last executing test programs: 111.846406ms ago: executing program 2 (id=3): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010102020d0000090584f30002000000090503", @ANYRES64], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$uac1(0x5, 0xad, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9b, 0x3, 0x1, 0x7f, 0x20, 0xc, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x25}, [@extension_unit={0x7, 0x24, 0x8, 0x2, 0xfff, 0x7}, @processing_unit={0xa, 0x24, 0x7, 0x2, 0x1, 0x1, '$Yj'}, @processing_unit={0xa, 0x24, 0x7, 0x2, 0x0, 0x9, "fcca0a"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x9, 0x40, 0x37}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x4, 0x3, 0xcc, {0x7, 0x25, 0x1, 0x8, 0x9, 0xe1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x0, 0x3, 0x3, 0x6, "785343cf"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0x36d, 0x8, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x20, 0xb, {0x7, 0x25, 0x1, 0xc, 0xb, 0x6}}}}}}}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x300, 0xb0, 0x2, 0x8, 0x40, 0x7}, 0x10e, &(0x7f0000000580)={0x5, 0xf, 0x10e, 0x5, [@wireless={0xb, 0x10, 0x1, 0x4, 0x80, 0xb5, 0x7, 0x2, 0x5b}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0xad, 0x5, 0x9, 0x6, 0xc}, @wireless={0xb, 0x10, 0x1, 0x4, 0x20, 0xff, 0x2, 0xc, 0x7}, @generic={0xe5, 0x10, 0x1, "5eb7533c9b2a03055f0aea0a5733f9706ef8aac1a049f3e8d783bce94102631e6c595cc17e1ae51617277d429842a9f530273a4dddf6627ce0bfbef6680218fe298dfc78217ee0c26ff933bf2890ab5542258adf0a17e5e4a19da16d4911c03fee3136146e579e3561fed8a021809ae81a805d0b024b50e4dfd694a9ab96d57f10bdbd58a78bc152bd53c05a693dd588cc27493fdd0d13249ab52c914043f14d3886d24c8ce6eafe000209bb5db38c13a56987b08fc5ae743513c0d8ec566bcc177fe2e0fec46844e1d463de1eff671bda9986cfb2177afd63e9f4262c15ea4dba5d"}]}, 0x8, [{0x54, &(0x7f00000006c0)=@string={0x54, 0x3, "4b297568a9f800fe76530106531789cdbaff2ddf37ad7a8468b2220e21072308f14d07d14d5a1a2cb37858bc789505cfb02b49de1668e74ccb9b77b74836ee94881fcb7f87f44605b77a183e9c3e34026344"}}, {0x1c, &(0x7f0000000740)=@string={0x1c, 0x3, "07a0ed4f52e144740d181278fea5bd3883141ca306949c2db8ff"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0xc0a}}, {0x16, &(0x7f00000007c0)=@string={0x16, 0x3, "ea3887111328b7af334265826cc492d45d78b4c7"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x2811}}, {0xf0, &(0x7f0000000840)=@string={0xf0, 0x3, "9213d3d1e511b4d2e46013213779881101276046b3b61a8caffc236a2e440d9f7aa820991a9450fdc1a7e6beb6e37f0e3946d0b5c718eb5374b9e307d8ca6ac35462c9079da717676ef131f85e575a79be0a4ae1abc73e1c59254acba1c2580704129446262358c8655091923a8c28a742c4607c089cf43cb46921f496553ea6578ddf94e9ad03280248d224c4b670c37453ef7372bf3a70afe93e8f62e939b9339a0c68dcdecaab19d5cf85ea97a01d3995446302d9da172a9de66f0b2436c9cdc9b59e7b3ebb2b04ebea0f82447a2a02daa849502ce62ba85ac2d573d4f7422fc731bd5fb31095c596534a6161"}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x42f}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x411}}]}) syz_usb_control_io$uac1(r1, &(0x7f0000000b00)={0x14, &(0x7f0000000a40)={0x20, 0x0, 0x58, {0x58, 0x22, "33b4ccd059117c3261887650b2a5d0aa3be778124ac57601327f0823b5aceadab43fa778ad54ceecaa928e053bb735be47d36826ace81a947c91e40517c5f18c75f454cc21582875c69fb2ade7743bc11305c7b1081c"}}, &(0x7f0000000ac0)={0x0, 0x3, 0xc, @string={0xc, 0x3, "9d9eff87988696fbd297"}}}, &(0x7f0000000d80)={0x44, &(0x7f0000000b40)={0x40, 0x9, 0x75, "41decac15e743429af5e7d0aa5af9967f53499ffdcee351d3b53cafc6ddb1459b49f3c449950c138bb34544623198eaf51596afb6f086b4b1509cbc6d2f0d82ebf1c4047aa447123c1908c7742830f2b9b5cc20d2a89e15696709ea81ef3d87f6f52c1a5539c3125e29a9658fd3385c287764ecb90"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000c40)={0x20, 0x81, 0x3, "d818dd"}, &(0x7f0000000c80)={0x20, 0x82, 0x1, '/'}, &(0x7f0000000cc0)={0x20, 0x83, 0x3, "ee8987"}, &(0x7f0000000d00)={0x20, 0x84, 0x4, "7766e3be"}, &(0x7f0000000d40)={0x20, 0x85, 0x3, '>;U'}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_usb_connect(0x0, 0xaf6, &(0x7f0000000e00)={{0x12, 0x1, 0x300, 0xb7, 0x68, 0x83, 0x10, 0x4e2, 0x1422, 0x869b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xae4, 0x4, 0x0, 0x4, 0x0, 0x6, "", [{{0x9, 0x4, 0xce, 0xc0, 0x0, 0xc8, 0xba, 0x76, 0xf7, [@uac_as={[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x51b9, 0x8, 0x9, "1191ef67f8c14a"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x9, 0x2, 0x7f, 0xf, 0x9}]}]}}, {{0x9, 0x4, 0x2b, 0xff, 0x9, 0xf0, 0xd9, 0x95, 0x0, [@hid_hid={0x9, 0x21, 0x6f, 0xfa, 0x1, {0x22, 0xe97}}], [{{0x9, 0x5, 0xe, 0x4, 0x20, 0x2, 0x0, 0x44, [@generic={0x102, 0x30, "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"}]}}, {{0x9, 0x5, 0x7, 0xc, 0x20, 0x9, 0xff, 0x7, [@generic={0x42, 0xc, "741461cb677534060768ab8e8008af631fa2d51ec290b69da2081b1d15dfa47b0c7d5236071a7de94f4ab2e361b66f1be33af91c6cbf70429287f680d38fc5a7"}]}}, {{0x9, 0x5, 0x0, 0xc, 0x400, 0x6, 0x7d, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0xfff9}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x8d, 0xfffd}]}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x4, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x3}]}}, {{0x9, 0x5, 0xd, 0x10, 0x20, 0x9, 0x20, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xe2, 0x8}]}}, {{0x9, 0x5, 0x2, 0x10, 0x200, 0x3, 0x9, 0x5}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x7, 0x6, 0xfa, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xc4, 0x200}, @generic={0x4, 0xc, '\x00%'}]}}, {{0x9, 0x5, 0x8, 0x10, 0x200, 0x9, 0x2, 0x4}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x9b, 0x58}}]}}, {{0x9, 0x4, 0x7b, 0x5, 0xd, 0x27, 0x63, 0xa8, 0x0, [], [{{0x9, 0x5, 0x80, 0x3e, 0x3ff, 0x81, 0x6, 0x4}}, {{0x9, 0x5, 0x9, 0x8, 0x3ff, 0xcd, 0x0, 0x55, [@generic={0x22, 0xf, "12719a9b5b5de5b4d6cb3933ec6b117b07fa56145ed88a367d8f4495d27a463a"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0xbc, 0xfc, 0xb0, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x6, 0x8f}, @generic={0x57, 0x22, "625327c2101ad17fa06ec00c68bc7043c43e49fbafcd453fc81e95ea097c388a37a5bf0fca517d8d9c83acac230a64362efd03011ea06ba1dd0e3d704bbec9ef27c187100053621ab321f046113175ebb9ac92b7c4"}]}}, {{0x9, 0x5, 0xe, 0x1, 0x40, 0x5, 0xfb, 0xf3, [@generic={0x61, 0x7, "384101505783c58d2bb3eb088bc03860191957608dc43e7876410acc9df5fd1bc7ce00da473a573d6ddb1c26743e808bc5b13fbbd13594dba29cb226cad4d408dd202b26516bf6da6c3a9fd0e0027a0f9cfff551744512906fe679cdabdd43"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x9}]}}, {{0x9, 0x5, 0x4, 0x10, 0x30, 0x7, 0x8, 0x2}}, {{0x9, 0x5, 0x8, 0x8, 0x40, 0xa, 0x4, 0xf}}, {{0x9, 0x5, 0x3, 0x10, 0x40, 0x0, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x5}]}}, {{0x9, 0x5, 0x1, 0x3, 0x200, 0x5b, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xd, 0xfffc}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xa2, 0xb98}]}}, {{0x9, 0x5, 0xf, 0x3, 0x400, 0x5c, 0x6, 0xe}}, {{0x9, 0x5, 0xd, 0x4, 0x10, 0x7, 0xb, 0x7}}, {{0x9, 0x5, 0x0, 0x0, 0x1df, 0x9, 0x0, 0x5}}, {{0x9, 0x5, 0x7, 0x4, 0x400, 0x1, 0x3, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x4}, @generic={0xbc, 0x25, "12f1f3450c387f3e61b8cfd072716f994ec6dd0a5088eb1357ef609455c0394e55a1e3a8311518a4f79c28b8bc08aaa6a31ee09c0db67bff0eb01f1c1e23548e01feb7600e7d5ab46c14bad575189aabc7dfa730ae25e6c895cb50a3278e12993ad080bdd227a54356146ebe1873fe0200b969f90e95d3e67fb9185a8802c9863b860688ff6a160dbf4d0a511697a7c3ca94b86eee7962c692ea7999ab485d06a3b4550b3c1298f28e29777a0598c86d6d1918837c5aeb900b46"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x60, 0x9, 0x77, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xc, 0x8}]}}]}}, {{0x9, 0x4, 0x51, 0xd2, 0xf, 0xb9, 0x79, 0x2a, 0x7, [], [{{0x9, 0x5, 0x5, 0xc, 0x8, 0x5, 0xc, 0x1}}, {{0x9, 0x5, 0x1, 0xc, 0x200, 0x80, 0x3, 0x5, [@generic={0xa7, 0xb, "7d82bec9fef0ec7cc510d91634a188f843363dc6bc8dc3aee5e85e8600266c78c915229edadb945bd0672ecf05e16a3217e928874543306ebb224a4bc913cb19aafeb6a5e81fa85cd63409b0304865390aeb0af6704de5325392184a587c316cb8ca71a55e25dbdabed737791e8811291417719b0a6774f01714c8b3c058a7254f4cef885e5578919155f5386baa2d12f0a166843758b524b49adf173545b5b02508862239"}, @generic={0x43, 0x31, "11bc19c20e469438ce95d875e66bc496a7db9602eadf014bd0f72fbf75638362ac142f5d4f6033709ecfce1d9365009406cc125705a7bc6b766de5378bebad06ab"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x3ff, 0xcc, 0x0, 0x9, [@generic={0x10, 0x23, "3098e595104a75e321ae727e57f1"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2a, 0x4}]}}, {{0x9, 0x5, 0x80, 0x0, 0x240, 0x9, 0x6, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x55a7}]}}, {{0x9, 0x5, 0x6, 0x2, 0x3ff, 0x81, 0x70, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xc, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0xad0}]}}, {{0x9, 0x5, 0x7, 0x1, 0x8, 0xb, 0x7, 0x8}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0xf, 0x9, 0x7, [@generic={0x7b, 0x1, "dd9ab6d3416f47dc930507bf3daee25622b68b3ef81ef60d994306be2a421363be3b8818b93ba7c0f0eaeb5a024d4bb709596adce99f2c25bd05633ecdc838dadeb39ef157a521752a3b90bc5eaa6f5f8f5f32c4493544749cb562990f8b5d54cd06b9efa48aa927efc4b6dc74c1cf8e91f34d332bfab2a311"}, @generic={0x9d, 0x11, "0ec80938688f1dec00dd5a8cbcd10be39bada57f47fcef63f327a4b92dad54ab804c33789b97d6fe6d3c6c333284c4057b5bb3b90a3f6fd6b8c294bcfcfa0ed7b74bc954ec6676d8b2585185ec4e557eb3007d54e9b5af02c43a13a5cfba3e0f638b0b612dc1dd605b12dd22caab4615e04855ef9a11832d03b60dfe162f2a7754b1bdc82340c2407187bfe46f1af36f74419269445a26dedfd5ff"}]}}, {{0x9, 0x5, 0x2, 0x1, 0x10, 0x7, 0x3, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0xb48}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0xb2fc}]}}, {{0x9, 0x5, 0x2, 0x8, 0x20, 0x4, 0xf0, 0xd, [@generic={0xf2, 0xf, "7e6fe09c5b9c88447e6567351ab3611086edf035e47e6b122c94a762c49fff18331853633d77ebcd2f8d50397ddf5594b09438756103f576bd9c6f4a51210f02cf5aff478420ef59199d7b8ea7c0b6fe21918cf0ca0943dda21bb72d35bdcce75cf1cecd84ce25972d9bcaedca6b20e7e4f431d574c7ed2f7f890bcc60e8b31d065cf8723a0c9b46a4dbfc29bec00b79f4146438d41c27b8d39fbfe53291116708f7e7f346807c0392b65d271d098b3117d15d947364d765be66ebb7cdc4184b7ca3ad1d212e35358a7f5abb9fbe08c133f4e34381eafb2fabfbb19f57e8aef7c8059cf799d8ff7c9968120f3adbc4a8"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x40, 0x1, 0x9, 0xc8, [@generic={0x6b, 0x5, "fceafbbb08c79baca9b768c4aa96784d89b1842402d01e5089b463b5f4a7da23f2ce6b38015b8702dc8f5918e70436435e9712bd80f504ff683e21ed5c5b16d05367bc9dfe99e4787e0ab4dea2dbbf394475898f101bb64f03342b0953902452918a4a814ae6a6095c"}, @generic={0x55, 0x3a, "9a0c6f8c4847c7b9c09bc3f8c4b2d9c184458c9ae41e77e37fb2c334cd81c293ed23442ac1933a5b60c55882506fab4b0c423f15e78cbeeab98922868a2b790d35a00a6113c81091a277c7f4c3b4e27d9edec1"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x40, 0x6, 0xdc, [@generic={0x89, 0x0, "b35c1d677fdd8da3c14616f5085109cee76ef0f21a8ef08b7eff5f5107e2969f56fe4eb112ea179ac1441e8ecd92127d3133fc6a4a0a2a46fe2e7ca7bc7421ec1fdfea02b71b9a15b01e501e7987c1c524127a4c51e50d03729f5d3df8716ddbac3a0366ceff2bdf1a3acb9310a3b8b087b624b77e7bee034c5e21a7f461c97c577a0e9b2024e8"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x5, 0xbf, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xe, 0xf}, @generic={0x25, 0x23, "ac1938122e53ea142d2b3cfc03d34dd5acd74652c41e8274eef792f2255ac423b11342"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x400, 0x0, 0x4, 0x8, [@generic={0x9a, 0xf, "a1a5ee3ee9c3132a803f0372ee4aaeba4df94db1f4429588cd92ce01fa00516ad2c5918a49ba85676b12f9cb9b0e7984e5eeefa1fc91a4891879504b3c3c30396c37b111b0518dc9b7f1caa36ade3a22f1562e637c778ef45b6896b4029f1378b693a4c5d144e199553cd589864208083051b94106fccbe63034b559d5969dfdb342ca1dd9aef774ea42964131d9688606b43f97c57d3f26"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x694d}]}}, {{0x9, 0x5, 0x6, 0x1, 0x200, 0x4e, 0x0, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0xf3}]}}, {{0x9, 0x5, 0xb, 0x4, 0x10, 0x5, 0x65, 0x2, [@generic={0xbd, 0x3, "2864ddea36650c95b9f84c33985ad745f89ffc8c23bb22b6cb67b1fe9138ebd70ed4e5491fe33cf19d1b4b214802c5565ee0972cf6649754cb8f1461d93b1d13ef84057fd9baccd56db3bb19bddc2d7dc706b9a296979f60ba96856c2bad6f568db5835a2493b267e56514892a1278d8c2539ed6f317876fd1f4d14d334f2e7f36e8c370ecd34f139f5b8db1371264601a3c5335b8390f54118e83bf758978549cd5beeead02e15e5977411de2e5916239f5913b0a7fac686e8abd"}]}}]}}]}}]}}, &(0x7f0000001ac0)={0xa, &(0x7f0000001900)={0xa, 0x6, 0x200, 0x2, 0x10, 0x9, 0x20, 0xa3}, 0x82, &(0x7f0000001940)={0x5, 0xf, 0x82, 0x5, [@generic={0x4a, 0x10, 0xb, "e1137cb2637964135a65994f383fe27e44a8e84c3748c5851342fb724a61d09369098f8634727f2f7ec9332faa6dd1f67ef02c1aced35002c0dd14292a1fe365564cfa7baabdc4"}, @ssp_cap={0x18, 0x10, 0xa, 0x1, 0x3, 0x4, 0xf00, 0x6013, [0xff0000, 0x1bf, 0xff00]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1d, 0x9f, 0x6, 0x100}, @ext_cap={0x7, 0x10, 0x2, 0x24, 0x7, 0xd, 0x200}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0xba, 0x21, 0x5}]}, 0x2, [{0x6c, &(0x7f0000001a00)=@string={0x6c, 0x3, "20a2ee86aa1fd73c05b71a3d05b9e860c37abda85f58c620561aa97f1e7814c2ec8e361edf12c790513188e15af7ff1fdc88460d51f6182ea920067e776cb3b2aca07801521035ccf5bc3ddbe5737c47e5275dad197295be989498138c26f34cd1e63832e6de7a0a37e5"}}, {0x4, &(0x7f0000001a80)=@lang_id={0x4, 0x3, 0xfcff}}]}) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r7, 0x29, 0x46, 0x0, &(0x7f00007d0000)) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000040)={0xfffffffe}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x14, 0xf1, 0x50, 0x12, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbda], 0x4, 0x43100}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x80, 0x9, 0x3], 0xeeee8000, 0x202}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r9, 0x1, 0x4d, 0x0, &(0x7f0000000000)=0x2f) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0xeeee0000, 0xb, 0x8, 0xb, 0xe6, 0x40, 0x9, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x42, 0x5, 0x7d, 0x6, 0x36, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x4, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe, 0x3b}, {0xeeee0000, 0xd000, 0xf, 0x18, 0x16, 0x7, 0xab, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0x2000, 0xdddd0000, 0x3, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2d, 0x1, 0x7}, {0x3000, 0x3000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x81}, {0x4000, 0x30}, {0x8000000, 0x7}, 0x33, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x3, 0x8]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r4, 0x0) ioctl$KVM_TDX_GET_CPUID(r4, 0xc008aeba, &(0x7f0000000000)={0x5, 0x0, 0x0}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 96.396856ms ago: executing program 1 (id=2): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x842, 0x0) mount$fuseblk(&(0x7f0000000300), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x488, &(0x7f0000000380)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2860aa, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000006a0015"], 0x1c}], 0x1}, 0x4000080) 63.511367ms ago: executing program 3 (id=4): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r7, r6, &(0x7f0000000700), &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, r1}}, {}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x800}}], 0x1, &(0x7f0000000900)={0x2e, 0x10, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0}}, &(0x7f0000000b00)) 619.7µs ago: executing program 1 (id=5): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) close(0x3) r1 = syz_open_dev$loop(&(0x7f0000000040), 0xffffffff80000001, 0x1680a2) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/rcu_normal', 0x82802, 0x8) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf900000080149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d665f985881a350000ddffffff00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237601a8ca5b07dce141802c4dacf162e43ac6126c370ec00000000a04100", [0xffffffff7ffffce8, 0xa]}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000080)=0x20) ioctl$UI_DEV_CREATE(r3, 0x5501) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r5 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x8) write$binfmt_aout(r7, 0x0, 0x6a) vmsplice(r7, &(0x7f0000000040)=[{&(0x7f00000000c0)="60b4", 0x2}], 0x1, 0xf) flock(r5, 0x2) r8 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x2) flock(r8, 0x1) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) preadv(r9, &(0x7f0000001e80)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sendfile(r0, r0, 0x0, 0x4) 386.4µs ago: executing program 0 (id=1): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000160001d7a26bd005b8c3fd000a0000000c00ca8008000b"], 0x20}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0x7, 0x0, 0x3}, 0x1c) sendmmsg(r1, &(0x7f0000000580)=[{{&(0x7f0000000180)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x10}}], 0x1, 0x45) 0s ago: executing program 3 (id=6): r0 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x81}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040014}, 0x4084) (async) clock_gettime(0x2, &(0x7f0000000000)) kernel console output (not intermixed with test programs): cess permissive=1 [ 13.586585][ T36] audit: type=1400 audit(1779005648.840:63): avc: denied { siginh } for pid=232 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.69' (ED25519) to the list of known hosts. [ 21.410680][ T36] audit: type=1400 audit(1779005656.670:64): avc: denied { mounton } for pid=274 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.414007][ T274] cgroup: Unknown subsys name 'net' [ 21.433338][ T36] audit: type=1400 audit(1779005656.670:65): avc: denied { mount } for pid=274 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.460656][ T36] audit: type=1400 audit(1779005656.700:66): avc: denied { unmount } for pid=274 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.461087][ T274] cgroup: Unknown subsys name 'devices' [ 21.645273][ T274] cgroup: Unknown subsys name 'hugetlb' [ 21.650919][ T274] cgroup: Unknown subsys name 'rlimit' [ 21.806525][ T36] audit: type=1400 audit(1779005657.070:67): avc: denied { setattr } for pid=274 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.829721][ T36] audit: type=1400 audit(1779005657.070:68): avc: denied { mounton } for pid=274 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.854581][ T36] audit: type=1400 audit(1779005657.070:69): avc: denied { mount } for pid=274 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.878867][ T290] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 21.887778][ T36] audit: type=1400 audit(1779005657.150:70): avc: denied { relabelto } for pid=290 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.913312][ T36] audit: type=1400 audit(1779005657.150:71): avc: denied { write } for pid=290 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.945196][ T36] audit: type=1400 audit(1779005657.210:72): avc: denied { read } for pid=274 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.970823][ T36] audit: type=1400 audit(1779005657.210:73): avc: denied { open } for pid=274 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.971508][ T274] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.775810][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.782969][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.790057][ T295] bridge_slave_0: entered allmulticast mode [ 22.796455][ T295] bridge_slave_0: entered promiscuous mode [ 22.803933][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.810991][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.818097][ T295] bridge_slave_1: entered allmulticast mode [ 22.824401][ T295] bridge_slave_1: entered promiscuous mode [ 22.932783][ T300] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.939914][ T300] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.947220][ T300] bridge_slave_0: entered allmulticast mode [ 22.953617][ T300] bridge_slave_0: entered promiscuous mode [ 22.972594][ T300] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.979697][ T300] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.986836][ T300] bridge_slave_1: entered allmulticast mode [ 22.993129][ T300] bridge_slave_1: entered promiscuous mode [ 23.007627][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.014694][ T299] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.021760][ T299] bridge_slave_0: entered allmulticast mode [ 23.028111][ T299] bridge_slave_0: entered promiscuous mode [ 23.037255][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.044333][ T299] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.051393][ T299] bridge_slave_1: entered allmulticast mode [ 23.057688][ T299] bridge_slave_1: entered promiscuous mode [ 23.081383][ T301] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.088465][ T301] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.095567][ T301] bridge_slave_0: entered allmulticast mode [ 23.101791][ T301] bridge_slave_0: entered promiscuous mode [ 23.111268][ T301] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.118385][ T301] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.125503][ T301] bridge_slave_1: entered allmulticast mode [ 23.131753][ T301] bridge_slave_1: entered promiscuous mode [ 23.210556][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.217649][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.224994][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.232038][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.298538][ T300] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.305640][ T300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.312951][ T300] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.319991][ T300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.337302][ T301] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.344382][ T301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.351664][ T301] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.358712][ T301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.373542][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.380871][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.388527][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.395993][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.404040][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.411260][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.425996][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.433072][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.457783][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.464848][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.489199][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.496268][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.504346][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.511380][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.527646][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.534723][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.544936][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.551996][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.601681][ T295] veth0_vlan: entered promiscuous mode [ 23.616874][ T300] veth0_vlan: entered promiscuous mode [ 23.635064][ T295] veth1_macvtap: entered promiscuous mode [ 23.645872][ T301] veth0_vlan: entered promiscuous mode [ 23.653495][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.660553][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.675422][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.682486][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.691477][ T300] veth1_macvtap: entered promiscuous mode [ 23.722312][ T301] veth1_macvtap: entered promiscuous mode [ 23.738871][ T295] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.775608][ T299] veth0_vlan: entered promiscuous mode [ 23.789929][ T299] veth1_macvtap: entered promiscuous mode [ 23.880587][ T12] ------------[ cut here ]------------ [ 23.886188][ T12] WARNING: CPU: 0 PID: 12 at drivers/block/ublk_drv.c:1579 ublk_uring_cmd_cancel_fn+0x34f/0x410 [ 23.896728][ T12] Modules linked in: [ 23.900699][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 d58365df94cd5f4886b4f3ec3f08a458f2157066 [ 23.900724][ T324] netlink: 'syz.0.1': attribute type 11 has an invalid length. [ 23.919938][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 23.930338][ T12] Workqueue: iou_exit io_ring_exit_work [ 23.936016][ T12] RIP: 0010:ublk_uring_cmd_cancel_fn+0x34f/0x410 [ 23.942407][ T12] Code: 5d c3 cc cc cc cc cc e8 ef 2c 32 fe 0f 0b eb e3 e8 e6 2c 32 fe 0f 0b eb da e8 dd 2c 32 fe 0f 0b e9 4d fe ff ff e8 d1 2c 32 fe <0f> 0b eb c5 44 89 e1 80 e1 07 fe c1 38 c1 0f 8c 0c fd ff ff 4c 89 [ 23.962096][ T12] RSP: 0018:ffffc900000c7990 EFLAGS: 00010293 [ 23.968255][ T12] RAX: ffffffff835596cf RBX: 1ffff11026170595 RCX: ffff888102652600 [ 23.976293][ T12] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 23.984333][ T12] RBP: ffffc900000c79e0 R08: 0000000000000003 R09: 0000000000000004 [ 23.991073][ T329] loop9: detected capacity change from 0 to 7 [ 23.992337][ T12] R10: 0000000000000000 R11: ffffffff835586b0 R12: ffff88810b3ddf00 [ 23.992360][ T12] R13: ffff888130b82c80 R14: ffff88810e7fd700 R15: ffff88810e7fd710 [ 24.009968][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 24.014538][ T12] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 24.023650][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 24.032580][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 24.047003][ T12] CR2: 00007f6d377ea540 CR3: 0000000103b78000 CR4: 00000000003526b0 [ 24.055059][ T12] Call Trace: [ 24.058361][ T12] [ 24.061322][ T12] ? _raw_spin_unlock+0x45/0x60 [ 24.061835][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 24.066240][ T12] ublk_ch_uring_cmd+0x6f/0xa0 [ 24.075368][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 24.088660][ T12] io_uring_try_cancel_uring_cmd+0x1a1/0x280 [ 24.094726][ T12] io_uring_try_cancel_requests+0x4ce/0x5a5 [ 24.100666][ T12] ? io_uring_cancel_generic+0x6eb/0x6eb [ 24.102361][ T329] loop9: unable to read partition table [ 24.106497][ T12] ? __cfi___switch_to+0x10/0x10 [ 24.117016][ T12] ? kthread_data+0x54/0xc0 [ 24.121194][ T329] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 24.121556][ T12] io_ring_exit_work+0x23c/0x83b [ 24.134730][ T12] ? _raw_spin_unlock+0x45/0x60 [ 24.139591][ T12] ? __cfi_io_ring_exit_work+0x10/0x10 [ 24.145115][ T12] process_scheduled_works+0x7d4/0x1020 [ 24.150703][ T12] worker_thread+0xc51/0x1370 [ 24.155494][ T12] kthread+0x2c9/0x370 [ 24.155533][ T31] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 24.159612][ T12] ? __cfi_worker_thread+0x10/0x10 [ 24.172234][ T12] ? __cfi_kthread+0x10/0x10 [ 24.176903][ T12] ret_from_fork+0x67/0xa0 [ 24.181355][ T12] ? __cfi_kthread+0x10/0x10 [ 24.186033][ T12] ret_from_fork_asm+0x1a/0x30 [ 24.190835][ T12] [ 24.193928][ T12] ---[ end trace 0000000000000000 ]--- [ 24.199729][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 24.208945][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 24.223353][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 24.232555][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 24.243613][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 24.252800][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 24.261420][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 24.270599][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 24.278819][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 24.287991][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 24.296733][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 24.307820][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 24.334173][ T31] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.345340][ T31] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 24.356732][ T31] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 24.368286][ T31] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 59391, setting to 1024 [ 24.381256][ T31] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 24.390681][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.400302][ T31] usb 3-1: Product: syz [ 24.404662][ T31] usb 3-1: Manufacturer: syz [ 24.409298][ T31] usb 3-1: SerialNumber: syz [ 24.617781][ T312] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 25.227856][ T312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 25.237748][ T312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 25.246417][ T312] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 25.455448][ T312] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.488121][ T312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 25.496910][ T312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 25.674150][ T31] cdc_ncm 3-1:1.0: bind() failure [ 25.685754][ T31] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 25.694394][ T31] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 25.704422][ T31] usb 3-1: USB disconnect, device number 2