520000000800024000000001340003"], 0x104}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x20, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f00000005c0)={0x274, r8, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x170, 0x3, 0x0, 0x1, [{0xa8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xa1, 0x1, "d4baeed0336ab209efb3b0d56855b4353f5690fddd2590aec0874fbbe449a80e90567f94896b9c355d96dab5fd32e715c5267764c702c039d3eb4e7a691b866b71ac143197d269eb4ac29a798594966191fbfe17e51852380997b11c8afab9749894b1254377b0b7f239bc9d6db5db5a314d51fa7d6097f1e7be188a7c8dc649115064f4f8bc9a73252978c3c688c0a0921f43ed39c5d1c74117ea04c0"}}, {0xb8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xb2, 0x2, "7c0b329aa4d44f8a3066910b1eb4e2ee6d68821d4a9bc67ab059f0bbf6120ca90110b25e5314d76f2793e585066a6da87e7422138a4f857bd1ba19d57e6810dd8a3cf0fabb9f2e02c62b3ca3a41c6fe2465791041f2c6dfdf3019b08a86295c4e7573f9b181f635ec4ee145b1d8c706037b2cca21c54f4790049b7b0e33731eea8435d1c2290b078ec2a836483339bbe88256c2a3bc759286dc057093599c2c982683ba11b037c5fffa12629e79e"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x2c4f}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xf0, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7}}, {0xe0, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xd9, 0x1, "454833e9b94430b6788bb06537b405c3dcba2c483b888ce69ca466318545891513d12aa8d182794b7aeef75ad9c8527a745b286f580519881f43d3ebf702f5dd1156d3d612a6020aa518fb735213c942641d015727327b532573c5cb9d566eaa8380d9562c2f4c4d24a5882d49015905ac24652eddf8c229350cf354d76480ea2d671366d7a87f65936a681723e1d171079a53298ce25746bc25dfe67365fe2da6a380f979a34ccff276bac6c8b6ba3fb3736ba97d35391ed588e9aa46ccb71e976afa37d69b7ea8efb6cf41c6c7122efc38d0ce2b"}}]}]}, 0x274}, 0x1, 0x0, 0x0, 0x8000}, 0x20048000) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x1000, 0x21}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000) r10 = dup3(r2, r0, 0x80000) ioctl$KDSKBMODE(r10, 0x4b45, 0x0) 2.316634375s ago: executing program 6 (id=4170): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) setns(0xc9, 0x0) r1 = socket(0x8, 0x5, 0x5) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={r5, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x0, 0x26, 0xffffffb9, 0x1a}, 0x9c) bind(0xffffffffffffffff, &(0x7f0000000000)=@in={0x2, 0x3210, @multicast2}, 0x80) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x400261f3, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x38) ioctl$KVM_CAP_EXIT_HYPERCALL(r6, 0x4068aea3, &(0x7f0000000080)) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000180)=0x6) ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0) 2.218306554s ago: executing program 6 (id=4171): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f00000002c0), &(0x7f0000000400)=0x6) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001002dbd70000000", @ANYBLOB="000000000000000000000000000000000000000032000000ff010000000000000000000000000001000000000000000005000000000000000000000000000000000000000000000000000000000000000400000000000000fe"], 0x1a4}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x8004) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1.883557339s ago: executing program 6 (id=4172): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000080)={0x237, 0x7d, 0x3, {{0x520, 0xf6, 0x0, 0x0, {0x80}, 0x20000000, 0xd, 0x0, 0x40, 0x24, ' n\x8c\xce\x98\xb6\xffodev{cvfo\x85\xe4y-\xec\x15\xe9\"e=cX\x16\xdb\x1bx\x92\xff\xff\xff', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x04\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x237) 1.772561789s ago: executing program 6 (id=4173): openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000180)={'raw\x00', 0x0, [0xffffffff, 0x2, 0xfff, 0x472, 0x9]}, &(0x7f0000000200)=0x54) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0xc, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x3, 0x439, 0x6, 0x9, 0x4, 0x8, '\x00', 0x4, 0x4}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.639698083s ago: executing program 3 (id=4174): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f00000002c0), &(0x7f0000000400)=0x6) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001002dbd700000000000e00000010000000000000000", @ANYBLOB="000000000000000000000000000000000000000032000000ff010000000000000000000000000001000000000000000005000000000000000000000000000000000000000000000000000000000000000400000000000000fe"], 0x1a4}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x8004) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f000000c280)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="140300003000010000"], 0x314}], 0x1}, 0x800) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1.580024735s ago: executing program 6 (id=4175): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e20, 0x7, @loopback, 0xc88}}, 0x0, 0x0, 0xa, 0x0, "25c633e7eb9cc056ed394ba71b6e5d7bf4d988ea7c340885973233ddc0946fbd53f014e2854b661b3f9f55a7e67ba35c3537ea83c3817a08930cf99a34dfc5e167b887734921da2397b9cc8b1e235b95"}, 0xd8) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @loopback, 0x3681}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x2, &(0x7f00000000c0)="1a00000022000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.316406196s ago: executing program 7 (id=4176): r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f00000004c0)='127D0.%\a\xe4\x85\x953n@ort\x00\xfdma8\x05\xde\xa7\x123\xa6\xf6\xb9/\xa9\xa7*\xf0\xdf\bgQ-\x9b\xc1`O\x1a\xcf\xd0?\xcc\x01\x1bj\xf3YkL1X\x9f\xaeG\xc7-r\xfe\x18\xaaxeA\xc4\b)\xb9+\x0e\x02\xd8LW\xbe\x10\xf3\xc1\x97\xfb*\"k\xcb\xc3\x1e:A:\x18\xe5\xe4Q\xfa', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='vers\x00', &(0x7f0000000280)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000340)='mountproto\x00', &(0x7f0000000380)='udp\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='timeo\x00', &(0x7f0000000400)='1\x00', 0x0) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x75, 0x5000, 0x0, 0x3) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f00000002c0)=0x7e6, 0x4) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000440)='retrans\x00', &(0x7f0000000300)='1\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r3, 0x1, 0x70bd28, 0x25dfdb7e, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x6, 0x4) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e1d, 0x1, @mcast1, 0x8}, 0x1c) setsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendto$inet6(r5, 0x0, 0xffffffffffffff5a, 0x400a591, &(0x7f00000000c0)={0xa, 0x4e22, 0x5b5, @private0, 0x8}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0x29}], 0x1}}], 0x1, 0x0) pipe(&(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/nfsv4leasetime\x00', 0x1, 0x0) write(r6, &(0x7f00000002c0), 0xff7) 1.140587261s ago: executing program 4 (id=4177): ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x1000000, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x7, 0x0, 0x3, 0x6c4ba42, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xb4, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x3, 0x7fffffffffffffff, 0x2, 0x0, 0x8e665f0, 0x0, 0x92c, 0x3, 0x7f, 0x0, 0x1000, 0x4, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x800, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5c8e, 0x0, 0x2, 0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x9, 0x0, 0xfffffffffffffffb, 0x1, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x400000, 0x200, 0x0, 0x40000000000, 0x2000007ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0xfffffffffffffffe, 0x2, 0x1, 0x3, 0x10, 0x4000100000001]}) 1.074771844s ago: executing program 4 (id=4178): mkdir(0x0, 0x1ff) mkdir(&(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) mkdir(0x0, 0x1ff) syz_create_resource$binfmt(&(0x7f0000000100)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r2, 0x84, 0x85, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/i801_smbus/new_id\x00', 0x1, 0x0) write(r3, &(0x7f0000000700)='ffffffff ffffffff ffffffff f-ffff', 0x21) write(r1, &(0x7f00000003c0)='fi', 0x2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20008000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x12, &(0x7f0000000280), &(0x7f00000002c0)=0x4) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, &(0x7f0000000180)={'raw\x00', 0x0, [0xffffffff, 0x2, 0xfff, 0x472, 0x9]}, &(0x7f0000000200)=0x54) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r8, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0xc, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x3, 0x439, 0x6, 0x9, 0x4, 0x8, '\x00', 0x4, 0x4}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)={0x0, 0xc2, 0x8}, 0x18) linkat(r9, &(0x7f0000000080)='./config\x00', r1, &(0x7f00000000c0)='./config\x00', 0x400) 692.342017ms ago: executing program 4 (id=4179): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x81, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="040f920098"], 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$evdev(&(0x7f0000001cc0), 0x1, 0x400) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000001d00)=""/144) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000100)="64f080620c00d9f40f20d86635200000000f22d86766c7442400009000006766c7442402000800006766c744240600000000670f011c2466b8000000000f23d00f21f86635200000040f23f866b9800000c00f326635004000000f3066b9800000c00f326635002000000f300f090fc79ce6ff0ff95500", 0x77}], 0x1, 0x70, 0x0, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r2, 0x4188aec6, &(0x7f0000001b00)={0x0, [{0x0, 0x788, 0x2, &(0x7f0000000200)="8dea8d2657715690a30fb41712f6c4cadb2a18f3ca716a5a4192c50f91de86ef5105404a78c2460a2cc68f947059b9450293ecb789d0325a01b164359444f8dbbcf4f9832551b4cd54e1085f731b4561a4d3d420822332666ea05f8f7e2ae6793226a4eeefa2698b78a0dd44d30be85a1254c244b01a5bd9c2a92e81c3acc2b1212b9bc39f8fadc3c662d4febcb3ecc1a73ae025434baf5d087c2a434a2c5641c5f1252dde55e5f6aacd3c4918b576677aea389de2da762fc59bf922689e426b9165b322cd4dd9f8ad0d8e9c33a197e9eaaa73ce83187aa641dab50a4818079ca6663e51799bfe8ae743b8d761d5cc1f08"}, {0x2, 0x158, 0x12, &(0x7f0000000300)="1bb12f70fe1674133889e379b922bbe8fe7aab286fc2afb49e865a76030b4d8c900629f03167c1aeb9cd28"}, {0x2, 0x6e0, 0x7ff, &(0x7f0000000340)="ce0004df9fcaa66416a4dd15ad38a1c3360721789fe4d22693f5b4c6387d0e37c2cfa4dbb0e4e9c9e318bf939000e7ded2a719da97ca7b4599338a60e8c1c82e56bb722c9f80c200b97f0823c6a1cdcb8326c8b99ef71cffa7469da7cb780fad23c8ef08aeedc17730d0c8acc394ceb7b55c1d34dafddcfdfa0f40645abd7b959229ebb9a81084c2015645a667a5fae8f0cf36b7d9006d6361221fca79c2516e1cb0d21cc0f967cecd1490a600ed50334e3d5d80986e9f64748f3533f91e328a36093c071b0f4f4399c97bd4cd707ea1c6bfe40ca4a89557fbdb63e6"}, {0x2, 0x178, 0x7, &(0x7f0000000440)="0c862cbdd92ad79b26f8a02088b6e73141ff72c50065568f4cb6c15fd319d9a6367486ec3db79902411f8ace5ccbd5"}, {0x3, 0x310, 0x1, &(0x7f0000000480)="caa2aaccd92f41d913ede898a6224f440a76decf256e86d630d8e86452591185725fc21fd0427b0e31e9a72ab570b21d026be33db70b9aa887781f4bdef0acea53884ffd1be6bd7151f79d108ad12028e6d130572bed7a48e9db000c237d6667769b"}, {0x0, 0x180, 0x9, &(0x7f0000000500)="69c26b5e84aa85c6691467ac0a1c6af95669ae3029c3f71e872dae13155790f7600ba9c4d7493ed3f02d4492f940638a"}, {0x2, 0x748, 0x3503, &(0x7f0000000540)="f5857f0834c29e3c6bb3e9322c7206d9f1828e05096a00195743fab60f8a6736780e26b50ac29074d5e0c67d01644a19bc8640ce75f9d6d39bcc855e1eafee6b742925d7dfe8de21b19ae2b4b3708f88e4d0df0de34e7e7aa4224e91cbccbdb792c1ef0151fd21cfe57cce691a17d8c90de3fefdd89ea5e33ccaf2f13b12ca9d668fd2b57f8063b5741f490e35c947f45cd4c9c1df80917659ced0b0a9f1bf30b0173fdf084f887a291e8040f6d34ef5749b0341a564c05813cc4cef03b697d69ec3009a00fbd6460094fc911a128bb02cc325dd8dcd4c6736dfebd2d2d509f173685577c66bc29697"}, {0x1, 0xb8, 0x5, &(0x7f0000000640)="743d883beb4ea54fa6263dc64426c4f1daebea6eb887d6"}, {0x2, 0x230, 0x9, &(0x7f0000000680)="55e3b024d4e4c26bc660aa882b4a619d47dc3b46b1c27ec5092f04db82fcb8b921fad004a8f3f50626028e9b26cbfdbbb7c2ee53b3b54f9f5260a199c015381e3cccba71ca04"}, {0x5, 0x490, 0x0, &(0x7f0000000700)="593fa8fd719db640350929066da06c0e218a2dbf97a3c0312e34c7a002f8dbed1ff245f1c1d06b13e1e189d429b7bb02316e298e797045b9a67a2074892fdee9fc25d86709f1e72435605d1fcb18c10fc5e53944c7fb6349c590c1ca855702df6764f11eb4f99d5dbcdec7c386a853082bc97916e910054a68abc5f722efe206ced5ee2398baeea361e993d4df8ce29dec0c"}, {0x2, 0x558, 0x3, &(0x7f00000007c0)="e25ec024633ab4b6777ea7a8425c11717edbb73b7f8b550b621e267919a1efc257036f6766e1eb0b4e2f3d9c84f3a28aa02b24d17510c1833bc0f6b1f2f0200289858c13a09906bbac41d52571e45b6f852695ef92b3a45f5ebcfbbd17f28fdac03a1958abd5f4e8c1c38a39d31eff72cdf177ef9669e5c6dc1814f108281e3a4ec3d4fbbd487c749f3e1283461aa71a2a7eebbe03a954915a1433deaaa30e34896c4c850158875443b67e"}, {0x3, 0x5a8, 0x2, &(0x7f0000000880)="e0c1d440370b1dfbaf803924cf2d0ba4105341df26d2901055b04f6510dc3cc42e4f3eafc7d349229cc70b5eab098c0e0f864f35bc2ff6d28c86fa367dee3d62e5691be021de2e061f3bd270717aabc9ffa87b7b1e97b431952d54ad1d0cef45136ad8f3eb435ae1177a65add8e5f7be1c7b8160d4bc451ae3a5ee1cd65af47fe3c3c1bae7b1651dfebc5f7f790a110dd1db362675a642ef705fa8e05b9f5d66a909335022cf30aec139f451eb3c9902ac8095b899"}, {0x2, 0x8000, 0x3, &(0x7f0000000940)="c92425755c8d9eba94259d88ca6cc8a657c7719bf05c9410f566b84159afdc8771a618a18fa968ea54e05b82569bb199a49dcb4c7ecd07bc63d87c6982b3c97d6aa05852108436a83fbbb0b5c303bc4d61414f59954aba4624f955fd61d244134c1dcc46c5d6011781bb79f2bec6985707fab2f84172b0163750175184ac8299b62e1fb954ce399578e15bb34f9b82b082ddefe6c4684ae73736b9360a6c9485007d5b85fba6504a27f10bd9eab60999132cfc170cd3f7008b6af84190bdb63f6b6467a292343e7b60ddbf38438754c34fa457d3be153f4269b44cb53c6d21151ae209d4666652ab145e58da4606a9051aa5cefd876c2e4d8fffb40a62121b4e6f58109d782c7c7c406fdd45202e4c26cf53c551992d02ae7b18605d7e7b5eb8c75950f72804fd2e16b113f9167f21c1e3e02b3f377e3c1c8fb43f177e14b3a4297f5e0665d779dcb14b9940f4bc87e77ddc6e4acaff1ba08d0697c8cab50be46c9c90122e900802c29998940fe4185fbb67474b3183d9aa6c13168d259d703c663b841e45c674089d8c94cecf9d71da5faffffaf28c713e06f89c34692f5c56f1b9e80ce273e8840b0663c5db1bc0d6642750ec955157a0af38ce489e19064849da004539a99b035f36748450a044067427945e751fba38b2deccfd9b28f16fa3708286d9dd5112b2db2ff77f3c169d913879be05fc94a659316a47205a7181f905e829df9ee793fb68e4acc97f8e9daf431556b75cd26a9917cad1c403f10de0b7042a6e97e9622df423716b4f5794df3c0093e69963a50f72507060c088551105b05ceef9b7306d7af0d8192b94485cc288231c012cde6ac62e2b0827e9500ca352cad768b9afc52b8e6235935b62acdd38806fc3a0fe697adaf244ec6c8905d309d7f59a6e2e8bc7966d29d63615d9318702ec4c83d7e119f51781981adc7ab802107f2834b0f9b6ae6038267dbe9840137e579cba0d7d6004c597202f0df3306e15c29668d85b282a8d0e37700d42fcd341b8e9bfd2547688f830d33afa3494e0e92daeb5321a0d921b991dd9734c925747ee24c488486c113a6414c1171becbd75645646bc98650b55fe2af384aef51df5fdd79f72fef3aa75697fbef90217e6a88af6d7324759500d5919c640b1378ac23fadda531779aa60df8d657276e81166fa38447803674d977609c6a2fadf0337c81c464730228453eb357a04a16d5f014f987e6d4d470c4e59544db9a4d1f4ebf8da1735c825880dde934c23bcfcd461856cf1b7af7c74f17165ad4f6a3112415531b6fde2cade1481dc7b5f943837edd9662935237b59ead3098098b9e803cd0f9ac9c2b7917f7915430be95b2853410e5f9f7ca716f514aaaf80ea743b7b9f999c41d4ec72b6502a7f73d749c71a19082df25c5ee8445896a2ad9aaa348fd2759eecbb2bb742fb4af574cb2c359e39bbd7a8d08eac31ec5524eb253e6bd853c6bcf7f6f467adaa6f05733d5fae3a569e98dbfea97378fa15ad86332196765bc7452f8a111457eb364a886ab134be64a090bf8c2e46712a9cf52af7abf0a616638edf9ea96eaf6ef1e78bbfa8e209e2d5afb041af14ce4ed279d32a48b6c3175e220318841819d1524a622e70a9fc6382e13c4529eb97f45d36272b60bd8fbbfae812012affedd4b1fababe551a8d003a0d612477d3a2f7401625d8221d5b53ef064494fc51a66111bc598c3b0bb3da36c94a8eed45f4b40d71a6b7c794a9c204af5d08f681083901163985be7e12703907cacc9b82dfe02761944d08d1c907658c05d3765400c6f1b07e2852ad440efba94fe672da177b21c8b40c0c40b3f6d675e426309372c90d8531df56ac819bea2e94521f1ff4bbe1e013b53933f0f3405d6b3074316ca9cd4fa8bbc70180a30a7c784997a32ff00810bdd5fc087cac89651908f94080d53f5e0c45e369650b6da94b7703b5c4ad99e46c39b4c6d706ba7422af35598937ce9173d5412f5e4e0e36544a71d52573ea198a1366fb6c3c105c3554bfd44b7781c3a89e13712489f33f611668779763de789cb49e5851561d81559146fc268d2dba1bc745821fabec6d7392dc089fffb65f75fd5d2ff6abb54eff12b47653d248599463b39cf52e2ff6670d846b727a9eae66a3b7d1bf68a2f005ac967a9660bda2c1288540bea36d8fc2284ecf3ed3cf71483711557a54a9c56c0678f2532dbf2cb10f345f81c25575f18b3c25a71c788d70a61ad24c1b372b0380c4d56f1f3b55b75c7c534cf92032bac919b88a024b7be952ef57d4f542f638a300da9e7ae67cdbea0a9b4237833135a7b42b2dd6fa2a834bb1bcbc2cc764a040deb06033b30c22cce8ef1c759e9572cb22ae549fe554c5946cb88b26933dc0655fc8c05cbe72833c48245f0cccd0e9639a30fee86cacba538eba888718d2de0b8417e6884b69374597a83b2605cdc304a6144bf90700e4637d089a7dcdef86f8aaf5daf149188de5a75a93798df29329fe4c6ab0087085f4204357f01741f7910c71402474596dbbbe45d2f97603157c803972d677e27ae346e094aea9b223be79f531508f28fe8443c430b11ef3535a4c6ca7619e66e479a4de228671b37de80d445fa933b2132e242d43862201f79f03a3b69681cfa2c02e465bb2862506301e197f7bb3caa33cff3465d09f92ddaa7e1855c0429a89e82bbd9118ad6858663b27f43a5c2b09daf83357a65b5bb7bf5fd36c4113c6c25b00d8e25dd309c6e7fd8f5721ef8d0f8d95ec5b95a30b8658098eb9c86d7c477f44c4d0e872e5d8e3a41b053d4679f29ebdf3c5f531644ae1c049c57f6db8a3ec0c6eaef59b277df85e304c198a7ad52692dc56a8b3223af7cdd069c40bd42cf3e11396a3d6c24652fd4ac3ec74b10e996544cd4b2f78576009a4d51e9c110d0c130f9bef7acb955c79a6c79f9192aabf65658c801c1c44ffc719f4e7af05265cb43970e5ff1d0608d0a03eefba33c99815990c527dd9c0025480bffd579a56ca00e396e57627ae8e199904733942f82800ece9c842484d55005dec4eedfb02b4927a880e950c99559dd24514edf4aabe48ac7fe68e9ff4948ce3446dc7ccd224ac444e8fd15edc7c95cef3a796cb233eae4dd103908ed3dfa08791a39cd9e0fee46ae29e8cdbaf8732a7089f454967521a87fc541aa78d8d0fd1f2ff67cac5a45a791f8c5ad1a42992207d788b8f858bdc29e44d8b0ef3a0a7b2cf326d4f0e42df1e02eae5738899c08d2d27378e107418401f6374c026e082fc3230982e059c53eecce51d0d83dc78ef2c2188d457a4b44f36a1bd3dd03c70c59fce9f76f627c800e2596fa214eff5a10b3e003debcdb647b2fdd8924704553b51475f3f28eadb6c892393756acd7394a43356c555140fd2dd0de98ca42ec78b707c56b3263e09949b937b6506c74a32ae7c77eb804579c32ba702e966e5c14433e47ad16d4e9c6b33f19a0b8801d9eb8c7720dbfbf751efcb7191c9fde0204b657477398b51850a00582897bff2f81f03446d3f15df334a3b813169862da088684b39ce31920faba0a9bc720ec9b5040b4e2b71a4bdd7b21f7ae8129103fcfe62913e4dea8564bf86b85751f5f02ffed3bfbf7ddca42f3bb3a5f56bcb912779569aa37f0d5538e92991494da3cafc873979aa8accc29018e3fd4968ef44263d6f9ad92cc163136345d2c93a362e6cbdde2a48759d89041ea8957ca99ae1c05e6616132c30cce04ceb89c01ee4444f1827c5f86ed88e2fa8b7b99cebd5737149b3414464d26924aac158d97fe81ed58e2a020e00738ca39514b7afc065cee03f195d819d47347ee9a92ac508f236860034ed17446a82e8a8bdb0ca5a0edc8198e9e41176a5fbdae8d541993f57167925be9eb66f618b3e6ed342a075ecc04fe56df0406ff4a859bb59d18dcabe23ffe59c563fe48c7a3e8f922e49b0079aacf971d31afd9551022641f1d9c58e26d2f0a6f95c618c99d336c217472a319577c0a27098a07cc10f11d94081a5f3fe3930199ce30ad127dd343d4339d6dbb29cee87a1436f2e273cb0a53eceee918164a3b5fb2a5eb89d8cf7b1d0e0bcdadee13cef4c7a57b87ca706088d0904435a6fed869ea423a0490c00af5f49e7ff67408149c0f4fe0a2c7cfb8ed5c71fc84d639e6a3c169c0887b95a4c7f96a9bb59e3755dca7805273b8c86ef8459c4af5a6fec7d1a9a6d6bfd7b31e781bc0c0d4771d747942d3f2f45ef72cc51253528817126cc40a9678ab5cdb8f5bfcd3e6e1fa2eaa11452dcae6b20d9024ea8a73d37f2fe61e4dcc0b56d6b85635bbbf4b0806832c91727ac3329e572812c3ad1b2e086387091af16f5e640cd97d2bbd6a5af7138641e32e7b312a3d38eebae061d29b57a040fb0ae80af0b4a930aa907d29386a17b526b149de1d37ddefab647a090b6a83cb212e82d06da5c2b8d505ff28e80c735f44914e41c5d12b00822d6ac09ddb5fbafc956fce7b75babfef9d5966ad4c587291db279d9323692f8acecb2fbef7afbf34ac0c19b4560f9d83eb663ee8ad3394369d7ff1ceafe2d15b9cdd82816c29fa640158e2b59341c6b2ef3a670b9d6029046cb394c4a66baa79fa1515c60999c400206cd5eeea72b683dfba999ca256811a47cd1ae608f10ce3eb65c44aeccecb014c56952003590b20e0d751d760c5be38223f4335614af2863ad2a36809c20e15c912f1bd1a3224c8748ae33796f1c82085411cfcf160f301213ed1fd430d71b8e9473f18176152e619bc66d0e226b457fa456d96b641b21d4682bd27923f7ba37f88edc7166ac27aabde24c89287c57b0a739302c1c4d0452df86c47e27c09156d6aeb7521f2af733536b24ca7f25944f45170bf9919b2ca3ecd3d09aed626a34efd9570d6f79cccf879f4ee9761c3f6379e8fd4bea9ec8c6cf38c89140ce63a221758b139ccf0dd194abba64060e19fdf892353262c12570714e165d3f74a7b4e714464df9c6038f9e0892deaa59903f0c324a5a7d7df38805480d3834627eadad038a09ac0ea778f90f40b90b9765b53c00f5d8f0b9e976be68e50af326f650ee2170653d956c3471f59c0dc8314d218bd71f8d9ef44881afca205a45b0c6ea930adf88c4d5dd6e81328f09754529f83cff94ca83c5bed59ed2b96b700747063411c25fcebfd61585e99404433b1f676a21744ef292e6f95c9d6985faba2b6ea58e7afec3ee08dbf78ef8fde345f37909e8528be00bd8fd507d219fcf8fd542cff423558d9b443476805a711540cd7fd2d0add4ec692f136f1756f726282e279180c2597677ef28b85eb88fc7351778873dd29ec4a4f1e37e9e886f60b5d770f9df4990de61bbfa07db22dce46991592ec0467ce0f273f0419af70cd99da45100a877aa5355bbaaebf3d3e07178cb55acc9ee8837c1c8745121260259b2d77b43685a29f45ce7dd1d2f21bb0c846cc18a3b6bd71fe5350e85cd5536a9093354eee9c6c6b90632432b499445c2565443bb416a6f99931393cbc6e15cf6265aee618e00c95a35d4cb4bbc48c5c653896bfb6868d70ef6238440bb6930252497b19786f317703f1a2fa89017d9a27cc28080755e900df4011cc8176329d4fed387edfa69c9a00f6c73c4bd8c430a140f7a99a9608771ae70ad5f48f97e69d077c50eae4213811414edf6bba17f737ed9d660c1acdea77bcaceae7ddcdf50598bee263f90f2c8bbd7454fa3680895f5051d8805d9da2b0b04a7ced776103e4f9e813385cdb6f6acc1fb9090846e2818011e3afdf361481b1c8be2b48514afd41becca38dd"}, {0x3, 0x198, 0x10000, &(0x7f0000001940)="8c602fb33853d6d188659d2374d41717abff8f3a48408639444343ad8e378c3882c9a740030146464b167d400c0da30b7fedf3"}, {0x1, 0x460, 0xe, &(0x7f0000001980)="6bcda66d7b2b9479ddc8326173452289b613910cb9c0caf9c8eb5c896867558a5ffe2366eb62834e5720d96efdf70f8781c5ec8f5ee50a457d29fd4a521a438b5c082e4648c4f596f34d3dba8937e2e682fc34a6680e718b5f419b399eec7f65dabf70cdb056c25da77ac02443d295d679ca71fda1b928c3704237976a38d512ab5b6676703f7b2829498c51"}, {0x0, 0x5f8, 0x5, &(0x7f0000001a40)="3113e687aa97573f929efc566ad93843d5e99b444c49c74ca22a9dd6a12e492812faa87be6e2e8e3a9af5609791ea614d4354e0f71cac10c67131d4d68571113b66e0e24849d348b48e8fee39899ff577a2a6018f4427396b0cb35cf82d845b45e2eca0ed99fcad61eff49805b4d6b21c9c255ecd2c0577f2fb2f843ed8ca289b161cf13723b95c7340c4f7ccd973efceb148e0dadb3ddab2397f5ce97b6797f2e4930b417ffc8ec589e884b2021632a30c68e42f050d4bd16acf43317256a"}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000001dc0), 0x2000, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b800000100265d7aeabbc900bbc9000f30300f272d9d53bf0000c4b9e16dc30101220f01c3", 0xfffffffffffffdab}], 0x1, 0x14, 0x0, 0x0) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r3, 0x40106f52, &(0x7f0000000000)={0x1c, &(0x7f00000002c0)=[{0x11, '\x00', @data=0x1, 0x9}]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$XFS_IOC_GET_RESBLKS(0xffffffffffffffff, 0x80105873, &(0x7f0000000040)) 448.599845ms ago: executing program 3 (id=4180): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) sendto$inet(r1, &(0x7f00000001c0)="6293b8597c77b79e11df070fb814584d62587d1e6b0e81200d9c4b9b68bca1e5552049fc11881028adf9116875c7dc5dc0cefdb2f773daaab19c419f61ef136ae2e36a34137a8c30ab95be4544f2d18052b320fe3d174d69f08526b22f2c90686932b71494855fb22f445ed2077947c45e2dc0b185ad03eca9754dc65f2264130eaf90", 0x83, 0x800, 0x0, 0x0) write$binfmt_script(r1, 0x0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x27, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="14010000230001000000000004000000020100800c000100020000000000000014000c002001000000000000000000000000000050bb2d6f67d29d6fab98adb107d0def49c88ea04abde1d5e8d3fb22a1b50f8778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be825dce1f"], 0x114}], 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x140a, 0x68f, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x7}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x40084) 413.428573ms ago: executing program 3 (id=4181): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f00000002c0), &(0x7f0000000400)=0x6) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001002dbd70000000", @ANYBLOB="000000000000000000000000000000000000000032000000ff010000000000000000000000000001000000000000000005000000000000000000000000000000000000000000000000000000000000000400000000000000fe"], 0x1a4}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x8004) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f000000c280)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="1403000030000100000100000400000001"], 0x314}], 0x1}, 0x800) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 245.460822ms ago: executing program 3 (id=4182): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120150026ae63240cd0c800086b201020301090224000202ecb08d0904"], &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) sendmmsg$inet(r2, &(0x7f00000016c0)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}}], 0x1, 0x2800c844) sendmsg$inet6(r2, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x84) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f00000001c0)=0x4000, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$can_raw(r4, &(0x7f0000000400)={&(0x7f00000000c0)={0x1d, r5}, 0x10, &(0x7f00000003c0)={&(0x7f0000000380)=@can={{0x0, 0x1, 0x1}, 0x2, 0x1, 0x0, 0x0, "67a71ec6ffe75ca1"}, 0x10}, 0x1, 0x0, 0x0, 0x4048840}, 0xc000) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000001080)={@private1, @dev={0xfe, 0x80, '\x00', 0xd}, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x0, 0x2, 0x6, 0x100, 0x1, 0x1000000, r5}) sendmmsg$inet6(r3, &(0x7f0000002ec0)=[{{&(0x7f0000000140)={0xa, 0x4e24, 0x80000001, @empty, 0x8}, 0x1c, &(0x7f0000000300), 0x0, &(0x7f0000000640)}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000008c0)="589d8f2fa6a73335cbf2383792aed3688a22300fc483bf1d19cb50d68ef3e7d51030ff376e256f60f80a59c352c17624f8ba18631f106cfc3a10bbf476fdd635ffb6866aa3c66dddb33daa5dd8a0341917d9e93ac5660734d1b87f055a9c8baf3368d0c5b60777608ec004aa0db174cc31a2f76a79e1585a8bb64dd63f42b49533d502dd92f444470d463a5403378065658aeaee295167977f662f99a726a58d8e2a6d79c2b727a317ef3bf35597ad3f7aac2f09c7b4d766acb81dbd2d0fda96450b8998bb3dc1cda6979e79e32d846fbc26d3d0303de7", 0xd7}, {&(0x7f0000000b00)="fe632125f7b1915e124b14b394f76999e35dd29eb53188a71d6fa6b6bbb4b7cbb12669e8fa1f996606013571f0b1c1600a1be8032a0adc5f157488c59ea9694e548f7bf02628dc3f6e7ec21b727ccbdddd5df4f2c69dbb5e1f5e47042d0e16b6e755f0ac36c298db58d8b468db772b1fc239b013562eaba79d720d2631c31c5b775555c3df5e70a2f1829d52045b24991578cd", 0x93}], 0x2}}, {{&(0x7f0000000180)={0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c, &(0x7f0000002a00)=[{&(0x7f0000000c40)="bfb944dca9d1915f436ab347074f82328f7e5192a7abe5f30f6a1986265894b4f9ed99b37477b9e672733743a76593444243a693cd7eb7676d1cdbcad6adc31f75f0302f52556b63f683bd0ba7fe99fbc09ec312fc8a35306bff125c8ea2631ed982ade659229385d56092ffa0239602ad0c1a6d0f4b2991af8a64da5f6f4e8abc54df69d48033c5c6329400419d4c7b58cc621507ec3f427b60a24d4202a6a09acc7c2662bcc2333ec3cda12ad06b31d217f4e04b615557f6fb4df2690eeaaecc3bd6", 0xc3}, {0xfffffffffffffffe}, {&(0x7f0000000dc0)="4a1a8bc154559da9f30942b0066218c26f0ee493feb69a5f4307991f0c73b3141526389b25c557f0581295cdd2459cc04a76855bfbc6194421388711c6c4ada770df02571229aa5fde5980baecebca251c64324c8b28262d1785ca232e4d1fa6f367f33be1deca098c759b3188403df31ec00f7abadb0e36a5d6aad118d0294e034708e4df0bb090240fa6bc5de86cc596b525384eddda6b1877c89be4a9dc5ebd74ecf8342f47b83b23dd1e707afeefe9368925ef0498d81829523c1317b7011735f59319c60de1b05f09b8ebc54c09e40efb295108a8ef2074d078d93bfb04d2649732510b611626e05c0d3bd4", 0xee}, {&(0x7f00000019c0)="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", 0xfff}, {&(0x7f00000029c0)="b8d9ee243452edaac26738ef4f90509b4d48674cef3c5b", 0x17}], 0x5, &(0x7f0000002a80)=ANY=[@ANYBLOB="20000000004a7fd5b08296924bf7c80af037268800000029000000040000003b"], 0x20}}, {{&(0x7f0000002ac0)={0xa, 0x4e20, 0x9, @loopback, 0x55e2}, 0x1c, &(0x7f0000002e40)=[{&(0x7f0000002b00)="3234ad5e5d8b030bb336027f5fdd4635a0219f396328686c34093b3dcbd455f17d699eca0b806d750418707f79b3538fe02699a1962ccea1d9eb2b53bd86cf05dd916a7a3c8e2efc871b373c4b8a02061583f7e1c872b0b7715c605b84a43d40a247a318e242bd46b2fe21158c768cc3b0e0d8dc1d1fefc483bf08f674d1377fd734f309c12faec4b2d16d38f0ae07015521882f3de01faa287cfb054d5e524054de8ee837b5a29289e007859990279134a7541d46a02f7147c826cc3511534c958efad803cfd9728ffbff05b307eff96fd4808692043357807e", 0xda}, {&(0x7f0000000ec0)="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", 0x192}, {&(0x7f0000002d00)="5d202a0461f8a9b54e6977678e650ff34f1f6ab1f8b6a5bc66617471aba27de25c8906a0f4f8f38199a6a373d1305c2608fd1b2189151b69e438f406c420299958d4085a9bd15bc4b036327e5ffee2dabda419d852ffc33cdd0d3aa07ebbc884cc95ff7a2dc4e8304a75e38ead463e49649b3aac765a9e6b3cb6", 0x7a}, {&(0x7f0000002d80)="0255975fa63f64ed69eea9d3b2855e5baab4611fb36144c8caeb8df33f2c582d0570f4a96feee3a7d0dd45434ebe4d9bbbd440b0753c4d7afabd26c3a3dadf24a353874767897a6c66dcec535f06f8a1f0cfb12cc859f45546e1fa33b1348b7679a6a94840205543ae5673c7057b578b7052f83cc3598969fc6df57f8084641a56", 0x81}], 0x4, &(0x7f0000002e80)=[@flowinfo={{0x14, 0x29, 0xb, 0x5}}], 0x18}}], 0x4, 0x20000080) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000a00)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="201108"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7c5400d0cb12720000005cd65a87d7788f41050349126460000000000000e0000003000000000000002200000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000002000000000000000000000000000000000000000000000000000000000000000000000100000000c4000500e0000001000000000000000000000000000000003c00000000000000e00000010000000000000000000000000200000000000000feffffff0000000000000000fe880000000000000000000000000001000000003c00000000000000fe80000000000000000000000000000000000000040000000100000000000000000000007f000001000000000000000000000000000400003200000008000000fc010000000000000000000000000000000000000400"/308], 0x17c}}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_POWER(r7, 0x112, 0x9, &(0x7f0000000080)=0x6, 0x1) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_clone(0x6e0a0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000001640)={0x92080000, 0x0, 0x0, 0x0, {0x32}, 0x0, 0x0, 0x0, 0x0}, 0x58) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x9, 0x202, 0x7, 0x101}, 0x10) 452.717µs ago: executing program 6 (id=4183): openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000180)={'raw\x00', 0x0, [0xffffffff, 0x2, 0xfff, 0x472, 0x9]}, &(0x7f0000000200)=0x54) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0xc, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x3, 0x439, 0x6, 0x9, 0x4, 0x8, '\x00', 0x4, 0x4}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 7 (id=4184): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, 0x0, &(0x7f0000000040)=0xc00) ioctl$TIOCL_SELLOADLUT(r0, 0x541c, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000340)=0x1) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r3 = socket(0x1d, 0x80802, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000380)={0x1d, r4, 0x1, {0x0, 0xf0, 0x3}, 0xfe}, 0x18) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d45520000000800024000000001340003"], 0x104}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x20, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f00000005c0)={0x274, r8, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x170, 0x3, 0x0, 0x1, [{0xa8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xa1, 0x1, "d4baeed0336ab209efb3b0d56855b4353f5690fddd2590aec0874fbbe449a80e90567f94896b9c355d96dab5fd32e715c5267764c702c039d3eb4e7a691b866b71ac143197d269eb4ac29a798594966191fbfe17e51852380997b11c8afab9749894b1254377b0b7f239bc9d6db5db5a314d51fa7d6097f1e7be188a7c8dc649115064f4f8bc9a73252978c3c688c0a0921f43ed39c5d1c74117ea04c0"}}, {0xb8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xb2, 0x2, "7c0b329aa4d44f8a3066910b1eb4e2ee6d68821d4a9bc67ab059f0bbf6120ca90110b25e5314d76f2793e585066a6da87e7422138a4f857bd1ba19d57e6810dd8a3cf0fabb9f2e02c62b3ca3a41c6fe2465791041f2c6dfdf3019b08a86295c4e7573f9b181f635ec4ee145b1d8c706037b2cca21c54f4790049b7b0e33731eea8435d1c2290b078ec2a836483339bbe88256c2a3bc759286dc057093599c2c982683ba11b037c5fffa12629e79e"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x2c4f}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xf0, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7}}, {0xe0, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xd9, 0x1, "454833e9b94430b6788bb06537b405c3dcba2c483b888ce69ca466318545891513d12aa8d182794b7aeef75ad9c8527a745b286f580519881f43d3ebf702f5dd1156d3d612a6020aa518fb735213c942641d015727327b532573c5cb9d566eaa8380d9562c2f4c4d24a5882d49015905ac24652eddf8c229350cf354d76480ea2d671366d7a87f65936a681723e1d171079a53298ce25746bc25dfe67365fe2da6a380f979a34ccff276bac6c8b6ba3fb3736ba97d35391ed588e9aa46ccb71e976afa37d69b7ea8efb6cf41c6c7122efc38d0ce2b"}}]}]}, 0x274}, 0x1, 0x0, 0x0, 0x8000}, 0x20048000) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x1000, 0x21}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000) r10 = dup3(r2, r0, 0x80000) ioctl$KDSKBMODE(r10, 0x4b45, 0x0) kernel console output (not intermixed with test programs): config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 730.153393][T23900] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 730.153431][T23900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.159385][T23900] usb 3-1: config 0 descriptor?? [ 730.300966][ T5698] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 730.451851][ T5698] usb 5-1: unable to get BOS descriptor or descriptor too short [ 730.452529][ T5698] usb 5-1: not running at top speed; connect to a high speed hub [ 730.452562][ T5698] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=b2.86 [ 730.453554][ T5698] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 730.453575][ T5698] usb 5-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 730.456524][ T5698] usb 5-1: string descriptor 0 read error: -22 [ 730.456673][ T5698] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.555578][ T30] audit: type=1800 audit(1787253530.228:221): pid=31297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3790" name="file" dev="configfs" ino=159817 res=0 errno=0 [ 730.573294][T31297] mass_storage.0/lun.0: unable to open backing file: fi [ 730.607851][T23900] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0034/input/input56 [ 730.714311][T23900] microsoft 0003:045E:07DA.0034: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 730.810631][ T5698] snd-usb-6fire 5-1:2.0: unable to receive device firmware state. [ 730.810668][ T5698] snd-usb-6fire 5-1:2.0: probe with driver snd-usb-6fire failed with error -121 [ 730.997126][ T30] audit: type=1800 audit(1787253530.669:222): pid=31323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3793" name="file" dev="configfs" ino=159829 res=0 errno=0 [ 731.015366][T31323] mass_storage.0/lun.0: unable to open backing file: fi [ 731.779877][T31360] kvm: pic: level sensitive irq not supported [ 731.779965][T31360] kvm: pic: non byte read [ 731.792790][T31360] kvm: pic: level sensitive irq not supported [ 731.792906][T31360] kvm: pic: non byte read [ 731.803702][T31360] kvm: pic: level sensitive irq not supported [ 731.803824][T31360] kvm: pic: non byte read [ 731.814969][T31360] kvm: pic: level sensitive irq not supported [ 731.815093][T31360] kvm: pic: non byte read [ 731.827962][T31360] kvm: pic: level sensitive irq not supported [ 731.871429][T23900] usb 3-1: reset high-speed USB device number 91 using dummy_hcd [ 732.159716][ T30] audit: type=1800 audit(1787253531.832:223): pid=31385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3799" name="file" dev="configfs" ino=159983 res=0 errno=0 [ 732.169962][T31385] mass_storage.0/lun.0: unable to open backing file: fi [ 732.396444][T31395] FAULT_INJECTION: forcing a failure. [ 732.396444][T31395] name failslab, interval 1, probability 0, space 0, times 0 [ 732.396496][T31395] CPU: 0 UID: 0 PID: 31395 Comm: syz.3.3801 Tainted: G L syzkaller #0 PREEMPT(full) [ 732.396525][T31395] Tainted: [L]=SOFTLOCKUP [ 732.396532][T31395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 732.396544][T31395] Call Trace: [ 732.396553][T31395] [ 732.396562][T31395] dump_stack_lvl+0xe8/0x150 [ 732.396591][T31395] should_fail_ex+0x410/0x560 [ 732.396628][T31395] should_failslab+0xa8/0x100 [ 732.396649][T31395] __kmalloc_noprof+0xfe/0x720 [ 732.396675][T31395] ? __register_sysctl_table+0x6f/0x1370 [ 732.396780][T31395] ? __register_sysctl_table+0x6f/0x1370 [ 732.396812][T31395] __register_sysctl_table+0x6f/0x1370 [ 732.396841][T31395] ? __asan_memcpy+0x40/0x70 [ 732.396869][T31395] register_pidns_sysctls+0xff/0x1e0 [ 732.396899][T31395] copy_pid_ns+0x51e/0x900 [ 732.396934][T31395] ? __pfx_copy_pid_ns+0x10/0x10 [ 732.396961][T31395] ? rcu_is_watching+0x16/0xb0 [ 732.396983][T31395] ? __pfx_copy_mnt_ns+0x10/0x10 [ 732.397010][T31395] ? copy_ipcs+0x2a9/0x6c0 [ 732.397095][T31395] ? copy_utsname+0x184/0x620 [ 732.397119][T31395] create_new_namespaces+0x2ad/0x6b0 [ 732.397144][T31395] ? security_capable+0x7e/0x2c0 [ 732.397200][T31395] unshare_nsproxy_namespaces+0x149/0x190 [ 732.397225][T31395] ksys_unshare+0x5a7/0x950 [ 732.397257][T31395] ? __pfx_ksys_unshare+0x10/0x10 [ 732.397290][T31395] ? __pfx_ksys_write+0x10/0x10 [ 732.397321][T31395] __x64_sys_unshare+0x38/0x50 [ 732.397343][T31395] do_syscall_64+0x166/0x520 [ 732.397363][T31395] ? trace_irq_disable+0x3b/0x140 [ 732.397388][T31395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.397408][T31395] ? clear_bhb_loop+0x70/0xc0 [ 732.397431][T31395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.397451][T31395] RIP: 0033:0x7ff21cb9e0d9 [ 732.397470][T31395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 732.397486][T31395] RSP: 002b:00007ff21da93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 732.397507][T31395] RAX: ffffffffffffffda RBX: 00007ff21ce25fa0 RCX: 00007ff21cb9e0d9 [ 732.397522][T31395] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 732.397534][T31395] RBP: 00007ff21da93090 R08: 0000000000000000 R09: 0000000000000000 [ 732.397547][T31395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 732.397560][T31395] R13: 00007ff21ce26038 R14: 00007ff21ce25fa0 R15: 00007ffd1afa3998 [ 732.397589][T31395] [ 732.645898][ T30] audit: type=1800 audit(1787253532.313:224): pid=31402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3803" name="file" dev="configfs" ino=160983 res=0 errno=0 [ 732.681817][T31404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 732.687597][T31402] mass_storage.0/lun.0: unable to open backing file: fi [ 732.700739][T31404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 733.126801][ T49] usb 5-1: USB disconnect, device number 55 [ 733.504388][ T30] audit: type=1800 audit(1787253533.164:225): pid=31452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3811" name="file" dev="configfs" ino=161213 res=0 errno=0 [ 733.530609][T31452] mass_storage.0/lun.0: unable to open backing file: fi [ 733.843295][ T30] audit: type=1800 audit(1787253533.525:226): pid=31475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3814" name="file" dev="configfs" ino=160303 res=0 errno=0 [ 733.876470][T31475] mass_storage.0/lun.0: unable to open backing file: fi [ 733.962897][T31481] gadgetfs: bound to dummy_udc driver [ 734.321301][ T30] audit: type=1800 audit(1787253533.996:227): pid=31512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3820" name="file" dev="configfs" ino=160549 res=0 errno=0 [ 734.348004][ T49] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 734.363630][T31512] mass_storage.0/lun.0: unable to open backing file: fi [ 734.466845][T31518] netlink: 436 bytes leftover after parsing attributes in process `syz.2.3821'. [ 734.471911][T31518] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3821'. [ 734.504613][ T49] usb 7-1: unable to get BOS descriptor or descriptor too short [ 734.513664][ T49] usb 7-1: not running at top speed; connect to a high speed hub [ 734.513731][ T49] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=b2.86 [ 734.534066][ T49] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 734.545505][ T49] usb 7-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 734.560046][ T49] usb 7-1: string descriptor 0 read error: -22 [ 734.567006][ T49] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.612781][ T30] audit: type=1800 audit(1787253534.296:228): pid=31525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3824" name="file" dev="configfs" ino=161540 res=0 errno=0 [ 734.885161][ T49] snd-usb-6fire 7-1:2.0: unable to receive device firmware state. [ 734.893862][ T49] snd-usb-6fire 7-1:2.0: probe with driver snd-usb-6fire failed with error -121 [ 735.110664][ T5725] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 735.261048][ T5725] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 735.262038][ T5725] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 735.262086][ T5725] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.271741][ T5725] usb 5-1: config 0 descriptor?? [ 735.281306][ T5725] pwc: Askey VC010 type 2 USB webcam detected. [ 735.677929][ T5725] pwc: recv_control_msg error -32 req 02 val 2b00 [ 735.681726][T31546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 735.697538][T31546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 735.907386][ T5725] pwc: recv_control_msg error -71 req 02 val 2c00 [ 735.907841][ T5725] pwc: recv_control_msg error -71 req 04 val 1000 [ 735.908216][ T5725] pwc: recv_control_msg error -71 req 04 val 1300 [ 735.908641][ T5725] pwc: recv_control_msg error -71 req 04 val 1400 [ 735.910072][ T5725] pwc: recv_control_msg error -71 req 02 val 2000 [ 735.910853][ T5725] pwc: recv_control_msg error -71 req 02 val 2100 [ 735.911251][ T5725] pwc: recv_control_msg error -71 req 04 val 1500 [ 735.913266][ T5725] pwc: recv_control_msg error -71 req 02 val 2500 [ 735.916702][ T5725] pwc: recv_control_msg error -71 req 02 val 2400 [ 735.920036][ T5725] pwc: recv_control_msg error -71 req 02 val 2600 [ 735.922364][ T5725] pwc: recv_control_msg error -71 req 02 val 2900 [ 735.922883][ T5725] pwc: recv_control_msg error -71 req 02 val 2800 [ 735.926591][ T5725] pwc: recv_control_msg error -71 req 04 val 1100 [ 735.928726][ T5725] pwc: recv_control_msg error -71 req 04 val 1200 [ 735.952311][ T5725] pwc: Registered as video103. [ 735.961068][ T5725] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input57 [ 735.994924][ T5725] usb 5-1: USB disconnect, device number 56 [ 736.272929][ T30] audit: type=1800 audit(1787253535.960:229): pid=31613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3831" name="file" dev="configfs" ino=161773 res=0 errno=0 [ 736.301634][T31613] mass_storage.0/lun.0: unable to open backing file: fi [ 736.436426][T31619] FAULT_INJECTION: forcing a failure. [ 736.436426][T31619] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 736.436487][T31619] CPU: 0 UID: 0 PID: 31619 Comm: syz.2.3832 Tainted: G L syzkaller #0 PREEMPT(full) [ 736.436513][T31619] Tainted: [L]=SOFTLOCKUP [ 736.436519][T31619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 736.436529][T31619] Call Trace: [ 736.436536][T31619] [ 736.436543][T31619] dump_stack_lvl+0xe8/0x150 [ 736.436571][T31619] should_fail_ex+0x410/0x560 [ 736.436605][T31619] _copy_to_user+0x31/0xb0 [ 736.436627][T31619] simple_read_from_buffer+0xe1/0x170 [ 736.436656][T31619] proc_fail_nth_read+0x1bb/0x230 [ 736.436679][T31619] ? common_file_perm+0x20e/0x2b0 [ 736.436712][T31619] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 736.436740][T31619] ? rw_verify_area+0x24a/0x4c0 [ 736.436766][T31619] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 736.436791][T31619] vfs_read+0x213/0xa80 [ 736.436819][T31619] ? __pfx___mutex_lock+0x10/0x10 [ 736.436840][T31619] ? __pfx_vfs_read+0x10/0x10 [ 736.436865][T31619] ? __fget_files+0x2a/0x420 [ 736.436899][T31619] ? __fget_files+0x3a2/0x420 [ 736.436920][T31619] ? __fget_files+0x2a/0x420 [ 736.436949][T31619] ksys_read+0x150/0x270 [ 736.436976][T31619] ? __pfx_ksys_read+0x10/0x10 [ 736.436999][T31619] ? __pfx_v4l2_ioctl+0x10/0x10 [ 736.437125][T31619] do_syscall_64+0x166/0x520 [ 736.437142][T31619] ? trace_irq_disable+0x3b/0x140 [ 736.437169][T31619] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.437189][T31619] ? clear_bhb_loop+0x70/0xc0 [ 736.437213][T31619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.437232][T31619] RIP: 0033:0x7f8b99b5e90e [ 736.437250][T31619] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 736.437267][T31619] RSP: 002b:00007f8b9aa3ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 736.437289][T31619] RAX: ffffffffffffffda RBX: 00007f8b9aa406c0 RCX: 00007f8b99b5e90e [ 736.437303][T31619] RDX: 000000000000000f RSI: 00007f8b9aa400a0 RDI: 0000000000000004 [ 736.437316][T31619] RBP: 00007f8b9aa40090 R08: 0000000000000000 R09: 0000000000000000 [ 736.437329][T31619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 736.437341][T31619] R13: 00007f8b99e26038 R14: 00007f8b99e25fa0 R15: 00007ffdf986b7d8 [ 736.437371][T31619] [ 736.703389][ T30] audit: type=1800 audit(1787253536.390:230): pid=31624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3835" name="file" dev="configfs" ino=162873 res=0 errno=0 [ 736.832942][T31635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 736.833421][T31635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.076984][T23900] usb 3-1: device descriptor read/64, error -110 [ 737.105436][ T5705] usb 7-1: USB disconnect, device number 20 [ 737.316717][T23900] usb 3-1: reset high-speed USB device number 91 using dummy_hcd [ 737.456308][T23900] usb 3-1: device descriptor read/64, error -32 [ 737.551991][ T30] audit: type=1800 audit(1787253537.242:231): pid=31674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3843" name="file" dev="configfs" ino=162362 res=0 errno=0 [ 737.553901][T31672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3842'. [ 737.588147][T31674] mass_storage.0/lun.0: unable to open backing file: fi [ 737.696386][T23900] usb 3-1: reset high-speed USB device number 91 using dummy_hcd [ 737.719418][T23900] usb 3-1: device descriptor read/8, error -32 [ 737.791230][ T30] audit: type=1800 audit(1787253537.472:232): pid=31695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3846" name="file" dev="configfs" ino=162506 res=0 errno=0 [ 737.985310][T23900] usb 3-1: reset high-speed USB device number 91 using dummy_hcd [ 738.007062][T23900] usb 3-1: device descriptor read/8, error -32 [ 738.115197][T23900] raw-gadget.0 gadget.2: failed to queue suspend event [ 738.126888][T31720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 738.128352][ T5698] usb 3-1: USB disconnect, device number 91 [ 738.148185][T31720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 738.211764][ T5698] raw-gadget.0 gadget.2: failed to queue reset event [ 738.216801][ T885] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 738.278108][ T5698] raw-gadget.0 gadget.2: failed to queue resume event [ 738.334735][ T5698] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 738.334977][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 738.335127][ T5698] raw-gadget.0 gadget.2: failed to queue reset event [ 738.380875][ T885] usb 7-1: unable to get BOS descriptor or descriptor too short [ 738.385195][ T885] usb 7-1: not running at top speed; connect to a high speed hub [ 738.385228][ T885] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=b2.86 [ 738.387533][ T885] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 738.387556][ T885] usb 7-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 738.392186][ T885] usb 7-1: string descriptor 0 read error: -22 [ 738.392324][ T885] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.405427][ T5698] raw-gadget.0 gadget.2: failed to queue resume event [ 738.464454][ T5698] usb 3-1: device descriptor read/64, error -32 [ 738.487387][T31750] FAULT_INJECTION: forcing a failure. [ 738.487387][T31750] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 738.487464][T31750] CPU: 1 UID: 0 PID: 31750 Comm: syz.2.3852 Tainted: G L syzkaller #0 PREEMPT(full) [ 738.487488][T31750] Tainted: [L]=SOFTLOCKUP [ 738.487494][T31750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 738.487503][T31750] Call Trace: [ 738.487511][T31750] [ 738.487518][T31750] dump_stack_lvl+0xe8/0x150 [ 738.487549][T31750] should_fail_ex+0x410/0x560 [ 738.487585][T31750] _copy_from_iter+0x1d3/0x1660 [ 738.487623][T31750] ? __pfx__copy_from_iter+0x10/0x10 [ 738.487648][T31750] ? __sk_mem_raise_allocated+0x292/0x1250 [ 738.487676][T31750] ? alloc_pages_noprof+0x140/0x2b0 [ 738.487703][T31750] ? __sk_mem_schedule+0x7b/0xf0 [ 738.487733][T31750] tcp_sendmsg_locked+0x2620/0x55c0 [ 738.487832][T31750] ? __lock_acquire+0x6df/0x2e50 [ 738.487905][T31750] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 738.487932][T31750] ? tcp_sendmsg+0x21/0x50 [ 738.487953][T31750] ? __local_bh_enable_ip+0xd6/0x140 [ 738.487981][T31750] tcp_sendmsg+0x2f/0x50 [ 738.487998][T31750] ? __pfx_inet6_sendmsg+0x10/0x10 [ 738.488024][T31750] sock_sendmsg_nosec+0x90/0x180 [ 738.488056][T31750] sock_write_iter+0x2de/0x3e0 [ 738.488085][T31750] ? __pfx_sock_write_iter+0x10/0x10 [ 738.488119][T31750] ? bpf_lsm_file_permission+0x9/0x20 [ 738.488141][T31750] ? security_file_permission+0x75/0x260 [ 738.488173][T31750] vfs_write+0x612/0xba0 [ 738.488204][T31750] ? __pfx_vfs_write+0x10/0x10 [ 738.488238][T31750] ? __fget_files+0x2a/0x420 [ 738.488285][T31750] ksys_write+0x150/0x270 [ 738.488310][T31750] ? __pfx_ksys_write+0x10/0x10 [ 738.488345][T31750] do_syscall_64+0x166/0x520 [ 738.488364][T31750] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.488384][T31750] ? clear_bhb_loop+0x70/0xc0 [ 738.488407][T31750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.488426][T31750] RIP: 0033:0x7f8b99b9e0d9 [ 738.488445][T31750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 738.488462][T31750] RSP: 002b:00007f8b9aa40028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 738.488482][T31750] RAX: ffffffffffffffda RBX: 00007f8b99e25fa0 RCX: 00007f8b99b9e0d9 [ 738.488497][T31750] RDX: 00000000fffffdcf RSI: 0000200000000400 RDI: 0000000000000004 [ 738.488510][T31750] RBP: 00007f8b9aa40090 R08: 0000000000000000 R09: 0000000000000000 [ 738.488523][T31750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 738.488535][T31750] R13: 00007f8b99e26038 R14: 00007f8b99e25fa0 R15: 00007ffdf986b7d8 [ 738.488566][T31750] [ 738.575351][ T5698] raw-gadget.0 gadget.2: failed to queue suspend event [ 738.576215][ T5698] raw-gadget.0 gadget.2: failed to queue reset event [ 738.644720][ T5698] raw-gadget.0 gadget.2: failed to queue resume event [ 738.699959][ T5626] Bluetooth: hci1: command 0x0406 tx timeout [ 738.705716][ T5698] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 738.705961][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 738.706201][ T5698] raw-gadget.0 gadget.2: failed to queue reset event [ 738.746978][ T30] audit: type=1800 audit(1787253538.434:233): pid=31754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3854" name="file" dev="configfs" ino=163443 res=0 errno=0 [ 738.747689][ T885] snd-usb-6fire 7-1:2.0: unable to receive device firmware state. [ 738.747716][ T885] snd-usb-6fire 7-1:2.0: probe with driver snd-usb-6fire failed with error -121 [ 738.773718][T31754] mass_storage.0/lun.0: unable to open backing file: fi [ 738.774099][ T5698] raw-gadget.0 gadget.2: failed to queue resume event [ 738.835226][ T5698] usb 3-1: device descriptor read/64, error -32 [ 738.944118][ T5698] raw-gadget.0 gadget.2: failed to queue suspend event [ 738.946083][ T5698] usb usb3-port1: attempt power cycle [ 738.946195][ T5698] raw-gadget.0 gadget.2: failed to queue disconnect event [ 738.946838][ T5698] raw-gadget.0 gadget.2: failed to queue reset event [ 738.974930][T31762] FAULT_INJECTION: forcing a failure. [ 738.974930][T31762] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 738.974990][T31762] CPU: 1 UID: 0 PID: 31762 Comm: syz.4.3853 Tainted: G L syzkaller #0 PREEMPT(full) [ 738.975015][T31762] Tainted: [L]=SOFTLOCKUP [ 738.975021][T31762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 738.975032][T31762] Call Trace: [ 738.975041][T31762] [ 738.975056][T31762] dump_stack_lvl+0xe8/0x150 [ 738.975086][T31762] should_fail_ex+0x410/0x560 [ 738.975119][T31762] prepare_alloc_pages+0x223/0x600 [ 738.975152][T31762] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 738.975183][T31762] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 738.975215][T31762] ? __pfx_policy_nodemask+0x10/0x10 [ 738.975244][T31762] alloc_pages_mpol+0x21e/0x390 [ 738.975272][T31762] folio_alloc_mpol_noprof+0x39/0x160 [ 738.975295][T31762] swap_cache_alloc_folio+0x2c1/0x990 [ 738.975332][T31762] read_swap_cache_async+0xe4/0x210 [ 738.975358][T31762] ? __pfx_read_swap_cache_async+0x10/0x10 [ 738.975385][T31762] ? madvise_vma_behavior+0xb91/0x41d0 [ 738.975418][T31762] madvise_vma_behavior+0x2d14/0x41d0 [ 738.975447][T31762] ? madvise_vma_behavior+0xb91/0x41d0 [ 738.975481][T31762] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 738.975513][T31762] ? lock_acquire+0x115/0x350 [ 738.975555][T31762] ? process_measurement+0x7b2/0x1c10 [ 738.975661][T31762] ? up_write+0x19d/0x4a0 [ 738.975686][T31762] ? process_measurement+0x14fb/0x1c10 [ 738.975711][T31762] ? kasan_quarantine_put+0xbb/0x1f0 [ 738.975747][T31762] ? __pfx_process_measurement+0x10/0x10 [ 738.975771][T31762] ? tomoyo_check_open_permission+0x38e/0x470 [ 738.975803][T31762] ? __lock_acquire+0x6df/0x2e50 [ 738.975842][T31762] ? mas_prev_slot+0xb76/0xbf0 [ 738.975901][T31762] ? _parse_integer_limit+0x18f/0x1e0 [ 738.975933][T31762] madvise_walk_vmas+0x576/0xb00 [ 738.975973][T31762] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 738.976005][T31762] ? blk_start_plug+0x6e/0x1b0 [ 738.976087][T31762] madvise_do_behavior+0x385/0x540 [ 738.976121][T31762] ? __pfx_madvise_do_behavior+0x10/0x10 [ 738.976157][T31762] ? down_read+0x2be/0x330 [ 738.976186][T31762] do_madvise+0x327/0x3a0 [ 738.976214][T31762] ? __pfx_do_madvise+0x10/0x10 [ 738.976264][T31762] ? __pfx_ksys_write+0x10/0x10 [ 738.976294][T31762] __x64_sys_madvise+0xa6/0xc0 [ 738.976324][T31762] do_syscall_64+0x166/0x520 [ 738.976341][T31762] ? trace_irq_disable+0x3b/0x140 [ 738.976367][T31762] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.976387][T31762] ? clear_bhb_loop+0x70/0xc0 [ 738.976410][T31762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.976430][T31762] RIP: 0033:0x7f9b78f9e0d9 [ 738.976448][T31762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 738.976464][T31762] RSP: 002b:00007f9b79ec3028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 738.976487][T31762] RAX: ffffffffffffffda RBX: 00007f9b79226090 RCX: 00007f9b78f9e0d9 [ 738.976501][T31762] RDX: 0000000000000003 RSI: 0000000000600000 RDI: 0000200000000000 [ 738.976514][T31762] RBP: 00007f9b79ec3090 R08: 0000000000000000 R09: 0000000000000000 [ 738.976526][T31762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 738.976538][T31762] R13: 00007f9b79226128 R14: 00007f9b79226090 R15: 00007ffcf45b0948 [ 738.976572][T31762] [ 739.016572][ T5698] raw-gadget.0 gadget.2: failed to queue resume event [ 739.017033][ T5698] raw-gadget.0 gadget.2: failed to queue reset event [ 739.227162][ T5698] raw-gadget.0 gadget.2: failed to queue resume event [ 739.283307][ T5698] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 739.303655][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 739.303790][ T5698] usb 3-1: device descriptor read/8, error -32 [ 739.315867][ T30] audit: type=1400 audit(1787253538.995:234): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name="test_profile" pid=31779 comm="syz.2.3855" [ 739.414388][ T5698] raw-gadget.0 gadget.2: failed to queue suspend event [ 739.414736][ T5698] raw-gadget.0 gadget.2: failed to queue reset event [ 739.483982][ T5698] raw-gadget.0 gadget.2: failed to queue resume event [ 739.542561][ T5698] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 739.562661][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 739.562802][ T5698] usb 3-1: device descriptor read/8, error -32 [ 739.587651][ T30] audit: type=1800 audit(1787253539.276:235): pid=31797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3858" name="file" dev="configfs" ino=162667 res=0 errno=0 [ 739.672739][ T5698] raw-gadget.0 gadget.2: failed to queue suspend event [ 739.672933][ T5698] usb usb3-port1: unable to enumerate USB device [ 740.509121][ T30] audit: type=1800 audit(1787253540.197:236): pid=31829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3863" name="file" dev="configfs" ino=164886 res=0 errno=0 [ 740.532362][T31829] mass_storage.0/lun.0: unable to open backing file: fi [ 740.717872][ T52] Bluetooth: hci4: unexpected event for opcode 0x2040 [ 740.836452][T31842] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 740.908862][T31848] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 740.989130][T31850] syzkaller1: entered promiscuous mode [ 740.989184][T31850] syzkaller1: entered allmulticast mode [ 740.992273][T31850] FAULT_INJECTION: forcing a failure. [ 740.992273][T31850] name failslab, interval 1, probability 0, space 0, times 0 [ 740.992307][T31850] CPU: 0 UID: 0 PID: 31850 Comm: syz.4.3868 Tainted: G L syzkaller #0 PREEMPT(full) [ 740.992333][T31850] Tainted: [L]=SOFTLOCKUP [ 740.992341][T31850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 740.992353][T31850] Call Trace: [ 740.992361][T31850] [ 740.992369][T31850] dump_stack_lvl+0xe8/0x150 [ 740.992400][T31850] should_fail_ex+0x410/0x560 [ 740.992433][T31850] should_failslab+0xa8/0x100 [ 740.992458][T31850] ? dst_alloc+0x105/0x170 [ 740.992568][T31850] kmem_cache_alloc_noprof+0xa1/0x600 [ 740.992596][T31850] ? dst_alloc+0x105/0x170 [ 740.992623][T31850] ? fib_lookup+0x76/0x440 [ 740.992689][T31850] dst_alloc+0x105/0x170 [ 740.992720][T31850] ip_route_input_rcu+0x20ca/0x3190 [ 740.992755][T31850] ? __pfx_ip_route_input_rcu+0x10/0x10 [ 740.992812][T31850] ? ip_route_input_noref+0xad/0x270 [ 740.992840][T31850] ip_route_input_noref+0x17c/0x270 [ 740.992870][T31850] ? __pfx_ip_route_input_noref+0x10/0x10 [ 740.992902][T31850] ? ipt_do_table+0x2b9/0x15d0 [ 740.992996][T31850] ? __pfx_ipt_do_table+0x10/0x10 [ 740.993017][T31850] ip_rcv_finish_core+0x593/0x1c00 [ 740.993052][T31850] ip_rcv_finish+0x14c/0x2a0 [ 740.993077][T31850] NF_HOOK+0x336/0x3c0 [ 740.993099][T31850] ? __pfx_ip_rcv_finish+0x10/0x10 [ 740.993120][T31850] ? NF_HOOK+0x9e/0x3c0 [ 740.993140][T31850] ? __pfx_NF_HOOK+0x10/0x10 [ 740.993162][T31850] ? __pfx_ip_rcv_finish+0x10/0x10 [ 740.993190][T31850] ? netif_receive_skb+0x102/0xbf0 [ 740.993246][T31850] ? __pfx_ip_rcv+0x10/0x10 [ 740.993266][T31850] netif_receive_skb+0x45b/0xbf0 [ 740.993300][T31850] ? __pfx_netif_receive_skb+0x10/0x10 [ 740.993333][T31850] ? rcu_is_watching+0x16/0xb0 [ 740.993352][T31850] ? tun_rx_batched+0x185/0x790 [ 740.993376][T31850] tun_rx_batched+0x1de/0x790 [ 740.993403][T31850] ? __pfx_tun_rx_batched+0x10/0x10 [ 740.993424][T31850] ? lock_acquire+0x115/0x350 [ 740.993458][T31850] ? tun_get_user+0x23ba/0x44d0 [ 740.993477][T31850] ? __local_bh_enable_ip+0xd6/0x140 [ 740.993499][T31850] ? tun_get_user+0x27b0/0x44d0 [ 740.993529][T31850] tun_get_user+0x2be0/0x44d0 [ 740.993562][T31850] ? tun_get_user+0x27b0/0x44d0 [ 740.993587][T31850] ? aa_file_perm+0x4ed/0x15f0 [ 740.993607][T31850] ? __pfx_tun_get_user+0x10/0x10 [ 740.993629][T31850] ? __lock_acquire+0x6df/0x2e50 [ 740.993669][T31850] ? ref_tracker_alloc+0x341/0x4b0 [ 740.993698][T31850] ? lock_acquire+0x115/0x350 [ 740.993726][T31850] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 740.993760][T31850] ? lock_acquire+0x115/0x350 [ 740.993786][T31850] ? tun_get+0x1c/0x2f0 [ 740.993811][T31850] ? tun_get+0x1c/0x2f0 [ 740.993830][T31850] ? tun_get+0x1c/0x2f0 [ 740.993854][T31850] tun_chr_write_iter+0x113/0x200 [ 740.993876][T31850] vfs_write+0x612/0xba0 [ 740.993908][T31850] ? __pfx_vfs_write+0x10/0x10 [ 740.993942][T31850] ? __fget_files+0x2a/0x420 [ 740.993973][T31850] ksys_write+0x150/0x270 [ 740.993999][T31850] ? __pfx_ksys_write+0x10/0x10 [ 740.994034][T31850] do_syscall_64+0x166/0x520 [ 740.994052][T31850] ? trace_irq_disable+0x3b/0x140 [ 740.994079][T31850] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.994099][T31850] ? clear_bhb_loop+0x70/0xc0 [ 740.994123][T31850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.994142][T31850] RIP: 0033:0x7f9b78f9e0d9 [ 740.994160][T31850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 740.994176][T31850] RSP: 002b:00007f9b79ee4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 740.994197][T31850] RAX: ffffffffffffffda RBX: 00007f9b79225fa0 RCX: 00007f9b78f9e0d9 [ 740.994211][T31850] RDX: 0000000000000036 RSI: 0000200000000200 RDI: 0000000000000003 [ 740.994224][T31850] RBP: 00007f9b79ee4090 R08: 0000000000000000 R09: 0000000000000000 [ 740.994236][T31850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 740.994248][T31850] R13: 00007f9b79226038 R14: 00007f9b79225fa0 R15: 00007ffcf45b0948 [ 740.994280][T31850] [ 741.126586][ T5725] usb 7-1: USB disconnect, device number 21 [ 741.431294][ T30] audit: type=1800 audit(1787253541.129:237): pid=31870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3872" name="file" dev="configfs" ino=164092 res=0 errno=0 [ 741.483404][T31870] mass_storage.0/lun.0: unable to open backing file: fi [ 741.857755][T31893] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 741.943288][T31898] syzkaller0: entered allmulticast mode [ 742.039822][ T30] audit: type=1800 audit(1787253541.740:238): pid=31906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3870" name="file" dev="configfs" ino=164255 res=0 errno=0 [ 742.183674][T31916] binder: 31914:31916 ioctl c00c620f 0 returned -14 [ 742.246711][ T30] audit: type=1800 audit(1787253541.940:239): pid=31927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3881" name="file" dev="configfs" ino=165225 res=0 errno=0 [ 742.263836][T31927] mass_storage.0/lun.0: unable to open backing file: fi [ 742.327989][ T5698] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 742.364838][T31932] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3882'. [ 742.447958][T23900] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 742.479853][ T5698] usb 5-1: unable to get BOS descriptor or descriptor too short [ 742.481792][ T5698] usb 5-1: not running at top speed; connect to a high speed hub [ 742.481825][ T5698] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=b2.86 [ 742.482926][ T5698] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 742.482948][ T5698] usb 5-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 742.486515][ T5698] usb 5-1: string descriptor 0 read error: -22 [ 742.486635][ T5698] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.600670][T23900] usb 7-1: Using ep0 maxpacket: 32 [ 742.609533][T23900] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 742.618925][T23900] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 742.618956][T23900] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 742.619030][T23900] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.626045][T23900] usb 7-1: config 0 descriptor?? [ 742.635156][T23900] hub 7-1:0.0: USB hub found [ 742.764865][ T5698] snd-usb-6fire 5-1:2.0: unable to receive device firmware state. [ 742.764939][ T5698] snd-usb-6fire 5-1:2.0: probe with driver snd-usb-6fire failed with error -121 [ 742.839101][T23900] hub 7-1:0.0: 1 port detected [ 742.882244][T31958] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 743.133870][T23900] hub 7-1:0.0: config failed, can't get hub status (err -71) [ 743.141064][T23900] usbhid 7-1:0.0: can't add hid device: -71 [ 743.141159][T23900] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 743.171929][T23900] usb 7-1: USB disconnect, device number 22 [ 743.228731][ T30] audit: type=1800 audit(1787253542.922:240): pid=31999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3889" name="file" dev="configfs" ino=165449 res=0 errno=0 [ 743.403871][ T30] audit: type=1800 audit(1787253543.092:241): pid=32012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3890" name="file" dev="configfs" ino=165528 res=0 errno=0 [ 743.414877][T32012] mass_storage.0/lun.0: unable to open backing file: fi [ 743.464862][T32015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 743.467199][T32015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 743.814425][T32032] FAULT_INJECTION: forcing a failure. [ 743.814425][T32032] name failslab, interval 1, probability 0, space 0, times 0 [ 743.814465][T32032] CPU: 0 UID: 0 PID: 32032 Comm: syz.6.3894 Tainted: G L syzkaller #0 PREEMPT(full) [ 743.814492][T32032] Tainted: [L]=SOFTLOCKUP [ 743.814499][T32032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 743.814510][T32032] Call Trace: [ 743.814517][T32032] [ 743.814525][T32032] dump_stack_lvl+0xe8/0x150 [ 743.814552][T32032] should_fail_ex+0x410/0x560 [ 743.814584][T32032] should_failslab+0xa8/0x100 [ 743.814605][T32032] ? skb_clone+0x212/0x3a0 [ 743.814631][T32032] kmem_cache_alloc_noprof+0xa1/0x600 [ 743.814658][T32032] ? skb_clone+0x212/0x3a0 [ 743.814688][T32032] skb_clone+0x212/0x3a0 [ 743.814716][T32032] __netlink_deliver_tap+0x413/0x860 [ 743.814754][T32032] ? netlink_deliver_tap+0x2e/0x1b0 [ 743.814781][T32032] netlink_deliver_tap+0x19c/0x1b0 [ 743.814808][T32032] netlink_unicast+0x781/0x940 [ 743.814841][T32032] netlink_sendmsg+0x813/0xb40 [ 743.814877][T32032] ? __pfx_netlink_sendmsg+0x10/0x10 [ 743.814911][T32032] ? apparmor_socket_sendmsg+0x98/0x360 [ 743.814939][T32032] ? __pfx_netlink_sendmsg+0x10/0x10 [ 743.814964][T32032] sock_sendmsg_nosec+0x13a/0x180 [ 743.814996][T32032] ____sys_sendmsg+0x54e/0x850 [ 743.815025][T32032] ? __pfx_____sys_sendmsg+0x10/0x10 [ 743.815057][T32032] ? import_iovec+0x73/0xa0 [ 743.815081][T32032] ___sys_sendmsg+0x2a5/0x360 [ 743.815111][T32032] ? __lock_acquire+0x6df/0x2e50 [ 743.815142][T32032] ? __pfx____sys_sendmsg+0x10/0x10 [ 743.815199][T32032] ? __fget_files+0x2a/0x420 [ 743.815220][T32032] ? __fget_files+0x3a2/0x420 [ 743.815251][T32032] __x64_sys_sendmsg+0x1b1/0x290 [ 743.815284][T32032] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 743.815328][T32032] do_syscall_64+0x166/0x520 [ 743.815347][T32032] ? trace_irq_disable+0x3b/0x140 [ 743.815372][T32032] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.815392][T32032] ? clear_bhb_loop+0x70/0xc0 [ 743.815416][T32032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.815436][T32032] RIP: 0033:0x7f6b4799e0d9 [ 743.815453][T32032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 743.815470][T32032] RSP: 002b:00007f6b4891c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 743.815491][T32032] RAX: ffffffffffffffda RBX: 00007f6b47c26090 RCX: 00007f6b4799e0d9 [ 743.815506][T32032] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000005 [ 743.815519][T32032] RBP: 00007f6b4891c090 R08: 0000000000000000 R09: 0000000000000000 [ 743.815532][T32032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 743.815543][T32032] R13: 00007f6b47c26128 R14: 00007f6b47c26090 R15: 00007ffcb7013488 [ 743.815574][T32032] [ 744.198091][T32040] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 744.661911][ T30] audit: type=1800 audit(1787253544.354:242): pid=32061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3900" name="file" dev="configfs" ino=166045 res=0 errno=0 [ 744.665210][T32061] mass_storage.0/lun.0: unable to open backing file: fi [ 744.803157][T32074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 744.805724][T32074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 745.052668][T32095] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 745.109841][ T5705] usb 5-1: USB disconnect, device number 57 [ 745.422842][ T5725] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 745.498621][ T30] audit: type=1800 audit(1787253545.196:243): pid=32120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3911" name="file" dev="configfs" ino=166376 res=0 errno=0 [ 745.501597][T32120] mass_storage.0/lun.0: unable to open backing file: fi [ 745.552529][ T5725] usb 7-1: device descriptor read/64, error -71 [ 745.844716][ T5725] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 745.909279][T32143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 745.918410][T32143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 746.001803][ T5725] usb 7-1: device descriptor read/64, error -71 [ 746.111849][ T5725] usb usb7-port1: attempt power cycle [ 746.460946][ T5725] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 746.481504][ T5725] usb 7-1: device descriptor read/8, error -71 [ 746.722970][ T5725] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 746.741262][ T5725] usb 7-1: device descriptor read/8, error -71 [ 746.849491][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.853872][ T5725] usb usb7-port1: unable to enumerate USB device [ 747.079785][T32181] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 747.279132][ T30] audit: type=1800 audit(1787253546.978:244): pid=32191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3920" name="file" dev="configfs" ino=166801 res=0 errno=0 [ 747.282063][T32191] mass_storage.0/lun.0: unable to open backing file: fi [ 747.398944][T32196] ISOFS: Unable to identify CD-ROM format. [ 747.708999][T23900] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 747.865917][T23900] usb 5-1: unable to get BOS descriptor or descriptor too short [ 747.865982][T23900] usb 5-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 747.866905][T23900] usb 5-1: config 1 has an invalid interface number: 97 but max is 1 [ 747.866927][T23900] usb 5-1: config 1 has no interface number 1 [ 747.866963][T23900] usb 5-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 747.866989][T23900] usb 5-1: too many endpoints for config 1 interface 97 altsetting 97: 97, using maximum allowed: 30 [ 747.867023][T23900] usb 5-1: config 1 interface 97 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 747.867048][T23900] usb 5-1: config 1 interface 0 has no altsetting 0 [ 747.867065][T23900] usb 5-1: config 1 interface 97 has no altsetting 0 [ 747.869159][T23900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.869181][T23900] usb 5-1: Product: syz [ 747.869196][T23900] usb 5-1: Manufacturer: syz [ 747.869210][T23900] usb 5-1: SerialNumber: syz [ 748.085461][T23900] smsusb:smsusb_probe: board id=8, interface number 0 [ 748.413024][T32231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 748.413684][T32231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 749.406460][ T30] audit: type=1800 audit(1787253549.112:245): pid=32250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3930" name="file" dev="configfs" ino=168282 res=0 errno=0 [ 749.438420][T32250] mass_storage.0/lun.0: unable to open backing file: fi [ 749.679261][ T5698] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 749.749590][T32275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 749.759392][T32275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 749.835992][ T5698] usb 7-1: Using ep0 maxpacket: 32 [ 749.838321][ T5698] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 749.839608][ T5698] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 749.839645][ T5698] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 749.839703][ T5698] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.849004][ T5698] usb 7-1: config 0 descriptor?? [ 749.863911][ T5698] hub 7-1:0.0: USB hub found [ 750.060467][ T5698] hub 7-1:0.0: 1 port detected [ 750.211974][T32315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 750.212530][T32315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 750.229902][T32315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 750.235574][T32315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 750.240098][T32315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 750.242152][T32315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 750.333067][ T5698] hub 7-1:0.0: config failed, can't get hub status (err -71) [ 750.350996][ T5698] usbhid 7-1:0.0: can't add hid device: -71 [ 750.357655][ T5698] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 750.385913][ T5698] usb 7-1: USB disconnect, device number 27 [ 750.501869][T23900] smsusb:smsusb_probe: board id=8, interface number 97 [ 750.523194][T23900] usb 5-1: USB disconnect, device number 58 [ 750.819408][ T30] audit: type=1800 audit(1787253550.524:246): pid=32348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3940" name="file" dev="configfs" ino=168608 res=0 errno=0 [ 750.822521][T32348] mass_storage.0/lun.0: unable to open backing file: fi [ 751.540098][T32386] FAULT_INJECTION: forcing a failure. [ 751.540098][T32386] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 751.540136][T32386] CPU: 0 UID: 0 PID: 32386 Comm: syz.6.3947 Tainted: G L syzkaller #0 PREEMPT(full) [ 751.540163][T32386] Tainted: [L]=SOFTLOCKUP [ 751.540170][T32386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 751.540182][T32386] Call Trace: [ 751.540189][T32386] [ 751.540196][T32386] dump_stack_lvl+0xe8/0x150 [ 751.540228][T32386] should_fail_ex+0x410/0x560 [ 751.540261][T32386] __kvm_read_guest_page+0x18d/0x240 [ 751.540295][T32386] kvm_fetch_guest_virt+0x10c/0x160 [ 751.540327][T32386] ? __pfx_kvm_fetch_guest_virt+0x10/0x10 [ 751.540353][T32386] __do_insn_fetch_bytes+0x53a/0x6c0 [ 751.540383][T32386] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 751.540411][T32386] ? x86_decode_insn+0x16fa/0x5af0 [ 751.540439][T32386] x86_decode_insn+0x374/0x5af0 [ 751.540469][T32386] ? __lock_acquire+0x6df/0x2e50 [ 751.540500][T32386] ? __pfx___mutex_trylock_common+0x10/0x10 [ 751.540534][T32386] ? __pfx_x86_decode_insn+0x10/0x10 [ 751.540560][T32386] ? pit_ioport_read+0x354/0x560 [ 751.540596][T32386] ? __asan_memset+0x22/0x50 [ 751.540621][T32386] ? init_decode_cache+0xf3/0x160 [ 751.540644][T32386] ? init_emulate_ctxt+0x4c4/0x640 [ 751.540670][T32386] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 751.540703][T32386] ? pit_ioport_read+0x354/0x560 [ 751.540733][T32386] x86_emulate_instruction+0x323/0x1e70 [ 751.540764][T32386] ? bsearch+0x91/0xc0 [ 751.540782][T32386] ? __pfx_kvm_io_bus_sort_cmp+0x10/0x10 [ 751.540811][T32386] ? kvm_io_bus_read+0x4e8/0x580 [ 751.540834][T32386] ? __pfx_x86_emulate_instruction+0x10/0x10 [ 751.540858][T32386] ? vmx_handle_exit_irqoff+0x100/0xa00 [ 751.540886][T32386] ? lock_acquire+0x115/0x350 [ 751.540912][T32386] ? __pfx_vmx_handle_exit_irqoff+0x10/0x10 [ 751.540937][T32386] ? trace_rcu_utilization+0x4a/0x1f0 [ 751.540965][T32386] handle_ud+0x19e/0x590 [ 751.541002][T32386] ? __pfx_handle_ud+0x10/0x10 [ 751.541019][T32386] ? vmx_vcpu_run+0xfbf/0x2d20 [ 751.541042][T32386] ? rcu_is_watching+0x16/0xb0 [ 751.541071][T32386] ? handle_exception_nmi+0x2aa/0x1260 [ 751.541091][T32386] ? lock_acquire+0x115/0x350 [ 751.541117][T32386] ? __pfx_handle_exception_nmi+0x10/0x10 [ 751.541136][T32386] vmx_handle_exit+0xfa4/0x16e0 [ 751.541172][T32386] vcpu_run+0x4e97/0x79b0 [ 751.541228][T32386] ? vcpu_run+0x28fd/0x79b0 [ 751.541287][T32386] ? __pfx_vcpu_run+0x10/0x10 [ 751.541312][T32386] ? lock_acquire+0x115/0x350 [ 751.541343][T32386] ? __local_bh_enable_ip+0xd6/0x140 [ 751.541374][T32386] kvm_arch_vcpu_ioctl_run+0xe87/0x19c0 [ 751.541404][T32386] ? kvm_arch_vcpu_ioctl_run+0x1f8/0x19c0 [ 751.541433][T32386] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 751.541463][T32386] kvm_vcpu_ioctl+0xa61/0xfd0 [ 751.541497][T32386] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 751.541523][T32386] ? hook_file_ioctl+0x1f2/0x600 [ 751.541569][T32386] ? __fget_files+0x2a/0x420 [ 751.541593][T32386] ? __fget_files+0x2a/0x420 [ 751.541614][T32386] ? __fget_files+0x3a2/0x420 [ 751.541638][T32386] ? __fget_files+0x2a/0x420 [ 751.541663][T32386] ? bpf_lsm_file_ioctl+0x9/0x20 [ 751.541689][T32386] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 751.541718][T32386] __se_sys_ioctl+0xfc/0x170 [ 751.541747][T32386] do_syscall_64+0x166/0x520 [ 751.541764][T32386] ? trace_irq_disable+0x3b/0x140 [ 751.541791][T32386] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.541810][T32386] ? clear_bhb_loop+0x70/0xc0 [ 751.541834][T32386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.541854][T32386] RIP: 0033:0x7f6b4799e0d9 [ 751.541872][T32386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 751.541888][T32386] RSP: 002b:00007f6b4893d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 751.541909][T32386] RAX: ffffffffffffffda RBX: 00007f6b47c25fa0 RCX: 00007f6b4799e0d9 [ 751.541924][T32386] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 751.541936][T32386] RBP: 00007f6b4893d090 R08: 0000000000000000 R09: 0000000000000000 [ 751.541949][T32386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 751.541960][T32386] R13: 00007f6b47c26038 R14: 00007f6b47c25fa0 R15: 00007ffcb7013488 [ 751.541997][T32386] [ 751.967264][ T10] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 752.123789][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 752.125949][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 752.127231][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 752.127266][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.134595][ T10] usb 5-1: config 0 descriptor?? [ 752.166985][ T30] audit: type=1800 audit(1787253551.876:247): pid=32415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3951" name="file" dev="configfs" ino=169077 res=0 errno=0 [ 752.170607][T32415] mass_storage.0/lun.0: unable to open backing file: fi [ 752.303548][ T30] audit: type=1800 audit(1787253552.016:248): pid=32426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3953" name="file" dev="configfs" ino=167772 res=0 errno=0 [ 752.343962][T32394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 752.344458][T32394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 752.451888][T23900] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 752.571029][ T10] logitech 0003:046D:C295.0035: unknown main item tag 0x6 [ 752.578460][ T10] logitech 0003:046D:C295.0035: ignoring exceeding usage max [ 752.589157][ T10] logitech 0003:046D:C295.0035: hidraw0: USB HID v0.81 Device [HID 046d:c295] on usb-dummy_hcd.4-1/input0 [ 752.601060][ T10] logitech 0003:046D:C295.0035: no inputs found [ 752.604928][T23900] usb 7-1: Using ep0 maxpacket: 32 [ 752.607149][T23900] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 752.610656][T23900] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 752.610701][T23900] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 752.610740][T23900] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.620908][T23900] usb 7-1: config 0 descriptor?? [ 752.631432][T23900] hub 7-1:0.0: USB hub found [ 752.798728][T32394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 752.801159][T32394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 752.819902][ T5698] usb 5-1: USB disconnect, device number 59 [ 752.848074][T23900] hub 7-1:0.0: 1 port detected [ 753.134935][T23900] hub 7-1:0.0: config failed, can't get hub status (err -71) [ 753.143876][T23900] usbhid 7-1:0.0: can't add hid device: -71 [ 753.143986][T23900] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 753.182728][T23900] usb 7-1: USB disconnect, device number 28 [ 753.684425][ T30] audit: type=1800 audit(1787253553.398:249): pid=32505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3962" name="file" dev="configfs" ino=170260 res=0 errno=0 [ 753.717021][T32505] mass_storage.0/lun.0: unable to open backing file: fi [ 753.894621][T32519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 753.895065][T32519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 754.004920][ T30] audit: type=1800 audit(1787253553.718:250): pid=32527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3965" name="file" dev="configfs" ino=169495 res=0 errno=0 [ 754.299258][ T5725] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 754.449005][ T5725] usb 5-1: Using ep0 maxpacket: 32 [ 754.449748][ T5725] usb 5-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=6c.d5 [ 754.450740][ T5725] usb 5-1: config 0 has an invalid interface number: 153 but max is 0 [ 754.450763][ T5725] usb 5-1: config 0 has no interface number 0 [ 754.450791][ T5725] usb 5-1: config 0 interface 153 has no altsetting 0 [ 754.453399][ T5725] usb 5-1: New USB device strings: Mfr=208, Product=45, SerialNumber=3 [ 754.453423][ T5725] usb 5-1: Product: syz [ 754.453437][ T5725] usb 5-1: Manufacturer: syz [ 754.453453][ T5725] usb 5-1: SerialNumber: syz [ 754.458851][ T5725] usb 5-1: config 0 descriptor?? [ 754.631949][T32587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 754.632870][T32587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 754.770303][ T30] audit: type=1800 audit(1787253554.489:251): pid=32596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3972" name="file" dev="configfs" ino=170578 res=0 errno=0 [ 754.797028][T32596] mass_storage.0/lun.0: unable to open backing file: fi [ 754.842989][T32534] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.923367][T32534] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.018505][T32534] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.107952][T32534] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.308522][T26080] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.318742][T26080] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.329665][T26080] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.329730][T26080] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.627564][ T10] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 755.807340][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 755.808085][ T10] usb 7-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 755.809248][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 755.809481][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.815755][ T10] usb 7-1: config 0 descriptor?? [ 756.024376][T32622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 756.024955][T32622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 756.233430][ T10] logitech 0003:046D:C295.0036: unknown main item tag 0x6 [ 756.233560][ T10] logitech 0003:046D:C295.0036: ignoring exceeding usage max [ 756.239208][ T10] logitech 0003:046D:C295.0036: hidraw0: USB HID v0.81 Device [HID 046d:c295] on usb-dummy_hcd.6-1/input0 [ 756.239243][ T10] logitech 0003:046D:C295.0036: no inputs found [ 756.443247][T32622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 756.443745][T32622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 756.454063][T18683] usb 7-1: USB disconnect, device number 29 [ 757.120592][ T5725] hub 5-1:0.153: bad descriptor, ignoring hub [ 757.121900][ T5725] hub 5-1:0.153: probe with driver hub failed with error -5 [ 757.123955][ T5725] sierra 5-1:0.153: Sierra USB modem converter detected [ 757.149157][ T5725] usb 5-1: USB disconnect, device number 60 [ 757.153358][ T5725] sierra 5-1:0.153: device disconnected [ 757.682707][T32690] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3978'. [ 757.682751][T32690] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 757.940668][ T30] audit: type=1800 audit(1787253557.654:252): pid=32706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3981" name="file" dev="configfs" ino=171111 res=0 errno=0 [ 757.943784][T32706] mass_storage.0/lun.0: unable to open backing file: fi [ 758.042936][T32711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 758.052282][T32711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 758.138700][T32715] FAULT_INJECTION: forcing a failure. [ 758.138700][T32715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 758.153077][T32715] CPU: 1 UID: 0 PID: 32715 Comm: syz.3.3983 Tainted: G L syzkaller #0 PREEMPT(full) [ 758.153109][T32715] Tainted: [L]=SOFTLOCKUP [ 758.153115][T32715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 758.153126][T32715] Call Trace: [ 758.153134][T32715] [ 758.153142][T32715] dump_stack_lvl+0xe8/0x150 [ 758.153172][T32715] should_fail_ex+0x410/0x560 [ 758.153202][T32715] _copy_from_user+0x2d/0xb0 [ 758.153221][T32715] kstrtouint_from_user+0xd6/0x180 [ 758.153247][T32715] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 758.153279][T32715] ? lock_acquire+0x115/0x350 [ 758.153308][T32715] proc_fail_nth_write+0x8e/0x210 [ 758.153335][T32715] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 758.153366][T32715] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 758.153388][T32715] vfs_write+0x296/0xba0 [ 758.153420][T32715] ? __pfx_vfs_write+0x10/0x10 [ 758.153443][T32715] ? __fget_files+0x2a/0x420 [ 758.153467][T32715] ? __fget_files+0x3a2/0x420 [ 758.153485][T32715] ? __fget_files+0x2a/0x420 [ 758.153513][T32715] ksys_write+0x150/0x270 [ 758.153537][T32715] ? __pfx_ksys_write+0x10/0x10 [ 758.153570][T32715] do_syscall_64+0x166/0x520 [ 758.153587][T32715] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.153606][T32715] ? clear_bhb_loop+0x70/0xc0 [ 758.153628][T32715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.153645][T32715] RIP: 0033:0x7ff21cb5e90e [ 758.153662][T32715] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 758.153677][T32715] RSP: 002b:00007ff21da92fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 758.153696][T32715] RAX: ffffffffffffffda RBX: 00007ff21da936c0 RCX: 00007ff21cb5e90e [ 758.153710][T32715] RDX: 0000000000000001 RSI: 00007ff21da930a0 RDI: 0000000000000004 [ 758.153721][T32715] RBP: 00007ff21da93090 R08: 0000000000000000 R09: 0000000000000000 [ 758.153732][T32715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 758.153742][T32715] R13: 00007ff21ce26038 R14: 00007ff21ce25fa0 R15: 00007ffd1afa3998 [ 758.153773][T32715] [ 761.330480][ T5698] usb 5-1: new full-speed USB device number 61 using dummy_hcd [ 761.417938][T32767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 761.418367][T32767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 761.433110][T32767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 761.433523][T32767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 761.438453][T32767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 761.438872][T32767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 761.481316][ T5698] usb 5-1: unable to get BOS descriptor or descriptor too short [ 761.481786][ T5698] usb 5-1: not running at top speed; connect to a high speed hub [ 761.481816][ T5698] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=b2.86 [ 761.482736][ T5698] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 761.482764][ T5698] usb 5-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 761.485350][ T5698] usb 5-1: string descriptor 0 read error: -22 [ 761.485469][ T5698] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.589774][ T5705] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 761.739550][ T5705] usb 7-1: Using ep0 maxpacket: 32 [ 761.748028][ T5705] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 761.751313][ T5705] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 761.751343][ T5705] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 761.751381][ T5705] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.755187][ T5705] usb 7-1: config 0 descriptor?? [ 761.765871][ T5705] hub 7-1:0.0: USB hub found [ 761.798392][ T5698] snd-usb-6fire 5-1:2.0: unable to receive device firmware state. [ 761.806479][ T5698] snd-usb-6fire 5-1:2.0: probe with driver snd-usb-6fire failed with error -121 [ 761.964690][ T5705] hub 7-1:0.0: 1 port detected [ 762.059665][ T30] audit: type=1800 audit(1787253561.789:253): pid=337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3993" name="file" dev="configfs" ino=171469 res=0 errno=0 [ 762.064870][ T337] mass_storage.0/lun.0: unable to open backing file: fi [ 762.276058][ T5705] hub 7-1:0.0: config failed, can't get hub status (err -71) [ 762.290670][ T5705] usbhid 7-1:0.0: can't add hid device: -71 [ 762.290785][ T5705] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 762.322876][ T5705] usb 7-1: USB disconnect, device number 30 [ 762.362842][ T376] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3995'. [ 762.504822][ T381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 762.520164][ T381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 763.078814][ T392] CacheFiles: Failed to register: -2 [ 763.244316][ T400] ppp0: PPP: no memory (VJ comp pkt) [ 763.326077][ T407] FAULT_INJECTION: forcing a failure. [ 763.326077][ T407] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 763.344144][ T407] CPU: 1 UID: 0 PID: 407 Comm: syz.6.4001 Tainted: G L syzkaller #0 PREEMPT(full) [ 763.344180][ T407] Tainted: [L]=SOFTLOCKUP [ 763.344188][ T407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 763.344200][ T407] Call Trace: [ 763.344209][ T407] [ 763.344219][ T407] dump_stack_lvl+0xe8/0x150 [ 763.344252][ T407] should_fail_ex+0x410/0x560 [ 763.344295][ T407] _copy_from_user+0x2d/0xb0 [ 763.344318][ T407] kstrtouint_from_user+0xd6/0x180 [ 763.344348][ T407] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 763.344385][ T407] ? lock_acquire+0x115/0x350 [ 763.344419][ T407] proc_fail_nth_write+0x8e/0x210 [ 763.344447][ T407] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 763.344482][ T407] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 763.344509][ T407] vfs_write+0x296/0xba0 [ 763.344544][ T407] ? __pfx_vfs_write+0x10/0x10 [ 763.344571][ T407] ? __fget_files+0x2a/0x420 [ 763.344599][ T407] ? __fget_files+0x3a2/0x420 [ 763.344621][ T407] ? __fget_files+0x2a/0x420 [ 763.344653][ T407] ksys_write+0x150/0x270 [ 763.344681][ T407] ? __pfx_ksys_write+0x10/0x10 [ 763.344718][ T407] do_syscall_64+0x166/0x520 [ 763.344739][ T407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.344759][ T407] ? clear_bhb_loop+0x70/0xc0 [ 763.344783][ T407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.344804][ T407] RIP: 0033:0x7f6b4795e90e [ 763.344823][ T407] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 763.344841][ T407] RSP: 002b:00007f6b4893cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 763.344863][ T407] RAX: ffffffffffffffda RBX: 00007f6b4893d6c0 RCX: 00007f6b4795e90e [ 763.344877][ T407] RDX: 0000000000000001 RSI: 00007f6b4893d0a0 RDI: 0000000000000004 [ 763.344890][ T407] RBP: 00007f6b4893d090 R08: 0000000000000000 R09: 0000000000000000 [ 763.344902][ T407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 763.344913][ T407] R13: 00007f6b47c26038 R14: 00007f6b47c25fa0 R15: 00007ffcb7013488 [ 763.344942][ T407] [ 763.680618][ T424] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4004'. [ 763.701350][ T433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 763.701829][ T433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 763.883101][ T444] FAULT_INJECTION: forcing a failure. [ 763.883101][ T444] name failslab, interval 1, probability 0, space 0, times 0 [ 763.896408][ T444] CPU: 1 UID: 0 PID: 444 Comm: syz.6.4007 Tainted: G L syzkaller #0 PREEMPT(full) [ 763.896441][ T444] Tainted: [L]=SOFTLOCKUP [ 763.896449][ T444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 763.896461][ T444] Call Trace: [ 763.896470][ T444] [ 763.896479][ T444] dump_stack_lvl+0xe8/0x150 [ 763.896510][ T444] should_fail_ex+0x410/0x560 [ 763.896544][ T444] should_failslab+0xa8/0x100 [ 763.896567][ T444] __kmalloc_noprof+0xfe/0x720 [ 763.896592][ T444] ? ktime_get+0x1f5/0x220 [ 763.896618][ T444] ? usleep_range_state+0x95/0x180 [ 763.896646][ T444] ? comedi_alloc_subdevices+0x4a/0x240 [ 763.896755][ T444] ? comedi_alloc_subdevices+0x4a/0x240 [ 763.896783][ T444] comedi_alloc_subdevices+0x4a/0x240 [ 763.896809][ T444] dt2801_attach+0x657/0x1090 [ 763.896873][ T444] comedi_device_attach+0x52d/0x720 [ 763.896904][ T444] comedi_unlocked_ioctl+0x8ef/0x1af0 [ 763.896976][ T444] ? kasan_quarantine_put+0xbb/0x1f0 [ 763.897003][ T444] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 763.897047][ T444] ? do_vfs_ioctl+0x116f/0x1530 [ 763.897077][ T444] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 763.897115][ T444] ? hook_file_ioctl+0x1f2/0x600 [ 763.897159][ T444] ? __fget_files+0x2a/0x420 [ 763.897185][ T444] ? __fget_files+0x2a/0x420 [ 763.897205][ T444] ? __fget_files+0x3a2/0x420 [ 763.897223][ T444] ? __fget_files+0x2a/0x420 [ 763.897246][ T444] ? bpf_lsm_file_ioctl+0x9/0x20 [ 763.897265][ T444] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 763.897298][ T444] __se_sys_ioctl+0xfc/0x170 [ 763.897326][ T444] do_syscall_64+0x166/0x520 [ 763.897344][ T444] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.897362][ T444] ? clear_bhb_loop+0x70/0xc0 [ 763.897385][ T444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.897402][ T444] RIP: 0033:0x7f6b4799e0d9 [ 763.897421][ T444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 763.897438][ T444] RSP: 002b:00007f6b4893d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 763.897459][ T444] RAX: ffffffffffffffda RBX: 00007f6b47c25fa0 RCX: 00007f6b4799e0d9 [ 763.897474][ T444] RDX: 0000200000000140 RSI: 0000000040946400 RDI: 0000000000000003 [ 763.897486][ T444] RBP: 00007f6b4893d090 R08: 0000000000000000 R09: 0000000000000000 [ 763.897499][ T444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 763.897515][ T444] R13: 00007f6b47c26038 R14: 00007f6b47c25fa0 R15: 00007ffcb7013488 [ 763.897544][ T444] [ 764.148993][T18683] usb 5-1: USB disconnect, device number 61 [ 764.199638][ T457] FAULT_INJECTION: forcing a failure. [ 764.199638][ T457] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 764.213356][ T457] CPU: 1 UID: 0 PID: 457 Comm: syz.6.4008 Tainted: G L syzkaller #0 PREEMPT(full) [ 764.213391][ T457] Tainted: [L]=SOFTLOCKUP [ 764.213399][ T457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 764.213411][ T457] Call Trace: [ 764.213420][ T457] [ 764.213429][ T457] dump_stack_lvl+0xe8/0x150 [ 764.213462][ T457] should_fail_ex+0x410/0x560 [ 764.213497][ T457] _copy_to_user+0x31/0xb0 [ 764.213520][ T457] simple_read_from_buffer+0xe1/0x170 [ 764.213550][ T457] proc_fail_nth_read+0x1bb/0x230 [ 764.213576][ T457] ? common_file_perm+0x20e/0x2b0 [ 764.213608][ T457] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 764.213636][ T457] ? rw_verify_area+0x24a/0x4c0 [ 764.213661][ T457] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 764.213685][ T457] vfs_read+0x213/0xa80 [ 764.213713][ T457] ? __pfx___mutex_lock+0x10/0x10 [ 764.213732][ T457] ? __pfx_vfs_read+0x10/0x10 [ 764.213756][ T457] ? __fget_files+0x2a/0x420 [ 764.213783][ T457] ? __fget_files+0x3a2/0x420 [ 764.213805][ T457] ? __fget_files+0x2a/0x420 [ 764.213835][ T457] ksys_read+0x150/0x270 [ 764.213861][ T457] ? __pfx_ksys_read+0x10/0x10 [ 764.213895][ T457] do_syscall_64+0x166/0x520 [ 764.213911][ T457] ? trace_irq_disable+0x3b/0x140 [ 764.213934][ T457] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.213954][ T457] ? clear_bhb_loop+0x70/0xc0 [ 764.213979][ T457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.213999][ T457] RIP: 0033:0x7f6b4795e90e [ 764.214017][ T457] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 764.214035][ T457] RSP: 002b:00007f6b4891bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 764.214057][ T457] RAX: ffffffffffffffda RBX: 00007f6b4891c6c0 RCX: 00007f6b4795e90e [ 764.214071][ T457] RDX: 000000000000000f RSI: 00007f6b4891c0a0 RDI: 0000000000000007 [ 764.214083][ T457] RBP: 00007f6b4891c090 R08: 0000000000000000 R09: 0000000000000000 [ 764.214096][ T457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 764.214110][ T457] R13: 00007f6b47c26128 R14: 00007f6b47c26090 R15: 00007ffcb7013488 [ 764.214142][ T457] [ 764.530099][ T4985] block nbd2: shutting down sockets [ 764.751524][ T474] could not open pipe file descriptor [ 764.828938][ T479] comedi comedi3: ni_at_a2150: I/O base address not correctly aligned [ 765.003764][ T490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 765.014601][ T490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 765.133254][ T490] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 765.145679][ T52] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 765.325161][T23900] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 765.486664][T23900] usb 5-1: unable to get BOS descriptor or descriptor too short [ 765.487170][T23900] usb 5-1: not running at top speed; connect to a high speed hub [ 765.487201][T23900] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=b2.86 [ 765.488123][T23900] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 765.488145][T23900] usb 5-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 765.490766][T23900] usb 5-1: string descriptor 0 read error: -22 [ 765.490885][T23900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.808667][T23900] snd-usb-6fire 5-1:2.0: unable to receive device firmware state. [ 765.808705][T23900] snd-usb-6fire 5-1:2.0: probe with driver snd-usb-6fire failed with error -121 [ 766.089606][ T552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 766.090059][ T552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 767.207891][ T600] FAULT_INJECTION: forcing a failure. [ 767.207891][ T600] name failslab, interval 1, probability 0, space 0, times 0 [ 767.207948][ T600] CPU: 1 UID: 0 PID: 600 Comm: syz.3.4032 Tainted: G L syzkaller #0 PREEMPT(full) [ 767.207974][ T600] Tainted: [L]=SOFTLOCKUP [ 767.207981][ T600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 767.207991][ T600] Call Trace: [ 767.207998][ T600] [ 767.208013][ T600] dump_stack_lvl+0xe8/0x150 [ 767.208041][ T600] should_fail_ex+0x410/0x560 [ 767.208075][ T600] should_failslab+0xa8/0x100 [ 767.208097][ T600] __kmalloc_noprof+0xfe/0x720 [ 767.208123][ T600] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 767.208145][ T600] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 767.208173][ T600] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 767.208205][ T600] genl_family_rcv_msg_doit+0xda/0x340 [ 767.208232][ T600] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 767.208260][ T600] ? apparmor_capable+0x126/0x170 [ 767.208285][ T600] ? bpf_lsm_capable+0x9/0x20 [ 767.208342][ T600] ? security_capable+0x7e/0x2c0 [ 767.208375][ T600] genl_rcv_msg+0x614/0x7a0 [ 767.208401][ T600] ? __pfx_genl_rcv_msg+0x10/0x10 [ 767.208420][ T600] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 767.208547][ T600] ? __pfx_nl80211_start_ap+0x10/0x10 [ 767.208570][ T600] ? __pfx_nl80211_post_doit+0x10/0x10 [ 767.208594][ T600] ? __pfx_ref_tracker_free+0x10/0x10 [ 767.208623][ T600] ? __asan_memcpy+0x40/0x70 [ 767.208647][ T600] ? __skb_clone+0x5c/0x6c0 [ 767.208678][ T600] netlink_rcv_skb+0x226/0x4a0 [ 767.208705][ T600] ? __pfx_genl_rcv_msg+0x10/0x10 [ 767.208726][ T600] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 767.208766][ T600] ? down_read+0x2be/0x330 [ 767.208791][ T600] genl_rcv+0x28/0x40 [ 767.208809][ T600] netlink_unicast+0x7bd/0x940 [ 767.208843][ T600] netlink_sendmsg+0x813/0xb40 [ 767.208877][ T600] ? __pfx_netlink_sendmsg+0x10/0x10 [ 767.208911][ T600] ? apparmor_socket_sendmsg+0x98/0x360 [ 767.208938][ T600] ? __pfx_netlink_sendmsg+0x10/0x10 [ 767.208963][ T600] sock_sendmsg_nosec+0x13a/0x180 [ 767.208995][ T600] ____sys_sendmsg+0x54e/0x850 [ 767.209031][ T600] ? __pfx_____sys_sendmsg+0x10/0x10 [ 767.209063][ T600] ? import_iovec+0x73/0xa0 [ 767.209086][ T600] ___sys_sendmsg+0x2a5/0x360 [ 767.209109][ T600] ? __lock_acquire+0x6df/0x2e50 [ 767.209140][ T600] ? __pfx____sys_sendmsg+0x10/0x10 [ 767.209197][ T600] ? __fget_files+0x2a/0x420 [ 767.209218][ T600] ? __fget_files+0x3a2/0x420 [ 767.209250][ T600] __x64_sys_sendmsg+0x1b1/0x290 [ 767.209276][ T600] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 767.209320][ T600] do_syscall_64+0x166/0x520 [ 767.209339][ T600] ? trace_irq_disable+0x3b/0x140 [ 767.209366][ T600] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.209385][ T600] ? clear_bhb_loop+0x70/0xc0 [ 767.209409][ T600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.209429][ T600] RIP: 0033:0x7ff21cb9e0d9 [ 767.209448][ T600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 767.209465][ T600] RSP: 002b:00007ff21da93028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 767.209486][ T600] RAX: ffffffffffffffda RBX: 00007ff21ce25fa0 RCX: 00007ff21cb9e0d9 [ 767.209502][ T600] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 767.209515][ T600] RBP: 00007ff21da93090 R08: 0000000000000000 R09: 0000000000000000 [ 767.209527][ T600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 767.209540][ T600] R13: 00007ff21ce26038 R14: 00007ff21ce25fa0 R15: 00007ffd1afa3998 [ 767.209570][ T600] [ 767.331129][ T30] audit: type=1800 audit(1787253567.055:254): pid=603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4033" name="file" dev="configfs" ino=174139 res=0 errno=0 [ 767.334534][ T603] mass_storage.0/lun.0: unable to open backing file: fi [ 767.623260][ T605] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4034'. [ 767.699267][ T636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4035'. [ 767.773882][ T641] syzkaller1: entered promiscuous mode [ 767.780653][ T641] syzkaller1: entered allmulticast mode [ 767.864568][ T646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 767.867066][ T646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.034663][ T659] netlink: 176 bytes leftover after parsing attributes in process `syz.3.4039'. [ 768.039352][ T659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.050273][ T659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.081036][T18683] usb 5-1: USB disconnect, device number 62 [ 768.529070][ T30] audit: type=1800 audit(1787253568.257:255): pid=689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4043" name="file" dev="configfs" ino=174492 res=0 errno=0 [ 768.556784][ T689] mass_storage.0/lun.0: unable to open backing file: fi [ 768.654994][ T696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.663941][ T696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.721164][ T5725] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 768.871546][ T5725] usb 7-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 0.00 [ 768.872603][ T5725] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 768.872648][ T5725] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 768.872673][ T5725] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 768.872695][ T5725] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 768.872734][ T5725] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.887430][ T5725] cxacru 7-1:1.0: cxacru_bind: interface has incorrect endpoints [ 768.888775][ T5725] cxacru 7-1:1.0: usbatm_usb_probe: bind failed: -19! [ 769.080088][ T684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 769.081903][ T684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 769.088818][ T5725] usb 7-1: USB disconnect, device number 31 [ 769.315620][ T717] FAULT_INJECTION: forcing a failure. [ 769.315620][ T717] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 769.315661][ T717] CPU: 1 UID: 0 PID: 717 Comm: syz.2.4047 Tainted: G L syzkaller #0 PREEMPT(full) [ 769.315686][ T717] Tainted: [L]=SOFTLOCKUP [ 769.315694][ T717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 769.315704][ T717] Call Trace: [ 769.315711][ T717] [ 769.315718][ T717] dump_stack_lvl+0xe8/0x150 [ 769.315745][ T717] should_fail_ex+0x410/0x560 [ 769.315777][ T717] _copy_from_user+0x2d/0xb0 [ 769.315798][ T717] kstrtouint_from_user+0xd6/0x180 [ 769.315827][ T717] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 769.315861][ T717] ? lock_acquire+0x115/0x350 [ 769.315893][ T717] proc_fail_nth_write+0x8e/0x210 [ 769.315921][ T717] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 769.315954][ T717] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 769.315979][ T717] vfs_write+0x296/0xba0 [ 769.316013][ T717] ? __pfx_vfs_write+0x10/0x10 [ 769.316039][ T717] ? __fget_files+0x2a/0x420 [ 769.316065][ T717] ? __fget_files+0x3a2/0x420 [ 769.316086][ T717] ? __fget_files+0x2a/0x420 [ 769.316116][ T717] ksys_write+0x150/0x270 [ 769.316143][ T717] ? __pfx_ksys_write+0x10/0x10 [ 769.316178][ T717] do_syscall_64+0x166/0x520 [ 769.316197][ T717] ? trace_irq_disable+0x3b/0x140 [ 769.316223][ T717] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.316243][ T717] ? clear_bhb_loop+0x70/0xc0 [ 769.316274][ T717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.316293][ T717] RIP: 0033:0x7f8b99b5e90e [ 769.316312][ T717] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 769.316329][ T717] RSP: 002b:00007f8b9aa3ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 769.316349][ T717] RAX: ffffffffffffffda RBX: 00007f8b9aa406c0 RCX: 00007f8b99b5e90e [ 769.316364][ T717] RDX: 0000000000000001 RSI: 00007f8b9aa400a0 RDI: 0000000000000004 [ 769.316377][ T717] RBP: 00007f8b9aa40090 R08: 0000000000000000 R09: 0000000000000000 [ 769.316390][ T717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 769.316402][ T717] R13: 00007f8b99e26038 R14: 00007f8b99e25fa0 R15: 00007ffdf986b7d8 [ 769.316433][ T717] [ 769.438853][ T723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 769.442318][ T723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 770.059828][ T49] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 770.210933][ T49] usb 5-1: Using ep0 maxpacket: 32 [ 770.214094][ T49] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 770.216347][ T49] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 770.216377][ T49] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 770.216417][ T49] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.225174][ T49] usb 5-1: config 0 descriptor?? [ 770.235397][ T49] hub 5-1:0.0: USB hub found [ 770.434049][ T49] hub 5-1:0.0: 1 port detected [ 770.447814][ T30] audit: type=1800 audit(1787253570.179:256): pid=781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4053" name="file" dev="configfs" ino=174828 res=0 errno=0 [ 770.452551][ T781] mass_storage.0/lun.0: unable to open backing file: fi [ 770.742457][ T49] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 770.758005][ T49] usbhid 5-1:0.0: can't add hid device: -71 [ 770.758103][ T49] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 770.783533][ T49] usb 5-1: USB disconnect, device number 63 [ 771.001676][ T805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 771.002823][ T805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 771.029279][ T5725] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 771.178460][ T5725] usb 7-1: Using ep0 maxpacket: 16 [ 771.179532][ T5725] usb 7-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 771.180674][ T5725] usb 7-1: config 1 has an invalid interface number: 105 but max is 0 [ 771.180696][ T5725] usb 7-1: config 1 has no interface number 0 [ 771.180735][ T5725] usb 7-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 771.180760][ T5725] usb 7-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 771.180783][ T5725] usb 7-1: config 1 interface 105 has no altsetting 0 [ 771.182707][ T5725] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 771.182731][ T5725] usb 7-1: Product: syz [ 771.182745][ T5725] usb 7-1: Manufacturer: syz [ 771.182759][ T5725] usb 7-1: SerialNumber: syz [ 771.186304][ T796] raw-gadget.4 gadget.6: fail, usb_ep_enable returned -22 [ 771.186427][ T796] raw-gadget.4 gadget.6: fail, usb_ep_enable returned -22 [ 771.454826][ T5725] aqc111 7-1:1.105: probe with driver aqc111 failed with error -71 [ 771.461508][ T5725] usb 7-1: USB disconnect, device number 32 [ 772.201749][ T30] audit: type=1800 audit(1787253571.941:257): pid=846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4062" name="file" dev="configfs" ino=174947 res=0 errno=0 [ 772.220523][ T846] mass_storage.0/lun.0: unable to open backing file: fi [ 772.586556][ T868] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4067'. [ 772.679743][ T5725] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 772.727712][ T874] netlink: 112 bytes leftover after parsing attributes in process `syz.6.4068'. [ 772.841481][ T5725] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 772.845023][ T5725] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 772.845055][ T5725] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 772.845079][ T5725] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 772.847471][ T5725] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.847495][ T5725] usb 5-1: Product: syz [ 772.847510][ T5725] usb 5-1: Manufacturer: syz [ 772.847524][ T5725] usb 5-1: SerialNumber: syz [ 772.855923][ T5725] usb 5-1: config 0 descriptor?? [ 773.081907][ T5725] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 773.297247][ T895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 773.297732][ T895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 773.489718][ T30] audit: type=1800 audit(1787253573.222:258): pid=905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4072" name="file" dev="configfs" ino=176133 res=0 errno=0 [ 773.512044][ T905] mass_storage.0/lun.0: unable to open backing file: fi [ 773.658954][ T913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 773.667807][ T913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 775.419725][T23900] usb 5-1: USB disconnect, device number 64 [ 775.853676][T23900] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 775.915217][T31316] raw-gadget.0 gadget.2: failed to queue disconnect event [ 776.035217][T23900] usb 5-1: Using ep0 maxpacket: 16 [ 776.036135][T23900] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 776.037861][T23900] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 776.037885][T23900] usb 5-1: config 1 has no interface number 0 [ 776.037921][T23900] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 776.037945][T23900] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 776.037968][T23900] usb 5-1: config 1 interface 105 has no altsetting 0 [ 776.040348][T23900] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 776.040371][T23900] usb 5-1: Product: syz [ 776.040386][T23900] usb 5-1: Manufacturer: syz [ 776.040400][T23900] usb 5-1: SerialNumber: syz [ 776.046858][ T971] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 776.046981][ T971] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 776.058065][ T3285] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.248702][ T3285] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.360252][ T5626] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 776.371654][ T5626] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 776.379788][ T5626] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 776.390650][ T5626] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 776.398187][ T5626] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 776.412070][T23900] aqc111 5-1:1.105: probe with driver aqc111 failed with error -71 [ 776.460201][T23900] usb 5-1: USB disconnect, device number 65 [ 776.490945][ T3285] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.599127][ T3285] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.849165][ T5698] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 776.994921][ T3285] bridge_slave_1: left allmulticast mode [ 776.994976][ T3285] bridge_slave_1: left promiscuous mode [ 776.995189][ T3285] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.020968][ T3285] bridge_slave_0: left allmulticast mode [ 777.021022][ T3285] bridge_slave_0: left promiscuous mode [ 777.021213][ T3285] bridge0: port 1(bridge_slave_0) entered disabled state [ 777.034081][ T5698] usb 7-1: Using ep0 maxpacket: 32 [ 777.034873][ T5698] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 777.036097][ T5698] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 777.036125][ T5698] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 777.036160][ T5698] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.049336][ T5698] usb 7-1: config 0 descriptor?? [ 777.062567][ T5698] hub 7-1:0.0: USB hub found [ 777.277717][ T5698] hub 7-1:0.0: 1 port detected [ 777.569102][ T5698] hub 7-1:0.0: config failed, can't get hub status (err -71) [ 777.587321][ T5698] usbhid 7-1:0.0: can't add hid device: -71 [ 777.587462][ T5698] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 777.614118][ T5698] usb 7-1: USB disconnect, device number 33 [ 777.736379][ T3285] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 777.756439][ T3285] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 777.769106][ T3285] bond0 (unregistering): Released all slaves [ 778.154643][ T5280] 8021q: adding VLAN 0 to HW filter on device eth9 [ 778.417474][ T3285] hsr_slave_0: left promiscuous mode [ 778.426074][ T3285] hsr_slave_1: left promiscuous mode [ 778.432974][ T3285] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 778.441227][ T3285] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 778.453294][ T3285] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 778.460858][ T3285] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 778.479436][ T3285] veth1_macvtap: left promiscuous mode [ 778.485185][ T5626] Bluetooth: hci2: command tx timeout [ 778.497980][ T3285] veth0_macvtap: left promiscuous mode [ 778.498113][ T3285] veth1_vlan: left promiscuous mode [ 778.498180][ T3285] veth0_vlan: left promiscuous mode [ 778.712523][ T1158] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 779.292566][ T3285] team0 (unregistering): Port device team_slave_1 removed [ 779.312690][ T3285] team0 (unregistering): Port device team_slave_0 removed [ 779.516792][ T5280] 8021q: adding VLAN 0 to HW filter on device eth10 [ 779.640593][ T5725] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 779.707243][ T1009] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.707349][ T1009] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.707494][ T1009] bridge_slave_0: entered allmulticast mode [ 779.734280][ T1276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.737029][ T1276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 779.746793][ T1009] bridge_slave_0: entered promiscuous mode [ 779.767858][ T1009] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.775391][ T1009] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.782700][ T1009] bridge_slave_1: entered allmulticast mode [ 779.814904][ T5725] usb 5-1: unable to get BOS descriptor or descriptor too short [ 779.823353][ T5725] usb 5-1: not running at top speed; connect to a high speed hub [ 779.831713][ T1009] bridge_slave_1: entered promiscuous mode [ 779.837627][ T5725] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=b2.86 [ 779.848764][ T5725] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 779.848803][ T5725] usb 5-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 779.871230][ T5725] usb 5-1: string descriptor 0 read error: -22 [ 779.871370][ T5725] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.922455][ T1009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 779.937211][ T1009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 780.020244][ T1009] team0: Port device team_slave_0 added [ 780.051286][ T1009] team0: Port device team_slave_1 added [ 780.088674][ T5698] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 780.108212][ T1009] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 780.115330][ T1009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 780.141950][ T1009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 780.158000][ T1009] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 780.165227][ T1009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 780.191892][ T1009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 780.225376][ T3285] IPVS: stop unused estimator thread 0... [ 780.239832][ T5698] usb 7-1: Using ep0 maxpacket: 32 [ 780.244658][ T5698] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 780.246227][ T5698] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 780.246257][ T5698] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 780.246293][ T5698] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.254320][ T5725] snd-usb-6fire 5-1:2.0: unable to receive device firmware state. [ 780.254349][ T5725] snd-usb-6fire 5-1:2.0: probe with driver snd-usb-6fire failed with error -121 [ 780.315906][ T5698] usb 7-1: config 0 descriptor?? [ 780.334433][ T5698] hub 7-1:0.0: USB hub found [ 780.384610][ T1383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 780.385056][ T1383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 780.396374][ T1009] hsr_slave_0: entered promiscuous mode [ 780.397930][ T1009] hsr_slave_1: entered promiscuous mode [ 780.398683][ T1009] debugfs: 'hsr0' already exists in 'hsr' [ 780.398724][ T1009] Cannot create hsr debugfs directory [ 780.524134][ T5698] hub 7-1:0.0: 1 port detected [ 780.569237][ T5626] Bluetooth: hci2: command tx timeout [ 780.851491][ T5698] hub 7-1:0.0: config failed, can't get hub status (err -71) [ 780.900020][ T5698] usbhid 7-1:0.0: can't add hid device: -71 [ 780.900161][ T5698] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 780.928350][ T5698] usb 7-1: USB disconnect, device number 34 [ 780.971433][ T5280] 8021q: adding VLAN 0 to HW filter on device eth11 [ 781.016597][ T1009] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 781.032842][ T1009] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 781.043038][ T1009] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 781.061697][ T1009] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 781.071526][ T1009] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 781.093865][ T1009] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 781.096265][ T1009] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 781.122396][ T1009] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 781.356544][ T1009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 781.418636][ T1009] 8021q: adding VLAN 0 to HW filter on device team0 [ 781.444066][T26080] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.444205][T26080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 781.478643][ T6518] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.478775][ T6518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 781.653482][ T5280] 8021q: adding VLAN 0 to HW filter on device eth12 [ 782.144076][ T1556] FAULT_INJECTION: forcing a failure. [ 782.144076][ T1556] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 782.144139][ T1556] CPU: 1 UID: 0 PID: 1556 Comm: syz.6.4098 Tainted: G L syzkaller #0 PREEMPT(full) [ 782.144165][ T1556] Tainted: [L]=SOFTLOCKUP [ 782.144171][ T1556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 782.144180][ T1556] Call Trace: [ 782.144186][ T1556] [ 782.144193][ T1556] dump_stack_lvl+0xe8/0x150 [ 782.144221][ T1556] should_fail_ex+0x410/0x560 [ 782.144253][ T1556] _copy_from_user+0x2d/0xb0 [ 782.144273][ T1556] ___sys_sendmsg+0x1c6/0x360 [ 782.144297][ T1556] ? __lock_acquire+0x6df/0x2e50 [ 782.144328][ T1556] ? __pfx____sys_sendmsg+0x10/0x10 [ 782.144383][ T1556] ? __fget_files+0x2a/0x420 [ 782.144404][ T1556] ? __fget_files+0x3a2/0x420 [ 782.144435][ T1556] __x64_sys_sendmsg+0x1b1/0x290 [ 782.144461][ T1556] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 782.144504][ T1556] do_syscall_64+0x166/0x520 [ 782.144522][ T1556] ? trace_irq_disable+0x3b/0x140 [ 782.144548][ T1556] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.144568][ T1556] ? clear_bhb_loop+0x70/0xc0 [ 782.144591][ T1556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.144610][ T1556] RIP: 0033:0x7f6b4799e0d9 [ 782.144628][ T1556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 782.144645][ T1556] RSP: 002b:00007f6b4893d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 782.144667][ T1556] RAX: ffffffffffffffda RBX: 00007f6b47c25fa0 RCX: 00007f6b4799e0d9 [ 782.144681][ T1556] RDX: 0000000020040000 RSI: 0000200000000e00 RDI: 0000000000000003 [ 782.144695][ T1556] RBP: 00007f6b4893d090 R08: 0000000000000000 R09: 0000000000000000 [ 782.144707][ T1556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 782.144719][ T1556] R13: 00007f6b47c26038 R14: 00007f6b47c25fa0 R15: 00007ffcb7013488 [ 782.144749][ T1556] [ 782.637735][ T5626] Bluetooth: hci2: command tx timeout [ 782.663737][T23900] usb 5-1: USB disconnect, device number 66 [ 782.681918][ T1009] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 783.196300][ T1009] veth0_vlan: entered promiscuous mode [ 783.219980][ T1009] veth1_vlan: entered promiscuous mode [ 783.267074][ T1009] veth0_macvtap: entered promiscuous mode [ 783.281193][ T1009] veth1_macvtap: entered promiscuous mode [ 783.303020][ T1009] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 783.313136][ T1009] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 783.328976][ T3285] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.357818][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.359474][ T3285] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.438194][ T6518] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.514654][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 783.514698][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 783.536817][T23900] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 783.587554][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 783.587601][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 783.687599][T23900] usb 5-1: Using ep0 maxpacket: 32 [ 783.689938][T23900] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 783.696604][T23900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 783.696633][T23900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 783.696670][T23900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.704482][T23900] usb 5-1: config 0 descriptor?? [ 783.713996][T23900] hub 5-1:0.0: USB hub found [ 783.761122][ T30] audit: type=1800 audit(1787253583.502:259): pid=1630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4081" name="file" dev="configfs" ino=177725 res=0 errno=0 [ 783.793740][ T1630] mass_storage.0/lun.0: unable to open backing file: fi [ 783.908627][T23900] hub 5-1:0.0: 1 port detected [ 784.115606][T23900] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 784.129462][T23900] usbhid 5-1:0.0: can't add hid device: -71 [ 784.129560][T23900] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 784.158477][T23900] usb 5-1: USB disconnect, device number 67 [ 784.245801][ T5705] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 784.399570][ T5705] usb 8-1: unable to get BOS descriptor or descriptor too short [ 784.408182][ T5705] usb 8-1: not running at top speed; connect to a high speed hub [ 784.408239][ T5705] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=b2.86 [ 784.427825][ T5705] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 784.438480][ T5705] usb 8-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 784.453067][ T5705] usb 8-1: string descriptor 0 read error: -22 [ 784.453213][ T5705] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.701949][ T30] audit: type=1800 audit(1787253584.443:260): pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4115" name="file" dev="configfs" ino=177893 res=0 errno=0 [ 784.726144][ T5626] Bluetooth: hci2: command tx timeout [ 784.742210][ T1686] FAULT_INJECTION: forcing a failure. [ 784.742210][ T1686] name failslab, interval 1, probability 0, space 0, times 0 [ 784.742276][ T1686] CPU: 1 UID: 0 PID: 1686 Comm: syz.3.4114 Tainted: G L syzkaller #0 PREEMPT(full) [ 784.742302][ T1686] Tainted: [L]=SOFTLOCKUP [ 784.742309][ T1686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 784.742319][ T1686] Call Trace: [ 784.742326][ T1686] [ 784.742333][ T1686] dump_stack_lvl+0xe8/0x150 [ 784.742360][ T1686] should_fail_ex+0x410/0x560 [ 784.742395][ T1686] should_failslab+0xa8/0x100 [ 784.742415][ T1686] ? skb_clone+0x212/0x3a0 [ 784.742441][ T1686] kmem_cache_alloc_noprof+0xa1/0x600 [ 784.742467][ T1686] ? skb_clone+0x212/0x3a0 [ 784.742497][ T1686] skb_clone+0x212/0x3a0 [ 784.742525][ T1686] __netlink_deliver_tap+0x413/0x860 [ 784.742561][ T1686] ? netlink_deliver_tap+0x2e/0x1b0 [ 784.742588][ T1686] netlink_deliver_tap+0x19c/0x1b0 [ 784.742615][ T1686] netlink_unicast+0x781/0x940 [ 784.742649][ T1686] netlink_sendmsg+0x813/0xb40 [ 784.742690][ T1686] ? __pfx_netlink_sendmsg+0x10/0x10 [ 784.742724][ T1686] ? apparmor_socket_sendmsg+0x98/0x360 [ 784.742752][ T1686] ? __pfx_netlink_sendmsg+0x10/0x10 [ 784.742777][ T1686] sock_sendmsg_nosec+0x13a/0x180 [ 784.742807][ T1686] ____sys_sendmsg+0x54e/0x850 [ 784.742836][ T1686] ? __pfx_____sys_sendmsg+0x10/0x10 [ 784.742868][ T1686] ? import_iovec+0x73/0xa0 [ 784.742894][ T1686] ___sys_sendmsg+0x2a5/0x360 [ 784.742916][ T1686] ? __lock_acquire+0x6df/0x2e50 [ 784.742948][ T1686] ? __pfx____sys_sendmsg+0x10/0x10 [ 784.743004][ T1686] ? __fget_files+0x2a/0x420 [ 784.743026][ T1686] ? __fget_files+0x3a2/0x420 [ 784.743057][ T1686] __x64_sys_sendmsg+0x1b1/0x290 [ 784.743084][ T1686] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 784.743128][ T1686] do_syscall_64+0x166/0x520 [ 784.743146][ T1686] ? trace_irq_disable+0x3b/0x140 [ 784.743172][ T1686] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.743191][ T1686] ? clear_bhb_loop+0x70/0xc0 [ 784.743215][ T1686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.743234][ T1686] RIP: 0033:0x7ff21cb9e0d9 [ 784.743252][ T1686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 784.743269][ T1686] RSP: 002b:00007ff21da93028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 784.743290][ T1686] RAX: ffffffffffffffda RBX: 00007ff21ce25fa0 RCX: 00007ff21cb9e0d9 [ 784.743305][ T1686] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 784.743317][ T1686] RBP: 00007ff21da93090 R08: 0000000000000000 R09: 0000000000000000 [ 784.743329][ T1686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 784.743341][ T1686] R13: 00007ff21ce26038 R14: 00007ff21ce25fa0 R15: 00007ffd1afa3998 [ 784.743372][ T1686] [ 784.756639][ T1684] mass_storage.0/lun.0: unable to open backing file: fi [ 784.807418][ T5705] snd-usb-6fire 8-1:2.0: unable to receive device firmware state. [ 784.807456][ T5705] snd-usb-6fire 8-1:2.0: probe with driver snd-usb-6fire failed with error -121 [ 785.416398][ T1740] FAULT_INJECTION: forcing a failure. [ 785.416398][ T1740] name failslab, interval 1, probability 0, space 0, times 0 [ 785.416462][ T1740] CPU: 1 UID: 0 PID: 1740 Comm: syz.4.4122 Tainted: G L syzkaller #0 PREEMPT(full) [ 785.416491][ T1740] Tainted: [L]=SOFTLOCKUP [ 785.416499][ T1740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 785.416510][ T1740] Call Trace: [ 785.416519][ T1740] [ 785.416528][ T1740] dump_stack_lvl+0xe8/0x150 [ 785.416560][ T1740] should_fail_ex+0x410/0x560 [ 785.416594][ T1740] should_failslab+0xa8/0x100 [ 785.416617][ T1740] __kmalloc_noprof+0xfe/0x720 [ 785.416644][ T1740] ? tomoyo_encode+0x2ad/0x570 [ 785.416672][ T1740] ? tomoyo_encode+0x2ad/0x570 [ 785.416707][ T1740] tomoyo_encode+0x2ad/0x570 [ 785.416742][ T1740] tomoyo_realpath_from_path+0x5fa/0x640 [ 785.416782][ T1740] ? tomoyo_path_number_perm+0x219/0x5f0 [ 785.416808][ T1740] tomoyo_path_number_perm+0x246/0x5f0 [ 785.416837][ T1740] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 785.416862][ T1740] ? __lock_acquire+0x6df/0x2e50 [ 785.416905][ T1740] ? hook_file_ioctl+0x1f2/0x600 [ 785.416952][ T1740] ? __fget_files+0x2a/0x420 [ 785.416976][ T1740] ? __fget_files+0x2a/0x420 [ 785.416996][ T1740] ? __fget_files+0x3a2/0x420 [ 785.417015][ T1740] ? __fget_files+0x2a/0x420 [ 785.417034][ T1740] security_file_ioctl+0xc3/0x2a0 [ 785.417056][ T1740] __se_sys_ioctl+0x47/0x170 [ 785.417083][ T1740] do_syscall_64+0x166/0x520 [ 785.417102][ T1740] ? trace_irq_disable+0x3b/0x140 [ 785.417129][ T1740] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.417150][ T1740] ? clear_bhb_loop+0x70/0xc0 [ 785.417181][ T1740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.417200][ T1740] RIP: 0033:0x7f9b78f9e0d9 [ 785.417215][ T1740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 785.417230][ T1740] RSP: 002b:00007f9b79ee4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 785.417248][ T1740] RAX: ffffffffffffffda RBX: 00007f9b79225fa0 RCX: 00007f9b78f9e0d9 [ 785.417262][ T1740] RDX: 0000200000000040 RSI: 0000000000008914 RDI: 0000000000000003 [ 785.417275][ T1740] RBP: 00007f9b79ee4090 R08: 0000000000000000 R09: 0000000000000000 [ 785.417288][ T1740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 785.417300][ T1740] R13: 00007f9b79226038 R14: 00007f9b79225fa0 R15: 00007ffcf45b0948 [ 785.417331][ T1740] [ 785.420721][ T1740] ERROR: Out of memory at tomoyo_realpath_from_path. [ 785.858410][ T1759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 785.869738][ T1759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 785.891741][ T1759] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4126'. [ 786.004665][ T25] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 786.015384][ T30] audit: type=1800 audit(1787253585.764:261): pid=1767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4127" name="file" dev="configfs" ino=179380 res=0 errno=0 [ 786.016922][ T1767] mass_storage.0/lun.0: unable to open backing file: fi [ 786.164853][ T25] usb 7-1: Using ep0 maxpacket: 32 [ 786.169387][ T25] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 786.174641][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 786.174675][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 786.174712][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.209857][ T25] usb 7-1: config 0 descriptor?? [ 786.235269][ T25] hub 7-1:0.0: USB hub found [ 786.310967][ T1780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 786.311520][ T1780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 786.381338][ T1780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 786.386001][ T1780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 786.433255][ T25] hub 7-1:0.0: 1 port detected [ 786.561647][ T10] usb 8-1: USB disconnect, device number 2 [ 786.669076][ T25] hub 7-1:0.0: config failed, can't get hub status (err -71) [ 786.688380][ T25] usbhid 7-1:0.0: can't add hid device: -71 [ 786.688494][ T25] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 786.715595][ T25] usb 7-1: USB disconnect, device number 35 [ 786.914117][ T10] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 787.054509][ T5719] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 787.065741][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 787.073105][ T10] usb 8-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 787.083362][ T10] usb 8-1: config 1 has an invalid interface number: 105 but max is 0 [ 787.092075][ T10] usb 8-1: config 1 has no interface number 0 [ 787.098341][ T10] usb 8-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 787.108424][ T10] usb 8-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 787.118937][ T10] usb 8-1: config 1 interface 105 has no altsetting 0 [ 787.129117][ T10] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 787.129162][ T10] usb 8-1: Product: syz [ 787.129178][ T10] usb 8-1: Manufacturer: syz [ 787.129191][ T10] usb 8-1: SerialNumber: syz [ 787.135542][ T1802] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 787.135652][ T1802] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 787.213306][ T5719] usb 5-1: Using ep0 maxpacket: 8 [ 787.219364][ T5719] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 787.231771][ T5719] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 787.231837][ T5719] usb 5-1: config 0 has no interface number 0 [ 787.231891][ T5719] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 787.231927][ T5719] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.268710][ T5719] usb 5-1: config 0 descriptor?? [ 787.284793][ T5719] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 787.321195][ T1832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 787.331404][ T1832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 787.359501][ T10] aqc111 8-1:1.105: probe with driver aqc111 failed with error -71 [ 787.378631][ T10] usb 8-1: USB disconnect, device number 3 [ 787.506495][ T5705] usb 5-1: USB disconnect, device number 68 [ 787.790951][ T30] audit: type=1800 audit(1787253587.535:262): pid=1888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4137" name="file" dev="configfs" ino=178107 res=0 errno=0 [ 787.793122][ T1888] mass_storage.0/lun.0: unable to open backing file: fi [ 788.342305][ T5719] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 788.416130][ T1921] FAULT_INJECTION: forcing a failure. [ 788.416130][ T1921] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 788.416199][ T1921] CPU: 0 UID: 0 PID: 1921 Comm: syz.6.4142 Tainted: G L syzkaller #0 PREEMPT(full) [ 788.416226][ T1921] Tainted: [L]=SOFTLOCKUP [ 788.416232][ T1921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 788.416242][ T1921] Call Trace: [ 788.416249][ T1921] [ 788.416257][ T1921] dump_stack_lvl+0xe8/0x150 [ 788.416285][ T1921] should_fail_ex+0x410/0x560 [ 788.416317][ T1921] _copy_to_user+0x31/0xb0 [ 788.416340][ T1921] snd_ctl_ioctl+0xd88/0x1df0 [ 788.416449][ T1921] ? stack_trace_save+0xa9/0x100 [ 788.416475][ T1921] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 788.416496][ T1921] ? kasan_save_track+0x4f/0x80 [ 788.416526][ T1921] ? stack_depot_save_flags+0x33/0x7f0 [ 788.416553][ T1921] ? __lock_acquire+0x6df/0x2e50 [ 788.416584][ T1921] ? kasan_save_track+0x4f/0x80 [ 788.416609][ T1921] ? kasan_save_track+0x3e/0x80 [ 788.416633][ T1921] ? kasan_save_free_info+0x40/0x50 [ 788.416655][ T1921] ? __kasan_slab_free+0x5c/0x80 [ 788.416682][ T1921] ? kfree+0x1c5/0x650 [ 788.416702][ T1921] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 788.416726][ T1921] ? security_file_ioctl+0xc3/0x2a0 [ 788.416748][ T1921] ? __se_sys_ioctl+0x47/0x170 [ 788.416773][ T1921] ? do_syscall_64+0x166/0x520 [ 788.416791][ T1921] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.416848][ T1921] ? kasan_quarantine_put+0xbb/0x1f0 [ 788.416882][ T1921] ? tomoyo_path_number_perm+0x219/0x5f0 [ 788.416908][ T1921] ? tomoyo_path_number_perm+0x219/0x5f0 [ 788.416936][ T1921] ? do_vfs_ioctl+0x116f/0x1530 [ 788.416965][ T1921] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 788.417003][ T1921] ? hook_file_ioctl+0x1f2/0x600 [ 788.417053][ T1921] ? __fget_files+0x2a/0x420 [ 788.417077][ T1921] ? __fget_files+0x2a/0x420 [ 788.417098][ T1921] ? __fget_files+0x3a2/0x420 [ 788.417119][ T1921] ? __fget_files+0x2a/0x420 [ 788.417142][ T1921] ? bpf_lsm_file_ioctl+0x9/0x20 [ 788.417166][ T1921] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 788.417188][ T1921] __se_sys_ioctl+0xfc/0x170 [ 788.417217][ T1921] do_syscall_64+0x166/0x520 [ 788.417234][ T1921] ? trace_irq_disable+0x3b/0x140 [ 788.417260][ T1921] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.417280][ T1921] ? clear_bhb_loop+0x70/0xc0 [ 788.417303][ T1921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.417323][ T1921] RIP: 0033:0x7f6b4799e0d9 [ 788.417341][ T1921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 788.417357][ T1921] RSP: 002b:00007f6b4893d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 788.417379][ T1921] RAX: ffffffffffffffda RBX: 00007f6b47c25fa0 RCX: 00007f6b4799e0d9 [ 788.417394][ T1921] RDX: 0000200000000540 RSI: 00000000c4c85513 RDI: 0000000000000003 [ 788.417407][ T1921] RBP: 00007f6b4893d090 R08: 0000000000000000 R09: 0000000000000000 [ 788.417420][ T1921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 788.417432][ T1921] R13: 00007f6b47c26038 R14: 00007f6b47c25fa0 R15: 00007ffcb7013488 [ 788.417461][ T1921] [ 788.577778][ T5719] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 788.598722][ T5719] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 788.598769][ T5719] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.093558][ T25] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 789.176129][ T5719] qmi_wwan 5-1:1.0: probe with driver qmi_wwan failed with error -22 [ 789.181935][ T5719] usb 5-1: USB disconnect, device number 69 [ 789.251593][ T25] usb 7-1: Using ep0 maxpacket: 32 [ 789.252880][ T25] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 789.253891][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 789.253921][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 789.253957][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.257231][ T25] usb 7-1: config 0 descriptor?? [ 789.279928][ T25] hub 7-1:0.0: USB hub found [ 789.464217][ T25] hub 7-1:0.0: 1 port detected [ 789.591657][T23900] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 789.669254][ T25] hub 7-1:0.0: config failed, can't get hub status (err -71) [ 789.680280][ T25] usbhid 7-1:0.0: can't add hid device: -71 [ 789.680387][ T25] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 789.702617][ T25] usb 7-1: USB disconnect, device number 36 [ 789.739136][ T30] audit: type=1800 audit(1787253589.487:263): pid=1971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4147" name="file" dev="configfs" ino=179934 res=0 errno=0 [ 789.740943][ T1971] mass_storage.0/lun.0: unable to open backing file: fi [ 789.742861][T23900] usb 8-1: Using ep0 maxpacket: 16 [ 789.743589][T23900] usb 8-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 789.745006][T23900] usb 8-1: config 1 has an invalid interface number: 105 but max is 0 [ 789.745029][T23900] usb 8-1: config 1 has no interface number 0 [ 789.745067][T23900] usb 8-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 789.745092][T23900] usb 8-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 789.745115][T23900] usb 8-1: config 1 interface 105 has no altsetting 0 [ 789.748660][T23900] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 789.748689][T23900] usb 8-1: Product: syz [ 789.748703][T23900] usb 8-1: Manufacturer: syz [ 789.748718][T23900] usb 8-1: SerialNumber: syz [ 789.766123][ T1959] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 789.766254][ T1959] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 790.000898][T23900] aqc111 8-1:1.105: probe with driver aqc111 failed with error -71 [ 790.014853][T23900] usb 8-1: USB disconnect, device number 4 [ 790.280859][ T25] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 790.441196][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 790.442316][ T25] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 790.446307][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.446329][ T25] usb 5-1: Product: syz [ 790.446343][ T25] usb 5-1: Manufacturer: syz [ 790.446357][ T25] usb 5-1: SerialNumber: syz [ 790.449179][ T25] usb 5-1: config 0 descriptor?? [ 790.666629][ T25] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 790.836398][ T5719] usb 1-1: USB disconnect, device number 14 [ 791.038610][ T30] audit: type=1800 audit(1787253590.788:264): pid=2033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4156" name="file" dev="configfs" ino=181285 res=0 errno=0 [ 791.063969][ T2033] mass_storage.0/lun.0: unable to open backing file: fi [ 791.088202][ T1987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 791.089206][ T1987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 791.286391][ T2042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 791.286883][ T2042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 791.305190][ T2044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 791.306603][ T2044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 791.351256][ T2051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 791.363872][ T2051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 791.502461][ T1987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 791.502941][ T1987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 791.525600][ T25] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 791.540947][ T25] usb 5-1: USB disconnect, device number 70 [ 791.730791][ T5705] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 791.889454][ T5705] usb 7-1: Using ep0 maxpacket: 32 [ 791.891458][ T5705] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 791.892453][ T5705] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 791.892481][ T5705] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 791.892518][ T5705] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.896586][ T5705] usb 7-1: config 0 descriptor?? [ 791.912253][ T5705] hub 7-1:0.0: USB hub found [ 792.124872][ T5705] hub 7-1:0.0: 1 port detected [ 792.335362][ T5705] hub 7-1:0.0: config failed, can't get hub status (err -71) [ 792.353056][ T5705] usbhid 7-1:0.0: can't add hid device: -71 [ 792.353174][ T5705] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 792.394341][ T5705] usb 7-1: USB disconnect, device number 37 [ 792.461563][ T25] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 792.482040][ T2135] loop5: detected capacity change from 0 to 7 [ 792.494385][ T2135] Buffer I/O error on dev loop5, logical block 0, async page read [ 792.494461][ T2135] Buffer I/O error on dev loop5, logical block 0, async page read [ 792.494492][ T2135] Buffer I/O error on dev loop5, logical block 0, async page read [ 792.494519][ T2135] Buffer I/O error on dev loop5, logical block 0, async page read [ 792.494567][ T2135] Buffer I/O error on dev loop5, logical block 0, async page read [ 792.494608][ T2135] Buffer I/O error on dev loop5, logical block 0, async page read [ 792.494635][ T2135] Buffer I/O error on dev loop5, logical block 0, async page read [ 792.494651][ T2135] ldm_validate_partition_table(): Disk read failed. [ 792.494677][ T2135] Buffer I/O error on dev loop5, logical block 0, async page read [ 792.494704][ T2135] Buffer I/O error on dev loop5, logical block 0, async page read [ 792.494731][ T2135] Buffer I/O error on dev loop5, logical block 0, async page read [ 792.494761][ T2135] Dev loop5: unable to read RDB block 0 [ 792.494821][ T2135] loop5: unable to read partition table [ 792.495010][ T2135] loop5: partition table beyond EOD, truncated [ 792.495035][ T2135] loop_reread_partitions: partition scan of loop5 (Sj̳P=?}X 5`㫅) failed (rc=-5) [ 792.619311][ T2138] sctp: [Deprecated]: syz.7.4164 (pid 2138) Use of struct sctp_assoc_value in delayed_ack socket option. [ 792.619311][ T2138] Use struct sctp_sack_info instead [ 792.636636][ T2138] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4164'. [ 792.650508][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 792.656444][ T25] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 792.666922][ T25] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 792.675256][ T25] usb 5-1: config 1 has no interface number 0 [ 792.681632][ T25] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 792.692808][ T25] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 792.703035][ T25] usb 5-1: config 1 interface 105 has no altsetting 0 [ 792.713530][ T25] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 792.713598][ T25] usb 5-1: Product: syz [ 792.713634][ T25] usb 5-1: Manufacturer: syz [ 792.713654][ T25] usb 5-1: SerialNumber: syz [ 792.745568][ T2115] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 792.745704][ T2115] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 793.000759][ T25] aqc111 5-1:1.105: probe with driver aqc111 failed with error -71 [ 793.022294][ T25] usb 5-1: USB disconnect, device number 71 [ 793.368019][ T30] audit: type=1800 audit(1787253593.120:265): pid=2168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4166" name="file" dev="configfs" ino=181635 res=0 errno=0 [ 793.379933][ T2168] mass_storage.0/lun.0: unable to open backing file: fi [ 793.838004][ T25] usb 5-1: new full-speed USB device number 72 using dummy_hcd [ 793.994250][ T25] usb 5-1: not running at top speed; connect to a high speed hub [ 793.994301][ T25] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 794.012729][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 794.012813][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.083677][ T25] uvcvideo 5-1:1.0: Found UVC 1.00 device (046d:0825) [ 794.083851][ T25] uvcvideo 5-1:1.0: No streaming interface found for terminal 32770. [ 794.255051][ T25] usb 5-1: USB disconnect, device number 72 [ 794.777606][ T25] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 794.937220][ T25] usb 7-1: Using ep0 maxpacket: 32 [ 794.944534][ T25] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 794.955233][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 794.966392][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 794.977290][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.990150][ T25] usb 7-1: config 0 descriptor?? [ 795.002711][ T25] hub 7-1:0.0: USB hub found [ 795.037262][ T5705] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 795.038965][ T30] audit: type=1800 audit(1787253594.801:266): pid=2274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4178" name="file" dev="configfs" ino=181210 res=0 errno=0 [ 795.114046][ T2274] mass_storage.0/lun.0: unable to open backing file: fi [ 795.197678][ T5705] usb 8-1: Using ep0 maxpacket: 16 [ 795.201958][ T5705] usb 8-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 795.207808][ T5705] usb 8-1: config 1 has an invalid interface number: 105 but max is 0 [ 795.207833][ T5705] usb 8-1: config 1 has no interface number 0 [ 795.207873][ T5705] usb 8-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 795.207898][ T5705] usb 8-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 795.207921][ T5705] usb 8-1: config 1 interface 105 has no altsetting 0 [ 795.212318][ T5705] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 795.212345][ T5705] usb 8-1: Product: syz [ 795.212359][ T5705] usb 8-1: Manufacturer: syz [ 795.212373][ T5705] usb 8-1: SerialNumber: syz [ 795.222171][ T2259] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 795.222311][ T2259] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 795.237659][ T25] hub 7-1:0.0: 1 port detected [ 795.460865][ T25] hub 7-1:0.0: config failed, can't get hub status (err -71) [ 795.475521][ T25] usbhid 7-1:0.0: can't add hid device: -71 [ 795.480432][ T5705] aqc111 8-1:1.105: probe with driver aqc111 failed with error -71 [ 795.491152][ T25] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 795.509458][ T5705] usb 8-1: USB disconnect, device number 5 [ 795.527752][ T25] usb 7-1: USB disconnect, device number 38 [ 795.576503][ T2315] netlink: 'syz.3.4180': attribute type 1 has an invalid length. [ 795.576532][ T2315] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4180'. [ 795.580265][ T2315] netlink: 'syz.3.4180': attribute type 3 has an invalid length. [ 795.657185][T18683] usb 5-1: new low-speed USB device number 73 using dummy_hcd [ 795.790308][ T2325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 795.792228][ T2325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 795.828964][T18683] usb 5-1: unable to get BOS descriptor or descriptor too short [ 795.829018][T18683] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 795.830178][T18683] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 795.833381][T18683] usb 5-1: string descriptor 0 read error: -22 [ 795.833509][T18683] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.845763][T18683] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 796.159860][ T2294] ================================================================== [ 796.159878][ T2294] BUG: KASAN: slab-use-after-free in dvb_device_open+0xc4/0x340 [ 796.160026][ T2294] Read of size 8 at addr ffff88802b7a0c18 by task syz.4.4179/2294 [ 796.160043][ T2294] [ 796.160057][ T2294] CPU: 0 UID: 0 PID: 2294 Comm: syz.4.4179 Tainted: G L syzkaller #0 PREEMPT(full) [ 796.160084][ T2294] Tainted: [L]=SOFTLOCKUP SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 796.160092][ T2294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 796.160105][ T2294] Call Trace: [ 796.160112][ T2294] [ 796.160121][ T2294] dump_stack_lvl+0xe8/0x150 [ 796.160146][ T2294] print_address_description+0x55/0x1e0 [ 796.160183][ T2294] ? dvb_device_open+0xc4/0x340 [ 796.160219][ T2294] print_report+0x58/0x70 [ 796.160245][ T2294] kasan_report+0x117/0x150 [ 796.160266][ T2294] ? dvb_device_open+0xc4/0x340 [ 796.160295][ T2294] dvb_device_open+0xc4/0x340 [ 796.160322][ T2294] ? do_raw_spin_unlock+0xf5/0x200 [ 796.160349][ T2294] chrdev_open+0x4d9/0x600 [ 796.160380][ T2294] ? __pfx_chrdev_open+0x10/0x10 [ 796.160409][ T2294] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 796.160442][ T2294] ? __pfx_chrdev_open+0x10/0x10 [ 796.160469][ T2294] do_dentry_open+0x816/0x1380 [ 796.160493][ T2294] vfs_open+0x3b/0x340 [ 796.160510][ T2294] ? path_openat+0x1428/0x1d60 [ 796.160538][ T2294] path_openat+0x1443/0x1d60 [ 796.160572][ T2294] do_file_open+0x23e/0x4a0 [ 796.160600][ T2294] ? __pfx_do_file_open+0x10/0x10 [ 796.160636][ T2294] ? _raw_spin_unlock+0x28/0x50 [ 796.160663][ T2294] ? alloc_fd+0x651/0x6c0 [ 796.160688][ T2294] do_sys_openat2+0x115/0x200 [ 796.160707][ T2294] ? __se_sys_futex+0x3a8/0x450 [ 796.160728][ T2294] ? __pfx_do_sys_openat2+0x10/0x10 [ 796.160751][ T2294] ? rcu_is_watching+0x16/0xb0 [ 796.160773][ T2294] __x64_sys_openat+0x138/0x170 [ 796.160795][ T2294] do_syscall_64+0x166/0x520 [ 796.160813][ T2294] ? trace_irq_disable+0x3b/0x140 [ 796.160842][ T2294] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.160863][ T2294] ? clear_bhb_loop+0x70/0xc0 [ 796.160885][ T2294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.160905][ T2294] RIP: 0033:0x7f9b78f5e90e [ 796.160923][ T2294] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 796.160941][ T2294] RSP: 002b:00007f9b79ee3b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 796.160964][ T2294] RAX: ffffffffffffffda RBX: 00007f9b79ee46c0 RCX: 00007f9b78f5e90e [ 796.160980][ T2294] RDX: 0000000000000002 RSI: 00007f9b79ee3c00 RDI: ffffffffffffff9c [ 796.160995][ T2294] RBP: 00007f9b79ee3c00 R08: 0000000000000000 R09: 0000000000000000 [ 796.161009][ T2294] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 796.161022][ T2294] R13: 00007f9b79226038 R14: 00007f9b79225fa0 R15: 00007ffcf45b0948 [ 796.161047][ T2294] [ 796.161055][ T2294] [ 796.161068][ T2294] Allocated by task 17230: [ 796.161079][ T2294] kasan_save_track+0x3e/0x80 [ 796.161107][ T2294] __kasan_kmalloc+0x93/0xb0 [ 796.161134][ T2294] __kmalloc_node_track_caller_noprof+0x4b4/0x720 [ 796.161162][ T2294] kmemdup_noprof+0x2b/0x70 [ 796.161188][ T2294] sysctl_route_net_init+0x3e/0x1c0 [ 796.161215][ T2294] ops_init+0x35d/0x5d0 [ 796.161235][ T2294] setup_net+0x118/0x350 [ 796.161251][ T2294] copy_net_ns+0x4f9/0x720 [ 796.161268][ T2294] create_new_namespaces+0x3f0/0x6b0 [ 796.161288][ T2294] unshare_nsproxy_namespaces+0x149/0x190 [ 796.161309][ T2294] ksys_unshare+0x5a7/0x950 [ 796.161331][ T2294] __x64_sys_unshare+0x38/0x50 [ 796.161354][ T2294] do_syscall_64+0x166/0x520 [ 796.161370][ T2294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.161389][ T2294] [ 796.161394][ T2294] Freed by task 3285: [ 796.161404][ T2294] kasan_save_track+0x3e/0x80 [ 796.161430][ T2294] kasan_save_free_info+0x40/0x50 [ 796.161450][ T2294] __kasan_slab_free+0x5c/0x80 [ 796.161477][ T2294] kfree+0x1c5/0x650 [ 796.161497][ T2294] ops_undo_list+0x43d/0x8d0 [ 796.161515][ T2294] cleanup_net+0x572/0x810 [ 796.161534][ T2294] process_scheduled_works+0xc3d/0x1630 [ 796.161554][ T2294] worker_thread+0xa47/0xfb0 [ 796.161574][ T2294] kthread+0x38b/0x480 [ 796.161597][ T2294] ret_from_fork+0x514/0xb70 [ 796.161619][ T2294] ret_from_fork_asm+0x1a/0x30 [ 796.161643][ T2294] [ 796.161648][ T2294] The buggy address belongs to the object at ffff88802b7a0c00 [ 796.161648][ T2294] which belongs to the cache kmalloc-256 of size 256 [ 796.161665][ T2294] The buggy address is located 24 bytes inside of [ 796.161665][ T2294] freed 256-byte region [ffff88802b7a0c00, ffff88802b7a0d00) [ 796.161685][ T2294] [ 796.161691][ T2294] The buggy address belongs to the physical page: [ 796.161713][ T2294] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802b7a0c00 pfn:0x2b7a0 [ 796.161734][ T2294] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 796.161751][ T2294] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 796.161771][ T2294] page_type: f5(slab) [ 796.161790][ T2294] raw: 00fff00000000240 ffff88813ff15b40 ffffea0001dde790 ffffea0000951990 [ 796.161808][ T2294] raw: ffff88802b7a0c00 000000000010000f 00000000f5000000 0000000000000000 [ 796.161826][ T2294] head: 00fff00000000240 ffff88813ff15b40 ffffea0001dde790 ffffea0000951990 [ 796.161843][ T2294] head: ffff88802b7a0c00 000000000010000f 00000000f5000000 0000000000000000 [ 796.161860][ T2294] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 796.161877][ T2294] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 796.161888][ T2294] page dumped because: kasan: bad access detected [ 796.161902][ T2294] page_owner tracks the page as allocated [ 796.161910][ T2294] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 13670957156 [ 796.161941][ T2294] post_alloc_hook+0x1f9/0x250 [ 796.161964][ T2294] get_page_from_freelist+0x2209/0x2280 [ 796.161990][ T2294] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 796.162017][ T2294] allocate_slab+0x7d/0x620 [ 796.162035][ T2294] refill_objects+0x2d5/0x350 [ 796.162055][ T2294] __pcs_replace_empty_main+0x2c8/0x6c0 [ 796.162073][ T2294] __kmalloc_cache_noprof+0x39b/0x600 [ 796.162097][ T2294] bus_add_driver+0x162/0x670 [ 796.162120][ T2294] driver_register+0x23a/0x320 [ 796.162191][ T2294] usb_register_driver+0x1e4/0x390 [ 796.162266][ T2294] uvc_init+0x22/0x40 [ 796.162360][ T2294] do_one_initcall+0x250/0x870 [ 796.162384][ T2294] do_initcall_level+0x10a/0x1a0 [ 796.162482][ T2294] do_initcalls+0x59/0xa0 [ 796.162507][ T2294] kernel_init_freeable+0x29d/0x3e0 [ 796.162534][ T2294] kernel_init+0x22/0x1d0 [ 796.162555][ T2294] page_owner free stack trace missing [ 796.162562][ T2294] [ 796.162568][ T2294] Memory state around the buggy address: [ 796.162579][ T2294] ffff88802b7a0b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 796.162592][ T2294] ffff88802b7a0b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 796.162606][ T2294] >ffff88802b7a0c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 796.162617][ T2294] ^ [ 796.162629][ T2294] ffff88802b7a0c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 796.162642][ T2294] ffff88802b7a0d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 796.162653][ T2294] ================================================================== [ 796.173154][ T2294] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 796.879672][ T2294] CPU: 0 UID: 0 PID: 2294 Comm: syz.4.4179 Tainted: G L syzkaller #0 PREEMPT(full) [ 796.890536][ T2294] Tainted: [L]=SOFTLOCKUP [ 796.894870][ T2294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 796.904935][ T2294] Call Trace: [ 796.908220][ T2294] [ 796.911161][ T2294] vpanic+0x56d/0xa60 [ 796.915168][ T2294] ? __pfx_vpanic+0x10/0x10 [ 796.919685][ T2294] ? __pfx___schedule+0x10/0x10 [ 796.924555][ T2294] panic+0xc5/0xd0 [ 796.928298][ T2294] ? __pfx_panic+0x10/0x10 [ 796.932736][ T2294] ? preempt_schedule_thunk+0x16/0x40 [ 796.938127][ T2294] ? dvb_device_open+0xc4/0x340 [ 796.942990][ T2294] check_panic_on_warn+0x89/0xb0 [ 796.947950][ T2294] ? dvb_device_open+0xc4/0x340 [ 796.952818][ T2294] end_report+0x73/0x170 [ 796.957068][ T2294] ? dvb_device_open+0xc4/0x340 [ 796.961928][ T2294] kasan_report+0x128/0x150 [ 796.966452][ T2294] ? dvb_device_open+0xc4/0x340 [ 796.971326][ T2294] dvb_device_open+0xc4/0x340 [ 796.976025][ T2294] ? do_raw_spin_unlock+0xf5/0x200 [ 796.981155][ T2294] chrdev_open+0x4d9/0x600 [ 796.985582][ T2294] ? __pfx_chrdev_open+0x10/0x10 [ 796.990538][ T2294] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 796.996883][ T2294] ? __pfx_chrdev_open+0x10/0x10 [ 797.001835][ T2294] do_dentry_open+0x816/0x1380 [ 797.006618][ T2294] vfs_open+0x3b/0x340 [ 797.010691][ T2294] ? path_openat+0x1428/0x1d60 [ 797.015455][ T2294] path_openat+0x1443/0x1d60 [ 797.020069][ T2294] do_file_open+0x23e/0x4a0 [ 797.024592][ T2294] ? __pfx_do_file_open+0x10/0x10 [ 797.029649][ T2294] ? _raw_spin_unlock+0x28/0x50 [ 797.034501][ T2294] ? alloc_fd+0x651/0x6c0 [ 797.038831][ T2294] do_sys_openat2+0x115/0x200 [ 797.043520][ T2294] ? __se_sys_futex+0x3a8/0x450 [ 797.048369][ T2294] ? __pfx_do_sys_openat2+0x10/0x10 [ 797.053577][ T2294] ? rcu_is_watching+0x16/0xb0 [ 797.058355][ T2294] __x64_sys_openat+0x138/0x170 [ 797.063206][ T2294] do_syscall_64+0x166/0x520 [ 797.067791][ T2294] ? trace_irq_disable+0x3b/0x140 [ 797.072822][ T2294] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.078894][ T2294] ? clear_bhb_loop+0x70/0xc0 [ 797.083571][ T2294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.089462][ T2294] RIP: 0033:0x7f9b78f5e90e [ 797.093881][ T2294] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 797.113487][ T2294] RSP: 002b:00007f9b79ee3b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 797.121909][ T2294] RAX: ffffffffffffffda RBX: 00007f9b79ee46c0 RCX: 00007f9b78f5e90e [ 797.129895][ T2294] RDX: 0000000000000002 RSI: 00007f9b79ee3c00 RDI: ffffffffffffff9c [ 797.137877][ T2294] RBP: 00007f9b79ee3c00 R08: 0000000000000000 R09: 0000000000000000 [ 797.145851][ T2294] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 797.153832][ T2294] R13: 00007f9b79226038 R14: 00007f9b79225fa0 R15: 00007ffcf45b0948 [ 797.161811][ T2294] [ 797.165211][ T2294] Kernel Offset: disabled [ 797.169564][ T2294] Rebooting in 86400 seconds..