last executing test programs: 7.558513533s ago: executing program 3 (id=1898): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x3}, 0x0) syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b"], 0x0) 6.996175385s ago: executing program 3 (id=1901): syz_usb_connect(0x3, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x1a, 0xee, 0xbf, 0x10, 0x3fd, 0xebbe, 0xede2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x2, [{{0x9, 0x4, 0x35, 0x0, 0x0, 0xc2, 0xba, 0xa4}}]}}]}}, 0x0) syz_usb_connect(0x1, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="090100026a17d11008170e00b1ad0102464809021200011c0700fe6401ad9e"], 0xfffffffffffffffe) socketpair(0xa, 0x5, 0x7, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000000c0)={0x5, 0x8, 0x3, 0xe3, 0x7, 0x40, 0x6}, 0xc) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x1a, 0xee, 0xbf, 0x10, 0x3fd, 0xebbe, 0xede2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x2, [{{0x9, 0x4, 0x35, 0x0, 0x0, 0xc2, 0xba, 0xa4}}]}}]}}, 0x0) (async) syz_usb_connect(0x1, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="090100026a17d11008170e00b1ad0102464809021200011c0700fe6401ad9e"], 0xfffffffffffffffe) (async) socketpair(0xa, 0x5, 0x7, &(0x7f0000000040)) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000000c0)={0x5, 0x8, 0x3, 0xe3, 0x7, 0x40, 0x6}, 0xc) (async) 6.805485174s ago: executing program 3 (id=1902): r0 = openat(0xffffffffffffff9c, 0x0, 0x101142, 0x40) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x101400) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$NBD_DO_IT(r1, 0xab03) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x10, &(0x7f0000000040)=0x100000001, 0x4) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'vxcan1\x00', @random="02e26779a187"}) 6.730791303s ago: executing program 3 (id=1903): sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x20004800) r0 = openat(0xffffffffffffff9c, 0x0, 0x101142, 0x40) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000340)) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x101400) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b4c, 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x48}, 0x1, 0x0, 0x0, 0x8805}, 0x20000000) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$NBD_DO_IT(r1, 0xab03) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x10, &(0x7f0000000040)=0x100000001, 0x4) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f00000000c0)=[{0x8, 0x1f, 0x4, 0x10001}, {0x6, 0xd, 0x9, 0x5}, {0x5, 0xff, 0xe, 0x7f}, {0x5, 0x5, 0xcc, 0x7}]}) close_range(r5, 0xffffffffffffffff, 0x0) syz_clone(0x20000000, &(0x7f0000000100)="6850b1277ff4c16d8350ac6187e39a06a58cc1cd15d116a3e022ed6ec0124d272badf8053b352e0942f24881582fb8d58306bb37171a0188e094390034d5f7ba18e8278eac07052b0b616c5c28a054f183afb3ba4f2173d83c3926fe5ae4768d01f677793604841fc06b67ff02a668544e58a2ae490a8631d070fb788b7a8a61d1194dc52c73ee9ec3cbac11e4842cf8a76a1b47c3f9abfdd2e280a180194d2af19bde3c7128f32375e7a998b9c34b7e117f709a319114afa97285edbb5ed20b52abb03604367732af5d9a30b5068a528639e9b688f0ee63b76e17aa2aa1ff1b04a818951d5f0bacf6", 0xe9, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="cfc652b99ef2ac1a4dfe6f2ea77907cb93e56a9e2f4dccc4bf0f7160104e41ccd91005fc54272a106a8013b0f13757556cb600aba1b8beb07ecc0bdf02635a198dcb0c69ed22f5e4f6640b1cb499dd9e1294d32da013933e9d93e0277faab232d7479cf59e4e97e5ec2d0bb9f1fc6e174b1724d3fe53be10f97aca7b2f0e471357d228780bb8aa785bfb2dff0c055c8183d5074d36c5f0494811c667e984f663e9e84925b7e6598544db92365dd1ff3f96172e14e6a82584595a3252e651") mount_setattr(0xffffffffffffffff, 0x0, 0x2800, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'vxcan1\x00', @random="02e26779a187"}) 6.556470362s ago: executing program 3 (id=1904): setsockopt(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000940)="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", 0x1000) (async, rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20a8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="f950b593eb7e941f", @ANYRES16=r1, @ANYBLOB="10002abd7000fcdbdf25460000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00020000000c008f0001000000000000000c00900009000000000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00020000000c008f0004000000000000000c00900063050000000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00020000000c008f00ff0f0000000000000c0090000800000000000000"], 0xd4}, 0x1, 0x0, 0x0, 0x10}, 0x4008011) (async) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x97c1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0xf}}}}}]}}]}}, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x79, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x1, 0x1, 0xb, 0x40, 0x5, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x2, 0x6, 0x0, 0xb, {{0x7, 0x24, 0x6, 0x0, 0x0, "8f7e"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x9, 0xac0d, 0x4, 0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0xbd4b, 0x7, 0x3ff}, @mbim_extended={0x8, 0x24, 0x1c, 0xa, 0x9, 0x8}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x2}, @mbim_extended={0x8, 0x24, 0x1c, 0xfff, 0xb, 0x2}, @acm={0x4, 0x24, 0x2, 0xe}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0xdf, 0x4, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x44, 0x40, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xe, 0x4, 0x3}}}}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x250, 0x7, 0x80, 0xb, 0x68, 0x6}, 0x14, &(0x7f0000000380)={0x5, 0xf, 0x14, 0x2, [@ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0x8, 0x0, 0x9, 0xf, 0x6f8}]}, 0x6, [{0x2b, &(0x7f00000003c0)=@string={0x2b, 0x3, "64d261376c072b94b516841694174231ba73bb3db673ebda9736c55ff55fb48bde98a52e6f9871a1d6"}}, {0x7e, &(0x7f0000000400)=ANY=[@ANYBLOB="7e0396f44900f6f6966b75030de37bdb7579a1e34c72087a49965ff7ba0658fcbe0f3d33ffa9f6e7b0d7cc0487afedfb3ca28d4135e10a4625e3dd56e760b3dd76ecf2e9e49bb3c462cd0e8365959bcf72d033dab2ef37f560d30ee1348f9bd8147e0b064b70942e19c433a85974a83d7bb0cef106a69cf0cceeb5e2385c"]}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x2809}}, {0xeb, &(0x7f00000004c0)=@string={0xeb, 0x3, "1ce3dcaa04ba90ca16c7a4e51cb2c8d9837c25a9e082538a492729286520a07f609e5a31c67444a3d8b6fbf8fabce34bdd0d82586631516b5cd00eefcc86fd132dde390a130fdc09bd61f9b933dfa5b75bce306cddc566e412c39f2d2278de8883125030f809f9e1a5ffaad0e3821a9a9d89aac44f152c71c37f687e5fa946dc3c39e3705f3dc6a391451483cb548184e0ed769673f8d755a17e6340a32e7970b9e61f8738d8afdcf0c3c859ab4a507e1da2e62fbeae9d97925e89f2ea4efcee2bf38faa6c1346dc697c517de867b960cf8dd8f5f1e2951e61199cac2ca15eaa3e7870e49246cc4b08"}}, {0xd4, &(0x7f00000005c0)=@string={0xd4, 0x3, "cfdc3db40b0e6bf679abc52f568e3df2962a8ed53b6d8e6e6b20d4e19eb09f57809915ea7d997cb790a4212ddb617221432185582916852c7493b2eabf0c25ce429a02254eb2301e271acaa160772e5c86fa282a538e21003a570b8e7c68c41c754853f2e5b5997f482ec2902d8c42a5411217d04a0926f5f5d02a4b01c9538acda58a22b9a140608cc63352e4a007eb582440c368d6a129e98991b2f53232d4f941aac5797d269ac3e256990c80578e7354e2ef63de6f0ab9a386a7e235a1da9b819b4e9b360b4f6dc61f227e3b15e800c4"}}, {0xca, &(0x7f00000006c0)=@string={0xca, 0x3, "1da4fd4b1e3d229819be955fccc9178f8e5a76725ec55174dffe25d5d39abb70cc580fc044650fb4a6ebf50a3632763d8f04db883ca8515f0397a7a9423cbafb66321b390665389884187907e5bc9c206be55812bdc6396363ba4ea7984f12354c2a60d7fcdfca986881172f678cb8b25d40f39eb8362fa154e806cdab7fc25a6e9ad8e8bba806141e2875b00b62b0cb4da0f918baa891f8d759922c2f9ce9702a4a5ef56775493e0b7fc48e3c7a2b8c797f3ff7547367eaf4092e43e4537f168503647c2e4adf5c"}}]}) (async, rerun: 32) syz_usb_control_io(r2, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io(r2, &(0x7f0000000280)={0x2c, &(0x7f0000000140)={0x20, 0x0, 0x2, {0x2, 0xf}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 5.945463136s ago: executing program 3 (id=1906): r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000002100), 0x4010, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x10000, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}], [{@fowner_lt={'fowner<', r2}}, {@hash}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x80}) write$FUSE_NOTIFY_RESEND(r4, &(0x7f0000000000)={0x14}, 0x14) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f00000028c0)={0x2020, 0x0, 0x0}, 0x2020) iopl(0x3) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="040e06006220"], 0x9) syz_usb_connect(0x0, 0x48, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x1b, &(0x7f0000000040)={@remote, 0x0, 0x2, 0x0, 0x9, 0xc, 0xfffd}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r8, &(0x7f0000000700)=[{&(0x7f0000000140)=""/82, 0x52}], 0x1, 0x4782, 0x7) utime(&(0x7f0000000000)='./file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x2b, 0x0, 0xc0c719fe1969ce50, 0x0, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000082c0)="2e4873287601f85136cfd130057f46858b881fa5215207c9967fcf0f5f2dbcfaf5f71e052d6a79ec84e9d9e77b90f3d0d5bfc45df24b5264ce499af778ea2faf90d3a5e09a9c281ae8c55ca289b4b0189d59c4588bea9df9eeef203b55b20e6caf9096f12946cd053d66000a7ad60ba22dd1d46b4a629e922d7708ad5570454dc8994b000ba51b2e238494325a0bc8459b0e6980d765fafb13f5674efef6900f22a5bef42666fd74dba081e077cede0090dbc56abd256cafdcbc1be261d26e8a40d54f75a4a6332d6ad961c8662f0fb3e600adc9d1f2576636843df56482b4577ddd66e9ca89647f6d24681c62ef517b229a095048ebb442ee7a07f96c9bfbdfc838e30138671e631bd99834a5079b4524125246c8005158050ef361b1de91ddc42fbad6cdf371a0e02ba44cca19fa1f464560f730e0b6f7754bcf8652a585061dba72c9026b621526ff21ec33872bfddbbe6dd7c3641d6b7a1de064dc254dee3642aa0c58c5faa6b1f113f9f54c9bf69e50cc4b58aa3312365eef5c0fc2fcf710fd3f52d5cad80c189feeca45be913c690fe3712019855a365dacf76181df7bfe09a15d6e4b521b0359f2523a077836ce0ee35240a8eddfd8f3a6136dc14315b8caacead393ebd06be10812e4ba0b506f6448ae18d455f567609fb53f8a88c1a0678a88bd0fae75839f710a40ce98d9bc59cd30f43cde8eb00c145b1e045dc3cda7abba6d6738e927eb14ab05b708caf38a825ffd3a157f99b266ed1d4018cda94251d4ce8ae7bbe1768356a1e08aaf6b47c3b5a8cbf5a0ae18d523831a7dc827a48d67d5962c58a140cadca3a0120f22e06d4f61b8cb98ff3a2e559de7625a454ee7e3d9bcb5543b4b4de6e323abd97655e7cc5e608e902680017227b24690eebc56f9b6d197b7fc10456aec0292d2b7d55b329e282fa756b29767b4746e22100ff07e0d49336e2092ff35ac119a7cd5c3622d480c44410a24944804487327c764ff0d990eae2a45d8fe20e9796471e78d35f64c72261948738f5e822a08d4eaba65535333027979fc93f9c007cf23d00ae861eeb70ac16aebed7000d0ddba7e7a4df396f2b1b92f32ed8b2afd04ed9e931168dfd91715a643ce767d744148a04300260631687f59fa7acc1d2df3ffcd570c22c726f11d401e6ce7d95637078cd1318e3e0c4a63c416343712d5959f6331f5d65289d81ad2a83936779e7fda4806e1a6b7801ce771986fd45d392d876c9894b0e32b14bb622fadfec475016f08312cb4bfd0016fbccacccb8b21d28dd64fb486da6cc90c03cb9698107209b08d299e5d9d003e56a7779fcaeee07249e07de6b3e22bb5ad8b00f7dc5bfa00d0bf80cfbbf242b3f5321e1d8a94a03f127894b058b7cc21e48834350ee3e670756e26e00bc1257e3eb9373ed41c146771e4cd2b866cd98d39d726f3f47ba083ce2d716856ac40d30e1a5d3d27777807abc962cd8e9c84d189add6455a4d6d13bdb84b7de4fccba982f6af55b23189c5b0ade8f118fa5c27cfe0f8b0ba56a5ee946657dfc932759b74bcb129acb5712ff460590225ca1c9afb70d972533b709863470eec623e8b73ff06e7533eed7f697365ca65dfe1ccffb599d7868c147606d6cabe6d633acae6f531e6864ede4f246cb7cce6d480b571b08791ee50e509eafa3163b6891d06c56a4ccda73a3922822b90fb79001569983d91d5cd3cb1513ab897c860c06f9880f0f9d9e6db0007d37726a64c2e1b80d3d9753490453ddb312ecfce8e662a4f841df5ce9f221075b9284ac9597e33f1ccd4f0509ef3498a367781d44c39cfa047adcbd65c9f05161c59918f9eb063f182de33afa54170eba0ce0fc86f679d4aae1762acf62fd4b2defa4aed42c95622e4f2f6850dd7dd395daf6a123c454cfdd5a1cb73f271c126c9bf9f4eb9cd813d370660aa21297d932cae6fae4c99187cd5ca2d5d649c503f5e37f65877cc3c55a01943d45ed1b32ec809b665f06c11494c59af13a3a3b90875d42dd6e0348a2ce827149dce5fa41656b03ee85b24e1ca1835c7bcc801257ba94d2c273a0913f521981386031fd9b8fcca3172a13080315009d500a92b76dfd8a7502c7944eb8353e220a6d8ab500176dca8535a0cff1df08fa442001c660f68077d835568d3f35b87e88b67b09419254652e926f77e7247734b8f1a8dd3bbd417f467882f64844ed3aec3b3b89906e7dcd9614a90f316e7b5fc513a3ae2b0fe1862c0202733be2f374c97bad91544274d212af903eed4619d29345a2aeb44ab427d9699a91eda36acc7bf676e1145f4f63007a5660e544c52649dd299a2843ef5103c3de81dea0582a072b8b20a64fc1682733d7497e5d797c898878f5b78de76f2a87eebc839192c5160cdfa49a89cdc2b0d9f13aa26a0a5d93d4a84d1d40ab709400e26417cc5890e390f0471bedff05c1889789486f5287f67c5f19f422c6194975182fd80e6e9e15c8dbea17db5a265be90b40fd17985c9a6f5b7fb746e2ea98e28dbc270cd77209292e526510a996b330d726e995ea85490c6a0d21744b641ccea3c6017afd94919ccccde0e736cdf5528f7c7e47547ac959eb3bf6c7d0d8226906611c6ef5de98c96771513decde7f0264a76b8db2406ebb9ca4fce6d72177aa82df4bba951edc727a3b521bb2c16c9cf684966880283235e6d842e9e8686cfb8085791327f020adf428542534ebe7fa3da33cc01672e97a28c64e95e4604c43d94977bd7cd1cd66f64c8b92749892eeecbe89edae59f44d18f2112683c2be4db2050e22d004ffa67c717fd82796556d927a21646f2e773d56044cff5d649d3e4c6ce359f38fcdd39781f684ce3c7850363cc49d996fd85ff47c61751e37846f31ae0f8f98d2397069acd5125ac1604b309a5dba69433e993b861cf9e36c1a63d20689031722e58b09f59cfe17528e2fc6a6eb12185d9f34443abb7b5c498589a137b1bc795ee8441efb535492560dd328f83015694a0e9a9fc877d1a5b513d59fa3ed23fc4b06e9b4ee37514c05b3e71269f3c2ef4e10855fb5e8a38b0949ef934ed983937c537dbf7736b0a77e8d060ab1f3f472ed03c45c1f3835bb50edea7d79962034dfee971b7d18b367f71fdc82b69f819010276005ba873fba4e022d80da51f4ba1a407b2e3d415089843d04aea759c34929e2294094c56f392b6a33ff711a799e6659f25dfc441e5784a87487baba5cc67d0846d95f0fedf3e8c4570cc9ce6752bf7cb7f48f063f37df118599e41819dd2ca6e1bd76ed8082fed252af4856b64b5cd43ee057641c0fb4e4a1fd1a65db8b1daf34950e28631750c7a64faeb559a02e167b1e5c0615a1b83290caae5f5a1903be33c3c642364f2b488b8f4005179772733cfcf4e9117868f5eb0c7939d7a9455760f6e65282b558c457ad23e4e15780eaed53409d2f61806bc96c11862e0e6cd64ea9a64f0798c9d783771720e9d30bb66b45ad5d15142a635291d9075860a39b8b3c0863ffd4dfa192abde7124a07c9291ab67d64a0116eaf8b21732d21cfc502743612729c8e68fbd9a27ca71b369d7d651a4b9fa4b1125a7e72c3120fc87d072c89c82387e93d871cdff78373e93e40e8354e1847686c7a11596b76cb156fc95aa05a589f1e62cd39aa806e82edcd313532d5f1516e85c64ccc0bcb5e4b28a3a332d46c170acf3210ed064696b58f146c69b82e69f8fa10dd3143c5ec9888e1ae78fd1245d2627644eda2de82c427417d098e89cf7af667925ecfa6e5ad61baeb319fedc8d82ccc7e1858c510a8ed0515683d469d543889b0e98360d4ef6b52f181ebbf978f71a1cf12dce0f8ce6b0e54a0d0ad16da6ad008ba73c8a33d1a65633cd8ef2da280003068efcf393678d50697369bff598b6c40c9f915072b101e247940b61534b068e478baad65e706a1fae8a21cea845fc8a7f8e2c3d6eb73e23f589da655b390b93217d5c7600eb1eebffe15ffa2f8e705b385d7118575603f9c91a94abd288b4487b678b618701c21ac2fb663f1e3efadb7ae46b5002010613a8288c8830712c5be5d74a4b2c4ea4e826873bae5619117aebc92d3ae6639fca95c67976cf53e6bdc7a17b9f0e46307299edbf09037ebbc14856e40b04d324319ece297b8bca0215c17c9335bb3f04fc062735fe816234b9e25761076eb9c3655f7ef6fbcaace9d839b3f1d62b5571d38b2e346db1ab87e4bb5077d7033b2a74bb8c334a0cb6322c4080bec40ca70ea34b1cdef76bc0030c7c4066a638fad87436cbf62f18b9f063e7e180f8e15dae5532e4b36cf1cf14629fddb9a93324cf13c5fd91ba987fc963a19077ff49252273c1429efe9fce9bad7c28c5cd19ac664af463d134c9d1211c29a9822184e9f7af519f64a5c2cd71666fbe49a86de739158bea252f259dfc850335662eb9e9e757b86222d79966290378170846c30cb17d84b8bfba322e9adf6a64006bceca72232f875af00d86f4fc447f1e3cf60adbea884f67b0ff204246695f3f02e7d7e6875eedd33063e83ecee67e2287f8456938195cf8a69b7493438a56b0cc506ff08a00e255867b7baaccec6612cb6eb96059635c529183d91fc6bee938942987530b1d94193af9733f58194aff199a1855c1cd39e95c8a2897f49208917125194c3f081b35cb629144ff0c1deedfffa67cb673eeee3c640bdc15805ddd368ff41a0910c0df0f614570451ade2aabd0ff7b563150456916afc1a22c791c693496fcdfbe6e13c6cd80952dbbcb09f4e286cc4f336cf0b7e0c94bc8e20a849818c7f6d79fbdb8cd7512186c132f62c4d5f80decd192d77e1094f94a80d48d1921e1e8b15ed4a2df48b279c33ceb7c57b1c2b43b4db4233d78b1df7063cfe0953eb815aed5fe8e85ffea0bbd3ac4af4113edfb9eafeb7613b1803414a630b95ec6ad2d9fbf44fb4ecfbcef8f1cb781a73ff03a96508a5924da6229726e580521019f2c0a47225556004f9a581da2e43d674db8e1c9371fa5050b88f0c4ac80ba48af045bf8f3387acebed27a4c0300002af87eabadff0700785c697eb2fdf41a256189f7e4a85c9fd7ebf08765f834e071aa78c595441adbb59361c0d5c9a22742efa2c6631047a13929bc4de2931f55640d0b33aba48d3c80bdf48d1f4cc3eb5280ebff23f6d9e277052beb969ba3c7cce7ebbcd53178513d4e85ba0c8b2eabe9f86bdf2f7091773cbc4275634691a6c5882ced2520097cb069cea37cbf0cf131a97215caa259e5fafa184f2ead784e8c67dda1990b2da413ec7f0ef290e3693b0b35b400c2c30f79ea83ac3bbe778c5b781aa2586eff3d6d5a9c59e31d135061b2135a1dbb7a56bbdf5e7df18c94fb2bdd89b459bed354864285f3b75cb5cc155dd517df9c77738d43da7f6ef72478ffb1d72da8e1a9c3ef52026cd10cdf50702b828f8e0375827c231955e4c5b962c395caed544739d068e7a2af70ae9c5e67c4a58669be8f145ee4eb8b1bc4e34c4fa8a160005c7cd1d9d11e4e468404446ea03c135ed17fffcdc5bcf0aafe1cb391df475fee02233dfe431aac3963c233cbd6e10c8da430d996bd83909827370fab655ead2f74e9a8170e5e6eee8fbfc63db267eb4b38f6d70d55878a6e76b3ff880de8a572cb6a4aaf46b2fa59b3458116734f7d5f41c892c62c58822e6555c95138e81756d840e3a473250480b8c7996e343979870b4e37efe72dc9455f74c52325ed510e40e8f3088b4fc24dd221c3b3417c6fb2d834c33e820fc0c856add9ba00fc750345b038f3b15870a02845eb262d51966294306970ded11f1452a40f40aab1e309e7285fe4a59587ade9e6caf1ffa0120fa9ad3a20034fc05254ec03ac20b67ecd7953841fe7d5b027ac7f3beb53f49a6338c74b80bc4b6a4146943f3ced5bea0265e1f85c37446ffeaf1842251bd72c083aa20b19eeda80a47e4433ee349c8650a88fe66d088e696a3a5e89ef4e2bc1cd771622d1c34c4101fdd513c348f6039fd8758794f1d296c722621670640d1cac5cbdd15fdb2249960d7b0279023014aed792f5d14be6551d5d114fc1cd080797e84f8d9fe6e8885b125f8d219b215ea990880ea1be8a9a785250b67e953bb8036836e3fd20da6e6fb620ae2b80f3056ad07c48bfad810251bbbfd8d4efb4fd47c6552a13776d943f17a4916330dfba0561d1adc40d28c43c27b315c163f4df9e744de42f4323870442d512988bb3f9c0e2fe238cb606f71d0820f1517138961b44ece0c7ea5744a75c157eedc271ad8c0cfcb6ad83191c6710a7145acf6ce9fd77e85e1b758d3935b801ebd7fff92b63321b0af2cc9e5b2f30dcbc0893bb0634dfcceedb58839a2e4d76ae2290ae2c1e4a48fff3f01182d5063243c40f5c44e51fd8435d41e28d94e3e5f3e5b7c3fb2ecf8aac247a876bbd583146d96a0ecdc8dfa129b364ec7e8c445cbcb5107a378c8190668bfe55c7081ae89d4f89767c97907785542938f9113c41d8c4674abe836db2e62aa01b2421b54747217afe425723634275083fbf67b7750111bd070bd598aa099d388bee5d06a112d5acaa56b553a9b184e1d66e13b0fcd63bbec503207777567f7f0561692606985414eb66c1f5b63cb59c76cf5dcad1daf25df64bebcb7de092206af76cfd474b9c4f68e441bc767d858ea23d7f1b2ff7bf0ca266c125d7dd03a0fd3b132c7303eb7801f8d5007c3b1e428ce0a00b4478eccf02888f9853dcc6a108bb36ad8961f2272b1154e595d9ac4f5a52d979457f212fe96eaac708247a91b1d12cbd261b1fcce3cc25c0daa49b0efb2bd9f19c2f7b75e05f6658c60e3231ce56b8eade3bfad0d247aea2a46229c84f57b4ed3ebbe6459d16450d280c7736c0002b8342b24cc183e70b414f02b14cf9b131acc7b049518fad19fa29449e5b5d4d1c88f736ce19c4aef4251649e075c0d700bc93c2ae06fb53f73d524b601f8c5ec074676b6b7776c86b576b647749ed751799d43219472a46374e4e65ea469ec87b0d93b6cab74b3e0230f591680fb4aa1f119eba7c7bf96e46135a3a8abe42de652230f15bb3ec30eb1f09f7102738017df83f0b8f9f61d2ebd33408f1154999e8d10c95ea25552dcd7c791bc71df5b0075c1c672463c4b71e51ac335cc56bc173709d903e9e09e6d69325239a07cae7892ea90e1b08e8570e40dbcd61295a2a6ca6bda4b3267c152f33379166b5dbfca43f88f0cca90cf081e792a8523b5b246df73102bb429a72262d50755e69c464f41187387a10bca2b695ed637d48b8a71962e3a11a582f587ccb23dcb97ad9d9916935bc5748414120848ba238464cd8f1e949e35c247392f46ec2b674a9089d8b025d3bd2a635fa261e4d8614827e0f3a5ed0f5ad17998179aa80b36e1a06067ff01ea563d1c320d6bc3a92c9e3ee01a0b024645726d2bec1ffc4ef1c512c668f51f87ca010b70cb8526579762598a137848093206b0633c8920fe99567e49754cabc0ef3d06130e94b5d0b4c321552ad5e97b8b68d58067384df31c20ef2daeca3785c9cd104db0cbe6038d49742ee140c2284762d01bd678a8bea1fee0a0a25a12f9a63c5befbad83100e326f61029a2d918b17f7ba61e627b13ee7bc9e24ada3666222a4a145493e41cb07004ae1121a2c96f55dece273813a7872686492a8a5925f16faa795b132d9560e77c182c46fa5309d398fffe3d4e6b56a87ae01c620953028f94ac8a01c7b49fd34b92420ddb4a9fd569d314b6510fed30e33afabf20f2a573cb4b37b92ff1f1ecb57128f7736eccf3870b745ecf62b189acaeece3482d26b527ac9fc243b34fe98afecdaf6cd63e416d9225413c6dcc3539aa03b1bb6a9ea4ab14d7206f7ea3024306fa4f87176b63f1e6371dedcb50af0dc24743c091424bffb9e19ddcf59e004dd580d1d94c4008911ffea16b580600ca8b0e64317b223e7ffed909b837d0f5987f2eb224719bfb8e37c68269ed72c381f786ea694c5feecbed8c3925b1df4538e11a53b4394f03c8b87d87e51ebd2d1f7d41fbb18479feda4fb234f5eaba1dc82d149664a4585931fc6c8f8c4300bea6475b24d5071d99a2a01d7867d48f0c5bc1bf8f7235072b37b60e5f081c9a3b199ad35a8062ebaba0943d728d89e478bb54d128f9329727695217e9f6fa899e8a4e87bc5238e251089913bd18f3e715573bcd81817ef06eee56f38beeaafee07363aef2822a01a1a110f4091a9db6f3152c50f1c0153b183cc2ae7f2ca6604363aa05fb3ade548896fe51fbc71a6a8f9028ce4a8a0604b076ebd8deebcdbbb1c7b6cba059a34e4c785da524f802ba5f8add03576e6381d2a2bb88f908518e4e3e0eccd97213aea10f9ccb7c521eb19318accc7066f4b5346e3226d92c41d1cf73e7ac51d87d0660507983648a7267315c00bd0424f9e64a1ab0c75bf396e99abe6b88268f0be0b349ecd59d8f7069f6ced0e9353c87869940c102998b565059efa59cf5f5955f523f8b4af37cb98d9fea2bbc7623f0b8ca79c7cd511a15b06bc1e5df2a4deba242a0c466457f57e206b7b695820f5b0b7a5007d762296f9b61f5739ed7d4840d841a7858ba3f8d7e4972b5718a3d22ff6a75b5c6461907cd992e10ec71e365880663747bde711d9216b48ca2786906d2dc930a5d215d78a3163e7c0b1777b1bc2c5c15ae1c913ab746af9466387797e5bcde9e9fe191c437f4098e8ebfc10c082ce779dcf778ac54d155385d53f1de77a08846bab947a3cdbf5660ef8d01a83fb4ee50cf02cfca421fa5f4b9859e1986987f4e1aeebd907331bd6a65ee7f47386549f3ba7f93c38c811aec1ead972b066eeb106e3e8b0133ebed55bb52819b755186ccfa284a6b9c893b09f8502e4498280abd12301139e6ac1c2b276efb9dee92192cfbc33bd5327898d57b44cea544d33e0c53f3887f15894d12db6a892df5ae1b6d7f3f37b87bf622b402110cdcaf443b29d860d7dac998e44610f1ed28cda0ffb32854cffd8088eeff38e5a37b8cf1597b5e72d8fabc1c643c48f5b04c57da75a7c87614458dfa520bfd8d95671fab8350a09cc78f1a2aaa5e87e962783986ccd2a7b97e47b84d21597f4fd4fd2445ee95f8099dd8efb87c5a34973246670d9fda4181d3b1335ee724aa79940659b6a0c62ebbcf8a7b09d670941229ed65fef5247313f078effe0fc1c2d3510019da21d1ecc3d12112ca8fe6c691c146cd160bb78cc15d3c944c97bac5214736d0e484aca6266a1c3b0f70e75bd1ce35a5e8a28e229da3796b43add92f4c67e1e80843e088ef5a246ff0e421fc0b4faf598dc013a9e263f276e459364717f210c6366f1e070b9687126a9cbea9f7a66c2eefd0851c54196479b3c3a0bd33e1a5f34767cd0443697f68426ece2986d045bd2db6c0c1ddc9ba0073d2f9be5851bcc6a8e24d0af1e6b0a6826ef0e2d211a2ec3a24db0ae02945d98de01be9c40b62e3af3c9318c1c14ce1e65d0dcb63b55d0488b96a746a262feea4441ed29e9e0422fb18fdfb9ff976c871dbf33b212b5032b6cb4ee3bff586d12b9e3ca80caa0ea9439c940505d7286cf98c9e8083e05a2d0054fec8656f26f26703ed3ab77039e7565dc670d4652afbeaac8647c7ca87ebbe3454ae75f1ac3be003296cfaea54cd2437bd7cdf2d16aa28ad12c7af93a04731fbfe601bb2e6a68add03cf9337561e449e2f5234e497dd643a1489c9b367624c036a46517632114d74950fd83c3e9539ade3b52e8e001095deeb0eb8d1d0380c7463903f189cf80117e912f82c1519fc3909b3495cdf434d86ad644886466ae215618c41aa61a7c9377002efaec1e72764fc3be2baf2ddbdd4f00cd7edd902e36265e7e7bf41d5d0e596f36edf424f5d0417dc4c64e34c53e08d1383eaf5df98a2e17310e487711b7dd881d0894afbb5066cebaa4f10b17b8a25250a84e3957615444e844d8f768e530ced5481059f1c964d07663d5fde6fc138856cfdd74786309e4743869889e30f5600dbce233d8b85620f7e006db61150983c96e74f52c348abd06d571d15baea70e519b0ac7b6802e8c2323cc5b13670a39490da046c29fb2af0af7179e3751e0035d0ff834ce6f9a991b16db1418134d066dd0ee12737c7cf8059a7f943bd6f0e377699b9d87cedfc52eb64888ddc2313f562a885a3d910e3ec163cd3c39d83cec556584c7dda001c6c22c9bccc4388e168a85bdcb1b7ad8150544634a6a05d9124ee7ce02069b066a851662884439f0f1cc4b49d6f051dc5f5a60764561e4d9fe56440b19dc1e5add259c08b0adf0c60ab937375851f90114c15ef299e919673ea316d6893d2092d050fd02f76d39c1e70a2b2858e59860ab72e962c03238e94d623711fd25f832c3e41ba4f0a64d64a782b2c00d908da68220505d199544ef9a4e6a49092ee574eb0a896c416a2586af3c573ddadcf67cb4d32582f2cb423aa5a04c9c15bcaef6cff56da6d6490fc66c80058ea42803aa71e825da99245aba1ca5131db065ef444afad6f5222f1d037bdca16e1ebd47b4d1705d10a126adff2a72cb9c6ca41086318d1ae1a37feb20d9779beba998045476ee354da0a41d897b9a5e6f0155f9b62afde5557ca848c6c49f5bfb5ed94cd41a6c1ed5f2a9b2db20848d9ce99a90fd10f51854bb1ddccb2e76babab93b32371ee7cbb685541500e5059545b9de91bccf30708cde67281a34bd70a6f4bf637f115c551a5ff5b6a8f8d4fe401e3927163571b11e27fe4b0a118c11951b87540f73c23c92b6a883d571b027627b5df75c5127216b64c2379740429ca3a06a832a6d2fd380c5269ae46bf74ca13fa441c6e318b91379feeeda81758dc10478b6837af85ef645073e7fd4296239576c7e249251ef014bbe3dde737b1a1839f4e09c5b106ca850c0c61b5506d779149edbc3d8054ca8240820d7482813126f0c66cf913894a918f56fee8de97fd0aa09229d6f8dc95965c3f123f74c7870e28dd2f1bbb56d898153993c3e2e3af9832da91202c0a497a3b4daf2214b1ce7ca7aa8cfce74b2549e835ab92093fb8288693d09094b83988abdd23b9b6ab3606134a6b6c213a3cae6e4404a592c7b82ad9fc5ddf427ceed5e99e6b865341ec5406015866095e7f6801cd8396065872b6129d221351fdafd30b76e9e8eb8f77fc4646f1c1da029bb447e29764a571925d0c10d638b5a22caee0ee881fe971fa586c804fd39cc7b7955a2d83c3cc8878af70cbb7a77969d4f9c827bd60286e96fd9e502f044f2af0896809dc82cedc423472f79cba6d48cae1276576557bc44b2461b0b80a70d984f737642d68794c428cf0df326b4feef6ae228bbcc6e836813f8adb3a4859568527db08e0dc91a5a38d6c1d21dec82ba9fa89e570518df9c49a6cad28a925fd155ce41b3f574fcd7798beb00da4cd95665c479a42430bc7fa52a9cbda3f73e89244ca8475dc5f9d9c4c66aead1a4a76910633fab14e9b517da5bfa63d03a030db1871165173cf2d1086fd16d268b88ea93145cd7f6b02b203056a360f11900d6504155c84394140ea15e56212e4c9e3cf8227c985e23cafe0dd534302ecfe06482c0a4a7e156fce72ddebdde3a6eeada936790b", 0x2000, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x9, 0xfffffffe, 0x0, {0xa, 0xffffffffffffffff, 0x80000001, 0x2, 0x7, 0x5, 0x3, 0x1, 0x9, 0x2000, 0x6, r2, r3, 0x1, 0x365}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.449804009s ago: executing program 0 (id=1908): fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe11) r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000280)={0x0, 0xb, 0x1a, "a00172fa97688de922c641f335be09bb389b0fc0cea6247becd1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x85, 0x3, "ce0628"}}) syz_usb_control_io$rtl8150(r0, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x0, 0x23, 0xae, {0xae, 0x3, "604b17911187f8f95dff84b443b989af509601f8b76e26fc5c93df4c469d75dc1e1ea97b3d8cd158785ec2233f6b60b6b1ca551cb2972aa4af8c3c204d1748a28c8397b0018ba5b6c7b539f279389e6a2e53af710824e6f22a9e053dbf601bc1718850e0973d6b4e7c22c37c57ff6fcd4a58c574a28e3065b496c32a343edd9c73a5f334a6b113912f4f9e1fa03b5ce6c8149c9e1d5c793578a43fcaa53d0a033cd712c6f5b740e7e47203f4"}}, &(0x7f0000000380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x34b1}}}, &(0x7f0000000340)={0x2c, &(0x7f0000000180)={0x0, 0x7, 0x21, "e1a97a3d036dc07a58b13dbbb90488eb50e6ad0564557fb6a8b195fee472fd51e2"}, &(0x7f00000001c0)={0x0, 0xa, 0x1}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000002c0)={0xc0, 0x5, 0x2, "f2ef"}, &(0x7f0000000300)}) r1 = creat(&(0x7f0000000280)='./bus\x00', 0x29) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000001340)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r3 = socket(0x2, 0x3, 0xff) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg$unix(r3, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000008c0)="166da1949ba0ee9ee511f385427169498f9565a1c4099287", 0x18}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001c80)={0x1, 0x0, [{0x0, 0x0, 0x0}]}) r4 = open(&(0x7f0000000380)='./bus\x00', 0x80000, 0x2a) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x252, &(0x7f0000000d40)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x240, 0x1, 0x1, 0xce, 0x40, 0x5, [{{0x9, 0x4, 0x0, 0x5, 0x3, 0x2, 0x6, 0x0, 0xfe, {{0x7, 0x24, 0x6, 0x0, 0x0, ',\''}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x8, 0xff, 0x3}, [@mdlm_detail={0xfa, 0x24, 0x13, 0x2, "e30cdd6d12e1deeb224676f01ca30804e601fcd6d4a6a11642e3c90f4bf34948a3d8f693c5130cce33fc7215d7da17cd8c1a95ff4a2ff65dc56e9e3a0b42e0386147e2c61a0f0b6a9d2350107985b0a9ece0fd9b2a6fc3e1a5aa91efe9036a9200551e394f94d4760fae993f392a30312aea74a1e61ec3171686acc730d911bcd13494af630cea299d09964229cac26c4b895cd3ca099af6b05dfca6132e0a8ba47eafc6d0098e0fa6b9fae1bd16919c2190b49089284fb543935d599cdbf0e5b806144398c9eef085ef877c7032dc0d3816f305b4147e82be327f6696b551b45c1bb3a469098073ebac61b604d3afc8ee2c5d111bf2"}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0xe1}, @acm={0x4}, @mdlm_detail={0xe5, 0x24, 0x13, 0x40, "07bad3c2302dc931ba3237f79d52d39e40d4e8698a8c2783e4486a26fcd34f33756e9352e578939406741b21f4d761f6c6fbfa6deb8bc588bb72cd7085f3607875738b6572c23d721ca19c225476d8f3824a1eb32a2ea648e4b872e73502e074e139f4a1f8a4805d3b8e7aada36fb30534ce1c6c2ce8749047dc6f6934a169fcce114b1634e8b73d4cbc80fe61796e204c221cb02993fd6d754a854959ff688b22a7da5574da499bf6edabf46ecae4ab32317ddf3ce2332ae4548acef72bcd32d61380b764404e9b7b378fa2ca7f28461f87eef7c8073ecbdeee00f311cf36c138"}, @mbim={0xc, 0x24, 0x1b, 0xb2, 0x879, 0x3, 0x6, 0x6, 0x4}, @ncm={0x6, 0x24, 0x1a, 0xfffd, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x1bf, 0x9, 0x7f, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x3ef, 0x3, 0x5, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x4, 0x9, 0x2}}}}}]}}]}}, &(0x7f00000012c0)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x201, 0x2, 0x1, 0x1, 0x20, 0x40}, 0xe8, &(0x7f0000000fc0)={0x5, 0xf, 0xe8, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0xb, 0x4, 0x8}, @generic={0x71, 0x10, 0x1, "0b74856a8e921331e2fb32dff8adb94e9e055e7904eedbe2556b3c6c56aa8126ad9a25d80b5aab6575d9a31c2e0225d393e34a8eb4d0fca0dedc7a33b1f1797c57bbc134a81959af33ff8eed36def7c1186f955fc70c3583c134071499ef4c7ab4e895b63d493414b8b7c01b7049"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x8, 0x88, 0x4, 0xffc8, 0x5c}, @generic={0x5a, 0x10, 0xa, "4cacee8f261be19fc46021cde63c92ae94d5d2ac8156ab1015c49c94ceefbfb5e5f7cef75b918b01480b4976458205a633440fa5788193f2829d3e9193756e40f4b37594dc48a69a287cd9b8807aab849386d958ae45ba"}]}, 0x6, [{0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x445}}, {0x46, &(0x7f00000010c0)=@string={0x46, 0x3, "dc0ab6357ab9d7bea258b02e5edfb80002470200173101c73717ca4e4b25962edfe6e1cde2388f44de247d87838b923864f956a6d66cd31a86c2fcc0cd57962241092dcf"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x444}}, {0xb9, &(0x7f0000001140)=@string={0xb9, 0x3, "c3174da86c2917e43e5a66310ccd73c12bebfdc3202ebf3703b6974887cbfd309b153020255908c85d5ad83fae1339517bb11b174a343365d1f554142cb3c9c57376f9db96d60561bc8ce866a3c8f7a879052869ffcdfbabce48acfafe1ceaf45b6d535eb10135fa59af69f0ef1a421ca1003afe843dc3be1ce783f6f5c44b97cca93ff05999867c1c6b26f882a587e035378dce78a912c8c81996232779411bf61e29752886ec8c5c5c776cdf538d0e4efeccc6bd2b36"}}, {0x91, &(0x7f0000001200)=@string={0x91, 0x3, "b95337afaaa3fce6026d75fba8d214acfffadaef2a0d791890c5f4cbcf41abebd276fb31b704b71083565c779b4bfe439e4b1f7024dc8144ae5144912e2e50a00ec581ebbc20039cb1a4b53b46dc65bd6b6908c9d7379db737fe3c49c6398c452ab986c160304a76c80f09a18d6ff3049e324d24dd363b082b7f056e3e36fef56db0380de55efbaacc1b31d444ae70"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x439}}]}) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x5, 0xfffffffffffffffa, 0x2}}, 0x30) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x11, r1, 0xe88bb000) sendfile(r5, r4, 0x0, 0x4000000053d2) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000840)={0x2c, &(0x7f00000003c0)={0x0, 0x6, 0x68, {0x68, 0x0, "7fff5e42bff1cbbdf3591088a8479208b65fbee097b0fdfad6ffe325f6034a0fe5e33b1b148cfe6772ce021f6a4ba51d48a1470a9e774cf2a90ae5e910d6aa4e6889fdb08a543ba4a17b3cd8f9432e7721d4bf8a03245fe8c012339ef6f39ef80f4ec13d7f1e"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x444}}, &(0x7f0000001800)={0x0, 0xf, 0x14b, {0x5, 0xf, 0x14b, 0x6, [@generic={0x102, 0x10, 0x1, "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"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xff, "1a1b048534ecc921a87a7734fd36145c"}, @ssp_cap={0x20, 0x10, 0xa, 0x5, 0x5, 0x5, 0xf00, 0x81, [0xc000, 0xc030, 0xc00f, 0xffc000, 0xcf]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x1, 0x3, 0x6}]}}, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x78, 0x18, 0x7, 0x7, '@)vm', "978c603f"}}, &(0x7f00000004c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x2, 0xe, 0x9, 0x8, 0x1c00, 0xfffd}}}, &(0x7f0000000c80)={0x84, &(0x7f0000001380)={0x20, 0x8, 0x31, "b17f82a88210858ebfd9506df0d2a6063487e74a79be71ee551953333ff595a28e0d0b1263325c62b60000000000000000"}, &(0x7f00000008c0)={0x0, 0xa, 0x1}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x91}, &(0x7f0000000940)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000980)={0x20, 0x0, 0x8, {0x0, 0x20, [0xf0]}}, &(0x7f00000009c0)={0x40, 0x7, 0x2, 0x81}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000a40)={0x40, 0xb, 0x2, "a573"}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0x200}, &(0x7f0000000ac0)={0x40, 0x13, 0x6, @random="65855671bfb3"}, &(0x7f0000000b00)={0x40, 0x17, 0x6}, &(0x7f0000000b40)={0x40, 0x19, 0x2, "9993"}, &(0x7f0000000b80)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000bc0)={0x40, 0x1c, 0x1, 0x11}, &(0x7f0000000c00)={0x40, 0x1e, 0x1}, &(0x7f0000000c40)={0x40, 0x21, 0x1, 0x9}}) 4.766582495s ago: executing program 1 (id=1915): socket$unix(0x1, 0x1, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) getpeername$packet(r1, 0x0, &(0x7f0000000040)) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000140)={0x4c, 0x14, 0x101, 0x70bd25, 0x25dfdbfd, {0x1, 0xf, 0x8, 0x7, {0x4e24, 0x4e22, [0x3, 0x31, 0xffffff01, 0xc3], [0x6, 0x0, 0x40000000, 0x7], 0x0, [0xde, 0x80000001]}, 0x2, 0x3}}, 0x4c}, 0x1, 0x0, 0x0, 0x24048084}, 0x40000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) 4.628177779s ago: executing program 1 (id=1916): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)) r1 = syz_open_pts(r0, 0x101000) r2 = dup3(r1, r0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3a, 0x1, 0x270bd24, 0x25dfdbf8, {0x11}}, 0x14}}, 0x4000000) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000005e00)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "f0a180", 0x30, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, {[], @param_prob={0x4, 0x2, 0x0, 0x7, {0x8, 0x6, "55a609", 0x5, 0x0, 0x1, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}}}}}}, 0x6a) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000002080)=0x16) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) syz_io_uring_setup(0x5e81, &(0x7f0000000240)={0x0, 0x0, 0x13290, 0x1, 0xef}, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$SO_TIMESTAMP(r7, 0x1, 0x3f, &(0x7f0000000000), &(0x7f0000000080)=0x4) r8 = socket(0xa, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0x2e, &(0x7f0000000040)=0x7, 0x4) readv(r8, &(0x7f0000003600)=[{&(0x7f0000002340)=""/138, 0x8a}], 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x406, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x43, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)=0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) 4.265650241s ago: executing program 2 (id=1919): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000380)="9007b5fb", 0x4) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) (async) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="06d91557", @ANYRES16=r1, @ANYBLOB="000401200000fcdbdf250200000008000c018101000008003f0005000000"], 0x24}, 0x1, 0x0, 0x0, 0x6044884}, 0x2000c000) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) 4.112394507s ago: executing program 2 (id=1920): r0 = openat(0xffffffffffffff9c, 0x0, 0x101142, 0x40) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x101400) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$NBD_DO_IT(r1, 0xc0001502) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x10, &(0x7f0000000040)=0x100000001, 0x4) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'vxcan1\x00', @random="02e26779a187"}) 3.994066372s ago: executing program 2 (id=1921): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x5410, &(0x7f0000000100)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xe, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r4, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_CAP_HALT_POLL(r4, 0x4068aea3, &(0x7f00000007c0)) io_setup(0xec6, &(0x7f0000000140)=0x0) r7 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000005c0)={r5, 0x1, 0x1000000000000, 0x2000}) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r9 = eventfd(0xfff) io_submit(r6, 0x2, &(0x7f0000000740)=[&(0x7f0000000680)={0x0, 0x0, 0x0, 0x2, 0xd, r7, &(0x7f0000000600)="597e2855208a0c5ea862f4fb", 0xc, 0x4, 0x0, 0x1, r8}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x2, 0x5, r1, &(0x7f00000006c0)="feead4d83459658213274f6893d7cc7c45f41e47d34323ff416ed38ba8ce83b71a0884f67734000376ef39d26a9d18aef04b", 0x32, 0x71, 0x0, 0x1, r9}]) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000001c0)={"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"}) socket$kcm(0x10, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCGIFHWADDR(r8, 0x8927, &(0x7f0000000780)={'ip6tnl0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) r11 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r11, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) ioctl$KVM_RUN(r5, 0xae80, 0x0) r12 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r12, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$AUTOFS_IOC_EXPIRE(r10, 0x810c9365, &(0x7f0000000840)={{0x10000, 0x6}, 0x100, './file0\x00'}) quotactl$Q_QUOTAOFF(0xffffffff00000605, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 3.66445936s ago: executing program 1 (id=1922): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220608"], 0x0}, 0x0) socket$kcm(0xa, 0x3, 0x87) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'pim6reg0\x00', 0xc201}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000008c0), r2) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x30, r3, 0x64bc7c9305072889, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, 'syz0\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x7ffffffe}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004814}, 0x40) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) syz_usb_connect$uac1(0x1, 0xb7, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010102000000ff6b1d01014000010203010902a50003010550010904000000010100000a24010000800201020904010000010200000904010101010200000c240202050000010430171709050109000402090b072501038a06000904020000010200000904020101010200000f240201060235ffa410deef27fb110c240202ff0f090008a499250d2405000000060c9af17198e3072401000303100b240201100340092923a10905820920005a060907250103ff0700"], &(0x7f0000000840)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x200, 0x7, 0x1, 0x6, 0xbf, 0x72}, 0x107, &(0x7f00000001c0)={0x5, 0xf, 0x107, 0x4, [@generic={0x17, 0x10, 0x1, "9e3d07dcff81c9d7e7160ca28d7b216e0dca1890"}, @ssp_cap={0x24, 0x10, 0xa, 0x9, 0x6, 0x6, 0x0, 0xfff7, [0xff00cf, 0xff00f0, 0xc0, 0xff0000, 0xc030, 0x3f30]}, @generic={0xc0, 0x10, 0x2, "0f944f68f7704c41131d62c5aa6135c29f2b454df5fc6d8cc5dd44595f655b0e5f1bed1ea5d739bcebcb026d03655edd2f81c1b3722b2092223fc93b56572bc4bdc3e947ea068ab8e9ef1148389a1aef92eaa387050d02f5ebe93be27d8bb32a9de8d539f69851acf415b7011e9f283e0bcf1836f7a3b7f22b309a27a52b9d45419683b0c2a603f981b427ec452a3d823a7f9f035bee49e19a5753dd3b64996936be0fb8c7b191b482b7faffceb7983f3a8e848c5c0ce396745376080f"}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x3, 0x4, 0x80}]}, 0x7, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x408}}, {0x60, &(0x7f0000000340)=ANY=[@ANYBLOB="60030041f28fc4df5079eb22632f6a3bafffa41cd4c53b5105deb186911d9ee8f086c8ffc8f5d95cc542c7f88c426fc0317b15a4ec70ba22a6000000753fc875185cf2ca7853824bc973324c56dc7000b9b4ce9f34c9ca01a9599daf4a000000"]}, {0xf9, &(0x7f00000003c0)=@string={0xf9, 0x3, "ff2092234de0f0dd7c1f27e8e38f16c14c8f9062335c9b2c3ea9b856a054833fdaa306f02c90a1391ab7ac200a7fc02bb6c3089ec20a6483ae9f8f1c8344b04029e5b082be31aeb56546bb7343021696efed041721fdadedfea3ad17aa1787ed781d8a1f26a488943397674239201f297f7e55989c8db737781af7ade9cead6924561c74f649af25af7be402df0e618e0dbc91d2bec82ee347ecbcecaa1f102f566914af85c1f74fbfb19d2f14c95f96165b46dac3c34cd6dc57258f3476d118787119b718df5b53f4985b2179f5f145293cd8ba93fec4f4cebf061cfe7fa41188ab6edc0cadd187ba8c889b1aed21fdf4a910bd31b47e"}}, {0x92, &(0x7f00000008c0)=ANY=[@ANYBLOB="928f5ec54df41af10dd95f5111510efc84277f461e3d615555c378253ed2788cb4aec1d47020b1eb9ec24e4ab9d116e374416c57f1424002e41fae5155ab46d83f424949fb820deecd5b86f3ab6db42a4805723ef8137ba02fb509d2e7e396f5590bbfce890c1845c82af6bdbf8cd64e5a6d6abb47ceab1c9bd9321068fa1f1ef100000000000000000000000000000000004f6a6e7c390f0a5f6c0397631a52d8267b84c6a907783092cf3453d4cdb8c9631141fc80813794e46052550d1daf146b6db953bbeb940c087ac580ae53fd90a91caad1094b1a6398e757bc66b0304008c0bf92016203c0ef873c0ae8b4d0ba831206bbf83172a627612d06bec75bc5a3e98c986795937407da4f7afedb"]}, {0xcc, &(0x7f0000000580)=ANY=[@ANYBLOB="cc034e949faf75e8b2819dc5c69d36613ec97155fa097dd7e7aaf87d706f62190ffd0d0154ea144584accc9533a3684067a6f14ab4b8f3e34adecb80b4ea7a5b4997b0618667bcc40050e06ac7f48be140c931e110fedd2e4f255fdf5becdb175b1614b9f613ad90620036cd109c5bdfb1c1d3f989a95418e6b888b331a53f5e6969c9df2c5fde3d0298e22c9a7418060f1e05562fb289bbed365ebbfc75df3cea150d22a5c0b825619d4756abea5ac849bbba93842fe92183a10122483ffcfe179bb6d7b9cf04df915bb7c8"]}, {0xc2, &(0x7f0000000680)=@string={0xc2, 0x3, "190be74d8005865155e25b2c4176ef8b88a3ddd48c503511919cec95ae8ffea92c12097158cc2fd77738f659da2d95720ad649dfa63db6be078a3ca235e0de1f7e5fd052d05e2b4df93d1109c9b3cd512bce8976f8b66ad68a58102887f64f922c872c28f872a8791c140ecf54c391c0e6fb89e741702b5c65d5796a8297e3809fb32457d016e1737c35e34ad5551aeefc5a04a0d82cc0753be24c897bfc0b6dc32bc43fb70bfc50149d65e2d9fbf2f60c07adbc4cf62af43ede17e7a87758d7"}}, {0xa1, &(0x7f0000000780)=@string={0xa1, 0x3, "ba32329bf303a590665d304bf6bfe92d767d8aad3c7bb97b19f0c59583ea2e529240dfed26e371980c57bdf2cc78c538add89707676bb2a70549f3318cc3b018201630a05743f00b747c42b66e61abc6a64459c9e1970aed16e70f3c73429f23d60a072874112e01058041e92ef62920aa21db1d4f7739a32329177ff8a4a56599e9237332d241148bd857e37fffe5fca594e6c041ee703708ace1ccccfd3e"}}]}) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220608"], 0x0}, 0x0) (async) socket$kcm(0xa, 0x3, 0x87) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'pim6reg0\x00', 0xc201}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000008c0), r2) (async) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x30, r3, 0x64bc7c9305072889, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, 'syz0\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x7ffffffe}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004814}, 0x40) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) (async) syz_usb_connect$uac1(0x1, 0xb7, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010102000000ff6b1d01014000010203010902a50003010550010904000000010100000a24010000800201020904010000010200000904010101010200000c240202050000010430171709050109000402090b072501038a06000904020000010200000904020101010200000f240201060235ffa410deef27fb110c240202ff0f090008a499250d2405000000060c9af17198e3072401000303100b240201100340092923a10905820920005a060907250103ff0700"], &(0x7f0000000840)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x200, 0x7, 0x1, 0x6, 0xbf, 0x72}, 0x107, &(0x7f00000001c0)={0x5, 0xf, 0x107, 0x4, [@generic={0x17, 0x10, 0x1, "9e3d07dcff81c9d7e7160ca28d7b216e0dca1890"}, @ssp_cap={0x24, 0x10, 0xa, 0x9, 0x6, 0x6, 0x0, 0xfff7, [0xff00cf, 0xff00f0, 0xc0, 0xff0000, 0xc030, 0x3f30]}, @generic={0xc0, 0x10, 0x2, "0f944f68f7704c41131d62c5aa6135c29f2b454df5fc6d8cc5dd44595f655b0e5f1bed1ea5d739bcebcb026d03655edd2f81c1b3722b2092223fc93b56572bc4bdc3e947ea068ab8e9ef1148389a1aef92eaa387050d02f5ebe93be27d8bb32a9de8d539f69851acf415b7011e9f283e0bcf1836f7a3b7f22b309a27a52b9d45419683b0c2a603f981b427ec452a3d823a7f9f035bee49e19a5753dd3b64996936be0fb8c7b191b482b7faffceb7983f3a8e848c5c0ce396745376080f"}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x3, 0x4, 0x80}]}, 0x7, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x408}}, {0x60, &(0x7f0000000340)=ANY=[@ANYBLOB="60030041f28fc4df5079eb22632f6a3bafffa41cd4c53b5105deb186911d9ee8f086c8ffc8f5d95cc542c7f88c426fc0317b15a4ec70ba22a6000000753fc875185cf2ca7853824bc973324c56dc7000b9b4ce9f34c9ca01a9599daf4a000000"]}, {0xf9, &(0x7f00000003c0)=@string={0xf9, 0x3, "ff2092234de0f0dd7c1f27e8e38f16c14c8f9062335c9b2c3ea9b856a054833fdaa306f02c90a1391ab7ac200a7fc02bb6c3089ec20a6483ae9f8f1c8344b04029e5b082be31aeb56546bb7343021696efed041721fdadedfea3ad17aa1787ed781d8a1f26a488943397674239201f297f7e55989c8db737781af7ade9cead6924561c74f649af25af7be402df0e618e0dbc91d2bec82ee347ecbcecaa1f102f566914af85c1f74fbfb19d2f14c95f96165b46dac3c34cd6dc57258f3476d118787119b718df5b53f4985b2179f5f145293cd8ba93fec4f4cebf061cfe7fa41188ab6edc0cadd187ba8c889b1aed21fdf4a910bd31b47e"}}, {0x92, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"]}, {0xcc, &(0x7f0000000580)=ANY=[@ANYBLOB="cc034e949faf75e8b2819dc5c69d36613ec97155fa097dd7e7aaf87d706f62190ffd0d0154ea144584accc9533a3684067a6f14ab4b8f3e34adecb80b4ea7a5b4997b0618667bcc40050e06ac7f48be140c931e110fedd2e4f255fdf5becdb175b1614b9f613ad90620036cd109c5bdfb1c1d3f989a95418e6b888b331a53f5e6969c9df2c5fde3d0298e22c9a7418060f1e05562fb289bbed365ebbfc75df3cea150d22a5c0b825619d4756abea5ac849bbba93842fe92183a10122483ffcfe179bb6d7b9cf04df915bb7c8"]}, {0xc2, &(0x7f0000000680)=@string={0xc2, 0x3, "190be74d8005865155e25b2c4176ef8b88a3ddd48c503511919cec95ae8ffea92c12097158cc2fd77738f659da2d95720ad649dfa63db6be078a3ca235e0de1f7e5fd052d05e2b4df93d1109c9b3cd512bce8976f8b66ad68a58102887f64f922c872c28f872a8791c140ecf54c391c0e6fb89e741702b5c65d5796a8297e3809fb32457d016e1737c35e34ad5551aeefc5a04a0d82cc0753be24c897bfc0b6dc32bc43fb70bfc50149d65e2d9fbf2f60c07adbc4cf62af43ede17e7a87758d7"}}, {0xa1, &(0x7f0000000780)=@string={0xa1, 0x3, "ba32329bf303a590665d304bf6bfe92d767d8aad3c7bb97b19f0c59583ea2e529240dfed26e371980c57bdf2cc78c538add89707676bb2a70549f3318cc3b018201630a05743f00b747c42b66e61abc6a64459c9e1970aed16e70f3c73429f23d60a072874112e01058041e92ef62920aa21db1d4f7739a32329177ff8a4a56599e9237332d241148bd857e37fffe5fca594e6c041ee703708ace1ccccfd3e"}}]}) (async) 3.432036273s ago: executing program 2 (id=1923): r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x2a0404) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) (async) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) (async) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) write$binfmt_script(r2, &(0x7f0000001800)={'#! ', './file1/../file0'}, 0x14) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_raw(r4, &(0x7f00000005c0), 0x10) read(r4, &(0x7f00000027c0)=""/4073, 0xfe9) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r5}, 0x10, &(0x7f0000000200)={&(0x7f00000007c0)=@can={{0x2, 0x0, 0x1, 0x1}, 0x1, 0x3f57955e7be81d83, 0x0, 0x0, "f97003b8750e5566"}, 0x10}}, 0x4000040) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000140)={0x4, 0x1993, 0x9, {0x1, 0x26}, 0x101, 0x800}) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000140)={0x4, 0x1993, 0x9, {0x1, 0x26}, 0x101, 0x800}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'xfrm0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'xfrm0\x00'}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000080)={@remote, 0x0}, &(0x7f00000000c0)=0x14) sendto(r0, &(0x7f0000000680)="ca", 0x1, 0x8800, &(0x7f0000000000)=@xdp={0x2c, 0x0, r6, 0x32}, 0x80) 2.022016271s ago: executing program 0 (id=1925): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x5c95239c, 0x1, 0x3ff, 0x6, 0x1600, 0x1, 0x1, 0x9, 0xe1cb, 0x6, 0x4, 0xe, 0x395, 0x8000008b, 0xfffffffe, 0xb, 0x4, 0xffffeadb, 0x3, 0x3c, 0x0, 0x4, 0x2, 0xdffffffa]}) bind$unix(r1, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x3, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x200200, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) timer_gettime(0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1e, {[@main=@item_012={0x1, 0x0, 0x9, "f1"}, @global=@item_012={0x0, 0x1, 0x6}, @global=@item_4={0x3, 0x1, 0x8, '\f\x00'}, @global=@item_012={0x1, 0x1, 0x1, "c4"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @global=@item_4={0x3, 0x1, 0x3, "862c2472"}, @main=@item_4={0x3, 0x0, 0x9, '\x00\x00/\x00'}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000340)={0x24, &(0x7f0000000180)={0x40, 0xa, 0x8a, {0x8a, 0x1c, "2142d31bd6982650cfa089ea9d4abd8470e1b771d813ecb009ee6b73a9f6e44e234f18ede9a3e692c30dd633219d0568c69e551b2a327bb14824d95b39492a029463f59310a29156b90b3e648abc37c412ab1d6ebc9cfc25ac42f47e659a49fd0d00fa85c243154baaa813814c77f747719d756265c056b4cc8ebcf7f21aee5b4de151e10b7793aa"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44c}}, &(0x7f0000000280)={0x0, 0x22, 0x8, {[@local=@item_012={0x2, 0x2, 0x0, "c6b5"}, @local=@item_4={0x3, 0x2, 0x1, "85ae8cae"}]}}, &(0x7f0000000300)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x295}}}}, &(0x7f0000000600)={0x2c, &(0x7f0000000380)={0xf19aa344bc68faa6, 0x1, 0xd3, "63d474e6b47c2b11a7ee3ea17db867936ad50a29bf7fc3c39175267b15419fc0308729875330fa34285be57308d6d7182b236bb62126df68c413fcf2de67d6eb31d2ffb003cd27646aeae9b79a2755c72896227c169d839979b114f3e3dc42d8a247cfa20ca115a3ec86853396711a68cb15fabaf41319e3c7671e6f74822ff3fb3f3811a917c304fd8d8275626445e5f6bc16d8a1f692a2122ff180db017f86a3b600c022a9c735da00396f9352f8253a22d04647c1db602a5042708e0d5cf4cdc24d537be80a1198c054f7d1213907fc2eb9"}, &(0x7f0000000480)={0x0, 0xa, 0x1}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000500)={0x20, 0x1, 0xa8, "430c5e351d1ca7779503215f318666f98194359407c92dd2ca19ff459cb12988901abd5f80f84841cc9a11bdf199aa3fe10e8e296660597aa4fd6f0cd656908448591a861bd11045e88b40d04e18db2e3a1a35f4e36fa37fc9cbc75880a78d841820e82f4f94c4649a3f5a7794f3e65df60db28ed8b3bd2e1f6b3eecea60068c6e4dee1c722c885bd1975c31618147675a511f360b32029f469b439374566784e4190506cf1e7db9"}, &(0x7f00000005c0)={0x20, 0x3, 0x1, 0x2}}) sendmsg$unix(r3, &(0x7f0000000680)={&(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r4], 0x30}, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) shmget(0x1, 0x2000, 0x4, &(0x7f0000ffb000/0x2000)=nil) r7 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r6, 0x4004af07, &(0x7f0000000240)=r7) close(0x3) r8 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r8, 0xc0106407, &(0x7f0000000040)={0x1, 0x3, 0xffffffff}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="2800000011000002000000fa7a748f096fc10600ffdbdf2518000000130000002f646574ef1cec0fc777de56c4d537fb21d57cdb74ee"], 0x28}], 0x1}, 0x0) 1.533313298s ago: executing program 1 (id=1926): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x3c, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x110) 1.280474923s ago: executing program 1 (id=1927): open$dir(&(0x7f0000000180)='./file0\x00', 0x240000, 0x152) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x5) r1 = openat(r0, 0x0, 0x0, 0x108) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x101400) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r4, 0x5608, &(0x7f0000000000)) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x9, 0x40) ioctl$USBDEVFS_CONNECTINFO(r5, 0xc0105502, &(0x7f0000002a40)) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000000100)={0x2, 0x18, '\x00', 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0]}) setsockopt$inet6_tcp_int(r1, 0x6, 0x10, &(0x7f0000000240)=0x100000001, 0x2) r6 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x80401) r7 = socket$vsock_stream(0x28, 0x1, 0x0) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f0000000200)) ioctl$NBD_CLEAR_SOCK(r6, 0xab04) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'vxcan1\x00', @random="02e26779a187"}) 1.090783297s ago: executing program 0 (id=1928): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0xcc) ioctl$sock_ifreq(r3, 0x8916, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000003c0)={0x0, 0x0, 0x5, 0x7ff}) r6 = epoll_create1(0x80000) truncate(&(0x7f00000000c0)='./file0\x00', 0x72) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000100)={0x20000014}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r9, 0x4010ae67, &(0x7f0000000380)={0x3000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r9, 0x4010ae68, &(0x7f0000000140)={0x6000, 0x99000, 0x1}) epoll_wait(r6, &(0x7f00000001c0)=[{}], 0x1, 0x4000005) close_range(r1, 0xffffffffffffffff, 0x0) 641.44799ms ago: executing program 0 (id=1929): r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:updpwd_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000c1}, 0x41) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, r2, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x10}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x15}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x81}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x808}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r4, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x10181ea39e7d8201) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs2/custom0\x00', 0x3, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x58, r6, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x2}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7fff}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x17a}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x34b}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x20000010) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000600)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000640)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10c, r2, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_KEY={0x4c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "7d0b567f29b7d0fff2102b1d794eb65e7bbf89fd2246be7b0e97ef875132c915"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xa2}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "7c5ea6f68cead410624b270d513ec3c4"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x10}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0x90, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "2f89363a37bf72b5e637695ec9f1156cbc15f8fdf245b04b1548ba5a0d9b9d22"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "6bc9227c1fa6e1f5609a74b08112f59c0e80a6c7befbd970efe32e25e1760e22"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x10}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "0bfe782fb0da9cc6ed99ef34fc05a803a3b1e30030395eb9969c9bab9ee92846"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "b67f95425409fdf775ea78c4a1ad7ed2"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x10c}, 0x1, 0x0, 0x0, 0x7}, 0x4801) r9 = fanotify_init(0x0, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r9, 0x5000940f, &(0x7f0000000840)={{r5}, "70f03be7e73e58443aa08d1e5eb4348f08b58192c81ac2a40c17c5fcd5f964aa43f1ea10c223096f3daf676d5cb0d928f0aba273a7bac1bcfb1f007898a95cb974ab5d4a45a9a6a321bdc218553201eee9dfe7c2e51a6e2fa246833dd57986df88bc0031d7ba9d9ffccc205a403d174ccb09df199c0a83fbb1a0672d77a76f1f995e7d83e0bd6d4f4927351dd912f993309da7ebfc13712153bb8e2ce8dd3601de36051c10ef3b951e2e3bc372e62dd6463efd6da7806d49a3f3ed9fe776ac6f16476600df63825a709e9876715a5f372123cc149799278e606ae419dfceda44e62812bcc801d88ebf0538232df42810920d8a6cae11f4b683d5542f66fc2a55044036fc420bceaba99cd97c04df2fcad2a920d5fac83125558d79c232d81b849ea3aefef16f114e8fe1272847fc06b6e807b6497572d02920f022325b112d631355330e9830b48dcf88b22290af4637d6a43494847c69185908f52c771e24165aa5f5e0bfd75f1f7bb88e3e98e315230238abe4b4c9909e0ac5ef9c79e61f0cac657e8f9baf001f0a32472feb7381df0e7c8ca26457cc8f4c55fa7e4b67c78d1830515950e76682f5037807cdb8526409d8bd101b881eeb6fbaf5285d621b2adbef42a01e8b819d8202ad833c82224a583e8e0f54712ed23e7755170cb3ae68351898b78c5b3bd40d336dce1c186ea37ffdb67804733c9ce4b1d0f16bdbd9b1bb00ac4846ab66a7a6a2435efcda91f712c789087ad9657f05282dc58675306776e556aab03ae0e6f9796c3d6e5341eb8744f9cc7f17950e1a13e83560261208ead58b116d2b03955332ddd0a6539bae101275f91ec8ccb976c43b5f884602b627128b1cd3ddc1a3b9e62653e1acae2dccdc38bdfb817c6c3641b46337fd8d5815ec496d08bd39cd4d72324b4d520f0fb84fd9254a5d6bfc3e0aaae0d9472cf68b6cc6d24c0bfaee4d0f6e50b14c55b06d00f23674be1709c979414e815498da200a0a94cab8281ab79015356674afe633ba08deaba287333eea2f242baba1bba9d6c26fcdc1c178f973942e290646df05dc0494cbfd7d8f8f9c6055ab521a4dd9841ac66740085acb1f7543d898b21ff0b86d53c8b3f50a9b93412bd4a949a83e79c8696bfc33d61e9e9f9e20e6ad528a43faee44d7c94150de934c0c499728139a01c1ce58a55414533715298837a51574423a2362e1876ba86144cdd1a89fef460eb704ed7475564f41403fb710d46048e786e50502173032a9592cfc314cd17ada292d0ccf0b4e5e69fc603eb37660cb35bee0d8e75abe70a48e5d7ab62364ec5d7156feea3a85f02d3b8f1f7f039bbf014a4eb52453f6423be66ed563b05662e0b10ed4de92c158b7da3196789b13ccefbe5e5b5633e0a62c8e1b85815c4cb14aa48dabc1916586191b98ad8bb037367927c799510dcef4f1e095f1935f0f5636547b3280739208a42d0efdb623259695354f852b7815c147d2a5f3c28e0e32588cdf4951780c49177eadf7f4a1e6cd881cda9ace714d73b6ab52ce4ee26b23fa864980abd774beacaf647aec1726ca1205340af58906e444a2f1023af2a5c1bc88e68a0a8829af065e1e5ec8bb67784f88906a6d7a9d8415c7b6701e87bab7f397c1c5ecfc909c7017ac6de7b990ca475940c31bea1f3694ca2273469e4cebdda3e9e46e3a8c9b404be2f929c635d9e57c3a22b860fec150b58192d6a61526dcd4281058dd3a1d961d931d032f8c8e20db338b4015d475bcefd8beef8d875c39f77c9829a3a513f27ae12b953aab25d79501f8a8ff9c0f66f262c4a4161dfe08c533c2889f1d3d44a22ceba2005f018daa13923c4aecd4572581a6d8d72e2f2b5fed78a0e3082af6ae4754d9f6491710032f667c90623c6d422a4fb39d77a93d55de9b13c8e5e1a1e0b198ad54bf6fb7c684c60f3b74d41457017ec8c69c40917a453d65c1a87b271c3aa4222aaa1315853cdb94a61b6bdadb07680607342fe2ba85c3408b193c2335ae63c2a9cab4a5376e8b063cda24e87c614496fb53918b16b2e6172f3d564cbe535a185c128e260006cb6bd9e2eee00d1c8a98180d4490ea6aae970fb04001906c926636effdadc2da2b278910e376c219c469d4aa66b84de803968f733e721d2e8b354f59bd1a1ad063f2e7134aa250f4974ef92608972d94eb332df0c94af611e1c83fd61e49577b57167fe15923b378909cf8633fb39c7ef125fea2a4af89bcfa42eba31dee8abb44ab808935b91234c8b025a794bb9eaff0f7e2167c5705efb500ebd4f0d004ef30a9e1bcd7c137d245f7bdabf6c433f80539a24418022255b8a2ed5c3175e1ff71b67b82f04dcc10fc32315c03a0f5ce8e53a1ef33ea88d2fc09edd4bc4cbc5554358dffcfe87503fd462eccc43beeb81a627bfb86d34df74d5bbcc56697c020a76f1e1382f83ec08d4dbd1ecf170c8a11539588e94cff6ce54600915ccd2154d7293593c508b8018b1921ede2956e88c627b82581fb232f017dfa9ef1c0f81003edb5c508089490742a813b366104fe3e9e7f83549584491d5e83d30c85d1504d4c32ee417ecc88e788de66b3f37167d335509c7776b7d07bc02887831be727bf06f9745e938747ab87ca48dd156a22e4e750937cb09b3dc9035b4b7f29bd9757f093f27d6fbaca93cc1ee9dcb604c677cfc71e017aee23744657bf39a1d8c6354f26779b3e84c92d8fd01d889162599f54bfa6799f9521e9f27b486d07cf5b4b1eb6dd5d7514d8859a819711112a58681c1a6fa1b09a0eb151059e848ac0b5c756d7500fded5ccbf13f8fc56e0ddfe866818993b9f33e2e3b7f8d0345453e81eb76f0163c4546773ec7a30731652e594634272b6fbb61bc434e3d6921a04f98f0301dc0efd5d67c6fcd18c2a0872de28332b0c12c65befa8d13c0f613667d06a17816e6362b20fe2356bc764f6ef80e75cfd72f0d2eb5eef1e78db1375cd9c8f5c46341339907b3a506a8f3fd104eabd4e7a37e67bc1137dfae18762f7e5cd15cbfb9a36cda5338bc32964e2acbda8ca84e05d3d73819c93d2a23c3333315bdcf6b02042b4f27fbf6da99672d51fcaec33f2ca2624fa7e0b1933ee0b124ca70420def5608bd45dd20f9a0f040cb6bf522e3433356365c9d8716e726716015a0249d9f230d983df066efcfc62b783c5ef699aef5232338d6ead702a7137e04eb501eb09e708af2f141414fc712923e13cc0a7a2ebeb97517160c1367c306ba71a2262125a2cffb361f201a71181d21f5c0afe88b05cf5aac382c23723eb28194e4747ae055087e83d66ef0c266dc07923ffa06aba62cf9755e3c7c895854ac7a91cf0c27aa8d37777100c5a7181fd93c34782c72f376991f935ef5c5037e207d8731482407b0c363dfe3517e867f6236b954f5030ba16c2920f9636e9b4fc0bf5fd7322dc09fb692571385530a49b05902c932896fa856e3fe8f42db25afcdfd1e6a7515ead6ca506d56111037535318f54b45ba5fbc99d612d5b1939c1a30eafe620b1a2ef2ef996f65a4a286cdc782ac968da6c1ffcf7255d2d369d3b7eb81515e0362ed6fc611c3fcbf9bbd4907fa374a864a97c2a99228f5d810340846e00f29e0418ffc41debf2f7d348a789d4c3359103c2f53ab00467908532d2379975335a0e668528b4bebb7e191701e9af8267e1824d38326a9f353623607a55df319300042e0fca4283cf133adfe76adf2aec8fa6be30c397ab5ae69f75757b8c97c52491c58c9e2f8ecac11964c2160b3b048026499b6bb4087a0d964e5038603bec03b2b3e2caf9f8fdd7fa2cd935e467f26f63f4c767ea879d4d4ccbfe412a62d760a7612775c0bfaa7833ffb644ba2e4b1e8dcd20c1e9a0e75dc408e8434bfc8aefea284a2f54608b923ec6f76a6e9390435d24238bc1cc38338d7e5ac7b86fdaeaab8e5e9ebc64cff4a00bbd056aec08e0075b2855087a502dd60c087b95a0826a08ef7ddafca8bd9f618dbaffd79c3426d3687dc99d8e5a655fe94a028b1e9d27c2dc45d4401f0163f33db69827030f23ad419a1297622fe5f050f84f9fb16d70c88bfd67467fb431a74c835c919fd835ebf0c6603ba244068f6a4a8e85028cfee9d3bde4258aac02f8214794d797954dd4eeba3761b15002e5058ddc655282b28576d083a81af78634040fca5b60dc57be1582791fdcbfc66c8077a0df0157b5ea0bc83edffa94f7becdc8920572e59e90decbb86ff5ae07c86be1be1d2e42ce5e09d957fee8d5ff462cfe0bafe04cdb20a53f0dc164f7c17cf2c3025f6b06b31f66208cb133058e6432195f58e5030381a514cddea459fda6fa089dd65193593eb5c7ce5bdedc61304c41390ae954dd0f03b91a3b2904d7d82331c8afbdbde6c8c396775f93e9a48dcbc5c22c55877793e2d93dfa9d4d38012ebb6fad3ce44651843dfb2fd62d28a1c5e177f31359d21945b5968ad6dc3535e8d0f25c843edd4eebb4e34c2d9a174f37f31f52ba9390c1df0d6de88c1a3235ca58e10a0bf1a4b45a166ff61d30691ae6ef3d5fcc330400bda83b23de511ae6ae5aeefbef60e085cddfc4fdefeffaa554ea56cbcb90fe731bcf5fea3ae1336d34495529ca9677631d7dfa473ab6c86b8b82ecf921af6918f9748e5f79f56c4d97645f469ce3ff8e026f3806bf3bf2ed5528a86952db69a7e7ce0b144e80515a627343c22f46ab64a81bd48c881c8dfc5d3fc3cb226f21275e76b16e423ba06a18908c3695d93e0659330e7bc6bc429dcf8e9f5b40001a0bec4f584398c77723e8937e32073f3206f28195a2ca91ee43be34265bb61deba179d945767f040434aa417617757d61c19720b13f47763ec3efe8a78f91aa1146cbb45171a692fa0199397f3df0e1566d07b34e8deaf00e6fec627fe51a2e9ee54e6caed1250221ba12358eeecc3dfc90fd25efbad70ff9676a0beb8ed4254cd04c2e1b6742f67f64efe36f5858c97ad130fff4ea973cd954b5c921ecbf186b651e55deac973c9bcdf967e73f7bd434dfe87d1ca956ff2a715c61c0bf22f3a114107c8f15c685a87264f607a9c107c5756f26ad06a8463f1f22f479b5a7ced78a2f618ac93b8fe5f9de1c5cf20ef1cd2b00b57599444282cc6924406d8271fae44567f4727288383561d1ee0a61f320802b78008b48272ba93c48eb63360ac0d81ac05f3afbc738e94c5c0b77ef0f5ca06947352352e1345176e44c606c528d657bb15bdb431e4e62f4b798654c7773d4dc4214e55b4b20c5c65c65d4c46775384644aeebdb22f13d2b5b10bcc960802322499b85ff4ea4e69c8a29a2489e56414593b0c6970d44e1375c6770ccb27338852f7b48015a46b6580f362aece88a59df9ee88004c972a3ad96d32cde63ccc57c8d4bfbdd015681bc36c6b37380d4f18824a1fafa71e6d9cb4b5daf2003796ff4d47a7e05c02afc5dbbc1d33ac07ae144cf10e7e7dcb37468781d444c1e31f4072aa8c48003fb707bcb167da17709c79f8f14ee8fb08f1931c86adc5181fffd537e6db4ae65758d5d093b40e6cb9b074f378d4e0b99818d1d7f0a1ba9e16f69f4ef4de85788c4962810272de71036ba171bb6785ff34b4de1031ae13aab58e799892d229785bc1ef09312d86667835f243486acadd26e0959458f6c14f76e68badce6787dc966b07152b6c6dab501f9fc68c01b8903824f2713a29e20aa60ed61f6d2f73cd5d134cadfecf91bdef83fecd6a122dbfb5bdfefd74c260c4356920d2d2bd37113385e052d7ced5b7d491a322a5f71fefebc69b74a2593f06f10"}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f0000001900)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x40, r4, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}]}, 0x40}, 0x1, 0x0, 0x0, 0x64020000}, 0x40891) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000001980)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r3, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x34, r2, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x801) r11 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2c) r12 = eventfd(0xfffffffd) ioctl$KVM_HYPERV_EVENTFD(r11, 0x4018aebd, &(0x7f0000001a80)={0x2, r12}) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001b00), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r13, &(0x7f0000001d40)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001b40)={0x188, r14, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}]}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffb}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7c84}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}]}]}, @TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_ID={0x17, 0x3, "85084231fd7babeda8ff60c56ac865f24462f9"}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "6ceaa8e448e8e336606d8b3957f19a06f8730631"}}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x84}, 0x10800) sendmsg$nl_generic(r13, &(0x7f0000002140)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002100)={&(0x7f0000001dc0)={0x33c, 0x3b, 0x400, 0x70bd27, 0x25dfdbfb, {0xa}, [@generic="7ed99cc6849858b435c4c065509e7a5fa6966be510fec4d4c3ccb6efbeb9bd051bf45ec8915996a848fbad61ffafc0b7367852589f4921af0e62c3bd60b95349563c55f49df2e8962378f66d7c41e42fa64d32cd3f92ba6d4e85acfa1a164148a02749e4e052129226b8c6e529be074cfb1747ad4ed54214880be2dc664a874f7b866b88ef58eb16c8636917efe1ce0be774819dadc8b97a59572d0afb162b059f790a72ac977118", @generic="b36dc0be892d6d953fd5a9e3b3b2c0633920d39afd8752ff0c7a995ed255e731cebfebbd420f784c3e2f02ed3673d5915dbb4fd0d4a2b188ebaab0ac766d3ddf72aac00dbc113f5661883714fca443c08dc56ff76e4e0b4e4deea2e3c5225bb9bc9dc4fcc9cd6812fe0876a4c54ab5d1d8f885b1c7986611b83d939fb4", @typed={0x8, 0xdb, 0x0, 0x0, @ipv4=@local}, @generic="84fff2b9b9ca5f2dd2a4240395b32c2a0d758346a4697d875d1c08f35e48", @generic="80e39175203c24050e5a82650a5f7e59fbc05e2a17dc6851fe67fd6085153d858f6734982bc6dfe21f2df0ffd2ee9505431d30d20ae1f02dcbc0e459dd4c8e22b8e21b09a2650bd8de806ae33e9c7ec327e2bf5ec1f1", @generic="0b4fa778f0f1ef8cae35de7cf2acc974ac60cd921313bf0b374da6dcdd2f84cdabf92298be98bfb097c1044db67e01dc1a062d7f46a35e7e75a6a33307350f3dc2439b4bb36fe04311fa4e870986e8c098ab108e740d367d55644a8147ffef819bd0fdc32145390db40d58dccb2a054f09b5439c24a6ee268cff675b82e6e73c183c5a02a1e941bfe2717f4eded92f025991d00506eaa54e84b3ae4aa217aa63324512463322ec5a64e33b4de8572324a0a04b137d85a8bbd0820bd4c6d390eb1e59473ace2b3449ba7a1b3033d0c71990c19408cd10eae68e16f54f623f323bbf7711aee15158c2a3d7831c601d452269b3cdef01", @generic="3424003849b33ea61e1224518d222abd41f901a66218ff74d65e62399fa9b8d5b66c3c2a7809f476c382a3e21b1ef69c7181d4f558649a0dbd04e539602101d69f798f0f352bff9e8ae2bfa7d99dd1687a8bd2a8d2804081e959b5b311d9ec94b1d1b9d7b4761c2795428fc4403470709d29ff48089afffbfb352ed019097607cca0ca9aeb4377447f0ca37a0ffa384b"]}, 0x33c}, 0x1, 0x0, 0x0, 0x10}, 0x4) r15 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000021c0), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000002280)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002240)={&(0x7f0000002200)={0x2c, r15, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4000000) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r16, &(0x7f0000002380)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002340)={&(0x7f0000002300)={0x24, r4, 0x100, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x48}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x8104) 488.348801ms ago: executing program 2 (id=1930): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000580)=""/174, 0xae) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000000206010800000000000000000000000014000780050014007f000000050015000c0000000500010006040000050005000a00000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x20000000) 291.461264ms ago: executing program 0 (id=1931): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(&(0x7f0000000a40)='./file0\x00') (async) syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, 0x0) (async) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, 0x0) (async) pwritev(r0, &(0x7f0000001440)=[{&(0x7f0000000180)="66533d1e88ad0e5e44b084f4a110a781cf2a9e673dfd794f52849eabe2dcb8a518bcc48a07332eeac9fe4a14ec37bd1985169ce3aaae9bd9c68d575045f4932b554cba059ef838b5fe37a47dfc21959a967e10df05a020fbab965a7e6c7cb63e1e164e592d19689d8d002927c20658c516da310248b3558c79d319caf095dbd965da581bb0e1374212a4c7022d61017e2c62c2b70fde430de5b67fdc5ae7b71e461cbb000f452ee31168b9e2f729d937232542f53a0a5245d61486185c70865cfa056c4d0d02f2ac491747af7fb4941faa657464006e1a471f297148", 0xdc}, {0x0}, {&(0x7f0000001340)="0701c340ed2937912068f9b757835e2f524106bac8498a391a758dbd28fae1eb08a5e70485912e1910ef0da8fd21d34487ab89cd3244ffb1733d749c266b0c324765f9c362e2abe261436b7b254975478cf750e0c90ff97063a8a447c42badebd78f436a585cb49c90277c8570c9f6f8ec9a3e16d5ad33dc2ea6", 0x7a}], 0x3, 0x62e8, 0x6) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000004300)=0xe0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x303}, "8231bad9d6b90911", "5ce8ef6c80558de3ad2c1772dbfaa191", "4c995b8b", "12bbeb43f623ae2a"}, 0x28) (async) pwritev(r1, &(0x7f0000000800)=[{&(0x7f0000000340)="b42f4388837d52d086e0d0c6420c390117dcd2d5b9874ce077e21e17a98048f34363e921b69418fc57a4a424402eb6f1dfd441ea6f2eef6f71c670fe5dc3c3a3f1400621d979903a5620c3fb918de46de18cc26203fb6e1576d2fbe71d33ff2be031f8fe4030c52c5dfaea00eb57a2abfe2486017e20c66271f2de383d5a2ae829eb395b5b2153c16ec0712149c9ceed8d0b9d67ff1093fb2cbf50bdf8afb9744b3763c0417b965197a0082bea4626c677a3cfee6cbd0411367be7270cb5cb5847edab9d5fbec7ac", 0xc8}, {&(0x7f0000000440)="5d04e8149af55c71648fdc56501b8c57a24c10b3c8abda93a3968faed90dccec07308ecc3247b2f9a47cb7f9d7d8497be613ace0861c8cbcabeaeb16178afa61f321807612897a84c5f93d2f518fdedb1edc4541ab37d1c229d677fb6f06bdaec3ae126b2f80a2c031fdba616f94ac24e0949f4ffd0f11458dadfcfb5563f88e309a5cc5b88d305c7178f0d3daa80f27b36f77efa776444c6b906ec5a1372e0032dbbb92f4e500f6869155f9def863afd4966089853eafb96f28404993547f86d6a5e18e671cd9ac8af05ac17ab7340c34f323504daa3fed", 0xd8}, {&(0x7f0000000280)="e5ee27a3122f66a565f7716f0d67e1e55f46b50c4e316cdd55a61391aa218868f7859452ec", 0x25}, {&(0x7f0000001880)="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", 0x1000}, {&(0x7f0000000540)="e6ced6fa9881e10eb476315c31ed4248cea2357c1fc122a9533ed4708989a99d18418ec53ba68daedce9afe80fad8dc32019aa12068901fb25be0d6439fd34cfae0b8a088a77496c0e70fc7f0e4a3aeab5dcdac543b63dac4f077291563c677aa1194c3da4d57ad4b74219cd2296ad42d5d86802", 0x74}, {&(0x7f00000005c0)="2d8ba498e4c4caa99bd5acaa8ec19f4268b611f25302b865465f9b2ee3d79a406c53ed8e1717c74cc5a3821fd1f844e02037055ca55cf1c6f8c277d874c6e95fc87876319c4dfd68b2633801955d552f8c9857caffccfd288e0009980ec12fd8d627ff94701ae1fbfdd23d576f8918abaf488efb7290d401a57d593f6d119092284f349f8645cab7da47fa65b582209d127b36fc16e8008ef0e692102cdd594d825a56594fb9ac1eb0331538979423103eb8676d59831bed174bf531228a8366cf9efc709b188973", 0xc8}], 0x6, 0x438b, 0x44f) (async) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000100)) (async) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) (async) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000000140)={0x0, 0x7, 0x9, '\x00', &(0x7f0000000080)}) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x200, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000700)={@in6={{0xa, 0x4e23, 0x0, @loopback, 0x4}}, 0x0, 0x0, 0x35, 0x0, "f5fe9c103abe0b65544e0980519f38f54dd5f87ecc377210bd44fe7e1375550831c5f6dd769f5a1d175f47a8b941c8e568ca41e8da841f4f18f1ea6b206d495119ac37c29f4b384d0a9181566cfc4a1b"}, 0xd8) (async) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000001840), 0x4) 171.653532ms ago: executing program 1 (id=1932): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000300)={0x0, 0x50, r2}) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="00fa0100000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$nl_generic(0x10, 0x3, 0x10) 239.616µs ago: executing program 0 (id=1933): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r0, 0x0) listen(r0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010300e2793f10d10501200002000014010902120001000000000904"], 0x0) 0s ago: executing program 2 (id=1934): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x3c, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x112) kernel console output (not intermixed with test programs): spca_main: sonixj-2.14.0 probing 0471:0327 [ 654.303995][T10707] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 654.364359][ T5949] usb 3-1: new full-speed USB device number 74 using dummy_hcd [ 654.516129][ T5949] usb 3-1: unable to get BOS descriptor or descriptor too short [ 654.525718][ T5949] usb 3-1: not running at top speed; connect to a high speed hub [ 654.534932][ T5949] usb 3-1: config 3 has an invalid descriptor of length 125, skipping remainder of the config [ 654.545471][ T5949] usb 3-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 654.557361][ T5949] usb 3-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=e8.8a [ 654.566554][ T5949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.574671][ T5949] usb 3-1: Product: syz [ 654.578904][ T5949] usb 3-1: Manufacturer: syz [ 654.583534][ T5949] usb 3-1: SerialNumber: syz [ 654.796402][T10704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.805416][T10704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.822526][ T5949] usb 3-1: USB disconnect, device number 74 [ 656.401780][T10726] FAULT_INJECTION: forcing a failure. [ 656.401780][T10726] name failslab, interval 1, probability 0, space 0, times 0 [ 656.416073][T10726] CPU: 1 UID: 0 PID: 10726 Comm: syz.3.1563 Not tainted syzkaller #0 PREEMPT(full) [ 656.416101][T10726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 656.416113][T10726] Call Trace: [ 656.416122][T10726] [ 656.416131][T10726] dump_stack_lvl+0x189/0x250 [ 656.416160][T10726] ? __pfx____ratelimit+0x10/0x10 [ 656.416186][T10726] ? __pfx_dump_stack_lvl+0x10/0x10 [ 656.416211][T10726] ? __pfx__printk+0x10/0x10 [ 656.416241][T10726] ? __pfx___might_resched+0x10/0x10 [ 656.416267][T10726] should_fail_ex+0x414/0x560 [ 656.416301][T10726] should_failslab+0xa8/0x100 [ 656.416323][T10726] __kmalloc_noprof+0xdf/0x800 [ 656.416351][T10726] ? kfree+0x4d/0x6d0 [ 656.416374][T10726] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 656.416408][T10726] tomoyo_realpath_from_path+0xe3/0x5d0 [ 656.416436][T10726] ? tomoyo_domain+0xd8/0x130 [ 656.416468][T10726] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 656.416519][T10726] tomoyo_path_number_perm+0x1e8/0x5a0 [ 656.416545][T10726] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 656.416604][T10726] ? __fget_files+0x2a/0x420 [ 656.416635][T10726] ? __fget_files+0x3a0/0x420 [ 656.416659][T10726] ? __fget_files+0x2a/0x420 [ 656.416690][T10726] security_file_ioctl+0xcb/0x2d0 [ 656.416724][T10726] __se_sys_ioctl+0x47/0x170 [ 656.416747][T10726] do_syscall_64+0xfa/0xfa0 [ 656.416774][T10726] ? lockdep_hardirqs_on+0x9c/0x150 [ 656.416808][T10726] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.416829][T10726] ? clear_bhb_loop+0x60/0xb0 [ 656.416854][T10726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.416874][T10726] RIP: 0033:0x7f5841b8efc9 [ 656.416892][T10726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 656.416911][T10726] RSP: 002b:00007f5842a5d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 656.416933][T10726] RAX: ffffffffffffffda RBX: 00007f5841de6180 RCX: 00007f5841b8efc9 [ 656.416948][T10726] RDX: 0000200000000000 RSI: 00000000400448c9 RDI: 0000000000000005 [ 656.416962][T10726] RBP: 00007f5842a5d090 R08: 0000000000000000 R09: 0000000000000000 [ 656.416975][T10726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 656.416987][T10726] R13: 00007f5841de6218 R14: 00007f5841de6180 R15: 00007ffd89e7a808 [ 656.417022][T10726] [ 656.417031][T10726] ERROR: Out of memory at tomoyo_realpath_from_path. [ 656.657499][ T5856] gspca_sonixj: reg_w1 err -71 [ 656.662450][ T5856] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 656.673090][ T5856] usb 1-1: USB disconnect, device number 94 [ 656.743329][ T797] usb 2-1: USB disconnect, device number 103 [ 657.287356][T10754] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1570'. [ 657.624757][T10758] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 657.687536][T10760] blk_print_req_error: 54 callbacks suppressed [ 657.687556][T10760] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 657.707500][T10760] buffer_io_error: 54 callbacks suppressed [ 657.707523][T10760] Buffer I/O error on dev nbd1, logical block 0, async page read [ 657.722121][T10760] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 657.731290][T10760] Buffer I/O error on dev nbd1, logical block 1, async page read [ 657.739609][T10760] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 657.748870][T10760] Buffer I/O error on dev nbd1, logical block 2, async page read [ 657.757086][T10760] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 657.766276][T10760] Buffer I/O error on dev nbd1, logical block 3, async page read [ 657.775627][T10760] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 657.785745][T10760] Buffer I/O error on dev nbd1, logical block 0, async page read [ 657.795234][T10760] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 657.804974][T10760] Buffer I/O error on dev nbd1, logical block 1, async page read [ 657.814036][T10760] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 657.823887][T10760] Buffer I/O error on dev nbd1, logical block 2, async page read [ 657.832044][T10760] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 657.841946][T10760] Buffer I/O error on dev nbd1, logical block 3, async page read [ 657.850467][T10760] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 657.860232][T10760] Buffer I/O error on dev nbd1, logical block 0, async page read [ 657.868818][T10760] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 657.878596][T10760] Buffer I/O error on dev nbd1, logical block 1, async page read [ 657.923298][T10760] ldm_validate_partition_table(): Disk read failed. [ 657.960258][T10760] Dev nbd1: unable to read RDB block 0 [ 657.978585][T10760] nbd1: unable to read partition table [ 657.989124][T10760] exFAT-fs (nbd1): unable to read boot sector [ 657.999728][T10760] exFAT-fs (nbd1): failed to read boot sector [ 658.008926][T10760] exFAT-fs (nbd1): failed to recognize exfat type [ 658.382291][ T5918] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 658.552211][ T5918] usb 2-1: Using ep0 maxpacket: 16 [ 658.559788][ T5918] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 658.572277][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.585225][ T5918] usb 2-1: config 0 descriptor?? [ 658.598101][ T5918] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 658.882168][ T797] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 659.062519][ T797] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 659.071663][ T797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.079774][ T797] usb 1-1: Product: syz [ 659.084262][ T797] usb 1-1: Manufacturer: syz [ 659.088898][ T797] usb 1-1: SerialNumber: syz [ 659.096541][ T797] usb 1-1: config 0 descriptor?? [ 659.251838][ T5949] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 659.312509][ T5960] usb 1-1: USB disconnect, device number 95 [ 659.411960][ T5949] usb 3-1: Using ep0 maxpacket: 32 [ 659.442965][ T5949] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 659.454903][ T5949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.472073][ T5949] usb 3-1: Product: syz [ 659.476324][ T5949] usb 3-1: Manufacturer: syz [ 659.480957][ T5949] usb 3-1: SerialNumber: syz [ 659.499186][ T5949] usb 3-1: config 0 descriptor?? [ 659.515848][ T5949] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 659.933350][T10788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.945386][T10788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.957401][T10788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.968324][T10788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.986329][T10803] overlayfs: failed to resolve './bus': -2 [ 660.117747][T10808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.129327][T10808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.150322][T10808] comedi: valid board names for 8255 driver are: [ 660.156946][T10808] 8255 [ 660.159807][T10808] comedi: valid board names for vmk80xx driver are: [ 660.166586][T10808] vmk80xx [ 660.169787][T10808] comedi: valid board names for usbduxsigma driver are: [ 660.177506][T10808] usbduxsigma [ 660.180986][T10808] comedi: valid board names for usbduxfast driver are: [ 660.183513][ T5949] gspca_stk1135: reg_w 0x3 err -71 [ 660.188346][T10808] usbduxfast [ 660.196602][T10808] comedi: valid board names for usbdux driver are: [ 660.206644][ T5949] gspca_stk1135: serial bus timeout: status=0x00 [ 660.207073][T10808] usbdux [ 660.213852][ T5949] gspca_stk1135: Sensor write failed [ 660.221550][T10808] comedi: valid board names for ni6501 driver are: [ 660.221567][T10808] ni6501 [ 660.221577][T10808] comedi: valid board names for dt9812 driver are: [ 660.221587][T10808] dt9812 [ 660.221596][T10808] comedi: valid board names for ni_labpc_cs driver are: [ 660.221607][T10808] ni_labpc_cs [ 660.221616][T10808] comedi: valid board names for ni_daq_700 driver are: [ 660.221627][T10808] ni_daq_700 [ 660.221636][T10808] comedi: valid board names for labpc_pci driver are: [ 660.221703][T10808] labpc_pci [ 660.221713][T10808] comedi: valid board names for adl_pci9118 driver are: [ 660.221724][T10808] pci9118dg [ 660.221733][T10808] pci9118hg [ 660.221741][T10808] pci9118hr [ 660.221749][T10808] comedi: valid board names for 8255_pci driver are: [ 660.221760][T10808] 8255_pci [ 660.221769][T10808] comedi: valid board names for s526 driver are: [ 660.221780][T10808] s526 [ 660.221788][T10808] comedi: valid board names for multiq3 driver are: [ 660.221799][T10808] multiq3 [ 660.221807][T10808] comedi: valid board names for pcmuio driver are: [ 660.221841][T10808] pcmuio48 [ 660.221850][T10808] pcmuio96 [ 660.221859][T10808] comedi: valid board names for pcmmio driver are: [ 660.221869][T10808] pcmmio [ 660.221877][T10808] comedi: valid board names for pcmda12 driver are: [ 660.221888][T10808] pcmda12 [ 660.221896][T10808] comedi: valid board names for pcmad driver are: [ 660.221907][T10808] pcmad12 [ 660.221915][T10808] pcmad16 [ 660.221923][T10808] comedi: valid board names for ni_labpc driver are: [ 660.221934][T10808] lab-pc-1200 [ 660.221942][T10808] lab-pc-1200ai [ 660.221951][T10808] lab-pc+ [ 660.221982][T10808] comedi: valid board names for atmio16 driver are: [ 660.221993][T10808] atmio16 [ 660.222001][T10808] atmio16d [ 660.222010][T10808] comedi: valid board names for ni_at_ao driver are: [ 660.222020][T10808] at-ao-6 [ 660.222028][T10808] at-ao-10 [ 660.222036][T10808] comedi: valid board names for ni_at_a2150 driver are: [ 660.222047][T10808] ni_at_a2150 [ 660.222055][T10808] comedi: valid board names for adq12b driver are: [ 660.234018][ T5949] gspca_stk1135: serial bus timeout: status=0x00 [ 660.261310][T10808] adq12b [ 660.263719][ T5949] gspca_stk1135: Sensor write failed [ 660.269754][T10808] comedi: valid board names for mpc624 driver are: [ 660.269772][T10808] mpc624 [ 660.273938][ T5949] gspca_stk1135: serial bus timeout: status=0x00 [ 660.302466][T10808] comedi: valid board names for c6xdigio driver are: [ 660.306851][ T5949] gspca_stk1135: Sensor read failed [ 660.323629][T10808] c6xdigio [ 660.342829][ T5949] gspca_stk1135: serial bus timeout: status=0x00 [ 660.365884][T10808] comedi: valid board names for aio_iiro_16 driver are: [ 660.371315][ T5949] gspca_stk1135: Sensor read failed [ 660.374449][T10808] aio_iiro_16 [ 660.377673][ T5949] gspca_stk1135: Detected sensor type unknown (0x0) [ 660.377716][ T5949] gspca_stk1135: serial bus timeout: status=0x00 [ 660.377729][ T5949] gspca_stk1135: Sensor read failed [ 660.380878][T10808] comedi: valid board names for aio_aio12_8 driver are: [ 660.388551][ T5949] gspca_stk1135: serial bus timeout: status=0x00 [ 660.391100][T10808] aio_aio12_8 [ 660.394365][ T5949] gspca_stk1135: Sensor read failed [ 660.400788][T10808] aio_ai12_8 [ 660.404253][ T5949] gspca_stk1135: serial bus timeout: status=0x00 [ 660.411736][T10808] aio_ao12_4 [ 660.415016][ T5949] gspca_stk1135: Sensor write failed [ 660.418311][T10808] comedi: valid board names for fl512 driver are: [ 660.425900][ T5949] gspca_stk1135: serial bus timeout: status=0x00 [ 660.430903][T10808] fl512 [ 660.434171][ T5949] gspca_stk1135: Sensor write failed [ 660.439595][T10808] comedi: valid board names for dmm32at driver are: [ 660.446610][ T5949] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 660.449153][T10808] dmm32at [ 660.497006][ T5949] usb 3-1: USB disconnect, device number 75 [ 660.501005][T10808] comedi: valid board names for dt282x driver are: [ 660.604517][T10808] dt2821 [ 660.607574][T10808] dt2821-f [ 660.610929][T10808] dt2821-g [ 660.614656][T10808] dt2823 [ 660.617658][T10808] dt2824-pgh [ 660.622033][T10808] dt2824-pgl [ 660.625477][T10808] dt2825 [ 660.628472][T10808] dt2827 [ 660.631772][T10808] dt2828 [ 660.634754][T10808] dt2829 [ 660.637706][T10808] dt21-ez [ 660.640748][T10808] dt23-ez [ 660.644281][T10808] dt24-ez [ 660.647368][T10808] dt24-ez-pgl [ 660.650801][T10808] comedi: valid board names for dt2817 driver are: [ 660.657601][T10808] dt2817 [ 660.660706][T10808] comedi: valid board names for dt2815 driver are: [ 660.667329][T10808] dt2815 [ 660.670407][T10808] comedi: valid board names for dt2814 driver are: [ 660.677434][T10808] dt2814 [ 660.680595][T10808] comedi: valid board names for dt2811 driver are: [ 660.687530][T10808] dt2811-pgh [ 660.691249][T10808] dt2811-pgl [ 660.694664][T10808] comedi: valid board names for dt2801 driver are: [ 660.703222][T10808] dt2801 [ 660.706347][T10808] comedi: valid board names for das6402 driver are: [ 660.713247][T10808] das6402-12 [ 660.716598][T10808] das6402-16 [ 660.719924][T10808] comedi: valid board names for das1800 driver are: [ 660.726660][T10808] das-1701st [ 660.729985][T10808] das-1701st-da [ 660.733681][T10808] das-1702st [ 660.737086][T10808] das-1702st-da [ 660.740680][T10808] das-1702hr [ 660.744067][T10808] das-1702hr-da [ 660.748296][T10808] das-1701ao [ 660.751762][T10808] das-1702ao [ 660.755086][T10808] das-1801st [ 660.758792][T10808] das-1801st-da [ 660.762746][T10808] das-1802st [ 660.771107][T10808] das-1802st-da [ 660.774760][T10808] das-1802hr [ 660.778096][T10808] das-1802hr-da [ 660.792373][T10808] das-1801hc [ 660.795810][T10808] das-1802hc [ 660.799177][T10808] das-1801ao [ 660.812076][T10808] das-1802ao [ 660.816864][T10808] comedi: valid board names for das800 driver are: [ 660.825177][T10808] das-800 [ 660.829238][T10808] cio-das800 [ 660.833095][T10808] das-801 [ 660.836296][T10808] cio-das801 [ 660.839697][T10808] das-802 [ 660.843576][T10808] cio-das802 [ 660.847042][T10808] cio-das802/16 [ 660.850808][T10808] comedi: valid board names for isa-das08 driver are: [ 660.858280][T10808] isa-das08 [ 660.862502][T10808] das08-pgm [ 660.865817][T10808] das08-pgh [ 660.869159][T10808] das08-pgl [ 660.873032][T10808] das08-aoh [ 660.876367][T10808] das08-aol [ 660.879729][T10808] das08-aom [ 660.888550][T10808] das08/jr-ao [ 660.892257][T10808] das08jr-16-ao [ 660.896296][T10808] pc104-das08 [ 660.911404][T10808] das08jr/16 [ 660.912832][T10815] Trying to write to read-only block-device nullb0 [ 660.914793][T10808] comedi: valid board names for das16m1 driver are: [ 660.914807][T10808] das16m1 [ 660.914817][T10808] comedi: valid board names for dac02 driver are: [ 660.914829][T10808] dac02 [ 660.914838][T10808] comedi: valid board names for rti802 driver are: [ 660.947697][T10808] rti802 [ 660.950784][T10808] comedi: valid board names for rti800 driver are: [ 660.957395][T10808] rti800 [ 660.960363][T10808] rti815 [ 660.964203][T10808] comedi: valid board names for pcm3724 driver are: [ 660.971386][T10808] pcm3724 [ 660.974449][T10808] comedi: valid board names for pcl818 driver are: [ 660.981557][T10808] pcl818l [ 660.984616][T10808] pcl818h [ 660.987661][T10808] pcl818hd [ 660.990792][T10808] pcl818hg [ 660.994750][T10808] pcl818 [ 660.997730][T10808] pcl718 [ 661.000686][T10808] pcm3718 [ 661.004094][T10808] comedi: valid board names for pcl816 driver are: [ 661.010629][T10808] pcl816 [ 661.014827][T10808] pcl814b [ 661.017142][ T5918] gspca_sonixj: reg_w1 err -71 [ 661.017889][T10808] comedi: valid board names for pcl812 driver are: [ 661.017902][T10808] pcl812 [ 661.017912][T10808] pcl812pg [ 661.017921][T10808] acl8112pg [ 661.022892][ T5918] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 661.031169][T10808] acl8112dg [ 661.036902][ T5918] usb 2-1: USB disconnect, device number 104 [ 661.046030][T10808] acl8112hg [ 661.065971][T10808] a821pgl [ 661.071950][T10817] FAULT_INJECTION: forcing a failure. [ 661.071950][T10817] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 661.076205][T10808] a821pglnda [ 661.088923][T10808] a821pgh [ 661.093090][T10808] a822pgl [ 661.094388][T10817] CPU: 1 UID: 0 PID: 10817 Comm: syz.0.1590 Not tainted syzkaller #0 PREEMPT(full) [ 661.094420][T10817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 661.094435][T10817] Call Trace: [ 661.094444][T10817] [ 661.094454][T10817] dump_stack_lvl+0x189/0x250 [ 661.094487][T10817] ? __pfx____ratelimit+0x10/0x10 [ 661.094518][T10817] ? __pfx_dump_stack_lvl+0x10/0x10 [ 661.094545][T10817] ? __pfx__printk+0x10/0x10 [ 661.094572][T10817] ? __might_fault+0xb0/0x130 [ 661.094616][T10817] should_fail_ex+0x414/0x560 [ 661.094656][T10817] _copy_from_user+0x2d/0xb0 [ 661.094685][T10817] ___sys_sendmsg+0x158/0x2a0 [ 661.094723][T10817] ? __pfx____sys_sendmsg+0x10/0x10 [ 661.094799][T10817] ? __fget_files+0x2a/0x420 [ 661.094827][T10817] ? __fget_files+0x3a0/0x420 [ 661.094866][T10817] __x64_sys_sendmsg+0x19b/0x260 [ 661.094903][T10817] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 661.094949][T10817] ? __pfx_ksys_write+0x10/0x10 [ 661.094980][T10817] ? do_syscall_64+0xbe/0xfa0 [ 661.095014][T10817] do_syscall_64+0xfa/0xfa0 [ 661.095051][T10817] ? lockdep_hardirqs_on+0x9c/0x150 [ 661.095081][T10817] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.095104][T10817] ? clear_bhb_loop+0x60/0xb0 [ 661.095132][T10817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.095155][T10817] RIP: 0033:0x7f29aeb8efc9 [ 661.095174][T10817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 661.095194][T10817] RSP: 002b:00007f29af9fb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 661.095219][T10817] RAX: ffffffffffffffda RBX: 00007f29aede5fa0 RCX: 00007f29aeb8efc9 [ 661.095236][T10817] RDX: 0000000000004000 RSI: 0000200000000200 RDI: 0000000000000004 [ 661.095250][T10817] RBP: 00007f29af9fb090 R08: 0000000000000000 R09: 0000000000000000 [ 661.095265][T10817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 661.095277][T10817] R13: 00007f29aede6038 R14: 00007f29aede5fa0 R15: 00007fff95b27b28 [ 661.095315][T10817] [ 661.160860][ T5949] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 661.174171][T10808] a822pgh [ 661.312681][T10808] a823pgl [ 661.315746][T10808] a823pgh [ 661.318772][T10808] pcl813 [ 661.321834][T10808] pcl813b [ 661.324884][T10808] acl8113 [ 661.327913][T10808] iso813 [ 661.330928][T10808] acl8216 [ 661.333969][T10808] a826pg [ 661.336920][T10808] comedi: valid board names for pcl730 driver are: [ 661.340800][ T5949] usb 3-1: Using ep0 maxpacket: 16 [ 661.343556][T10808] pcl730 [ 661.351784][ T5949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 661.351838][T10808] iso730 [ 661.365060][ T5949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 661.365933][T10808] acl7130 [ 661.365945][T10808] pcm3730 [ 661.365954][T10808] pcl725 [ 661.365964][T10808] p8r8dio [ 661.365973][T10808] acl7225b [ 661.377163][ T5949] usb 3-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 661.378986][T10808] p16r16dio [ 661.378998][T10808] pcl733 [ 661.379006][T10808] pcl734 [ 661.379015][T10808] opmm-1616-xt [ 661.379023][T10808] pearl-mm-p [ 661.379031][T10808] ir104-pbf [ 661.379042][T10808] comedi: valid board names for pcl726 driver are: [ 661.383279][ T5949] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.385125][T10808] pcl726 [ 661.385137][T10808] pcl727 [ 661.385146][T10808] pcl728 [ 661.385155][T10808] acl6126 [ 661.385163][T10808] acl6128 [ 661.385173][T10808] comedi: valid board names for pcl724 driver are: [ 661.416904][ T5949] usb 3-1: config 0 descriptor?? [ 661.421087][T10808] pcl724 [ 661.464387][T10808] pcl722 [ 661.467341][T10808] pcl731 [ 661.470299][T10808] acl7122 [ 661.473475][T10808] acl7124 [ 661.476521][T10808] pet48dio [ 661.479715][T10808] pcmio48 [ 661.482839][T10808] onyx-mm-dio [ 661.486252][T10808] comedi: valid board names for pcl711 driver are: [ 661.492849][T10808] pcl711 [ 661.495837][T10808] pcl711b [ 661.498886][T10808] acl8112hg [ 661.502217][T10808] acl8112dg [ 661.505446][T10808] comedi: valid board names for amplc_pc263 driver are: [ 661.512495][T10808] pc263 [ 661.515378][T10808] comedi: valid board names for amplc_pc236 driver are: [ 661.522428][T10808] pc36at [ 661.525397][T10808] comedi: valid board names for amplc_dio200 driver are: [ 661.532642][T10808] pc212e [ 661.535616][T10808] pc214e [ 661.538579][T10808] pc215e [ 661.541635][T10808] pc218e [ 661.544600][T10808] pc272e [ 661.547562][T10808] comedi: valid board names for comedi_parport driver are: [ 661.554840][T10808] comedi_parport [ 661.558499][T10808] comedi: valid board names for comedi_test driver are: [ 661.565752][T10808] comedi_test [ 661.569161][T10808] comedi: valid board names for comedi_bond driver are: [ 661.576209][T10808] comedi_bond [ 661.646717][ T5949] playstation 0003:054C:05C4.0018: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.2-1/input0 [ 661.932461][ T5949] playstation 0003:054C:05C4.0018: Failed to retrieve feature with reportID 163: -32 [ 661.944425][ T5949] playstation 0003:054C:05C4.0018: Failed to retrieve DualShock4 firmware info: -32 [ 661.954806][ T5949] playstation 0003:054C:05C4.0018: Failed to get firmware info from DualShock4 [ 661.964377][ T5949] playstation 0003:054C:05C4.0018: HW/FW version data in sysfs will be invalid. [ 661.975184][ T5949] playstation 0003:054C:05C4.0018: Failed to retrieve feature with reportID 2: -32 [ 661.985417][ T5949] playstation 0003:054C:05C4.0018: Retrying DualShock 4 get calibration report (0x02) request [ 662.004884][ T5949] input: HID 054c:05c4 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:05C4.0018/input/input35 [ 662.061593][ T5949] input: HID 054c:05c4 Motion Sensors as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:05C4.0018/input/input36 [ 662.112776][ T5949] input: HID 054c:05c4 Touchpad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:05C4.0018/input/input37 [ 662.267938][ T5949] playstation 0003:054C:05C4.0018: Registered DualShock4 controller hw_version=0x00000000 fw_version=0x00000000 [ 662.293737][T10835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 662.309683][ T5949] usb 3-1: USB disconnect, device number 76 [ 662.317688][T10835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 662.338071][T10835] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1595'. [ 662.376748][ T5881] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 662.697806][T10844] qnx6: unable to read the first superblock [ 662.705346][T10844] qnx6: unable to read the first superblock [ 662.712018][T10844] qnx6: unable to read the first superblock [ 662.762176][T10846] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1598'. [ 662.848615][T10851] FAULT_INJECTION: forcing a failure. [ 662.848615][T10851] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 662.863733][T10851] CPU: 1 UID: 0 PID: 10851 Comm: syz.1.1600 Not tainted syzkaller #0 PREEMPT(full) [ 662.863765][T10851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 662.863779][T10851] Call Trace: [ 662.863788][T10851] [ 662.863796][T10851] dump_stack_lvl+0x189/0x250 [ 662.863825][T10851] ? __pfx____ratelimit+0x10/0x10 [ 662.863852][T10851] ? __pfx_dump_stack_lvl+0x10/0x10 [ 662.863877][T10851] ? __pfx__printk+0x10/0x10 [ 662.863900][T10851] ? __might_fault+0xb0/0x130 [ 662.863939][T10851] should_fail_ex+0x414/0x560 [ 662.863972][T10851] _copy_from_user+0x2d/0xb0 [ 662.863998][T10851] ___sys_sendmsg+0x158/0x2a0 [ 662.864032][T10851] ? __pfx____sys_sendmsg+0x10/0x10 [ 662.864116][T10851] ? __might_fault+0xb0/0x130 [ 662.864148][T10851] __sys_sendmmsg+0x227/0x430 [ 662.864185][T10851] ? __pfx___sys_sendmmsg+0x10/0x10 [ 662.864226][T10851] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 662.864273][T10851] ? ksys_write+0x22a/0x250 [ 662.864297][T10851] ? __pfx_ksys_write+0x10/0x10 [ 662.864324][T10851] __x64_sys_sendmmsg+0xa0/0xc0 [ 662.864356][T10851] do_syscall_64+0xfa/0xfa0 [ 662.864383][T10851] ? lockdep_hardirqs_on+0x9c/0x150 [ 662.864409][T10851] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.864430][T10851] ? clear_bhb_loop+0x60/0xb0 [ 662.864454][T10851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.864474][T10851] RIP: 0033:0x7fe34278efc9 [ 662.864493][T10851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 662.864511][T10851] RSP: 002b:00007fe3436fb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 662.864533][T10851] RAX: ffffffffffffffda RBX: 00007fe3429e5fa0 RCX: 00007fe34278efc9 [ 662.864548][T10851] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003 [ 662.864562][T10851] RBP: 00007fe3436fb090 R08: 0000000000000000 R09: 0000000000000000 [ 662.864575][T10851] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000002 [ 662.864588][T10851] R13: 00007fe3429e6038 R14: 00007fe3429e5fa0 R15: 00007ffd3eb4db08 [ 662.864622][T10851] [ 663.266727][T10859] FAULT_INJECTION: forcing a failure. [ 663.266727][T10859] name failslab, interval 1, probability 0, space 0, times 0 [ 663.280933][T10859] CPU: 0 UID: 0 PID: 10859 Comm: syz.3.1603 Not tainted syzkaller #0 PREEMPT(full) [ 663.280962][T10859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 663.280975][T10859] Call Trace: [ 663.280983][T10859] [ 663.280992][T10859] dump_stack_lvl+0x189/0x250 [ 663.281022][T10859] ? __pfx____ratelimit+0x10/0x10 [ 663.281049][T10859] ? __pfx_dump_stack_lvl+0x10/0x10 [ 663.281073][T10859] ? __pfx__printk+0x10/0x10 [ 663.281102][T10859] ? __pfx___might_resched+0x10/0x10 [ 663.281123][T10859] ? fs_reclaim_acquire+0x7d/0x100 [ 663.281160][T10859] should_fail_ex+0x414/0x560 [ 663.281193][T10859] should_failslab+0xa8/0x100 [ 663.281215][T10859] kmem_cache_alloc_node_noprof+0x8c/0x710 [ 663.281245][T10859] ? __alloc_skb+0x112/0x2d0 [ 663.281271][T10859] ? netlink_autobind+0xdb/0x300 [ 663.281307][T10859] __alloc_skb+0x112/0x2d0 [ 663.281338][T10859] netlink_sendmsg+0x5c6/0xb30 [ 663.281378][T10859] ? __pfx_netlink_sendmsg+0x10/0x10 [ 663.281411][T10859] ? aa_sock_msg_perm+0xf1/0x1d0 [ 663.281438][T10859] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 663.281457][T10859] ? __pfx_netlink_sendmsg+0x10/0x10 [ 663.281488][T10859] __sock_sendmsg+0x21c/0x270 [ 663.281515][T10859] ____sys_sendmsg+0x505/0x830 [ 663.281552][T10859] ? __pfx_____sys_sendmsg+0x10/0x10 [ 663.281593][T10859] ? import_iovec+0x74/0xa0 [ 663.281620][T10859] ___sys_sendmsg+0x21f/0x2a0 [ 663.281653][T10859] ? __pfx____sys_sendmsg+0x10/0x10 [ 663.281721][T10859] ? __fget_files+0x2a/0x420 [ 663.281747][T10859] ? __fget_files+0x3a0/0x420 [ 663.281790][T10859] __x64_sys_sendmsg+0x19b/0x260 [ 663.281832][T10859] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 663.281874][T10859] ? __pfx_ksys_write+0x10/0x10 [ 663.281902][T10859] ? do_syscall_64+0xbe/0xfa0 [ 663.281933][T10859] do_syscall_64+0xfa/0xfa0 [ 663.281959][T10859] ? lockdep_hardirqs_on+0x9c/0x150 [ 663.281985][T10859] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.282006][T10859] ? clear_bhb_loop+0x60/0xb0 [ 663.282031][T10859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.282051][T10859] RIP: 0033:0x7f5841b8efc9 [ 663.282069][T10859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 663.282087][T10859] RSP: 002b:00007f5842a9f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 663.282109][T10859] RAX: ffffffffffffffda RBX: 00007f5841de5fa0 RCX: 00007f5841b8efc9 [ 663.282124][T10859] RDX: 0000000000004000 RSI: 0000200000000200 RDI: 0000000000000004 [ 663.282138][T10859] RBP: 00007f5842a9f090 R08: 0000000000000000 R09: 0000000000000000 [ 663.282151][T10859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 663.282164][T10859] R13: 00007f5841de6038 R14: 00007f5841de5fa0 R15: 00007ffd89e7a808 [ 663.282197][T10859] [ 664.010019][ T5949] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 664.188040][ T5949] usb 1-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 102, changing to 10 [ 664.219006][ T5949] usb 1-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid maxpacket 24624, setting to 1024 [ 664.250779][ T5949] usb 1-1: config 0 interface 0 has no altsetting 0 [ 664.463777][ T5949] usb 1-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 664.474708][ T5949] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.500071][ T5949] usb 1-1: Product: syz [ 664.516111][ T5949] usb 1-1: Manufacturer: syz [ 664.523824][ T5949] usb 1-1: SerialNumber: syz [ 664.536647][ T5949] usb 1-1: config 0 descriptor?? [ 664.556378][ T5949] keyspan 1-1:0.0: Keyspan 2 port adapter converter detected [ 664.570317][ T5949] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7 [ 664.588393][ T5949] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 664.605688][ T5949] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 664.618319][ T5949] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 664.637119][ T5949] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 85 [ 664.646049][ T5949] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 5 [ 664.656672][ T5949] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 664.669275][ T5949] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83 [ 664.678400][ T5949] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 3 [ 664.691304][ T5949] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4 [ 664.705140][ T5949] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 86 [ 664.716098][ T5949] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 6 [ 664.727628][ T5949] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 664.763242][ T5949] usb 1-1: USB disconnect, device number 96 [ 664.783178][T10884] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1609'. [ 664.801579][ T5949] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 664.815728][T10884] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1609'. [ 664.839153][ T5949] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 664.862524][ T5949] keyspan 1-1:0.0: device disconnected [ 664.891308][T10888] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 665.396799][T10911] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1618'. [ 665.618682][ T5918] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 665.658798][ T5949] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 665.769324][ T5918] usb 1-1: Using ep0 maxpacket: 8 [ 665.776764][ T5918] usb 1-1: unable to get BOS descriptor or descriptor too short [ 665.786137][ T5918] usb 1-1: config 8 interface 0 altsetting 7 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 665.797200][ T5918] usb 1-1: config 8 interface 0 has no altsetting 0 [ 665.806112][ T5918] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 665.815320][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.818628][ T5949] usb 3-1: Using ep0 maxpacket: 32 [ 665.823417][ T5918] usb 1-1: Product: syz [ 665.832152][ T5949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 665.832871][ T5918] usb 1-1: Manufacturer: syz [ 665.832890][ T5918] usb 1-1: SerialNumber: syz [ 665.867862][ T5949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 665.897970][ T5949] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 665.907403][ T5949] usb 3-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0 [ 665.916091][ T5949] usb 3-1: Manufacturer: syz [ 665.924354][ T5949] usb 3-1: config 0 descriptor?? [ 665.944975][T10913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 665.954424][T10913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 666.024699][ T30] audit: type=1800 audit(1761614465.686:152): pid=10913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1619" name="bus" dev="overlay" ino=2559 res=0 errno=0 [ 666.273591][ T5918] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 666.281151][ T5918] usb 1-1: selecting invalid altsetting 0 [ 666.310046][ T5918] usb 1-1: USB disconnect, device number 97 [ 666.353063][ T5949] ft260 0003:0403:6030.0019: unknown main item tag 0x7 [ 666.365515][T10876] udevd[10876]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 666.535038][ T5949] ft260 0003:0403:6030.0019: chip code: 6424 8183 [ 666.658161][ T5856] usb 2-1: new full-speed USB device number 105 using dummy_hcd [ 666.735521][ T5949] ft260 0003:0403:6030.0019: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 666.811334][ T5856] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 666.823561][ T5856] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 666.835496][ T5856] usb 2-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 666.845293][ T5856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.919748][ T5856] usb 2-1: config 0 descriptor?? [ 666.946842][ T5949] ft260 0003:0403:6030.0019: failed to retrieve status: -32, no wakeup [ 667.104594][T10932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 667.113545][T10932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 667.123239][T10932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 667.133315][T10932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 667.216012][T10911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 667.225045][T10911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 667.262402][ T5949] usb 3-1: USB disconnect, device number 77 [ 667.334342][ T5856] chicony 0003:04F2:1421.001A: unknown main item tag 0x0 [ 667.353997][ T5856] chicony 0003:04F2:1421.001A: unknown main item tag 0x0 [ 667.362852][ T5856] chicony 0003:04F2:1421.001A: unknown main item tag 0x0 [ 667.371202][ T5856] chicony 0003:04F2:1421.001A: unknown main item tag 0x0 [ 667.379383][ T5856] chicony 0003:04F2:1421.001A: unknown main item tag 0x0 [ 667.399572][ T5856] chicony 0003:04F2:1421.001A: hidraw0: USB HID v1.01 Device [HID 04f2:1421] on usb-dummy_hcd.1-1/input0 [ 667.537399][ T5941] usb 2-1: USB disconnect, device number 105 [ 667.885829][T10945] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 667.897698][T10945] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 668.059502][T10954] FAULT_INJECTION: forcing a failure. [ 668.059502][T10954] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 668.072880][T10954] CPU: 1 UID: 0 PID: 10954 Comm: syz.3.1631 Not tainted syzkaller #0 PREEMPT(full) [ 668.072908][T10954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 668.072922][T10954] Call Trace: [ 668.072930][T10954] [ 668.072939][T10954] dump_stack_lvl+0x189/0x250 [ 668.072969][T10954] ? __pfx____ratelimit+0x10/0x10 [ 668.072994][T10954] ? __pfx_dump_stack_lvl+0x10/0x10 [ 668.073018][T10954] ? __pfx__printk+0x10/0x10 [ 668.073039][T10954] ? __might_fault+0xb0/0x130 [ 668.073077][T10954] should_fail_ex+0x414/0x560 [ 668.073109][T10954] _copy_from_user+0x2d/0xb0 [ 668.073131][T10954] ___sys_sendmsg+0x158/0x2a0 [ 668.073165][T10954] ? __pfx____sys_sendmsg+0x10/0x10 [ 668.073236][T10954] ? __might_fault+0xb0/0x130 [ 668.073264][T10954] __sys_sendmmsg+0x227/0x430 [ 668.073314][T10954] ? __pfx___sys_sendmmsg+0x10/0x10 [ 668.073354][T10954] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 668.073408][T10954] ? ksys_write+0x22a/0x250 [ 668.073434][T10954] ? __pfx_ksys_write+0x10/0x10 [ 668.073466][T10954] __x64_sys_sendmmsg+0xa0/0xc0 [ 668.073500][T10954] do_syscall_64+0xfa/0xfa0 [ 668.073526][T10954] ? lockdep_hardirqs_on+0x9c/0x150 [ 668.073552][T10954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.073573][T10954] ? clear_bhb_loop+0x60/0xb0 [ 668.073597][T10954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.073617][T10954] RIP: 0033:0x7f5841b8efc9 [ 668.073636][T10954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 668.073653][T10954] RSP: 002b:00007f5842a9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 668.073675][T10954] RAX: ffffffffffffffda RBX: 00007f5841de5fa0 RCX: 00007f5841b8efc9 [ 668.073690][T10954] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003 [ 668.073703][T10954] RBP: 00007f5842a9f090 R08: 0000000000000000 R09: 0000000000000000 [ 668.073715][T10954] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000002 [ 668.073726][T10954] R13: 00007f5841de6038 R14: 00007f5841de5fa0 R15: 00007ffd89e7a808 [ 668.073758][T10954] [ 668.413028][ T5918] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 668.451028][ T52] block nbd3: Receive control failed (result -32) [ 668.458721][T10959] block nbd3: shutting down sockets [ 668.547182][ T5918] usb 1-1: device descriptor read/64, error -71 [ 668.608446][ T5941] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 668.767067][ T5941] usb 2-1: Using ep0 maxpacket: 16 [ 668.774027][ T5941] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 668.782364][ T5941] usb 2-1: config 0 has no interface number 0 [ 668.788706][ T5941] usb 2-1: config 0 interface 133 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 668.797260][ T5918] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 668.802414][ T5941] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 668.816875][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.825395][ T5941] usb 2-1: Product: syz [ 668.832510][ T5941] usb 2-1: Manufacturer: syz [ 668.837257][ T5941] usb 2-1: SerialNumber: syz [ 668.844945][ T5941] usb 2-1: config 0 descriptor?? [ 668.937100][ T5918] usb 1-1: device descriptor read/64, error -71 [ 669.047299][ T5918] usb usb1-port1: attempt power cycle [ 669.075988][ T5941] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 669.085355][ T5941] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 669.093519][ T5941] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 669.101400][ T5941] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 669.110632][ T5941] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 669.125791][ T5941] usb 2-1: USB disconnect, device number 106 [ 669.137094][ T5941] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 669.147519][ T5941] keyspan 2-1:0.133: device disconnected [ 669.397450][ T5918] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 669.417382][ T5918] usb 1-1: device descriptor read/8, error -71 [ 669.657576][T10977] blk_print_req_error: 55 callbacks suppressed [ 669.657600][T10977] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 669.676753][T10977] buffer_io_error: 54 callbacks suppressed [ 669.676775][T10977] Buffer I/O error on dev nbd1, logical block 0, async page read [ 669.688636][ T5918] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 669.699288][T10977] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 669.720531][T10977] Buffer I/O error on dev nbd1, logical block 1, async page read [ 669.727316][ T5918] usb 1-1: device descriptor read/8, error -71 [ 669.760911][T10977] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 669.770479][T10977] Buffer I/O error on dev nbd1, logical block 2, async page read [ 669.778676][T10977] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 669.796912][T10977] Buffer I/O error on dev nbd1, logical block 3, async page read [ 669.817550][T10977] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 669.828777][T10977] Buffer I/O error on dev nbd1, logical block 0, async page read [ 669.851926][T10977] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 669.862640][ T5918] usb usb1-port1: unable to enumerate USB device [ 669.871841][T10977] Buffer I/O error on dev nbd1, logical block 1, async page read [ 669.880381][T10977] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 669.892795][T10977] Buffer I/O error on dev nbd1, logical block 2, async page read [ 669.907871][T10977] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 669.917730][T10977] Buffer I/O error on dev nbd1, logical block 3, async page read [ 669.925825][T10977] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 669.937543][T10977] Buffer I/O error on dev nbd1, logical block 0, async page read [ 669.945564][T10977] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 669.998283][T10977] Buffer I/O error on dev nbd1, logical block 1, async page read [ 670.012523][T10977] ldm_validate_partition_table(): Disk read failed. [ 670.021451][T10977] Dev nbd1: unable to read RDB block 0 [ 670.030992][T10977] nbd1: unable to read partition table [ 670.032009][T10986] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1642'. [ 670.051107][T10986] FAULT_INJECTION: forcing a failure. [ 670.051107][T10986] name failslab, interval 1, probability 0, space 0, times 0 [ 670.064165][T10986] CPU: 0 UID: 0 PID: 10986 Comm: syz.3.1642 Not tainted syzkaller #0 PREEMPT(full) [ 670.064193][T10986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 670.064206][T10986] Call Trace: [ 670.064214][T10986] [ 670.064223][T10986] dump_stack_lvl+0x189/0x250 [ 670.064252][T10986] ? __pfx____ratelimit+0x10/0x10 [ 670.064279][T10986] ? __pfx_dump_stack_lvl+0x10/0x10 [ 670.064303][T10986] ? __pfx__printk+0x10/0x10 [ 670.064332][T10986] ? __pfx___might_resched+0x10/0x10 [ 670.064367][T10986] should_fail_ex+0x414/0x560 [ 670.064401][T10986] should_failslab+0xa8/0x100 [ 670.064425][T10986] kmem_cache_alloc_node_noprof+0x8c/0x710 [ 670.064454][T10986] ? stack_trace_save+0x9c/0xe0 [ 670.064479][T10986] ? __alloc_skb+0x112/0x2d0 [ 670.064512][T10986] __alloc_skb+0x112/0x2d0 [ 670.064544][T10986] netlink_ack+0x146/0xa50 [ 670.064569][T10986] ? __pfx_genl_rcv_msg+0x10/0x10 [ 670.064610][T10986] netlink_rcv_skb+0x28c/0x470 [ 670.064637][T10986] ? __lock_acquire+0xab9/0xd20 [ 670.064668][T10986] ? __pfx_genl_rcv_msg+0x10/0x10 [ 670.064692][T10986] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 670.064741][T10986] ? down_read+0x1ad/0x2e0 [ 670.064775][T10986] genl_rcv+0x28/0x40 [ 670.064795][T10986] netlink_unicast+0x82f/0x9e0 [ 670.064830][T10986] ? __pfx_netlink_unicast+0x10/0x10 [ 670.064859][T10986] ? netlink_sendmsg+0x642/0xb30 [ 670.064887][T10986] ? skb_put+0x11b/0x210 [ 670.064919][T10986] netlink_sendmsg+0x805/0xb30 [ 670.064958][T10986] ? __pfx_netlink_sendmsg+0x10/0x10 [ 670.064992][T10986] ? aa_sock_msg_perm+0xf1/0x1d0 [ 670.065020][T10986] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 670.065039][T10986] ? __pfx_netlink_sendmsg+0x10/0x10 [ 670.065070][T10986] __sock_sendmsg+0x21c/0x270 [ 670.065097][T10986] ____sys_sendmsg+0x505/0x830 [ 670.065135][T10986] ? __pfx_____sys_sendmsg+0x10/0x10 [ 670.065176][T10986] ? import_iovec+0x74/0xa0 [ 670.065204][T10986] ___sys_sendmsg+0x21f/0x2a0 [ 670.065238][T10986] ? __pfx____sys_sendmsg+0x10/0x10 [ 670.065308][T10986] ? __fget_files+0x2a/0x420 [ 670.065334][T10986] ? __fget_files+0x3a0/0x420 [ 670.065378][T10986] __x64_sys_sendmsg+0x19b/0x260 [ 670.065413][T10986] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 670.065455][T10986] ? __pfx_ksys_write+0x10/0x10 [ 670.065482][T10986] ? do_syscall_64+0xbe/0xfa0 [ 670.065514][T10986] do_syscall_64+0xfa/0xfa0 [ 670.065540][T10986] ? lockdep_hardirqs_on+0x9c/0x150 [ 670.065567][T10986] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.065588][T10986] ? clear_bhb_loop+0x60/0xb0 [ 670.065613][T10986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.065634][T10986] RIP: 0033:0x7f5841b8efc9 [ 670.065653][T10986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 670.065672][T10986] RSP: 002b:00007f5842a9f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 670.065694][T10986] RAX: ffffffffffffffda RBX: 00007f5841de5fa0 RCX: 00007f5841b8efc9 [ 670.065709][T10986] RDX: 0000000000004000 RSI: 0000200000000200 RDI: 0000000000000004 [ 670.065729][T10986] RBP: 00007f5842a9f090 R08: 0000000000000000 R09: 0000000000000000 [ 670.065741][T10986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 670.065753][T10986] R13: 00007f5841de6038 R14: 00007f5841de5fa0 R15: 00007ffd89e7a808 [ 670.065787][T10986] [ 671.190959][T11021] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1653'. [ 671.239783][T11024] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1654'. [ 671.426386][ T5941] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 671.555699][ T5856] usb 3-1: new full-speed USB device number 78 using dummy_hcd [ 671.575670][ T5941] usb 1-1: Using ep0 maxpacket: 32 [ 671.584374][ T5941] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 671.596131][ T5941] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 671.607835][ T5941] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 671.617585][ T5941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.633246][ T5941] usb 1-1: config 0 descriptor?? [ 671.647343][ T5941] hub 1-1:0.0: USB hub found [ 671.683149][T11029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.697818][T11029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.708221][ T5856] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 671.728467][ T5856] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 671.763380][ T5856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 671.781658][ T5856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 671.791807][ T5856] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 671.808633][ T5856] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 671.818230][ T5856] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.826679][ T5856] usb 3-1: Product: syz [ 671.831064][ T5856] usb 3-1: Manufacturer: syz [ 671.836083][ T5856] usb 3-1: SerialNumber: syz [ 671.853081][ T5856] usb 3-1: config 0 descriptor?? [ 671.871287][ T5856] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input38 [ 672.049173][T11017] sctp: [Deprecated]: syz.0.1651 (pid 11017) Use of int in max_burst socket option. [ 672.049173][T11017] Use struct sctp_assoc_value instead [ 672.079137][ T5941] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 672.106453][ T5856] usb 3-1: USB disconnect, device number 78 [ 672.129054][ T5941] usbhid 1-1:0.0: can't add hid device: -71 [ 672.138798][ T5941] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 672.178499][ T5941] usb 1-1: USB disconnect, device number 102 [ 672.906618][T11051] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 672.915822][T11051] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 672.934986][ T5941] usb 3-1: new full-speed USB device number 79 using dummy_hcd [ 673.001008][T11053] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1663'. [ 673.095278][ T5941] usb 3-1: device descriptor read/64, error -71 [ 673.334803][ T5941] usb 3-1: new full-speed USB device number 80 using dummy_hcd [ 673.466082][ T5941] usb 3-1: device descriptor read/64, error -71 [ 673.489026][T11086] ldm_validate_partition_table(): Disk read failed. [ 673.498473][T11086] Dev nbd1: unable to read RDB block 0 [ 673.508574][T11086] nbd1: unable to read partition table [ 673.511030][ T797] usb 1-1: new full-speed USB device number 103 using dummy_hcd [ 673.530012][T11085] ldm_validate_partition_table(): Disk read failed. [ 673.538381][T11085] Dev nbd1: unable to read RDB block 0 [ 673.546713][T11085] nbd1: unable to read partition table [ 673.585236][ T5941] usb usb3-port1: attempt power cycle [ 673.666366][ T797] usb 1-1: config 0 has an invalid interface number: 200 but max is 0 [ 673.674780][ T797] usb 1-1: config 0 has no interface number 0 [ 673.680917][ T797] usb 1-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 673.691040][ T797] usb 1-1: config 0 interface 200 has no altsetting 0 [ 673.701181][ T797] usb 1-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 673.710465][ T797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.718592][ T797] usb 1-1: Product: syz [ 673.722787][ T797] usb 1-1: Manufacturer: syz [ 673.727599][ T797] usb 1-1: SerialNumber: syz [ 673.735430][ T797] usb 1-1: config 0 descriptor?? [ 673.754613][ T5883] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 673.908329][ T5883] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 673.917644][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.926024][ T5883] usb 2-1: Product: syz [ 673.930269][ T5883] usb 2-1: Manufacturer: syz [ 673.934958][ T5941] usb 3-1: new full-speed USB device number 81 using dummy_hcd [ 673.943680][ T5883] usb 2-1: SerialNumber: syz [ 673.961340][ T797] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.200/input/input39 [ 673.965761][ T5941] usb 3-1: device descriptor read/8, error -71 [ 673.985595][ T5883] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 674.001350][ T797] usb 1-1: USB disconnect, device number 103 [ 674.017936][ T5918] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 674.138581][ T52] block nbd3: Receive control failed (result -32) [ 674.138908][T11077] block nbd3: shutting down sockets [ 674.222359][T11085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.230998][ T5941] usb 3-1: new full-speed USB device number 82 using dummy_hcd [ 674.239037][T11085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 674.240419][T11086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.259581][T11086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 674.268108][T11089] netlink: 'syz.3.1674': attribute type 153 has an invalid length. [ 674.278458][T11089] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1674'. [ 674.278604][ T5941] usb 3-1: device descriptor read/8, error -71 [ 674.304356][T11089] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1674'. [ 674.307570][ T797] usb 2-1: USB disconnect, device number 107 [ 674.405200][ T5941] usb usb3-port1: unable to enumerate USB device [ 674.728232][T11092] genirq: Flags mismatch irq 4. 00200000 (pcl816) vs. 00200080 (ttyS0) [ 675.054036][ T5918] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 675.061621][ T5918] ath9k_htc: Failed to initialize the device [ 675.068818][ T797] usb 2-1: ath9k_htc: USB layer deinitialized [ 675.224093][T11111] block nbd3: Device being setup by another task [ 675.337048][T11116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 675.350752][T11116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 675.364239][T11116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 675.374492][T11116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 675.394431][ T797] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 675.437904][T11117] program syz.3.1684 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 675.568394][ T797] usb 2-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 675.577796][ T797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.586243][ T797] usb 2-1: Product: syz [ 675.590731][ T797] usb 2-1: Manufacturer: syz [ 675.595925][ T797] usb 2-1: SerialNumber: syz [ 675.603247][ T797] usb 2-1: config 0 descriptor?? [ 675.722911][T11123] 9pnet_fd: p9_fd_create_unix (11123): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 675.811868][ T797] int51x1 2-1:0.0: probe with driver int51x1 failed with error -22 [ 676.016495][ T5941] usb 2-1: USB disconnect, device number 108 [ 676.085555][ T5883] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 676.246216][ T5883] usb 3-1: unable to get BOS descriptor or descriptor too short [ 676.255369][ T5883] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 676.272936][ T5883] usb 3-1: New USB device found, idVendor=046d, idProduct=0057, bcdDevice= 0.40 [ 676.282093][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.290535][ T5883] usb 3-1: Product: syz [ 676.294790][ T5883] usb 3-1: SerialNumber: syz [ 676.313281][ T5949] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 676.465344][ T5949] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 676.476481][ T5949] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.00 [ 676.485707][ T5949] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.496559][ T5949] usb 1-1: config 0 descriptor?? [ 676.518817][ T5883] usbhid 3-1:1.0: can't add hid device: -71 [ 676.525494][ T5883] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 676.541401][ T5883] usb 3-1: USB disconnect, device number 83 [ 676.678566][T11134] blk_print_req_error: 182 callbacks suppressed [ 676.678582][T11134] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 676.694609][T11134] buffer_io_error: 182 callbacks suppressed [ 676.694638][T11134] Buffer I/O error on dev nbd1, logical block 0, async page read [ 676.709284][T11134] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 676.718837][T11134] Buffer I/O error on dev nbd1, logical block 1, async page read [ 676.731972][T11134] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 676.741990][T11134] Buffer I/O error on dev nbd1, logical block 2, async page read [ 676.750508][T11134] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 676.760452][T11134] Buffer I/O error on dev nbd1, logical block 3, async page read [ 676.768717][T11134] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 676.777981][T11134] Buffer I/O error on dev nbd1, logical block 0, async page read [ 676.787096][T11134] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 676.796284][T11134] Buffer I/O error on dev nbd1, logical block 1, async page read [ 676.804636][T11134] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 676.814074][T11134] Buffer I/O error on dev nbd1, logical block 2, async page read [ 676.822128][T11134] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 676.831346][T11134] Buffer I/O error on dev nbd1, logical block 3, async page read [ 676.839456][T11134] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 676.848672][T11134] Buffer I/O error on dev nbd1, logical block 0, async page read [ 676.856855][T11134] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 676.866101][T11134] Buffer I/O error on dev nbd1, logical block 1, async page read [ 676.876899][T11134] ldm_validate_partition_table(): Disk read failed. [ 676.885702][T11134] Dev nbd1: unable to read RDB block 0 [ 676.893651][T11134] nbd1: unable to read partition table [ 677.136613][ T5949] usb 1-1: string descriptor 0 read error: -71 [ 677.152976][ T5949] uclogic 0003:5543:006E.001B: failed retrieving string descriptor #200: -71 [ 677.182894][ T5949] uclogic 0003:5543:006E.001B: failed retrieving pen parameters: -71 [ 677.201718][ T5949] uclogic 0003:5543:006E.001B: failed probing pen v2 parameters: -71 [ 677.215227][ T5949] uclogic 0003:5543:006E.001B: failed probing parameters: -71 [ 677.233796][ T5949] uclogic 0003:5543:006E.001B: probe with driver uclogic failed with error -71 [ 677.260745][ T5949] usb 1-1: USB disconnect, device number 104 [ 677.633019][T11151] netlink: 'syz.1.1695': attribute type 1 has an invalid length. [ 678.242407][ T5856] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 678.392211][ T5856] usb 1-1: Using ep0 maxpacket: 8 [ 678.401303][ T5856] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 678.411438][ T5856] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.412908][T11172] block nbd3: Device being setup by another task [ 678.419992][ T5856] usb 1-1: Product: syz [ 678.430912][ T5856] usb 1-1: Manufacturer: syz [ 678.435879][ T5856] usb 1-1: SerialNumber: syz [ 678.444423][ T5856] usb 1-1: config 0 descriptor?? [ 678.638019][T11180] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1701'. [ 678.658169][ T5856] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 678.861088][T11163] netlink: 'syz.0.1698': attribute type 2 has an invalid length. [ 678.908138][ T5856] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 678.933380][ T5856] usb 1-1: USB disconnect, device number 105 [ 679.091036][T11200] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 679.108408][T11200] overlayfs: missing 'lowerdir' [ 679.269320][T11207] FAULT_INJECTION: forcing a failure. [ 679.269320][T11207] name failslab, interval 1, probability 0, space 0, times 0 [ 679.282834][T11207] CPU: 1 UID: 0 PID: 11207 Comm: syz.2.1708 Not tainted syzkaller #0 PREEMPT(full) [ 679.282865][T11207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 679.282879][T11207] Call Trace: [ 679.282889][T11207] [ 679.282899][T11207] dump_stack_lvl+0x189/0x250 [ 679.282929][T11207] ? __pfx____ratelimit+0x10/0x10 [ 679.282956][T11207] ? __pfx_dump_stack_lvl+0x10/0x10 [ 679.282981][T11207] ? __pfx__printk+0x10/0x10 [ 679.283012][T11207] ? __ip_dev_find+0x451/0x4f0 [ 679.283032][T11207] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.283058][T11207] should_fail_ex+0x414/0x560 [ 679.283092][T11207] should_failslab+0xa8/0x100 [ 679.283116][T11207] kmem_cache_alloc_noprof+0x88/0x700 [ 679.283146][T11207] ? dst_alloc+0x105/0x170 [ 679.283173][T11207] dst_alloc+0x105/0x170 [ 679.283192][T11207] ? ip_check_mc_rcu+0x4c7/0x680 [ 679.283220][T11207] ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 679.283256][T11207] ? ip_route_output_key_hash+0xc1/0x280 [ 679.283284][T11207] ip_route_output_key_hash+0x174/0x280 [ 679.283309][T11207] ? __lock_acquire+0xab9/0xd20 [ 679.283342][T11207] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 679.283387][T11207] ip_route_output_flow+0x2a/0x150 [ 679.283416][T11207] ? security_sk_classify_flow+0x70/0x180 [ 679.283451][T11207] udp_sendmsg+0x142e/0x2170 [ 679.283495][T11207] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 679.283525][T11207] ? __pfx_udp_sendmsg+0x10/0x10 [ 679.283551][T11207] ? do_wp_page+0x22eb/0x5800 [ 679.283612][T11207] ? __pfx_aa_sk_perm+0x10/0x10 [ 679.283634][T11207] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 679.283666][T11207] ? sock_rps_record_flow+0x19/0x410 [ 679.283697][T11207] ? inet_sendmsg+0x29c/0x370 [ 679.283724][T11207] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 679.283749][T11207] __sock_sendmsg+0x19c/0x270 [ 679.283777][T11207] ____sys_sendmsg+0x52d/0x830 [ 679.283819][T11207] ? __pfx_____sys_sendmsg+0x10/0x10 [ 679.283861][T11207] ? import_iovec+0x74/0xa0 [ 679.283888][T11207] ___sys_sendmsg+0x21f/0x2a0 [ 679.283923][T11207] ? __pfx____sys_sendmsg+0x10/0x10 [ 679.283997][T11207] ? __might_fault+0xb0/0x130 [ 679.284030][T11207] __sys_sendmmsg+0x227/0x430 [ 679.284067][T11207] ? __pfx___sys_sendmmsg+0x10/0x10 [ 679.284109][T11207] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 679.284157][T11207] ? ksys_write+0x22a/0x250 [ 679.284183][T11207] ? __pfx_ksys_write+0x10/0x10 [ 679.284212][T11207] __x64_sys_sendmmsg+0xa0/0xc0 [ 679.284247][T11207] do_syscall_64+0xfa/0xfa0 [ 679.284274][T11207] ? lockdep_hardirqs_on+0x9c/0x150 [ 679.284301][T11207] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.284322][T11207] ? clear_bhb_loop+0x60/0xb0 [ 679.284347][T11207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.284368][T11207] RIP: 0033:0x7ff751b8efc9 [ 679.284388][T11207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 679.284413][T11207] RSP: 002b:00007ff7529d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 679.284436][T11207] RAX: ffffffffffffffda RBX: 00007ff751de5fa0 RCX: 00007ff751b8efc9 [ 679.284452][T11207] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003 [ 679.284466][T11207] RBP: 00007ff7529d6090 R08: 0000000000000000 R09: 0000000000000000 [ 679.284479][T11207] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000002 [ 679.284491][T11207] R13: 00007ff751de6038 R14: 00007ff751de5fa0 R15: 00007ffd8fd6f5c8 [ 679.284523][T11207] [ 679.681753][ T5934] usb 2-1: new full-speed USB device number 109 using dummy_hcd [ 679.682259][ T5856] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 679.807385][T11215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 679.818940][T11215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.836104][T11217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 679.850438][T11217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.866258][ T5856] usb 1-1: unable to get BOS descriptor or descriptor too short [ 679.875573][ T5856] usb 1-1: config 170 has an invalid descriptor of length 1, skipping remainder of the config [ 679.886755][ T5856] usb 1-1: config 170 has 0 interfaces, different from the descriptor's value: 2 [ 679.899518][ T5934] usb 2-1: unable to get BOS descriptor or descriptor too short [ 679.901155][ T5856] usb 1-1: string descriptor 0 read error: -22 [ 679.913422][ T5934] usb 2-1: not running at top speed; connect to a high speed hub [ 679.913706][ T5856] usb 1-1: New USB device found, idVendor=041e, idProduct=4068, bcdDevice=1a.25 [ 679.930571][ T5856] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.937618][ T5934] usb 2-1: config 14 has an invalid interface number: 7 but max is 0 [ 679.948087][ T5934] usb 2-1: config 14 has no interface number 0 [ 679.959013][ T5934] usb 2-1: config 14 interface 7 altsetting 247 endpoint 0x7 has invalid maxpacket 1024, setting to 1023 [ 679.970729][ T5934] usb 2-1: config 14 interface 7 altsetting 247 has an invalid descriptor for endpoint zero, skipping [ 679.982483][ T5934] usb 2-1: config 14 interface 7 has no altsetting 0 [ 679.992737][ T5934] usb 2-1: New USB device found, idVendor=3731, idProduct=0111, bcdDevice=fb.8d [ 680.011429][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.029950][ T5934] usb 2-1: Product: ⺌ú [ 680.034810][ T5934] usb 2-1: Manufacturer: ᐉ [ 680.039460][ T5934] usb 2-1: SerialNumber: ခ [ 680.173703][T11198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.184163][T11198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.196218][ T5883] usb 1-1: USB disconnect, device number 106 [ 680.258688][ T5934] option 2-1:14.7: GSM modem (1-port) converter detected [ 680.276921][ T5934] usb 2-1: USB disconnect, device number 109 [ 680.296154][ T5934] option 2-1:14.7: device disconnected [ 680.553216][ T52] block nbd2: Receive control failed (result -32) [ 680.553960][T11211] block nbd2: shutting down sockets [ 681.612560][T11257] netlink: 'syz.3.1720': attribute type 3 has an invalid length. [ 682.045526][T11277] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 682.065545][T11277] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 682.326516][T11284] tipc: Started in network mode [ 682.340646][T11284] tipc: Node identity ff120000000000000000000000000001, cluster identity 4711 [ 682.371453][T11284] tipc: Enabling of bearer rejected, failed to enable media [ 682.391246][ T5883] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 682.494375][ T52] block nbd2: Receive control failed (result -32) [ 682.508486][ T6024] block nbd2: shutting down sockets [ 682.570104][ T5883] usb 2-1: Using ep0 maxpacket: 16 [ 682.590961][ T5883] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 682.614816][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.661946][ T5883] usb 2-1: Product: syz [ 682.681840][ T5883] usb 2-1: Manufacturer: syz [ 682.697125][ T5883] usb 2-1: SerialNumber: syz [ 682.736701][ T5883] usb 2-1: config 0 descriptor?? [ 682.950522][T11282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 682.968999][T11282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 682.993302][T11282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.021121][T11282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.041180][T11282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.063084][T11282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.106760][T11282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.134667][T11282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.161373][T11282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.181716][T11282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.236491][ T797] usb 2-1: USB disconnect, device number 110 [ 683.582240][T11309] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 683.592166][T11309] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 683.769932][ T797] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 683.871316][T11317] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 683.890143][T11317] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 683.930497][ T797] usb 3-1: Using ep0 maxpacket: 8 [ 683.944381][ T797] usb 3-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 683.956575][ T797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.974370][ T797] usb 3-1: Product: syz [ 683.985985][ T797] usb 3-1: Manufacturer: syz [ 683.990973][ T797] usb 3-1: SerialNumber: syz [ 684.080203][T11320] syzkaller0: entered promiscuous mode [ 684.086824][T11320] syzkaller0: entered allmulticast mode [ 684.092604][ T5941] usb 2-1: new full-speed USB device number 111 using dummy_hcd [ 684.264043][ T5941] usb 2-1: config 5 has an invalid interface number: 146 but max is 0 [ 684.272625][ T5941] usb 2-1: config 5 has no interface number 0 [ 684.278780][ T5941] usb 2-1: config 5 interface 146 has no altsetting 0 [ 684.308377][ T5941] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=f1.f2 [ 684.332264][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.346388][ T5941] usb 2-1: Product: syz [ 684.352021][ T5941] usb 2-1: Manufacturer: syz [ 684.356679][ T5941] usb 2-1: SerialNumber: syz [ 684.420487][T11328] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1741'. [ 684.472571][T11307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 684.495293][T11307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 684.524477][ T797] mxuport 3-1:254.0: Direct firmware load for moxa/moxa-1450.fw failed with error -2 [ 684.555921][ T797] mxuport 3-1:254.0: Falling back to sysfs fallback for: moxa/moxa-1450.fw [ 684.598958][T11313] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1737'. [ 684.658494][ T5941] usb 2-1: USB disconnect, device number 111 [ 685.421098][T11347] FAULT_INJECTION: forcing a failure. [ 685.421098][T11347] name failslab, interval 1, probability 0, space 0, times 0 [ 685.434117][T11347] CPU: 1 UID: 0 PID: 11347 Comm: syz.3.1746 Not tainted syzkaller #0 PREEMPT(full) [ 685.434147][T11347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 685.434161][T11347] Call Trace: [ 685.434170][T11347] [ 685.434180][T11347] dump_stack_lvl+0x189/0x250 [ 685.434209][T11347] ? __pfx____ratelimit+0x10/0x10 [ 685.434234][T11347] ? __pfx_dump_stack_lvl+0x10/0x10 [ 685.434252][T11347] ? __pfx__printk+0x10/0x10 [ 685.434274][T11347] ? __ip_dev_find+0x451/0x4f0 [ 685.434288][T11347] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.434306][T11347] should_fail_ex+0x414/0x560 [ 685.434331][T11347] should_failslab+0xa8/0x100 [ 685.434348][T11347] kmem_cache_alloc_noprof+0x88/0x700 [ 685.434370][T11347] ? dst_alloc+0x105/0x170 [ 685.434388][T11347] dst_alloc+0x105/0x170 [ 685.434401][T11347] ? ip_check_mc_rcu+0x4c7/0x680 [ 685.434420][T11347] ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 685.434446][T11347] ? ip_route_output_key_hash+0xc1/0x280 [ 685.434465][T11347] ip_route_output_key_hash+0x174/0x280 [ 685.434482][T11347] ? __lock_acquire+0xab9/0xd20 [ 685.434506][T11347] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 685.434537][T11347] ip_route_output_flow+0x2a/0x150 [ 685.434552][T11347] ? security_sk_classify_flow+0x70/0x180 [ 685.434577][T11347] udp_sendmsg+0x142e/0x2170 [ 685.434609][T11347] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 685.434630][T11347] ? __pfx_udp_sendmsg+0x10/0x10 [ 685.434649][T11347] ? do_wp_page+0x22eb/0x5800 [ 685.434691][T11347] ? __pfx_aa_sk_perm+0x10/0x10 [ 685.434707][T11347] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 685.434729][T11347] ? sock_rps_record_flow+0x19/0x410 [ 685.434752][T11347] ? inet_sendmsg+0x29c/0x370 [ 685.434778][T11347] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 685.434796][T11347] __sock_sendmsg+0x19c/0x270 [ 685.434815][T11347] ____sys_sendmsg+0x52d/0x830 [ 685.434842][T11347] ? __pfx_____sys_sendmsg+0x10/0x10 [ 685.434872][T11347] ? import_iovec+0x74/0xa0 [ 685.434892][T11347] ___sys_sendmsg+0x21f/0x2a0 [ 685.434916][T11347] ? __pfx____sys_sendmsg+0x10/0x10 [ 685.434971][T11347] ? __might_fault+0xb0/0x130 [ 685.434994][T11347] __sys_sendmmsg+0x227/0x430 [ 685.435022][T11347] ? __pfx___sys_sendmmsg+0x10/0x10 [ 685.435051][T11347] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 685.435086][T11347] ? ksys_write+0x22a/0x250 [ 685.435109][T11347] ? __pfx_ksys_write+0x10/0x10 [ 685.435129][T11347] __x64_sys_sendmmsg+0xa0/0xc0 [ 685.435154][T11347] do_syscall_64+0xfa/0xfa0 [ 685.435175][T11347] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.435189][T11347] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 685.435205][T11347] ? clear_bhb_loop+0x60/0xb0 [ 685.435223][T11347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.435237][T11347] RIP: 0033:0x7f5841b8efc9 [ 685.435251][T11347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 685.435264][T11347] RSP: 002b:00007f5842a9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 685.435281][T11347] RAX: ffffffffffffffda RBX: 00007f5841de5fa0 RCX: 00007f5841b8efc9 [ 685.435293][T11347] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003 [ 685.435303][T11347] RBP: 00007f5842a9f090 R08: 0000000000000000 R09: 0000000000000000 [ 685.435313][T11347] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000002 [ 685.435322][T11347] R13: 00007f5841de6038 R14: 00007f5841de5fa0 R15: 00007ffd89e7a808 [ 685.435347][T11347] [ 685.778993][ T5941] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 685.850552][T11349] FAULT_INJECTION: forcing a failure. [ 685.850552][T11349] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 685.864712][T11349] CPU: 0 UID: 0 PID: 11349 Comm: syz.3.1747 Not tainted syzkaller #0 PREEMPT(full) [ 685.864740][T11349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 685.864753][T11349] Call Trace: [ 685.864761][T11349] [ 685.864770][T11349] dump_stack_lvl+0x189/0x250 [ 685.864798][T11349] ? __pfx____ratelimit+0x10/0x10 [ 685.864824][T11349] ? __pfx_dump_stack_lvl+0x10/0x10 [ 685.864847][T11349] ? __pfx__printk+0x10/0x10 [ 685.864869][T11349] ? __might_fault+0xb0/0x130 [ 685.864906][T11349] should_fail_ex+0x414/0x560 [ 685.864939][T11349] _copy_from_iter+0x1de/0x1790 [ 685.864967][T11349] ? rcu_is_watching+0x15/0xb0 [ 685.864996][T11349] ? __pfx__copy_from_iter+0x10/0x10 [ 685.865024][T11349] ? __local_bh_enable_ip+0x12d/0x1c0 [ 685.865045][T11349] ? lockdep_hardirqs_on+0x9c/0x150 [ 685.865076][T11349] skb_copy_datagram_from_iter+0xf5/0x720 [ 685.865105][T11349] ? iov_iter_single_seg_count+0xc9/0x2f0 [ 685.865131][T11349] tun_get_user+0x1691/0x3e90 [ 685.865171][T11349] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 685.865196][T11349] ? lockdep_hardirqs_on+0x9c/0x150 [ 685.865223][T11349] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 685.865249][T11349] ? __pfx_tun_get_user+0x10/0x10 [ 685.865286][T11349] ? save_netdev_trace_buffer+0x8be/0xa10 [ 685.865309][T11349] ? __lock_acquire+0xab9/0xd20 [ 685.865347][T11349] ? ref_tracker_alloc+0x318/0x460 [ 685.865375][T11349] ? tun_get+0x157/0x2f0 [ 685.865399][T11349] ? tun_chr_write_iter+0x60/0x210 [ 685.865423][T11349] ? ksys_write+0x145/0x250 [ 685.865446][T11349] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 685.865483][T11349] ? tun_get+0x1c/0x2f0 [ 685.865514][T11349] ? tun_get+0x1c/0x2f0 [ 685.865540][T11349] ? tun_get+0x1c/0x2f0 [ 685.865571][T11349] tun_chr_write_iter+0x113/0x210 [ 685.865600][T11349] vfs_write+0x5c9/0xb30 [ 685.865628][T11349] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 685.865656][T11349] ? __pfx_vfs_write+0x10/0x10 [ 685.865699][T11349] ? __fget_files+0x2a/0x420 [ 685.865736][T11349] ksys_write+0x145/0x250 [ 685.865761][T11349] ? __pfx_ksys_write+0x10/0x10 [ 685.865787][T11349] ? do_syscall_64+0xbe/0xfa0 [ 685.865818][T11349] do_syscall_64+0xfa/0xfa0 [ 685.865843][T11349] ? lockdep_hardirqs_on+0x9c/0x150 [ 685.865870][T11349] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.865891][T11349] ? clear_bhb_loop+0x60/0xb0 [ 685.865917][T11349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.865937][T11349] RIP: 0033:0x7f5841b8efc9 [ 685.865957][T11349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 685.865975][T11349] RSP: 002b:00007f5842a9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 685.865997][T11349] RAX: ffffffffffffffda RBX: 00007f5841de5fa0 RCX: 00007f5841b8efc9 [ 685.866013][T11349] RDX: 000000000000003a RSI: 0000200000000380 RDI: 0000000000000003 [ 685.866026][T11349] RBP: 00007f5842a9f090 R08: 0000000000000000 R09: 0000000000000000 [ 685.866040][T11349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 685.866053][T11349] R13: 00007f5841de6038 R14: 00007f5841de5fa0 R15: 00007ffd89e7a808 [ 685.866088][T11349] [ 686.174382][ T5941] usb 2-1: device descriptor read/64, error -71 [ 686.315664][T11359] netlink: 'syz.3.1750': attribute type 29 has an invalid length. [ 686.324692][T11361] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1750'. [ 686.341335][T11360] netlink: 'syz.3.1750': attribute type 29 has an invalid length. [ 686.354998][T11360] netlink: 'syz.3.1750': attribute type 29 has an invalid length. [ 686.371607][T11360] netlink: 'syz.3.1750': attribute type 29 has an invalid length. [ 686.400178][T11360] netlink: 'syz.3.1750': attribute type 29 has an invalid length. [ 686.408716][T11360] netlink: 'syz.3.1750': attribute type 29 has an invalid length. [ 686.418243][ T5941] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 686.434567][T11360] netlink: 'syz.3.1750': attribute type 29 has an invalid length. [ 686.448541][T11360] netlink: 'syz.3.1750': attribute type 29 has an invalid length. [ 686.462878][T11360] netlink: 'syz.3.1750': attribute type 29 has an invalid length. [ 686.548600][ T5941] usb 2-1: device descriptor read/64, error -71 [ 686.662044][ T5941] usb usb2-port1: attempt power cycle [ 686.888689][T11375] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1755'. [ 687.019459][ T5941] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 687.058503][ T5941] usb 2-1: device descriptor read/8, error -71 [ 687.297971][ T5941] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 687.328495][ T5941] usb 2-1: device descriptor read/8, error -71 [ 687.448451][ T5941] usb usb2-port1: unable to enumerate USB device [ 688.177380][ T5934] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 688.332824][ T5934] usb 1-1: Using ep0 maxpacket: 16 [ 688.345044][ T5934] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 688.356309][ T5934] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 688.369477][ T5934] usb 1-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 688.378844][ T5934] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.391151][ T5934] usb 1-1: config 0 descriptor?? [ 688.493123][T11409] blk_print_req_error: 54 callbacks suppressed [ 688.493176][T11409] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 688.509719][T11409] buffer_io_error: 54 callbacks suppressed [ 688.509738][T11409] Buffer I/O error on dev nbd1, logical block 0, async page read [ 688.524910][T11409] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 688.534422][T11409] Buffer I/O error on dev nbd1, logical block 1, async page read [ 688.542456][T11409] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 688.551876][T11409] Buffer I/O error on dev nbd1, logical block 2, async page read [ 688.560165][T11409] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 688.569622][T11409] Buffer I/O error on dev nbd1, logical block 3, async page read [ 688.577839][T11409] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 688.587637][T11409] Buffer I/O error on dev nbd1, logical block 0, async page read [ 688.595686][T11409] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 688.605381][T11409] Buffer I/O error on dev nbd1, logical block 1, async page read [ 688.613714][T11409] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 688.623111][T11409] Buffer I/O error on dev nbd1, logical block 2, async page read [ 688.632733][T11409] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 688.641969][T11409] Buffer I/O error on dev nbd1, logical block 3, async page read [ 688.650120][T11409] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 688.659307][T11409] Buffer I/O error on dev nbd1, logical block 0, async page read [ 688.667333][T11409] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 688.676443][T11409] Buffer I/O error on dev nbd1, logical block 1, async page read [ 688.687238][T11409] ldm_validate_partition_table(): Disk read failed. [ 688.695709][T11409] Dev nbd1: unable to read RDB block 0 [ 688.703564][T11409] nbd1: unable to read partition table [ 688.762281][T11412] ldm_validate_partition_table(): Disk read failed. [ 688.771472][T11412] Dev nbd1: unable to read RDB block 0 [ 688.779834][T11412] nbd1: unable to read partition table [ 688.789182][T11412] block nbd1: Cannot use ioctl interface on a netlink controlled device. [ 688.798223][T11412] block nbd1: Cannot use ioctl interface on a netlink controlled device. [ 688.843675][ T5934] input: HID 0458:5012 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5012.001C/input/input40 [ 688.956202][ T5934] input: HID 0458:5012 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5012.001C/input/input41 [ 689.021462][T11394] validate_nla: 17 callbacks suppressed [ 689.021483][T11394] netlink: 'syz.0.1760': attribute type 39 has an invalid length. [ 689.053187][ T5934] kye 0003:0458:5012.001C: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.0-1/input0 [ 689.269854][ T5941] usb 1-1: USB disconnect, device number 107 [ 689.600135][T11430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 689.614548][T11430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 689.619841][T11431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 689.631351][T11431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 689.878918][T11435] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 689.903653][T11435] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 690.000972][T11441] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1777'. [ 690.081082][T11445] FAULT_INJECTION: forcing a failure. [ 690.081082][T11445] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 690.095798][T11445] CPU: 0 UID: 0 PID: 11445 Comm: syz.1.1778 Not tainted syzkaller #0 PREEMPT(full) [ 690.095827][T11445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 690.095841][T11445] Call Trace: [ 690.095849][T11445] [ 690.095859][T11445] dump_stack_lvl+0x189/0x250 [ 690.095889][T11445] ? __pfx____ratelimit+0x10/0x10 [ 690.095916][T11445] ? __pfx_dump_stack_lvl+0x10/0x10 [ 690.095941][T11445] ? __pfx__printk+0x10/0x10 [ 690.095965][T11445] ? __might_fault+0xb0/0x130 [ 690.096005][T11445] should_fail_ex+0x414/0x560 [ 690.096040][T11445] _copy_from_user+0x2d/0xb0 [ 690.096065][T11445] ___sys_sendmsg+0x158/0x2a0 [ 690.096100][T11445] ? __pfx____sys_sendmsg+0x10/0x10 [ 690.096178][T11445] ? __might_fault+0xb0/0x130 [ 690.096209][T11445] __sys_sendmmsg+0x227/0x430 [ 690.096260][T11445] ? __pfx___sys_sendmmsg+0x10/0x10 [ 690.096300][T11445] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 690.096346][T11445] ? ksys_write+0x22a/0x250 [ 690.096371][T11445] ? __pfx_ksys_write+0x10/0x10 [ 690.096398][T11445] __x64_sys_sendmmsg+0xa0/0xc0 [ 690.096433][T11445] do_syscall_64+0xfa/0xfa0 [ 690.096459][T11445] ? lockdep_hardirqs_on+0x9c/0x150 [ 690.096486][T11445] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.096504][T11445] ? clear_bhb_loop+0x60/0xb0 [ 690.096524][T11445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.096540][T11445] RIP: 0033:0x7fe34278efc9 [ 690.096556][T11445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 690.096571][T11445] RSP: 002b:00007fe3436fb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 690.096590][T11445] RAX: ffffffffffffffda RBX: 00007fe3429e5fa0 RCX: 00007fe34278efc9 [ 690.096612][T11445] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003 [ 690.096623][T11445] RBP: 00007fe3436fb090 R08: 0000000000000000 R09: 0000000000000000 [ 690.096634][T11445] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000002 [ 690.096644][T11445] R13: 00007fe3429e6038 R14: 00007fe3429e5fa0 R15: 00007ffd3eb4db08 [ 690.096671][T11445] [ 690.388009][T11450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 690.410899][T11450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 690.665854][T11465] ldm_validate_partition_table(): Disk read failed. [ 690.689101][T11465] Dev nbd1: unable to read RDB block 0 [ 690.703099][T11465] nbd1: unable to read partition table [ 690.714301][T11465] block nbd1: Cannot use ioctl interface on a netlink controlled device. [ 690.723961][T11465] block nbd1: Cannot use ioctl interface on a netlink controlled device. [ 690.803162][ T52] block nbd2: Receive control failed (result -32) [ 690.803291][T11439] block nbd2: shutting down sockets [ 690.955623][T11475] FAULT_INJECTION: forcing a failure. [ 690.955623][T11475] name failslab, interval 1, probability 0, space 0, times 0 [ 690.975573][T11475] CPU: 1 UID: 0 PID: 11475 Comm: syz.1.1789 Not tainted syzkaller #0 PREEMPT(full) [ 690.975604][T11475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 690.975618][T11475] Call Trace: [ 690.975626][T11475] [ 690.975636][T11475] dump_stack_lvl+0x189/0x250 [ 690.975665][T11475] ? __pfx____ratelimit+0x10/0x10 [ 690.975692][T11475] ? __pfx_dump_stack_lvl+0x10/0x10 [ 690.975718][T11475] ? __pfx__printk+0x10/0x10 [ 690.975749][T11475] ? __ip_dev_find+0x451/0x4f0 [ 690.975769][T11475] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.975794][T11475] should_fail_ex+0x414/0x560 [ 690.975836][T11475] should_failslab+0xa8/0x100 [ 690.975860][T11475] kmem_cache_alloc_noprof+0x88/0x700 [ 690.975890][T11475] ? dst_alloc+0x105/0x170 [ 690.975917][T11475] dst_alloc+0x105/0x170 [ 690.975936][T11475] ? ip_check_mc_rcu+0x4c7/0x680 [ 690.975962][T11475] ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 690.975999][T11475] ? ip_route_output_key_hash+0xc1/0x280 [ 690.976026][T11475] ip_route_output_key_hash+0x174/0x280 [ 690.976051][T11475] ? __lock_acquire+0xab9/0xd20 [ 690.976084][T11475] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 690.976128][T11475] ip_route_output_flow+0x2a/0x150 [ 690.976149][T11475] ? security_sk_classify_flow+0x70/0x180 [ 690.976190][T11475] udp_sendmsg+0x142e/0x2170 [ 690.976233][T11475] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 690.976263][T11475] ? __pfx_udp_sendmsg+0x10/0x10 [ 690.976288][T11475] ? do_wp_page+0x22eb/0x5800 [ 690.976348][T11475] ? __pfx_aa_sk_perm+0x10/0x10 [ 690.976370][T11475] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 690.976401][T11475] ? sock_rps_record_flow+0x19/0x410 [ 690.976433][T11475] ? inet_sendmsg+0x29c/0x370 [ 690.976460][T11475] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 690.976484][T11475] __sock_sendmsg+0x19c/0x270 [ 690.976512][T11475] ____sys_sendmsg+0x52d/0x830 [ 690.976550][T11475] ? __pfx_____sys_sendmsg+0x10/0x10 [ 690.976592][T11475] ? import_iovec+0x74/0xa0 [ 690.976619][T11475] ___sys_sendmsg+0x21f/0x2a0 [ 690.976654][T11475] ? __pfx____sys_sendmsg+0x10/0x10 [ 690.976733][T11475] ? __might_fault+0xb0/0x130 [ 690.976765][T11475] __sys_sendmmsg+0x227/0x430 [ 690.976802][T11475] ? __pfx___sys_sendmmsg+0x10/0x10 [ 690.976844][T11475] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 690.976908][T11475] __x64_sys_sendmmsg+0xa0/0xc0 [ 690.976955][T11475] do_syscall_64+0xfa/0xfa0 [ 690.976980][T11475] ? lockdep_hardirqs_on+0x9c/0x150 [ 690.977006][T11475] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.977025][T11475] ? clear_bhb_loop+0x60/0xb0 [ 690.977050][T11475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.977070][T11475] RIP: 0033:0x7fe34278efc9 [ 690.977089][T11475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 690.977106][T11475] RSP: 002b:00007fe3436fb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 690.977128][T11475] RAX: ffffffffffffffda RBX: 00007fe3429e5fa0 RCX: 00007fe34278efc9 [ 690.977144][T11475] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003 [ 690.977164][T11475] RBP: 00007fe3436fb090 R08: 0000000000000000 R09: 0000000000000000 [ 690.977178][T11475] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000002 [ 690.977191][T11475] R13: 00007fe3429e6038 R14: 00007fe3429e5fa0 R15: 00007ffd3eb4db08 [ 690.977225][T11475] [ 691.042076][T11477] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1790'. [ 691.208835][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.221924][T11477] ksmbd: Unknown IPC event: 3, ignore. [ 691.224000][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.481073][T11490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.497186][T11490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.522753][T11490] IPVS: set_ctl: invalid protocol: 46 224.0.0.2:20001 [ 691.561744][T11493] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 691.573211][T11493] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 691.885518][ T5934] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 692.035518][ T5934] usb 1-1: Using ep0 maxpacket: 32 [ 692.035783][ T981] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 692.047328][ T5934] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 692.074682][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.083522][ T5934] usb 1-1: Product: syz [ 692.088384][ T5934] usb 1-1: Manufacturer: syz [ 692.093070][ T5934] usb 1-1: SerialNumber: syz [ 692.101440][ T5934] usb 1-1: config 0 descriptor?? [ 692.133238][ T5934] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 692.165523][T11504] block nbd3: Device being setup by another task [ 692.215386][ T981] usb 2-1: Using ep0 maxpacket: 16 [ 692.222424][ T981] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 692.233188][ T981] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.244401][ T981] usb 2-1: config 0 descriptor?? [ 692.257222][ T981] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 692.297215][T11506] syzkaller1: entered promiscuous mode [ 692.302771][T11506] syzkaller1: entered allmulticast mode [ 692.544876][T11508] FAULT_INJECTION: forcing a failure. [ 692.544876][T11508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 692.558725][T11508] CPU: 0 UID: 0 PID: 11508 Comm: syz.3.1800 Not tainted syzkaller #0 PREEMPT(full) [ 692.558760][T11508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 692.558773][T11508] Call Trace: [ 692.558782][T11508] [ 692.558792][T11508] dump_stack_lvl+0x189/0x250 [ 692.558822][T11508] ? __pfx____ratelimit+0x10/0x10 [ 692.558857][T11508] ? __pfx_dump_stack_lvl+0x10/0x10 [ 692.558882][T11508] ? __pfx__printk+0x10/0x10 [ 692.558906][T11508] ? __might_fault+0xb0/0x130 [ 692.558947][T11508] should_fail_ex+0x414/0x560 [ 692.558981][T11508] _copy_from_user+0x2d/0xb0 [ 692.559006][T11508] ___sys_sendmsg+0x158/0x2a0 [ 692.559041][T11508] ? __pfx____sys_sendmsg+0x10/0x10 [ 692.559119][T11508] ? __might_fault+0xb0/0x130 [ 692.559151][T11508] __sys_sendmmsg+0x227/0x430 [ 692.559189][T11508] ? __pfx___sys_sendmmsg+0x10/0x10 [ 692.559231][T11508] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 692.559279][T11508] ? ksys_write+0x22a/0x250 [ 692.559304][T11508] ? __pfx_ksys_write+0x10/0x10 [ 692.559334][T11508] __x64_sys_sendmmsg+0xa0/0xc0 [ 692.559367][T11508] do_syscall_64+0xfa/0xfa0 [ 692.559394][T11508] ? lockdep_hardirqs_on+0x9c/0x150 [ 692.559421][T11508] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.559442][T11508] ? clear_bhb_loop+0x60/0xb0 [ 692.559467][T11508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.559488][T11508] RIP: 0033:0x7f5841b8efc9 [ 692.559507][T11508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 692.559526][T11508] RSP: 002b:00007f5842a9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 692.559549][T11508] RAX: ffffffffffffffda RBX: 00007f5841de5fa0 RCX: 00007f5841b8efc9 [ 692.559565][T11508] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003 [ 692.559578][T11508] RBP: 00007f5842a9f090 R08: 0000000000000000 R09: 0000000000000000 [ 692.559592][T11508] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000002 [ 692.559605][T11508] R13: 00007f5841de6038 R14: 00007f5841de5fa0 R15: 00007ffd89e7a808 [ 692.559641][T11508] [ 693.384952][T11497] vivid-000: ================= START STATUS ================= [ 693.403485][T11497] vivid-000: Enable Output Cropping: true [ 693.410328][T11497] vivid-000: Enable Output Composing: true [ 693.417699][T11497] vivid-000: Enable Output Scaler: true [ 693.423385][T11497] vivid-000: Tx RGB Quantization Range: Automatic [ 693.431024][T11497] vivid-000: Transmit Mode: HDMI [ 693.440217][T11497] vivid-000: Hotplug Present: 0x00000000 [ 693.447439][T11497] vivid-000: RxSense Present: 0x00000000 [ 693.453223][T11497] vivid-000: EDID Present: 0x00000000 [ 693.458816][T11497] vivid-000: ================== END STATUS ================== [ 693.514816][T11526] block nbd3: Device being setup by another task [ 693.649531][ T5934] gspca_topro: reg_r err -71 [ 693.654324][ T5934] gspca_topro: Sensor soi763a [ 693.677488][ T5934] usb 1-1: USB disconnect, device number 108 [ 693.869823][T11536] block nbd3: Device being setup by another task [ 694.218691][T11544] fuse: Unknown parameter '' [ 694.276983][T11545] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1809'. [ 694.320849][T11545] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.417365][T11545] bridge_slave_0 (unregistering): left allmulticast mode [ 694.425295][T11545] bridge_slave_0 (unregistering): left promiscuous mode [ 694.432898][T11545] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.801239][ T981] gspca_sonixj: reg_w1 err -71 [ 694.808522][ T981] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 694.819238][ T981] usb 2-1: USB disconnect, device number 116 [ 695.424141][ T5934] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 695.463415][T11569] netlink: 536 bytes leftover after parsing attributes in process `syz.3.1818'. [ 695.473170][T11569] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1818'. [ 695.486480][T11569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 695.495757][T11569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 695.603589][ T5883] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 695.753753][ T5883] usb 2-1: device descriptor read/64, error -71 [ 695.857149][ T52] block nbd2: Receive control failed (result -32) [ 695.857675][T11559] block nbd2: shutting down sockets [ 695.930885][T11571] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 695.969407][T11573] overlay: Unknown parameter '/' [ 695.993557][ T5883] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 696.076464][T11580] usb usb8: usbfs: process 11580 (syz.3.1822) did not claim interface 0 before use [ 696.126878][ T5883] usb 2-1: device descriptor read/64, error -71 [ 696.207361][T11585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 696.217527][T11585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 696.247402][ T5883] usb usb2-port1: attempt power cycle [ 696.593454][ T5883] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 696.614051][ T5883] usb 2-1: device descriptor read/8, error -71 [ 696.653502][ T5856] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 696.813578][ T5856] usb 1-1: Using ep0 maxpacket: 16 [ 696.820714][ T5856] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 696.830079][ T5856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.841094][ T5856] usb 1-1: config 0 descriptor?? [ 696.852068][ T5856] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 696.853515][ T5883] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 696.881493][T11594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 696.885478][ T5883] usb 2-1: device descriptor read/8, error -71 [ 696.890891][T11594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 697.003729][ T5883] usb usb2-port1: unable to enumerate USB device [ 697.043314][T11599] block nbd3: Device being setup by another task [ 697.143418][T11602] block nbd3: Device being setup by another task [ 697.160290][T11602] syzkaller1: entered promiscuous mode [ 697.166051][T11602] syzkaller1: entered allmulticast mode [ 697.422302][T11614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.432453][T11614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 698.467091][T11627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 698.478302][T11627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 698.486566][T11629] blk_print_req_error: 182 callbacks suppressed [ 698.486612][T11629] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 698.502469][T11629] buffer_io_error: 182 callbacks suppressed [ 698.502516][T11629] Buffer I/O error on dev nbd1, logical block 0, async page read [ 698.516881][T11629] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 698.526237][T11629] Buffer I/O error on dev nbd1, logical block 1, async page read [ 698.534278][T11629] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 698.544608][T11629] Buffer I/O error on dev nbd1, logical block 2, async page read [ 698.552634][T11629] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 698.564977][T11629] Buffer I/O error on dev nbd1, logical block 3, async page read [ 698.573697][T11629] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 698.583111][T11629] Buffer I/O error on dev nbd1, logical block 0, async page read [ 698.591832][T11629] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 698.601530][T11629] Buffer I/O error on dev nbd1, logical block 1, async page read [ 698.610166][T11629] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 698.619571][T11629] Buffer I/O error on dev nbd1, logical block 2, async page read [ 698.627721][T11629] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 698.637807][T11629] Buffer I/O error on dev nbd1, logical block 3, async page read [ 698.647048][T11629] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 698.656530][T11629] Buffer I/O error on dev nbd1, logical block 0, async page read [ 698.664738][T11629] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 698.674588][T11629] Buffer I/O error on dev nbd1, logical block 1, async page read [ 698.685654][T11629] ldm_validate_partition_table(): Disk read failed. [ 698.695417][T11629] Dev nbd1: unable to read RDB block 0 [ 698.703607][T11629] nbd1: unable to read partition table [ 698.768489][T11632] ldm_validate_partition_table(): Disk read failed. [ 698.777550][T11632] Dev nbd1: unable to read RDB block 0 [ 698.785180][T11632] nbd1: unable to read partition table [ 698.794863][T11632] block nbd1: Cannot use ioctl interface on a netlink controlled device. [ 698.805445][T11632] block nbd1: Cannot use ioctl interface on a netlink controlled device. [ 699.113361][ T5941] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 699.229182][T11649] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1844'. [ 699.262649][T11649] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1844'. [ 699.275845][ T5941] usb 2-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 699.288643][ T5856] gspca_sonixj: reg_w1 err -71 [ 699.293760][ T5856] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 699.312651][ T5941] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 699.326168][ T5856] usb 1-1: USB disconnect, device number 110 [ 699.335097][ T5941] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 699.359926][ T5941] usb 2-1: config 0 interface 0 has no altsetting 0 [ 699.374090][ T5941] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 699.390801][ T5941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.410957][ T5941] usb 2-1: config 0 descriptor?? [ 699.461299][T11654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.472399][T11654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 699.832845][T11634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.842681][T11634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 699.859513][T11659] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 699.871110][T11659] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 699.878857][ T30] audit: type=1326 audit(2000000003.790:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11633 comm="syz.1.1839" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe34278efc9 code=0x0 [ 699.945483][T11662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.956758][T11662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 699.961486][T11664] netlink: 'syz.0.1848': attribute type 4 has an invalid length. [ 699.992879][T11664] netlink: 'syz.0.1848': attribute type 4 has an invalid length. [ 699.993880][ T5941] hid-multitouch 0003:0EEF:72C4.001D: hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.1-1/input0 [ 700.100018][T11668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.111511][T11668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.299306][ T52] block nbd2: Receive control failed (result -32) [ 700.299592][T11656] block nbd2: shutting down sockets [ 700.568423][T11688] sctp: [Deprecated]: syz.2.1854 (pid 11688) Use of struct sctp_assoc_value in delayed_ack socket option. [ 700.568423][T11688] Use struct sctp_sack_info instead [ 700.686550][T11694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.697342][T11694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 701.323191][ T981] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 701.474350][ T981] usb 1-1: Using ep0 maxpacket: 16 [ 701.481427][ T981] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 701.503077][ T981] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 701.503135][T11705] block nbd3: Device being setup by another task [ 701.533063][ T981] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 701.542785][ T981] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 701.573056][ T981] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 701.594261][ T981] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 701.613060][ T981] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 701.621115][ T981] usb 1-1: Manufacturer: syz [ 701.645943][ T981] usb 1-1: config 0 descriptor?? [ 701.949886][ T5949] usb 2-1: USB disconnect, device number 121 [ 701.963068][ T981] rc_core: IR keymap rc-hauppauge not found [ 701.969033][ T981] Registered IR keymap rc-empty [ 701.982431][ T981] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 702.000206][T11719] FAULT_INJECTION: forcing a failure. [ 702.000206][T11719] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 702.015549][T11719] CPU: 0 UID: 0 PID: 11719 Comm: syz.3.1863 Not tainted syzkaller #0 PREEMPT(full) [ 702.015578][T11719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 702.015592][T11719] Call Trace: [ 702.015601][T11719] [ 702.015611][T11719] dump_stack_lvl+0x189/0x250 [ 702.015641][T11719] ? __pfx____ratelimit+0x10/0x10 [ 702.015668][T11719] ? __pfx_dump_stack_lvl+0x10/0x10 [ 702.015694][T11719] ? __pfx__printk+0x10/0x10 [ 702.015718][T11719] ? __might_fault+0xb0/0x130 [ 702.015773][T11719] should_fail_ex+0x414/0x560 [ 702.015829][T11719] _copy_from_user+0x2d/0xb0 [ 702.015854][T11719] ___sys_sendmsg+0x158/0x2a0 [ 702.015888][T11719] ? __pfx____sys_sendmsg+0x10/0x10 [ 702.015963][T11719] ? __might_fault+0xb0/0x130 [ 702.015996][T11719] __sys_sendmmsg+0x227/0x430 [ 702.016032][T11719] ? __pfx___sys_sendmmsg+0x10/0x10 [ 702.016078][T11719] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 702.016126][T11719] ? ksys_write+0x22a/0x250 [ 702.016150][T11719] ? __pfx_ksys_write+0x10/0x10 [ 702.016177][T11719] __x64_sys_sendmmsg+0xa0/0xc0 [ 702.016210][T11719] do_syscall_64+0xfa/0xfa0 [ 702.016231][ T981] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 702.016235][T11719] ? lockdep_hardirqs_on+0x9c/0x150 [ 702.016262][T11719] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.016282][T11719] ? clear_bhb_loop+0x60/0xb0 [ 702.016302][T11719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.016324][T11719] RIP: 0033:0x7f5841b8efc9 [ 702.016348][T11719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 702.016369][T11719] RSP: 002b:00007f5842a9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 702.016397][T11719] RAX: ffffffffffffffda RBX: 00007f5841de5fa0 RCX: 00007f5841b8efc9 [ 702.016415][T11719] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003 [ 702.016430][T11719] RBP: 00007f5842a9f090 R08: 0000000000000000 R09: 0000000000000000 [ 702.016445][T11719] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000002 [ 702.016461][T11719] R13: 00007f5841de6038 R14: 00007f5841de5fa0 R15: 00007ffd89e7a808 [ 702.016499][T11719] [ 702.133844][T11725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.134282][T11725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.274392][ T981] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 702.288406][ T981] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input42 [ 702.307507][ T981] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 702.333499][ T981] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 702.353282][ T981] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 702.373656][ T981] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 702.393201][ T981] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 702.413689][ T981] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 702.415721][T11732] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 702.431760][T11732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.435239][ T981] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 702.440985][T11732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.456573][T11732] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 702.463243][ T981] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 702.493253][ T981] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 702.513317][ T981] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 702.533682][ T981] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 702.555575][ T981] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 90 [ 702.565143][ T981] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 702.664481][ T5949] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 702.695475][T11735] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1867'. [ 702.749834][T11737] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1868'. [ 702.823044][ T5949] usb 2-1: Using ep0 maxpacket: 16 [ 702.829782][ T5949] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 702.833097][T11740] block nbd3: Device being setup by another task [ 702.839335][ T5949] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.858429][ T5949] usb 2-1: config 0 descriptor?? [ 702.868870][ T5949] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 702.922650][T11742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.931706][T11742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.942073][T11742] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1870'. [ 704.101795][ T5883] usb 1-1: USB disconnect, device number 111 [ 704.562969][ T981] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 704.703042][ T981] usb 1-1: device descriptor read/64, error -71 [ 704.955052][ T981] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 705.032919][ T5881] Bluetooth: hci2: command 0x0405 tx timeout [ 705.093028][ T981] usb 1-1: device descriptor read/64, error -71 [ 705.203474][ T981] usb usb1-port1: attempt power cycle [ 705.282048][ T5949] gspca_sonixj: reg_w1 err -71 [ 705.287237][ T5949] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 705.297667][ T5949] usb 2-1: USB disconnect, device number 122 [ 705.542864][ T981] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 705.563251][ T981] usb 1-1: device descriptor read/8, error -71 [ 705.822931][ T981] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 705.853496][ T981] usb 1-1: device descriptor read/8, error -71 [ 705.934664][ T30] audit: type=1326 audit(2000000009.850:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11752 comm="syz.1.1874" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe34278efc9 code=0x0 [ 705.963246][ T981] usb usb1-port1: unable to enumerate USB device [ 705.991820][ T30] audit: type=1326 audit(2000000009.900:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11752 comm="syz.1.1874" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe34278efc9 code=0x0 [ 706.068167][T11759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 706.077212][T11759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 706.823606][T11764] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1877'. [ 706.897785][T11767] block nbd3: Device being setup by another task [ 707.036837][T11774] block nbd3: Device being setup by another task [ 707.112745][ T5881] Bluetooth: hci2: command 0x0405 tx timeout [ 708.065037][T11797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1887'. [ 708.232491][T11806] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 708.245144][T11806] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 708.275998][T11805] block nbd3: Device being setup by another task [ 708.326998][T11812] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 708.339561][T11809] netlink: 'syz.2.1891': attribute type 1 has an invalid length. [ 708.422516][T11817] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 708.469792][T11820] TCP: TCP_TX_DELAY enabled [ 708.489812][T11820] comedi comedi2: dmm32at: I/O port conflict (0x4,16) [ 708.498474][T11820] comedi comedi2: comedi_config --init_data is deprecated [ 709.100465][T11829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 709.109487][T11829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 709.132684][ T5949] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 709.285922][ T5949] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 709.295230][ T5949] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.304468][ T5949] usb 2-1: Product: syz [ 709.308684][ T5949] usb 2-1: Manufacturer: syz [ 709.313861][ T5949] usb 2-1: SerialNumber: syz [ 709.534944][T11827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 709.545172][T11827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 709.666367][T11840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 709.677661][T11840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 709.687326][T11840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 709.696686][T11840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 709.760581][T11843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 709.778108][T11844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 709.778833][T11843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 709.791125][T11844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 709.874963][T11847] block nbd3: Device being setup by another task [ 709.982757][T11849] block nbd3: Device being setup by another task [ 710.365446][ T5949] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 710.608011][ T5949] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 710.658677][ T5949] usb 2-1: USB disconnect, device number 123 [ 710.691849][ T5949] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 711.004084][T11870] overlay: ./file0 is not a directory [ 711.013302][ T5881] Bluetooth: hci2: unexpected Set CIG Parameters response data [ 711.022289][ T5881] Bluetooth: hci2: unexpected event for opcode 0x2062 [ 711.482834][ T5949] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 711.549817][T11884] netlink: 'syz.2.1911': attribute type 6 has an invalid length. [ 711.666930][ T5949] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 711.681838][ T5949] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 711.711120][ T5949] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 711.733312][T11887] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1912'. [ 711.757278][ T5949] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 711.766694][ T5949] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.782513][ T5949] usb 1-1: Product: syz [ 711.786897][ T5949] usb 1-1: Manufacturer: syz [ 711.791610][ T5949] usb 1-1: SerialNumber: syz [ 711.830241][ T5949] usb 1-1: config 0 descriptor?? [ 711.855759][T11875] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 711.874594][T11875] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 711.889785][ T5949] usb 1-1: ucan: probing device on interface #0 [ 712.528314][ T5949] ucan 1-1:0.0 can0: registered device [ 712.604442][T11908] block nbd2: shutting down sockets [ 712.711846][T11875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 712.727559][T11875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 712.745000][T11875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 712.753364][T11911] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 712.783104][T11875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 712.804091][ T5949] ucan 1-1:0.0 can0: firmware string: unknown [ 713.282544][ T5934] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 713.443835][ T5934] usb 2-1: Using ep0 maxpacket: 32 [ 713.467058][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 713.484120][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 713.504695][ T5934] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 713.522466][ T5934] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 713.531762][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.560165][ T5934] usb 2-1: config 0 descriptor?? [ 713.716451][ T5493] ucan 1-1:0.0 can0: bit-timing not yet defined [ 713.928059][ T5493] ucan 1-1:0.0 can0: could not stop device, code: -71 [ 713.929402][ T5883] usb 1-1: USB disconnect, device number 116 [ 713.963264][ T5493] ucan 1-1:0.0 can0: could not reset device, code: -19 [ 714.127693][ T5934] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.001E/input/input44 [ 714.222915][ T5918] usb 4-1: USB disconnect, device number 20 [ 714.307560][ T5934] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.001E/input/input45 [ 714.359970][T11944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 714.370106][T11944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 714.407610][T11944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 714.423659][T11944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 714.455829][ T5934] kye 0003:0458:5011.001E: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 714.530515][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 714.565991][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 714.592460][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 714.623739][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 714.632978][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 714.883462][T11954] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 714.889980][T11954] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 714.912532][T11954] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 714.970614][T11954] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 715.023100][ T5934] usb 2-1: USB disconnect, device number 124 [ 715.037758][T11954] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 715.046838][ T5881] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 715.061741][ T5881] Bluetooth: hci2: Injecting HCI hardware error event [ 715.062559][T11954] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 715.071908][ T5881] Bluetooth: hci2: hardware error 0x00 [ 715.118798][T11954] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 715.171002][T11954] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 715.192325][T11954] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 715.202750][T11954] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 715.216582][T11954] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 715.232120][T11954] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 715.247213][T11954] comedi comedi3: 8255: I/O port conflict (0xe,4) [ 715.272399][T11954] comedi comedi3: 8255: I/O port conflict (0xffffffff8000008b,4) [ 715.280255][T11954] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 715.332790][T11954] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 715.339320][T11954] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 715.379098][T11954] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 715.422452][T11954] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 715.515733][T11966] blk_print_req_error: 118 callbacks suppressed [ 715.515758][T11966] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 715.594552][T11966] buffer_io_error: 118 callbacks suppressed [ 715.594575][T11966] Buffer I/O error on dev nbd1, logical block 0, async page read [ 715.639086][T11966] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 715.666980][T11969] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1928'. [ 715.690491][T11966] Buffer I/O error on dev nbd1, logical block 1, async page read [ 715.709114][T11966] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 715.722352][T11966] Buffer I/O error on dev nbd1, logical block 2, async page read [ 715.763834][T11966] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 715.773138][T11966] Buffer I/O error on dev nbd1, logical block 3, async page read [ 715.781866][T11966] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 715.810456][T11966] Buffer I/O error on dev nbd1, logical block 0, async page read [ 715.820520][T11966] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 715.838018][T11966] Buffer I/O error on dev nbd1, logical block 1, async page read [ 715.846222][T11966] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 715.855416][T11966] Buffer I/O error on dev nbd1, logical block 2, async page read [ 715.863509][T11966] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 716.054185][T11966] Buffer I/O error on dev nbd1, logical block 3, async page read [ 716.083727][T11966] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 716.109205][T11966] Buffer I/O error on dev nbd1, logical block 0, async page read [ 716.131924][T11948] chnl_net:caif_netlink_parms(): no params data found [ 716.157493][T11966] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 716.184023][T11966] Buffer I/O error on dev nbd1, logical block 1, async page read [ 716.236336][T11966] ldm_validate_partition_table(): Disk read failed. [ 716.256051][T11966] Dev nbd1: unable to read RDB block 0 [ 716.274956][T11966] nbd1: unable to read partition table [ 716.279984][T11988] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 716.297619][T11971] ldm_validate_partition_table(): Disk read failed. [ 716.317916][T11971] Dev nbd1: unable to read RDB block 0 [ 716.320822][T11988] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 716.336386][T11971] nbd1: unable to read partition table [ 716.399342][ T5198] ldm_validate_partition_table(): Disk read failed. [ 716.441591][ T5198] Dev nbd1: unable to read RDB block 0 [ 716.455877][ T5198] nbd1: unable to read partition table [ 716.473463][T11996] overlayfs: overlapping lowerdir path [ 716.491455][ T5198] ldm_validate_partition_table(): Disk read failed. [ 716.531057][ T5198] Dev nbd1: unable to read RDB block 0 [ 716.555120][T11948] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.558206][ T5198] nbd1: unable to read partition table [ 716.572648][T11948] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.580134][T11948] bridge_slave_0: entered allmulticast mode [ 716.590021][T11948] bridge_slave_0: entered promiscuous mode [ 716.607281][T11948] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.622709][T11948] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.630243][T11948] bridge_slave_1: entered allmulticast mode [ 716.648033][T11948] bridge_slave_1: entered promiscuous mode [ 716.664189][ T6024] ldm_validate_partition_table(): Disk read failed. [ 716.673961][ T6024] Dev nbd1: unable to read RDB block 0 [ 716.682515][ T6024] nbd1: unable to read partition table [ 716.710185][ T6024] ldm_validate_partition_table(): Disk read failed. [ 716.717090][ T52] Bluetooth: hci4: command tx timeout [ 716.749712][ T6024] Dev nbd1: unable to read RDB block 0 [ 716.762043][ T6024] nbd1: unable to read partition table [ 716.795612][ T5949] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 716.823844][T11948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 716.834335][T12004] ------------[ cut here ]------------ [ 716.840596][T12004] intf 08:02:11:00:00:00 [link=0]: bad STA 08:02:11:00:00:01 bandwidth 20 MHz (0) > channel config 10 MHz (7) [ 716.865154][T11948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 716.883937][T12004] WARNING: drivers/net/wireless/virtual/mac80211_hwsim.c:2690 at mac80211_hwsim_sta_rc_update+0x6f5/0x860, CPU#0: syz.2.1934/12004 [ 716.897722][T12004] Modules linked in: [ 716.902539][T12004] CPU: 0 UID: 0 PID: 12004 Comm: syz.2.1934 Not tainted syzkaller #0 PREEMPT(full) [ 716.911957][T12004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 716.922222][T12004] RIP: 0010:mac80211_hwsim_sta_rc_update+0x6f5/0x860 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 716.928960][T12004] Code: b1 20 00 00 48 c7 c7 00 c8 2c 8c 48 8b 74 24 28 89 ea 48 8b 4c 24 10 41 89 d8 45 89 f9 41 56 50 e8 00 4a b0 fa 48 83 c4 10 90 <0f> 0b 90 90 e9 0c ff ff ff e8 8d 48 ed fa 90 0f 0b 90 e9 fe fe ff [ 716.948985][T12004] RSP: 0018:ffffc90004706e40 EFLAGS: 00010282 [ 716.955245][T12004] RAX: 8af5e86ba040d700 RBX: 0000000000000014 RCX: 0000000000080000 [ 716.963732][T12004] RDX: ffffc9000c1fc000 RSI: 00000000000092f1 RDI: 00000000000092f2 [ 716.971751][T12004] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 716.980092][T12004] R10: dffffc0000000000 R11: fffffbfff1c3a6c8 R12: 0000000000000000 [ 716.988436][T12004] R13: dffffc0000000000 R14: 0000000000000007 R15: 0000000000000000 [ 716.992178][ T5949] usb 2-1: Using ep0 maxpacket: 16 [ 716.996550][T12004] FS: 00007ff7529d66c0(0000) GS:ffff8881258a6000(0000) knlGS:0000000000000000 [ 717.010645][T12004] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 717.017631][T12004] CR2: 0000200000001080 CR3: 000000007c354000 CR4: 00000000003526f0 [ 717.025735][T12004] Call Trace: [ 717.027452][ T5949] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 717.029046][T12004] [ 717.045353][T12004] ? mac80211_hwsim_sta_rc_update+0x73/0x860 [ 717.051681][T12004] mac80211_hwsim_sta_add+0xa3/0x310 [ 717.057105][T12004] drv_sta_state+0x8c1/0x1840 [ 717.061842][T12004] sta_info_insert_rcu+0x1a30/0x2840 [ 717.067260][T12004] ? sta_info_insert_rcu+0x349/0x2840 [ 717.072820][T12004] ? __pfx_sta_info_insert_rcu+0x10/0x10 [ 717.078503][T12004] ? rate_control_rate_init_all_links+0x186/0x1a0 [ 717.085379][T12004] ? ieee80211_add_station+0x4f1/0x6a0 [ 717.090901][T12004] sta_info_insert+0x16/0xc0 [ 717.095595][T12004] rdev_add_station+0x108/0x290 [ 717.100588][T12004] nl80211_new_station+0x1755/0x1b70 [ 717.106057][T12004] ? __pfx_nl80211_new_station+0x10/0x10 [ 717.111734][T12004] ? netlink_rcv_skb+0x208/0x470 [ 717.116792][T12004] ? nl80211_pre_doit+0x4d5/0x8e0 [ 717.121876][T12004] genl_family_rcv_msg_doit+0x215/0x300 [ 717.127552][T12004] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 717.133822][T12004] ? bpf_lsm_capable+0x9/0x20 [ 717.138543][T12004] ? security_capable+0x7e/0x2e0 [ 717.143611][T12004] genl_rcv_msg+0x60e/0x790 [ 717.148176][T12004] ? __pfx_genl_rcv_msg+0x10/0x10 [ 717.153586][T12004] ? ref_tracker_free+0x63a/0x7d0 [ 717.158666][T12004] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 717.164155][T12004] ? __pfx_nl80211_new_station+0x10/0x10 [ 717.169831][T12004] ? __pfx_nl80211_post_doit+0x10/0x10 [ 717.175398][T12004] ? ____sys_sendmsg+0x505/0x830 [ 717.180381][T12004] ? ___sys_sendmsg+0x21f/0x2a0 [ 717.185411][T12004] ? __x64_sys_sendmsg+0x19b/0x260 [ 717.190569][T12004] ? do_syscall_64+0xfa/0xfa0 [ 717.195413][T12004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.201532][T12004] netlink_rcv_skb+0x208/0x470 [ 717.205593][ T5881] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 717.206418][T12004] ? __lock_acquire+0xab9/0xd20 [ 717.217883][T12004] ? __pfx_genl_rcv_msg+0x10/0x10 [ 717.223131][T12004] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 717.228493][T12004] ? down_read+0x1ad/0x2e0 [ 717.233031][T12004] genl_rcv+0x28/0x40 [ 717.236696][ T5949] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 717.237047][T12004] netlink_unicast+0x82f/0x9e0 [ 717.253136][T12004] ? __pfx_netlink_unicast+0x10/0x10 [ 717.258484][T12004] ? netlink_sendmsg+0x642/0xb30 [ 717.263572][T12004] ? skb_put+0x11b/0x210 [ 717.265657][ T5949] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 717.267881][T12004] netlink_sendmsg+0x805/0xb30 [ 717.281856][T12004] ? __pfx_netlink_sendmsg+0x10/0x10 [ 717.287179][ T5949] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.287208][ T5949] usb 2-1: Product: syz [ 717.287224][ T5949] usb 2-1: Manufacturer: syz [ 717.287241][ T5949] usb 2-1: SerialNumber: syz [ 717.295465][T12004] ? aa_sock_msg_perm+0xf1/0x1d0 [ 717.314311][T12004] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 717.319647][T12004] ? __pfx_netlink_sendmsg+0x10/0x10 [ 717.325069][T12004] __sock_sendmsg+0x21c/0x270 [ 717.329808][T12004] ____sys_sendmsg+0x505/0x830 [ 717.334689][T12004] ? __pfx_____sys_sendmsg+0x10/0x10 [ 717.340052][T12004] ? import_iovec+0x74/0xa0 [ 717.344692][T12004] ___sys_sendmsg+0x21f/0x2a0 [ 717.349438][T12004] ? __pfx____sys_sendmsg+0x10/0x10 [ 717.355055][T12004] ? __fget_files+0x2a/0x420 [ 717.359700][T12004] ? __fget_files+0x3a0/0x420 [ 717.364526][T12004] __x64_sys_sendmsg+0x19b/0x260 [ 717.369524][T12004] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 717.375308][T12004] ? do_syscall_64+0xbe/0xfa0 [ 717.378361][ T5949] usb 2-1: config 0 descriptor?? [ 717.380031][T12004] do_syscall_64+0xfa/0xfa0 [ 717.389674][T12004] ? lockdep_hardirqs_on+0x9c/0x150 [ 717.394975][T12004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.401086][T12004] ? clear_bhb_loop+0x60/0xb0 [ 717.405930][T12004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.411860][T12004] RIP: 0033:0x7ff751b8efc9 [ 717.416392][T12004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 717.422722][ T5949] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 717.436204][T12004] RSP: 002b:00007ff7529d6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 717.436240][T12004] RAX: ffffffffffffffda RBX: 00007ff751de5fa0 RCX: 00007ff751b8efc9 [ 717.436259][T12004] RDX: 0000000000000112 RSI: 0000200000001080 RDI: 0000000000000005 [ 717.436276][T12004] RBP: 00007ff751c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 717.436292][T12004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 717.436308][T12004] R13: 00007ff751de6038 R14: 00007ff751de5fa0 R15: 00007ffd8fd6f5c8 [ 717.436348][T12004] [ 717.436379][T12004] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 717.436397][T12004] CPU: 0 UID: 0 PID: 12004 Comm: syz.2.1934 Not tainted syzkaller #0 PREEMPT(full) [ 717.436423][T12004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 717.436434][T12004] Call Trace: [ 717.436442][T12004] [ 717.436451][T12004] dump_stack_lvl+0x99/0x250 [ 717.436476][T12004] ? __asan_memcpy+0x40/0x70 [ 717.436501][T12004] ? __pfx_dump_stack_lvl+0x10/0x10 [ 717.436522][T12004] ? __pfx__printk+0x10/0x10 [ 717.436552][T12004] vpanic+0x237/0x6d0 [ 717.436568][T12004] ? __pfx_vpanic+0x10/0x10 [ 717.436581][T12004] ? is_bpf_text_address+0x292/0x2b0 [ 717.436600][T12004] ? is_bpf_text_address+0x26/0x2b0 [ 717.436625][T12004] panic+0xb9/0xc0 [ 717.436639][T12004] ? __pfx_panic+0x10/0x10 [ 717.436679][T12004] __warn+0x334/0x4c0 [ 717.436693][T12004] ? mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 717.436719][T12004] ? mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 717.436741][T12004] report_bug+0x2be/0x4f0 [ 717.436762][T12004] ? mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 717.436785][T12004] ? mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 717.436807][T12004] ? mac80211_hwsim_sta_rc_update+0x6f7/0x860 [ 717.436828][T12004] handle_bug+0x84/0x160 [ 717.436855][T12004] exc_invalid_op+0x1a/0x50 [ 717.436881][T12004] asm_exc_invalid_op+0x1a/0x20 [ 717.436897][T12004] RIP: 0010:mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 717.436921][T12004] Code: b1 20 00 00 48 c7 c7 00 c8 2c 8c 48 8b 74 24 28 89 ea 48 8b 4c 24 10 41 89 d8 45 89 f9 41 56 50 e8 00 4a b0 fa 48 83 c4 10 90 <0f> 0b 90 90 e9 0c ff ff ff e8 8d 48 ed fa 90 0f 0b 90 e9 fe fe ff [ 717.436937][T12004] RSP: 0018:ffffc90004706e40 EFLAGS: 00010282 [ 717.436953][T12004] RAX: 8af5e86ba040d700 RBX: 0000000000000014 RCX: 0000000000080000 [ 717.436966][T12004] RDX: ffffc9000c1fc000 RSI: 00000000000092f1 RDI: 00000000000092f2 [ 717.436978][T12004] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 717.436989][T12004] R10: dffffc0000000000 R11: fffffbfff1c3a6c8 R12: 0000000000000000 [ 717.437002][T12004] R13: dffffc0000000000 R14: 0000000000000007 R15: 0000000000000000 [ 717.437042][T12004] ? mac80211_hwsim_sta_rc_update+0x73/0x860 [ 717.437069][T12004] mac80211_hwsim_sta_add+0xa3/0x310 [ 717.437093][T12004] drv_sta_state+0x8c1/0x1840 [ 717.437118][T12004] sta_info_insert_rcu+0x1a30/0x2840 [ 717.437153][T12004] ? sta_info_insert_rcu+0x349/0x2840 [ 717.437189][T12004] ? __pfx_sta_info_insert_rcu+0x10/0x10 [ 717.437211][T12004] ? rate_control_rate_init_all_links+0x186/0x1a0 [ 717.437241][T12004] ? ieee80211_add_station+0x4f1/0x6a0 [ 717.437265][T12004] sta_info_insert+0x16/0xc0 [ 717.437285][T12004] rdev_add_station+0x108/0x290 [ 717.437310][T12004] nl80211_new_station+0x1755/0x1b70 [ 717.437346][T12004] ? __pfx_nl80211_new_station+0x10/0x10 [ 717.437366][T12004] ? netlink_rcv_skb+0x208/0x470 [ 717.437414][T12004] ? nl80211_pre_doit+0x4d5/0x8e0 [ 717.437440][T12004] genl_family_rcv_msg_doit+0x215/0x300 [ 717.437469][T12004] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 717.437503][T12004] ? bpf_lsm_capable+0x9/0x20 [ 717.437523][T12004] ? security_capable+0x7e/0x2e0 [ 717.437548][T12004] genl_rcv_msg+0x60e/0x790 [ 717.437572][T12004] ? __pfx_genl_rcv_msg+0x10/0x10 [ 717.437589][T12004] ? ref_tracker_free+0x63a/0x7d0 [ 717.437613][T12004] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 717.437630][T12004] ? __pfx_nl80211_new_station+0x10/0x10 [ 717.437649][T12004] ? __pfx_nl80211_post_doit+0x10/0x10 [ 717.437665][T12004] ? ____sys_sendmsg+0x505/0x830 [ 717.437689][T12004] ? ___sys_sendmsg+0x21f/0x2a0 [ 717.437712][T12004] ? __x64_sys_sendmsg+0x19b/0x260 [ 717.437736][T12004] ? do_syscall_64+0xfa/0xfa0 [ 717.437761][T12004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.437792][T12004] netlink_rcv_skb+0x208/0x470 [ 717.437820][T12004] ? __lock_acquire+0xab9/0xd20 [ 717.437854][T12004] ? __pfx_genl_rcv_msg+0x10/0x10 [ 717.437879][T12004] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 717.437926][T12004] ? down_read+0x1ad/0x2e0 [ 717.437962][T12004] genl_rcv+0x28/0x40 [ 717.437984][T12004] netlink_unicast+0x82f/0x9e0 [ 717.438020][T12004] ? __pfx_netlink_unicast+0x10/0x10 [ 717.438051][T12004] ? netlink_sendmsg+0x642/0xb30 [ 717.438081][T12004] ? skb_put+0x11b/0x210 [ 717.438117][T12004] netlink_sendmsg+0x805/0xb30 [ 717.438171][T12004] ? __pfx_netlink_sendmsg+0x10/0x10 [ 717.438208][T12004] ? aa_sock_msg_perm+0xf1/0x1d0 [ 717.438238][T12004] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 717.438259][T12004] ? __pfx_netlink_sendmsg+0x10/0x10 [ 717.438290][T12004] __sock_sendmsg+0x21c/0x270 [ 717.438318][T12004] ____sys_sendmsg+0x505/0x830 [ 717.438353][T12004] ? __pfx_____sys_sendmsg+0x10/0x10 [ 717.438396][T12004] ? import_iovec+0x74/0xa0 [ 717.438424][T12004] ___sys_sendmsg+0x21f/0x2a0 [ 717.438457][T12004] ? __pfx____sys_sendmsg+0x10/0x10 [ 717.438537][T12004] ? __fget_files+0x2a/0x420 [ 717.438570][T12004] ? __fget_files+0x3a0/0x420 [ 717.438615][T12004] __x64_sys_sendmsg+0x19b/0x260 [ 717.438655][T12004] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 717.438713][T12004] ? do_syscall_64+0xbe/0xfa0 [ 717.438749][T12004] do_syscall_64+0xfa/0xfa0 [ 717.438779][T12004] ? lockdep_hardirqs_on+0x9c/0x150 [ 717.438812][T12004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.438837][T12004] ? clear_bhb_loop+0x60/0xb0 [ 717.438867][T12004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.438891][T12004] RIP: 0033:0x7ff751b8efc9 [ 717.438916][T12004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 717.438937][T12004] RSP: 002b:00007ff7529d6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 717.438963][T12004] RAX: ffffffffffffffda RBX: 00007ff751de5fa0 RCX: 00007ff751b8efc9 [ 717.438982][T12004] RDX: 0000000000000112 RSI: 0000200000001080 RDI: 0000000000000005 [ 717.438999][T12004] RBP: 00007ff751c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 717.439016][T12004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 717.439032][T12004] R13: 00007ff751de6038 R14: 00007ff751de5fa0 R15: 00007ffd8fd6f5c8 [ 717.439072][T12004] [ 717.448017][T12004] Kernel Offset: disabled