last executing test programs: 18.611331393s ago: executing program 2 (id=503): socket$inet6(0xa, 0x3, 0x101) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nullb/nullb1/size\x00', 0x2, 0x0) write(r0, &(0x7f00000003c0)='256\n', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/nullb1/zoned\x00', 0x2, 0x0) syz_emit_ethernet(0x4e, 0x0, 0x0) write(r1, &(0x7f0000000440)='1\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000480)='./gadget/dummy_udc\x00', 0x802, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nullb/nullb1/power\x00', 0x2, 0x0) write(r2, &(0x7f0000000500)='1\n', 0x2) faccessat(0xffffffffffffffff, &(0x7f0000000540)='./config/nullb/nullb1/zoned\x00', 0x89) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./dev\x00', 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, 0x0) write(r3, &(0x7f0000000600), 0x0) close(r3) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000025c0)=@bpf_lsm={0x18, 0x8, &(0x7f0000002680)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @map_idx={0x18, 0x7, 0x5, 0x0, 0xc}, @exit], &(0x7f00000026c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002700)={r4, 0xe0, &(0x7f0000002740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000002840)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002880)={0xffffffffffffffff, 0x58, &(0x7f00000028c0)}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000002940)={0x3, 0x16, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], &(0x7f0000003280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f00000032c0), 0xffffffffffffffd2}, 0x48) r5 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r5, 0x0, 0x0) syz_usb_control_io$sierra_net(r5, &(0x7f00000001c0)={0x14, &(0x7f0000000240)={0x20, 0x21, 0x8, {0x8, 0x24, "e4ff14eca81f"}}, 0x0}, 0x0) 13.070566225s ago: executing program 2 (id=510): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$XFS_IOC_FSGROWFSLOG(r0, 0x4008586f, &(0x7f0000000000)={0x1, 0xc}) bind$bt_l2cap(r0, &(0x7f0000000480)={0x1f, 0x0, @any, 0xfff8}, 0xe) connect$bt_l2cap(r0, &(0x7f00000004c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000200)=0x3c, 0xffffffe1) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000400), 0xc8bc0, 0x0) ioctl$RTC_ALM_READ(r2, 0x40187013, &(0x7f0000000440)) sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000200), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000280), 0x10106, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f00000000000000000000000000006bdf313e23408b01b390f366b11dfa35ca0177c363094b1d649508b0c874e5b8d1b5688899a81d1c45b1ab14618b7ebbd613e1dcbb23066e2de8272129340ab9d6b45c037188ceac827eed7100ebe8fe6b78914ac5008ac4fa70a8961ae2b567a100a73d828416d5114bd1e7caa3ab772c644b45cca6277d47dbf27d61a1cf2b5197be70c90d28bd7338c894"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) userfaultfd(0x80001) gettid() r6 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r6, 0x0, 0x0, 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) 12.066442303s ago: executing program 2 (id=514): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0x80000) ioctl$SNDRV_PCM_IOCTL_UNLINK(r1, 0x80044100, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x15, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02ff771e2f7196"], 0x10}, 0x1b, 0x7}, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) gettid() ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x4008014) bind$inet(r3, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r3, &(0x7f0000001380)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x60010000, 0x0) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r4, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f00000062c0)="23db5037805f177d136115e6a1a5903469af39c1fb9cb38215fe64cff9f2f0444a57e22b0cc5cb4f74c9792365400d9e1c68539ea5eff0a5ed0864814d39251bee8dfea69aa052d900bc0c792e1c9752b7d3a3222f6a1ad3e44c1f65617b128aea51911861ca36ba7c96b96b2fba0fdaa49ffb2612f3e81fe565327dd9965a60046442c9dcd0d552c6a00388be3b438a08883c7349761531880294ad9887db97d8c2f74921c57910cf1f5cc528e17bd5c3746b6202f26d621535aac5f7872c2cb3295e42524b5acb249b2d1ac1b53a4e31271decfca3fad2e2f740768adf00875c18cb7d115150f83ceb73f77a1f61f1666c2bb9f6bd9f0fb55b3a619446e32bae2a1d99aa49e5f3822e048f8be44b707f2db10d7916ec9a10a695d573d871cf24959c3d15e61344a68309d186956537c6ea8532fc2e1c7649f8409d8dcde4c8ee1530470ac9c870f9f1837574e444ba6addf5ddb2dec67c0e76df79f265b403818dddb4efc27c90985ed69a48b12056e548f9c99edf80d2b195d26acb1127661727a0600257f4b2546513d03930a0638a71bd3223e51fbb75c832ef737907f2f4d3f0505f431ea02783c798b5c4579c99961fb73dc623a0d99c1b306435464d413b537d42c6444851b36482597140b22fbc0ebc7e795b2f96739bf139f5823bc869ede547da4f394fa1b1787836095e1013264042e53d5006ea059d0488cb2f5ccd44b30d25ea53c2dda71d112d7d441dbfc9f8462c99c098b1958c80b237d83c32f2759c9a9c081d7d7666a477cfda59354309b09f2a8b9f6c3077b0df1e8d0c71ac07232de4f437107cb0eb9b47b2267efe31938a337cf11cadad72ced56895bb14763cca5bdadd245d801e829a1eb3bb4ed851a345918efd2dcf8d38f66badc773068e6a2ef59b2bb838abd8b043cf6ac54550f3fde1bbb9e761095e4b8ef1891757d376be1f778142610c0acbbfc697f51fbb7a1602ed46e82813c74f41ee2bae818174809f3692084bea7310ebec3d6166702ae62aad84313e19b4d145167185ea8d53cb21d099fb592d7d7f8bc305dd375b5c0cd73be44f49ff53cee220085d4706bbf50c6f63b02e7e805e8fa4c73046a57a8700886da29ea53e5a316e7b011c44a0f7be5cc5cb5641ba0069ff591eee18966c7f005ef40046a5fe2bf325b2545b009867761264aa9611d184fa372ba3c5c33d9a50717210f7cec7f6dc4418a87a797eb6aaf6ab3892bd3f559547c88d8c29646c8173fad1588f52beb34ff863be65e7ec1598cfb465f270bd5532fa7035aae077eedbc846058fa19f58ffb1cf0f1863f6d33f2e5c454d18b66be766ca369af2cc9656fa34c6c10e4d4da44ce5e2370aaf60c4e130da331d3489e8f44c600246323409fdd35d11da27128c9d64be65dd3a90c1546a6eb9185cb6d3a4a9cfad0e41ea03896fd2346f745eb3563d7a79fd345b037c040e56f0677840bf9b0d295bcfa98b931464c5ce9fcaf745720deac2d8b4edeffc0fe6f089ed7c3880959fcf8e31f7b7054bc4f5c9d3ed3f66c968d0bc20b2d66c374f030f3f1965f43a98519e527caf693362412d523eeb38c8b016ff77f78f833d7513e4b5a53d5ed5143916673f822ceac9967b8788bc6428283181eaf8d99e48286aacf4f658a903e9f08659450f7f9483807c2e013a1d9d199f18886a8cb4e14d41c71e5731455a4394551281eca12a1bb6ae717f5da2949175d0f1f3d718b761dfc1099c7d9d8928c899ac8e936e69d19fcbfcfdee83b68ef8e15eed41a8ac0d54aa92d7d2ee58bb4799f378225ec9ba4709e5ce2b77208ecc85c22c64967a9ef3360c54d311b8917ceb7b432c90cc5e98de9327c1400f8ec89261b1d77d8874b0bbdd2c5eb59df415705de52b08b0e12c07fb7367c6d461c19f282d51e482cb4fb9ceb0249ac2d6400ca170fbd6c0063224179c616bb030a5c10102aa2eea92f1e6f5828590b250b09e6d1a9535c298a68160b7c281fecdd295dc3396c4e6eb3395d5a677d5fa95a732dfdef81f4346545dd1a74bb3aa9b516699bdf0a59165077ab459a5ffe0dbb3ef8afa7a8382a8441e0c36ffabbed8f93f4bbeb97e5f6a704bf63a0de9ccf8fef643ebc530a80920931002003b027014de317c42f861d98ef4fef66d232d9706e6bd263347384dadadaa43a7e106bbb21bd822d468ace171b3f04b996112135b63dcbd612b5888ec40da583ab549c340ddaf5d7406c3e99322c68874214356c1fd9b5f84348e629cc3487a901d1b7a2fa531b1509ac1c93de3da9f1c3773e3a2aba2b29d2419f240ae6d24ed9f14bf0b9b0f1e740a2db06dab64d6386f950bff4e4c94160ef4b832bbde3af4937b7528658b5c16a51cb22193fe99385721ce5b048d9338e289dcb40683140c413eca52c8e4b64b306f47569477379c864cfb3aa3e349262407d3935ab9a0916eb0f6db2be71a7eb8f9968dfac44995d5bff8ef617fceeaa448f5e5f8d4b39e3512fe7ae9ee1d8a0d5912b6148969ab0325f3f76e2340fbd67ce156bdf638140b3ccdb08e5049db15957915cb05db8901249b10c59cc5c3ff836290e3334eee2df387e44c57b4d6198c3749f5dc57f6c3de115ced6b43cbddd762b58f1fb40b2baf3b381febdc073142e30d2e9a1a69e8d86314221e540f195509d223b206173dc5406865d8064817c30c284c034035a63190ab86df3bae4168c58e01d2251748fd5d9d610024129e83a5730fe83cf0918790e6854ab765c78649b91c06655f0cb9e26d8432df78bbadd99583b6a8afcf177ed6f339e08c0b36a16c6d31d8a24cb6f2bc3ba58d7711b6f8b988dc3e3144be619548457d4f40509f17eeb186cb93a2928ecb951593d1907c8bbb9f4c8999caba3059c8e73dce54ad6f87bcd51d559f7759902b14e68d3b845c0b179b38f4e6f0bd3a89cbcd5ebed9972102048647da1eda5c8456442369f4ae871d4037ba26f27d27371ce57e23adca5af8dc93f934f2ef8d69ad3b2db66657b3868dd839c2b522f5461f24407ef091b77242fc70a48b7eec45f3bcbcfbc6bdc36e4b67295020a345233a32a0a0af4d03a53ef67e69716d5ae35342722afbe7558946475a9ebf5b39c18558a0011f68bc8a78590b0cb63618379a512790c42d94bb239dd3ef5b8d1036cf0391aded8802a7a447c38f231ae611aeeab9bba44cd14369473758b64108d0bc9b6bc9e9b497c2d1d2acbae7c620a55c226cf371331688eaddec61fe961c5fcef71dad45820ed0ac8dc7641d82150f1318ac15aa41e7be585b6a50da1b3cd95239ee61cfde15aba80ae8ebc21ba4540883c6f44cd35b6b97da4640c97f5a2b6efa8d184fec823abc754ab8a0db6c45c2293e90d9c154c4a3e0b9ec2b6113ce6583b80f0d234dec9a9815067244733e2134b9ba93bb9692fb44200bb5501bb109f2401e8baaf0115d795bb0346dfafaf953bed8e9a52a5b9b02d490c55fd89daf311ad5e08b070a9571f696d6df4715c8b69b840e4e03d6f361326e20d9546c47b3a63163e7df9bd260621358c166177ee7c69ed63a8c43dd4a78543aa9f922c0ef527f4aa61ff65bb14595f518412ce25a1e103df89cd4b363593da16c11d80a23a9b5ad8e3a7be8f697cecf82c8fbd889a4f743c839b67f7ba5453b10bbf59b1e4f4e821872c061a4125c0c15c1ca5164efe61a58bb54dcedc849800a6021a448d4660c3b85e2362b7cd8ce95156fbf408a09a30a8ccfc3554004e9f9a35382907eec00617e2ae1f8803146bc8c28b4f3bf3c6b183ae9248e7f05c4adce3e0b7ff29252b5be9b19431e3fe612d471f52c5c34cc12c83049189f4d2e5ca516df78766ba3449d07ef9436c68052c986d9dde8802c931194e2ce34acb8cc26663a09348b15c6c145d26306bded0d1f482803ae6dee26562b03fcb183b69ee4a0491e8776ecdadfca395cb4eac2948d4d64321a4e669f2f663eb54f05f12ed9c685835c3e79f982152dbe701073b9a4ab2932b46ee2424a5e18bbe5f25ce0b898ff6937927f4670defe430ac86021226ae055daf39b535cdc0899fcc99d15e67d66bd2dd89bb21b8d2689a8af10a1b0bd44103c469922c36fc0228d7b6febf5e366dceecf8bb1db385c8ab95d86ff09b76c2fa6282de81fd6864c495a4c8295df61a2548e1b81c3e3f30d7a41216801d6c2d1743f66ae2055756083e8bf403d436b8244ac214f4d84a693d13f299ba267401d094f2df70840e8a980622794212f0992ecf5a47980ab2cf7d5a6f12b0a489af3c3c847ac59bc89f36fbb0e08bf283b68213a17de38b3a45eade6f0b198def408f7711c16367bcc0ded794a9a323c7e7f07fad96ea9c4d7344c26e43844a27c21076b8d7cd07677602d91eac825eb5fd0631755c2dd1dbf7bce3eb3c3f7377fc6080ecd0b894e29769845725943e25932d4249abb4ab78d4e2ff2e2df42c8d884cd6bd13886cef080c6491c217abae0eec6e9d4d49eab6657f15cfd38e6cd6d0bd33198c4685ab302d0f46e42f4a5d5bb7d2840a0a8817b98a856700d4de74351896fe7d7d5a0d1bc57fb4c828aa51f9637807aeb905780f239527ed4affd83f68be8b7ad1e10d9e797ba39cdee24f7be0a0ab0ac22ea3968dac61eb4bdd522c9ce570edf63a439abfd9954bf6a16c88d86157d05477200a83255cde279b454979cee4de00e81cb44acdc4295c877566a749ab5b91d250f03d46ecc14210c196700338eea028c930ce104f20a9e7fabb0ad1d314ec1a2d97d1d1b9e09114dee0e3e513eacede01971ff85dc98634156073df4e8acd6c3aadd615adaffa7a81573813bc4ca21886ddd532021bba5c84b34c34665534db48d61903a03c1cca4ed955ca92c1e33b7664b494e3db6d1e637a49e537808a2669ebeca301691acd4fab0af197b9c7db01b7862466b568ab3a4712a25210264fb297a6b679dfc3fceb65bddd1a23d5b507a0d6da83d73b716d971c5179a92e57b9b93451eb943845a549de737f2d082a83682c32649b4941e787758ead9d2c256b2b4ed1e0255952ce83cccecc39e5bbdd38490f1960b26e5379943be3d9a64b5149c84d577e5fd099560baa292befa06ce9065fb03ed432a9e055ca4ad0e952f8368b3d230fd5239726f79f4c98a0b4a9648382b245d324cb61049562f765f923fc657ef36747658494d78590a1e27a2d09856acf50c3b26271c6d5aa96e8ff9bdb9043859665e21ea53a050c335cac414bbf27b0328ac2c7450acb26b093bf232358afd1135ee50ac3fb26b5f0256ccdd37033c8a59740607cfd549d4c6540afe4a6b4425ae1f633872dcfb5da8d0547cf0c4888817b71fbc7c45b2a641e9c1a76b6a6be124402422ada35edc02ed997d6b87b361aee95a16d2c528d89a52fe40dfd83434969bd86f02e63fc1ae72941209af39a08cfbb4c320bc47d853f5dbaf0cd60ec54608aadbc382fa6b5cab3e9cac57bea26609f4c79f6a6b4eb4a9336fa95783b0c0c366f36d5d6b8310b3cfdb800207919a131bc7f984f7fa11fd0bf2c89e060e9d1286e453fe97363ef72bd6eba29a85ffeccdc3bee72e12284333a5a40622c01619558d2750fc45abfa22059ebdf743f8e50ad29770d19f84d8a34232d6918514769b3bb2a1ea5e59e9556332ba669675764458e9349a1835c501a93e91dd3b31018979880a9913f54ec1e8526b8cffcb776b97fbb9424faa5c5eb60d2ac74955bba4b5182571d0d9f84f0df1baa722b20a78c9c0011c667f688b58489c9e450d83e40ac5eb41c5564b6d76a226448abe4a3f499927074125aa9c0e7e704c36df5bb110a0f15f8433a470e81db414827d5ce21ca1da1c8d51d746d1e1ca110127c15e92afd75d3cd05ce0b632cfa03745de3cdd4b57373d46676583c89f045c26c6fc5793e5489555ced08f83ba351135834a2028113c319af30cc85bc01a7f8208822d7d607aed0d2e12c80aa009100441b75beaccfe0adbda7e8bb870edf4963158794c8c3a5baacf6eec7b5efaefb7602dab8409d161beeb281cba21f1da0ccdc092d0433fb940d79699ffeb87ea775829a6e7e3b308a2ee0b7aec8ac5f35eed61be374c7c77196f7119a8882deff68230f461cb917b0ccb2b8597efcbdd1003b7b77b2c601ebd4b45c35b8426f7b9138ab3df0ec00819604ab8e1e64cf2aa2282b1269585af127a268cd207f964edff172e555398a16df44bdc52889538c3a27f8fbfffb61f7aeb55b259952bbfea81d73058d8b0f78ece9dc08e660437d21d4e3ec38b19e5afda7a6e33023f9158db8a1c14dabd9b8b307ddc66927f7b19df5e0da2237d98ddd890b81f1963808977d02198e8ae2e97419dbb1f8e51cad36a3424b955500fbdaab6ff8dbf028708b1f951fe43864b59b6c2368b816c98023d4480a91b3f1059e9c214bf55a7f8c7da907f79ff5568fd787d3aa022ab9d03cde551f7e3295f02c4f3aa37e4cebdd968c0f82f09eb004fbdb1a4ef3a0d426691bde3964c29ea65622f5d3ffd854053545ba1ec164495e4bef4845439c058f9438d13be7922b656db499c246ee6176a15b97e6a68e42f0c703033b699504e1f92b43054c7237199bd013d96faab47433b6b3f91dc66368706439d4ef7da3942ce8b9c1c9a9d0643fc4540e7d3f1c3821267e866cacd3e904be9f9df80381eec09eb2b0d745ff03ffb199b917a14fdd8fbfbffe8bfb0cf7023aa7183301a8a41e7097ff9f5247f8b78f7d08bbfc596a81047807cf0929677222e7e9e921b294e04088c3746d8dc19294645f1c093a21b4c5e6d92e54dd90465b11dd5d9d42af849070edff4ec63970f4088daaa33afdebb28d01df5ee043a8150ab1b25d864ef31e20c84696596cfbea92d02ea29c4a3933c41ec68aee7d68d7eea7f30d8920e14e62be42bcf856d7a58f46fdb2438b023e974f77281c5a462553627e9614504cbd3f1cae6e0fd9f7e89d9bce48946d0508616fbe542303dc542982c61d7bb4afbf3e76bf1fb2381cdc99f2175ef944dcd826aabdca2b7678db5262733c69ce504c38e7deb7adfb9b6d8bb00d8e4251e0438417ea615cde58bd76c2427b3d7a0578bbbff9fde2abbc5d60307aff0050b18176158aaedb34e283886378ff798b4f74e0a0c95d64271f1916280dd247304d9201c67f5e2640d9706add8703cac81795a0190107e2bb2941ed13738595da1c86ba0f68e2283a435cb5f162c74071a13dfe2266d05abaef080dd6b1dade115e883e04f0bb4be4d91f535ae6f822b02e814e65d2b7807d199a23d3f26209f6c9f93602a3a93ccfdebb5f8161b7928059674e15820d1848a980c8d1af5a73aadc5c402fbb6e730ba51227913ca27f0d78d331d6325d0a7926c238296b2a22b10a69cdffeb087dfe175511ed8e2cde8d7dae140e4ce92f892b129d9940e4a30b19f822ef7611b8750eaea8e55502604b7d2358c09a217af8be6c86d67cf6ff6130c971c9765d56631fe6224fbe1e833d497b534fbf6b030af93691f59295279aa1bdfb5d5d9d4668d5aea70e2b8fc117df0042e91c7e6225f27329727ed6e14a87c7943c040dfee4e5c06a20251c39a45ab4865951b0daefb9c05571fdcc21d1761945bd2b8047ccedd6f1e708646fbe61e75bb2728e8cee893d7e6f642119e786155a6cbab057d6d83b77716145119e974ad7355179d2adc3d748fa249cb58e32e6791d646240c05da4427b2f359976c8fd1486c604cb7ee647e24633d8fca8314cf1f85110ca6351156a2b26e44b040f7d2810acd36f45a3969c1fafd1a7e0bc14fd9b26593375be8e750c3f6534ffb85904d15d75fba05dac4a673de97f7543ee931724cd35474cd7ff5cf3e8abaf206f3030e92895633fa9d8499ea763601560260109dad18bd64b990531fc5377e6eaa5da050b98e1c6515ea48c7de1a15b63283d4a694cbad379356bfdac50e6c343879e29f6b9ab425600d51f257ceb35d0ca00f83cf5bd734223de716747614666ba1f1a8fa756e5f3ff0fc94fa4bd4073bddb0098cf565ee40af5732ee9218d262e5b64ad6b8118c54eeaf7072f2e15514a401779b425fa89d8abb1750e56cc3108dffdcf2d3fd86b8af4560d56f7ff0702154211f9949e3992d93e66892b297fa2d4bfe18de3fd74e96c9d30eb14fd458fdbc9e9a34e00f3280dd732520147fa2a8fa83e91dd0687501466a300015bf888c03fc08190c2753d7719acf6f84885c4c5642f466c1984f15a7716a9b608ee5f1b395726bcc8519766667d24d11e396e62ea39640c9e73e4e9e9e5076d7019ca1bebbd7097807f46b3b6fcb96ed4b433b25ec551fb176a5fa252ed1d81b0350cfdfb8069c9916495bef3a262b6668910896c0b37eee40547c663a901e92f41b417ac50e88d058d021a8f9a5783bd936cca4962bec1c9886689cc547970f9215232596392515182e563f720bb79d29baaabf0e2697de6500bc677e346847011ee3450358c0b16ca528368b5cbb8df5ab974a3cef072d20c9906fa585e0f3083ec6d8507b8561f64e65aa1aecf825fc47ad1459c87771549fd5c9a9cc094e7b1179ee1e90eff7158f28f59f029d90e708f4ec50b4f67d8b4bb7140065528354a7e25d63e92977183a0284ec22aa923210f0bfea89cca53547137381e5de0f60bc484bc2daf129b0380244f1ed4bfb674eb2791e76dce33cae684ad36620d5d67cb587f840caed316b7439b0e8c3de0e065e62680f3997369be3466670278168c9a1a644d870e3a8d0a79b2b720e8c3c51bb9133532beee64319e98714bb2e6d5c0b723962d923b0ef454361d4b3cb470bf8c39031ed4a75267f499741be15aacac92d8e6afdcb01a2e7d2dbf549ceb2a2108c4079c620f05ca1bd31d631c2c8d35ca0d73155f56ed020c25e389db356edf510ae088d11b5e4fed51d0dce4d3aa04924b09c28200ede5bec1a8f38cc5f081055e0f28d75afc4d588ca0e828d00085d150beafdda17b8df9e7d9218ea7d81f2e076412901c5ae04d6929d717fea2fcc8e5a1e69dbd7b5258799a2fa5eb108b6cc35dfab599fb27e6d75f1030b83f452af8137830337141f031942eba83123d3f87b5f01623d4613e5a44b4952c300baf3d4d3dbbfb0ad024a19b3810a174ef8453d85a25822f66e45eba2490f29de1077683ccc32e3517f88b51e010672a982f7c8591450c9ab1573143aefb61c17ebb0c92dcb0494d116b970c2a827a6b3608ae10d583d1f7d092263fa873de9f31cd59bc9491ff012059b63a9120af89477f2ccc34eee7bd66de60af64730c879128b49d31da6400c2471e0d5abf707e560574b477b8e20ca45d92182d639eb434e14aea1a3f91ad8fb60e4859b77389753990513181ea3a82884235e8520294359435cfba220502b591fc28ac36ec697442657d290bd7aad7fce53a3f1766f2bf7d55c24d7c0e9c7a71d6f1282ea1478e0a36378b50e4fee281f686bc53f50138036e2a5d6199d40caff084fde7b63b3c0a47da0791107c3218330f7c2e2c7609aba202fae5290243b6033379eb15edc572eee452008e04c9b53efd5f3d88327317b38934745bc3de4c55bd818febc7a7953bf03c4029f77177c2a974310f0485aa46252f1000dc71934947287c38ea5854f29c7b82f630afb8caf1fd880670307b155a6e7feddc019cfbbbdc18f3bc03da3bd371d93ccbf56bcb39eea55c2d113efc148127c30089d21ce6a5088dbfbcf8f8d75c19456bc962c371548634a95382acb5a0886efc46a87bdc111dc0d1e54084cea0d58054f00762c91d7fe0f0fbcf4c280f29f9cd5999a5e8c6f507f8080d7c7ea9a8685be50722cf1a082f3728dec8d6152cdc72f8da6b1805643c042f4f6780ba79cc8a2165d9d7acec8ab2f421bc3e77b51c62c4bbb262b5674ea7d2dcf9acb894d050e91b052364322a5b08bd9667249571c004fb495da7e24fc5620adda3af6848ccf238911a52bdbff766e4e279ac274afa2c2302faba25b5fe98d972a04aa13f77c0c05d7dd82b0a19f1ded8cf5f99c80e392b0aab1264a29e9fbcf0b69f6b0a9f2332e09ab74dea7277106d0883bb264e279c67e5bc69009225bf4fd1a8532f9392a011b55a73a7cf8d16a59d695b2a65b57fad64a2041f8c28804ee1a48845c5dab757d04f1d95520aa9ddb69904d6529c0e14bd789dfe37067073b3e0e136ae2aebb1c34c55b94ce942f786be4b45f801f35f7c768d91a460b92ffa57ff675f0b4b00437a07f871a8650f21b2bf7c722c1d9e860e8955fef5699ee53a5f6fe46fb9e5e17a1c69fe2538af4718b7215ad2c00c3d420589a8653ee511b809945451fb8205b19ce377c8d0253b05493c557cf2bd8ef208e8fc01beceea1acca38d025f328f28d69bcfaa3adc6d9573a3832dc3f3c758fe08cf9cd0c32acfddae81b3682869e8aa9725b64336252aeb2ee8eb78f0721aa3158217a3009948adb297c5ea45ec26cb6d963c7be47ee1b93fa136ebe73a21936df0148fa311206f8bca2e80719aeca8745ff74ddaad5182644762c66333f942d9a93c467d5f9fd5d0dbbe57480362d4bb0f760294f4eba3e1b08047d256dbda157635d21a43aff3a71f6ad574b402bb36e5270d7ed082c6fbae07771721513ae9ddb22d23b00733046c898ee6ac05ef8a51ce41919e1f241cb98e0592ace68214620ba1a748ef81131661f58f1635713ca2873e150a3e848c8d2ebd039769fda112b73050efa4d1c35dbb46ca5a7b7ccbed1dcded36af272f6838b4c1e7e6778e7e9ca3d794f275d49c9e32e768097349118d2337e7c031ada38d0cc5c04c286ff93083f6d58d73a821118c93432fda9a8c76fa2cbcc093a7decac8e4f001ecc9f67faf1c2f102120f0618469cf653bbd5fcefd4ef2bae86dc4f5393b840f9f47140cf7f46a186c21878a43612a71d3b540b9994f010ab623f878264cf46c7366d0bec5d43d481b47846091fd3cda73a9a28ceb7f839eca695c9f084a16c812475f6575ef2368c88cc6655f47663ef69ce4779fe3ccc4dd85a07a9e4c6f39f42690d231f5727f45c247a53fd8df029fcefda4f328658435892519c17205a3c715ad6bb7387d09a5e387c83f008daf626f5977c66203af1143ef7b59ccd8e3c17bb156bca317861f0b9f222ea63c044075a3a74beaf05c23d0a75caa60397d831bbe507234fff154960faf0f02776d3f9038c955bf0c1ec9c92523cf0b855c18d6ac3b35d437796420ba3dfd581dc6adac64315c1cb1a2c3a45ec4655bb2bd6e0b4a3082281ed0697a213d1d93142e96b4fd57431d2f4547451d008ab58bcd9765ccf3ca3297becd5de9e2be0263cfca09935c9334b5e687bc7e7057dc2ed03873be22200c9fe32a9497dd00a336cf4c723ead302340b5cd1fef8cd88330a9089fc93af4ef739295b94407b291bf33f4f39c936736e1166106428f8796a4b92805f4dfcf46d8692b54e40a9e8584c0eaac4caada87bb33f553eafeef5051b889402176ab766936a38ddd7e5205d2c87e133a02e84ab24ba2d889a4c4db8cbe18b271455e84da716f4a32acdbc0a5aaba25a2ec757c73847dd1c4ccb2967c651e5257692a4553dde227846bfe2977021805f46a287c835ea8dc5", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r4, &(0x7f0000000180)={0x50, 0x0, r5, {0x7, 0x2b, 0xffffffde, 0x318145a8, 0x0, 0xfffe, 0x3, 0xfffffff8, 0x0, 0x0, 0x4, 0x100}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1) syz_usb_connect$midi(0x3, 0x35, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0xe41, 0x4248, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x23, 0x1, 0x1, 0x18, 0x10, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x20, 0x6, [], [{{0x9, 0x5, 0xc, 0x4, 0x200, 0x8, 0x81, 0x9, {0x8, 0x25, 0x1, 0x4, "ffffffff"}}}]}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) 10.020241625s ago: executing program 3 (id=516): r0 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000420000/0x1000)=nil, 0x1000, 0x3000001, 0x2010, r0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x7) writev(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f00000007c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) request_key(0x0, &(0x7f0000000800)={'syz', 0x2}, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./file1\x00', 0x42, 0x0) pwrite64(r1, 0x0, 0x0, 0x47ecf) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000940)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000980)='./proc\x00', &(0x7f00000009c0)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000a40)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={0x0, 0x0, 0x1d, 0x0, 0x0, 0x8}, 0x28) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000ac0)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r3, 0x3b72, &(0x7f0000000040)=ANY=[@ANYBLOB="d300000002000000010000000000000003000000000000006f5338d8edb93b854f098409f844ffab6c0d994099914eecbb8414ce59c25d33888b07ab3253f600fccff247ffc562314a381483b8db6cc1a17788e6e323643d56d54b1173a80d091b10d62b4babdde599c838f55128f596be60f7bcfcc50adde5f99402eaf64af96f89e3c9930d831e657e4f4965e0f020daf88751b1d0588b9a5f6451d22d0df7eca83345c2f7d931f23d3dffc8b942f501e191af9f72705fd9e19345af0b86a5b4dfba756b191833da2716e4b4612759242def"]) bind$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000240), 0x10) connect$vsock_stream(r4, &(0x7f00000001c0)={0x28, 0x0, 0x2710}, 0x10) accept(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES8=r4], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x1ff) 9.090068112s ago: executing program 0 (id=520): syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$SNDCTL_TMR_TIMEBASE(0xffffffffffffffff, 0xc0045401, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="3400000010", @ANYBLOB="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", @ANYRES16=r2, @ANYRES8=0x0, @ANYBLOB="ffaeb5aab78b43ccda6dcff09682b48186c9f4e7b3bc7d95b9a2e2decd5da480a24120c29d6e9c5452cbfba3e080"], 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x41, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newsa={0x144, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@mcast1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d4, 0x32}, @in=@rand_addr=0x64010100, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x543}, {0x7, 0x7fffffffffffffff}, {0x0, 0x0, 0x4}, 0x70fd26, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}, @extra_flags={0x8, 0x18, 0x2}]}, 0x144}, 0x1, 0x0, 0x0, 0x880}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1f, &(0x7f00000008c0)=0x5, 0x4) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000900), 0x42202, 0x0) writev(r6, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./tracing\x00', 0x1ff) mount(&(0x7f00000009c0)=@filename='nodev\x00', &(0x7f0000000a00)='./tracing\x00', &(0x7f0000000a40)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./tracing/events/enable\x00', 0x1, 0x0) write(r7, &(0x7f0000000ac0)='12', 0x2) io_cancel(0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x3, 0x187, r5, 0x0, 0x0, 0x9, 0x0, 0x2}, &(0x7f0000000b40)) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000040000000008001b0000000000"], 0x28}}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000300)) 8.851577066s ago: executing program 4 (id=521): syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003cb86e440f71d002579260102030109021b0002030c150509040506316fc37029c415b707"], &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000840)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$midi(0x5, 0x31, &(0x7f0000000080)=ANY=[@ANYRES64=r0], &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r2 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x5, 0x72, 0x0, 0x0) r3 = syz_usb_connect(0x5, 0x24, &(0x7f00000001c0)=ANY=[@ANYRES64=r2], 0x0) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) r4 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r4, 0x80104592, &(0x7f0000000200)={0x0, 0x16, 0x0, 0x1000101, "0020946fc67f0000201b14700c1e0ac74f000000001600000000000900"}) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0) r5 = syz_open_dev$evdev(0x0, 0x80000000002, 0x30004) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x0, 0x0, 0x0) 8.118655211s ago: executing program 2 (id=522): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff0000408c1059010100010203010902200001010080fa0904000002ff0000000705810200020007050202"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x400, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = gettid() timer_create(0x7, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000100)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) r3 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000200)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xff}}, {0x1, @broadcast}, 0x4a, {0x2, 0x0, @dev}, 'veth1_to_bridge\x00'}) ioctl$sock_inet_SIOCSARP(r2, 0x8953, &(0x7f00000002c0)={{0x2, 0x0, @dev}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x4a, {0x2, 0x0, @broadcast}, 'syz_tun\x00'}) 8.104725785s ago: executing program 0 (id=523): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000406a05125000000000000109022400010000e80b0904000001030002000921fd7f000122e30109058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xc, {[@local=@item_4={0x3, 0x2, 0x2, "00c15100"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x9, {0x9}}}, 0x0) 7.905898539s ago: executing program 1 (id=524): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newlink={0x20, 0x10, 0x40d, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, 0x69b}}, 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = socket(0x1, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 7.634971094s ago: executing program 1 (id=525): r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0x14, &(0x7f0000000200)=ANY=[@ANYRES32=0x0], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$MEMREADOOB(r2, 0xc00c4d04, &(0x7f0000000480)={0x5, 0x82, &(0x7f00000004c0)="4504abc72f8b931be088bf611468ec80998d7b1b40aeec7927e20b8853f9e1d2b0519a7696b7791c64b9809826e4f6e0eec541aaf64fa9433e9925d839251da52166083e2bbaff69ef7afe53a48c7fcde1a402832a85cf6183b07c6ab4a3fd155c77aabd092e6aadaae4c41b9f50755104c89656c1c02137066b9c23f2e1761f7555"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000005c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000640), 0x2, 0x141102) writev(r3, &(0x7f0000000680)=[{&(0x7f00000006c0)="94", 0xf000}, {0x0}], 0x2) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)=ANY=[@ANYRES32, @ANYRES64, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) mkdir(&(0x7f0000000980)='./file1\x00', 0x13b) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f00000009c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000a00)={r4, r4, 0xd, 0x0, 0x0, 0xb, 0xf9, 0x10cf, 0x3737, 0x8b, 0x2, 0x9, 'syz0\x00'}) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000ac0)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) ioctl(r0, 0x40946400, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) 6.361625972s ago: executing program 1 (id=526): socket(0x10, 0x803, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x109) syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x2466, 0x8010, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x7, 0x0, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x9, 0x0, 0x43, {0x7, 0x25, 0x1, 0xc, 0x80, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x6, 0x8, 0x8, {0x7, 0x25, 0x1, 0x0, 0x10, 0x7ff}}}}}}}}]}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket(0x10, 0x3, 0x0) setns(0xc9, 0x0) socket(0x8, 0x5, 0x5) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2e, 0x1fdd1375bdd2e52f, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000400)=@new_dev={0x1, 0x390, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x1a0}}}, 0x0) syz_ublk_setup_queues(r1, 0x0, 0x0, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x401, 0x1, 0x3c3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x14a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x655c, 0x2, 0x2, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x56f, 0x200, 0x1}}], 0x1, 0x0, 0x0) 6.06170465s ago: executing program 3 (id=527): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x2, 0xba, &(0x7f0000000300)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000680), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000006c0)=0x2) recvmmsg(r1, &(0x7f0000000700), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000740)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000800)}}}) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x8000) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000840)={'netdevsim0\x00', &(0x7f0000000880)=@ethtool_regs={0x4, 0x1002, 0x37, "72f46f341bda97077776dbc79e4fe814968eb85a7bad7e42a9d85d5eda493af416012e6008de03887422d5e8d80d7747341e2b11ab2874"}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000700)={0x8, 0x0, &(0x7f0000000800)=[@increfs], 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='100', 0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0xfffffffffffffffd, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x260, 0x17a00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x8100}, 0x2800804c) 5.883417997s ago: executing program 4 (id=528): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010000000000400b060100000000000001090224000100130000090400000903000000092100000001222900090581030009200000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000001640)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x8, 0x0, "a0aad30a8b1350f2461250f9e5b2fc536fd0861c38349b6f6ad8c6f78a18d8576ba9bcd139acd078c1207e7b717cd1c8e723c17364efbae56931f838ecf65aba7e990fe8a4a01b3302b27fe7c991a9cb"}, 0x77) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000001740)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001780)={'wlan1\x00'}) sendto$packet(r4, &(0x7f00000017c0)="0b032200e0ff250002004754", 0xc, 0x0, 0x0, 0x0) getpgrp(0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001800), 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001840)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010027bd700402d4df2500000000", @ANYRES32=r5, @ANYBLOB="984e0600c18d0100ffffffffffffff046272696467655f736c6176650000000004000580e2da6e10c3da65d1fa08e32b7e727ed768f6c79d1cf56bfe852c7e3f5a97663ac066d5963d6114c0c7d3dbfa0c67d8a8169885aa5cc27117e87a67c5f812678b96b64c24db289fb1173862a2078b1a7a1aebf51a5b786f9fea6d354b3ee04b29591151362119ebb763e4c2ad8bef673b500e929504dfb8239c7e980478f138ad9a2d42ea59ca674e02802f4dad81813a67bca67a"], 0x3c}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet6_tcp(0xa, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000c40)=[{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)="7db49fdb07ac1af786f979a7c4c98f4a30507687a32c16c61e034cb67357e38da3fbe77aa31c827b802222469f1809decbb3a12e1757d1ac4ca0cfbbc289bc69b43b1b7d2e896183837a7224005c40412d2937969050f4a048a1af3723b7dc", 0x5f}, {&(0x7f0000000600)="a55b2c8f73dfa037f58774af75d97ac0c02173e2c7efc30f342a5e29dfdc47280776b0deecfb7e4911e4dd33096e8823fb8ba706e431aa", 0x37}], 0x2, &(0x7f0000000740)=[@assoc={0x18, 0x117, 0x4, 0x86}], 0x18, 0xc840}], 0x1, 0x84) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)=""/35, 0x23}, {0x0}], 0x2}, 0x62) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0xfffffff2) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) 5.403545229s ago: executing program 0 (id=529): mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000840)='./proc\x00', &(0x7f0000000880)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x1e) write(r0, &(0x7f0000000900)='27', 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x74}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x22}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) syz_open_dev$mtd(0x0, 0x0, 0x2) 5.365826928s ago: executing program 0 (id=530): socket(0x10, 0x803, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x109) syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x2466, 0x8010, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x7, 0x0, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x9, 0x0, 0x43, {0x7, 0x25, 0x1, 0xc, 0x80, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x6, 0x8, 0x8, {0x7, 0x25, 0x1, 0x0, 0x10, 0x7ff}}}}}}}}]}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2e, 0x1fdd1375bdd2e52f, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000400)=@new_dev={0x1, 0x390, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x1a0}}}, &(0x7f0000000440)=0x0) syz_ublk_setup_queues(r1, r2, 0x0, 0x0, 0x1, 0x0, 0x0) 5.097682856s ago: executing program 3 (id=531): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000001c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000000280)=""/102392, 0x18ff8) futex(0x0, 0x10b, 0x2, &(0x7f0000019280)={0x77359400}, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000019300)={0x0, 0x0, &(0x7f0000019340)={&(0x7f0000019380)=ANY=[@ANYBLOB="3000000041000f01fefeffff00000000017c0000040042801400018006000600800a000008000900", @ANYRES32=0x0, @ANYBLOB="040002"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$nl_xfrm(r5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="600000001000010600000000000000000000000000000000000000000000001e0d0003006261726520f5181f4d85681a300012000c00010062617265756470002000020006000100b5120000060002"], 0x60}}, 0x8000) 4.006456372s ago: executing program 3 (id=532): ioperm(0x3, 0x9, 0x80) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000a80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)={0x20, r3, 0x200, 0x70bd24, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x6}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24008891}, 0x20040000) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000b80)={0x0, 0xffffffffffffff8c, &(0x7f0000000bc0)={&(0x7f0000000c40)={0x28, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}}, 0x28}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) syz_emit_vhci(0x0, 0x7) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x9000}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x8, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20048080}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x91, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002000000406d04210800010102030109027f0002010080fa09040000010e0100000d240100013f000000000001010f24020101020000000000000000001a240603820661637050ab49b8ccb3855e8d22560101010101000924030201010003000705810308001009040100010e0200000e2401"], 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000800), r0) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000a00)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000009c0)={&(0x7f0000000840)={0x170, r7, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x401}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_NODE={0x130, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_NODE_ID={0xf7, 0x3, "b476e95bab6920e9d7087f35688d71d89272f757dd9d9e46223aea9311076bbe30e201c4abf4839cc53e22b30fb8ce94a6b5402529f750cd6bc80e8b3d4daa17b4a94888dcd901d0b5eaca6a11f8b42ca83565ac59748e871f0a20dfdb697485be55d4eed322ae01abb3db406c08f2b4c24eb3b9568f78d70bd8753c85c02e8a6fdb01d4ab3f5b2677819451dc3f62748ca6b1177045576cade4bf104fe89af52668271726093d4d658538243063f2cb3b0a9e78f9098ae99b884623cc78b7cc2a5d34337454b24d882d682e064ba0c24a8b4f822cd9b3bc6880b1a6c8878cbb4f1e9ea4547c138695ccb0b85553d6de5a0b90"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x8040}, 0x44) connect$inet6(r6, &(0x7f0000000c00)={0xa, 0x9004, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x9}, 0x1c) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newsa={0x138, 0x10, 0x1, 0x70bd28, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x2}, 0x1, 0x15b2, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@local, 0x4d4, 0x33}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0x1}, {0xffffffffffffffff, 0x0, 0x23, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_auth={0x48, 0x1, {{'hmac(sha256)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8005}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) add_key$fscrypt_v1(&(0x7f00000004c0), &(0x7f0000000500)={'fscrypt:', @desc2}, &(0x7f0000000540)={0x0, "8e625298069591f21a0bbc845ebe74736e11c2f7fc9b2903f5c3c5badec25505b04f1ac195440c2e800ba37d5261a88292f878ad83c3299711a0d596143b62a1", 0x23}, 0x48, 0xfffffffffffffffa) 3.978055232s ago: executing program 2 (id=533): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000680)=ANY=[@ANYBLOB=' \x00'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000bc0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="401305000000eb"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x0, 0x4, {0x3, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.645659902s ago: executing program 1 (id=534): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0x80000) ioctl$SNDRV_PCM_IOCTL_UNLINK(r1, 0x80044100, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x15, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02ff771e2f7196"], 0x10}, 0x1b, 0x7}, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) r4 = gettid() ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bind$inet(r3, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r3, &(0x7f0000001380)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x60010000, 0x0) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r5, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000180)={0x50, 0x0, r6, {0x7, 0x2b, 0xffffffde, 0x318145a8, 0x0, 0xfffe, 0x3, 0xfffffff8, 0x0, 0x0, 0x4, 0x100}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1) close(r5) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) syz_usb_connect$midi(0x3, 0x35, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0xe41, 0x4248, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x23, 0x1, 0x1, 0x18, 0x10, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x20, 0x6, [], [{{0x9, 0x5, 0xc, 0x4, 0x200, 0x8, 0x81, 0x9, {0x8, 0x25, 0x1, 0x4, "ffffffff"}}}]}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) 3.188830794s ago: executing program 4 (id=535): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newlink={0x20, 0x10, 0x40d, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, 0x69b}}, 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket(0x1, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 3.102578033s ago: executing program 4 (id=536): fcntl$lock(0xffffffffffffffff, 0x6, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x21, &(0x7f0000000100)=0x7ffffffe, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000200), 0x400000000000041, 0x0) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) readv(r4, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/87, 0x57}], 0x1) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000340), 0x10106, 0x2, 0x0) socket(0x2d, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000000) keyctl$read(0x2, 0x0, &(0x7f0000000840)=""/4096, 0x1000) 3.025715769s ago: executing program 0 (id=537): syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$SNDCTL_TMR_TIMEBASE(0xffffffffffffffff, 0xc0045401, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="3400000010", @ANYBLOB="46000600000018001400128009000100626f6e6478a025bac7a4ac75a7af5602231e7dc0fceb4a9b3901ad9f33ab3f0a07a75dd40e085651cf8219d910fada2e93c980d9cfbc9bf5c16013bbf66d30388367fabe41fc58c04a092126e398aaf25a6565e74845ce74b8daede0ef12c1c5517d429cbacd3038f1b534c2277f1e3cb9685129230b66d43bb14fbaf1ea363e6d651e95ae7f2e7aa293669d356233940a1d210ff74998a1c121fca01e31299f99c498920c97e0858053980bd29c3efacc2060356a99a8c5717ac535841cce8721e0bec15366e2ecac564c867520364fbabc990ab345fbc7374486dca873772190631c53e8f2721202ab83e9e9e5844f63978c7b98b30e969c8caa288f1a514becb7cdeae48425bf77", @ANYRES16=r2, @ANYRES8=0x0, @ANYBLOB="ffaeb5aab78b43ccda6dcff09682b48186c9f4e7b3bc7d95b9a2e2decd5da480a24120c29d6e9c5452cbfba3e080"], 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x41, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newsa={0x144, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@mcast1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d4, 0x32}, @in=@rand_addr=0x64010100, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x543}, {0x7, 0x7fffffffffffffff}, {0x0, 0x0, 0x4}, 0x70fd26, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}, @extra_flags={0x8, 0x18, 0x2}]}, 0x144}, 0x1, 0x0, 0x0, 0x880}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1f, &(0x7f00000008c0)=0x5, 0x4) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000900), 0x42202, 0x0) writev(r6, 0x0, 0x0) io_setup(0x310, &(0x7f0000000940)=0x0) mount(&(0x7f00000009c0)=@filename='nodev\x00', &(0x7f0000000a00)='./tracing\x00', &(0x7f0000000a40)='tracefs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./tracing/events/enable\x00', 0x1, 0x0) write(r8, &(0x7f0000000ac0)='12', 0x2) io_cancel(r7, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x3, 0x187, r5, 0x0, 0x0, 0x9, 0x0, 0x2}, &(0x7f0000000b40)) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000040000000008001b0000000000"], 0x28}}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000300)) 2.020660046s ago: executing program 1 (id=538): r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0x14, &(0x7f0000000200)=ANY=[@ANYRES32=0x0], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$MEMREADOOB(r2, 0xc00c4d04, &(0x7f0000000480)={0x5, 0x82, &(0x7f00000004c0)="4504abc72f8b931be088bf611468ec80998d7b1b40aeec7927e20b8853f9e1d2b0519a7696b7791c64b9809826e4f6e0eec541aaf64fa9433e9925d839251da52166083e2bbaff69ef7afe53a48c7fcde1a402832a85cf6183b07c6ab4a3fd155c77aabd092e6aadaae4c41b9f50755104c89656c1c02137066b9c23f2e1761f7555"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000005c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000640), 0x2, 0x141102) writev(r3, &(0x7f0000000680)=[{&(0x7f00000006c0)="94", 0xf000}, {0x0}], 0x2) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)=ANY=[@ANYRES32, @ANYRES64, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f00000009c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000a00)={r5, r5, 0xd, 0x0, 0x0, 0xb, 0xf9, 0x10cf, 0x3737, 0x8b, 0x2, 0x9, 'syz0\x00'}) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000ac0)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) ioctl(r0, 0x40946400, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) 1.685708182s ago: executing program 4 (id=539): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$XFS_IOC_FSGROWFSLOG(r0, 0x4008586f, &(0x7f0000000000)={0x1, 0xc}) bind$bt_l2cap(r0, &(0x7f0000000480)={0x1f, 0x0, @any, 0xfff8}, 0xe) connect$bt_l2cap(r0, &(0x7f00000004c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c00000009060104000000000000000007a800000a00010007000000000080000000003000000000040008806b358ef2a8c8de3a9ccb1dab6354fc14cbff4cd8a3ca37c46fe2557c7a67862fb19519902864c67f3ba046d82cffef3f3ea0ebdd79df834d067ff764f2e6727ed13591ec8e4a4f03b7fcb164"], 0x2c}, 0x1, 0x0, 0x0, 0x4004841}, 0x40000) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000400), 0xc8bc0, 0x0) ioctl$RTC_ALM_READ(r3, 0x40187013, &(0x7f0000000440)) sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000200), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000280), 0x10106, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f00000000000000000000000000006bdf313e23408b01b390f366b11dfa35ca0177c363094b1d649508b0c874e5b8d1b5688899a81d1c45b1ab14618b7ebbd613e1dcbb23066e2de8272129340ab9d6b45c037188ceac827eed7100ebe8fe6b78914ac5008ac4fa70a8961ae2b567a100a73d828416d5114bd1e7caa3ab772c644b45cca6277d47dbf27d61a1cf2b5197be70c90d28bd7338c894"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) userfaultfd(0x80001) gettid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) 1.37861133s ago: executing program 0 (id=540): socket$inet6(0xa, 0x3, 0x101) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nullb/nullb1/size\x00', 0x2, 0x0) write(r0, &(0x7f00000003c0)='256\n', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/nullb1/zoned\x00', 0x2, 0x0) syz_emit_ethernet(0x4e, 0x0, 0x0) write(r1, &(0x7f0000000440)='1\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000480)='./gadget/dummy_udc\x00', 0x802, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nullb/nullb1/power\x00', 0x2, 0x0) write(r2, &(0x7f0000000500)='1\n', 0x2) faccessat(0xffffffffffffffff, &(0x7f0000000540)='./config/nullb/nullb1/zoned\x00', 0x89) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./dev\x00', 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, 0x0) write(r3, &(0x7f0000000600)="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", 0xfc8) close(r3) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000025c0)=@bpf_lsm={0x18, 0x8, &(0x7f0000002680)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @map_idx={0x18, 0x7, 0x5, 0x0, 0xc}, @exit], &(0x7f00000026c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002700)={r4, 0xe0, &(0x7f0000002740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000002840)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002880)={0xffffffffffffffff, 0x58, &(0x7f00000028c0)}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000002940)={0x3, 0x16, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], &(0x7f0000003280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f00000032c0), 0xffffffffffffffd2}, 0x48) r5 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r5, 0x0, 0x0) syz_usb_control_io$sierra_net(r5, &(0x7f00000001c0)={0x14, &(0x7f0000000240)={0x20, 0x21, 0x8, {0x8, 0x24, "e4ff14eca81f"}}, 0x0}, 0x0) 634.019868ms ago: executing program 3 (id=541): mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x20) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x509000, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000100), 0x0) write(0xffffffffffffffff, &(0x7f0000000400)='65536', 0x5) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x70, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x13c4}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0xffffffff}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x64}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}]}]}, 0x70}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000c00)={0x2, 0x13c4, @loopback}, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) write(0xffffffffffffffff, &(0x7f0000000500)='ppl\n', 0x4) 608.869372ms ago: executing program 1 (id=542): r0 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000420000/0x1000)=nil, 0x1000, 0x3000001, 0x2010, r0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000740), 0x2, 0x4a102) writev(r1, &(0x7f0000000780)=[{&(0x7f00000007c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) request_key(0x0, &(0x7f0000000800)={'syz', 0x2}, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x47ecf) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000940)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000980)='./proc\x00', &(0x7f00000009c0)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000a40)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={0x0, 0x0, 0x1d, 0x0, 0x0, 0x8}, 0x28) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000ac0)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r3, 0x3b72, &(0x7f0000000040)=ANY=[@ANYBLOB="d300000002000000010000000000000003000000000000006f5338d8edb93b854f098409f844ffab6c0d994099914eecbb8414ce59c25d33888b07ab3253f600fccff247ffc562314a381483b8db6cc1a17788e6e323643d56d54b1173a80d091b10d62b4babdde599c838f55128f596be60f7bcfcc50adde5f99402eaf64af96f89e3c9930d831e657e4f4965e0f020daf88751b1d0588b9a5f6451d22d0df7eca83345c2f7d931f23d3dffc8b942f501e191af9f72705fd9e19345af0b86a5b4dfba756b191833da2716e4b4612759242def"]) bind$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000240), 0x10) connect$vsock_stream(r4, &(0x7f00000001c0)={0x28, 0x0, 0x2710}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES8=r4], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x1ff) 76.951654ms ago: executing program 4 (id=543): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000100)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r4, &(0x7f00000001c0)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f00000191c0)=0x40003) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000019200)='.\x00', 0x8000, 0x1b6) fanotify_mark(0xffffffffffffffff, 0x2, 0x800003a, r5, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000019300)={0x0, 0x0, &(0x7f0000019340)={&(0x7f0000019380)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8994, &(0x7f0000000040)={'bond0\x00', @random="0000330c1100"}) 25.515168ms ago: executing program 2 (id=544): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wg2\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x1c5) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x2, 0x143102) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000400)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f0000000440)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, &(0x7f00000004c0)='c:::\x00', 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x101, 0x8, 0x2}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x9}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x41, 0x3d3f, 0x100, 0xfff, 0x3, 0x58f, [{0xebd, 0x5, 0x206, 0x7}]}}]}}]}, 0x5c}}, 0x24040084) r5 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(r5, 0xb) mount$overlay(0x0, &(0x7f0000000740)='./bus\x00', &(0x7f0000000780), 0x40, &(0x7f00000007c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r6 = getpgid(0xffffffffffffffff) getpgrp(r6) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x101, 0x3}}, './file1/file0\x00'}) sendmsg(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000b00)="51a795627d290c2679c8a22900c503965ac6d166e1490d3f14f92397149e9e1ff58d9c09278a17e2fbd24850e39db47437d1bef62ef3330e0b5bcb6777cd4a0eb3ae6359b60a2e7fc19e0dc2867be6dba8489dd996124fef1069eecf53024c50e132935c43e6577c18c1c0d1ea1fa96c09dbb0dd5fa0ed03a2893646c1e25626cb968872e9f9d4be365b93a158a574e69a28e6839476a5184f65bde02091007a83df0238c9c43a799c791d402e1754091c01835e0a2aa16e3d96029cfc761e1f643981970e4d17e7f0a29135ffd17cbe2602973b100b47e78e1521c9b6887da933c97a996494e3faf6f24b188ef58f3520b7a16474929bab48a5b03d5f62c2", 0xff}, {&(0x7f0000000c00)="9452a0f76bbd35f48e2bc02cec5bccac4fc904d363ba281c5ad93a", 0x1b}, {&(0x7f0000000c40)="cc45a22813decae9014b89650d409c9df05082f2a5705bf02298d4727690605fe1a573dd1fb577637a62622623a85bf9fb515d8df5ee9517c5f314d4c82d3d01df2fc43115d3fd2899daf04446554147fe9cf0a56ef073bd70b8ed60d371738f7937f2ec9cfb0e461f387ca0b2f64668ad42dfa17cffb6d73d1ad1f13b60d1fba16a669e0322b1a31c58307b524703dff6a020ecef01d8fbadf264c01de2da801df0ebe640c7396b4209ffa817e08b10bb4ffe017f7c4327889560defd481aab7780d9b148260f767bdbc8e0aa5d19f18efc33ecf70a9d7df11daba331fc2bd3a53358231e4b0371f1da32e9a15abc3a0951eaa52a214db95dfaa420c4e9b743321d1512fce86cdda158cdee9e4202e2016d0e0438d112e0d80370a88d349db8979b783c1d1f4e725c8b318f5148cae5aede07a10ffe58c9121fab327b17a8aca190b3dab601140fdf671d1599ccc397c8b096a67b23131122bc7205e2e57536d59ba5182f86d26e8fb909d1fd87e5ab61382d20e0cf091aa1eb9ff36dfc05f917119b95abaa7f77764add586d213b79433f44fcb15212c10d0b28837d9e98e51289fd64d3467ef1bc6ec44ee0c64ee45bcdcd4a872ecbdbf5794fc18a6e0757a643c1e8fb533a79831b37b983712eb4d35d046d28ee3f5fdb39bce971aad79cd09034fcb0318439f70e5dd9bb850547d42991634ebfb94008f3762f5fc07a20738be8f8f341093e5bef2fa3f141a7de46c959251e44d0faf2c22184771ceb35ac7b0773981ccc08d3231cfe9e1d6abd6f3800ecceb8ca97180cc891f214293d014230a8997abb8dbda04a6b5e67727558f15ab8ae19bc3d2b3a4158c2c51690dc6ad8a984450d155dab227f457f836587578d4b888b77f407632b7f615de7c750d5154cd65833847c0311c39cc9f5004a749e908441c2456a8b1ea585aa231aa9087059cfae7aac9cfd4f6ed9bfe69782032f6b544604eeaaaace97c05356c81b4eba69469674ea14721a01b8d1d6b59a85e53ee7b12b7794550d7219556dd01f39fc0790d9915bb80bb40f31758ace3df17d23fe892d322c5cce7bbc95052337bf10d22a872bfc4a089b8e0febd03570728d6775366991d3bccd2deb0bec1f5e1f7ba14c2eba4bd6bba3cce1900d7a32df67fe7e369abd257ec74dfac9f110f1c85c1e38d129bb714bf66aebae4e338eebe85bc9e633198862c10f5516aba5926d0356a01af65d95f929df9ac4a817fdeb6f117b9626e519cd54afb3e3371b01ff93aa6ad7fed38038f27cc72c4395a55877244a2f2145a428368cda45759791fe4f55929951a1ac88a0b8724942ebcb3faeec7de3c09d690e0332544ef6bb32271b5ff227b594a7b37bcc1fa5feb700496e9a384fb115d5b36688febdcaeec6361b90e86728a2c271ad7a9455cfb00f6335ae59a39b9f67e08f32adc95b9d583a5651697c7aeaa0f0abae420a7961f0040a9800f663217599c926fc17437779315a88bbafb0ecad0a75509f19c0bf7c628ca38f8b8d958492a41477b92dde0b66dc172f026f92cc835882d30010c539832baadef11231aee87a552a66cfc2bf77e4db9cd2248e08b805b351fcf4f16eeb93229b7114e920b77da0fc85fa5492055e082e479ef90936cbf2cd1da1a75301eb6163346f16df49c9e491f16944d7d600109f06bddfe6ee9394f44cbacd88ecb6fd6e4ed67cdcede0627d88d91f56a3e932318af91d488b8d49b1d8b47d12bf72a4ea691cbcf7d232dd2a066d4f8c169645f36bd42d19e7760351f4be156265c7a0d2abac932de1173324b76f78b880bd055dd44f379db74f69f19460dda087a6ab986e6b25946f886b0298d295afab6d502e74e077938f9b81f7d3ccddfd5f70413ae7274542bb7d8fa60ceadff979691d7d21e746a139a2d58a02876ad08989daa15d349bee9bff1418d9234785495556320aee5c394a768a41fa9c3f344cdf59120664f84bd5e5f0bf3d1c5310ea8ddf5055bdeba4c3845f310a002c33fa03dc3ec804c378d084c6bcbe2d9270b02023338defe061d5b3b593e025f830bf31caf7d21f4541a7fee8aa9ff14c3b8b43571765ab6c7605cd7a2725a0d70ac5b564c8586f12ea9d3b412ce9f3b57ca56add7be83c9cf5ea4ffa096e9c12a8033be17514b178554f735148c68b4f13b2ba5939234c591ccd998a7c67a23ab7666c3ae81d71b846a0e9a3b8e74f9205bce698d24e0212d8103ca811014fd2de1e46a6a0df8ab62bfa179a3fc2c1931318f058a96389e9b6ef3511e475bcf9422e27c3c019c14e26306b4f9ee69fdfa527daf3571c47d58c994a411f923a144b8fe1564d952b64f6037072a1847116718ed59b09c3f31203c026840a7ffd98b59d8e1d6adeea427e48d8fb185ee90b930f1233dfae5ad147d15357c6cc8467169c5bff1545bf9ec9dc2bdd1b62a2e470149bce9d1b6128fe465b4fe59e906038ceaedec92c4ecc24f3a6ca00227933dc69cde3ab66527848b590085ecd9147b76807ce11eaff1ce6bfcfe0ec73b373e9a814dae732f49767e9e3679d0294133cc9af29a80fa02947fc3016125686f8dea0989ec4e23bba43d4e99b7c6c6561527860d002ee0bfae50bed66ae7e51dce974633912740da39ea2fd698efdd724f8dab8c20356f7b6cace225ac954ed7479003485980f515e05759a5ce4fec440674cd27361c341dc4515054cd9f127e9bfb9e010cb2d0cbff4928568456d626e75e1d01082300835cd8050cc91f45ef6121fba0c3f52248c7b201e62fda0c9ba941ceab390144a496c46e66c31ea1409b06cf28d0903a2f9e83f666dd8b8a1d7314f6eaed50114acfde3371a8d01f1a14bc6adff338617f38fa852d8d4004ead2ddf460cacb02aca49cd7c4cc78c5f01f7d88c3a5b01cb60f2997563c0116be3331b730bac0778353f66d28e078f4fcf9f7f21c78f547c162f1577573cb22e90be930560f634f425577f1515856f22e207bd55dcb93e8b00e43406f6d54b91f9e02455d84dc3ed63f311f3452f194cead6b334f2e650af138464589fc16c8fa5dbe53a1da30ac897feef1952443391c9fc4de5a4c163d51aec81bd164e29c40607066081f055e438ba0c2cc42a06007587653a7a730b1abf25039234414deda1253ae37b2500a04bbce670bc499d806fe16f1042cfd7ead7e2b68805fe6bfe609992c23f22356798fc59b107f249ce126606ea7771c813176c2468419a8a9aa73fd9e318dd1ec8963c67a36b37be0ce1bd3f1225bb0681719b9c2542194bf3769d52d7a2801ba0943d1e7791c563f6dcf8ceea10270d2f767c9ab6b82d97ef889e4d5deaf4de20a00ad5df7879b6e50af98c77b0c648ad3ddbe88874e316b6d94a0f8b67c7b85b71c0b415f26988be7aa2f4fe3d0b425b544dd7799047c32c89b485dcdc02877af710b47a6bf647656e457383ffffdec40c6be88b95beaa95e3425d1ee793cd5dbb26d9e86c949f06ad7b6b3f72f6fef982dab775bac1022af95040273dd06ac2e58d475e5b892fc267a159bf7b8a765ea6c0564354bb0ddde7bbb3e2710511b42fece70361f62655be1a7aa38e6d2ff55c2a81c2f77554b843f336176da879fee097bcf0fa35f980adc7f9e6226a02aa43b65acaa10b0078a0fea7f3a33a054feeb88109562d2d54a4e290e0e1a6221489d4a38b4f49673b272c667cbf123bb92d5ab3b543ba1e393a4e4c4c91700cd1b0485dadb479c86313ea40992361f013f60a57344f004318aeb1d74ae76892194d0b3518d604d56bf19615ffaa4583789bba1f6581209792cb08d64d6b317e9da90c880cb71e24d823024ad37a34f3031c8b81fe1105e08c9da09739d7261fce42ef2cd0bdb72699e6d1d1448d36e361ed94cdfda4d30eec00ac84320e8e807e4649e6e71fc819d49d4cdc766286520e5d96daa888874dd7da34a058a4d5db2ca0b0a9fe518bbb2d5dc47afb94e45267af685745edfd76ca3fa82db08a79c23923e42af13247239aa5e7aa740b220b4d672a2617133e8b6f590f0eeac37b24dc32a4408707c22b8eee37a4d002160ebb10e386ab7d981779a12e17ddee8825522651c2f550cd55c6781431642aaf39a20d17ecc8e47285aa2052fd65542ae362af93309a4d9bf4b9b6018979ca020927566b82c6dd3afbb264c0802626b875f9f43570d892190f1f301966c0414a511ea87eec00866d042fd2b079fb9ac2e131df0413f5e128bcbad6ac2cff008f81918ef7051e394676a13bdbcf0f4fcf9137afc40e5e45670097a1868861349508778efbc451dd672d871a11d0dc76404a5e7a46227067321d3019385287ec7132965279991693f19168a9c904ecf192ddd54167dd1106ef286f1a7fd06b81f53ba7c76b42867b610a8a3cffa626ff8280b20ebe6d7ad3211c732b0df280efd42f53c81aa7a17d2e18eaa868da323e310c6ae692a57d20d1505b6dd8458485688606e9e342bc2b494e028d72fa54cf2c597d5868e28ed4e5eb25a9c846a1a0597ad11a319c86c77bf0989b46e16a1fed1692fbf9f7d10f447522deca3d3f386271a253a8ebb493b1524a6d7c65f7314d1b0167052ca0794fd0171a12499d5d8bd6d73c363963f624406a6caef7136893a8ce9cc30fdc230fb1673751db7a54d3472cf2cf2a8f7edcfacba077d3f492b232b28416077b700240518965e54a10694467eafb44337548bebad1b17129ad0b3f75867e4956ceb98a78397a0d9122d5f4cb6a0f6481e515dc291b9fb2defa017481f1ad52614e9436a8d7187509ac5290de49e867f50220f8f7a7cb659655cb00cf047218f92d385c75af22636f169099bbd23dd7927b969b90039b89d0fd48a1a9ea14d575044ee3f4e938e70676da7ac1a77e7ff6cd60554535b7b2091cc535ac755ab8a449f309decf4017e3812da8277581a4746a27be1751f5a82bc75eb498f4169e3b82e878ca5f9fe18fa76aef291954cd1113fef9f16a17789dc740ed856b6cd187feeadef66cf528c21671bafe3a1f8aed161ec11628b7770232c9cc3c6262a7bda88efb2be40638153ee4d1db3170178de97431120102607f0df19b246cfdf1265b31029567feb072b92f9dce6c8b9d839c445ac65309895d61b40da390786ea9e9e5ac7dafa400e7740378027cb5ff30c97c1b50b9a7f4eb4af7b10a246b58ce271f51122ffa535208886152499d89aceabea1053eb40f5501f466da22af4fde81a306b610d4070ac638f068142c9a50d70fd91ff3905ee688f78d887f15f85217e9d380522738a2de4b19fec71dfc36d361deb246aa7255158d978eb91affc546bb822cef977a2e944e659e7b37d3c984d0ea053d5af3b0bc01e74791fbe2a2f7ff24a3b9b0b819f6411107b708f39803ee83793d4d6047af2d03b6f831f09a328c41a0e065f7b064a46c20e54e173a6ffbd969a84afd6a625ae638e05e1190ddb98c4b254b9fbd0be3c9d75aa660e74b9b9c6e435e12180661fd3a927c68c0934eac91172e84dd31a9e1ff72bb08ec85e3b14cf583999399a7b5fd1984316f320acda5b59ef105558f5f9b06699ece16e6d922c3a124015d48fde8d193f457657437db7f4c45322af6c0d0ea873135f45dcc2155c2b3020b3abae116678ee8e50db7b03869990a3819d5d671e60bfb7210e07b4cb8be8d6dde1b1d71e016296f2fd68ed4aa1989e6ae486acc91ad7a5be24b86c87868787635f74fb250acd71868c4d43d2460698b36c28fc610f1af024c44595b6cbad5de2cee87626fad3c8c0dcc52b95431e175585479389ca65bc1f0a39396", 0x1000}, {&(0x7f0000001c40)="0e183c6136838a9922e7c6380889daa5d45283ff8cae6f248fd7abf7639de867fef86935432c2d5ed2299208646b21288ac06038591c697edf5564d4498f30b7a7fde544621a78b17b810e96532d98d7776b82e76d30121ae4641dcfa7151efef6f0b3cb98f78ffaff197b41217413dd30fb166a746e17909bbf3a8ae509aaa7e63899504858301a1ba0db7cc656a92706843d369615975864015d70582d55e402e924fa42cab5331ac4220f75a00ac716cf3165bbfa8c01e810341542e300", 0xbf}, {&(0x7f0000001d00)="896b191b702f1d62985b5acf832eb0669e0c7c4ca183e7f288b8649c0be96119bf41a4bf630998d5cd9781930e9821f72bb6a55ea6809e6abf13fd2caa466e0de70e933761ec16441d932a10", 0x4c}, {&(0x7f0000001d80)="73b6b898094d0e690ded0392fb", 0xd}, {&(0x7f0000001dc0)="bc9a15fb6f506723b37a64a71cb7dfa91000203d37c4314d55a2d055c4b3d1558d77586a4ab79b0b20f6453a413f945b141dca927955e8ac54eab6e15197fb315ea462457ec1efd470af421a47d329e2c0c80e72f9dfdb969b88bea0338d193f2e35a8e6dc2eaadf485152b969e7db50c8370c0b5145b6fdccedd0ff5fe943cebc8156bbc885ca6232a6120f4932aa7361852a63e198cb19f4e7e6b09aa2680f13b702f8af52", 0xa6}, {&(0x7f0000001e80)="ecb46188152b123e1c73f24a50648cea83ed1d0dd28e696b48b4730b348690", 0x1f}, {&(0x7f0000001ec0)="21fea6440237f03028b0bad61979501a4f40217c773c149c96bc8715b074f893be17b690f5b777b39f41b2bdce61cae50b93882e5b05c3680844e165772ee12b27f265c6ce684c6026ed1f53b4680dd5d062f1950c97986290ea73513e1aa85c2587a5292aa907b0f510a5788caeb38ccecb014ead9875544e1d1278d0728cf240bbf66c4db55d3111b5a350c67f6813e003afd2214bf50c3aa058b20428a4ec2ac15b17da9f678ec5505b0e00441c9ae1ea208ed9350c99278402c0370c6340fd983661ae50a3ef87cde26a2e7f014e282d48299b262d1d22f2db97e49435085ac478d364267e2c710f40edb1b0aad1bd0b2ffc63ab8f65cb23646b0567664a43c735d813a6a2deca0b639987ee0ffbed77e2a82e263132fadde3d49a3c89c6bb5a07374ca8a1d09722bd6f26e5893b77bf3334dd7e2291cf1070d01f67bd25b58ec23994fa123fb4aac7c857ffe745c733dbc6df8daaf11f89f6b82881ff8e68dffa128c374d3dc0366b11bbfd2ea688cfce133611b89be757fdbbbda941de9c85f10ec263500d5d9b2c7c85be761fed7a529c29e7ca59a0621cc70440e30f2f97e258e2226b3243ffd1a508a7f9f9b1de93b1a552f8d1d87cec662ef68957db217e7ca3f6009f137c6dae1521c24491959368bf53b3e86e48bcb6dbdec21c96fc562be964349f1702cd71336c53d53be8deb70299ce6508a0ba1f360203633aa4e77fc49bb89ab610d96238f23866a92d0b039495fd5da650d5c6cc2e001e452021550ab351941393a8fcc8812239605ec3174b04ab9a7fe914338f1299ebc38cea4573f9f215db1f74fdbaa354db33871d2ba5dcaf854be9305866fac008446e77defdcfbed3a1d9601031789c4fcf895c714fa1d4e4f9474b1b86b490ecbd3f60c3caaec557dc9a14cc1d878f4d7225b44c1485cb59523f01a3ab67e99e11534120057547f046bfb5d0301115b472202ceeef7a84fb1db7500fc0b0041e815607bd5bac02ede17df57815e2825822dc6f2b15184b4fbc26f43d20a21403ff8802e01e1d84c59d1298833543f1a21f45ce7876de706e3f6fb4d29ad8597e9797ffb857692893b563aebb64539ce44d5b33c0b5d135e01fb8d1106e9b3336fee08fb9543885842a89bb0446ce7c294c8d49bd7c37d07387ee2b8d91fe897dfed831273dc9301caabfd7c5e339e357f7f2894ef1035fbe38408b796421ee98a2686031d147bb7a91ae83b84676f5ae802617a5042f01b9b084aefa4cba3e58aad6c1a91af1716b07b6b7720010ef07abf1743d42ed3f94684c6a3433daac44dc345f494626c58003190759a292adb1d1ed1920aeb066677a3c77dd522fa07e936c33b8253db7453288c90b0cee578ded4f6a3dce1347ea45df39b22257c11fde14eb318f6626a8ebe8a27afb97c1027e52242bc8e8772427b9d99cc31853203a019db19be211b46d1115bd7a93d10a5c2a48a40b503a0010a1caddb2edaa7806ccd8d6b7b671485c8c66e73231e0c4cb91494f0c0820f3cce73f96e208ea1226a3b93222b0d6e775555f5efae4d4c565dc8f33c10b2e38bc65df0dc7e69c1efcde724ee9aa9d15cf12a2c36c9d8797c6ad6cf5c7cfa562ca66754fe647943bcea17c215855c3154c5981777c6ff49fb66eed0cadc68bf0551ce946859afcb2949636e83735031ab3dc4924d887b5dfccfa5f0425f5ac106a34726e53639bf12048cc17f06d830841da4ca956ee7f6f08f0de825afa22b18d7ea450c09dda15cc4e1235eb936b238459ab563ab1a53345926000b75bc078e7ec8c4de2e535d355bf732aa010d8bde4dc8a09aed9cdc54166f08d2b1fde2e6bbd20d56e7eb1536163e7a3500d3d1c7e051ae0c03446cd5575f8edef02062e6e51c987894634df4dcd72676d91cdbe05656a74dad3aa0a57f51b2f10921f16572a27f93653626b5c6595e79de99fe49c6b20436064cbea7a2f9e28201e8abdcda022105f9fd386785567c02d4c53cfeb856bbb1d6370e0c8175ff85828c94b0377e6127506ecf277e8952bd5dee336b02ce1cd7f69f2f3a51ee427eb96f33c5a3e56ae46c62058482c2b314ce1703dbfededb8e449111b1737edd046f226338defd4996395472945c999f874cb65296844f0a560afa58606408c55232a27d370ee8ede31e6f58167a4dba7277ddbc492ef462fdf8f9606c16fe021db077753fa5cbadc394e576131751f16cbe36410b634c92dc3c50b9fa2cca1b6b697f882fbb8b83c37815424e141a7885415aaf11711ccc51e4a48b23272f93a4fe4b5f478df022e8d2df4e40cf5a6b71121468d276ce8a18d085ebe96a509a037d7e9b0856748d3310addd1b7520655df9166e649348754413f649f17c1a474c94d4020b72b1c4dc308759683814a82a82f103fa063d6e1f749cb52cf071b56370416a09b9039a9b41c87eed2186cced189acc24efd02c24bce5ee606b422f300f1443aa4343cd3ff7984dfbd935945260a07738d0e6751085834fd9733d647bf00bbba45528b753f5c623a1d3d28c38a2645dbafb9136666e7c6c27cc7a9019dd38d45f8045e9a927b80b64e8d86d18f5f10b92d470511cbb8bd605110f87910ed94f18e5b8489cb9edad7edb5018c4a22bb7cdca70ef2eddcb59ab642415fe3148d92dea35eaeaa531d9d72a59c9a4a28a29ad102e9b0075bf2364bfc82d1d6ef50b24b484156203e5bbf227e4859ae75f368b69f47080778d73247b040f557e5c0d53813bc119b751fb16d89281205960c468622a0f6216e12cd8b9fb15b14c846686ac85d0d355ab528b764eeb840d6e8b30bbcd49a0e7f07021e70408cec5b467a63710d62621f54d63c6e754f4054c130c00fef5a366f5a4df71d8cb26ef0560beb7321dc57f54bace52d5eac25a2366ce6271f0bdf325007580264145a7d63a01a05685a2d87400eefa8f9f5e30d114d33e6bc42e3a39698ee3b5ecdc3b5939da902e069a612e20329eb096c447517fd367f00e5397025e118790a25b772f52b6b6b8540d9e35e1d3e92e968dcbed81f8224d23e3e415adf0c52c778a2c17b9cf78cdf22ff5fbc24ab6b124db43b0007e61476051b2bddfe8bc334fff1a6f8ef206edb7e8a5c9cb973ef38940b02d6d7e605d8db5be328512366c478f6bb8b842588502e2315531fc23256c37d5b556dd4526aea1693184bcec10426902a876e1a538f06a4eb51bf5424c6201d534290afebc64fa1c6be6c97e1e23e9d8074785bdd5db363ac06decf429f35e17e2ff76fc155192623471ab3018495b03c42d2fc20d1d42867202220c4d0369d0640b19d1cc8b4288b6e46c2119bfae62748b68270babbbc6883532c478084d8cb2920ac1053e8c2db107937ff32c86c00305d4fc1f540429baa421e413d954bfd4da4e47ed2ec279fa5dae5e893873c6a04d123e0be64b9bef8a86c932356d7b27ba9e3fc9daadbbcbf0e34a3e4233b492d8e626b9e41a4f603cbb38d4f7e21ac23d4962f61c95b40f653fbb44e1ba99995b57b44b3832f79809af7c0000ea198565c860e395889164b9e1b44032db2cd0da0b616a88b2971533ac9171ab39b84923d0d625c977e7c1e986f951a1e05de287ba36bfc61c4c0782bf6c0f3e8d4a9c6fa9afbd37e217679927e819db3fd27e799c0ccce8a73db4cff7ea2bac46c98ef4e8fd1bbe0532f693e936050bc92e380a323ab7f2ad37d61aab43760db4ea75709c671caf12b16b67a71b8faee742ed71494cdedaade0d87f6a796ab576ba36d17856fccd47293a3024482559712af9d67aa4dd9ff7368ae9482dede76954eb737b8e023a2085057e6e3ca60e70c6a4f24abc46643bdbdc0e9f93d0f29985247630d6251d8b2c9d71b45bdb207f017d78e401c6f3aacb95d35e5e41d2ada82b817d94d83f1c489588dedbe38a2d01d354de9653138b7453bf6092e92b869b2d4f4b52d1cc3b6066fdffdfd160c599374b3abe9e0e7f41a359188a72a2621dcb50e807c475744ed129b91ba39e9a4602dec83eb29f79475953bc4d5441a0f5295bbeb2ab7e51d8c261ac083c84aeef3070aa21fd760cba5eebe635a806e0fd573308ee9fa20f091e9f98b9776fe5cc320b3e623252e9d32f586bc10eddb6da42546d5e9e713ce25273af82b2b5c93ae756a385643f43b93b6c3c714b9f29e53603b847301018ae1ae70a61dd8c49edd0539a8729cdf0b8ba4832e644f38b3368afc34feac281ecd37f7e92b067c2ac9af962502a393735d0cf55c8252fe053ebcbc0d120997da5194431e786c5a94df54dcf797b23db0bd31c520111510544bc6184a86100cf577536f9aee51cd0296413760536ec0bab9d2236c4d7c38b97c680ae20db33c27ea6e3146d6c3d4bfb691305334ff76d1c588095c92c9db82fabdb4fbbc43b20edf13b180c802f7e81df34cd294b5e05671c6ef31db3664cf8131146cfeb655dce93e5e537e79864c3850179b8a4abfe169bde0ba7f7f4ba723bebbafbaa247a417c573075ac4eb03543de513a4735aee1a25a5ddb2f098f583fc053bf3379724a4d2492417d14cd51ff683e6039dd47eec8c63a807f9266cf6e6cbab7263c7f6c105153b2853c3678a4a1eca21a98a36a6c4de8d9583711f97e03405f2d61626165f5178b11a65ada3a66609e6127cff88e61621fcef01a84c160cbd1a3abb8e07a4158f80f8227aa46f72dcb0c9cdcab5604cada918ea1f49fa4e9ab12c218991d417e01f556d4f900ba82752475ff68520531563009d5678cd6b7ed725c4002a5275c8953499f8b747a61a2cf4fbf849d61ddf12816caabd11a879ee586ce7c650c4ed48e88ff74334ddfe4de5aa70127bc6057ea59a620247d193e2e28facf3044f9af36924abd50f41a6d9b236bc39538a494c74d33d99102910ca8991e61435e529a5fddf8cfc8d9e241253033c136236a4a586e121494f856de0248e6568e618fa1e0555ea8ca9cdefd0a001faeb48c2252904c1678cd02007b13478b05de0bc0ab9f1161f9501188b48e712a9dcda266531a3b8b80ede2ad90ae89c5eaef88d34fac08ddeae85be7f59f94546328ad279deb9ab5804a1a47089d9e89b01ad4978b42542b3cfdf1f513d449f7e96863199331e5bac0b4d19bb30ea21b18ac83ecc82be957cab55c5033114d68231ef7286dea589e5bfd0912c2b39ea724cb9700c31e08302ebf471fce8ae1225b9eabd126a80a10c604e17eab1890d95de43c19cc8526450f4329a059359b35434fd61e163ceeb1e688a0bfeea8cc016cfead3534c435df030e5e2bdc6abe003ad0466c15f09cc60bd11fa9dda672fed7a71b6b41d2bd3197260eb0fb8a005f72348a0977a6aac78a847588792174518bf5f501ce9140815a572e3c57b0b2392d603be6efa52e69a1c9a3c0bc2e00bb67b26fe3e377e79d7af92c52e77de6689ea11a1942e212d83c57a3131e221f0074c47c6fbcda22036a3236bc61a140f8e5fe03bdefb2545da9404e51228536bb6dee7fee2b399ccfe527256ffcdadeaaa98a1e93abb8367e193b812df3deca2dd26477ef37f001f2e5531ad42f6f8039fd399671a241c00cdfd3a8f23280938a3fad1cadd68d8d0321809756a32118092b63159259d66a9dd1e5fb0722b5859dea7aac6f616fdc7a3660ea438f3e58409ededcae6d4b8ed1a02d95fd1153393a75372f2aea9ef0110959a10488385d8426841773459b88ed56043f4cdf2474cf9fc72e394009e158188eaee3139c8d37e6b4aa89c91bd52a126cf83ae4f0df138c7bc2c636cdadee328babe4f5fc61c1f19b1cb", 0x1000}, {&(0x7f0000002ec0)="9fc22634ffa5520544cf6f020cc099840bb92d925d01d2e3", 0x18}], 0xa, &(0x7f0000002f00)=ANY=[@ANYBLOB="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"], 0x250}, 0x4000) chdir(&(0x7f0000003180)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f00000031c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000003200)='./file0\x00', 0x2) 0s ago: executing program 3 (id=545): socket(0x10, 0x803, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x109) syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x2466, 0x8010, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x7, 0x0, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x9, 0x0, 0x43, {0x7, 0x25, 0x1, 0xc, 0x80, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x6, 0x8, 0x8, {0x7, 0x25, 0x1, 0x0, 0x10, 0x7ff}}}}}}}}]}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2e, 0x1fdd1375bdd2e52f, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000400)=@new_dev={0x1, 0x390, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x1a0}}}, &(0x7f0000000440)=0x0) syz_ublk_setup_queues(r1, r2, 0x0, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x401, 0x1, 0x3c3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x14a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x655c, 0x2, 0x2, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x56f, 0x200, 0x1}}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): : unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.404632][ T43] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.488711][ T5609] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 181.489802][ T5609] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 181.489827][ T5609] usb 4-1: config 0 has no interface number 0 [ 181.489864][ T5609] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.489886][ T5609] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 181.489932][ T5609] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.492993][ T5609] usb 4-1: config 0 descriptor?? [ 181.563597][ T5609] usbhid 4-1:0.1: couldn't find an input interrupt endpoint [ 181.592725][ T7003] netlink: 28 bytes leftover after parsing attributes in process `syz.0.290'. [ 181.632117][ T983] usb 2-1: failed waiting for Axe-Fx III to boot: -71 [ 181.632149][ T983] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 181.651771][ T7010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.291'. [ 181.656507][ T25] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 181.665462][ T983] usb 2-1: USB disconnect, device number 24 [ 181.983972][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 182.383952][ T25] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 182.450190][ T25] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.450225][ T25] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.529298][ T25] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 182.529351][ T25] usb 5-1: Product: syz [ 182.529368][ T25] usb 5-1: Manufacturer: syz [ 182.877618][ T25] hub 5-1:4.0: USB hub found [ 182.898147][ T5746] usb 1-1: string descriptor 0 read error: -71 [ 182.911830][ T5746] usbhid 1-1:0.0: can't add hid device: -71 [ 182.911943][ T5746] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 182.942863][ T5746] usb 1-1: USB disconnect, device number 24 [ 183.115596][ T25] hub 5-1:4.0: config failed, can't read hub descriptor (err -22) [ 183.148254][ T25] usb 5-1: USB disconnect, device number 27 [ 183.704001][ T983] usb 4-1: USB disconnect, device number 29 [ 183.729169][ T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 183.885927][ T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 183.886792][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 183.886817][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.886835][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 183.886875][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 183.888167][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 183.888190][ T9] usb 2-1: Product: syz [ 183.888205][ T9] usb 2-1: Manufacturer: syz [ 183.923197][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 183.923223][ T9] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 184.033880][ T25] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 184.114730][ T983] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 184.115492][ T9] usb 2-1: USB disconnect, device number 25 [ 184.184695][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 184.187966][ T25] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 184.189742][ T25] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.189765][ T25] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.191233][ T25] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 184.191256][ T25] usb 5-1: Product: syz [ 184.191265][ T25] usb 5-1: Manufacturer: syz [ 184.249831][ T25] hub 5-1:4.0: USB hub found [ 184.273886][ T983] usb 4-1: Using ep0 maxpacket: 32 [ 184.274365][ T983] usb 4-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 184.276772][ T983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.276788][ T983] usb 4-1: Product: syz [ 184.276797][ T983] usb 4-1: Manufacturer: syz [ 184.276805][ T983] usb 4-1: SerialNumber: syz [ 184.380592][ T25] hub 5-1:4.0: config failed, can't read hub descriptor (err -22) [ 184.426082][ T25] usb 5-1: USB disconnect, device number 28 [ 184.567172][ T983] usb 4-1: failed waiting for Axe-Fx III to boot: -71 [ 184.567203][ T983] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 184.593635][ T31] audit: type=1400 audit(1791987471.990:335): avc: denied { mount } for pid=7040 comm="syz.0.299" name="/" dev="configfs" ino=72 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 184.607828][ T983] usb 4-1: USB disconnect, device number 30 [ 184.624597][ T31] audit: type=1400 audit(1791987472.030:336): avc: denied { search } for pid=7040 comm="syz.0.299" name="/" dev="configfs" ino=72 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 184.624972][ T31] audit: type=1400 audit(1791987472.030:337): avc: denied { search } for pid=7040 comm="syz.0.299" name="nullb" dev="configfs" ino=3238 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 184.628247][ T31] audit: type=1400 audit(1791987472.030:338): avc: denied { write search } for pid=7040 comm="syz.0.299" name="nullb" dev="configfs" ino=3238 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 184.630291][ T31] audit: type=1400 audit(1791987472.030:339): avc: denied { add_name } for pid=7040 comm="syz.0.299" name="nullb1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 184.631844][ T31] audit: type=1400 audit(1791987472.030:340): avc: denied { create } for pid=7040 comm="syz.0.299" name="nullb1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 184.655862][ T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 184.783831][ T25] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 184.824545][ T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 184.825567][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 184.825596][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.825614][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 184.825653][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 184.826994][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 184.827018][ T9] usb 2-1: Product: syz [ 184.827033][ T9] usb 2-1: Manufacturer: syz [ 184.832214][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 184.832241][ T9] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 184.948944][ T25] usb 5-1: unable to get BOS descriptor or descriptor too short [ 184.949570][ T25] usb 5-1: not running at top speed; connect to a high speed hub [ 184.949594][ T25] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 184.951053][ T25] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 184.951078][ T25] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 184.951097][ T25] usb 5-1: config 14 has no interface number 0 [ 184.951106][ T25] usb 5-1: config 14 has no interface number 1 [ 184.951137][ T25] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 184.951151][ T25] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 184.951165][ T25] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 184.951180][ T25] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 184.951195][ T25] usb 5-1: config 14 interface 57 has no altsetting 0 [ 184.951206][ T25] usb 5-1: config 14 interface 228 has no altsetting 0 [ 184.955018][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.955042][ T25] usb 5-1: Product: syz [ 184.955056][ T25] usb 5-1: Manufacturer: syz [ 184.955070][ T25] usb 5-1: SerialNumber: syz [ 185.141407][ T983] usb 2-1: USB disconnect, device number 26 [ 185.298018][ T430] IPVS: starting estimator thread 0... [ 185.363801][ T5609] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 185.383833][ T7045] IPVS: using max 37 ests per chain, 88800 per kthread [ 185.448087][ T25] legousbtower 5-1:14.57: interrupt endpoints not found [ 185.500816][ T5622] Bluetooth: hci3: unexpected subevent 0x37 length: 25 > 13 [ 185.515187][ T5609] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 185.516228][ T5609] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 185.516252][ T5609] usb 1-1: config 1 has no interface number 0 [ 185.516289][ T5609] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 185.516315][ T5609] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 185.516340][ T5609] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.519320][ T5609] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.519345][ T5609] usb 1-1: Product: syz [ 185.519360][ T5609] usb 1-1: Manufacturer: syz [ 185.519375][ T5609] usb 1-1: SerialNumber: syz [ 185.570762][ T7041] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 185.802792][ T7041] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 185.848895][ T25] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 187.170 build 14587 [ 185.856913][ T25] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 186.003450][ T7055] bond0: option mode: unable to set because the bond device is up [ 186.024409][ T7055] bond0: (slave macvlan3): Opening slave failed [ 186.070410][ T5609] sierra_net 1-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.0-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 186.085636][ T7056] netlink: 14 bytes leftover after parsing attributes in process `syz.1.303'. [ 186.327997][ T5609] sierra_net 1-1:1.7 wwan0: Submit SYNC failed -71 [ 186.328031][ T5609] sierra_net 1-1:1.7 wwan0: Send SYNC failed, status -71 [ 186.328559][ T5609] sierra_net 1-1:1.7 wwan0: Submit SYNC failed -71 [ 186.328580][ T5609] sierra_net 1-1:1.7 wwan0: Send SYNC failed, status -71 [ 186.416533][ T5609] usb 1-1: USB disconnect, device number 25 [ 186.423585][ T5609] sierra_net 1-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.0-1, Sierra Wireless USB-to-WWAN Modem [ 186.654690][ T31] audit: type=1400 audit(1791987474.030:341): avc: denied { write } for pid=7036 comm="syz.4.298" name="legousbtower0" dev="devtmpfs" ino=3105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 186.929599][ T7063] usb 5-1: LEGO USB Tower reset control request failed [ 186.956024][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 187.046965][ T5609] sierra_net 1-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 187.117462][ T9] usb 2-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 187.119699][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 187.119734][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 187.119773][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.169890][ T9] usb 2-1: config 0 descriptor?? [ 187.170783][ T10] usb 5-1: USB disconnect, device number 29 [ 187.196429][ T10] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected [ 187.232785][ T7067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.306'. [ 187.579169][ T7060] netlink: 28 bytes leftover after parsing attributes in process `syz.1.305'. [ 188.155326][ T31] audit: type=1400 audit(1791987475.560:342): avc: denied { unmount } for pid=5605 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 188.443064][ T31] audit: type=1400 audit(1791987475.840:343): avc: denied { create } for pid=7076 comm="syz.4.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 188.445139][ T5716] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 188.454177][ T31] audit: type=1400 audit(1791987475.860:344): avc: denied { read write } for pid=7076 comm="syz.4.310" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 188.725046][ T5716] usb 1-1: Using ep0 maxpacket: 32 [ 188.728396][ T5716] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 188.731693][ T5716] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.731755][ T5716] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.736583][ T5716] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 188.736660][ T5716] usb 1-1: Product: syz [ 188.736709][ T5716] usb 1-1: Manufacturer: syz [ 189.095421][ T5716] hub 1-1:4.0: USB hub found [ 189.227376][ T9] usb 2-1: string descriptor 0 read error: -71 [ 189.248517][ T5716] hub 1-1:4.0: config failed, can't read hub descriptor (err -22) [ 189.250726][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 189.250815][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 189.279746][ T9] usb 2-1: USB disconnect, device number 27 [ 189.310856][ T5716] usb 1-1: USB disconnect, device number 26 [ 189.377994][ T7085] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.381456][ T7085] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.498367][ T7085] ip6erspan0: left allmulticast mode [ 189.504262][ T43] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.504323][ T43] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.504355][ T43] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.504385][ T43] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.769181][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 189.769198][ T31] audit: type=1400 audit(1791987477.170:347): avc: denied { write } for pid=7091 comm="syz.3.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 189.769918][ T31] audit: type=1400 audit(1791987477.170:348): avc: denied { read } for pid=7091 comm="syz.3.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 189.772617][ T31] audit: type=1400 audit(1791987477.170:349): avc: denied { ioctl } for pid=7091 comm="syz.3.313" path="socket:[13250]" dev="sockfs" ino=13250 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 189.773240][ T7092] netlink: 12 bytes leftover after parsing attributes in process `syz.3.313'. [ 189.823571][ T7092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.313'. [ 189.872708][ T7092] netlink: 12 bytes leftover after parsing attributes in process `syz.3.313'. [ 189.893828][ T5716] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 189.974516][ T9] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 190.113785][ T5716] usb 1-1: Using ep0 maxpacket: 32 [ 190.115159][ T5716] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 190.116066][ T5716] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.116096][ T5716] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.117429][ T5716] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 190.117452][ T5716] usb 1-1: Product: syz [ 190.117465][ T5716] usb 1-1: Manufacturer: syz [ 190.172886][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 190.175971][ T5709] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 190.184420][ T5716] hub 1-1:4.0: USB hub found [ 190.217917][ T9] usb 2-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 190.235975][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.236001][ T9] usb 2-1: Product: syz [ 190.236016][ T9] usb 2-1: Manufacturer: syz [ 190.236031][ T9] usb 2-1: SerialNumber: syz [ 190.336700][ T5716] hub 1-1:4.0: 1 port detected [ 190.450412][ T5709] usb 4-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 190.584048][ T5709] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.584137][ T5709] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 190.720391][ T9] usb 2-1: failed waiting for Axe-Fx III to boot: -71 [ 190.720529][ T9] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 190.745590][ T5709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.745615][ T5709] usb 4-1: Product: syz [ 190.745630][ T5709] usb 4-1: Manufacturer: syz [ 190.745644][ T5709] usb 4-1: SerialNumber: syz [ 190.749830][ T9] usb 2-1: USB disconnect, device number 28 [ 190.815409][ T5709] uvcvideo 4-1:1.0: Found UVC 1.00 device syz (046d:0821) [ 191.011293][ T7092] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7092 comm=syz.3.313 [ 191.036787][ T5709] uvcvideo 4-1:1.0: Failed to query (GET_INFO) UVC control 1 on unit 3: -71 (exp. 1). [ 191.036913][ T5709] uvcvideo 4-1:1.0: No streaming interface found for terminal 32770. [ 191.594814][ T5716] usb 1-1: USB disconnect, device number 27 [ 191.632840][ T5709] usb 4-1: USB disconnect, device number 31 [ 191.768038][ T7112] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 191.973791][ T9] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 192.124605][ T9] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 192.125752][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 192.125778][ T9] usb 5-1: config 0 has no interface number 0 [ 192.125814][ T9] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.125841][ T9] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.125864][ T9] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 192.125904][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.130264][ T9] usb 5-1: config 0 descriptor?? [ 192.196338][ T5709] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 192.387192][ T5709] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 192.393967][ T5709] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 192.394011][ T5709] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.394029][ T5709] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 192.394069][ T5709] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.396351][ T5709] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 192.396375][ T5709] usb 4-1: Product: syz [ 192.396389][ T5709] usb 4-1: Manufacturer: syz [ 192.413643][ T5709] cdc_wdm 4-1:1.0: skipping garbage [ 192.413663][ T5709] cdc_wdm 4-1:1.0: skipping garbage [ 192.423238][ T5709] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 192.423259][ T5709] cdc_wdm 4-1:1.0: Unknown control protocol [ 192.615600][ T9] usbhid 5-1:0.1: can't add hid device: -71 [ 192.615699][ T9] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 192.622300][ T9] usb 5-1: USB disconnect, device number 30 [ 192.654737][ T5709] usb 4-1: USB disconnect, device number 32 [ 193.059335][ T7132] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input17 [ 193.208526][ T5709] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 193.605101][ T5709] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 193.653323][ T5709] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 193.653342][ T5709] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.653353][ T5709] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 193.653386][ T5709] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.804130][ T9] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 193.814744][ T5709] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 193.814780][ T5709] usb 4-1: Product: syz [ 193.814795][ T5709] usb 4-1: Manufacturer: syz [ 193.959893][ T9] usb 5-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01 [ 193.988463][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 193.988496][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 194.025104][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.025145][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.054894][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.055112][ T9] usb 5-1: Product: syz [ 194.055226][ T9] usb 5-1: Manufacturer: syz [ 194.055380][ T9] usb 5-1: SerialNumber: syz [ 194.124749][ T5709] cdc_wdm 4-1:1.0: skipping garbage [ 194.124770][ T5709] cdc_wdm 4-1:1.0: skipping garbage [ 194.131193][ T5709] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 194.131215][ T5709] cdc_wdm 4-1:1.0: Unknown control protocol [ 194.144921][ T9] etas_es58x 5-1:1.0: Starting syz syz (Serial Number syz) [ 194.444030][ T10] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 194.615748][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 194.616342][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 194.616394][ T10] usb 1-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice=26.79 [ 194.617673][ T10] usb 1-1: config 3 has an invalid interface number: 5 but max is 1 [ 194.617726][ T10] usb 1-1: config 3 has an invalid descriptor of length 196, skipping remainder of the config [ 194.617747][ T10] usb 1-1: config 3 has 1 interface, different from the descriptor's value: 2 [ 194.617767][ T10] usb 1-1: config 3 has no interface number 0 [ 194.617794][ T10] usb 1-1: too many endpoints for config 3 interface 5 altsetting 6: 49, using maximum allowed: 30 [ 194.617827][ T10] usb 1-1: config 3 interface 5 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 49 [ 194.617874][ T10] usb 1-1: config 3 interface 5 has no altsetting 0 [ 194.621839][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.621865][ T10] usb 1-1: Product: syz [ 194.621880][ T10] usb 1-1: Manufacturer: syz [ 194.621894][ T10] usb 1-1: SerialNumber: syz [ 194.743405][ T9] etas_es58x 5-1:1.0: could not retrieve the product info string [ 194.795747][ T9] usb 5-1: USB disconnect, device number 31 [ 194.799742][ T9] etas_es58x 5-1:1.0: Disconnecting syz syz [ 194.964863][ T7139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.965252][ T7139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.052555][ T7145] netlink: 12 bytes leftover after parsing attributes in process `syz.2.329'. [ 195.058174][ T7145] netlink: 4 bytes leftover after parsing attributes in process `syz.2.329'. [ 195.077602][ T7145] netlink: 12 bytes leftover after parsing attributes in process `syz.2.329'. [ 195.176251][ T7139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.180858][ T7139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.394089][ T7139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.394575][ T7139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.400236][ T7139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.402068][ T7139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.501197][ T10] msi2500 1-1:3.5: Registered as swradio24 [ 195.501219][ T10] msi2500 1-1:3.5: SDR API is still slightly experimental and functionality changes may follow [ 195.503037][ T10] usb 1-1: USB disconnect, device number 28 [ 195.514209][ T25] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 195.664428][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 195.664927][ T25] usb 2-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 195.667673][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.667697][ T25] usb 2-1: Product: syz [ 195.667712][ T25] usb 2-1: Manufacturer: syz [ 195.667727][ T25] usb 2-1: SerialNumber: syz [ 195.833843][ T9] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 195.901115][ T25] usb 2-1: failed waiting for Axe-Fx III to boot: -71 [ 195.901152][ T25] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 195.914264][ T25] usb 2-1: USB disconnect, device number 29 [ 195.936019][ T5709] usb 4-1: USB disconnect, device number 33 [ 196.004705][ T7157] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 196.020933][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 196.026680][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 196.028207][ T9] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.028236][ T9] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.030383][ T9] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 196.030409][ T9] usb 5-1: Product: syz [ 196.030424][ T9] usb 5-1: Manufacturer: syz [ 196.163928][ T9] hub 5-1:4.0: USB hub found [ 196.423730][ T7163] ip6erspan0: entered allmulticast mode [ 196.848194][ T9] hub 5-1:4.0: config failed, can't read hub descriptor (err -22) [ 197.107966][ T9] usb 5-1: reset high-speed USB device number 32 using dummy_hcd [ 197.494942][ T7175] ip6erspan0: left allmulticast mode [ 197.508311][ T5709] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 197.634005][ T25] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 197.676677][ T5709] usb 2-1: New USB device found, idVendor=056a, idProduct=5012, bcdDevice= 0.00 [ 197.680810][ T5709] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 197.680895][ T5709] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.681215][ T5709] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.759691][ T5709] usb 2-1: config 0 descriptor?? [ 197.814012][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 197.814643][ T25] usb 4-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 197.817153][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.817177][ T25] usb 4-1: Product: syz [ 197.817192][ T25] usb 4-1: Manufacturer: syz [ 197.817207][ T25] usb 4-1: SerialNumber: syz [ 198.040761][ T25] usb 4-1: failed waiting for Axe-Fx III to boot: -71 [ 198.040794][ T25] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 198.214676][ T25] usb 4-1: USB disconnect, device number 34 [ 198.239933][ T5709] hid_parser_main: 455 callbacks suppressed [ 198.239958][ T5709] wacom 0003:056A:5012.000B: unknown main item tag 0x0 [ 198.239984][ T5709] wacom 0003:056A:5012.000B: unknown main item tag 0x0 [ 198.240009][ T5709] wacom 0003:056A:5012.000B: unknown main item tag 0x0 [ 198.240034][ T5709] wacom 0003:056A:5012.000B: unknown main item tag 0x0 [ 198.240057][ T5709] wacom 0003:056A:5012.000B: unknown main item tag 0x0 [ 198.240081][ T5709] wacom 0003:056A:5012.000B: unknown main item tag 0x0 [ 198.240104][ T5709] wacom 0003:056A:5012.000B: unknown main item tag 0x0 [ 198.240128][ T5709] wacom 0003:056A:5012.000B: unknown main item tag 0x0 [ 198.240150][ T5709] wacom 0003:056A:5012.000B: unknown main item tag 0x0 [ 198.240180][ T5709] wacom 0003:056A:5012.000B: unknown main item tag 0x0 [ 198.329466][ T5709] wacom 0003:056A:5012.000B: ignoring exceeding usage max [ 198.407542][ T5709] usb 2-1: USB disconnect, device number 30 [ 198.483814][ T10] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 198.646063][ T10] usb 1-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01 [ 198.647043][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 198.647071][ T10] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 198.648905][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.648929][ T10] usb 1-1: Product: syz [ 198.648944][ T10] usb 1-1: Manufacturer: syz [ 198.648959][ T10] usb 1-1: SerialNumber: syz [ 198.656330][ T10] etas_es58x 1-1:1.0: Starting syz syz (Serial Number syz) [ 198.875957][ T10] etas_es58x 1-1:1.0: could not retrieve the product info string [ 199.037622][ T10] usb 1-1: USB disconnect, device number 29 [ 199.039749][ T10] etas_es58x 1-1:1.0: Disconnecting syz syz [ 199.231052][ T7196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.344'. [ 201.218810][ T5623] Bluetooth: hci2: command 0x0406 tx timeout [ 201.218904][ T5623] Bluetooth: hci1: command 0x0406 tx timeout [ 201.218925][ T5623] Bluetooth: hci3: command 0x0406 tx timeout [ 201.218996][ T5623] Bluetooth: hci0: command 0x0406 tx timeout [ 202.054801][ T9] usb 5-1: reset high-speed USB device number 32 using dummy_hcd [ 202.147220][ T7212] netlink: 12 bytes leftover after parsing attributes in process `syz.4.350'. [ 202.172786][ T7212] netlink: 4 bytes leftover after parsing attributes in process `syz.4.350'. [ 202.188143][ T7212] netlink: 12 bytes leftover after parsing attributes in process `syz.4.350'. [ 202.194248][ T10] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 202.293912][ T5709] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 202.349927][ T5609] libceph: connect (1)[c::]:6789 error -101 [ 202.350210][ T5609] libceph: mon0 (1)[c::]:6789 connect error [ 202.393310][ T7216] ceph: No mds server is up or the cluster is laggy [ 202.393760][ T7220] ======================================================= [ 202.393760][ T7220] WARNING: The mand mount option has been deprecated and [ 202.393760][ T7220] and is ignored by this kernel. Remove the mand [ 202.393760][ T7220] option from the mount to silence this warning. [ 202.393760][ T7220] ======================================================= [ 202.451395][ T31] audit: type=1400 audit(1791987489.840:350): avc: denied { unlink } for pid=7214 comm="syz.2.351" name="#1" dev="tmpfs" ino=363 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 202.452663][ T5709] usb 4-1: Using ep0 maxpacket: 32 [ 202.511479][ T5709] usb 4-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 202.528327][ T7224] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input18 [ 202.530141][ T5709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.530165][ T5709] usb 4-1: Product: syz [ 202.530179][ T5709] usb 4-1: Manufacturer: syz [ 202.530194][ T5709] usb 4-1: SerialNumber: syz [ 202.833843][ T983] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 202.851786][ T9] usb 5-1: device descriptor read/64, error -71 [ 202.983896][ T983] usb 1-1: Using ep0 maxpacket: 32 [ 202.986451][ T983] usb 1-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 203.055190][ T983] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.055251][ T983] usb 1-1: Product: syz [ 203.055318][ T983] usb 1-1: Manufacturer: syz [ 203.055365][ T983] usb 1-1: SerialNumber: syz [ 203.144258][ T31] audit: type=1400 audit(1791987490.550:351): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 203.214233][ T5709] usb 4-1: failed waiting for Axe-Fx III to boot: -71 [ 203.214266][ T5709] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 203.250576][ T5709] usb 4-1: USB disconnect, device number 35 [ 203.263780][ T9] usb 5-1: reset high-speed USB device number 32 using dummy_hcd [ 203.264282][ T9] usb 5-1: device reset changed ep0 maxpacket size! [ 203.264880][ T9] usb 5-1: USB disconnect, device number 32 [ 203.416784][ T983] usb 1-1: failed waiting for Axe-Fx III to boot: -71 [ 203.416832][ T983] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 203.426591][ T983] usb 1-1: USB disconnect, device number 30 [ 203.763901][ T9] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 203.914735][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 203.915788][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.915847][ T9] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 203.918186][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.918209][ T9] usb 5-1: Product: syz [ 203.918224][ T9] usb 5-1: Manufacturer: syz [ 203.918240][ T9] usb 5-1: SerialNumber: syz [ 203.932244][ T9] uvcvideo 5-1:1.0: Found UVC 1.00 device syz (046d:0821) [ 204.126112][ T7212] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7212 comm=syz.4.350 [ 204.314367][ T983] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 204.483606][ T983] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 204.500648][ T983] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 204.501197][ T983] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.501897][ T983] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 204.503332][ T983] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.540204][ T983] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 204.540974][ T983] usb 4-1: Product: syz [ 204.541523][ T983] usb 4-1: Manufacturer: syz [ 204.711139][ T983] cdc_wdm 4-1:1.0: skipping garbage [ 204.711158][ T983] cdc_wdm 4-1:1.0: skipping garbage [ 204.760600][ T983] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 204.760622][ T983] cdc_wdm 4-1:1.0: Unknown control protocol [ 204.945956][ T5609] usb 4-1: USB disconnect, device number 36 [ 205.018194][ T31] audit: type=1400 audit(1791987492.420:352): avc: denied { ioctl } for pid=7249 comm="syz.0.361" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb70d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 205.314052][ T10] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 205.455855][ T9] uvcvideo 5-1:1.0: Failed to query (GET_INFO) UVC control 1 on unit 3: -71 (exp. 1). [ 205.455917][ T9] uvcvideo 5-1:1.0: No streaming interface found for terminal 32770. [ 205.463778][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 205.488705][ T10] usb 2-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 205.498425][ T5609] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 205.501372][ T9] usb 5-1: USB disconnect, device number 33 [ 205.502204][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.502227][ T10] usb 2-1: Product: syz [ 205.502241][ T10] usb 2-1: Manufacturer: syz [ 205.502256][ T10] usb 2-1: SerialNumber: syz [ 205.645343][ T5609] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 205.648049][ T5609] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 205.648066][ T5609] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.648076][ T5609] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 205.648100][ T5609] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.650262][ T5609] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 205.650420][ T5609] usb 4-1: Product: syz [ 205.650504][ T5609] usb 4-1: Manufacturer: syz [ 205.746993][ T7258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.364'. [ 205.818308][ T5609] cdc_wdm 4-1:1.0: skipping garbage [ 205.818379][ T5609] cdc_wdm 4-1:1.0: skipping garbage [ 205.911274][ T5609] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 205.911424][ T5609] cdc_wdm 4-1:1.0: Unknown control protocol [ 206.874608][ T10] usb 2-1: failed waiting for Axe-Fx III to boot: -71 [ 206.874633][ T10] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 206.875766][ C1] cdc_wdm 4-1:1.0: unknown notification 192 received: index 18576 len 28119 [ 206.875982][ C1] cdc_wdm 4-1:1.0: unknown notification 201 received: index 46169 len 50156 [ 206.876200][ C1] cdc_wdm 4-1:1.0: unknown notification 125 received: index 1837 len 32788 [ 206.876411][ C1] cdc_wdm 4-1:1.0: unknown notification 54 received: index 48192 len 31817 [ 206.876628][ C1] cdc_wdm 4-1:1.0: unknown notification 250 received: index 48248 len 61534 [ 206.876840][ C1] cdc_wdm 4-1:1.0: unknown notification 146 received: index 45473 len 17130 [ 206.877047][ C1] cdc_wdm 4-1:1.0: unknown notification 78 received: index 59002 len 27588 [ 206.877251][ C1] cdc_wdm 4-1:1.0: unknown notification 223 received: index 19393 len 60670 [ 206.877461][ C1] cdc_wdm 4-1:1.0: unknown notification 198 received: index 42648 len 2275 [ 206.877668][ C1] cdc_wdm 4-1:1.0: unknown notification 228 received: index 6245 len 35911 [ 206.877876][ C1] cdc_wdm 4-1:1.0: unknown notification 228 received: index 45382 len 41738 [ 206.878080][ C1] cdc_wdm 4-1:1.0: unknown notification 178 received: index 19896 len 39590 [ 206.878288][ C1] cdc_wdm 4-1:1.0: unknown notification 91 received: index 14758 len 58903 [ 206.878500][ C1] cdc_wdm 4-1:1.0: unknown notification 92 received: index 43570 len 10536 [ 206.878714][ C1] cdc_wdm 4-1:1.0: unknown notification 194 received: index 24199 len 256 [ 206.878924][ C1] cdc_wdm 4-1:1.0: unknown notification 117 received: index 21525 len 7080 [ 206.879135][ C1] cdc_wdm 4-1:1.0: unknown notification 185 received: index 26554 len 29136 [ 206.879344][ C1] cdc_wdm 4-1:1.0: unknown notification 36 received: index 3838 len 62182 [ 206.879555][ C1] cdc_wdm 4-1:1.0: unknown notification 176 received: index 60588 len 64939 [ 206.879765][ C1] cdc_wdm 4-1:1.0: unknown notification 107 received: index 2797 len 42965 [ 206.976586][ T7265] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 207.091374][ T10] usb 2-1: USB disconnect, device number 32 [ 207.167589][ T5609] usb 4-1: USB disconnect, device number 37 [ 207.559500][ T31] audit: type=1400 audit(1791987494.910:353): avc: denied { create } for pid=7266 comm="syz.4.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 208.205589][ T31] audit: type=1400 audit(1791987495.610:354): avc: denied { bind } for pid=7276 comm="syz.3.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 208.207588][ T7277] netlink: 'syz.3.369': attribute type 1 has an invalid length. [ 208.207607][ T7277] netlink: 12 bytes leftover after parsing attributes in process `syz.3.369'. [ 208.271655][ T7281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.371'. [ 208.510290][ T7284] lo speed is unknown, defaulting to 1000 [ 208.510360][ T7284] lo speed is unknown, defaulting to 1000 [ 208.521737][ T7284] lo speed is unknown, defaulting to 1000 [ 208.529983][ T7284] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 208.530308][ T7284] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 208.530372][ T7284] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 208.548927][ T7284] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 208.597415][ T7284] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 208.731880][ T31] audit: type=1400 audit(1791987495.900:355): avc: denied { create } for pid=7276 comm="syz.3.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 208.732122][ T31] audit: type=1400 audit(1791987495.900:356): avc: denied { write } for pid=7276 comm="syz.3.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 208.766217][ T5709] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 208.815959][ T7284] lo speed is unknown, defaulting to 1000 [ 208.828883][ T7284] lo speed is unknown, defaulting to 1000 [ 208.843298][ T7284] lo speed is unknown, defaulting to 1000 [ 208.856380][ T7284] lo speed is unknown, defaulting to 1000 [ 208.868696][ T7284] lo speed is unknown, defaulting to 1000 [ 210.128031][ T5709] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 210.130810][ T5709] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 210.130827][ T5709] usb 5-1: config 0 has no interface number 0 [ 210.130849][ T5709] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.130869][ T5709] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.130881][ T5709] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 210.130905][ T5709] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.144981][ T5709] usb 5-1: config 0 descriptor?? [ 210.388774][ T7295] bond1: entered allmulticast mode [ 210.389734][ T7295] 8021q: adding VLAN 0 to HW filter on device bond1 [ 210.446766][ T7295] netlink: 52 bytes leftover after parsing attributes in process `syz.0.376'. [ 210.447197][ T7295] netlink: 14 bytes leftover after parsing attributes in process `syz.0.376'. [ 210.563902][ T25] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 210.584747][ T5709] usbhid 5-1:0.1: can't add hid device: -71 [ 210.584841][ T5709] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 210.589483][ T5709] usb 5-1: USB disconnect, device number 34 [ 210.594022][ T5609] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 210.658803][ T7303] lo speed is unknown, defaulting to 1000 [ 210.714532][ T25] usb 4-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 210.715567][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 210.715597][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 210.715634][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.718678][ T25] usb 4-1: config 0 descriptor?? [ 210.786564][ T5609] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 210.787613][ T5609] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 210.787640][ T5609] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.787659][ T5609] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 210.787700][ T5609] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.792255][ T5609] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 210.792282][ T5609] usb 2-1: Product: syz [ 210.792297][ T5609] usb 2-1: Manufacturer: syz [ 210.866768][ T5609] cdc_wdm 2-1:1.0: skipping garbage [ 210.866787][ T5609] cdc_wdm 2-1:1.0: skipping garbage [ 210.871919][ T5609] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 210.871939][ T5609] cdc_wdm 2-1:1.0: Unknown control protocol [ 210.977148][ T7291] netlink: 28 bytes leftover after parsing attributes in process `syz.3.374'. [ 211.015774][ T4917] Bluetooth: hci1: unexpected subevent 0x37 length: 25 > 13 [ 211.084302][ T5709] usb 2-1: USB disconnect, device number 33 [ 211.464915][ T7316] FAULT_INJECTION: forcing a failure. [ 211.464915][ T7316] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 211.465103][ T7316] CPU: 0 UID: 0 PID: 7316 Comm: syz.2.382 Not tainted syzkaller #0 PREEMPT(full) [ 211.465131][ T7316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 211.465147][ T7316] Call Trace: [ 211.465155][ T7316] [ 211.465164][ T7316] dump_stack_lvl+0x100/0x190 [ 211.465203][ T7316] should_fail_ex.cold+0x5/0xa [ 211.465234][ T7316] _copy_from_user+0x2e/0xd0 [ 211.465263][ T7316] __sys_bpf+0x2f5/0x4a30 [ 211.465296][ T7316] ? __pfx___sys_bpf+0x10/0x10 [ 211.465317][ T7316] ? find_held_lock+0x2b/0x80 [ 211.465346][ T7316] ? futex_wake+0x4ea/0x5e0 [ 211.465389][ T7316] ? rcu_read_lock_any_held+0x6a/0x90 [ 211.465420][ T7316] ? find_held_lock+0x2b/0x80 [ 211.465448][ T7316] ? ksys_write+0x190/0x250 [ 211.465473][ T7316] ? ksys_write+0x190/0x250 [ 211.465515][ T7316] ? __x64_sys_futex+0x34f/0x4d0 [ 211.465543][ T7316] ? __x64_sys_futex+0x358/0x4d0 [ 211.465576][ T7316] ? xfd_validate_state+0x129/0x190 [ 211.465604][ T7316] ? __x64_sys_bpf+0xce/0x140 [ 211.465625][ T7316] __x64_sys_bpf+0xce/0x140 [ 211.465649][ T7316] ? do_syscall_64+0xae/0x790 [ 211.465680][ T7316] do_syscall_64+0x123/0x790 [ 211.465713][ T7316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.465736][ T7316] RIP: 0033:0x7f5a5e79e2d9 [ 211.465767][ T7316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.465793][ T7316] RSP: 002b:00007f5a5f6e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 211.465818][ T7316] RAX: ffffffffffffffda RBX: 00007f5a5ea26090 RCX: 00007f5a5e79e2d9 [ 211.465833][ T7316] RDX: 0000000000000028 RSI: 0000200000000a80 RDI: 0000000000000012 [ 211.465847][ T7316] RBP: 00007f5a5e835888 R08: 0000000000000000 R09: 0000000000000000 [ 211.465861][ T7316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.465873][ T7316] R13: 00007f5a5ea26128 R14: 00007f5a5ea26090 R15: 00007ffdbf86b5d8 [ 211.465902][ T7316] [ 211.767351][ T31] audit: type=1400 audit(1791987499.170:357): avc: denied { accept } for pid=7314 comm="syz.2.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 211.833797][ T5709] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 212.237035][ T7318] netlink: 8 bytes leftover after parsing attributes in process `syz.4.383'. [ 212.244505][ T5709] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 212.332804][ T5709] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 212.332834][ T5709] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.332852][ T5709] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 212.332913][ T5709] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.345180][ T5709] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 212.345207][ T5709] usb 2-1: Product: syz [ 212.345226][ T5709] usb 2-1: Manufacturer: syz [ 212.362344][ T5709] cdc_wdm 2-1:1.0: skipping garbage [ 212.362364][ T5709] cdc_wdm 2-1:1.0: skipping garbage [ 212.376646][ T5709] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 212.376665][ T5709] cdc_wdm 2-1:1.0: Unknown control protocol [ 212.621986][ T25] usb 4-1: string descriptor 0 read error: -71 [ 212.641042][ T25] usbhid 4-1:0.0: can't add hid device: -71 [ 212.641098][ T25] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 212.643887][ T25] usb 4-1: USB disconnect, device number 38 [ 212.868674][ T31] audit: type=1400 audit(1791987500.270:358): avc: denied { read write } for pid=7326 comm="syz.4.387" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 212.870299][ T31] audit: type=1400 audit(1791987500.270:359): avc: denied { open } for pid=7326 comm="syz.4.387" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 213.043586][ T7333] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input19 [ 213.078419][ T10] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 213.217043][ T5609] usb 2-1: USB disconnect, device number 34 [ 213.265428][ T10] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 213.269541][ T10] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 213.269600][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 213.269645][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 213.269793][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.383962][ T10] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 213.383998][ T10] usb 1-1: Product: syz [ 213.384037][ T10] usb 1-1: Manufacturer: syz [ 213.876645][ T10] cdc_wdm 1-1:1.0: skipping garbage [ 213.876668][ T10] cdc_wdm 1-1:1.0: skipping garbage [ 213.897864][ T10] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 213.897885][ T10] cdc_wdm 1-1:1.0: Unknown control protocol [ 213.944780][ T10] usb 1-1: USB disconnect, device number 31 [ 214.185186][ T7348] netlink: 12 bytes leftover after parsing attributes in process `syz.4.393'. [ 214.185448][ T7348] netlink: 4 bytes leftover after parsing attributes in process `syz.4.393'. [ 214.190782][ T7348] netlink: 12 bytes leftover after parsing attributes in process `syz.4.393'. [ 214.333953][ T5609] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 214.340679][ T7350] batman_adv: batadv0: Adding interface: syzkaller0 [ 214.340702][ T7350] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.340752][ T7350] batman_adv: batadv0: Interface activated: syzkaller0 [ 214.485039][ T5609] usb 2-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 214.486140][ T5609] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 214.486165][ T5609] usb 2-1: config 0 has no interface number 0 [ 214.486200][ T5609] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.486224][ T5609] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.486245][ T5609] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 214.486282][ T5609] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.493151][ T5609] usb 2-1: config 0 descriptor?? [ 214.575718][ T5709] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 214.575892][ T25] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 214.602875][ T7349] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 214.626038][ T7349] batman_adv: batadv0: Removing interface: syzkaller0 [ 214.724672][ T25] usb 5-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 214.724995][ T5709] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 214.726322][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.726370][ T25] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 214.726482][ T5709] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 214.726502][ T5709] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.726518][ T5709] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 214.726548][ T5709] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.728335][ T5709] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 214.728356][ T5709] usb 1-1: Product: syz [ 214.728371][ T5709] usb 1-1: Manufacturer: syz [ 214.799500][ T5709] cdc_wdm 1-1:1.0: skipping garbage [ 214.799522][ T5709] cdc_wdm 1-1:1.0: skipping garbage [ 214.800676][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.800701][ T25] usb 5-1: Product: syz [ 214.800716][ T25] usb 5-1: Manufacturer: syz [ 214.800729][ T25] usb 5-1: SerialNumber: syz [ 214.811818][ T5709] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 214.811839][ T5709] cdc_wdm 1-1:1.0: Unknown control protocol [ 214.970005][ T25] uvcvideo 5-1:1.0: Found UVC 1.00 device syz (046d:0821) [ 214.979373][ T5609] usbhid 2-1:0.1: can't add hid device: -71 [ 214.979462][ T5609] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 214.989980][ T5609] usb 2-1: USB disconnect, device number 35 [ 215.018321][ T7348] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7348 comm=syz.4.393 [ 215.417811][ C1] cdc_wdm 1-1:1.0: unknown notification 192 received: index 18576 len 28119 [ 215.417994][ C1] cdc_wdm 1-1:1.0: unknown notification 201 received: index 46169 len 50156 [ 215.418163][ C1] cdc_wdm 1-1:1.0: unknown notification 125 received: index 1837 len 32788 [ 215.418335][ C1] cdc_wdm 1-1:1.0: unknown notification 54 received: index 48192 len 31817 [ 215.418500][ C1] cdc_wdm 1-1:1.0: unknown notification 250 received: index 48248 len 61534 [ 215.418664][ C1] cdc_wdm 1-1:1.0: unknown notification 146 received: index 45473 len 17130 [ 215.418830][ C1] cdc_wdm 1-1:1.0: unknown notification 78 received: index 59002 len 27588 [ 215.419014][ C1] cdc_wdm 1-1:1.0: unknown notification 223 received: index 19393 len 60670 [ 215.419188][ C1] cdc_wdm 1-1:1.0: unknown notification 198 received: index 42648 len 2275 [ 215.419365][ C1] cdc_wdm 1-1:1.0: unknown notification 228 received: index 6245 len 35911 [ 215.419532][ C1] cdc_wdm 1-1:1.0: unknown notification 228 received: index 45382 len 41738 [ 215.419696][ C1] cdc_wdm 1-1:1.0: unknown notification 178 received: index 19896 len 39590 [ 215.419867][ C1] cdc_wdm 1-1:1.0: unknown notification 91 received: index 14758 len 58903 [ 215.420031][ C1] cdc_wdm 1-1:1.0: unknown notification 92 received: index 43570 len 10536 [ 215.420204][ C1] cdc_wdm 1-1:1.0: unknown notification 194 received: index 24199 len 256 [ 215.420380][ C1] cdc_wdm 1-1:1.0: unknown notification 117 received: index 21525 len 7080 [ 215.420561][ C1] cdc_wdm 1-1:1.0: unknown notification 185 received: index 26554 len 29136 [ 215.420725][ C1] cdc_wdm 1-1:1.0: unknown notification 36 received: index 3838 len 62182 [ 215.420890][ C1] cdc_wdm 1-1:1.0: unknown notification 176 received: index 60588 len 64939 [ 215.421053][ C1] cdc_wdm 1-1:1.0: unknown notification 107 received: index 2797 len 42965 [ 215.759042][ T5609] usb 1-1: USB disconnect, device number 32 [ 215.952044][ T7361] ip6erspan0: entered allmulticast mode [ 217.142797][ T7370] FAULT_INJECTION: forcing a failure. [ 217.142797][ T7370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.142879][ T7370] CPU: 1 UID: 0 PID: 7370 Comm: syz.1.398 Not tainted syzkaller #0 PREEMPT(full) [ 217.142904][ T7370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 217.142917][ T7370] Call Trace: [ 217.142926][ T7370] [ 217.142935][ T7370] dump_stack_lvl+0x100/0x190 [ 217.142973][ T7370] should_fail_ex.cold+0x5/0xa [ 217.143003][ T7370] _copy_from_user+0x2e/0xd0 [ 217.143033][ T7370] __sys_bpf+0x2f5/0x4a30 [ 217.143064][ T7370] ? __pfx___sys_bpf+0x10/0x10 [ 217.143086][ T7370] ? __pfx_futex_hash+0x10/0x10 [ 217.143128][ T7370] ? rcu_is_watching+0x13/0xc0 [ 217.143165][ T7370] ? rcu_is_watching+0x13/0xc0 [ 217.143190][ T7370] ? trace_sched_exit_tp+0x120/0x160 [ 217.143237][ T7370] ? __x64_sys_futex+0x34f/0x4d0 [ 217.143265][ T7370] ? __x64_sys_futex+0x358/0x4d0 [ 217.143296][ T7370] ? xfd_validate_state+0x129/0x190 [ 217.143324][ T7370] ? __x64_sys_bpf+0xce/0x140 [ 217.143345][ T7370] __x64_sys_bpf+0xce/0x140 [ 217.143369][ T7370] ? do_syscall_64+0xae/0x790 [ 217.143399][ T7370] do_syscall_64+0x123/0x790 [ 217.143429][ T7370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.143451][ T7370] RIP: 0033:0x7f93b1d9e2d9 [ 217.143469][ T7370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.143488][ T7370] RSP: 002b:00007f93b2cea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 217.143509][ T7370] RAX: ffffffffffffffda RBX: 00007f93b2026090 RCX: 00007f93b1d9e2d9 [ 217.143523][ T7370] RDX: 0000000000000028 RSI: 0000200000000a80 RDI: 0000000000000012 [ 217.143535][ T7370] RBP: 00007f93b1e35888 R08: 0000000000000000 R09: 0000000000000000 [ 217.143548][ T7370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.143560][ T7370] R13: 00007f93b2026128 R14: 00007f93b2026090 R15: 00007ffd486c0f28 [ 217.143589][ T7370] [ 217.905759][ T25] uvcvideo 5-1:1.0: Failed to query (GET_INFO) UVC control 1 on unit 3: -71 (exp. 1). [ 217.906055][ T25] uvcvideo 5-1:1.0: No streaming interface found for terminal 32770. [ 217.980473][ T25] usb 5-1: USB disconnect, device number 35 [ 218.358529][ T31] audit: type=1400 audit(1791987505.760:360): avc: denied { read } for pid=7383 comm="syz.4.406" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 218.358574][ T31] audit: type=1400 audit(1791987505.760:361): avc: denied { open } for pid=7383 comm="syz.4.406" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 218.857557][ T7385] netlink: 72 bytes leftover after parsing attributes in process `syz.4.406'. [ 219.143871][ T31] audit: type=1400 audit(1791987506.260:362): avc: denied { audit_write } for pid=7383 comm="syz.4.406" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 219.668648][ T5609] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 219.669626][ T31] audit: type=1400 audit(1791987507.070:363): avc: denied { read } for pid=5262 comm="dhcpcd" name="n55" dev="tmpfs" ino=3055 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 219.669995][ T31] audit: type=1400 audit(1791987507.070:364): avc: denied { open } for pid=5262 comm="dhcpcd" path="/run/udev/data/n55" dev="tmpfs" ino=3055 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 219.670252][ T31] audit: type=1400 audit(1791987507.070:365): avc: denied { getattr } for pid=5262 comm="dhcpcd" path="/run/udev/data/n55" dev="tmpfs" ino=3055 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 219.814465][ T5609] usb 4-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01 [ 219.829709][ T5609] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 219.829739][ T5609] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 219.834531][ T5609] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.834564][ T5609] usb 4-1: Product: syz [ 219.834579][ T5609] usb 4-1: Manufacturer: syz [ 219.834594][ T5609] usb 4-1: SerialNumber: syz [ 219.851422][ T5609] etas_es58x 4-1:1.0: Starting syz syz (Serial Number syz) [ 220.014882][ T4917] Bluetooth: hci1: unexpected subevent 0x37 length: 25 > 13 [ 221.197567][ T7426] netlink: 12 bytes leftover after parsing attributes in process `syz.4.412'. [ 221.199668][ T7426] netlink: 4 bytes leftover after parsing attributes in process `syz.4.412'. [ 221.246836][ T5609] etas_es58x 4-1:1.0: could not retrieve the product info string [ 221.250346][ T7426] netlink: 12 bytes leftover after parsing attributes in process `syz.4.412'. [ 221.325549][ T5609] usb 4-1: USB disconnect, device number 39 [ 221.327796][ T5609] etas_es58x 4-1:1.0: Disconnecting syz syz [ 221.438322][ T31] audit: type=1400 audit(1791987508.840:366): avc: denied { write } for pid=7411 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 221.438483][ T31] audit: type=1400 audit(1791987508.840:367): avc: denied { create } for pid=7411 comm="dhcpcd-run-hook" name="resolv.conf.syz_tun.dhcp" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 221.438956][ T31] audit: type=1400 audit(1791987508.840:368): avc: denied { write } for pid=7411 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.syz_tun.dhcp" dev="tmpfs" ino=3059 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 221.439630][ T31] audit: type=1400 audit(1791987508.840:369): avc: denied { append } for pid=7411 comm="dhcpcd-run-hook" name="resolv.conf.syz_tun.dhcp" dev="tmpfs" ino=3059 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 221.583811][ T5709] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 221.643778][ T25] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 221.744306][ T5709] usb 5-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 221.745214][ T5709] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.745272][ T5709] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 221.747090][ T5709] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.747112][ T5709] usb 5-1: Product: syz [ 221.747127][ T5709] usb 5-1: Manufacturer: syz [ 221.747141][ T5709] usb 5-1: SerialNumber: syz [ 221.770012][ T5709] uvcvideo 5-1:1.0: Found UVC 1.00 device syz (046d:0821) [ 221.804181][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 221.804780][ T10] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 221.804889][ T25] usb 2-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 221.807772][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.807795][ T25] usb 2-1: Product: syz [ 221.807810][ T25] usb 2-1: Manufacturer: syz [ 221.807824][ T25] usb 2-1: SerialNumber: syz [ 221.960441][ T7426] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7426 comm=syz.4.412 [ 221.994459][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 221.997095][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 221.997138][ T10] usb 1-1: New USB device found, idVendor=0e41, idProduct=4248, bcdDevice= 0.40 [ 221.998208][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 222.000380][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.000402][ T10] usb 1-1: Product: syz [ 222.000417][ T10] usb 1-1: Manufacturer: syz [ 222.000432][ T10] usb 1-1: SerialNumber: syz [ 222.045402][ T25] usb 2-1: failed waiting for Axe-Fx III to boot: -71 [ 222.045454][ T25] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 222.087970][ T25] usb 2-1: USB disconnect, device number 36 [ 223.904519][ T7465] netlink: 72 bytes leftover after parsing attributes in process `syz.1.418'. [ 224.304830][ T5709] uvcvideo 5-1:1.0: Failed to query (GET_INFO) UVC control 1 on unit 3: -71 (exp. 1). [ 224.304930][ T5709] uvcvideo 5-1:1.0: No streaming interface found for terminal 32770. [ 224.329621][ T5709] usb 5-1: USB disconnect, device number 36 [ 224.617573][ T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 224.617623][ T10] usb 1-1: MIDIStreaming interface descriptor not found [ 225.164294][ T9] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 225.188981][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 225.189007][ T31] audit: type=1400 audit(1791987512.590:374): avc: denied { write } for pid=7460 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 225.324441][ T9] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 225.325358][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 225.325381][ T9] usb 4-1: config 0 has no interface number 0 [ 225.325417][ T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.325442][ T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.325464][ T9] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 225.325500][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.402601][ T9] usb 4-1: config 0 descriptor?? [ 225.487864][ T10] usb 1-1: USB disconnect, device number 33 [ 225.694160][ T31] audit: type=1400 audit(1791987513.060:375): avc: denied { write } for pid=7488 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.113484][ T9] usbhid 4-1:0.1: can't add hid device: -71 [ 226.113544][ T9] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 226.128076][ T9] usb 4-1: USB disconnect, device number 40 [ 226.313113][ T5619] udevd[5619]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 226.433985][ T5709] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 226.487900][ T7506] netlink: 14 bytes leftover after parsing attributes in process `syz.4.427'. [ 226.606161][ T5709] usb 2-1: New USB device found, idVendor=056a, idProduct=5012, bcdDevice= 0.00 [ 226.607148][ T5709] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 226.607180][ T5709] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.607214][ T5709] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.611456][ T5709] usb 2-1: config 0 descriptor?? [ 226.903895][ T10] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 226.991595][ T7516] bond1: left allmulticast mode [ 227.010096][ T9] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 227.084971][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 227.087765][ T10] usb 5-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 227.117746][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.117810][ T10] usb 5-1: Product: syz [ 227.117914][ T10] usb 5-1: Manufacturer: syz [ 227.117970][ T10] usb 5-1: SerialNumber: syz [ 227.209060][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 227.221939][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 227.222041][ T9] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 227.260938][ T9] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 227.261201][ T9] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 227.261354][ T9] usb 4-1: config 14 has no interface number 0 [ 227.261646][ T9] usb 4-1: config 14 has no interface number 1 [ 227.262437][ T9] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 227.262502][ T9] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 227.262639][ T9] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 227.262761][ T9] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 227.262925][ T9] usb 4-1: config 14 interface 57 has no altsetting 0 [ 227.263058][ T9] usb 4-1: config 14 interface 228 has no altsetting 0 [ 227.357245][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.357272][ T9] usb 4-1: Product: syz [ 227.357286][ T9] usb 4-1: Manufacturer: syz [ 227.357301][ T9] usb 4-1: SerialNumber: syz [ 227.388998][ T5709] usbhid 2-1:0.0: can't add hid device: -71 [ 227.389094][ T5709] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 227.393199][ T5709] usb 2-1: USB disconnect, device number 37 [ 227.411871][ T10] usb 5-1: failed waiting for Axe-Fx III to boot: -71 [ 227.411905][ T10] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 227.441788][ T10] usb 5-1: USB disconnect, device number 37 [ 227.464668][ T7518] netlink: 12 bytes leftover after parsing attributes in process `syz.2.432'. [ 227.778164][ T9] legousbtower 4-1:14.57: interrupt endpoints not found [ 227.949936][ T7527] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input20 [ 228.171148][ T10] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 228.473753][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 228.584215][ T7532] FAULT_INJECTION: forcing a failure. [ 228.584215][ T7532] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.584292][ T7532] CPU: 0 UID: 0 PID: 7532 Comm: syz.4.436 Not tainted syzkaller #0 PREEMPT(full) [ 228.584318][ T7532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 228.584330][ T7532] Call Trace: [ 228.584338][ T7532] [ 228.584347][ T7532] dump_stack_lvl+0x100/0x190 [ 228.584378][ T7532] should_fail_ex.cold+0x5/0xa [ 228.584408][ T7532] _copy_from_user+0x2e/0xd0 [ 228.584439][ T7532] __sys_bpf+0x2f5/0x4a30 [ 228.584471][ T7532] ? __pfx___sys_bpf+0x10/0x10 [ 228.584489][ T7532] ? find_held_lock+0x2b/0x80 [ 228.584507][ T7532] ? futex_wake+0x4ea/0x5e0 [ 228.584530][ T7532] ? rcu_read_lock_any_held+0x6a/0x90 [ 228.584547][ T7532] ? find_held_lock+0x2b/0x80 [ 228.584563][ T7532] ? ksys_write+0x190/0x250 [ 228.584577][ T7532] ? ksys_write+0x190/0x250 [ 228.584601][ T7532] ? __x64_sys_futex+0x34f/0x4d0 [ 228.584617][ T7532] ? __x64_sys_futex+0x358/0x4d0 [ 228.584635][ T7532] ? xfd_validate_state+0x129/0x190 [ 228.584649][ T7532] ? __x64_sys_bpf+0xce/0x140 [ 228.584662][ T7532] __x64_sys_bpf+0xce/0x140 [ 228.584675][ T7532] ? do_syscall_64+0xae/0x790 [ 228.584692][ T7532] do_syscall_64+0x123/0x790 [ 228.584709][ T7532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.584722][ T7532] RIP: 0033:0x7f3f20f9e2d9 [ 228.584733][ T7532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.584745][ T7532] RSP: 002b:00007f3f21e52028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 228.584757][ T7532] RAX: ffffffffffffffda RBX: 00007f3f21226090 RCX: 00007f3f20f9e2d9 [ 228.584765][ T7532] RDX: 0000000000000028 RSI: 0000200000000a80 RDI: 0000000000000012 [ 228.584772][ T7532] RBP: 00007f3f21035888 R08: 0000000000000000 R09: 0000000000000000 [ 228.584778][ T7532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.584785][ T7532] R13: 00007f3f21226128 R14: 00007f3f21226090 R15: 00007ffc843f86d8 [ 228.584801][ T7532] [ 228.674597][ T9] legousbtower 4-1:14.228: LEGO USB Tower firmware version is 187.170 build 14587 [ 230.426359][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 230.426415][ T10] usb 1-1: New USB device found, idVendor=0e41, idProduct=4248, bcdDevice= 0.40 [ 230.933391][ T9] legousbtower 4-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 231.429293][ T5609] usb 4-1: USB disconnect, device number 41 [ 231.433123][ T5609] legousbtower 4-1:14.228: LEGO USB Tower #-160 now disconnected [ 231.508094][ T10] usb 1-1: unable to read config index 0 descriptor/all [ 231.508123][ T10] usb 1-1: can't read configurations, error -71 [ 231.638975][ T7544] netlink: 14 bytes leftover after parsing attributes in process `syz.3.439'. [ 231.763852][ T4420] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 231.834144][ T5709] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 231.915850][ T4420] usb 5-1: unable to get BOS descriptor or descriptor too short [ 231.916227][ T4420] usb 5-1: not running at top speed; connect to a high speed hub [ 231.916245][ T4420] usb 5-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice=26.79 [ 231.917014][ T4420] usb 5-1: config 3 has an invalid interface number: 5 but max is 1 [ 231.917029][ T4420] usb 5-1: config 3 has an invalid descriptor of length 196, skipping remainder of the config [ 231.917040][ T4420] usb 5-1: config 3 has 1 interface, different from the descriptor's value: 2 [ 231.917051][ T4420] usb 5-1: config 3 has no interface number 0 [ 231.917066][ T4420] usb 5-1: too many endpoints for config 3 interface 5 altsetting 6: 49, using maximum allowed: 30 [ 231.917085][ T4420] usb 5-1: config 3 interface 5 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 49 [ 231.917099][ T4420] usb 5-1: config 3 interface 5 has no altsetting 0 [ 231.918615][ T4420] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.918630][ T4420] usb 5-1: Product: syz [ 231.918639][ T4420] usb 5-1: Manufacturer: syz [ 231.918647][ T4420] usb 5-1: SerialNumber: syz [ 231.995809][ T5709] usb 2-1: Using ep0 maxpacket: 32 [ 231.997402][ T5709] usb 2-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 232.000159][ T5709] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.000182][ T5709] usb 2-1: Product: syz [ 232.000196][ T5709] usb 2-1: Manufacturer: syz [ 232.000211][ T5709] usb 2-1: SerialNumber: syz [ 232.113850][ T5716] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 232.127447][ T7538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.127902][ T7538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.131430][ T10] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 232.213291][ T7541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.213867][ T7541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.234578][ T5709] usb 2-1: failed waiting for Axe-Fx III to boot: -71 [ 232.234600][ T5709] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 232.241438][ T5709] usb 2-1: USB disconnect, device number 38 [ 232.284544][ T5716] usb 4-1: Using ep0 maxpacket: 8 [ 232.284937][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 232.285414][ T10] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 232.286614][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.286692][ T5716] usb 4-1: unable to get BOS descriptor or descriptor too short [ 232.286733][ T5716] usb 4-1: New USB device found, idVendor=0e41, idProduct=4248, bcdDevice= 0.40 [ 232.287616][ T5716] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 232.289372][ T5716] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.289393][ T5716] usb 4-1: Product: syz [ 232.289407][ T5716] usb 4-1: Manufacturer: syz [ 232.289421][ T5716] usb 4-1: SerialNumber: syz [ 232.289621][ T10] usb 1-1: config 0 descriptor?? [ 232.329401][ T10] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 232.358373][ T7538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.358822][ T7538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.566955][ T7538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.567435][ T7538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.647180][ T4420] msi2500 5-1:3.5: Registered as swradio24 [ 232.647202][ T4420] msi2500 5-1:3.5: SDR API is still slightly experimental and functionality changes may follow [ 232.653503][ T4420] usb 5-1: USB disconnect, device number 38 [ 232.657509][ T7559] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 233.275971][ T10] gspca_nw80x: reg_r err -32 [ 233.276041][ T10] nw80x 1-1:0.0: probe with driver nw80x failed with error -32 [ 233.280685][ T10] usb 1-1: USB disconnect, device number 35 [ 233.321406][ T31] audit: type=1400 audit(1791987520.720:376): avc: denied { write } for pid=7565 comm="syz.4.447" name="cells" dev="proc" ino=4026533569 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 233.393977][ T5609] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 233.706368][ T5609] usb 2-1: Using ep0 maxpacket: 32 [ 233.726300][ T7571] netlink: 'syz.2.449': attribute type 1 has an invalid length. [ 233.726344][ T7571] netlink: 12 bytes leftover after parsing attributes in process `syz.2.449'. [ 233.727875][ T5609] usb 2-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 233.773725][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 233.823716][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 234.046996][ T7573] siw: device registration error -23 [ 235.026893][ T5609] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.026929][ T5609] usb 2-1: Product: syz [ 235.026944][ T5609] usb 2-1: Manufacturer: syz [ 235.026959][ T5609] usb 2-1: SerialNumber: syz [ 235.530372][ T5609] usb 2-1: failed waiting for Axe-Fx III to boot: -71 [ 235.530406][ T5609] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 235.535018][ T5716] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 235.535059][ T5716] usb 4-1: MIDIStreaming interface descriptor not found [ 235.665372][ T5716] usb 4-1: USB disconnect, device number 42 [ 235.733756][ T5609] usb 2-1: USB disconnect, device number 39 [ 235.768641][ T6187] udevd[6187]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 236.179289][ T7587] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.191945][ T7587] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.295550][ T25] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 236.318976][ T7587] bond1: left allmulticast mode [ 236.343936][ T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.344033][ T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.344074][ T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.344104][ T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.433790][ T25] usb 1-1: device descriptor read/64, error -71 [ 236.502380][ T7592] netlink: 14 bytes leftover after parsing attributes in process `syz.1.454'. [ 236.579434][ T7596] siw: device registration error -23 [ 236.604899][ T5716] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 236.783878][ T25] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 236.813831][ T5716] usb 4-1: Using ep0 maxpacket: 32 [ 236.816328][ T5716] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 236.820220][ T5716] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.820320][ T5716] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.943867][ T5716] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 236.943922][ T5716] usb 4-1: Product: syz [ 236.943966][ T5716] usb 4-1: Manufacturer: syz [ 236.975373][ T25] usb 1-1: device descriptor read/64, error -71 [ 237.014475][ T5716] hub 4-1:4.0: USB hub found [ 237.085261][ T25] usb usb1-port1: attempt power cycle [ 237.203775][ T5716] hub 4-1:4.0: config failed, can't read hub descriptor (err -22) [ 237.213840][ T5609] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 237.232105][ T5716] usb 4-1: USB disconnect, device number 43 [ 237.363766][ T5609] usb 2-1: Using ep0 maxpacket: 8 [ 237.365769][ T5609] usb 2-1: unable to get BOS descriptor or descriptor too short [ 237.365814][ T5609] usb 2-1: New USB device found, idVendor=0e41, idProduct=4248, bcdDevice= 0.40 [ 237.366687][ T5609] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 237.368495][ T5609] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.368518][ T5609] usb 2-1: Product: syz [ 237.368533][ T5609] usb 2-1: Manufacturer: syz [ 237.368548][ T5609] usb 2-1: SerialNumber: syz [ 237.428700][ T25] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 237.444335][ T25] usb 1-1: device descriptor read/8, error -71 [ 237.703793][ T25] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 237.724467][ T25] usb 1-1: device descriptor read/8, error -71 [ 237.739974][ T5716] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 237.803801][ T10] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 237.834000][ T25] usb usb1-port1: unable to enumerate USB device [ 237.893753][ T5716] usb 4-1: Using ep0 maxpacket: 32 [ 237.894283][ T5716] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 237.895186][ T5716] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.895205][ T5716] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.896404][ T5716] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 237.896424][ T5716] usb 4-1: Product: syz [ 237.896440][ T5716] usb 4-1: Manufacturer: syz [ 237.908975][ T5716] hub 4-1:4.0: USB hub found [ 237.954765][ T10] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 237.955846][ T10] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 237.955870][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 237.955889][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 237.955927][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.957742][ T10] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 237.957765][ T10] usb 5-1: Product: syz [ 237.957780][ T10] usb 5-1: Manufacturer: syz [ 237.967375][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 237.967394][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 237.971049][ T10] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 237.971085][ T10] cdc_wdm 5-1:1.0: Unknown control protocol [ 238.102661][ T5716] hub 4-1:4.0: 1 port detected [ 238.175614][ T10] usb 5-1: USB disconnect, device number 39 [ 238.303444][ T5716] hub 4-1:4.0: config failed, can't get hub status (err -5) [ 238.564624][ T7607] netlink: 12 bytes leftover after parsing attributes in process `syz.2.459'. [ 238.564855][ T7607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.459'. [ 238.568426][ T7607] netlink: 12 bytes leftover after parsing attributes in process `syz.2.459'. [ 238.743188][ T5716] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 238.894412][ T5716] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 238.895307][ T5716] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 238.895332][ T5716] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.895351][ T5716] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 238.895391][ T5716] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.896772][ T5716] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 238.896796][ T5716] usb 5-1: Product: syz [ 238.896811][ T5716] usb 5-1: Manufacturer: syz [ 238.903515][ T5716] cdc_wdm 5-1:1.0: skipping garbage [ 238.903541][ T5716] cdc_wdm 5-1:1.0: skipping garbage [ 238.981548][ T5716] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 238.981566][ T5716] cdc_wdm 5-1:1.0: Unknown control protocol [ 239.463607][ C1] cdc_wdm 5-1:1.0: unknown notification 192 received: index 18576 len 28119 [ 239.472637][ C1] cdc_wdm 5-1:1.0: unknown notification 201 received: index 46169 len 50156 [ 239.472854][ C1] cdc_wdm 5-1:1.0: unknown notification 125 received: index 1837 len 32788 [ 239.473057][ C1] cdc_wdm 5-1:1.0: unknown notification 54 received: index 48192 len 31817 [ 239.473274][ C1] cdc_wdm 5-1:1.0: unknown notification 250 received: index 48248 len 61534 [ 239.482118][ C1] cdc_wdm 5-1:1.0: unknown notification 146 received: index 45473 len 17130 [ 239.482340][ C1] cdc_wdm 5-1:1.0: unknown notification 78 received: index 59002 len 27588 [ 239.491181][ C1] cdc_wdm 5-1:1.0: unknown notification 223 received: index 19393 len 60670 [ 239.491398][ C1] cdc_wdm 5-1:1.0: unknown notification 198 received: index 42648 len 2275 [ 239.491608][ C1] cdc_wdm 5-1:1.0: unknown notification 228 received: index 6245 len 35911 [ 239.491815][ C1] cdc_wdm 5-1:1.0: unknown notification 228 received: index 45382 len 41738 [ 239.492020][ C1] cdc_wdm 5-1:1.0: unknown notification 178 received: index 19896 len 39590 [ 239.492225][ C1] cdc_wdm 5-1:1.0: unknown notification 91 received: index 14758 len 58903 [ 239.492432][ C1] cdc_wdm 5-1:1.0: unknown notification 92 received: index 43570 len 10536 [ 239.501240][ C1] cdc_wdm 5-1:1.0: unknown notification 194 received: index 24199 len 256 [ 239.501462][ C1] cdc_wdm 5-1:1.0: unknown notification 117 received: index 21525 len 7080 [ 239.510289][ C1] cdc_wdm 5-1:1.0: unknown notification 185 received: index 26554 len 29136 [ 239.519282][ C1] cdc_wdm 5-1:1.0: unknown notification 36 received: index 3838 len 62182 [ 239.528109][ C1] cdc_wdm 5-1:1.0: unknown notification 176 received: index 60588 len 64939 [ 239.528325][ C1] cdc_wdm 5-1:1.0: unknown notification 107 received: index 2797 len 42965 [ 239.672747][ T5609] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 239.672777][ T5609] usb 2-1: MIDIStreaming interface descriptor not found [ 239.732903][ T10] usb 4-1: USB disconnect, device number 44 [ 239.823741][ T5716] usb 5-1: USB disconnect, device number 40 [ 239.876222][ T7622] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input21 [ 239.998628][ T7624] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 243.057761][ T5609] usb 2-1: USB disconnect, device number 40 [ 243.166208][ T5619] udevd[5619]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 243.204017][ T9] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 243.272187][ T7644] netlink: 14 bytes leftover after parsing attributes in process `syz.1.467'. [ 243.573899][ T25] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 243.603773][ T5716] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 243.723776][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 243.724273][ T25] usb 4-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 243.726877][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.726901][ T25] usb 4-1: Product: syz [ 243.726916][ T25] usb 4-1: Manufacturer: syz [ 243.726931][ T25] usb 4-1: SerialNumber: syz [ 243.765168][ T5716] usb 5-1: Using ep0 maxpacket: 32 [ 243.773761][ T5609] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 243.775234][ T5716] usb 5-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 243.794630][ T5716] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.794656][ T5716] usb 5-1: Product: syz [ 243.794671][ T5716] usb 5-1: Manufacturer: syz [ 243.794682][ T5716] usb 5-1: SerialNumber: syz [ 243.863871][ T9] usb 1-1: device descriptor read/64, error -71 [ 243.913818][ T5609] usb 2-1: Using ep0 maxpacket: 8 [ 243.915927][ T5609] usb 2-1: unable to get BOS descriptor or descriptor too short [ 243.915974][ T5609] usb 2-1: New USB device found, idVendor=0e41, idProduct=4248, bcdDevice= 0.40 [ 243.916901][ T5609] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 243.918857][ T5609] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.918911][ T5609] usb 2-1: Product: syz [ 243.918927][ T5609] usb 2-1: Manufacturer: syz [ 243.918942][ T5609] usb 2-1: SerialNumber: syz [ 243.941484][ T7645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.941945][ T7645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.992937][ T25] usb 4-1: failed waiting for Axe-Fx III to boot: -71 [ 243.992966][ T25] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 243.999812][ T25] usb 4-1: USB disconnect, device number 45 [ 244.040470][ T5716] usb 5-1: failed waiting for Axe-Fx III to boot: -71 [ 244.040492][ T5716] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 244.050722][ T5716] usb 5-1: USB disconnect, device number 41 [ 244.123855][ T9] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 244.283738][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 244.284251][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 244.285166][ T9] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.285184][ T9] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.286643][ T9] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 244.286657][ T9] usb 1-1: Product: syz [ 244.286680][ T9] usb 1-1: Manufacturer: syz [ 244.292352][ T9] hub 1-1:4.0: USB hub found [ 244.498771][ T9] hub 1-1:4.0: config failed, can't read hub descriptor (err -22) [ 244.544750][ T9] usb 1-1: USB disconnect, device number 41 [ 244.823918][ T5716] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 245.286160][ T5716] usb 4-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 245.291700][ T5716] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 245.291823][ T5716] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 245.292007][ T5716] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.340158][ T5716] usb 4-1: config 0 descriptor?? [ 245.513900][ T9] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 245.539663][ T7665] ip_tables: iptables: counters copy to user failed while replacing table [ 245.541423][ T31] audit: type=1400 audit(1791987532.940:377): avc: denied { setopt } for pid=7664 comm="syz.4.477" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 245.541828][ T7665] syz_tun: entered allmulticast mode [ 245.586850][ T7658] netlink: 28 bytes leftover after parsing attributes in process `syz.3.475'. [ 245.651148][ T7668] netlink: 12 bytes leftover after parsing attributes in process `syz.4.478'. [ 245.651433][ T7668] netlink: 4 bytes leftover after parsing attributes in process `syz.4.478'. [ 245.658894][ T7668] netlink: 12 bytes leftover after parsing attributes in process `syz.4.478'. [ 245.674997][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 245.678048][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 245.679838][ T9] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.679868][ T9] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.681260][ T9] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 245.681284][ T9] usb 1-1: Product: syz [ 245.681297][ T9] usb 1-1: Manufacturer: syz [ 245.722378][ T9] hub 1-1:4.0: USB hub found [ 245.903760][ T4420] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 245.919892][ T9] hub 1-1:4.0: 1 port detected [ 246.054470][ T4420] usb 5-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 246.055466][ T4420] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 246.055526][ T4420] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 246.057676][ T4420] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.057699][ T4420] usb 5-1: Product: syz [ 246.057714][ T4420] usb 5-1: Manufacturer: syz [ 246.057727][ T4420] usb 5-1: SerialNumber: syz [ 246.072245][ T4420] uvcvideo 5-1:1.0: Found UVC 1.00 device syz (046d:0821) [ 246.127297][ T9] hub 1-1:4.0: config failed, can't get hub status (err -5) [ 246.183422][ T5716] usb 4-1: string descriptor 0 read error: -71 [ 246.200468][ T5716] usbhid 4-1:0.0: can't add hid device: -71 [ 246.200562][ T5716] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 246.203376][ T5716] usb 4-1: USB disconnect, device number 46 [ 246.262347][ T7668] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7668 comm=syz.4.478 [ 246.266047][ T4420] uvcvideo 5-1:1.0: Failed to query (GET_INFO) UVC control 1 on unit 3: -71 (exp. 1). [ 246.266171][ T4420] uvcvideo 5-1:1.0: No streaming interface found for terminal 32770. [ 246.287730][ T4420] usb 5-1: USB disconnect, device number 42 [ 246.428572][ T5609] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 246.428625][ T5609] usb 2-1: MIDIStreaming interface descriptor not found [ 246.795185][ T5609] usb 2-1: USB disconnect, device number 41 [ 247.402485][ T5619] udevd[5619]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 247.589432][ T10] usb 1-1: USB disconnect, device number 42 [ 248.254242][ T10] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 248.394412][ T5609] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 248.480870][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 248.482871][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 248.482994][ T10] usb 4-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice=26.79 [ 248.973090][ T5609] usb 2-1: Using ep0 maxpacket: 16 [ 248.982728][ T5609] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 248.988850][ T10] usb 4-1: config 3 has an invalid interface number: 5 but max is 1 [ 248.988868][ T10] usb 4-1: config 3 has an invalid descriptor of length 196, skipping remainder of the config [ 248.988879][ T10] usb 4-1: config 3 has 1 interface, different from the descriptor's value: 2 [ 248.988891][ T10] usb 4-1: config 3 has no interface number 0 [ 248.988906][ T10] usb 4-1: too many endpoints for config 3 interface 5 altsetting 6: 49, using maximum allowed: 30 [ 248.988971][ T10] usb 4-1: config 3 interface 5 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 49 [ 248.988987][ T10] usb 4-1: config 3 interface 5 has no altsetting 0 [ 248.989555][ T5609] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.989584][ T5609] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.989606][ T5609] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 248.989695][ T5609] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.020106][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.020126][ T10] usb 4-1: Product: syz [ 249.020135][ T10] usb 4-1: Manufacturer: syz [ 249.020143][ T10] usb 4-1: SerialNumber: syz [ 249.021631][ T5609] usb 2-1: config 0 descriptor?? [ 249.953718][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 250.193721][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 250.213714][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 250.553725][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 250.573720][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 251.335349][ T5716] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 251.367405][ T5609] usbhid 2-1:0.0: can't add hid device: -71 [ 251.367502][ T5609] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 251.485106][ T5716] usb 1-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 251.487763][ T5716] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 251.487794][ T5716] usb 1-1: config 0 has no interface number 0 [ 251.487915][ T5716] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.487945][ T5716] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.487976][ T5716] usb 1-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 251.488129][ T5716] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.499362][ T5716] usb 1-1: config 0 descriptor?? [ 251.863346][ T5609] usb 2-1: USB disconnect, device number 42 [ 252.029557][ T5716] usbhid 1-1:0.1: can't add hid device: -71 [ 252.030009][ T5716] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 252.123985][ T5716] usb 1-1: USB disconnect, device number 43 [ 252.133567][ T10] msi2500 4-1:3.5: Registered as swradio24 [ 252.133589][ T10] msi2500 4-1:3.5: SDR API is still slightly experimental and functionality changes may follow [ 252.138052][ T10] usb 4-1: USB disconnect, device number 47 [ 252.378406][ T7712] FAULT_INJECTION: forcing a failure. [ 252.378406][ T7712] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.378447][ T7712] CPU: 0 UID: 0 PID: 7712 Comm: syz.2.492 Not tainted syzkaller #0 PREEMPT(full) [ 252.378472][ T7712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 252.378484][ T7712] Call Trace: [ 252.378491][ T7712] [ 252.378500][ T7712] dump_stack_lvl+0x100/0x190 [ 252.378535][ T7712] should_fail_ex.cold+0x5/0xa [ 252.378567][ T7712] _copy_from_user+0x2e/0xd0 [ 252.378598][ T7712] __sys_bpf+0x2f5/0x4a30 [ 252.378631][ T7712] ? __pfx___sys_bpf+0x10/0x10 [ 252.378651][ T7712] ? find_held_lock+0x2b/0x80 [ 252.378679][ T7712] ? futex_wake+0x4ea/0x5e0 [ 252.378720][ T7712] ? lockdep_hardirqs_on+0x7d/0x110 [ 252.378749][ T7712] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 252.378796][ T7712] ? __x64_sys_futex+0x34f/0x4d0 [ 252.378824][ T7712] ? __x64_sys_futex+0x358/0x4d0 [ 252.378856][ T7712] ? xfd_validate_state+0x129/0x190 [ 252.378883][ T7712] ? __x64_sys_bpf+0xce/0x140 [ 252.378904][ T7712] __x64_sys_bpf+0xce/0x140 [ 252.378928][ T7712] ? do_syscall_64+0xae/0x790 [ 252.378957][ T7712] do_syscall_64+0x123/0x790 [ 252.378988][ T7712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.379010][ T7712] RIP: 0033:0x7f5a5e79e2d9 [ 252.379027][ T7712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.379049][ T7712] RSP: 002b:00007f5a5f6e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 252.379070][ T7712] RAX: ffffffffffffffda RBX: 00007f5a5ea26090 RCX: 00007f5a5e79e2d9 [ 252.379085][ T7712] RDX: 0000000000000028 RSI: 0000200000000a80 RDI: 0000000000000012 [ 252.379099][ T7712] RBP: 00007f5a5e835888 R08: 0000000000000000 R09: 0000000000000000 [ 252.379113][ T7712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.379126][ T7712] R13: 00007f5a5ea26128 R14: 00007f5a5ea26090 R15: 00007ffdbf86b5d8 [ 252.379163][ T7712] [ 252.795352][ T5609] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 252.834018][ T10] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 252.944162][ T5609] usb 2-1: Using ep0 maxpacket: 8 [ 252.951016][ T5609] usb 2-1: unable to get BOS descriptor or descriptor too short [ 252.951185][ T5609] usb 2-1: New USB device found, idVendor=0e41, idProduct=4248, bcdDevice= 0.40 [ 252.986841][ T10] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 252.990753][ T10] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 252.990824][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 252.990855][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 252.990965][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 253.089614][ T10] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 253.089677][ T10] usb 4-1: Product: syz [ 253.089721][ T10] usb 4-1: Manufacturer: syz [ 253.094072][ T5609] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 253.192385][ T5609] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.192418][ T5609] usb 2-1: Product: syz [ 253.192458][ T5609] usb 2-1: Manufacturer: syz [ 253.192500][ T5609] usb 2-1: SerialNumber: syz [ 253.336114][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 253.336142][ T10] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 253.424052][ T31] audit: type=1400 audit(1791987540.820:378): avc: denied { create } for pid=7715 comm="syz.0.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 253.516860][ T5716] usb 4-1: USB disconnect, device number 48 [ 253.679255][ T7719] netlink: 12 bytes leftover after parsing attributes in process `syz.2.494'. [ 253.679520][ T7719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.494'. [ 253.741858][ T7720] Invalid ELF header magic: != ELF [ 253.895654][ T31] audit: type=1400 audit(1791987541.140:379): avc: denied { module_load } for pid=7715 comm="syz.0.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 254.060429][ T7719] netlink: 12 bytes leftover after parsing attributes in process `syz.2.494'. [ 254.344065][ T5716] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 254.410323][ T7730] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input22 [ 254.515952][ T5716] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 254.519293][ T5716] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 254.519353][ T5716] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 254.519382][ T5716] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 254.519557][ T5716] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 254.953026][ T5716] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 254.953091][ T5716] usb 4-1: Product: syz [ 255.067208][ T5716] usb 4-1: can't set config #1, error -71 [ 255.138190][ T5716] usb 4-1: USB disconnect, device number 49 [ 255.295839][ T5609] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 255.295893][ T5609] usb 2-1: MIDIStreaming interface descriptor not found [ 255.339196][ T5609] usb 2-1: USB disconnect, device number 43 [ 255.547127][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.547180][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.614247][ T5619] udevd[5619]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 256.336165][ T9] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 256.344283][ T5716] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 256.456696][ T7752] netlink: 14 bytes leftover after parsing attributes in process `syz.3.500'. [ 256.483900][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 256.484546][ T9] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 256.486166][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.491343][ T9] usb 5-1: config 0 descriptor?? [ 256.524291][ T9] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 256.528075][ T5716] usb 1-1: Using ep0 maxpacket: 8 [ 256.530220][ T5716] usb 1-1: unable to get BOS descriptor or descriptor too short [ 256.530265][ T5716] usb 1-1: New USB device found, idVendor=0e41, idProduct=4248, bcdDevice= 0.40 [ 256.531180][ T5716] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 256.539791][ T5716] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.539817][ T5716] usb 1-1: Product: syz [ 256.539831][ T5716] usb 1-1: Manufacturer: syz [ 256.539846][ T5716] usb 1-1: SerialNumber: syz [ 258.725819][ T5716] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 258.725866][ T5716] usb 1-1: MIDIStreaming interface descriptor not found [ 259.754867][ T9] gspca_nw80x: reg_w err -110 [ 259.754950][ T9] nw80x 5-1:0.0: probe with driver nw80x failed with error -110 [ 260.723038][ T9] usb 5-1: USB disconnect, device number 43 [ 260.768993][ T31] audit: type=1400 audit(1791987548.170:380): avc: denied { read write } for pid=7763 comm="syz.2.503" name="size" dev="configfs" ino=15266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 260.769043][ T31] audit: type=1400 audit(1791987548.170:381): avc: denied { open } for pid=7763 comm="syz.2.503" path="/93/config/nullb/nullb1/size" dev="configfs" ino=15266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 260.842454][ T7764] null_blk: nullb1: using native zone append [ 260.921831][ T5716] usb 1-1: USB disconnect, device number 44 [ 260.954326][ T31] audit: type=1400 audit(1791987548.360:382): avc: denied { ioctl } for pid=7763 comm="syz.2.503" path="/93/config/nullb/nullb1/power" dev="configfs" ino=15268 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 261.035512][ T7764] null_blk: disk nullb1 created [ 261.087338][ T5610] udevd[5610]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 261.252325][ T7779] lo speed is unknown, defaulting to 1000 [ 261.397554][ T5716] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 261.743843][ T5716] usb 1-1: Using ep0 maxpacket: 32 [ 261.753213][ T5716] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 261.792478][ T5716] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.792513][ T5716] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.959503][ T5716] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 261.959532][ T5716] usb 1-1: Product: syz [ 261.959547][ T5716] usb 1-1: Manufacturer: syz [ 262.175987][ T5716] hub 1-1:4.0: USB hub found [ 262.477249][ T5716] hub 1-1:4.0: config failed, can't read hub descriptor (err -22) [ 262.506468][ T5716] usb 1-1: USB disconnect, device number 45 [ 262.620920][ T7798] siw: device registration error -23 [ 262.763783][ T25] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 262.913886][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 262.973175][ T25] usb 5-1: unable to get BOS descriptor or descriptor too short [ 262.973219][ T25] usb 5-1: New USB device found, idVendor=0e41, idProduct=4248, bcdDevice= 0.40 [ 262.990980][ T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 262.992503][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.992518][ T25] usb 5-1: Product: syz [ 262.992526][ T25] usb 5-1: Manufacturer: syz [ 262.992535][ T25] usb 5-1: SerialNumber: syz [ 263.013703][ T9] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 263.128239][ T7800] netlink: 14 bytes leftover after parsing attributes in process `syz.1.512'. [ 263.183998][ T7802] netlink: 12 bytes leftover after parsing attributes in process `syz.1.513'. [ 263.184189][ T7802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.513'. [ 263.186310][ T7802] netlink: 12 bytes leftover after parsing attributes in process `syz.1.513'. [ 263.238726][ T9] usb 4-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=18.33 [ 263.240928][ T9] usb 4-1: config 255 has an invalid interface number: 34 but max is 0 [ 263.240954][ T9] usb 4-1: config 255 has no interface number 0 [ 263.240988][ T9] usb 4-1: config 255 interface 34 has no altsetting 0 [ 263.243281][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.243307][ T9] usb 4-1: Product: syz [ 263.243322][ T9] usb 4-1: Manufacturer: syz [ 263.243337][ T9] usb 4-1: SerialNumber: syz [ 263.249387][ T5716] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 263.403806][ T5716] usb 1-1: Using ep0 maxpacket: 32 [ 263.404528][ T5716] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 263.405428][ T5716] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.405477][ T5716] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.406991][ T5716] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 263.407014][ T5716] usb 1-1: Product: syz [ 263.407029][ T5716] usb 1-1: Manufacturer: syz [ 263.414655][ T5716] hub 1-1:4.0: USB hub found [ 263.493830][ T5609] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 263.533109][ T9] ipw 4-1:255.34: IPWireless converter converter detected [ 263.544964][ T9] usb 4-1: USB disconnect, device number 50 [ 263.546173][ T9] ipw 4-1:255.34: device disconnected [ 263.612948][ T5716] hub 1-1:4.0: 1 port detected [ 263.654388][ T5609] usb 2-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 263.655452][ T5609] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 263.655510][ T5609] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 263.657320][ T5609] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.657341][ T5609] usb 2-1: Product: syz [ 263.657356][ T5609] usb 2-1: Manufacturer: syz [ 263.657371][ T5609] usb 2-1: SerialNumber: syz [ 263.665167][ T5609] uvcvideo 2-1:1.0: Found UVC 1.00 device syz (046d:0821) [ 263.815771][ T5716] hub 1-1:4.0: config failed, can't get hub status (err -5) [ 263.869054][ T7802] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7802 comm=syz.1.513 [ 263.871080][ T5609] uvcvideo 2-1:1.0: Failed to query (GET_INFO) UVC control 1 on unit 3: -71 (exp. 1). [ 263.871179][ T5609] uvcvideo 2-1:1.0: No streaming interface found for terminal 32770. [ 263.891650][ T5609] usb 2-1: USB disconnect, device number 44 [ 264.572360][ T7808] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 264.577740][ T7808] netlink: 12 bytes leftover after parsing attributes in process `syz.3.515'. [ 265.323535][ T25] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 265.323571][ T25] usb 5-1: MIDIStreaming interface descriptor not found [ 265.444780][ T25] usb 5-1: USB disconnect, device number 44 [ 265.645118][ T31] audit: type=1800 audit(1791987553.010:383): pid=7815 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.517" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 266.046411][ T5709] usb 1-1: USB disconnect, device number 46 [ 266.120579][ T5610] udevd[5610]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 267.473776][ T5609] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 267.603380][ T7834] netlink: 14 bytes leftover after parsing attributes in process `syz.1.524'. [ 267.625982][ T5609] usb 5-1: unable to get BOS descriptor or descriptor too short [ 267.626588][ T5609] usb 5-1: not running at top speed; connect to a high speed hub [ 267.626618][ T5609] usb 5-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice=26.79 [ 267.627800][ T5609] usb 5-1: config 3 has an invalid interface number: 5 but max is 1 [ 267.627824][ T5609] usb 5-1: config 3 has an invalid descriptor of length 196, skipping remainder of the config [ 267.627847][ T5609] usb 5-1: config 3 has 1 interface, different from the descriptor's value: 2 [ 267.627868][ T5609] usb 5-1: config 3 has no interface number 0 [ 267.627895][ T5609] usb 5-1: too many endpoints for config 3 interface 5 altsetting 6: 49, using maximum allowed: 30 [ 267.627926][ T5609] usb 5-1: config 3 interface 5 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 49 [ 267.627952][ T5609] usb 5-1: config 3 interface 5 has no altsetting 0 [ 267.631364][ T5609] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.631390][ T5609] usb 5-1: Product: syz [ 267.631404][ T5609] usb 5-1: Manufacturer: syz [ 267.631419][ T5609] usb 5-1: SerialNumber: syz [ 267.825215][ T7837] netlink: 4 bytes leftover after parsing attributes in process `syz.1.525'. [ 267.848921][ T9] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 267.978825][ T7827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.997756][ T9] usb 1-1: New USB device found, idVendor=056a, idProduct=5012, bcdDevice= 0.00 [ 268.021799][ T7827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.023622][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 268.045459][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.058239][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.131520][ T9] usb 1-1: config 0 descriptor?? [ 268.314856][ T7827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.341721][ T7827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.635584][ T7827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.647491][ T7827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.763006][ T7827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.788977][ T7827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.937031][ T7839] FAULT_INJECTION: forcing a failure. [ 268.937031][ T7839] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 268.937055][ T7839] CPU: 0 UID: 0 PID: 7839 Comm: syz.3.516 Not tainted syzkaller #0 PREEMPT(full) [ 268.937069][ T7839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 268.937078][ T7839] Call Trace: [ 268.937083][ T7839] [ 268.937088][ T7839] dump_stack_lvl+0x100/0x190 [ 268.937110][ T7839] should_fail_ex.cold+0x5/0xa [ 268.937129][ T7839] _copy_from_user+0x2e/0xd0 [ 268.937147][ T7839] __sys_bpf+0x2f5/0x4a30 [ 268.937166][ T7839] ? __pfx___sys_bpf+0x10/0x10 [ 268.937178][ T7839] ? __pfx_futex_hash+0x10/0x10 [ 268.937193][ T7839] ? get_pid_task+0xfc/0x250 [ 268.937210][ T7839] ? get_pid_task+0xfc/0x250 [ 268.937232][ T7839] ? find_held_lock+0x2b/0x80 [ 268.937252][ T7839] ? rcu_read_lock_any_held+0x6a/0x90 [ 268.937269][ T7839] ? find_held_lock+0x2b/0x80 [ 268.937285][ T7839] ? ksys_write+0x190/0x250 [ 268.937299][ T7839] ? ksys_write+0x190/0x250 [ 268.937321][ T7839] ? __x64_sys_futex+0x34f/0x4d0 [ 268.937337][ T7839] ? __x64_sys_futex+0x358/0x4d0 [ 268.937354][ T7839] ? xfd_validate_state+0x129/0x190 [ 268.937369][ T7839] ? __x64_sys_bpf+0xce/0x140 [ 268.937380][ T7839] __x64_sys_bpf+0xce/0x140 [ 268.937394][ T7839] ? do_syscall_64+0xae/0x790 [ 268.937411][ T7839] do_syscall_64+0x123/0x790 [ 268.937432][ T7839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.937447][ T7839] RIP: 0033:0x7feca199e2d9 [ 268.937457][ T7839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.937469][ T7839] RSP: 002b:00007feca286a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 268.937482][ T7839] RAX: ffffffffffffffda RBX: 00007feca1c25fa0 RCX: 00007feca199e2d9 [ 268.937490][ T7839] RDX: 0000000000000028 RSI: 0000200000000a80 RDI: 0000000000000012 [ 268.937496][ T7839] RBP: 00007feca1a35888 R08: 0000000000000000 R09: 0000000000000000 [ 268.937503][ T7839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.937510][ T7839] R13: 00007feca1c26038 R14: 00007feca1c25fa0 R15: 00007ffdec9a8eb8 [ 268.937525][ T7839] [ 269.168885][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 269.168977][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 269.171891][ T9] usb 1-1: USB disconnect, device number 47 [ 269.229228][ T5609] msi2500 5-1:3.5: Registered as swradio24 [ 269.229250][ T5609] msi2500 5-1:3.5: SDR API is still slightly experimental and functionality changes may follow [ 269.236395][ T5609] usb 5-1: USB disconnect, device number 45 [ 269.504117][ T983] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 269.694292][ T983] usb 2-1: Using ep0 maxpacket: 32 [ 269.697664][ T983] usb 2-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 269.732864][ T983] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.732993][ T983] usb 2-1: Product: syz [ 269.733077][ T983] usb 2-1: Manufacturer: syz [ 269.733159][ T983] usb 2-1: SerialNumber: syz [ 270.089546][ T983] usb 2-1: failed waiting for Axe-Fx III to boot: -71 [ 270.089577][ T983] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 270.105492][ T983] usb 2-1: USB disconnect, device number 45 [ 270.109747][ T5609] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 270.723189][ T7857] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 270.731777][ T7857] netlink: 12 bytes leftover after parsing attributes in process `syz.3.531'. [ 271.286547][ T5609] usb 5-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 271.287566][ T5609] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 271.287595][ T5609] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 271.287632][ T5609] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.289261][ T5709] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 271.300255][ T5609] usb 5-1: config 0 descriptor?? [ 271.503745][ T5709] usb 1-1: Using ep0 maxpacket: 32 [ 271.504400][ T5709] usb 1-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 271.510495][ T5709] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.510521][ T5709] usb 1-1: Product: syz [ 271.510530][ T5709] usb 1-1: Manufacturer: syz [ 271.510538][ T5709] usb 1-1: SerialNumber: syz [ 271.561920][ T7849] netlink: 28 bytes leftover after parsing attributes in process `syz.4.528'. [ 271.757317][ T5709] usb 1-1: failed waiting for Axe-Fx III to boot: -71 [ 271.757348][ T5709] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 271.794588][ T5709] usb 1-1: USB disconnect, device number 48 [ 271.839157][ T7865] netlink: 12 bytes leftover after parsing attributes in process `syz.3.532'. [ 271.839303][ T7865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.532'. [ 271.840706][ T7865] netlink: 12 bytes leftover after parsing attributes in process `syz.3.532'. [ 272.083826][ T10] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 272.091831][ T5609] usb 5-1: string descriptor 0 read error: -71 [ 272.113197][ T5609] usbhid 5-1:0.0: can't add hid device: -71 [ 272.113292][ T5609] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 272.120433][ T5609] usb 5-1: USB disconnect, device number 46 [ 272.153175][ T7867] bond1: entered allmulticast mode [ 272.153483][ T7867] 8021q: adding VLAN 0 to HW filter on device bond1 [ 272.201902][ T7867] netlink: 14 bytes leftover after parsing attributes in process `syz.4.535'. [ 272.237999][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 272.239571][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 272.239636][ T10] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 272.241476][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.241500][ T10] usb 4-1: Product: syz [ 272.241515][ T10] usb 4-1: Manufacturer: syz [ 272.241530][ T10] usb 4-1: SerialNumber: syz [ 272.260131][ T10] uvcvideo 4-1:1.0: Found UVC 1.00 device syz (046d:0821) [ 272.572744][ T7865] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7865 comm=syz.3.532 [ 273.377362][ T10] uvcvideo 4-1:1.0: Failed to query (GET_INFO) UVC control 1 on unit 3: -71 (exp. 1). [ 273.377468][ T10] uvcvideo 4-1:1.0: No streaming interface found for terminal 32770. [ 273.608985][ T10] usb 4-1: USB disconnect, device number 51 [ 273.794948][ T7879] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input23 [ 273.841742][ T7880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.538'. [ 274.528617][ T7883] netlink: 'syz.4.539': attribute type 1 has an invalid length. [ 274.528641][ T7883] netlink: 12 bytes leftover after parsing attributes in process `syz.4.539'. [ 274.770208][ T7888] siw: device registration error -23 [ 275.446539][ T7901] FAULT_INJECTION: forcing a failure. [ 275.446539][ T7901] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 275.446598][ T7901] CPU: 0 UID: 0 PID: 7901 Comm: syz.1.542 Not tainted syzkaller #0 PREEMPT(full) [ 275.446623][ T7901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 275.446635][ T7901] Call Trace: [ 275.446643][ T7901] [ 275.446653][ T7901] dump_stack_lvl+0x100/0x190 [ 275.446691][ T7901] should_fail_ex.cold+0x5/0xa [ 275.446722][ T7901] _copy_from_user+0x2e/0xd0 [ 275.446752][ T7901] __sys_bpf+0x2f5/0x4a30 [ 275.446784][ T7901] ? __pfx___sys_bpf+0x10/0x10 [ 275.446804][ T7901] ? __pfx_futex_hash+0x10/0x10 [ 275.446833][ T7901] ? rcu_is_watching+0x13/0xc0 [ 275.446864][ T7901] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 275.446912][ T7901] ? ksys_write+0x190/0x250 [ 275.446937][ T7901] ? ksys_write+0x190/0x250 [ 275.446979][ T7901] ? __x64_sys_futex+0x34f/0x4d0 [ 275.447007][ T7901] ? __x64_sys_futex+0x358/0x4d0 [ 275.447039][ T7901] ? xfd_validate_state+0x129/0x190 [ 275.447066][ T7901] ? __x64_sys_bpf+0xce/0x140 [ 275.447089][ T7901] __x64_sys_bpf+0xce/0x140 [ 275.447113][ T7901] ? do_syscall_64+0xae/0x790 [ 275.447142][ T7901] do_syscall_64+0x123/0x790 [ 275.447175][ T7901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.447198][ T7901] RIP: 0033:0x7f93b1d9e2d9 [ 275.447216][ T7901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.447236][ T7901] RSP: 002b:00007f93b2cea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 275.447256][ T7901] RAX: ffffffffffffffda RBX: 00007f93b2026090 RCX: 00007f93b1d9e2d9 [ 275.447271][ T7901] RDX: 0000000000000028 RSI: 0000200000000a80 RDI: 0000000000000012 [ 275.447285][ T7901] RBP: 00007f93b1e35888 R08: 0000000000000000 R09: 0000000000000000 [ 275.447299][ T7901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.447318][ T7901] R13: 00007f93b2026128 R14: 00007f93b2026090 R15: 00007ffd486c0f28 [ 275.447350][ T7901] [ 275.715194][ T5709] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 276.435843][ T32] INFO: task kworker/0:5:5617 blocked for more than 143 seconds. [ 276.435873][ T32] Not tainted syzkaller #0 [ 276.435908][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 276.435943][ T32] task:kworker/0:5 state:D stack:20888 pid:5617 tgid:5617 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 276.436230][ T32] Workqueue: events_freezable mmc_rescan [ 276.436322][ T32] Call Trace: [ 276.436358][ T32] [ 276.436402][ T32] __schedule+0x1259/0x6920 [ 276.436486][ T32] ? lock_acquire+0x1d1/0x380 [ 276.436574][ T32] ? mark_held_locks+0x40/0x70 [ 276.436605][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 276.436635][ T32] ? lockdep_hardirqs_on+0x7d/0x110 [ 276.436678][ T32] ? __pfx___schedule+0x10/0x10 [ 276.436730][ T32] ? find_held_lock+0x2b/0x80 [ 276.436764][ T32] ? schedule+0x225/0x2c0 [ 276.436800][ T32] schedule+0xdd/0x2c0 [ 276.436892][ T32] schedule_timeout+0x1b2/0x280 [ 276.436924][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 276.436966][ T32] ? mark_held_locks+0x40/0x70 [ 276.437048][ T32] __wait_for_common+0x2e7/0x4c0 [ 276.437081][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 276.437172][ T32] ? __pfx___wait_for_common+0x10/0x10 [ 276.437206][ T32] ? led_trigger_event+0x61/0x270 [ 276.437248][ T32] mmc_wait_for_req_done+0xcd/0x3d0 [ 276.437334][ T32] mmc_wait_for_req+0x207/0x2c0 [ 276.437366][ T32] mmc_wait_for_cmd+0x154/0x200 [ 276.437456][ T32] ? __pfx_mmc_wait_for_cmd+0x10/0x10 [ 276.437537][ T32] ? __pfx_mmc_wait_done+0x10/0x10 [ 276.437612][ T32] ? __pfx_usleep_range_state+0x10/0x10 [ 276.934410][ T32] ? vub300_mmc_set_ios+0x1b0/0x8d0 [ 276.934454][ T32] mmc_send_if_cond_pcie+0x144/0x370 [ 276.934479][ T32] ? __pfx_mmc_send_if_cond_pcie+0x10/0x10 [ 276.934500][ T32] ? __pfx_mmc_go_idle+0x10/0x10 [ 276.934524][ T32] ? mmc_sw_reset+0x38/0xd0 [ 276.934552][ T32] ? mmc_attach_sd_uhs2+0x2d0/0x590 [ 276.934572][ T32] ? reacquire_held_locks+0xdd/0x1f0 [ 276.934602][ T32] mmc_rescan+0xbf3/0x11c0 [ 276.934644][ T32] process_one_work+0xac7/0x1b10 [ 276.934686][ T32] ? __pfx_process_one_work+0x10/0x10 [ 276.934717][ T32] ? lock_acquire+0x1d1/0x380 [ 276.934748][ T32] ? __pfx_mmc_rescan+0x10/0x10 [ 276.934777][ T32] worker_thread+0x5ef/0xe50 [ 276.934805][ T32] ? __pfx_worker_thread+0x10/0x10 [ 276.934826][ T32] ? kthread+0x13a/0x450 [ 276.934850][ T32] ? __pfx_worker_thread+0x10/0x10 [ 276.934868][ T32] kthread+0x373/0x450 [ 276.934893][ T32] ? __pfx_kthread+0x10/0x10 [ 276.934922][ T32] ret_from_fork+0x730/0xd60 [ 276.934946][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 276.934971][ T32] ? __switch_to+0x800/0x10f0 [ 276.935009][ T32] ? __pfx_kthread+0x10/0x10 [ 276.935037][ T32] ret_from_fork_asm+0x1a/0x30 [ 276.935076][ T32] [ 276.935111][ T32] INFO: task kworker/0:6:5723 blocked for more than 144 seconds. [ 276.935127][ T32] Not tainted syzkaller #0 [ 276.935137][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 276.935145][ T32] task:kworker/0:6 state:D stack:26408 pid:5723 tgid:5723 ppid:2 task_flags:0x4288060 flags:0x00080000 [ 276.935209][ T32] Workqueue: usb_hub_wq hub_event [ 276.935229][ T32] Call Trace: [ 276.935235][ T32] [ 276.935247][ T32] __schedule+0x1259/0x6920 [ 276.935272][ T32] ? lock_acquire+0x1d1/0x380 [ 276.935300][ T32] ? mark_held_locks+0x40/0x70 [ 276.935384][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 276.935444][ T32] ? lockdep_hardirqs_on+0x7d/0x110 [ 276.935481][ T32] ? __pfx___schedule+0x10/0x10 [ 276.935511][ T32] ? find_held_lock+0x2b/0x80 [ 276.935545][ T32] ? schedule+0x225/0x2c0 [ 276.935610][ T32] schedule+0xdd/0x2c0 [ 276.935658][ T32] schedule_timeout+0x1b2/0x280 [ 276.935690][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 276.935822][ T32] ? mark_held_locks+0x40/0x70 [ 276.935910][ T32] __wait_for_common+0x2e7/0x4c0 [ 276.935978][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 277.295267][ T5709] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 277.424435][ T32] ? __pfx___wait_for_common+0x10/0x10 [ 277.424479][ T32] ? __flush_work+0x4ca/0xcb0 [ 277.424510][ T32] ? find_held_lock+0x2b/0x80 [ 277.424543][ T32] ? __flush_work+0x928/0xcb0 [ 277.424601][ T32] ? __flush_work+0x928/0xcb0 [ 277.424636][ T32] ? __flush_work+0x4ca/0xcb0 [ 277.424665][ T32] __flush_work+0x7c7/0xcb0 [ 277.424713][ T32] ? __timer_delete+0x31/0x1b0 [ 277.424762][ T32] ? __pfx___flush_work+0x10/0x10 [ 277.424794][ T32] ? __pfx_wq_barrier_func+0x10/0x10 [ 277.424917][ T32] ? __pfx___might_resched+0x10/0x10 [ 277.424984][ T32] cancel_delayed_work_sync+0xd1/0xf0 [ 277.425040][ T32] mmc_stop_host+0xe9/0x400 [ 277.425075][ T32] mmc_remove_host+0x15/0x60 [ 277.425107][ T32] vub300_disconnect+0x12d/0x170 [ 277.425170][ T32] usb_unbind_interface+0x1dd/0x9e0 [ 277.425237][ T32] ? __pfx_usb_unbind_interface+0x10/0x10 [ 277.425270][ T32] device_remove+0x12a/0x180 [ 277.425325][ T32] device_release_driver_internal+0x44e/0x620 [ 277.425389][ T32] bus_remove_device+0x2bc/0x560 [ 277.425450][ T32] ? __pfx_bus_remove_device+0x10/0x10 [ 277.425483][ T32] ? __pfx_device_remove_attrs+0x10/0x10 [ 277.425555][ T32] device_del+0x376/0x9b0 [ 277.425648][ T32] ? __pfx_device_del+0x10/0x10 [ 277.425678][ T32] ? kobject_put+0xb9/0x640 [ 277.425813][ T32] usb_disable_device+0x367/0x810 [ 277.425908][ T32] usb_disconnect+0x2e2/0x9a0 [ 277.425971][ T32] hub_event+0x1bb1/0x4420 [ 277.426102][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 277.426191][ T32] ? __pfx_hub_event+0x10/0x10 [ 277.426223][ T32] ? lock_sequence+0xb0/0x110 [ 277.426263][ T32] ? lock_acquire+0x1d1/0x380 [ 277.426314][ T32] ? process_one_work+0xa2c/0x1b10 [ 277.426350][ T32] ? process_one_work+0x906/0x1b10 [ 277.426440][ T32] ? process_one_work+0x906/0x1b10 [ 277.516173][ T32] process_one_work+0xac7/0x1b10 [ 277.516344][ T32] ? __pfx_process_one_work+0x10/0x10 [ 277.516448][ T32] ? lock_acquire+0x1d1/0x380 [ 277.516701][ T32] ? __pfx_hub_event+0x10/0x10 [ 277.516736][ T32] worker_thread+0x5ef/0xe50 [ 277.516881][ T32] ? __pfx_worker_thread+0x10/0x10 [ 277.516989][ T32] ? kthread+0x13a/0x450 [ 277.517062][ T32] ? __pfx_worker_thread+0x10/0x10 [ 277.517131][ T32] kthread+0x373/0x450 [ 277.520418][ T32] ? __pfx_kthread+0x10/0x10 [ 277.539711][ T32] ret_from_fork+0x730/0xd60 [ 277.570005][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 277.570040][ T32] ? __switch_to+0x800/0x10f0 [ 277.570069][ T32] ? __pfx_kthread+0x10/0x10 [ 277.570123][ T32] ret_from_fork_asm+0x1a/0x30 [ 277.570161][ T32] [ 277.830727][ T32] [ 277.830727][ T32] Showing all locks held in the system: [ 277.830843][ T32] locks held by pr/ttyS0/16: 1, last CPU#0: [ 277.830885][ T32] #0: ffffffff8fdd88f8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x49/0x60 [ 277.831098][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 277.831138][ T32] #0: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 277.831329][ T32] locks held by kworker/u8:4/59: 4, last CPU#1: [ 277.831402][ T32] #0: ffff8880360cd140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 278.566428][ T32] #1: ffffc9000201fd08 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 278.566503][ T32] #2: ffffffff8fc7cb50 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_disable+0x12/0x20 [ 278.566550][ T32] #3: ffffffff8ff414a0 (jump_label_mutex){+.+.}-{4:4}, at: static_key_disable_cpuslocked+0x110/0x1c0 [ 278.566622][ T32] locks held by kworker/1:2/983: 1, last CPU#1: [ 278.566637][ T32] #0: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: process_one_work+0x880/0x1b10 [ 278.566692][ T32] locks held by kworker/1:1H/2064: 2, last CPU#1: [ 278.566705][ T32] #0: ffff88801d05ad40 ((wq_completion)events_highpri){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 278.566776][ T32] #1: ffffc9000666fd08 ((work_completion)(&vmidi->output_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 278.566828][ T32] locks held by kworker/0:1H/2096: 2, last CPU#0: [ 278.566841][ T32] #0: ffff88801d05ad40 ((wq_completion)events_highpri){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 278.566911][ T32] #1: ffffc9000670fd08 ((work_completion)(&vmidi->output_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 278.566979][ T32] locks held by getty/5361: 2, on CPU#0: [ 278.567010][ T32] #0: ffff88801e3f80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 278.567060][ T32] #1: ffffc9000323b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 278.567108][ T32] locks held by syz-executor/5607: 4, last CPU#1: [ 278.567121][ T32] #0: ffffffff8ff3de50 (dup_mmap_sem){.+.+}-{0:0}, at: copy_process+0x4816/0x8380 [ 278.567186][ T32] #1: ffff88802ceaf180 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x127/0x2370 [ 278.567238][ T32] #2: ffff8880377a8340 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x1c9/0x2370 [ 278.567311][ T32] #3: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 278.567359][ T32] locks held by kworker/0:4/5609: 1, last CPU#0: [ 278.567373][ T32] #0: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: process_one_work+0x880/0x1b10 [ 278.567447][ T32] locks held by kworker/0:5/5617: 2, on CPU#0: [ 278.567461][ T32] #0: ffff88801d05a140 ((wq_completion)events_freezable){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 278.567514][ T32] #1: ffffc90004287d08 ((work_completion)(&(&host->detect)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 278.567593][ T32] locks held by kworker/1:3/5709: 3, on CPU#1: [ 278.567606][ T32] #0: ffff888022ee1540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 278.567660][ T32] #1: ffffc90004477d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 278.567730][ T32] #2: ffff88802bfaf1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 278.567777][ T32] locks held by kworker/0:6/5723: 5, on CPU#0: [ 278.567790][ T32] #0: ffff888022ee1540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 278.567843][ T32] #1: ffffc900044f7d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 278.692152][ T32] #2: ffff88802c0d31d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 278.692433][ T32] #3: ffff888055da91d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0x10a/0x9a0 [ 278.692650][ T32] #4: ffff88801d7ea1a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 278.692931][ T32] locks held by syz.0.540/7885: 1, last CPU#1: [ 278.693001][ T32] #0: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: futex_unqueue+0x29/0x2c0 [ 278.693132][ T32] locks held by syz.2.544/7893: 2, on CPU#1: [ 278.693145][ T32] #0: ffffffff91bbdb80 (register_mutex#4){+.+.}-{4:4}, at: odev_release+0x44/0x70 [ 278.693192][ T32] #1: ffffffff8fdf84e8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 278.693238][ T32] locks held by syz.1.542/7894: 2, last CPU#1: [ 278.693270][ T32] #0: ffff8880579b0240 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 278.693317][ T32] #1: ffff888036860b20 (sk_lock-AF_VSOCK){+.+.}-{0:0}, at: __vsock_release+0x26/0x600 [ 278.693361][ T32] locks held by syz.1.542/7896: 2, on CPU#1: [ 278.693373][ T32] #0: ffff8880356c0160 (&rmidi->open_mutex){+.+.}-{4:4}, at: snd_rawmidi_release+0x66/0x110 [ 278.693446][ T32] #1: ffffffff8fdf84e8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 278.693490][ T32] locks held by syz.4.543/7904: 1, last CPU#1: [ 278.693504][ T32] #0: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 278.693576][ T32] [ 278.693580][ T32] ============================================= [ 278.693580][ T32] [ 278.693607][ T32] NMI backtrace for cpu 1 [ 278.693619][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 278.693641][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 278.693655][ T32] Call Trace: [ 278.693661][ T32] [ 278.693668][ T32] dump_stack_lvl+0x100/0x190 [ 278.693694][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 278.693722][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 278.693744][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 278.693770][ T32] sys_info+0x141/0x190 [ 278.693790][ T32] watchdog+0xcb1/0x1030 [ 278.693820][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 278.693845][ T32] ? __pfx_watchdog+0x10/0x10 [ 278.693870][ T32] ? __kthread_parkme+0x18f/0x230 [ 278.693896][ T32] ? kthread+0x13a/0x450 [ 278.693920][ T32] ? __pfx_watchdog+0x10/0x10 [ 278.693940][ T32] kthread+0x373/0x450 [ 278.693965][ T32] ? __pfx_kthread+0x10/0x10 [ 278.693992][ T32] ret_from_fork+0x730/0xd60 [ 278.694016][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 278.694040][ T32] ? __switch_to+0x800/0x10f0 [ 278.694066][ T32] ? __pfx_kthread+0x10/0x10 [ 278.694094][ T32] ret_from_fork_asm+0x1a/0x30 [ 278.694130][ T32] [ 278.694246][ T32] Sending NMI from CPU 1 to CPUs 0: [ 278.694274][ C0] NMI backtrace for cpu 0 [ 278.694285][ C0] CPU: 0 UID: 0 PID: 5610 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 278.694305][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 278.694316][ C0] RIP: 0010:check_preemption_disabled+0x3/0xe0 [ 278.694343][ C0] Code: 65 8b 05 a4 58 b9 09 85 c0 74 04 90 0f 0b 90 e9 53 fc ff ff 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 54 55 <53> 48 83 ec 08 65 8b 15 69 16 b9 09 65 8b 2d 72 16 b9 09 85 d2 74 [ 278.694359][ C0] RSP: 0018:ffffc90003087380 EFLAGS: 00000046 [ 278.694373][ C0] RAX: 0000000000000001 RBX: ffffffff8fdec5e0 RCX: 0000000000000001 [ 278.694385][ C0] RDX: 0000000000000001 RSI: ffffffff8e3bd2b4 RDI: ffffffff8c625580 [ 278.694395][ C0] RBP: ffff888076f84b00 R08: 0000000000000006 R09: 0000000000001000 [ 278.694406][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 00000000ffffffff [ 278.694416][ C0] R13: 0000000000000246 R14: ffff888076f856d8 R15: 0000000000000001 [ 278.694427][ C0] FS: 00007f46fdbe9880(0000) GS:ffff888122946000(0000) knlGS:0000000000000000 [ 278.694444][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 278.694456][ C0] CR2: 000055e05b8b9ff0 CR3: 000000005bc76000 CR4: 00000000003526f0 [ 278.694467][ C0] Call Trace: [ 278.694472][ C0] [ 278.694478][ C0] lock_is_held_type+0xca/0x140 [ 278.694505][ C0] lookup_page_ext+0x6e/0x100 [ 278.694531][ C0] page_table_check_clear+0x189/0x540 [ 278.694554][ C0] ? folio_mark_accessed+0xf3/0x1040 [ 278.694571][ C0] ? vm_normal_page+0x1d1/0x380 [ 278.694593][ C0] __page_table_check_pte_clear+0x10f/0x120 [ 278.694618][ C0] ? __pfx___page_table_check_pte_clear+0x10/0x10 [ 278.694642][ C0] ? folio_remove_rmap_ptes+0x7e0/0xdd0 [ 278.694660][ C0] ? __tlb_remove_folio_pages_size.isra.0+0x153/0x550 [ 278.694689][ C0] __zap_vma_range+0x2640/0x48e0 [ 278.694721][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 278.694744][ C0] ? lock_acquire+0x1d1/0x380 [ 278.694763][ C0] ? unmap_vmas+0x1ca/0x5f0 [ 278.694784][ C0] ? find_held_lock+0x2b/0x80 [ 278.694809][ C0] ? unmap_vmas+0x239/0x5f0 [ 278.694832][ C0] unmap_vmas+0x299/0x5f0 [ 278.694854][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 278.694874][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 278.694898][ C0] ? reacquire_held_locks+0xdd/0x1f0 [ 278.694923][ C0] ? vms_complete_munmap_vmas+0x946/0xdd0 [ 278.694945][ C0] unmap_region+0x1bc/0x3b0 [ 278.694962][ C0] ? __pfx_unmap_region+0x10/0x10 [ 278.694983][ C0] ? mas_nomem+0x49/0xb00 [ 278.695001][ C0] vms_complete_munmap_vmas+0xa4b/0xdd0 [ 278.695022][ C0] ? __pfx_vms_complete_munmap_vmas+0x10/0x10 [ 278.695044][ C0] ? rcu_read_unlock+0x2d/0xb0 [ 278.695060][ C0] ? rcu_read_unlock+0x2d/0xb0 [ 278.695080][ C0] do_vmi_align_munmap+0x44f/0x5f0 [ 278.695100][ C0] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 278.695122][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 278.695150][ C0] ? mas_walk+0x260/0x310 [ 278.695174][ C0] do_vmi_munmap+0x1f8/0x3e0 [ 278.695194][ C0] __vm_munmap+0x196/0x390 [ 278.695214][ C0] ? __pfx___vm_munmap+0x10/0x10 [ 278.695233][ C0] ? count_memcg_events_mm.constprop.0+0x109/0x2a0 [ 278.695262][ C0] __x64_sys_munmap+0x59/0x80 [ 278.695284][ C0] do_syscall_64+0x123/0x790 [ 278.695307][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.695325][ C0] RIP: 0033:0x7f46fd51e097 [ 278.695340][ C0] Code: 73 01 c3 48 8b 0d 61 2d 0d 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 31 2d 0d 00 f7 d8 64 89 01 48 [ 278.695355][ C0] RSP: 002b:00007ffef864d478 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 278.695370][ C0] RAX: ffffffffffffffda RBX: 000055e05b68df90 RCX: 00007f46fd51e097 [ 278.695381][ C0] RDX: 0000000000000000 RSI: 00000000009480e8 RDI: 00007f46fc800000 [ 278.695392][ C0] RBP: 000055e05b68b2c0 R08: 000055e05b8cb660 R09: 0000000000000006 [ 278.695402][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 000055e0216a4588 [ 278.695412][ C0] R13: 00007ffef864d500 R14: 0000000000000000 R15: 0000000000000000 [ 278.695429][ C0] [ 278.712772][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 279.955994][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 279.965095][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 279.975142][ T32] Call Trace: [ 279.978413][ T32] [ 279.981328][ T32] dump_stack_lvl+0x100/0x190 [ 279.985999][ T32] vpanic+0x553/0x970 [ 279.989962][ T32] ? __pfx_vpanic+0x10/0x10 [ 279.994448][ T32] ? irqentry_exit+0x24d/0xa10 [ 279.999197][ T32] ? lockdep_hardirqs_on+0x7d/0x110 [ 280.004384][ T32] panic+0xd1/0xe0 [ 280.008087][ T32] ? __pfx_panic+0x10/0x10 [ 280.012488][ T32] ? watchdog.cold+0x1ec/0x234 [ 280.017242][ T32] watchdog.cold+0x1fd/0x234 [ 280.021821][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 280.027620][ T32] ? __pfx_watchdog+0x10/0x10 [ 280.032288][ T32] ? __kthread_parkme+0x18f/0x230 [ 280.037300][ T32] ? kthread+0x13a/0x450 [ 280.041530][ T32] ? __pfx_watchdog+0x10/0x10 [ 280.046190][ T32] kthread+0x373/0x450 [ 280.050246][ T32] ? __pfx_kthread+0x10/0x10 [ 280.054824][ T32] ret_from_fork+0x730/0xd60 [ 280.059399][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 280.064494][ T32] ? __switch_to+0x800/0x10f0 [ 280.069160][ T32] ? __pfx_kthread+0x10/0x10 [ 280.073743][ T32] ret_from_fork_asm+0x1a/0x30 [ 280.078503][ T32] [ 280.081726][ T32] Kernel Offset: disabled [ 280.086047][ T32] Rebooting in 86400 seconds..