last executing test programs: 4.855887375s ago: executing program 3 (id=767): r0 = openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x4004510d, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r1, 0xc0884123, &(0x7f0000000080)) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xa7, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x95, 0x3, 0x1, 0x5, 0x90, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8001, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x6, 0x5, 0x2, {0x7, 0x25, 0x1, 0xc, 0x5, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x2, 0x4, 0x5}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xe7, 0x40, 0xfa, 0xe, 0x7}, @as_header={0x7, 0x24, 0x1, 0x5, 0x7f, 0x1002}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0x5, 0x5, 0x1, 0xc0}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x5, 0x2, 0x7, 0x1, "b9e5", "f1d2"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0x3, 0x2, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x74, 0xa, 0x4, {0x7, 0x25, 0x1, 0xc, 0xff, 0xfffa}}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x4c11d39787b1fb74, 0x3, 0x8, 0x4b, 0x10, 0x8}, 0x7d, &(0x7f0000000140)={0x5, 0xf, 0x7d, 0x2, [@generic={0x71, 0x10, 0x1, "f29e8355eaa43937e7968308412b261ed9a49858e56ad10d4821054b4fbea982a36b906f35592b53c27c5ce5498e78c200ca0af91a71b9916a4af884a4eddfa87dfc6d03dd7b8421a75f6c2641a37cab8358b0b1f19abe83b6e064f9dbee01f5ad728382c701301d837408fb404c"}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0xe, 0xb, 0x8}]}, 0x3, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x80a}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x430}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x827}}]}) 4.163205379s ago: executing program 2 (id=769): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) copy_file_range(r0, 0x0, r0, 0x0, 0x8, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x80000) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@mcast2, @in6=@private1}}, {{@in6=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f0000000140)=0xe8) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) ioctl$COMEDI_CMD(r3, 0x80506409, &(0x7f0000000180)={0x1, 0x80, 0x80, 0xd, 0x10, 0x3e8, 0x2, 0x0, 0x20, 0x1, 0x20, 0x325d, 0x0, 0x0, 0x0}) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bde5a44070275290f515010203010902120001000000000904"], 0x0) syz_usb_control_io$sierra_net(r4, 0x0, 0x0) syz_usb_control_io$rtl8150(r4, 0x0, &(0x7f0000000300)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f0000000300)) 3.725745606s ago: executing program 0 (id=772): r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x3ffffffd, 0x0) ioctl$EVIOCGLED(r0, 0x80284511, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000002280)={0x2, &(0x7f0000000180)=[{0x20, 0x8, 0x8, 0xfffff010}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) r2 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x8) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000340)=ANY=[@ANYBLOB='+rdma -cpu'], 0xe) r5 = fcntl$getown(r1, 0x9) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000000)=r5) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r6 = memfd_create(&(0x7f0000000180)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe\x02\x00\x00\x00\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\x17_ d\vn\xd4&\xf6\x1b\xe5C\xd99\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7\x00\x00\x00\x00.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xcf\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x86\x9f\xe8)\x01\x01\x00\x00\x06^\xb4B5\x04\x15\xb6\x01_\b', 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x9006000, &(0x7f00000030c0)=[{&(0x7f0000000180)="1400000016001963d25a80648c56915a15aa2bfe", 0x14}], 0x1}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000280)=@nfc, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000400)=""/170, 0xaa}, {&(0x7f00000004c0)}, {&(0x7f0000000600)=""/194, 0xc2}, {&(0x7f0000000700)}, {&(0x7f0000000800)=""/242, 0xf2}, {&(0x7f0000000900)=""/217, 0xd9}], 0x6}, 0x40010140) sendmsg$netlink(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x10}, 0x10) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000140)={0xb, {0xffffffff, 0x2, 0xfff, 0x9, 0x2, 0xd636}}) sendmsg$NFT_MSG_GETSET(r7, &(0x7f0000001bc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001b80)={&(0x7f00000022c0)=ANY=[@ANYBLOB="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"], 0x18ec}, 0x1, 0x0, 0x0, 0x70c6c89ff20b0adf}, 0x44001) r8 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x1) fchdir(r9) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040efe05240c"], 0x7) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r10, 0x7bf, 0x0) getdents(r10, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000100)=0x40000000) socket$inet6_sctp(0xa, 0x5, 0x84) 3.435340618s ago: executing program 0 (id=775): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000006680)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000240)="efdb89a322b8a83f0e5ec310", 0xc}], 0x1}}, {{0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000100)="de61fcb05cdc74c9", 0x8}, {0x0}], 0x2}}], 0x2, 0x8810) recvmsg$unix(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1, 0x0, 0xfffffffffffffcaa}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000440), r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0xa0011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) accept4$llc(r2, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000000c0)=0x10, 0x800) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x24040840) 3.332033547s ago: executing program 3 (id=776): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x105200, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x78, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x18, 0x58, 0x0, 0x1, [@typed={0x8, 0x152, 0x0, 0x0, @uid}, @typed={0xc, 0x4b, 0x0, 0x0, @u64=0x37ad}]}, @typed={0x4, 0x89}, @typed={0x45, 0xd, 0x0, 0x0, @binary="9f025fa3a9c9e1ea9f9acc5d105407152096a5a439b293a6ee5c2fd1465be28468cdfce980cc056782ae08cf7addc062a8304a7f5926606aefdfb5cdc1f4de2ca3"}]}, 0x78}, 0x1, 0x0, 0x0, 0x5}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) syz_usb_control_io$printer(r0, 0x0, 0x0) 3.33188865s ago: executing program 1 (id=777): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000003580), 0x4) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xffffffa7, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYRESDEC=0x0, @ANYRESDEC=r0, @ANYRES8=r1, @ANYRES16=r0, @ANYRES16=r0], 0x38}, 0x1, 0x0, 0x0, 0x4044880}, 0x20048090) syz_open_dev$ttys(0xc, 0x2, 0x1) 3.176184184s ago: executing program 1 (id=778): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x2d, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x1, 0x0, 0x2}, {0xeda7, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x1000000000080, 0xfffffffffffffff8, 0x0, 0x0, 0x2004cb, 0x100003, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2eb, 0x2000000000002fc, 0x2, 0x0, 0x4c3], 0x0, 0x200386}) ioctl$KVM_RUN(r2, 0xae80, 0xf000) 2.548599709s ago: executing program 0 (id=779): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = eventfd(0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000480)=0x28, 0x89b5) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000000040)) setsockopt$llc_int(r0, 0x10c, 0x3, &(0x7f0000000080)=0x8, 0x4) 2.375746524s ago: executing program 0 (id=780): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0xb8, 0x2, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_USERDATA={0x8d, 0x6, "946024968e1a1712fb0889442b6f8a0b358323a82d9dfcd4bb7391bf43ba726f8bea4e3c1a900000004e52b25dd097e755f75a5b3a8299677050e6a8fa87000000000000000000000028c150b5d110bf9316adb3d6468df0740077e13ff2881e45732221c62688d64c581a4f20aa2b70b98dfbb9d3f0bfc460c5dcb66356e8008e71aaafbb510b0000"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0x168, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x140, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffff4a16}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x200}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'macvlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'ip6gre0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffc}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x15c, 0x3, 0xa, 0x201, 0x0, 0x0, {0xb, 0x0, 0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_USERDATA={0xa5, 0xc, "bcb58aa868678ad4d484b54923b84fb5697e86b84c761c4c07ef145e32645d9bff4d6290172503542afe35a9c3ecae01e42a2eb5280ac48aab9e673e1fb7f9236371891d0471d6ca3fa9e0c961674b9f458b78db879e863859213f0082022a66a63261eac4f8c433eb43cf0dd3e4ec780f7233aef8c17835a221db40d8ffb9b0ac42506fda4543cc4d6259bc6cbe4e96cb43d236340c271a8aa617dffe2f48935d"}, @NFTA_CHAIN_HOOK={0x48, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_team\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7f3809d8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x75391ab4}]}, @NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x25d}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x73}]}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}}, @NFT_MSG_DELSETELEM={0x1150, 0xe, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x480, 0x3, 0x0, 0x1, [{0x47c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x50, 0x7, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}]}}}, @NFTA_SET_ELEM_KEY={0x420, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x29, 0x1, "bb0d8d544303c8d637a481d829c9ddda71553b76e941f51f02f2e7b51a3fc62525db4ec360"}, @NFTA_DATA_VALUE={0x35, 0x1, "8e292ec425b239909bdd75b7f4458c2b1334e9902bcd65d2618efc5c5bff18f94e9b9cddfc7d90da941bf01cd99caa02df"}, @NFTA_DATA_VALUE={0x75, 0x1, "b83e89d3267f23019920ab1e5a3881f86c592184ffca4f10baf684ae2af458855e1c48c927dbf6d74def6eb39ad082ff300559c88f98d3daed499d08508bde518ac1a1eb92d78f13847654010e9dac4e2b05810aa643c9a9cdffdba3250faee72002dabe07067be4bbcdc8f75219cf1307"}, @NFTA_DATA_VALUE={0x186, 0x1, "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"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0xe5, 0x1, "17338e37172f23b8abdecf834e3ca7a74c73037d3a4f99f66fa7d23d2ddff74921d0e28074286563701d2ba1036b5d3e09f0f634ffde7a4c9e9f2e50ba9e3ae79ecd281b90179e7b47d6f02874fda0b230acb2353cf7f7e9ea18afc2dee45978bf550138e09bd44fdca2faf5ee449c15d92a2c1eb546ad557863695114461d0c2fdb0837bbdb3acffa28fa39455554f7379554bfe80c6480c552d5f70ebf279cc34b4c2193b64ae5aa5de36c0134c610f3e5b32c2e83e6a1dcf81a218edcc6db05f9221fff9f05420a014598538054eb9923536c0ef5b6e0ae790aa814a793f85a"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc34, 0x3, 0x0, 0x1, [{0x330, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_DATA={0x140, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x25, 0x1, "71c92cae9b3b550cf7b1f9336a9fa5d3db035a6d869a1a339af600b45413106708"}, @NFTA_DATA_VALUE={0xa5, 0x1, "2e7b7c09181e498e2fc183fa0d4f44d5678c6028f3f0f62c7d961da6a6cf9db7af1a2656c389a545df998e44398475769ab7c496eec91e7403e894ec953c6f8af2d6558e105bc868c8d317a55e55f0a3c72b8392bfa6a10804450c7b1472ff2a327a6ad512faf6917415ee456b56df2b82530b9f84381fb4485dad718b98f6f2e01043c4ea5558422d04872ac923417c2f155b01a158963ddf1ecbc4abe34d5a9a"}, @NFTA_DATA_VALUE={0x31, 0x1, "8b4b6d9c7e9342f82436d33ac6bef41c0b715b5d68823aff8300e9d1c42a461c2e9e026c5a6fb78112977387d9"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7fffffffffffffff}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_KEY_END={0x13c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x85, 0x1, "58c28461e2a7e19df7d349ab92ce4980dcf7cabde264a466a52921bfef9c1d7a90d69d4030211c6794bb210e7846b730d7718c0ccffd49cab9a286fe2d2bca29261f31d97c5a7dd02ab65032df3348a4f990c770252920df219c7550e21d536d7815510d8c481dc40232b01c413e788caf68757d253588ff0b5c2493f286e4a0ee"}, @NFTA_DATA_VALUE={0x9d, 0x1, "0d889b1e8988ffd6d89e4da17f0ff2842cf49e4af1be7946f1bf8f129381c022f56cdd5538b4ebf696914dbf1e41e60e72735fec07fba6c23f9a1d830a30387a22c869ae16fd02735df900f575012cef3536b7eef55d6181e84c309b4db6984465b8f824a8d4112b37f7f862b565d282c9bbbb49ff6aa8023569059bef91de9718a83d19a7c7138ecc4e47069fb86e2c0971afd7a97796ebff"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x88, 0xb, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_LOG_PREFIX={0xd, 0x2, 0x1, 0x0, '/dev/sg#\x00'}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x1}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x800}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x7f}, @NFTA_LOG_SNAPLEN={0x8}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x14}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_LOG_FLAGS={0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}]}]}, {0x510, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x1c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_KEY_END={0x1c8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd, 0x1, "400d5a5a6c82b528db"}, @NFTA_DATA_VALUE={0x9, 0x1, "1dcd5394ba"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xb1, 0x1, "f59066141f597fd4bb55dd7d5988367486998faf204c7076044da57d580e99e374fa1d74c7ede4870f5d89fd6d4e609479ebb5072ebe57f08351540e585f86767e57b6ff6b0d3ab0e35b3b90b07255d8acea9d2c5352a580793e144b4a165781253187e83904fb9d6bf0968643a9df84b67d7b38b662ffc9f85aa7303a20930d7bd5beb8427f4395b4a8c08feede45f1046120b58e5510d6328c05f672f9eda95ec040cf06a3f4f22227559780"}, @NFTA_DATA_VALUE={0xa1, 0x1, "5a4d1622c3809ebd03a708e39c3baf1b05626d61c0c6fdfc49328fb1148c575f66069e07ee4e8838041b80a34605a75e97e359435a54757da4b2ca89a4357c500e8bcddbabe844b2107b3c2f28742ef8ba57e1d9f32d06775275960402da730b607a7a7d94779adc9367ac00bb5819cf636e7978aa9e7d4d839a0f632f532cb5e241e89046d62e099b162cbd516eff52662b01ae884c07bb14ec480120"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_KEY_END={0x24c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xed, 0x1, "7d9c6a23ee8fc18227c3c755e8a34d0ee87ec480ae99efedfae4316aa37b77f22ffdf5d4aea189fa985399c163d99ee688448a94f01d20c5e74c051cd56b2a28158f72da2d361427740d08d71aa5284be883438dea6ecf08876c88993bcdee3330a7045f7d90c3fe24ec984593b1cf6266fd188a997c7553cd0ab3d9a028bb5d2f4c34d3c4c1674842fd043c387f2acac89b3c7c686255bef226dba277df43213110390b6fa42434a17520a26012135155ef6e7ecd2ab19fe507157daebca30b0e4195940556d92f53bba37d040f025ec3fcbfe6bf929a99afedb52f95b424a84bcd018feb473585d5"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xd1, 0x1, "6d8b41f25f316ceba6198cf71c34eae2fec89c8c9a361a39e41e068464d412dcf9428cbb7e039e2a63b3ada5e9e9fc09b48ad8f9d2fc664ca8d287dee7af7f60efa7a3355ba70c7dc5459d30801e4282b15ef7e453870c636f3ff7fbef35493587afa4a07093790f38cea6881fc360cfd9fd22b6ff513d63e241de7be73b31afdef74b1e9d03a7441fbb2115b019abf6970ec747f4f5de9dfb7ee15a53bbc4cb7599a725e20e008f04fbdfb31b4afda55b4f8681c0d0b57d83a54b6d0b5af088b74316d2c50fa81cd7c2b19dca"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_DATA={0xb4, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xe}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @queue={{0xa}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x80000000}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x3a4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x220, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb5, 0x1, "9c668180943534491d385454d80479ce52db48be9f33af5f941fceff58619993d3831cd7b8809da1ad9fd8907dfdb68f51a009314ec4d036bbfd448cddc51bc6cdb6e5fef18cdb3471a7945083f237b9038df5464ab82510979db946e95c9338ce64cbbd0d80bccf467d64344b89bb792f4dad33a0b24a36aefc6e3c61b131a890adb1a518c3f99115b94ec91f44d18c29098f109124cf0de61657d50d970158751e8cf6bc63bcfd28bb610e6f1e68059a"}, @NFTA_DATA_VALUE={0xd9, 0x1, "9fd9840f2eee05f7c79090178ef651719692618d1e954c4cb06e4dcabbff2415243092cb8dd87b1a3fe640cddc3de5a8493a3841d77d2e1e13e0ffbb8f4c9414988c65cd575407ce8bbf53efb54e8bb9b470567d27aa618ece22b9f0fb3156c29701fd608225a5490d0b04c8017bcde20bd55f5febe467a370210b8e0d2fcfc6586fed3fb2a3840b388ae57d88cbb431fc86a226c4abdc9667cef0f0b9d332523862aec7407d15b29804b90b1df31a12a959fe49bfc033fb51ceba007333e9f91e6315aa63583381769cd8e5780cdc751f14491542"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x41, 0x1, "935a6908a7c66a3ca70dc3778a2f6851e62a7823a1d43c0bc1ae10c53bbc82aed9d8ab9847f841bd2f11fc938ce9d5a01b267ea38af2aad637c010685a"}]}, @NFTA_SET_ELEM_KEY={0x180, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xa5, 0x1, "cb6a172b62d997201d09ec637d0a515ff782f4c1c38c9eae15cdd58a5e668da3662cd96be4c74cc39051b8eab525c74b7c4083fed66fe62be69dc18b8d32cd4f7085ee077b6f70b7029f45f6e404734c77ab50a27aa6c928fda1215ac6cfd4eb91b8f4d18ba7be3ca627610fc3d217a509333ddc12311d59d5f2078d595900ac2ad60b866b2683e15fecae9b4531821f5c7984365fd3997f3f3dbc6443e1f97a1f"}, @NFTA_DATA_VALUE={0xc5, 0x1, "6c80eda3273c221e91844d6ffa0071d2bb7cf40b9bb037731be2c0d1bc09a0e9b61a056e49afcbdecc1b53d3e0d321d3d983e66facf1bd16cdb3eb74b990b5a536ae8a44e6a924ae7181cac1e80733d233d2406f73f31738351db91314a65dd4d421e8b11e4864b8bc5dca8e2c50936c63adf68506a2644b1e3b35679d0bfdc5e08692fbf39d3f654833b3c0ee04712d191be45987757578b700cbcc3cb347c5645291fe505aafecbe4ba2dcb19f7d6dd13928458e04f0093c4df27833ad4f0528"}]}]}, {0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x55, 0x6, 0x1, 0x0, "08348c570d3ad3b51f1f32c18353f69523aafaf1753d1a8cf19d8fc3aa6f9396dec2baa42e61d4a3e96610c52f6883c18f3458b45fc4e3ccc4322eef63df9fdca2b0fd8691a5c1e7f793d52d3265f2624c"}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x1534}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x88003) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0x2, 0x6}) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 2.37526426s ago: executing program 1 (id=781): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe2(&(0x7f0000000340)={0x0, 0x0}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) tee(r2, r1, 0xff, 0x8) r4 = fanotify_init(0x2, 0x0) fanotify_mark(r4, 0x1, 0x1009, r3, 0x0) vmsplice(r3, &(0x7f0000000300)=[{&(0x7f0000000a40)="8b", 0x1}], 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000002840)=[{{&(0x7f00000002c0)={0xa, 0x4e23, 0xe, @loopback, 0x20}, 0xc, 0x0, 0x0, 0x0, 0x5c}}], 0x1, 0x14018891) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r7, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b", 0xe4}], 0x1, &(0x7f00000008c0)=[@iv={0x40, 0x117, 0x2, 0x28, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c4"}], 0x40, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f", 0x9b}, {&(0x7f0000000ac0)="3fe4c8a3288f", 0x6}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b", 0x27}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028", 0x4c}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c573", 0x4b}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) ioctl$KVM_RUN(r10, 0xae80, 0x0) 2.241707607s ago: executing program 0 (id=782): r0 = socket$inet_smc(0x2b, 0x1, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0x7]}, 0x0, &(0x7f0000000080), 0x8) r1 = syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000092df5510ac05269289b201020301090222000100000000090400000103e900000905a1e7", @ANYRESDEC], 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x12) tkill(r2, 0x37) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000001080)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_buf(r0, 0x0, 0x2b, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4c23, @multicast2}, 0x10) 2.12357121s ago: executing program 2 (id=783): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r0, 0x89f5, &(0x7f0000000000)) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r4) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_TSC_KHZ_vm(r3, 0xaea2, 0x6) sendmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602ffa100000e000a000f000000028000001294", 0x2e}], 0x1}, 0x40) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4c401204}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r5, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_TID={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 1.464093144s ago: executing program 3 (id=784): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x14, 0x2d, 0x107, 0xfffffffe, 0x1, {0x5, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x488d1}, 0x400c000) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x189802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02", 0x3}], 0x1, 0x0, 0x0) 1.416185808s ago: executing program 1 (id=785): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00000050878fde27674720fd850bb7321a02624fa04c48c71ed805c4cb9df2bbdc878fe72f8d6f2da869eef057e2f06f84bd7fffce9dcf903460651f3ba760109409a74a2d15f5ba2681eeb3fa9ecac7e8675f97292997aab2fc3016d10ef4af35b5ff5e2cfab6ac9b6b8969408e18f9f0966aeed8364521320e29d134546c16ac3a4236da7a0087773bbdb666a8", @ANYRES16=r1, @ANYBLOB="01000000000000000000040000000800020003000000"], 0x1c}}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r2, 0x0, 0xd1, &(0x7f0000000000)=0xfd, 0x4) (async) setsockopt$MRT_TABLE(r2, 0x0, 0xd1, &(0x7f0000000000)=0xfd, 0x4) r3 = socket(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000340)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r4, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0}, 0x40002) (async) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r4, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0}, 0x40002) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8982, &(0x7f0000000280)={0x8, 'vlan1\x00', {'veth0_to_bond\x00'}, 0x9}) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8982, &(0x7f0000000280)={0x8, 'vlan1\x00', {'veth0_to_bond\x00'}, 0x9}) r7 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r7, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f910, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) (async) ioctl$VIDIOC_S_EXT_CTRLS(r7, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f910, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) r8 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000140)={0x3dd, 0x4}) (async) r9 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000140)={0x3dd, 0x4}) r10 = inotify_init() poll(&(0x7f0000000180)=[{r2, 0x5051}, {r3, 0x400}, {r7, 0xa1a1}, {r8, 0x11a}, {r9, 0x1}, {0xffffffffffffffff, 0x4050}, {r10, 0x12}], 0x7, 0x2) 1.415796261s ago: executing program 2 (id=786): r0 = socket$netlink(0x10, 0x3, 0xc) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d80000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa1400040000000000000000000000ffff0a0101020c00028005000100000000003c0002802c00018014000300fc02000000000000000000000000000014000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000044000f800800034000000006080002400000000108000340000000ce08000240000000030800034058696a8c0800024000000001080001"], 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000020105"], 0x14}, 0x1, 0x0, 0x0, 0x20044892}, 0x4040050) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, &(0x7f00000002c0)={0xc, r5}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r4, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000ff2f00000000000001"]) 934.589844ms ago: executing program 2 (id=787): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x802, 0x0) socket(0x10, 0x3, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x14, r2, 0x321, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4c811}, 0x4) recvmmsg(r3, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000bc0)=""/4073, 0xff4}, {&(0x7f0000000000)=""/15, 0xf}, {&(0x7f0000000140)=""/54, 0x36}, {&(0x7f0000000080)=""/24, 0x18}], 0x4}, 0x8}], 0x4000000000001b6, 0x180, 0x0) write$UHID_CREATE2(r1, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r3], 0x118) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x8010, r1, 0x204b3000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r4, 0x541c, &(0x7f0000000000)) 648.924011ms ago: executing program 1 (id=788): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r1, 0x3b72, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a88000000060a0b040000000000000000020000005c000480580001800a000100696e6e65720000004800028008000240000000ff0800034000000007080004400000000f080001400000000024000580090001006d6574610000000014000280080001400000000d08000240000000190900010073797a30000000000900020073797a32"], 0xb0}}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r2, 0x6, 0x1e, 0x0, &(0x7f0000000080)) r3 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r3, 0x0) ftruncate(r3, 0x3) bind$rxrpc(r3, &(0x7f0000000040)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x24) 511.37698ms ago: executing program 3 (id=789): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '.'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) (async) syz_usb_connect(0x2, 0x742, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x8b, 0xff, 0x5, 0x40, 0x733, 0x2221, 0x218b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x730, 0x2, 0x6, 0x6, 0x0, 0x5, "", [{{0x9, 0x4, 0x40, 0x8, 0x8, 0xa7, 0x9e, 0xa6, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x81, 0x2e}, [@extension_unit={0x8, 0x24, 0x8, 0x2, 0x90, 0x5f, "f4"}, @feature_unit={0xb, 0x24, 0x6, 0x4, 0x4, 0x2, [0x1, 0x0], 0x75}, @feature_unit={0x11, 0x24, 0x6, 0x6, 0x6, 0x5, [0x4, 0xe, 0x9, 0x7, 0x4], 0x8}]}], [{{0x9, 0x5, 0xd, 0x10, 0x10, 0x3, 0x1, 0x4}}, {{0x9, 0x5, 0x7, 0x3, 0x1bf, 0x40, 0xb, 0xd}}, {{0x9, 0x5, 0x6, 0x9, 0x200, 0x3, 0x7, 0x1}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x1, 0x0, 0x40}}, {{0x9, 0x5, 0xd, 0x9, 0x3ff, 0x80, 0x8, 0x9}}, {{0x9, 0x5, 0xf, 0x10, 0x10, 0x9, 0xe, 0x59, [@generic={0xd4, 0xf, "e524689442b004a1fba40d6d82101661b012fcb003b0b64a0e12dd612c2e8b4e94257f5ee531082327d7ef9d93b7f462d376e1644415b345214562eddd091277133464c8621b66af1dd64b2a10ce398c24f8b355fa48330e534f56dfb77023d305e5c5e5b30a3a30d7b36203d021ac9c033006dfd1ec52b7d17bbdb19b3855fab4f36062f923b671ea5fcd1048b6b0c853b7b87e0a8f6360ed8daff5ef03c60583a95803b787cdf9bddeb1d916150e632045068c8d371136ccc2113741a0e76e6387161573c11afca93f05d4371bdfa2c0e0"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x2f, 0xff, 0x4}}, {{0x9, 0x5, 0x6, 0x8, 0x20, 0x75, 0xf, 0x7, [@generic={0xff, 0x5, "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"}, @generic={0xa9, 0x5, "c3c9e05b5e412f6176f492c94c63d42c8247c762bd14101ac207d5da5739f472119bd5d3c8badd725211c22e3ebccc4591856d8d6ac26ed7c5f16ecc2c976162f175f94201f7d84298444cbf543771bb898b3acdd5f0a357a99edd87f0fb7d1f4f5a13adf9c9c8fcd22c6b7a0881f1d49ad054fe342250f1f9d9ab58e63e1fcea3bac88b220c52d01fd0d4d73ae9e4198d4caa207dc102d3e100245e9d0b7cd735675e512077af"}]}}]}}, {{0x9, 0x4, 0x96, 0x3, 0xc, 0x78, 0xdc, 0xc5, 0x2, [@generic={0x3d, 0x4, "3f39dbd773b7beafa166d3dad12d6197172a519ed68fcdec08dddae20bf7b0819b2f2b5feabd3b6976110b924b6b1538901016183297658e985931"}], [{{0x9, 0x5, 0x80, 0x10, 0x20, 0x4, 0x3, 0x7}}, {{0x9, 0x5, 0x2, 0x10, 0x10, 0x5, 0x80, 0x7}}, {{0x9, 0x5, 0xf, 0x4, 0x8, 0x7f, 0x4, 0x5, [@generic={0xff, 0x6, "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"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x10, 0xd0, 0x8, 0x5}}, {{0x9, 0x5, 0x2, 0x10, 0x3ff, 0x0, 0xe, 0x5, [@generic={0x32, 0x3, "35ed155e58d69380cc4d2bad64ab050bccf91a24eae2448334735583d54627ee73a2bf0ded8e0b19e128b61917908a40"}, @generic={0xeb, 0x5, "cfa24df39da9de73085eea54cb912a4b77415d2e96fb1b52dc3a83961e618c80eb60410d40ab21633b844174fbbfe34950c3ccb6ed852f7fffb727fc441c641cda56c36ba926db9e36f17e06bb17062f6fd5e67cc2d6b80e4610f477e9f14cddd1430f8961db5d2fea4ab1b1bc12e5a0f9f35c485f7365b9279b95d20e54008889bbd998904516acd5a96aedd7919e6b582af7f560db567505dd2d92bb13c17077c20ff4a48f268a6ffc386a7f7c524f078cd5cf23c5928a46dc2ff74524b6d0bf382641f77666cda02a35ecfb196e13d1f37867f1754c63ef946e353428c83fd73d0ef60849ebdd8e"}]}}, {{0x9, 0x5, 0x5, 0x3, 0x10, 0x40, 0x2, 0x40}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x3e, 0x93, 0xb0}}, {{0x9, 0x5, 0x8, 0x2, 0x200, 0xa, 0x61, 0x7f}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0x92, 0x0, 0x5, [@generic={0x7a, 0x7, "0e64ead6eddcf88d45b724eae5e6e86adcfee15380d511644caa4ad8d80ee09c07b500f500f9819bc75e8094783feda3ca340baa09e12d8ea5526720e9449eac2652bdf03d6246e982e1bc83336d68d16ee050845b50fdf4b900c5bc6437609ec47d00436bbbff2175d02f25d8d83fd944223a6859386b5d"}]}}, {{0x9, 0x5, 0x8, 0x3, 0x3ff, 0x3, 0x8, 0xfa, [@generic={0xb1, 0xa, "4d77e647444650e688d8b032e6a0df1d19a6d152d5fdd2807c120d3fc00235fa45c3cae1677725c41ed227e3ca7c52af72890f5c3d2d709ad6d3525fac44132b494deee6e9d49873006f8f59c1e1efc5bfeabd142f16820bedd10653d16598db09040810a9eff4a5a9fdc75ea4010e1ca496f751177cceb9b3e3cd2e36ab3693eb668300d4c98c48ee663df5e93660725f27d19f30721acd19979ba7aec28a46f7e16218273e821d3c586dc715e1bb"}]}}, {{0x9, 0x5, 0xe, 0x3, 0x1d7, 0x8, 0x9, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xc1, 0xd}]}}, {{0x9, 0x5, 0x1, 0xc, 0x3ff, 0xf, 0x68, 0x7, [@generic={0x2c, 0xe, "470f8ff33441696b07b4a5da4d16fe112b038faea76fbb92c65d79e1fdf77ceca8fe237734f4120f026b"}]}}]}}]}}]}}, &(0x7f0000000d00)={0xa, &(0x7f00000008c0)={0xa, 0x6, 0x300, 0x5, 0x2, 0x4, 0x10, 0x1}, 0xbe, &(0x7f0000000900)={0x5, 0xf, 0xbe, 0x3, [@generic={0x43, 0x10, 0x4, "0412608203a5651200f9aee98b49ddf4f79125874d7efe2a04e6587b96bb58a151014e8937e6955aaa22f2bfe35a359333b4ae178a36c91e581a120e942445a6"}, @generic={0x6b, 0x10, 0x0, "49c01e83b5503e435a0e0ac099fb78c443d463e7289d88c8d177520e3fdbb358070cf82000b2e7fa9edbe38cf6ec5de49cf2ca3df5e3a47780381f9e1e220ed8e9055307eaab0d9d06cf280ff7db2b55be79ca0dffc2ca565488c9917fddd55d3fab62b97a869d48"}, @wireless={0xb, 0x10, 0x1, 0x6, 0x59, 0x13, 0xfe, 0x5, 0x8}]}, 0x7, [{0x18, &(0x7f00000009c0)=@string={0x18, 0x3, "4d8ceb9c2f8798f260c9a4d1b8d094eb86be91198c72"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x423}}, {0x97, &(0x7f0000000a40)=@string={0x97, 0x3, "4cae8011db136f9eb074403ce552585b2e9f742742e5780f5ce6f2fe9a9440195d8580178c0e157da0baf2832bb175c3257b363e983cc457077edb731c1f78b60fa240ea3c7cf38cc2c84bfca3ecb2ecfc74d646758ec06ec5040d313aa1dc11d4e83b309e23ad6f4dce2621a493c7ae74724195bd45a51e2be001d84b38040bc5602633d16c0b6ab4a90c87d4bcdb50073b544693"}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x2001}}, {0xde, &(0x7f0000000b40)=@string={0xde, 0x3, "de41b362ce23a9108562c0e76d26fdabf06d8180686f3706a81d0256bbd134cf73357f1cfabcc1ccc101a5e30ffb85d0a2266ec075d1e116156c181f7a0ff36902e8d0fdb0fcdbba40fec101a3fc3acd28a532abbe7bcd34ca35ac865dabe10284cfbd1c1b211230c28f086abb98ace4d938567e34524863b1bf76ab4171515e02cd45b5b2ce21ad48d5c3b79502804c97736647b817dbe7cedb78782ff06cd2e26c2bd61e37c2e0a02a63637cafefd487aef345fc9dfff73128db4bf652d53e35da69cdd79a150eecc32f1118931d73cc2c8a8c31ecade556e328d0"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x81d}}, {0x6b, &(0x7f0000000c80)=@string={0x6b, 0x3, "2f54f4ff59f25e4698300b06acd545b206fcfd692a0b890d199461495e062d0e9c34b78a44b5bb258388afb906700efe5d698d6fb9086dd8e4a68e49650c5f5c95ea4510cc94b1b5d847f36d9ebb18dfcfa4aa06f9eafaa7936da8f696d06dac0d6bd4e6e22c79d1bd"}}]}) (async) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000dc0), r0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000e00)=0x0) sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r2, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000091}, 0x40000) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f40), r0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000f80)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000fc0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r4, &(0x7f0000001080)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0xa0200006}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x3c, r5, 0x8, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x2c}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x5d}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000000}, 0x8001) (async) r8 = accept4$inet(0xffffffffffffffff, &(0x7f00000010c0)={0x2, 0x0, @broadcast}, &(0x7f0000001100)=0x10, 0x800) r9 = fcntl$dupfd(0xffffffffffffffff, 0x0, r8) sendmsg$TIPC_NL_NET_GET(r9, &(0x7f0000001480)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001440)={&(0x7f0000001180)={0x284, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_MEDIA={0x114, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe3a2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x42}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x400}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'pim6reg\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x401}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x81}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x284}, 0x1, 0x0, 0x0, 0x40000}, 0x20000014) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000014c0), r4) (async) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001540), r0) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x20, r10, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x8020) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001680), r9) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000001740)={'syztnl2\x00', &(0x7f00000016c0)={'ip6gre0\x00', 0x0, 0x4, 0x5, 0x4d, 0x8, 0x32, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0x8000, 0xffffbc84, 0x8}}) sendmsg$WG_CMD_GET_DEVICE(r11, &(0x7f0000001d40)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001d00)={&(0x7f0000001780)={0x570, r12, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x10000}, @WGDEVICE_A_PEERS={0x530, 0x8, 0x0, 0x1, [{0x504, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x1f8, 0x9, 0x0, 0x1, [{0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x43}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ALLOWEDIPS={0x308, 0x9, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x32}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x25}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3c}}, {0x5, 0x3, 0x3}}]}]}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r13}]}, 0x570}, 0x1, 0x0, 0x0, 0x4000010}, 0x8040) (async) r14 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001dc0), r4) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f0000001e80)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x3c, r14, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4) (async) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001f00), r4) sendmsg$IEEE802154_LLSEC_SETPARAMS(r15, &(0x7f0000002000)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x5c, r16, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x9}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4004000) (async) r17 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002080), r4) sendmsg$NLBL_MGMT_C_ADD(r15, &(0x7f0000002140)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x40, r17, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010102}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x20004810) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r4, &(0x7f0000002340)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002300)={&(0x7f0000002240)={0xa0, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x85}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}]}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x81}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x10}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008) 505.16196ms ago: executing program 2 (id=797): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@getstat={0xe0, 0x15, 0x0, 0x0, 0x0, {{'aegis128-aesni\x00'}}}, 0xe0}, 0x1, 0x0, 0x0, 0x4008888}, 0x0) (async) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000580)='system.posix_acl_access\x00', &(0x7f0000002e80)=ANY=[@ANYBLOB="020000000100000000000000040006000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="100003000000000020000bbe00000000"], 0xfffffffffffffdd6, 0x1) (async) sendmsg$nl_crypto(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000020110001"], 0xe8}, 0x1, 0x0, 0x0, 0x814}, 0x0) setresuid(0x0, 0xee00, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)={0x18, 0x12, 0x1, 0x200, 0x0, "", [@nested={0x7, 0x17, 0x0, 0x0, [@generic="f37208"]}]}, 0x18}], 0x1}, 0x4000800) (async) setuid(0xee00) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = getpgid(0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x101400, 0x0) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) (async) fcntl$setownex(r4, 0xf, &(0x7f00000001c0)={0x0, r5}) (async) sendmmsg$unix(r3, &(0x7f0000011500)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="11", 0x1}], 0x1, 0x0, 0x0, 0x4004040}}], 0x1, 0x40015) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000040)=@ethtool_sset_info={0x37, 0x101, 0x2, [0x0, 0x10000006, 0x15, 0x5, 0xffff888c, 0xc0000, 0x3f, 0x6, 0x6b55]}}) 427.968643ms ago: executing program 3 (id=790): accept$unix(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000001c0)=0x6e) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x7}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x8, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2839d1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x100000000, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x109000, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x20013, r4, 0x9ee81000) ioctl$COMEDI_LOCK(r4, 0x6405) 330.922109ms ago: executing program 2 (id=791): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) copy_file_range(r0, 0x0, r0, 0x0, 0x8, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x80000) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@mcast2, @in6=@private1}}, {{@in6=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f0000000140)=0xe8) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) ioctl$COMEDI_CMD(r3, 0x80506409, &(0x7f0000000180)={0x1, 0x80, 0x80, 0xd, 0x10, 0x3e8, 0x2, 0x0, 0x20, 0x1, 0x20, 0x325d, 0x0, 0x0, 0x0}) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bde5a44070275290f515010203010902120001000000000904"], 0x0) syz_usb_control_io$sierra_net(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f0000000300)) 321.030653ms ago: executing program 1 (id=792): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0xe61c1323c3c20c32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x4000081) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x80400, 0x0) ioctl$FBIOPUTCMAP(r4, 0x4605, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000040)=[0x5, 0x1, 0x1000], &(0x7f0000000080), &(0x7f00000000c0), 0x0}) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1c, 0x0, &(0x7f0000000340)) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0xc0, 0x3b, 0x63, 0x10, 0x16c0, 0x5df, 0x2b48, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x6, 0x10, 0x4, "", [{{0x9, 0x4, 0x7f, 0x7, 0x0, 0x3, 0x0, 0x0, 0x9}}]}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001080)={0x14, 0x18, 0x301, 0x70bd2d, 0x25dfdbfc, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0xc090}, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x23) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'vlan0\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f00000004c0)={r9, 0x3, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f00000001c0)={r9, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00', {0x500}}) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in={{0x2, 0x4e23, @empty}}, 0x0, 0x0, 0x1a, 0x0, "2b2576ea119ba90587485f01443e4bc8f257043b2fb28303d98985528c4f8e14cc8796e524199cbc7a9d376c17bdc7b0a5884d550d276fa702d06a2208d147b103eaaccc2a4bc5db44c50173b8204566"}, 0xd8) 206.666818ms ago: executing program 0 (id=793): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe2(&(0x7f0000000340)={0x0, 0x0}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) tee(r2, r1, 0xff, 0x8) r4 = fanotify_init(0x2, 0x0) fanotify_mark(r4, 0x1, 0x1009, r3, 0x0) vmsplice(r3, &(0x7f0000000300)=[{&(0x7f0000000a40)="8b", 0x1}], 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000002840)=[{{&(0x7f00000002c0)={0xa, 0x4e23, 0xe, @loopback, 0x20}, 0xc, 0x0, 0x0, 0x0, 0x5c}}], 0x1, 0x14018891) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r7, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b", 0xe4}], 0x1, &(0x7f00000008c0)=[@iv={0x40, 0x117, 0x2, 0x28, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c4"}], 0x40, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f", 0x9b}, {&(0x7f0000000ac0)="3fe4c8a3288f", 0x6}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b", 0x27}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028", 0x4c}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c573", 0x4b}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) ioctl$KVM_RUN(r10, 0xae80, 0x0) 0s ago: executing program 3 (id=794): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x62) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, 0x0, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f62726964676500140001007767320000000000000000000000000014000100766574"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x20008000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0xc900) kernel console output (not intermixed with test programs): 619] pwc: Askey VC010 type 2 USB webcam detected. [ 200.848474][ T5619] pwc: recv_control_msg error -32 req 02 val 2b00 [ 200.856055][ T5619] pwc: recv_control_msg error -32 req 02 val 2700 [ 200.865239][ T5619] pwc: recv_control_msg error -32 req 02 val 2c00 [ 200.867649][ T5619] pwc: recv_control_msg error -32 req 04 val 1000 [ 200.868419][ T5619] pwc: recv_control_msg error -32 req 04 val 1300 [ 200.869288][ T5619] pwc: recv_control_msg error -32 req 04 val 1400 [ 200.871368][ T5619] pwc: recv_control_msg error -32 req 02 val 2000 [ 200.886968][ T5619] pwc: recv_control_msg error -32 req 02 val 2100 [ 200.913075][ T5619] pwc: recv_control_msg error -32 req 04 val 1500 [ 201.116319][ T5619] pwc: recv_control_msg error -71 req 02 val 2400 [ 201.119002][ T5619] pwc: recv_control_msg error -71 req 02 val 2600 [ 201.122378][ T5619] pwc: recv_control_msg error -71 req 02 val 2900 [ 201.124730][ T5619] pwc: recv_control_msg error -71 req 02 val 2800 [ 201.128352][ T5619] pwc: recv_control_msg error -71 req 04 val 1100 [ 201.160123][ T5619] pwc: recv_control_msg error -71 req 04 val 1200 [ 201.206268][ T5619] pwc: Registered as video103. [ 201.217860][ T5619] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 201.327514][ T5619] usb 3-1: USB disconnect, device number 20 [ 201.752068][ T5716] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 201.836776][ T7322] program syz.0.484 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 201.903449][ T5716] usb 4-1: config 0 interface 0 has no altsetting 0 [ 201.903496][ T5716] usb 4-1: New USB device found, idVendor=05ac, idProduct=021c, bcdDevice= 0.00 [ 201.903524][ T5716] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.967295][ T5716] usb 4-1: config 0 descriptor?? [ 202.132974][ T7326] netlink: 104 bytes leftover after parsing attributes in process `syz.2.487'. [ 202.410076][ T5716] hid_parser_main: 33 callbacks suppressed [ 202.410104][ T5716] apple 0003:05AC:021C.0009: unknown main item tag 0x0 [ 202.410136][ T5716] apple 0003:05AC:021C.0009: unknown main item tag 0x0 [ 202.410164][ T5716] apple 0003:05AC:021C.0009: unknown main item tag 0x0 [ 202.410190][ T5716] apple 0003:05AC:021C.0009: unknown main item tag 0x0 [ 202.410314][ T5716] apple 0003:05AC:021C.0009: unknown main item tag 0x0 [ 202.410346][ T5716] apple 0003:05AC:021C.0009: unknown main item tag 0x0 [ 202.410383][ T5716] apple 0003:05AC:021C.0009: unknown main item tag 0x0 [ 202.410412][ T5716] apple 0003:05AC:021C.0009: unknown main item tag 0x0 [ 202.410441][ T5716] apple 0003:05AC:021C.0009: unknown main item tag 0x0 [ 202.410470][ T5716] apple 0003:05AC:021C.0009: unknown main item tag 0x0 [ 202.506048][ T5716] apple 0003:05AC:021C.0009: hidraw0: USB HID v0.bd Device [HID 05ac:021c] on usb-dummy_hcd.3-1/input0 [ 202.598991][ T7332] FAULT_INJECTION: forcing a failure. [ 202.598991][ T7332] name failslab, interval 1, probability 0, space 0, times 0 [ 202.599030][ T7332] CPU: 0 UID: 0 PID: 7332 Comm: syz.2.488 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 202.599055][ T7332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 202.599070][ T7332] Call Trace: [ 202.599078][ T7332] [ 202.599087][ T7332] dump_stack_lvl+0xe8/0x150 [ 202.599121][ T7332] should_fail_ex+0x46b/0x600 [ 202.599159][ T7332] should_failslab+0xa8/0x100 [ 202.599188][ T7332] kmem_cache_alloc_noprof+0xa4/0x6c0 [ 202.599224][ T7332] ? ptlock_alloc+0x20/0x70 [ 202.599245][ T7332] ? ptlock_alloc+0x20/0x70 [ 202.599276][ T7332] ptlock_alloc+0x20/0x70 [ 202.599298][ T7332] pte_alloc_one+0x7e/0x380 [ 202.599335][ T7332] __pte_alloc+0x25/0x1a0 [ 202.599369][ T7332] do_pte_missing+0x1c13/0x2940 [ 202.599402][ T7332] ? mt_find+0x481/0x630 [ 202.599441][ T7332] handle_mm_fault+0xdc2/0x14d0 [ 202.599468][ T7332] ? handle_mm_fault+0xed/0x14d0 [ 202.599496][ T7332] ? __pfx_handle_mm_fault+0x10/0x10 [ 202.599537][ T7332] ? __lock_acquire+0x6b5/0x2d10 [ 202.599577][ T7332] ? lock_mm_and_find_vma+0xa7/0x340 [ 202.599610][ T7332] do_user_addr_fault+0x75b/0x1340 [ 202.599664][ T7332] exc_page_fault+0x6a/0xc0 [ 202.599697][ T7332] asm_exc_page_fault+0x26/0x30 [ 202.599722][ T7332] RIP: 0010:__put_user_4+0xd/0x30 [ 202.599754][ T7332] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 202.599777][ T7332] RSP: 0018:ffffc9000ecff198 EFLAGS: 00050206 [ 202.599800][ T7332] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000fe8000 [ 202.599818][ T7332] RDX: 0000000000000002 RSI: ffffffff8dbdec30 RDI: ffffffff8bcc4d80 [ 202.599834][ T7332] RBP: ffffc9000ecff290 R08: ffffffff8219d89f R09: ffff888037e87030 [ 202.599859][ T7332] R10: dffffc0000000000 R11: ffffed100a08b331 R12: ffff888000000000 [ 202.599875][ T7332] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88804d8c2bc0 [ 202.599900][ T7332] ? __might_fault+0xaf/0x130 [ 202.599930][ T7332] kvm_hv_set_msr_common+0x1c26/0x36a0 [ 202.599964][ T7332] ? kasan_save_track+0x4f/0x80 [ 202.599988][ T7332] ? msr_io+0x116/0x8b0 [ 202.600012][ T7332] ? kvm_arch_vcpu_ioctl+0x76e/0x2fd0 [ 202.600039][ T7332] ? kvm_vcpu_ioctl+0x7e7/0xfe0 [ 202.600072][ T7332] ? __se_sys_ioctl+0xff/0x170 [ 202.600102][ T7332] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.600126][ T7332] ? __pfx_kvm_hv_set_msr_common+0x10/0x10 [ 202.600167][ T7332] ? __lock_acquire+0x6b5/0x2d10 [ 202.600200][ T7332] kvm_set_msr_common+0x1ee7/0x43e0 [ 202.600234][ T7332] ? __pfx_kvm_set_msr_common+0x10/0x10 [ 202.600271][ T7332] vmx_set_msr+0x15cc/0x2810 [ 202.600306][ T7332] __kvm_set_msr+0x616/0xab0 [ 202.600344][ T7332] ? __pfx___kvm_set_msr+0x10/0x10 [ 202.600388][ T7332] ? __pfx_do_set_msr+0x10/0x10 [ 202.600415][ T7332] kvm_set_msr_ignored_check+0x2a/0x390 [ 202.600453][ T7332] ? __pfx_do_set_msr+0x10/0x10 [ 202.600480][ T7332] msr_io+0x3f8/0x8b0 [ 202.600510][ T7332] ? __pfx_do_set_msr+0x10/0x10 [ 202.600539][ T7332] ? __pfx_msr_io+0x10/0x10 [ 202.600575][ T7332] kvm_arch_vcpu_ioctl+0x76e/0x2fd0 [ 202.600607][ T7332] ? kvm_arch_vcpu_ioctl+0x734/0x2fd0 [ 202.600634][ T7332] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 202.600664][ T7332] ? unwind_next_frame+0xa6/0x2550 [ 202.600698][ T7332] ? is_bpf_text_address+0x26/0x2b0 [ 202.600743][ T7332] ? is_bpf_text_address+0x26/0x2b0 [ 202.600780][ T7332] ? is_bpf_text_address+0x292/0x2b0 [ 202.600811][ T7332] ? is_bpf_text_address+0x26/0x2b0 [ 202.600853][ T7332] ? kernel_text_address+0xa5/0xe0 [ 202.600883][ T7332] ? __kernel_text_address+0xd/0x30 [ 202.600910][ T7332] ? unwind_get_return_address+0x4d/0x90 [ 202.600940][ T7332] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 202.600968][ T7332] ? arch_stack_walk+0xfb/0x150 [ 202.601012][ T7332] ? stack_trace_save+0xa9/0x100 [ 202.601038][ T7332] ? __pfx_stack_trace_save+0x10/0x10 [ 202.601062][ T7332] ? kasan_save_free_info+0x46/0x50 [ 202.601096][ T7332] ? stack_depot_save_flags+0x33/0x810 [ 202.601136][ T7332] ? kasan_save_track+0x4f/0x80 [ 202.601155][ T7332] ? kasan_save_track+0x3e/0x80 [ 202.601175][ T7332] ? kasan_save_free_info+0x46/0x50 [ 202.601203][ T7332] ? __kasan_slab_free+0x5c/0x80 [ 202.601224][ T7332] ? kfree+0x1c5/0x6c0 [ 202.601255][ T7332] ? tomoyo_path_number_perm+0x501/0x630 [ 202.601289][ T7332] ? security_file_ioctl+0xc3/0x2a0 [ 202.601321][ T7332] ? __se_sys_ioctl+0x47/0x170 [ 202.601348][ T7332] ? do_syscall_64+0x174/0x580 [ 202.601374][ T7332] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.601418][ T7332] ? __lock_acquire+0x6b5/0x2d10 [ 202.601490][ T7332] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 202.601520][ T7332] ? lockdep_hardirqs_on+0x7a/0x110 [ 202.601547][ T7332] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 202.601575][ T7332] ? _mutex_lock_killable+0x152/0x1d0 [ 202.601612][ T7332] ? kvm_vcpu_ioctl+0x283/0xfe0 [ 202.601649][ T7332] kvm_vcpu_ioctl+0x7e7/0xfe0 [ 202.601690][ T7332] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 202.601747][ T7332] ? __fget_files+0x2a/0x420 [ 202.601774][ T7332] ? __fget_files+0x2a/0x420 [ 202.601796][ T7332] ? __fget_files+0x3a6/0x420 [ 202.601819][ T7332] ? __fget_files+0x2a/0x420 [ 202.601854][ T7332] ? bpf_lsm_file_ioctl+0x9/0x20 [ 202.601882][ T7332] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 202.601915][ T7332] __se_sys_ioctl+0xff/0x170 [ 202.601943][ T7332] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.601967][ T7332] do_syscall_64+0x174/0x580 [ 202.601994][ T7332] ? trace_irq_disable+0x3b/0x140 [ 202.602023][ T7332] ? clear_bhb_loop+0x40/0x90 [ 202.602051][ T7332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.602074][ T7332] RIP: 0033:0x7f7e3d2dce59 [ 202.602095][ T7332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.602116][ T7332] RSP: 002b:00007f7e3b50d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 202.602140][ T7332] RAX: ffffffffffffffda RBX: 00007f7e3d556090 RCX: 00007f7e3d2dce59 [ 202.602157][ T7332] RDX: 00002000000000c0 RSI: 000000004008ae89 RDI: 0000000000000005 [ 202.602173][ T7332] RBP: 00007f7e3b50d090 R08: 0000000000000000 R09: 0000000000000000 [ 202.602186][ T7332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.602198][ T7332] R13: 00007f7e3d556128 R14: 00007f7e3d556090 R15: 00007fffecc6d228 [ 202.602230][ T7332] [ 203.477514][ T5716] usb 4-1: USB disconnect, device number 20 [ 203.670967][ T7343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.671637][ T7343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.716520][ T7348] program syz.0.494 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 203.856854][ T7352] netlink: 104 bytes leftover after parsing attributes in process `syz.1.496'. [ 203.900062][ T5829] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 203.922730][ T7354] comedi comedi3: pcl724: I/O base address or length out of range [ 204.073522][ T5829] usb 3-1: unable to get BOS descriptor or descriptor too short [ 204.075459][ T5829] usb 3-1: config 7 has an invalid interface number: 128 but max is 0 [ 204.075507][ T5829] usb 3-1: config 7 has no interface number 0 [ 204.075554][ T5829] usb 3-1: config 7 interface 128 altsetting 85 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 204.075590][ T5829] usb 3-1: config 7 interface 128 altsetting 85 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 204.075626][ T5829] usb 3-1: config 7 interface 128 altsetting 85 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 204.075662][ T5829] usb 3-1: config 7 interface 128 has no altsetting 0 [ 204.161132][ T7358] FAULT_INJECTION: forcing a failure. [ 204.161132][ T7358] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.161170][ T7358] CPU: 1 UID: 0 PID: 7358 Comm: syz.0.499 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 204.161197][ T7358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 204.161212][ T7358] Call Trace: [ 204.161221][ T7358] [ 204.161230][ T7358] dump_stack_lvl+0xe8/0x150 [ 204.161262][ T7358] should_fail_ex+0x46b/0x600 [ 204.161300][ T7358] _copy_to_user+0x31/0xb0 [ 204.161329][ T7358] simple_read_from_buffer+0xe1/0x170 [ 204.161359][ T7358] proc_fail_nth_read+0x1be/0x230 [ 204.161387][ T7358] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 204.161414][ T7358] ? rw_verify_area+0x2ac/0x4e0 [ 204.161444][ T7358] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 204.161469][ T7358] vfs_read+0x212/0xa80 [ 204.161505][ T7358] ? __pfx_vfs_read+0x10/0x10 [ 204.161537][ T7358] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 204.161565][ T7358] ? lockdep_hardirqs_on+0x7a/0x110 [ 204.161593][ T7358] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 204.161620][ T7358] ? mutex_lock_nested+0x152/0x1d0 [ 204.161656][ T7358] ? fdget_pos+0x252/0x320 [ 204.161690][ T7358] ksys_read+0x156/0x270 [ 204.161720][ T7358] ? __pfx_ksys_read+0x10/0x10 [ 204.161762][ T7358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.161787][ T7358] do_syscall_64+0x174/0x580 [ 204.161818][ T7358] ? clear_bhb_loop+0x40/0x90 [ 204.161847][ T7358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.161868][ T7358] RIP: 0033:0x7f166ac8d68e [ 204.161889][ T7358] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 204.161908][ T7358] RSP: 002b:00007f1668f25fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 204.161933][ T7358] RAX: ffffffffffffffda RBX: 00007f1668f266c0 RCX: 00007f166ac8d68e [ 204.161950][ T7358] RDX: 000000000000000f RSI: 00007f1668f260a0 RDI: 0000000000000007 [ 204.161964][ T7358] RBP: 00007f1668f26090 R08: 0000000000000000 R09: 0000000000000000 [ 204.161980][ T7358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.161993][ T7358] R13: 00007f166af46038 R14: 00007f166af45fa0 R15: 00007ffc64d13af8 [ 204.162031][ T7358] [ 204.266459][ T5829] usb 3-1: New USB device found, idVendor=a262, idProduct=355a, bcdDevice=f6.b7 [ 204.266525][ T5829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.266593][ T5829] usb 3-1: Product: syz [ 204.266655][ T5829] usb 3-1: Manufacturer: syz [ 204.266713][ T5829] usb 3-1: SerialNumber: syz [ 204.712247][ T7364] cgroup: subsys name conflicts with all [ 204.800787][ T5619] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 204.819073][ T7368] MTD: Couldn't look up '': -22 [ 204.886765][ T7368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.502'. [ 204.924480][ T5829] cdc_acm 3-1:7.128: invalid descriptor buffer length [ 204.988720][ T5829] usb 3-1: USB disconnect, device number 21 [ 204.996574][ T7372] comedi comedi3: dt2815: I/O base address or length out of range [ 204.996622][ T7372] FAULT_INJECTION: forcing a failure. [ 204.996622][ T7372] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.996653][ T7372] CPU: 1 UID: 0 PID: 7372 Comm: syz.0.503 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 204.996679][ T7372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 204.996693][ T7372] Call Trace: [ 204.996702][ T7372] [ 204.996711][ T7372] dump_stack_lvl+0xe8/0x150 [ 204.996744][ T7372] should_fail_ex+0x46b/0x600 [ 204.996782][ T7372] _copy_to_user+0x31/0xb0 [ 204.996811][ T7372] simple_read_from_buffer+0xe1/0x170 [ 204.996841][ T7372] proc_fail_nth_read+0x1be/0x230 [ 204.996869][ T7372] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 204.996896][ T7372] ? rw_verify_area+0x2ac/0x4e0 [ 204.996922][ T7372] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 204.996948][ T7372] vfs_read+0x212/0xa80 [ 204.996984][ T7372] ? __pfx_vfs_read+0x10/0x10 [ 204.997013][ T7372] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 204.997043][ T7372] ? lockdep_hardirqs_on+0x7a/0x110 [ 204.997072][ T7372] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 204.997100][ T7372] ? mutex_lock_nested+0x152/0x1d0 [ 204.997135][ T7372] ? fdget_pos+0x252/0x320 [ 204.997167][ T7372] ksys_read+0x156/0x270 [ 204.997204][ T7372] ? __pfx_ksys_read+0x10/0x10 [ 204.997231][ T7372] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 204.997263][ T7372] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.997294][ T7372] do_syscall_64+0x174/0x580 [ 204.997322][ T7372] ? trace_irq_disable+0x3b/0x140 [ 204.997351][ T7372] ? clear_bhb_loop+0x40/0x90 [ 204.997380][ T7372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.997404][ T7372] RIP: 0033:0x7f166ac8d68e [ 204.997425][ T7372] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 204.997445][ T7372] RSP: 002b:00007f1668f25fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 204.997470][ T7372] RAX: ffffffffffffffda RBX: 00007f1668f266c0 RCX: 00007f166ac8d68e [ 204.997487][ T7372] RDX: 000000000000000f RSI: 00007f1668f260a0 RDI: 0000000000000004 [ 204.997501][ T7372] RBP: 00007f1668f26090 R08: 0000000000000000 R09: 0000000000000000 [ 204.997516][ T7372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.997529][ T7372] R13: 00007f166af46038 R14: 00007f166af45fa0 R15: 00007ffc64d13af8 [ 204.997563][ T7372] [ 205.074529][ T5619] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 205.209984][ T5619] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 205.210019][ T5619] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.210042][ T5619] usb 2-1: Product: syz [ 205.210089][ T5619] usb 2-1: Manufacturer: syz [ 205.210138][ T5619] usb 2-1: SerialNumber: syz [ 205.332091][ T5619] usb 2-1: config 0 descriptor?? [ 205.420232][ T7374] program syz.0.504 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 205.458272][ T5619] pegasus_notetaker 2-1:0.0: Invalid number of endpoints [ 205.458321][ T5619] pegasus_notetaker 2-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 205.527414][ T7376] netlink: 104 bytes leftover after parsing attributes in process `syz.0.505'. [ 205.930218][ T5716] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 206.097722][ T5716] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 206.097762][ T5716] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 206.097778][ T5716] usb 1-1: Product: syz [ 206.097789][ T5716] usb 1-1: Manufacturer: syz [ 206.097800][ T5716] usb 1-1: SerialNumber: syz [ 206.145110][ T5716] usb 1-1: config 0 descriptor?? [ 206.163811][ T5716] ch341 1-1:0.0: ch341-uart converter detected [ 206.570045][ T5829] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 206.714194][ T5619] usb 2-1: USB disconnect, device number 16 [ 206.732106][ T5829] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 206.732147][ T5829] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 206.732177][ T5829] usb 3-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 206.732218][ T5829] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 206.732246][ T5829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.793992][ T7388] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 206.836429][ T5829] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 206.839772][ T5829] usb 3-1: invalid MIDI out EP 0 [ 207.021252][ T7388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.029834][ T7388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.076288][ T7388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.076925][ T7388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.078459][ T7388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.084082][ T7388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.096856][ T7388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.129525][ T7388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.142753][ T7388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.162651][ T7388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.178337][ T5716] ch341-uart ttyUSB0: break control not supported, using simulated break [ 207.321377][ T5716] usb 1-1: ch341-uart converter now attached to ttyUSB0 [ 207.401555][ T5716] usb 1-1: USB disconnect, device number 17 [ 207.545249][ T5716] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 207.547618][ T5716] ch341 1-1:0.0: device disconnected [ 207.912995][ T7401] netlink: 104 bytes leftover after parsing attributes in process `syz.0.515'. [ 207.915666][ T7402] program syz.1.514 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 208.272683][ T5829] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 208.313597][ T5829] usb 3-1: USB disconnect, device number 22 [ 208.369431][ T7411] netlink: 766 bytes leftover after parsing attributes in process `syz.2.518'. [ 208.557901][ T7419] netlink: zone id is out of range [ 208.557914][ T7419] netlink: zone id is out of range [ 208.557959][ T7419] netlink: del zone limit has 8 unknown bytes [ 208.824338][ T7423] comedi comedi3: dt2815: I/O base address or length out of range [ 208.967048][ T7431] program syz.1.524 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 209.025686][ T7435] netlink: 104 bytes leftover after parsing attributes in process `syz.2.525'. [ 209.402193][ T1254] hid (null): unknown global tag 0x2a [ 209.539370][ T1254] hid-generic 0005:0006:0004.000A: collection stack underflow [ 209.539407][ T1254] hid-generic 0005:0006:0004.000A: item 0 0 0 12 parsing failed [ 209.595577][ T1254] hid-generic 0005:0006:0004.000A: probe with driver hid-generic failed with error -22 [ 209.987605][ T7461] FAULT_INJECTION: forcing a failure. [ 209.987605][ T7461] name failslab, interval 1, probability 0, space 0, times 0 [ 209.987644][ T7461] CPU: 1 UID: 0 PID: 7461 Comm: syz.0.532 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 209.987669][ T7461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 209.987684][ T7461] Call Trace: [ 209.987693][ T7461] [ 209.987703][ T7461] dump_stack_lvl+0xe8/0x150 [ 209.987735][ T7461] should_fail_ex+0x46b/0x600 [ 209.987766][ T7461] should_failslab+0xa8/0x100 [ 209.987789][ T7461] kmem_cache_alloc_noprof+0xa4/0x6c0 [ 209.987819][ T7461] ? __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 209.987841][ T7461] ? __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 209.987870][ T7461] __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 209.987904][ T7461] mmu_topup_memory_caches+0x21/0x170 [ 209.987930][ T7461] kvm_mmu_load+0x9d/0x2320 [ 209.987953][ T7461] ? kvm_msr_allowed+0x9a/0x490 [ 209.987981][ T7461] ? kvm_msr_allowed+0x9a/0x490 [ 209.988006][ T7461] ? kvm_msr_allowed+0x3f4/0x490 [ 209.988031][ T7461] ? kvm_msr_allowed+0x9a/0x490 [ 209.988058][ T7461] ? kvm_apic_has_interrupt+0x73c/0x770 [ 209.988087][ T7461] ? vmx_recalc_intercepts+0xec4/0x1b10 [ 209.988122][ T7461] vcpu_run+0x4d6a/0x76f0 [ 209.988169][ T7461] ? ___ratelimit+0x1ea/0x8d0 [ 209.988215][ T7461] ? __pfx_vcpu_run+0x10/0x10 [ 209.988232][ T7461] ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0 [ 209.988251][ T7461] ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0 [ 209.988280][ T7461] kvm_arch_vcpu_ioctl_run+0x11e6/0x20d0 [ 209.988310][ T7461] ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0 [ 209.988327][ T7461] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 209.988349][ T7461] ? do_raw_spin_lock+0x12b/0x2f0 [ 209.988387][ T7461] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 209.988410][ T7461] ? lockdep_hardirqs_on+0x7a/0x110 [ 209.988433][ T7461] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 209.988455][ T7461] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 209.988477][ T7461] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 209.988496][ T7461] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 209.988517][ T7461] ? lockdep_hardirqs_on+0x7a/0x110 [ 209.988539][ T7461] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 209.988560][ T7461] ? rt_write_unlock+0x190/0x230 [ 209.988580][ T7461] kvm_vcpu_ioctl+0xa65/0xfe0 [ 209.988615][ T7461] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 209.988658][ T7461] ? __fget_files+0x2a/0x420 [ 209.988679][ T7461] ? __fget_files+0x2a/0x420 [ 209.988695][ T7461] ? __fget_files+0x3a6/0x420 [ 209.988712][ T7461] ? __fget_files+0x2a/0x420 [ 209.988733][ T7461] ? bpf_lsm_file_ioctl+0x9/0x20 [ 209.988754][ T7461] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 209.988781][ T7461] __se_sys_ioctl+0xff/0x170 [ 209.988805][ T7461] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.988824][ T7461] do_syscall_64+0x174/0x580 [ 209.988848][ T7461] ? clear_bhb_loop+0x40/0x90 [ 209.988870][ T7461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.988891][ T7461] RIP: 0033:0x7f166accce59 [ 209.988910][ T7461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.988926][ T7461] RSP: 002b:00007f1668f05028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 209.988946][ T7461] RAX: ffffffffffffffda RBX: 00007f166af46090 RCX: 00007f166accce59 [ 209.988960][ T7461] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 209.988971][ T7461] RBP: 00007f1668f05090 R08: 0000000000000000 R09: 0000000000000000 [ 209.988982][ T7461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 209.988994][ T7461] R13: 00007f166af46128 R14: 00007f166af46090 R15: 00007ffc64d13af8 [ 209.989022][ T7461] [ 210.429427][ T7473] program syz.1.536 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 210.567127][ T7475] netlink: 28 bytes leftover after parsing attributes in process `syz.1.538'. [ 210.567668][ T7477] netlink: 104 bytes leftover after parsing attributes in process `syz.2.537'. [ 210.710039][ T5829] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 210.885719][ T5829] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 210.885758][ T5829] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.885801][ T5829] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 210.885830][ T5829] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.955861][ T7483] FAULT_INJECTION: forcing a failure. [ 210.955861][ T7483] name failslab, interval 1, probability 0, space 0, times 0 [ 210.955889][ T7483] CPU: 0 UID: 0 PID: 7483 Comm: syz.0.540 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 210.955932][ T7483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 210.955946][ T7483] Call Trace: [ 210.955954][ T7483] [ 210.955963][ T7483] dump_stack_lvl+0xe8/0x150 [ 210.955996][ T7483] should_fail_ex+0x46b/0x600 [ 210.956035][ T7483] should_failslab+0xa8/0x100 [ 210.956063][ T7483] __kmalloc_cache_noprof+0xa0/0x6d0 [ 210.956087][ T7483] ? lockdep_hardirqs_on+0x7a/0x110 [ 210.956115][ T7483] ? resv_map_alloc+0x51/0x2e0 [ 210.956147][ T7483] ? resv_map_alloc+0x51/0x2e0 [ 210.956183][ T7483] ? rt_mutex_slowunlock+0x1cb/0x300 [ 210.956208][ T7483] resv_map_alloc+0x51/0x2e0 [ 210.956235][ T7483] hugetlbfs_get_inode+0x5d/0x650 [ 210.956258][ T7483] ? fput+0xa0/0xd0 [ 210.956291][ T7483] hugetlb_file_setup+0x21d/0x630 [ 210.956327][ T7483] ksys_mmap_pgoff+0x22e/0x720 [ 210.956364][ T7483] ? __x64_sys_mmap+0x7f/0x140 [ 210.956393][ T7483] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.956417][ T7483] do_syscall_64+0x174/0x580 [ 210.956445][ T7483] ? trace_irq_disable+0x3b/0x140 [ 210.956473][ T7483] ? clear_bhb_loop+0x40/0x90 [ 210.956500][ T7483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.956523][ T7483] RIP: 0033:0x7f166accce59 [ 210.956543][ T7483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.956563][ T7483] RSP: 002b:00007f1668f05028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 210.956586][ T7483] RAX: ffffffffffffffda RBX: 00007f166af46090 RCX: 00007f166accce59 [ 210.956604][ T7483] RDX: 0000000002000009 RSI: 0000000000003000 RDI: 0000200000400000 [ 210.956619][ T7483] RBP: 00007f1668f05090 R08: ffffffffffffffff R09: 0000000000000000 [ 210.956635][ T7483] R10: 000000000004d032 R11: 0000000000000246 R12: 0000000000000001 [ 210.956648][ T7483] R13: 00007f166af46128 R14: 00007f166af46090 R15: 00007ffc64d13af8 [ 210.956683][ T7483] [ 210.963926][ T5829] usb 4-1: config 0 descriptor?? [ 211.473469][ T5829] elan 0003:04F3:0755.000B: failed to start in urb: -90 [ 211.507284][ T5829] elan 0003:04F3:0755.000B: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 211.659822][ T7496] program syz.2.546 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 211.802883][ T7500] netlink: 104 bytes leftover after parsing attributes in process `syz.1.547'. [ 211.970884][ T5829] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 212.136536][ T5829] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.136598][ T5829] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 212.136626][ T5829] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.196759][ T5829] usb 1-1: config 0 descriptor?? [ 212.239188][ T5829] pwc: Askey VC010 type 2 USB webcam detected. [ 212.560219][ T5619] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 212.721017][ T5619] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 212.721207][ T5619] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.721460][ T5619] usb 3-1: Product: syz [ 212.721478][ T5619] usb 3-1: Manufacturer: syz [ 212.721495][ T5619] usb 3-1: SerialNumber: syz [ 212.824093][ T5829] pwc: recv_control_msg error -32 req 02 val 2700 [ 212.827231][ T5829] pwc: recv_control_msg error -32 req 02 val 2c00 [ 212.828583][ T5829] pwc: recv_control_msg error -32 req 04 val 1000 [ 212.829668][ T5829] pwc: recv_control_msg error -32 req 04 val 1300 [ 212.848086][ T5829] pwc: recv_control_msg error -32 req 04 val 1400 [ 212.921968][ T5619] usb 3-1: config 0 descriptor?? [ 212.973329][ T7498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.991869][ T7498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.014884][ T5829] pwc: recv_control_msg error -32 req 02 val 2000 [ 213.020188][ T5619] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 213.025197][ T5829] pwc: recv_control_msg error -32 req 02 val 2100 [ 213.044350][ T5829] pwc: recv_control_msg error -32 req 04 val 1500 [ 213.318855][ T5829] pwc: recv_control_msg error -71 req 02 val 2400 [ 213.319665][ T5829] pwc: recv_control_msg error -71 req 02 val 2600 [ 213.326200][ T5829] pwc: recv_control_msg error -71 req 02 val 2900 [ 213.342410][ T5829] pwc: recv_control_msg error -71 req 02 val 2800 [ 213.379764][ T5829] pwc: recv_control_msg error -71 req 04 val 1100 [ 213.383634][ T5829] pwc: recv_control_msg error -71 req 04 val 1200 [ 213.518324][ T7515] netlink: 'syz.1.551': attribute type 21 has an invalid length. [ 213.518352][ T7515] netlink: 128 bytes leftover after parsing attributes in process `syz.1.551'. [ 213.518511][ T7515] netlink: 'syz.1.551': attribute type 5 has an invalid length. [ 213.518529][ T7515] netlink: 'syz.1.551': attribute type 6 has an invalid length. [ 213.518544][ T7515] netlink: 3 bytes leftover after parsing attributes in process `syz.1.551'. [ 213.698885][ T5829] pwc: Registered as video103. [ 213.704160][ T5717] usb 4-1: USB disconnect, device number 21 [ 213.709190][ T5619] videodev: could not get a free minor [ 213.709225][ T5619] gspca_main: video_register_device err -23 [ 213.709434][ T5619] sq905c 3-1:0.0: probe with driver sq905c failed with error -23 [ 213.925047][ T5619] usb 3-1: USB disconnect, device number 23 [ 213.989697][ T5829] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7 [ 214.090015][ T5702] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 214.154638][ T5829] usb 1-1: USB disconnect, device number 18 [ 214.254906][ T5702] usb 2-1: Using ep0 maxpacket: 32 [ 214.274996][ T5702] usb 2-1: unable to get BOS descriptor or descriptor too short [ 214.284106][ T5702] usb 2-1: config 8 has an invalid interface number: 46 but max is 0 [ 214.292525][ T5702] usb 2-1: config 8 has no interface number 0 [ 214.292661][ T5702] usb 2-1: config 8 interface 46 has no altsetting 0 [ 214.331727][ T5702] usb 2-1: New USB device found, idVendor=12d1, idProduct=1430, bcdDevice= 0.00 [ 214.331751][ T5702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.331766][ T5702] usb 2-1: Product: syz [ 214.331777][ T5702] usb 2-1: Manufacturer: syz [ 214.331788][ T5702] usb 2-1: SerialNumber: syz [ 214.678618][ T7530] program syz.2.556 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 214.910514][ T7532] netlink: 104 bytes leftover after parsing attributes in process `syz.0.557'. [ 214.937684][ T7534] FAULT_INJECTION: forcing a failure. [ 214.937684][ T7534] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 214.937720][ T7534] CPU: 1 UID: 0 PID: 7534 Comm: syz.2.558 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 214.937743][ T7534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 214.937755][ T7534] Call Trace: [ 214.937825][ T7534] [ 214.937889][ T7534] dump_stack_lvl+0xe8/0x150 [ 214.938008][ T7534] should_fail_ex+0x46b/0x600 [ 214.938121][ T7534] prepare_alloc_pages+0x22a/0x6b0 [ 214.938159][ T7534] __alloc_frozen_pages_noprof+0x12f/0x380 [ 214.938186][ T7534] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 214.938241][ T7534] ? __pfx_policy_nodemask+0x10/0x10 [ 214.938283][ T7534] alloc_pages_mpol+0xd1/0x380 [ 214.938310][ T7534] alloc_pages_noprof+0xd2/0x2f0 [ 214.938337][ T7534] rds_page_remainder_alloc+0x55/0xb60 [ 214.938414][ T7534] ? copy_page_from_iter+0x283/0x2d0 [ 214.938527][ T7534] rds_message_copy_from_user+0x32f/0xcc0 [ 214.938557][ T7534] ? __pfx_rds_message_copy_from_user+0x10/0x10 [ 214.938579][ T7534] ? __asan_memset+0x22/0x50 [ 214.938609][ T7534] ? rds_message_alloc_sgs+0xab/0x180 [ 214.938630][ T7534] rds_sendmsg+0xd7c/0x2130 [ 214.938663][ T7534] ? __pfx_rds_sendmsg+0x10/0x10 [ 214.938683][ T7534] ? irqentry_exit+0x218/0x8c0 [ 214.938710][ T7534] ? __pfx_rds_sendmsg+0x10/0x10 [ 214.938731][ T7534] ? __pfx_rds_sendmsg+0x10/0x10 [ 214.938751][ T7534] ? sock_sendmsg_nosec+0x128/0x180 [ 214.938785][ T7534] ? __pfx_rds_sendmsg+0x10/0x10 [ 214.938806][ T7534] sock_sendmsg_nosec+0x13a/0x180 [ 214.938838][ T7534] ____sys_sendmsg+0x55c/0x870 [ 214.938867][ T7534] ? __pfx_____sys_sendmsg+0x10/0x10 [ 214.938900][ T7534] ? import_iovec+0x73/0xa0 [ 214.938925][ T7534] ___sys_sendmsg+0x2a5/0x360 [ 214.938949][ T7534] ? __lock_acquire+0x6b5/0x2d10 [ 214.939003][ T7534] ? __pfx____sys_sendmsg+0x10/0x10 [ 214.939066][ T7534] ? __fget_files+0x2a/0x420 [ 214.939086][ T7534] ? __fget_files+0x3a6/0x420 [ 214.939117][ T7534] __x64_sys_sendmsg+0x1b7/0x290 [ 214.939149][ T7534] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 214.939194][ T7534] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.939220][ T7534] do_syscall_64+0x174/0x580 [ 214.939249][ T7534] ? trace_irq_disable+0x3b/0x140 [ 214.939301][ T7534] ? clear_bhb_loop+0x40/0x90 [ 214.939331][ T7534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.939355][ T7534] RIP: 0033:0x7f7e3d2dce59 [ 214.939421][ T7534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.939471][ T7534] RSP: 002b:00007f7e3b52e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 214.939504][ T7534] RAX: ffffffffffffffda RBX: 00007f7e3d555fa0 RCX: 00007f7e3d2dce59 [ 214.939520][ T7534] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 214.939534][ T7534] RBP: 00007f7e3b52e090 R08: 0000000000000000 R09: 0000000000000000 [ 214.939545][ T7534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 214.939556][ T7534] R13: 00007f7e3d556038 R14: 00007f7e3d555fa0 R15: 00007fffecc6d228 [ 214.939584][ T7534] [ 214.993013][ T5702] usb-storage 2-1:8.46: USB Mass Storage device detected [ 215.511212][ T5702] usb 2-1: USB disconnect, device number 17 [ 216.320804][ T7561] FAULT_INJECTION: forcing a failure. [ 216.320804][ T7561] name failslab, interval 1, probability 0, space 0, times 0 [ 216.320843][ T7561] CPU: 1 UID: 0 PID: 7561 Comm: syz.1.565 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 216.320870][ T7561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 216.320885][ T7561] Call Trace: [ 216.320894][ T7561] [ 216.320904][ T7561] dump_stack_lvl+0xe8/0x150 [ 216.320941][ T7561] should_fail_ex+0x46b/0x600 [ 216.320989][ T7561] should_failslab+0xa8/0x100 [ 216.321018][ T7561] kmem_cache_alloc_noprof+0xa4/0x6c0 [ 216.321057][ T7561] ? __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 216.321111][ T7561] ? __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 216.321150][ T7561] __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 216.321195][ T7561] mmu_topup_memory_caches+0x21/0x170 [ 216.321245][ T7561] kvm_mmu_load+0x9d/0x2320 [ 216.321276][ T7561] ? kvm_msr_allowed+0x9a/0x490 [ 216.321312][ T7561] ? kvm_msr_allowed+0x9a/0x490 [ 216.321348][ T7561] ? kvm_msr_allowed+0x3f4/0x490 [ 216.321383][ T7561] ? kvm_msr_allowed+0x9a/0x490 [ 216.321418][ T7561] ? kvm_apic_has_interrupt+0x73c/0x770 [ 216.321457][ T7561] ? vmx_recalc_intercepts+0xec4/0x1b10 [ 216.321510][ T7561] vcpu_run+0x4d6a/0x76f0 [ 216.321613][ T7561] ? __pfx_vcpu_run+0x10/0x10 [ 216.321635][ T7561] ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0 [ 216.321662][ T7561] ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0 [ 216.321703][ T7561] kvm_arch_vcpu_ioctl_run+0x11e6/0x20d0 [ 216.321742][ T7561] ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0 [ 216.321767][ T7561] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 216.321797][ T7561] ? do_raw_spin_lock+0x12b/0x2f0 [ 216.321836][ T7561] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 216.321979][ T7561] ? lockdep_hardirqs_on+0x7a/0x110 [ 216.322009][ T7561] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 216.322038][ T7561] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 216.322067][ T7561] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 216.322091][ T7561] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 216.322120][ T7561] ? lockdep_hardirqs_on+0x7a/0x110 [ 216.322149][ T7561] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 216.322178][ T7561] ? rt_write_unlock+0x190/0x230 [ 216.322204][ T7561] kvm_vcpu_ioctl+0xa65/0xfe0 [ 216.322246][ T7561] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 216.322303][ T7561] ? __fget_files+0x2a/0x420 [ 216.322330][ T7561] ? __fget_files+0x2a/0x420 [ 216.322353][ T7561] ? __fget_files+0x3a6/0x420 [ 216.322375][ T7561] ? __fget_files+0x2a/0x420 [ 216.322402][ T7561] ? bpf_lsm_file_ioctl+0x9/0x20 [ 216.322441][ T7561] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 216.322476][ T7561] __se_sys_ioctl+0xff/0x170 [ 216.322506][ T7561] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.322532][ T7561] do_syscall_64+0x174/0x580 [ 216.322561][ T7561] ? trace_irq_disable+0x3b/0x140 [ 216.322590][ T7561] ? clear_bhb_loop+0x40/0x90 [ 216.322619][ T7561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.322642][ T7561] RIP: 0033:0x7ff2e94ece59 [ 216.322664][ T7561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.322683][ T7561] RSP: 002b:00007ff2e7725028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 216.322708][ T7561] RAX: ffffffffffffffda RBX: 00007ff2e9766090 RCX: 00007ff2e94ece59 [ 216.322725][ T7561] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 216.322739][ T7561] RBP: 00007ff2e7725090 R08: 0000000000000000 R09: 0000000000000000 [ 216.322754][ T7561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 216.322768][ T7561] R13: 00007ff2e9766128 R14: 00007ff2e9766090 R15: 00007ffd4a7ba268 [ 216.322805][ T7561] [ 216.759886][ T7566] program syz.3.567 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 216.922968][ T7573] netlink: 104 bytes leftover after parsing attributes in process `syz.0.569'. [ 217.180102][ T1254] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 217.331695][ T1254] usb 4-1: Using ep0 maxpacket: 8 [ 217.345776][ T1254] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 217.345810][ T1254] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.345835][ T1254] usb 4-1: Product: syz [ 217.345851][ T1254] usb 4-1: Manufacturer: syz [ 217.345868][ T1254] usb 4-1: SerialNumber: syz [ 217.403179][ T1254] usb 4-1: config 0 descriptor?? [ 217.626073][ T1254] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 218.022646][ T7600] program syz.0.579 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 218.149595][ T7603] kAFS: Can only specify source 'none' with -o dyn [ 218.330765][ T32] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 218.352798][ T7605] netlink: 104 bytes leftover after parsing attributes in process `syz.1.581'. [ 218.520001][ T32] usb 3-1: Using ep0 maxpacket: 32 [ 218.550317][ T32] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1032, setting to 1024 [ 218.556301][ T32] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 218.556335][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.556421][ T32] usb 3-1: Product: syz [ 218.556440][ T32] usb 3-1: Manufacturer: syz [ 218.556459][ T32] usb 3-1: SerialNumber: syz [ 218.655437][ T1254] usb write operation failed. (-71) [ 218.806291][ T1254] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 218.852462][ T1254] dvbdev: DVB: registering new adapter (Terratec H7) [ 218.852588][ T1254] usb 4-1: media controller created [ 218.853030][ T1254] usb read operation failed. (-71) [ 218.855859][ T1254] usb write operation failed. (-71) [ 218.893396][ T32] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 218.980767][ T1254] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 219.038114][ T1254] usb 4-1: USB disconnect, device number 22 [ 219.371903][ T5702] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 219.530029][ T5702] usb 1-1: Using ep0 maxpacket: 8 [ 219.532961][ T5702] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 219.532992][ T5702] usb 1-1: config 0 has no interface number 0 [ 219.533040][ T5702] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 219.533067][ T5702] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 219.533098][ T5702] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 219.533119][ T5702] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 219.533176][ T5702] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 219.533204][ T5702] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.539566][ T5702] usb 1-1: config 0 descriptor?? [ 219.749771][ T5702] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 219.761535][ T7625] program syz.3.588 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 219.901400][ T7616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.907475][ T7616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.022107][ T5702] usb 1-1: USB disconnect, device number 19 [ 220.023271][ C1] ldusb 1-1:0.55: usb_submit_urb failed (-19) [ 220.068860][ T5702] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 220.543060][ T7636] netlink: 104 bytes leftover after parsing attributes in process `syz.1.591'. [ 220.842922][ T7640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.592'. [ 220.997902][ T37] audit: type=1326 audit(1782184635.858:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7631 comm="syz.3.590" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13fa9dce59 code=0x7fc00000 [ 221.047482][ T37] audit: type=1326 audit(1782184635.858:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7631 comm="syz.3.590" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f13fa9dce59 code=0x7fc00000 [ 221.074027][ T32] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 221.290478][ T32] usb 3-1: USB disconnect, device number 24 [ 221.330092][ T5873] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 221.494232][ T5873] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.494292][ T5873] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 221.494320][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.586514][ T5873] usb 2-1: config 0 descriptor?? [ 221.602546][ T5873] pwc: Askey VC010 type 2 USB webcam detected. [ 221.692757][ T5837] udevd[5837]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 221.907724][ T7658] program syz.0.598 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 222.003142][ T5873] pwc: recv_control_msg error -32 req 02 val 2b00 [ 222.050156][ T60] Bluetooth: hci3: command 0x0406 tx timeout [ 222.055695][ T5617] Bluetooth: hci0: command 0x0406 tx timeout [ 222.269532][ T7665] FAULT_INJECTION: forcing a failure. [ 222.269532][ T7665] name failslab, interval 1, probability 0, space 0, times 0 [ 222.269580][ T7665] CPU: 0 UID: 0 PID: 7665 Comm: syz.2.601 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 222.269601][ T7665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 222.269613][ T7665] Call Trace: [ 222.269620][ T7665] [ 222.269628][ T7665] dump_stack_lvl+0xe8/0x150 [ 222.269655][ T7665] should_fail_ex+0x46b/0x600 [ 222.269685][ T7665] should_failslab+0xa8/0x100 [ 222.269710][ T7665] kmem_cache_alloc_node_noprof+0xae/0x710 [ 222.269745][ T7665] ? __alloc_skb+0x1d0/0x7d0 [ 222.269765][ T7665] ? __alloc_skb+0x1d0/0x7d0 [ 222.269791][ T7665] __alloc_skb+0x1d0/0x7d0 [ 222.269818][ T7665] __ip6_append_data+0x2d3c/0x3f60 [ 222.269873][ T7665] ? __pfx_raw6_getfrag+0x10/0x10 [ 222.269920][ T7665] ? __pfx___ip6_append_data+0x10/0x10 [ 222.269942][ T7665] ? ip6_setup_cork+0x544/0xf30 [ 222.269964][ T7665] ? ip6_append_data+0x1c7/0x2a0 [ 222.269986][ T7665] ip6_append_data+0x10f/0x2a0 [ 222.270010][ T7665] ? __pfx_raw6_getfrag+0x10/0x10 [ 222.270035][ T7665] rawv6_sendmsg+0x12d3/0x18e0 [ 222.270070][ T7665] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 222.270122][ T7665] ? __pfx_aa_sk_perm+0x10/0x10 [ 222.270206][ T7665] ? sock_rps_record_flow+0x19/0x350 [ 222.270302][ T7665] ? inet_sendmsg+0x2f4/0x370 [ 222.270318][ T7665] ? aa_sock_msg_perm+0x122/0x200 [ 222.270337][ T7665] ? __pfx_inet_sendmsg+0x10/0x10 [ 222.270354][ T7665] sock_sendmsg_nosec+0x10e/0x180 [ 222.270386][ T7665] ____sys_sendmsg+0x55c/0x870 [ 222.270415][ T7665] ? __pfx_____sys_sendmsg+0x10/0x10 [ 222.270447][ T7665] ? import_iovec+0x73/0xa0 [ 222.270470][ T7665] ___sys_sendmsg+0x2a5/0x360 [ 222.270494][ T7665] ? __lock_acquire+0x6b5/0x2d10 [ 222.270524][ T7665] ? __pfx____sys_sendmsg+0x10/0x10 [ 222.270588][ T7665] ? __fget_files+0x2a/0x420 [ 222.270608][ T7665] ? __fget_files+0x3a6/0x420 [ 222.270634][ T7665] __x64_sys_sendmsg+0x1b7/0x290 [ 222.270662][ T7665] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 222.270708][ T7665] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.270729][ T7665] do_syscall_64+0x174/0x580 [ 222.270752][ T7665] ? trace_irq_disable+0x3b/0x140 [ 222.270773][ T7665] ? clear_bhb_loop+0x40/0x90 [ 222.270794][ T7665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.270812][ T7665] RIP: 0033:0x7f7e3d2dce59 [ 222.270830][ T7665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.270845][ T7665] RSP: 002b:00007f7e3b52e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 222.270865][ T7665] RAX: ffffffffffffffda RBX: 00007f7e3d555fa0 RCX: 00007f7e3d2dce59 [ 222.270878][ T7665] RDX: 0000000000000060 RSI: 0000200000000080 RDI: 0000000000000004 [ 222.270889][ T7665] RBP: 00007f7e3b52e090 R08: 0000000000000000 R09: 0000000000000000 [ 222.270900][ T7665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 222.270910][ T7665] R13: 00007f7e3d556038 R14: 00007f7e3d555fa0 R15: 00007fffecc6d228 [ 222.270938][ T7665] [ 222.960010][ T5702] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 223.110010][ T5702] usb 1-1: Using ep0 maxpacket: 16 [ 223.112864][ T5702] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.112907][ T5702] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.112934][ T5702] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 223.112980][ T5702] usb 1-1: New USB device found, idVendor=045e, idProduct=9994, bcdDevice=fc.3c [ 223.113010][ T5702] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.147926][ T5702] usb 1-1: config 0 descriptor?? [ 223.550070][ T5829] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 223.642845][ T5702] hid (null): unknown global tag 0xd [ 223.727433][ T5702] hid_parser_main: 30 callbacks suppressed [ 223.727610][ T5702] hid-generic 0003:045E:9994.000C: unknown main item tag 0x2 [ 223.730979][ T5873] pwc: recv_control_msg error -71 req 02 val 2c00 [ 223.732631][ T5873] pwc: recv_control_msg error -71 req 04 val 1000 [ 223.746258][ T5702] hid-generic 0003:045E:9994.000C: unknown main item tag 0x7 [ 223.746359][ T5702] hid-generic 0003:045E:9994.000C: unknown global tag 0xd [ 223.746380][ T5702] hid-generic 0003:045E:9994.000C: item 0 4 1 13 parsing failed [ 223.750335][ T5702] hid-generic 0003:045E:9994.000C: probe with driver hid-generic failed with error -22 [ 223.802727][ T5873] pwc: recv_control_msg error -71 req 04 val 1300 [ 223.804798][ T5873] pwc: recv_control_msg error -71 req 04 val 1400 [ 223.805339][ T5873] pwc: recv_control_msg error -71 req 02 val 2000 [ 223.805774][ T5873] pwc: recv_control_msg error -71 req 02 val 2100 [ 223.807114][ T5873] pwc: recv_control_msg error -71 req 04 val 1500 [ 223.852459][ T5873] pwc: recv_control_msg error -71 req 02 val 2500 [ 223.856735][ T5873] pwc: recv_control_msg error -71 req 02 val 2400 [ 223.857215][ T5873] pwc: recv_control_msg error -71 req 02 val 2600 [ 223.859220][ T5873] pwc: recv_control_msg error -71 req 02 val 2900 [ 223.859698][ T5873] pwc: recv_control_msg error -71 req 02 val 2800 [ 223.897873][ T5873] pwc: recv_control_msg error -71 req 04 val 1100 [ 223.899805][ T5873] pwc: recv_control_msg error -71 req 04 val 1200 [ 223.925686][ T5873] pwc: Registered as video103. [ 223.957644][ T5873] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input8 [ 223.975118][ T5873] usb 2-1: USB disconnect, device number 18 [ 224.469515][ T5873] usb 1-1: USB disconnect, device number 20 [ 225.323059][ T7689] program syz.1.609 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 225.866395][ T7698] FAULT_INJECTION: forcing a failure. [ 225.866395][ T7698] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.866426][ T7698] CPU: 1 UID: 0 PID: 7698 Comm: syz.2.613 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 225.866447][ T7698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 225.866458][ T7698] Call Trace: [ 225.866465][ T7698] [ 225.866473][ T7698] dump_stack_lvl+0xe8/0x150 [ 225.866499][ T7698] should_fail_ex+0x46b/0x600 [ 225.866530][ T7698] _copy_to_iter+0x404/0x17d0 [ 225.866572][ T7698] ? __pfx__copy_to_iter+0x10/0x10 [ 225.866615][ T7698] seq_read_iter+0xbf6/0xe20 [ 225.866658][ T7698] seq_read+0x36a/0x490 [ 225.866680][ T7698] ? kstrtoull+0x12f/0x1d0 [ 225.866825][ T7698] ? __pfx_seq_read+0x10/0x10 [ 225.866860][ T7698] ? apparmor_file_permission+0x1f4/0x300 [ 225.866896][ T7698] ? __pfx_seq_read+0x10/0x10 [ 225.866920][ T7698] proc_reg_read+0x1f6/0x2f0 [ 225.866960][ T7698] vfs_readv+0x597/0x850 [ 225.866992][ T7698] ? __pfx_proc_reg_read+0x10/0x10 [ 225.867020][ T7698] ? __pfx_vfs_readv+0x10/0x10 [ 225.867062][ T7698] ? __fget_files+0x2a/0x420 [ 225.867086][ T7698] ? __fget_files+0x3a6/0x420 [ 225.867105][ T7698] ? __fget_files+0x2a/0x420 [ 225.867131][ T7698] __x64_sys_preadv+0x1a2/0x2b0 [ 225.867159][ T7698] ? __pfx___x64_sys_preadv+0x10/0x10 [ 225.867193][ T7698] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.867213][ T7698] do_syscall_64+0x174/0x580 [ 225.867236][ T7698] ? trace_irq_disable+0x3b/0x140 [ 225.867259][ T7698] ? clear_bhb_loop+0x40/0x90 [ 225.867280][ T7698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.867298][ T7698] RIP: 0033:0x7f7e3d2dce59 [ 225.867315][ T7698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.867330][ T7698] RSP: 002b:00007f7e3b52e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 225.867351][ T7698] RAX: ffffffffffffffda RBX: 00007f7e3d555fa0 RCX: 00007f7e3d2dce59 [ 225.867365][ T7698] RDX: 0000000000000004 RSI: 0000200000000b40 RDI: 0000000000000004 [ 225.867386][ T7698] RBP: 00007f7e3b52e090 R08: 0000000000000005 R09: 0000000000000000 [ 225.867398][ T7698] R10: 0000000000000039 R11: 0000000000000246 R12: 0000000000000001 [ 225.867409][ T7698] R13: 00007f7e3d556038 R14: 00007f7e3d555fa0 R15: 00007fffecc6d228 [ 225.867439][ T7698] [ 226.000131][ T823] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 226.190218][ T823] usb 2-1: Using ep0 maxpacket: 32 [ 226.193038][ T823] usb 2-1: config 8 has an invalid interface number: 139 but max is 1 [ 226.193068][ T823] usb 2-1: config 8 has an invalid interface number: 162 but max is 1 [ 226.193093][ T823] usb 2-1: config 8 has no interface number 0 [ 226.193111][ T823] usb 2-1: config 8 has no interface number 1 [ 226.193188][ T823] usb 2-1: config 8 interface 162 altsetting 8 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 226.193220][ T823] usb 2-1: config 8 interface 162 altsetting 8 endpoint 0x8A has invalid wMaxPacketSize 0 [ 226.193247][ T823] usb 2-1: config 8 interface 139 has no altsetting 0 [ 226.193269][ T823] usb 2-1: config 8 interface 162 has no altsetting 0 [ 226.196980][ T823] usb 2-1: New USB device found, idVendor=0123, idProduct=0001, bcdDevice=ce.9f [ 226.197012][ T823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.197036][ T823] usb 2-1: Product: syz [ 226.197052][ T823] usb 2-1: Manufacturer: syz [ 226.197069][ T823] usb 2-1: SerialNumber: syz [ 226.516725][ T7702] netlink: 4816 bytes leftover after parsing attributes in process `syz.2.614'. [ 226.559762][ T823] hub 2-1:8.139: Invalid hub with more than one config or interface [ 226.559808][ T823] hub 2-1:8.139: probe with driver hub failed with error -22 [ 226.599293][ T823] usbtouchscreen 2-1:8.162: probe with driver usbtouchscreen failed with error -12 [ 226.680065][ T823] usb 2-1: USB disconnect, device number 19 [ 226.728578][ T7704] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 226.775956][ T5829] usb 4-1: unable to get BOS descriptor or descriptor too short [ 226.784762][ T5829] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 226.784821][ T5829] usb 4-1: can't read configurations, error -71 [ 227.147582][ T7712] program syz.0.619 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 227.702958][ T823] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 227.733438][ T7732] overlayfs: failed to resolve './file0': -2 [ 227.739823][ T7734] program syz.1.630 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 227.861941][ T823] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 227.861976][ T823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.861999][ T823] usb 3-1: Product: syz [ 227.862015][ T823] usb 3-1: Manufacturer: syz [ 227.862031][ T823] usb 3-1: SerialNumber: syz [ 227.910544][ T5829] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 228.087932][ T5829] usb 4-1: Using ep0 maxpacket: 32 [ 228.102921][ T5829] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 228.102955][ T5829] usb 4-1: config 0 has no interface number 0 [ 228.103008][ T5829] usb 4-1: config 0 interface 31 altsetting 3 bulk endpoint 0xE has invalid maxpacket 32 [ 228.103036][ T5829] usb 4-1: config 0 interface 31 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 228.103063][ T5829] usb 4-1: config 0 interface 31 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 32 [ 228.103093][ T5829] usb 4-1: config 0 interface 31 altsetting 3 bulk endpoint 0x6 has invalid maxpacket 1024 [ 228.103122][ T5829] usb 4-1: config 0 interface 31 has no altsetting 0 [ 228.108662][ T5829] usb 4-1: New USB device found, idVendor=157e, idProduct=3204, bcdDevice=ad.ba [ 228.108708][ T5829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.108732][ T5829] usb 4-1: Product: й [ 228.108748][ T5829] usb 4-1: Manufacturer: О [ 228.223982][ T5829] usb 4-1: config 0 descriptor?? [ 228.236899][ T7730] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 228.237419][ T7730] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 228.237601][ T7730] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 228.422431][ T823] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 228.422502][ T823] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 228.950098][ T5829] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 228.990282][ T7759] program syz.1.640 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 229.050104][ T823] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 229.050187][ T823] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 229.102236][ T5829] usb 1-1: Using ep0 maxpacket: 32 [ 229.117191][ T32] usb 4-1: USB disconnect, device number 25 [ 229.136067][ T5829] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 229.136113][ T5829] usb 1-1: config 0 has no interface number 0 [ 229.136165][ T5829] usb 1-1: config 0 interface 184 has no altsetting 0 [ 229.149169][ T5829] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 229.149203][ T5829] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.149227][ T5829] usb 1-1: Product: syz [ 229.149244][ T5829] usb 1-1: Manufacturer: syz [ 229.149260][ T5829] usb 1-1: SerialNumber: syz [ 229.219099][ T7763] FAULT_INJECTION: forcing a failure. [ 229.219099][ T7763] name failslab, interval 1, probability 0, space 0, times 0 [ 229.219138][ T7763] CPU: 0 UID: 0 PID: 7763 Comm: syz.1.641 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 229.219164][ T7763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 229.219178][ T7763] Call Trace: [ 229.219187][ T7763] [ 229.219197][ T7763] dump_stack_lvl+0xe8/0x150 [ 229.219232][ T7763] should_fail_ex+0x46b/0x600 [ 229.219271][ T7763] should_failslab+0xa8/0x100 [ 229.219300][ T7763] kmem_cache_alloc_lru_noprof+0xa7/0x6b0 [ 229.219337][ T7763] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 229.219367][ T7763] ? __d_alloc+0x37/0x6f0 [ 229.219391][ T7763] ? __d_alloc+0x37/0x6f0 [ 229.219416][ T7763] ? ktime_get_coarse_real_ts64_mg+0x1c5/0x1e0 [ 229.219486][ T7763] __d_alloc+0x37/0x6f0 [ 229.219510][ T7763] ? inode_set_ctime_current+0x277/0xb40 [ 229.219547][ T7763] d_alloc_pseudo+0x21/0xc0 [ 229.219575][ T7763] alloc_path_pseudo+0x107/0x220 [ 229.219614][ T7763] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 229.219645][ T7763] alloc_file_pseudo+0xa8/0x1e0 [ 229.219666][ T7763] ? __might_fault+0xaf/0x130 [ 229.219699][ T7763] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 229.219731][ T7763] __anon_inode_getfile+0x129/0x210 [ 229.219773][ T7763] io_uring_create+0x595/0x9a0 [ 229.219821][ T7763] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 229.219870][ T7763] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 229.219895][ T7763] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 229.219940][ T7763] ? __pfx_ksys_write+0x10/0x10 [ 229.219974][ T7763] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.219999][ T7763] do_syscall_64+0x174/0x580 [ 229.220033][ T7763] ? trace_irq_disable+0x3b/0x140 [ 229.220061][ T7763] ? clear_bhb_loop+0x40/0x90 [ 229.220137][ T7763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.220160][ T7763] RIP: 0033:0x7ff2e94ece59 [ 229.220181][ T7763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.220201][ T7763] RSP: 002b:00007ff2e7745fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 229.220226][ T7763] RAX: ffffffffffffffda RBX: 0000200000000400 RCX: 00007ff2e94ece59 [ 229.220243][ T7763] RDX: 0000200000002180 RSI: 0000200000000400 RDI: 000000000000049a [ 229.220258][ T7763] RBP: 00007ff2e7746090 R08: 0000000000000000 R09: 0000000000000101 [ 229.220274][ T7763] R10: 00002000000014c0 R11: 0000000000000206 R12: 0000200000002180 [ 229.220289][ T7763] R13: 00002000000014c0 R14: 0000200000000340 R15: 00007ffd4a7ba268 [ 229.220324][ T7763] [ 229.368044][ T823] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 229.497923][ T5829] usb 1-1: config 0 descriptor?? [ 229.539029][ T823] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 229.622443][ T823] usb 3-1: USB disconnect, device number 25 [ 229.935105][ T7771] cgroup: noprefix used incorrectly [ 229.953691][ T7771] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 230.149967][ T823] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 230.280018][ T5702] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 230.309952][ T823] usb 3-1: Using ep0 maxpacket: 8 [ 230.312617][ T823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.312655][ T823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.312682][ T823] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 230.312727][ T823] usb 3-1: New USB device found, idVendor=5543, idProduct=0081, bcdDevice= 0.00 [ 230.312754][ T823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.323744][ T823] usb 3-1: config 0 descriptor?? [ 230.462790][ T5702] usb 2-1: config 248 has no interfaces? [ 230.466242][ T5702] usb 2-1: New USB device found, idVendor=0403, idProduct=ffa8, bcdDevice= e.87 [ 230.466338][ T5702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.466355][ T5702] usb 2-1: Product: syz [ 230.466367][ T5702] usb 2-1: Manufacturer: syz [ 230.466402][ T5702] usb 2-1: SerialNumber: syz [ 230.834088][ T5702] usb 2-1: USB disconnect, device number 20 [ 231.006661][ T7769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.007806][ T7769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.069719][ T7769] Option ' ' to dns_resolver key: bad/missing value [ 231.688850][ T7784] program syz.1.650 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 231.760402][ T5702] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 231.806120][ T5829] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 231.806156][ T5829] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 231.806180][ T5829] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 231.806486][ T5829] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 231.863663][ T5829] usb 1-1: USB disconnect, device number 21 [ 231.990565][ T5702] usb 4-1: Using ep0 maxpacket: 16 [ 231.999716][ T5702] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 231.999777][ T5702] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.999809][ T5702] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.000027][ T5702] usb 4-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 232.000060][ T5702] usb 4-1: config 7 interface 0 has no altsetting 0 [ 232.000100][ T5702] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 232.000127][ T5702] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.548770][ T7798] PKCS8: Unsupported PKCS#8 version [ 232.737658][ T5702] input: HID 0458:5010 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:7.0/0003:0458:5010.000E/input/input10 [ 232.900051][ T823] uclogic 0003:5543:0081.000D: failed retrieving Huion firmware version: -71 [ 232.900185][ T823] uclogic 0003:5543:0081.000D: failed probing parameters: -71 [ 232.900302][ T823] uclogic 0003:5543:0081.000D: probe with driver uclogic failed with error -71 [ 232.940017][ T5829] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 232.968833][ T823] usb 3-1: USB disconnect, device number 26 [ 232.976427][ T7779] Bluetooth: MGMT ver 1.23 [ 233.065061][ T7804] FAULT_INJECTION: forcing a failure. [ 233.065061][ T7804] name failslab, interval 1, probability 0, space 0, times 0 [ 233.065093][ T7804] CPU: 0 UID: 0 PID: 7804 Comm: syz.2.657 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 233.065114][ T7804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 233.065126][ T7804] Call Trace: [ 233.065133][ T7804] [ 233.065142][ T7804] dump_stack_lvl+0xe8/0x150 [ 233.065169][ T7804] should_fail_ex+0x46b/0x600 [ 233.065199][ T7804] should_failslab+0xa8/0x100 [ 233.065222][ T7804] kmem_cache_alloc_node_noprof+0xae/0x710 [ 233.065255][ T7804] ? __alloc_skb+0x1d0/0x7d0 [ 233.065280][ T7804] ? __alloc_skb+0x1d0/0x7d0 [ 233.065305][ T7804] __alloc_skb+0x1d0/0x7d0 [ 233.065330][ T7804] nfsd_nl_pool_mode_get_doit+0x107/0x520 [ 233.065392][ T7804] ? __pfx_nfsd_nl_pool_mode_get_doit+0x10/0x10 [ 233.065418][ T7804] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 233.065440][ T7804] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 233.065465][ T7804] genl_family_rcv_msg_doit+0x22a/0x330 [ 233.065495][ T7804] ? __asan_memcpy+0x40/0x70 [ 233.065527][ T7804] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 233.065578][ T7804] genl_rcv_msg+0x61c/0x7a0 [ 233.065614][ T7804] ? __pfx_genl_rcv_msg+0x10/0x10 [ 233.065642][ T7804] ? ref_tracker_free+0x673/0x820 [ 233.065719][ T7804] ? __pfx_nfsd_nl_pool_mode_get_doit+0x10/0x10 [ 233.065746][ T7804] ? ____sys_sendmsg+0x55c/0x870 [ 233.065769][ T7804] ? ___sys_sendmsg+0x2a5/0x360 [ 233.065792][ T7804] ? __x64_sys_sendmsg+0x1b7/0x290 [ 233.065815][ T7804] ? do_syscall_64+0x174/0x580 [ 233.065838][ T7804] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.065876][ T7804] netlink_rcv_skb+0x232/0x4b0 [ 233.065900][ T7804] ? __pfx_genl_rcv_msg+0x10/0x10 [ 233.065928][ T7804] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 233.065960][ T7804] ? netlink_deliver_tap+0x2e/0x1b0 [ 233.065982][ T7804] ? netlink_deliver_tap+0x2e/0x1b0 [ 233.066008][ T7804] genl_rcv+0x28/0x40 [ 233.066035][ T7804] netlink_unicast+0x780/0x920 [ 233.066065][ T7804] netlink_sendmsg+0x813/0xb40 [ 233.066098][ T7804] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.066124][ T7804] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 233.066150][ T7804] ? aa_sock_msg_perm+0x122/0x200 [ 233.066169][ T7804] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.066191][ T7804] sock_sendmsg_nosec+0x13a/0x180 [ 233.066222][ T7804] ____sys_sendmsg+0x55c/0x870 [ 233.066251][ T7804] ? __pfx_____sys_sendmsg+0x10/0x10 [ 233.066285][ T7804] ? import_iovec+0x73/0xa0 [ 233.066309][ T7804] ___sys_sendmsg+0x2a5/0x360 [ 233.066333][ T7804] ? __lock_acquire+0x6b5/0x2d10 [ 233.066364][ T7804] ? __pfx____sys_sendmsg+0x10/0x10 [ 233.066421][ T7804] ? __fget_files+0x2a/0x420 [ 233.066442][ T7804] ? __fget_files+0x3a6/0x420 [ 233.066471][ T7804] __x64_sys_sendmsg+0x1b7/0x290 [ 233.066500][ T7804] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 233.066541][ T7804] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.066562][ T7804] do_syscall_64+0x174/0x580 [ 233.066589][ T7804] ? trace_irq_disable+0x3b/0x140 [ 233.066612][ T7804] ? clear_bhb_loop+0x40/0x90 [ 233.066633][ T7804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.066651][ T7804] RIP: 0033:0x7f7e3d2dce59 [ 233.066668][ T7804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.066684][ T7804] RSP: 002b:00007f7e3b52e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.066704][ T7804] RAX: ffffffffffffffda RBX: 00007f7e3d555fa0 RCX: 00007f7e3d2dce59 [ 233.066717][ T7804] RDX: 0000000000040014 RSI: 0000200000000240 RDI: 0000000000000003 [ 233.066729][ T7804] RBP: 00007f7e3b52e090 R08: 0000000000000000 R09: 0000000000000000 [ 233.066740][ T7804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.066751][ T7804] R13: 00007f7e3d556038 R14: 00007f7e3d555fa0 R15: 00007fffecc6d228 [ 233.066779][ T7804] [ 233.100078][ T822] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 233.155878][ T5829] usb 2-1: Using ep0 maxpacket: 32 [ 233.506314][ T5829] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 233.506350][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.506373][ T5829] usb 2-1: Product: syz [ 233.506401][ T5829] usb 2-1: Manufacturer: syz [ 233.506418][ T5829] usb 2-1: SerialNumber: syz [ 233.553489][ T822] usb 1-1: config 1 has an invalid descriptor of length 113, skipping remainder of the config [ 233.553524][ T822] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 233.578079][ T822] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 233.578164][ T822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 233.578226][ T822] usb 1-1: SerialNumber: syz [ 233.671053][ T5829] usb 2-1: config 0 descriptor?? [ 233.777462][ T5829] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 233.784944][ T5829] dvb-usb: bulk message failed: -22 (4/0) [ 233.784969][ T5829] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 233.806868][ T5829] dvb-usb: bulk message failed: -22 (5/0) [ 233.806895][ T5829] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 234.412522][ T5829] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 234.417719][ T5829] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 234.417853][ T5829] usb 2-1: media controller created [ 234.503271][ T5702] kye 0003:0458:5010.000E: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.3-1/input0 [ 234.733878][ T5702] usb 4-1: USB disconnect, device number 26 [ 235.002917][ T7820] program syz.2.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 235.211532][ T5829] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 235.494579][ T7832] nbd: must specify at least one socket [ 235.574304][ T5717] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 235.751610][ T822] usb 1-1: 0:2 : does not exist [ 235.751794][ T822] usb 1-1: unit 5: unexpected type 0x0a [ 235.759806][ T5717] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 235.760177][ T5717] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.760256][ T5717] usb 3-1: Product: syz [ 235.760299][ T5717] usb 3-1: Manufacturer: syz [ 235.760348][ T5717] usb 3-1: SerialNumber: syz [ 235.888271][ T5829] usb 2-1: selecting invalid altsetting 3 [ 235.888296][ T5829] ttusb2: set interface to alts=3 failed [ 236.059392][ T5829] DVB: Unable to find symbol tda10086_attach() [ 236.059407][ T5829] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 236.077058][ T5829] dvb-usb: bulk message failed: -22 (4/0) [ 236.077078][ T5829] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 236.077215][ T5829] dvb-usb: bulk message failed: -22 (5/0) [ 236.077227][ T5829] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 236.077274][ T5829] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 236.171134][ T5829] usb 2-1: USB disconnect, device number 21 [ 236.325121][ T5717] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 236.325186][ T5717] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 236.326269][ T5717] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 236.366857][ T5717] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 236.567026][ T822] usb 1-1: USB disconnect, device number 22 [ 236.590525][ T5829] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 236.664308][ T7846] program syz.3.671 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 236.796288][ T7848] FAULT_INJECTION: forcing a failure. [ 236.796288][ T7848] name failslab, interval 1, probability 0, space 0, times 0 [ 236.796325][ T7848] CPU: 1 UID: 0 PID: 7848 Comm: syz.0.672 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 236.796351][ T7848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 236.796366][ T7848] Call Trace: [ 236.796374][ T7848] [ 236.796384][ T7848] dump_stack_lvl+0xe8/0x150 [ 236.796419][ T7848] should_fail_ex+0x46b/0x600 [ 236.796457][ T7848] should_failslab+0xa8/0x100 [ 236.796486][ T7848] __kmalloc_noprof+0xfe/0x7e0 [ 236.796510][ T7848] ? kvm_create_vm_debugfs+0x28b/0x8f0 [ 236.796565][ T7848] ? kvm_create_vm_debugfs+0x28b/0x8f0 [ 236.796601][ T7848] kvm_create_vm_debugfs+0x28b/0x8f0 [ 236.796636][ T7848] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 236.796674][ T7848] ? __pfx_kvm_create_vm_debugfs+0x10/0x10 [ 236.796703][ T7848] ? alloc_pages_mpol+0xb8/0x380 [ 236.796734][ T7848] ? __rt_spin_lock_init+0x3e/0x50 [ 236.796776][ T7848] kvm_dev_ioctl+0x1236/0x1610 [ 236.796814][ T7848] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 236.796842][ T7848] ? __fget_files+0x2a/0x420 [ 236.796869][ T7848] ? bpf_lsm_file_ioctl+0x9/0x20 [ 236.796895][ T7848] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 236.796926][ T7848] __se_sys_ioctl+0xff/0x170 [ 236.796956][ T7848] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.796981][ T7848] do_syscall_64+0x174/0x580 [ 236.797009][ T7848] ? trace_irq_disable+0x3b/0x140 [ 236.797038][ T7848] ? clear_bhb_loop+0x40/0x90 [ 236.797067][ T7848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.797090][ T7848] RIP: 0033:0x7f166accce59 [ 236.797112][ T7848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.797133][ T7848] RSP: 002b:00007f1668f26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 236.797157][ T7848] RAX: ffffffffffffffda RBX: 00007f166af45fa0 RCX: 00007f166accce59 [ 236.797174][ T7848] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 236.797188][ T7848] RBP: 00007f1668f26090 R08: 0000000000000000 R09: 0000000000000000 [ 236.797202][ T7848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 236.797215][ T7848] R13: 00007f166af46038 R14: 00007f166af45fa0 R15: 00007ffc64d13af8 [ 236.797250][ T7848] [ 237.068372][ T5837] udevd[5837]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 237.090054][ T5829] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 237.164969][ T5702] usb 3-1: USB disconnect, device number 27 [ 237.240100][ T5829] usb 2-1: Using ep0 maxpacket: 16 [ 237.242429][ T5829] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 237.242459][ T5829] usb 2-1: config 0 has no interface number 0 [ 237.242508][ T5829] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 237.242549][ T5829] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 237.248620][ T5829] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 237.248653][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.248668][ T5829] usb 2-1: Product: syz [ 237.248679][ T5829] usb 2-1: Manufacturer: syz [ 237.248690][ T5829] usb 2-1: SerialNumber: syz [ 237.359632][ T5829] usb 2-1: config 0 descriptor?? [ 237.365484][ T7837] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 237.365595][ T7837] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 237.390301][ T7860] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 237.613900][ T7837] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 237.614075][ T7837] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 237.730277][ T5717] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 237.816101][ T5829] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 237.890108][ T5717] usb 4-1: Using ep0 maxpacket: 8 [ 237.911488][ T5717] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 237.914655][ T5717] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 237.914678][ T5717] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 237.914736][ T5717] usb 4-1: Product: syz [ 237.914748][ T5717] usb 4-1: Manufacturer: syz [ 237.914759][ T5717] usb 4-1: SerialNumber: syz [ 238.227706][ T5717] usb 4-1: Handspring Visor / Palm OS: No valid connect info available [ 238.227770][ T5717] usb 4-1: Handspring Visor / Palm OS: port 0, is for Remote File System use [ 238.227787][ T5717] usb 4-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 238.227801][ T5717] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 238.432522][ T5717] usb 4-1: palm_os_3_probe - error -71 getting bytes available request [ 238.432686][ T5717] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 238.476606][ T5717] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 238.500681][ T5717] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 238.530120][ T5717] usb 4-1: USB disconnect, device number 27 [ 238.566005][ T5717] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 238.622754][ T5717] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 238.624581][ T5717] visor 4-1:1.0: device disconnected [ 238.649991][ T5716] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 238.792440][ T7876] program syz.2.681 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 238.809285][ T5716] usb 1-1: Using ep0 maxpacket: 32 [ 238.817534][ T5716] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 238.817566][ T5716] usb 1-1: config 0 has no interface number 0 [ 238.835650][ T5716] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 238.835686][ T5716] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.835711][ T5716] usb 1-1: Product: syz [ 238.835727][ T5716] usb 1-1: Manufacturer: syz [ 238.835744][ T5716] usb 1-1: SerialNumber: syz [ 238.875247][ T5716] usb 1-1: config 0 descriptor?? [ 238.898703][ T5716] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 238.898754][ T5716] usb 1-1: selecting invalid altsetting 1 [ 238.898774][ T5716] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 238.945827][ T5716] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 238.947802][ T5716] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 238.947863][ T5716] usb 1-1: media controller created [ 239.001732][ T5716] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 239.047505][ T7837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.065804][ T7837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.295211][ T5829] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 239.295250][ T5829] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 239.295564][ T5829] asix 2-1:0.34: probe with driver asix failed with error -71 [ 239.341795][ T5829] usb 2-1: USB disconnect, device number 22 [ 239.899614][ T7894] FAULT_INJECTION: forcing a failure. [ 239.899614][ T7894] name failslab, interval 1, probability 0, space 0, times 0 [ 239.899652][ T7894] CPU: 0 UID: 0 PID: 7894 Comm: syz.1.687 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 239.899678][ T7894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 239.899693][ T7894] Call Trace: [ 239.899702][ T7894] [ 239.899713][ T7894] dump_stack_lvl+0xe8/0x150 [ 239.899747][ T7894] should_fail_ex+0x46b/0x600 [ 239.899789][ T7894] should_failslab+0xa8/0x100 [ 239.899816][ T7894] kmem_cache_alloc_noprof+0xa4/0x6c0 [ 239.899853][ T7894] ? copy_sighand+0x50/0x240 [ 239.899922][ T7894] ? copy_sighand+0x50/0x240 [ 239.899964][ T7894] copy_sighand+0x50/0x240 [ 239.900003][ T7894] copy_process+0x1db1/0x42e0 [ 239.900046][ T7894] ? copy_process+0xd4e/0x42e0 [ 239.900101][ T7894] ? __pfx_copy_process+0x10/0x10 [ 239.900138][ T7894] ? get_pid_task+0x20/0x1f0 [ 239.900162][ T7894] ? get_pid_task+0x20/0x1f0 [ 239.900196][ T7894] kernel_clone+0x2d7/0x940 [ 239.900225][ T7894] ? __pfx_kernel_clone+0x10/0x10 [ 239.900247][ T7894] ? do_raw_spin_lock+0x12b/0x2f0 [ 239.900291][ T7894] __x64_sys_clone+0x1b6/0x230 [ 239.900318][ T7894] ? __pfx___x64_sys_clone+0x10/0x10 [ 239.900357][ T7894] ? __pfx_ksys_write+0x10/0x10 [ 239.900395][ T7894] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.900421][ T7894] do_syscall_64+0x174/0x580 [ 239.900451][ T7894] ? trace_irq_disable+0x3b/0x140 [ 239.900480][ T7894] ? clear_bhb_loop+0x40/0x90 [ 239.900508][ T7894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.900531][ T7894] RIP: 0033:0x7ff2e94ece59 [ 239.900554][ T7894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.900574][ T7894] RSP: 002b:00007ff2e7745fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 239.900599][ T7894] RAX: ffffffffffffffda RBX: 00007ff2e9765fa0 RCX: 00007ff2e94ece59 [ 239.900616][ T7894] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 239.900629][ T7894] RBP: 00007ff2e7746090 R08: 0000000000000000 R09: 0000000000000000 [ 239.900643][ T7894] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 239.900656][ T7894] R13: 00007ff2e9766038 R14: 00007ff2e9765fa0 R15: 00007ffd4a7ba268 [ 239.900689][ T7894] [ 240.113132][ T7896] FAULT_INJECTION: forcing a failure. [ 240.113132][ T7896] name failslab, interval 1, probability 0, space 0, times 0 [ 240.113221][ T7896] CPU: 0 UID: 0 PID: 7896 Comm: syz.1.688 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 240.113270][ T7896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 240.113285][ T7896] Call Trace: [ 240.113294][ T7896] [ 240.113304][ T7896] dump_stack_lvl+0xe8/0x150 [ 240.113402][ T7896] should_fail_ex+0x46b/0x600 [ 240.113457][ T7896] should_failslab+0xa8/0x100 [ 240.113501][ T7896] __kmalloc_cache_noprof+0xa0/0x6d0 [ 240.113577][ T7896] ? j1939_session_new+0x97/0x4a0 [ 240.113605][ T7896] ? j1939_session_new+0x97/0x4a0 [ 240.113628][ T7896] ? skb_ext_add+0x148/0x8f0 [ 240.113755][ T7896] j1939_session_new+0x97/0x4a0 [ 240.113794][ T7896] j1939_tp_send+0x33b/0x8c0 [ 240.113830][ T7896] ? j1939_sk_sendmsg+0x8d3/0x1350 [ 240.113950][ T7896] j1939_sk_sendmsg+0xb6d/0x1350 [ 240.113993][ T7896] ? j1939_sk_sendmsg+0x51a/0x1350 [ 240.114124][ T7896] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 240.114168][ T7896] ? aa_sock_msg_perm+0x122/0x200 [ 240.114239][ T7896] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 240.114307][ T7896] sock_sendmsg_nosec+0x13a/0x180 [ 240.114355][ T7896] ____sys_sendmsg+0x55c/0x870 [ 240.114414][ T7896] ? __pfx_____sys_sendmsg+0x10/0x10 [ 240.114474][ T7896] ? import_iovec+0x73/0xa0 [ 240.114504][ T7896] ___sys_sendmsg+0x2a5/0x360 [ 240.114596][ T7896] ? __pfx____sys_sendmsg+0x10/0x10 [ 240.114638][ T7896] ? __lock_acquire+0x6b5/0x2d10 [ 240.114784][ T7896] __sys_sendmmsg+0x279/0x4d0 [ 240.114823][ T7896] ? __pfx___sys_sendmmsg+0x10/0x10 [ 240.114904][ T7896] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 240.114965][ T7896] ? ksys_write+0x248/0x270 [ 240.115006][ T7896] ? __pfx_ksys_write+0x10/0x10 [ 240.115102][ T7896] __x64_sys_sendmmsg+0xa0/0xc0 [ 240.115132][ T7896] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.115158][ T7896] do_syscall_64+0x174/0x580 [ 240.115236][ T7896] ? trace_irq_disable+0x3b/0x140 [ 240.115294][ T7896] ? clear_bhb_loop+0x40/0x90 [ 240.115345][ T7896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.115428][ T7896] RIP: 0033:0x7ff2e94ece59 [ 240.115459][ T7896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.115480][ T7896] RSP: 002b:00007ff2e7746028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 240.115533][ T7896] RAX: ffffffffffffffda RBX: 00007ff2e9765fa0 RCX: 00007ff2e94ece59 [ 240.115577][ T7896] RDX: 03fffffffffffe3d RSI: 0000200000003e40 RDI: 0000000000000003 [ 240.115613][ T7896] RBP: 00007ff2e7746090 R08: 0000000000000000 R09: 0000000000000000 [ 240.115628][ T7896] R10: 00000000000000f5 R11: 0000000000000246 R12: 0000000000000002 [ 240.115642][ T7896] R13: 00007ff2e9766038 R14: 00007ff2e9765fa0 R15: 00007ffd4a7ba268 [ 240.115699][ T7896] [ 240.461730][ T5716] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 240.461811][ T5716] zl10353_read_register: readreg error (reg=127, ret==-110) [ 240.553911][ T5716] usb 1-1: USB disconnect, device number 23 [ 240.767432][ T7908] program syz.3.691 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 240.972383][ T823] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 241.120073][ T823] usb 3-1: Using ep0 maxpacket: 32 [ 241.122998][ T823] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 241.123030][ T823] usb 3-1: config 0 has no interface number 0 [ 241.123077][ T823] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 241.123105][ T823] usb 3-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 241.123131][ T823] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 241.123157][ T823] usb 3-1: config 0 interface 196 has no altsetting 0 [ 241.128739][ T823] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 241.128774][ T823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.128798][ T823] usb 3-1: Product: syz [ 241.128818][ T823] usb 3-1: Manufacturer: syz [ 241.128926][ T823] usb 3-1: SerialNumber: syz [ 241.233772][ T823] usb 3-1: config 0 descriptor?? [ 241.235567][ T7905] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 241.520023][ T5716] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 241.590015][ T5717] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 241.690058][ T5716] usb 2-1: Using ep0 maxpacket: 32 [ 241.692471][ T5716] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 241.692500][ T5716] usb 2-1: config 0 has no interface number 0 [ 241.695117][ T5716] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 241.695182][ T5716] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.695199][ T5716] usb 2-1: Product: syz [ 241.695210][ T5716] usb 2-1: Manufacturer: syz [ 241.695221][ T5716] usb 2-1: SerialNumber: syz [ 241.753274][ T5717] usb 1-1: Using ep0 maxpacket: 32 [ 241.753328][ T5716] usb 2-1: config 0 descriptor?? [ 241.779431][ T5717] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 241.779466][ T5717] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.779491][ T5717] usb 1-1: Product: syz [ 241.779593][ T5717] usb 1-1: Manufacturer: syz [ 241.779612][ T5717] usb 1-1: SerialNumber: syz [ 241.832419][ T5716] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 241.832507][ T5716] usb 2-1: selecting invalid altsetting 1 [ 241.832528][ T5716] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 241.868674][ T5717] usb 1-1: config 0 descriptor?? [ 241.875993][ T823] ipheth 3-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 241.896904][ T5716] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 241.897271][ T5716] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 241.897309][ T5716] usb 2-1: media controller created [ 242.007433][ T5716] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 242.142841][ T5716] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 242.142883][ T5716] zl10353_read_register: readreg error (reg=127, ret==-71) [ 242.144233][ T5716] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 242.217356][ T823] ipheth 3-1:0.196: Apple iPhone USB Ethernet device attached [ 242.236336][ T823] usb 3-1: USB disconnect, device number 28 [ 242.266597][ T5716] usb 2-1: USB disconnect, device number 23 [ 242.310052][ T5829] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 242.441368][ T823] ipheth 3-1:0.196: Apple iPhone USB Ethernet now disconnected [ 242.479614][ T5829] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.479710][ T5829] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.479765][ T5829] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 242.479791][ T5829] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.543064][ T5829] usb 4-1: config 0 descriptor?? [ 242.626265][ T5717] peak_usb 1-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 242.626439][ T5717] peak_usb 1-1:0.0 can0: sending command failure: -22 [ 242.626634][ T5717] peak_usb 1-1:0.0 can0: sending command failure: -22 [ 242.749124][ T7926] netlink: 24 bytes leftover after parsing attributes in process `syz.3.700'. [ 242.823043][ T7933] program syz.1.701 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 242.856999][ T7934] netlink: 'syz.2.702': attribute type 22 has an invalid length. [ 242.930412][ T5829] usbhid 4-1:0.0: can't add hid device: -71 [ 242.930546][ T5829] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 242.965001][ T5717] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -22 [ 242.996762][ T5829] usb 4-1: USB disconnect, device number 28 [ 243.024350][ T5717] usb 1-1: USB disconnect, device number 24 [ 243.098820][ T7937] sctp: [Deprecated]: syz.1.703 (pid 7937) Use of int in max_burst socket option. [ 243.098820][ T7937] Use struct sctp_assoc_value instead [ 243.510383][ T5829] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 243.660081][ T5829] usb 4-1: Using ep0 maxpacket: 32 [ 243.662450][ T5829] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 243.662482][ T5829] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 243.662509][ T5829] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 243.662557][ T5829] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 243.662574][ T5829] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 243.662594][ T5829] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 243.662626][ T5829] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 243.662643][ T5829] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.777001][ T5829] usb 4-1: config 0 descriptor?? [ 243.880068][ T5717] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 244.010420][ T7939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.011034][ T7939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.087118][ T5717] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 244.087154][ T5717] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.087176][ T5717] usb 1-1: Product: syz [ 244.087192][ T5717] usb 1-1: Manufacturer: syz [ 244.087209][ T5717] usb 1-1: SerialNumber: syz [ 244.141841][ T5829] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 29 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 244.149216][ T5717] usb 1-1: config 0 descriptor?? [ 244.190152][ T5717] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 244.215315][ T7954] 9p: Bad value for 'wfdno' [ 244.459268][ T5829] usb 4-1: USB disconnect, device number 29 [ 244.534706][ T5829] usblp0: removed [ 244.722729][ T7961] program syz.1.711 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 244.800525][ T7962] FAULT_INJECTION: forcing a failure. [ 244.800525][ T7962] name failslab, interval 1, probability 0, space 0, times 0 [ 244.800554][ T7962] CPU: 1 UID: 0 PID: 7962 Comm: syz.2.710 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 244.800573][ T7962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 244.800583][ T7962] Call Trace: [ 244.800590][ T7962] [ 244.800597][ T7962] dump_stack_lvl+0xe8/0x150 [ 244.800623][ T7962] should_fail_ex+0x46b/0x600 [ 244.800652][ T7962] should_failslab+0xa8/0x100 [ 244.800673][ T7962] kmem_cache_alloc_noprof+0xa4/0x6c0 [ 244.800700][ T7962] ? __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 244.800721][ T7962] ? __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 244.800747][ T7962] __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 244.800777][ T7962] mmu_topup_memory_caches+0x21/0x170 [ 244.800800][ T7962] kvm_mmu_load+0x9d/0x2320 [ 244.800822][ T7962] ? kvm_msr_allowed+0x9a/0x490 [ 244.800847][ T7962] ? kvm_msr_allowed+0x9a/0x490 [ 244.800870][ T7962] ? kvm_msr_allowed+0x3f4/0x490 [ 244.800894][ T7962] ? kvm_msr_allowed+0x9a/0x490 [ 244.800920][ T7962] ? kvm_apic_has_interrupt+0x73c/0x770 [ 244.800947][ T7962] ? vmx_recalc_intercepts+0xec4/0x1b10 [ 244.800979][ T7962] vcpu_run+0x4d6a/0x76f0 [ 244.801048][ T7962] ? __pfx_vcpu_run+0x10/0x10 [ 244.801063][ T7962] ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0 [ 244.801082][ T7962] ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0 [ 244.801109][ T7962] kvm_arch_vcpu_ioctl_run+0x11e6/0x20d0 [ 244.801135][ T7962] ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0 [ 244.801152][ T7962] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 244.801172][ T7962] ? do_raw_spin_lock+0x12b/0x2f0 [ 244.801206][ T7962] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 244.801228][ T7962] ? lockdep_hardirqs_on+0x7a/0x110 [ 244.801249][ T7962] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 244.801269][ T7962] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 244.801290][ T7962] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 244.801307][ T7962] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 244.801327][ T7962] ? lockdep_hardirqs_on+0x7a/0x110 [ 244.801350][ T7962] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 244.801370][ T7962] ? rt_write_unlock+0x190/0x230 [ 244.801388][ T7962] kvm_vcpu_ioctl+0xa65/0xfe0 [ 244.801417][ T7962] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 244.801456][ T7962] ? __fget_files+0x2a/0x420 [ 244.801476][ T7962] ? __fget_files+0x2a/0x420 [ 244.801491][ T7962] ? __fget_files+0x3a6/0x420 [ 244.801506][ T7962] ? __fget_files+0x2a/0x420 [ 244.801524][ T7962] ? bpf_lsm_file_ioctl+0x9/0x20 [ 244.801544][ T7962] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 244.801568][ T7962] __se_sys_ioctl+0xff/0x170 [ 244.801589][ T7962] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.801607][ T7962] do_syscall_64+0x174/0x580 [ 244.801627][ T7962] ? trace_irq_disable+0x3b/0x140 [ 244.801647][ T7962] ? clear_bhb_loop+0x40/0x90 [ 244.801667][ T7962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.801684][ T7962] RIP: 0033:0x7f7e3d2dce59 [ 244.801699][ T7962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.801713][ T7962] RSP: 002b:00007f7e3b50d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 244.801729][ T7962] RAX: ffffffffffffffda RBX: 00007f7e3d556090 RCX: 00007f7e3d2dce59 [ 244.801742][ T7962] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 244.801752][ T7962] RBP: 00007f7e3b50d090 R08: 0000000000000000 R09: 0000000000000000 [ 244.801762][ T7962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 244.801772][ T7962] R13: 00007f7e3d556128 R14: 00007f7e3d556090 R15: 00007fffecc6d228 [ 244.801797][ T7962] [ 245.197387][ T1254] usb 1-1: USB disconnect, device number 25 [ 246.108653][ T7988] NILFS (nullb0): couldn't find nilfs on the device [ 246.161620][ T5716] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 246.232173][ T7992] FAULT_INJECTION: forcing a failure. [ 246.232173][ T7992] name failslab, interval 1, probability 0, space 0, times 0 [ 246.232201][ T7992] CPU: 1 UID: 0 PID: 7992 Comm: syz.2.719 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 246.232220][ T7992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 246.232231][ T7992] Call Trace: [ 246.232237][ T7992] [ 246.232245][ T7992] dump_stack_lvl+0xe8/0x150 [ 246.232270][ T7992] should_fail_ex+0x46b/0x600 [ 246.232298][ T7992] should_failslab+0xa8/0x100 [ 246.232318][ T7992] kmem_cache_alloc_noprof+0xa4/0x6c0 [ 246.232345][ T7992] ? mas_alloc_nodes+0x291/0x350 [ 246.232365][ T7992] ? mas_alloc_nodes+0x291/0x350 [ 246.232389][ T7992] mas_alloc_nodes+0x291/0x350 [ 246.232412][ T7992] mas_preallocate+0x2d6/0x640 [ 246.232436][ T7992] ? __pfx_mas_preallocate+0x10/0x10 [ 246.232465][ T7992] ? __mas_set_range+0x12f/0x3c0 [ 246.232491][ T7992] __split_vma+0x33d/0xa40 [ 246.232523][ T7992] ? __pfx___split_vma+0x10/0x10 [ 246.232561][ T7992] vms_gather_munmap_vmas+0x32d/0x1380 [ 246.232582][ T7992] ? __mt_destroy+0x1d2/0x280 [ 246.232680][ T7992] ? vms_complete_munmap_vmas+0xa0b/0xc60 [ 246.232710][ T7992] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 246.232746][ T7992] do_vmi_align_munmap+0x2c7/0x4d0 [ 246.232780][ T7992] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 246.232811][ T7992] ? mtree_range_walk+0x6fc/0x8b0 [ 246.232852][ T7992] do_vmi_munmap+0x252/0x2d0 [ 246.232877][ T7992] __vm_munmap+0x22c/0x3d0 [ 246.232901][ T7992] ? __pfx___vm_munmap+0x10/0x10 [ 246.232921][ T7992] ? vm_mmap_pgoff+0x3b4/0x4f0 [ 246.232961][ T7992] ? rcu_is_watching+0x15/0xb0 [ 246.232990][ T7992] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.233007][ T7992] __x64_sys_munmap+0x60/0x70 [ 246.233029][ T7992] do_syscall_64+0x174/0x580 [ 246.233049][ T7992] ? trace_irq_disable+0x3b/0x140 [ 246.233073][ T7992] ? clear_bhb_loop+0x40/0x90 [ 246.233092][ T7992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.233108][ T7992] RIP: 0033:0x7f7e3d2dcc87 [ 246.233124][ T7992] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.233138][ T7992] RSP: 002b:00007f7e3b52cd18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 246.233155][ T7992] RAX: ffffffffffffffda RBX: 00007f7e34000000 RCX: 00007f7e3d2dcc87 [ 246.233167][ T7992] RDX: 0000000000000000 RSI: 000000000350e000 RDI: 00007f7e38000000 [ 246.233178][ T7992] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 246.233188][ T7992] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000 [ 246.233198][ T7992] R13: 0000000000001000 R14: 00007f7e38000000 R15: 0000000000af2000 [ 246.233223][ T7992] [ 246.526435][ T5716] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 246.526460][ T5716] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.526476][ T5716] usb 1-1: Product: syz [ 246.526487][ T5716] usb 1-1: Manufacturer: syz [ 246.526498][ T5716] usb 1-1: SerialNumber: syz [ 246.717050][ T7996] netlink: 264 bytes leftover after parsing attributes in process `syz.2.721'. [ 246.905873][ T5717] IPVS: starting estimator thread 0... [ 247.011314][ T8000] IPVS: using max 8 ests per chain, 19200 per kthread [ 247.011820][ T7998] input: syz0 as /devices/virtual/input/input11 [ 247.235058][ T7983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.235709][ T7983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.243253][ T5716] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 247.243320][ T5716] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 247.750197][ T5829] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 247.945485][ T5829] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 247.945523][ T5829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.945547][ T5829] usb 4-1: Product: syz [ 247.945565][ T5829] usb 4-1: Manufacturer: syz [ 247.945581][ T5829] usb 4-1: SerialNumber: syz [ 247.987686][ T5829] usb 4-1: config 0 descriptor?? [ 248.005524][ T7983] mmap: syz.0.715 (7983) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 248.035341][ T5829] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 248.178048][ T5716] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 248.178123][ T5716] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 248.179069][ T5716] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 248.208892][ T5716] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 248.255995][ T5716] usb 1-1: USB disconnect, device number 26 [ 248.530020][ T1254] usb 3-1: new low-speed USB device number 29 using dummy_hcd [ 248.691163][ T1254] usb 3-1: Invalid ep0 maxpacket: 64 [ 248.830727][ T1254] usb 3-1: new low-speed USB device number 30 using dummy_hcd [ 248.867594][ T32] usb 4-1: USB disconnect, device number 30 [ 248.991233][ T1254] usb 3-1: Invalid ep0 maxpacket: 64 [ 248.991788][ T1254] usb usb3-port1: attempt power cycle [ 249.341594][ T1254] usb 3-1: new low-speed USB device number 31 using dummy_hcd [ 249.360837][ T1254] usb 3-1: Invalid ep0 maxpacket: 64 [ 249.514829][ T37] audit: type=1326 audit(1782184664.378:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8035 comm="syz.0.733" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f166accce59 code=0x7ffc0000 [ 249.514892][ T37] audit: type=1326 audit(1782184664.378:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8035 comm="syz.0.733" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f166accce59 code=0x7ffc0000 [ 249.515257][ T37] audit: type=1326 audit(1782184664.378:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8035 comm="syz.0.733" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f166accce59 code=0x7ffc0000 [ 249.515550][ T37] audit: type=1326 audit(1782184664.378:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8035 comm="syz.0.733" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f166accce59 code=0x7ffc0000 [ 249.515962][ T37] audit: type=1326 audit(1782184664.378:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8035 comm="syz.0.733" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f166accce59 code=0x7ffc0000 [ 249.548224][ T37] audit: type=1326 audit(1782184664.398:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8035 comm="syz.0.733" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f166accce59 code=0x7ffc0000 [ 249.551744][ T37] audit: type=1326 audit(1782184664.408:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8035 comm="syz.0.733" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f166accce59 code=0x7ffc0000 [ 249.556999][ T37] audit: type=1326 audit(1782184664.418:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8035 comm="syz.0.733" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f166accce59 code=0x7ffc0000 [ 249.567391][ T37] audit: type=1326 audit(1782184664.418:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8035 comm="syz.0.733" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f166accce59 code=0x7ffc0000 [ 249.576155][ T37] audit: type=1326 audit(1782184664.438:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8035 comm="syz.0.733" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f166accce59 code=0x7ffc0000 [ 249.590417][ T1254] usb 3-1: new low-speed USB device number 32 using dummy_hcd [ 249.702552][ T1254] usb 3-1: Invalid ep0 maxpacket: 64 [ 249.828004][ T1254] usb usb3-port1: unable to enumerate USB device [ 250.134073][ T8046] FAULT_INJECTION: forcing a failure. [ 250.134073][ T8046] name failslab, interval 1, probability 0, space 0, times 0 [ 250.134104][ T8046] CPU: 1 UID: 0 PID: 8046 Comm: syz.0.735 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 250.134123][ T8046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 250.134135][ T8046] Call Trace: [ 250.134142][ T8046] [ 250.134150][ T8046] dump_stack_lvl+0xe8/0x150 [ 250.134183][ T8046] should_fail_ex+0x46b/0x600 [ 250.134213][ T8046] should_failslab+0xa8/0x100 [ 250.134233][ T8046] __kmalloc_cache_noprof+0xa0/0x6d0 [ 250.134251][ T8046] ? rcu_is_watching+0x15/0xb0 [ 250.134275][ T8046] ? tipc_nametbl_lookup_mcast_sockets+0x6d9/0xd40 [ 250.134328][ T8046] ? tipc_nametbl_lookup_mcast_sockets+0x6d9/0xd40 [ 250.134360][ T8046] tipc_nametbl_lookup_mcast_sockets+0x6d9/0xd40 [ 250.134385][ T8046] ? tipc_nametbl_lookup_mcast_sockets+0x5b/0xd40 [ 250.134420][ T8046] tipc_sk_mcast_rcv+0x612/0x1020 [ 250.134447][ T8046] ? tipc_sk_mcast_rcv+0x244/0x1020 [ 250.134479][ T8046] ? __pfx_tipc_sk_mcast_rcv+0x10/0x10 [ 250.134518][ T8046] ? tipc_mcast_xmit+0x1292/0x1a90 [ 250.134569][ T8046] ? tipc_mcast_xmit+0x1292/0x1a90 [ 250.134589][ T8046] tipc_mcast_xmit+0x1423/0x1a90 [ 250.134613][ T8046] ? __lock_acquire+0x6b5/0x2d10 [ 250.134634][ T8046] ? __pfx_tipc_mcast_xmit+0x10/0x10 [ 250.134652][ T8046] ? kasan_save_track+0x4f/0x80 [ 250.134669][ T8046] ? kasan_save_track+0x3e/0x80 [ 250.134682][ T8046] ? __kasan_slab_alloc+0x6c/0x80 [ 250.134698][ T8046] ? kmem_cache_alloc_node_noprof+0x23c/0x710 [ 250.134723][ T8046] ? __alloc_skb+0x27d/0x7d0 [ 250.134741][ T8046] ? tipc_msg_build+0x162/0xf00 [ 250.134759][ T8046] ? __tipc_sendmsg+0x1ca5/0x2c00 [ 250.134799][ T8046] ? __tipc_sendstream+0x104e/0x1280 [ 250.134817][ T8046] ? tipc_send_packet+0x7c/0xa0 [ 250.134834][ T8046] ? sock_sendmsg_nosec+0x13a/0x180 [ 250.134858][ T8046] ? ____sys_sendmsg+0x55c/0x870 [ 250.134876][ T8046] ? ___sys_sendmsg+0x2a5/0x360 [ 250.134895][ T8046] ? __x64_sys_sendmsg+0x1b7/0x290 [ 250.134914][ T8046] ? do_syscall_64+0x174/0x580 [ 250.134934][ T8046] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.134958][ T8046] ? __might_fault+0xaf/0x130 [ 250.134975][ T8046] ? __might_fault+0xaf/0x130 [ 250.135001][ T8046] ? __might_fault+0xaf/0x130 [ 250.135019][ T8046] ? _copy_from_iter+0x2d3/0x1670 [ 250.135048][ T8046] ? rcu_is_watching+0x15/0xb0 [ 250.135078][ T8046] ? __pfx__copy_from_iter+0x10/0x10 [ 250.135116][ T8046] ? tipc_msg_build+0x482/0xf00 [ 250.135150][ T8046] ? tipc_sk_filtering+0x13c/0x510 [ 250.135185][ T8046] ? trace_tipc_sk_sendmcast+0x93/0x230 [ 250.135207][ T8046] __tipc_sendmsg+0x21cc/0x2c00 [ 250.135241][ T8046] ? __pfx___tipc_sendmsg+0x10/0x10 [ 250.135273][ T8046] ? __lock_acquire+0x6b5/0x2d10 [ 250.135299][ T8046] ? do_raw_spin_lock+0x12b/0x2f0 [ 250.135319][ T8046] ? __pfx_woken_wake_function+0x10/0x10 [ 250.135352][ T8046] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 250.135373][ T8046] ? lockdep_hardirqs_on+0x7a/0x110 [ 250.135394][ T8046] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 250.135414][ T8046] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 250.135447][ T8046] ? try_to_take_rt_mutex+0x840/0xb00 [ 250.135476][ T8046] ? __lock_acquire+0x6b5/0x2d10 [ 250.135501][ T8046] ? __lock_acquire+0x6b5/0x2d10 [ 250.135532][ T8046] __tipc_sendstream+0x104e/0x1280 [ 250.135553][ T8046] ? __lock_acquire+0x6b5/0x2d10 [ 250.135589][ T8046] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 250.135613][ T8046] ? __pfx___tipc_sendstream+0x10/0x10 [ 250.135631][ T8046] ? __local_bh_enable+0x1e1/0x2f0 [ 250.135679][ T8046] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 250.135704][ T8046] ? lockdep_hardirqs_on+0x7a/0x110 [ 250.135728][ T8046] tipc_send_packet+0x7c/0xa0 [ 250.135748][ T8046] ? __pfx_tipc_send_packet+0x10/0x10 [ 250.135766][ T8046] sock_sendmsg_nosec+0x13a/0x180 [ 250.135793][ T8046] ____sys_sendmsg+0x55c/0x870 [ 250.135818][ T8046] ? __pfx_____sys_sendmsg+0x10/0x10 [ 250.135847][ T8046] ? import_iovec+0x73/0xa0 [ 250.135867][ T8046] ___sys_sendmsg+0x2a5/0x360 [ 250.135886][ T8046] ? __lock_acquire+0x6b5/0x2d10 [ 250.135910][ T8046] ? __pfx____sys_sendmsg+0x10/0x10 [ 250.135960][ T8046] ? __fget_files+0x2a/0x420 [ 250.135975][ T8046] ? __fget_files+0x3a6/0x420 [ 250.136000][ T8046] __x64_sys_sendmsg+0x1b7/0x290 [ 250.136023][ T8046] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 250.136059][ T8046] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.136077][ T8046] do_syscall_64+0x174/0x580 [ 250.136096][ T8046] ? trace_irq_disable+0x3b/0x140 [ 250.136117][ T8046] ? clear_bhb_loop+0x40/0x90 [ 250.136137][ T8046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.136154][ T8046] RIP: 0033:0x7f166accce59 [ 250.136175][ T8046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.136190][ T8046] RSP: 002b:00007f1668f26028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 250.136207][ T8046] RAX: ffffffffffffffda RBX: 00007f166af45fa0 RCX: 00007f166accce59 [ 250.136219][ T8046] RDX: 0000000000000004 RSI: 0000200000000380 RDI: 0000000000000005 [ 250.136229][ T8046] RBP: 00007f1668f26090 R08: 0000000000000000 R09: 0000000000000000 [ 250.136239][ T8046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.136248][ T8046] R13: 00007f166af46038 R14: 00007f166af45fa0 R15: 00007ffc64d13af8 [ 250.136274][ T8046] [ 250.250006][ T5717] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 250.521893][ T5717] usb 4-1: Using ep0 maxpacket: 16 [ 250.577357][ T5717] usb 4-1: config 0 interface 0 has no altsetting 0 [ 250.577402][ T5717] usb 4-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 250.577429][ T5717] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.750449][ T5717] usb 4-1: config 0 descriptor?? [ 250.931920][ T8053] syzkaller1: entered promiscuous mode [ 250.931943][ T8053] syzkaller1: entered allmulticast mode [ 251.218440][ T5717] bigben 0003:146B:0902.000F: unexpected rdesc, please submit for review [ 251.226052][ T5717] bigben 0003:146B:0902.000F: unexpected long global item [ 251.235186][ T5717] bigben 0003:146B:0902.000F: parse failed [ 251.235486][ T5717] bigben 0003:146B:0902.000F: probe with driver bigben failed with error -22 [ 251.694374][ T1254] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 251.847500][ T1254] usb 3-1: Using ep0 maxpacket: 32 [ 251.857509][ T1254] usb 3-1: config 0 has an invalid interface number: 146 but max is 0 [ 251.857540][ T1254] usb 3-1: config 0 has no interface number 0 [ 251.857601][ T1254] usb 3-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 251.857639][ T1254] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 251.857668][ T1254] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 251.857698][ T1254] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 251.857746][ T1254] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 251.857774][ T1254] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 251.857798][ T1254] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 251.857824][ T1254] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 251.857849][ T1254] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 251.857874][ T1254] usb 3-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 251.959490][ T1254] usb 3-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 251.959526][ T1254] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.959549][ T1254] usb 3-1: Product: syz [ 251.959566][ T1254] usb 3-1: Manufacturer: syz [ 251.959584][ T1254] usb 3-1: SerialNumber: syz [ 252.079065][ T8068] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 252.113414][ T1254] usb 3-1: config 0 descriptor?? [ 252.114817][ T8058] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 252.136579][ T1254] usb 3-1: will this work? Response EP is not usually 3 [ 252.136610][ T1254] usb 3-1: will this work? Image data EP is not usually 2 [ 252.164994][ T1254] scsi host1: microtekX6 [ 252.198458][ T8066] kvm: pic: level sensitive irq not supported [ 252.198804][ T8066] kvm: pic: non byte read [ 252.199475][ T8066] kvm: pic: level sensitive irq not supported [ 252.199816][ T8066] kvm: pic: non byte read [ 252.233042][ T8066] kvm: pic: level sensitive irq not supported [ 252.233183][ T8066] kvm: pic: non byte read [ 252.254653][ T161] usb 3-1: error -90 submitting URB [ 252.278775][ T8066] kvm: pic: level sensitive irq not supported [ 252.279576][ T8066] kvm: pic: non byte read [ 252.281743][ T8066] kvm: pic: level sensitive irq not supported [ 252.281838][ T8066] kvm: pic: non byte read [ 252.283148][ T8066] kvm: pic: level sensitive irq not supported [ 252.283234][ T8066] kvm: pic: non byte read [ 252.283629][ T138] usb 3-1: error -90 submitting URB [ 252.286802][ T8066] kvm: pic: level sensitive irq not supported [ 252.288445][ T8066] kvm: pic: non byte read [ 252.319992][ T138] usb 3-1: error -90 submitting URB [ 252.360008][ T138] usb 3-1: error -90 submitting URB [ 252.369876][ T32] usb 3-1: USB disconnect, device number 33 [ 252.373860][ T8066] kvm: pic: level sensitive irq not supported [ 252.374451][ T8066] kvm: pic: non byte read [ 253.396144][ T5829] usb 4-1: USB disconnect, device number 31 [ 253.905012][ T8090] program syz.3.752 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 254.476636][ T8102] FAULT_INJECTION: forcing a failure. [ 254.476636][ T8102] name failslab, interval 1, probability 0, space 0, times 0 [ 254.476674][ T8102] CPU: 0 UID: 0 PID: 8102 Comm: syz.1.756 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 254.476699][ T8102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 254.476714][ T8102] Call Trace: [ 254.476723][ T8102] [ 254.476734][ T8102] dump_stack_lvl+0xe8/0x150 [ 254.476770][ T8102] should_fail_ex+0x46b/0x600 [ 254.476810][ T8102] should_failslab+0xa8/0x100 [ 254.476838][ T8102] kmem_cache_alloc_noprof+0xa4/0x6c0 [ 254.476876][ T8102] ? alloc_pid+0x1ae/0x1310 [ 254.476899][ T8102] ? alloc_pid+0x1ae/0x1310 [ 254.476928][ T8102] alloc_pid+0x1ae/0x1310 [ 254.476957][ T8102] ? __lock_acquire+0x6b5/0x2d10 [ 254.476989][ T8102] ? __pfx_alloc_pid+0x10/0x10 [ 254.477034][ T8102] ? lockdep_hardirqs_on+0x7a/0x110 [ 254.477065][ T8102] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 254.477095][ T8102] ? fpu_clone+0x33c/0xb60 [ 254.477141][ T8102] ? __asan_memcpy+0x40/0x70 [ 254.477177][ T8102] ? copy_thread+0x74f/0x9a0 [ 254.477214][ T8102] copy_process+0x2111/0x42e0 [ 254.477257][ T8102] ? copy_process+0xd4e/0x42e0 [ 254.477311][ T8102] ? __pfx_copy_process+0x10/0x10 [ 254.477359][ T8102] vhost_task_create+0x1f9/0x380 [ 254.477386][ T8102] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 254.477421][ T8102] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 254.477457][ T8102] ? __pfx_vhost_task_create+0x10/0x10 [ 254.477496][ T8102] ? __pfx_vhost_task_fn+0x10/0x10 [ 254.477528][ T8102] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 254.477557][ T8102] ? lockdep_hardirqs_on+0x7a/0x110 [ 254.477584][ T8102] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 254.477612][ T8102] ? mutex_lock_nested+0x152/0x1d0 [ 254.477646][ T8102] ? kvm_mmu_post_init_vm+0x8f/0x2b0 [ 254.477687][ T8102] kvm_mmu_post_init_vm+0x147/0x2b0 [ 254.477725][ T8102] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 254.477768][ T8102] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 254.477798][ T8102] ? do_raw_spin_lock+0x12b/0x2f0 [ 254.477838][ T8102] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 254.477867][ T8102] ? lockdep_hardirqs_on+0x7a/0x110 [ 254.477896][ T8102] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 254.477924][ T8102] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 254.477954][ T8102] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 254.477979][ T8102] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 254.478009][ T8102] ? lockdep_hardirqs_on+0x7a/0x110 [ 254.478043][ T8102] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 254.478072][ T8102] ? rt_write_unlock+0x190/0x230 [ 254.478099][ T8102] kvm_vcpu_ioctl+0xa65/0xfe0 [ 254.478140][ T8102] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 254.478207][ T8102] ? __fget_files+0x2a/0x420 [ 254.478234][ T8102] ? __fget_files+0x2a/0x420 [ 254.478254][ T8102] ? __fget_files+0x3a6/0x420 [ 254.478276][ T8102] ? __fget_files+0x2a/0x420 [ 254.478303][ T8102] ? bpf_lsm_file_ioctl+0x9/0x20 [ 254.478329][ T8102] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 254.478362][ T8102] __se_sys_ioctl+0xff/0x170 [ 254.478393][ T8102] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.478419][ T8102] do_syscall_64+0x174/0x580 [ 254.478447][ T8102] ? trace_irq_disable+0x3b/0x140 [ 254.478475][ T8102] ? clear_bhb_loop+0x40/0x90 [ 254.478504][ T8102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.478527][ T8102] RIP: 0033:0x7ff2e94ece59 [ 254.478548][ T8102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.478567][ T8102] RSP: 002b:00007ff2e7725028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 254.478592][ T8102] RAX: ffffffffffffffda RBX: 00007ff2e9766090 RCX: 00007ff2e94ece59 [ 254.478608][ T8102] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 254.478622][ T8102] RBP: 00007ff2e7725090 R08: 0000000000000000 R09: 0000000000000000 [ 254.478637][ T8102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 254.478650][ T8102] R13: 00007ff2e9766128 R14: 00007ff2e9766090 R15: 00007ffd4a7ba268 [ 254.478686][ T8102] [ 255.005566][ T8110] netlink: 495 bytes leftover after parsing attributes in process `syz.3.759'. [ 255.136765][ T8105] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 255.136860][ T8105] UDF-fs: Scanning with blocksize 512 failed [ 255.218358][ T8105] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 255.218382][ T8105] UDF-fs: Scanning with blocksize 1024 failed [ 255.218971][ T8105] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 255.218988][ T8105] UDF-fs: Scanning with blocksize 2048 failed [ 255.222407][ T8105] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 255.222462][ T8105] UDF-fs: Scanning with blocksize 4096 failed [ 255.361108][ T8115] program syz.3.761 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 255.401396][ T8106] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 255.401419][ T8106] UDF-fs: Scanning with blocksize 512 failed [ 255.406614][ T8106] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 255.406637][ T8106] UDF-fs: Scanning with blocksize 1024 failed [ 255.407077][ T8106] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 255.407093][ T8106] UDF-fs: Scanning with blocksize 2048 failed [ 255.407467][ T8106] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 255.407483][ T8106] UDF-fs: Scanning with blocksize 4096 failed [ 255.488404][ T8118] netlink: 'syz.3.762': attribute type 2 has an invalid length. [ 255.796144][ T8118] : entered promiscuous mode [ 255.832203][ T1342] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.832323][ T1342] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.270163][ T823] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 256.430126][ T823] usb 4-1: Using ep0 maxpacket: 8 [ 256.432138][ T823] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 256.434519][ T823] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 256.434551][ T823] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 256.434572][ T823] usb 4-1: Product: syz [ 256.434598][ T823] usb 4-1: Manufacturer: syz [ 256.434610][ T823] usb 4-1: SerialNumber: syz [ 256.708581][ T8129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.709680][ T8129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.712138][ T823] usb 4-1: palm_os_3_probe - error -71 getting connection information [ 256.712248][ T823] visor 4-1:1.0: probe with driver visor failed with error -71 [ 256.771756][ T823] usb 4-1: USB disconnect, device number 32 [ 256.976092][ T8141] program syz.1.770 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 257.066014][ T8143] cgroup: Bad value for 'name' [ 257.110039][ T5716] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 257.285566][ T5716] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 257.285604][ T5716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.285628][ T5716] usb 3-1: Product: syz [ 257.285644][ T5716] usb 3-1: Manufacturer: syz [ 257.285661][ T5716] usb 3-1: SerialNumber: syz [ 257.295412][ T5716] usb 3-1: config 0 descriptor?? [ 257.329505][ T5716] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 257.812626][ T8160] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 257.880085][ T32] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 257.934946][ T5716] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 257.935083][ T5716] sq905c 3-1:0.0: probe with driver sq905c failed with error -71 [ 258.014983][ T5716] usb 3-1: USB disconnect, device number 34 [ 258.050087][ T32] usb 4-1: Using ep0 maxpacket: 16 [ 258.066925][ T32] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 258.066959][ T32] usb 4-1: config 0 has no interface number 0 [ 258.070284][ T32] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 258.070317][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.070341][ T32] usb 4-1: Product: syz [ 258.070357][ T32] usb 4-1: Manufacturer: syz [ 258.070374][ T32] usb 4-1: SerialNumber: syz [ 258.123675][ T32] usb 4-1: config 0 descriptor?? [ 258.129692][ T32] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 258.541860][ T8167] program syz.0.780 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 258.560896][ T8157] netlink: 'syz.3.776': attribute type 13 has an invalid length. [ 258.782303][ T32] gspca_spca1528: reg_w err -71 [ 258.800766][ T32] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 258.819373][ T32] usb 4-1: USB disconnect, device number 33 [ 258.855491][ T8172] netlink: 'syz.2.783': attribute type 10 has an invalid length. [ 258.910081][ T5875] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 258.975631][ T8172] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 258.978809][ T8172] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 259.070194][ T5875] usb 1-1: Using ep0 maxpacket: 16 [ 259.072646][ T5875] usb 1-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 259.072701][ T5875] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 259.072756][ T5875] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 259.072777][ T5875] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 259.075422][ T5875] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 259.075454][ T5875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.075475][ T5875] usb 1-1: Product: syz [ 259.075495][ T5875] usb 1-1: Manufacturer: syz [ 259.075507][ T5875] usb 1-1: SerialNumber: syz [ 259.108044][ T5875] usb 1-1: config 0 descriptor?? [ 259.461757][ T5875] appledisplay 1-1:0.0: Error while getting initial brightness: -90 [ 259.743331][ T5875] appledisplay 1-1:0.0: probe with driver appledisplay failed with error -90 [ 259.748310][ T8183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.786'. [ 260.092911][ T5875] usb 1-1: USB disconnect, device number 27 [ 260.770147][ T5829] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 260.810008][ T5717] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 260.945517][ T5829] ------------[ cut here ]------------ [ 260.945531][ T5829] task_rq(p) != rq [ 260.945542][ T5829] WARNING: kernel/sched/fair.c:7656 at hrtick_start_fair+0x196/0x1f0, CPU#0: kworker/0:6/5829 [ 260.945595][ T5829] Modules linked in: [ 260.945611][ T5829] CPU: 0 UID: 0 PID: 5829 Comm: kworker/0:6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 260.945633][ T5829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 260.945646][ T5829] Workqueue: usb_hub_wq hub_event [ 260.945737][ T5829] RIP: 0010:hrtick_start_fair+0x196/0x1f0 [ 260.945764][ T5829] Code: 42 80 3c 20 00 74 08 4c 89 ff e8 85 f5 97 00 4d 39 37 0f 85 0c ff ff ff 48 89 df 5b 41 5c 41 5d 41 5e 41 5f e9 7b 64 fa ff 90 <0f> 0b 90 e9 d1 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 82 [ 260.945782][ T5829] RSP: 0000:ffffc9000500ed00 EFLAGS: 00010087 [ 260.945797][ T5829] RAX: ffff8880b873ba40 RBX: ffff8880b863ba40 RCX: ffffffff8197d8ae [ 260.945812][ T5829] RDX: 0000000000000000 RSI: ffff888031959f00 RDI: ffff8880b863ba40 [ 260.945827][ T5829] RBP: dffffc0000000000 R08: ffffffff8fcf390f R09: 1ffffffff1f9e721 [ 260.945841][ T5829] R10: dffffc0000000000 R11: fffffbfff1f9e722 R12: dffffc0000000000 [ 260.945856][ T5829] R13: 1ffff110170c78d6 R14: ffff888031959f00 R15: ffffffff8dc257d8 [ 260.945871][ T5829] FS: 0000000000000000(0000) GS:ffff888125a6b000(0000) knlGS:0000000000000000 [ 260.945887][ T5829] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 260.945900][ T5829] CR2: 00007f13f8c0cff8 CR3: 000000003c972000 CR4: 00000000003526f0 [ 260.945918][ T5829] Call Trace: [ 260.945926][ T5829] [ 260.945937][ T5829] set_next_task_fair+0xa68/0xce0 [ 260.945964][ T5829] __schedule+0x3e03/0x5550 [ 260.946010][ T5829] ? __pfx___schedule+0x10/0x10 [ 260.946041][ T5829] ? schedule+0x90/0x360 [ 260.946064][ T5829] schedule+0x164/0x360 [ 260.946089][ T5829] schedule_timeout+0x158/0x2c0 [ 260.946114][ T5829] ? __pfx_schedule_timeout+0x10/0x10 [ 260.946136][ T5829] ? __pfx_process_timeout+0x10/0x10 [ 260.946168][ T5829] ? _raw_spin_unlock_irq+0x23/0x50 [ 260.946194][ T5829] wait_for_completion_timeout+0x2d7/0x610 [ 260.946224][ T5829] ? wait_for_completion_timeout+0x26d/0x610 [ 260.946249][ T5829] ? __pfx_wait_for_completion_timeout+0x10/0x10 [ 260.946283][ T5829] usb_start_wait_urb+0x1e9/0x5b0 [ 260.946332][ T5829] ? trace_kmalloc+0x2a/0xf0 [ 260.946351][ T5829] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 260.946388][ T5829] usb_control_msg+0x234/0x3e0 [ 260.946414][ T5829] usb_get_descriptor+0xb1/0x3e0 [ 260.946441][ T5829] usb_get_configuration+0x3b9/0x5640 [ 260.946503][ T5829] ? do_raw_spin_lock+0x12b/0x2f0 [ 260.946533][ T5829] ? do_raw_spin_lock+0x12b/0x2f0 [ 260.946576][ T5829] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 260.946606][ T5829] ? lockdep_hardirqs_on+0x7a/0x110 [ 260.946628][ T5829] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 260.946652][ T5829] ? __pfx_usb_get_configuration+0x10/0x10 [ 260.946682][ T5829] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 260.946701][ T5829] ? rt_spin_unlock+0x14f/0x200 [ 260.946722][ T5829] ? rt_spin_unlock+0x160/0x200 [ 260.946741][ T5829] usb_new_device+0x145/0x16e0 [ 260.946760][ T5829] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 260.946784][ T5829] ? lockdep_hardirqs_on+0x7a/0x110 [ 260.946807][ T5829] ? rt_mutex_slowunlock+0x1cb/0x300 [ 260.946824][ T5829] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 260.946840][ T5829] ? __pfx_usb_new_device+0x10/0x10 [ 260.946866][ T5829] hub_event+0x2a49/0x4f60 [ 260.946925][ T5829] ? __pfx_hub_event+0x10/0x10 [ 260.946945][ T5829] ? process_one_work+0x8be/0x1630 [ 260.946981][ T5829] ? process_one_work+0x8be/0x1630 [ 260.947005][ T5829] process_one_work+0x98b/0x1630 [ 260.947049][ T5829] ? __pfx_process_one_work+0x10/0x10 [ 260.947072][ T5829] ? do_raw_spin_lock+0x12b/0x2f0 [ 260.947106][ T5829] worker_thread+0xb49/0x1140 [ 260.947140][ T5829] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 260.947174][ T5829] kthread+0x388/0x470 [ 260.947194][ T5829] ? __pfx_worker_thread+0x10/0x10 [ 260.947219][ T5829] ? __pfx_kthread+0x10/0x10 [ 260.947241][ T5829] ret_from_fork+0x514/0xb70 [ 260.947265][ T5829] ? __pfx_ret_from_fork+0x10/0x10 [ 260.947285][ T5829] ? __switch_to+0xc79/0x1410 [ 260.947304][ T5829] ? __pfx_kthread+0x10/0x10 [ 260.947325][ T5829] ret_from_fork_asm+0x1a/0x30 [ 260.947362][ T5829] [ 260.947372][ T5829] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 260.947385][ T5829] CPU: 0 UID: 0 PID: 5829 Comm: kworker/0:6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 260.947411][ T5829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 260.947426][ T5829] Workqueue: usb_hub_wq hub_event [ 260.947456][ T5829] Call Trace: [ 260.947463][ T5829] [ 260.947470][ T5829] vpanic+0x56c/0xa60 [ 260.947495][ T5829] ? __pfx__printk+0x10/0x10 [ 260.947512][ T5829] ? __pfx_vpanic+0x10/0x10 [ 260.947534][ T5829] ? is_bpf_text_address+0x292/0x2b0 [ 260.947557][ T5829] ? is_bpf_text_address+0x26/0x2b0 [ 260.947591][ T5829] panic+0xc5/0xd0 [ 260.947614][ T5829] ? __pfx_panic+0x10/0x10 [ 260.947644][ T5829] ? ret_from_fork_asm+0x1a/0x30 [ 260.947670][ T5829] __warn+0x315/0x4c0 [ 260.947692][ T5829] ? hrtick_start_fair+0x196/0x1f0 [ 260.947715][ T5829] ? hrtick_start_fair+0x196/0x1f0 [ 260.947738][ T5829] __report_bug+0x339/0x540 [ 260.947764][ T5829] ? hrtick_start_fair+0x196/0x1f0 [ 260.947786][ T5829] ? __pfx___report_bug+0x10/0x10 [ 260.947806][ T5829] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 260.947835][ T5829] ? hrtick_start_fair+0x196/0x1f0 [ 260.947856][ T5829] report_bug+0x16a/0x220 [ 260.947877][ T5829] ? hrtick_start_fair+0x196/0x1f0 [ 260.947897][ T5829] ? hrtick_start_fair+0x198/0x1f0 [ 260.947917][ T5829] handle_bug+0x9c/0x200 [ 260.947941][ T5829] exc_invalid_op+0x1a/0x50 [ 260.947964][ T5829] asm_exc_invalid_op+0x1a/0x20 [ 260.947980][ T5829] RIP: 0010:hrtick_start_fair+0x196/0x1f0 [ 260.948002][ T5829] Code: 42 80 3c 20 00 74 08 4c 89 ff e8 85 f5 97 00 4d 39 37 0f 85 0c ff ff ff 48 89 df 5b 41 5c 41 5d 41 5e 41 5f e9 7b 64 fa ff 90 <0f> 0b 90 e9 d1 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 82 [ 260.948015][ T5829] RSP: 0000:ffffc9000500ed00 EFLAGS: 00010087 [ 260.948028][ T5829] RAX: ffff8880b873ba40 RBX: ffff8880b863ba40 RCX: ffffffff8197d8ae [ 260.948040][ T5829] RDX: 0000000000000000 RSI: ffff888031959f00 RDI: ffff8880b863ba40 [ 260.948052][ T5829] RBP: dffffc0000000000 R08: ffffffff8fcf390f R09: 1ffffffff1f9e721 [ 260.948064][ T5829] R10: dffffc0000000000 R11: fffffbfff1f9e722 R12: dffffc0000000000 [ 260.948076][ T5829] R13: 1ffff110170c78d6 R14: ffff888031959f00 R15: ffffffff8dc257d8 [ 260.948097][ T5829] ? set_next_task_fair+0xa4e/0xce0 [ 260.948121][ T5829] set_next_task_fair+0xa68/0xce0 [ 260.948145][ T5829] __schedule+0x3e03/0x5550 [ 260.948183][ T5829] ? __pfx___schedule+0x10/0x10 [ 260.948208][ T5829] ? schedule+0x90/0x360 [ 260.948228][ T5829] schedule+0x164/0x360 [ 260.948248][ T5829] schedule_timeout+0x158/0x2c0 [ 260.948268][ T5829] ? __pfx_schedule_timeout+0x10/0x10 [ 260.948287][ T5829] ? __pfx_process_timeout+0x10/0x10 [ 260.948313][ T5829] ? _raw_spin_unlock_irq+0x23/0x50 [ 260.948335][ T5829] wait_for_completion_timeout+0x2d7/0x610 [ 260.948361][ T5829] ? wait_for_completion_timeout+0x26d/0x610 [ 260.948383][ T5829] ? __pfx_wait_for_completion_timeout+0x10/0x10 [ 260.948414][ T5829] usb_start_wait_urb+0x1e9/0x5b0 [ 260.948434][ T5829] ? trace_kmalloc+0x2a/0xf0 [ 260.948449][ T5829] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 260.948480][ T5829] usb_control_msg+0x234/0x3e0 [ 260.948501][ T5829] usb_get_descriptor+0xb1/0x3e0 [ 260.948525][ T5829] usb_get_configuration+0x3b9/0x5640 [ 260.948559][ T5829] ? do_raw_spin_lock+0x12b/0x2f0 [ 260.948589][ T5829] ? do_raw_spin_lock+0x12b/0x2f0 [ 260.948615][ T5829] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 260.948635][ T5829] ? lockdep_hardirqs_on+0x7a/0x110 [ 260.948655][ T5829] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 260.948677][ T5829] ? __pfx_usb_get_configuration+0x10/0x10 [ 260.948704][ T5829] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 260.948721][ T5829] ? rt_spin_unlock+0x14f/0x200 [ 260.948739][ T5829] ? rt_spin_unlock+0x160/0x200 [ 260.948756][ T5829] usb_new_device+0x145/0x16e0 [ 260.948772][ T5829] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 260.948792][ T5829] ? lockdep_hardirqs_on+0x7a/0x110 [ 260.948814][ T5829] ? rt_mutex_slowunlock+0x1cb/0x300 [ 260.948830][ T5829] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 260.948846][ T5829] ? __pfx_usb_new_device+0x10/0x10 [ 260.948869][ T5829] hub_event+0x2a49/0x4f60 [ 260.948924][ T5829] ? __pfx_hub_event+0x10/0x10 [ 260.948942][ T5829] ? process_one_work+0x8be/0x1630 [ 260.948976][ T5829] ? process_one_work+0x8be/0x1630 [ 260.948998][ T5829] process_one_work+0x98b/0x1630 [ 260.949038][ T5829] ? __pfx_process_one_work+0x10/0x10 [ 260.949060][ T5829] ? do_raw_spin_lock+0x12b/0x2f0 [ 260.949092][ T5829] worker_thread+0xb49/0x1140 [ 260.949124][ T5829] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 260.949156][ T5829] kthread+0x388/0x470 [ 260.949175][ T5829] ? __pfx_worker_thread+0x10/0x10 [ 260.949198][ T5829] ? __pfx_kthread+0x10/0x10 [ 260.949218][ T5829] ret_from_fork+0x514/0xb70 [ 260.949240][ T5829] ? __pfx_ret_from_fork+0x10/0x10 [ 260.949259][ T5829] ? __switch_to+0xc79/0x1410 [ 260.949277][ T5829] ? __pfx_kthread+0x10/0x10 [ 260.949296][ T5829] ret_from_fork_asm+0x1a/0x30 [ 260.949330][ T5829] [ 262.070522][ T5829] Shutting down cpus with NMI [ 262.071213][ T5829] Kernel Offset: disabled