last executing test programs: 12.684220399s ago: executing program 1 (id=1144): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b2100"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x44800) (fail_nth: 7) 10.065250814s ago: executing program 4 (id=1151): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x102080, 0x0) r1 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000085826d20ffd56600b0d8000000010902290001000000000904000000e0010300052406"], 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r2, 0x4068aea3, &(0x7f0000000280)={0xd5, 0x0, 0x14}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) r4 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f00003e9000/0x3000)=nil, 0x3000, 0x100000e, 0x12, r4, 0x100000000) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000140)={0x7, 0x0, [{0x1, 0x3, 0x1, 0x8, 0x8, 0x1, 0xf8aa}, {0x80000001, 0xffffffff, 0x4, 0x948, 0x7, 0x0, 0x1}, {0x2, 0x7d73, 0x7, 0x5, 0x7, 0x8, 0x3}, {0x1, 0x306d, 0x0, 0x7ff, 0x80, 0xffffffff, 0x8}, {0xc0000000, 0xfffff801, 0x5, 0x4, 0x6, 0x0, 0x4}, {0xc0000001, 0x4, 0x2, 0xfffffff6, 0x7, 0x8, 0xc2c6}, {0xb, 0xd4, 0x0, 0x0, 0xff, 0xc175, 0x100}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRESOCT=0x0, @ANYRESOCT, @ANYRESHEX=r1]) 8.878375553s ago: executing program 1 (id=1153): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x23c800, 0x100, 0x23}, 0x18) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000100)='./file0\x00') (async, rerun: 32) r1 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r1, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) mount(&(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ufs\x00', 0x2208004, 0x0) (async, rerun: 32) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="400000001000030400000000fcdbdf2500007400", @ANYRES32=0x0, @ANYBLOB="101800000750050020800b0001006272696467650000100002800c0023000500"/43], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) (rerun: 32) 8.385385555s ago: executing program 3 (id=1155): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0xe8f, 0x12, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x1, "ed"}, @global=@item_4={0x3, 0x1, 0x2, "2a9aad4f"}]}}, 0x0}, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000000c0)={0x40, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f00000004c0)={0x20, 0x16, 0x4, "fe211774"}, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000007c0)={0x2c, &(0x7f0000000600)={0x0, 0xf, 0x4, "3857ee75"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000000f40)={0x1c, &(0x7f0000000a80)={0x40, 0xf, 0x4, "68ae5e08"}, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000d80)={0x44, &(0x7f0000000c00)={0x20, 0x15, 0x4, "a547b314"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, &(0x7f00000001c0)={0x14, &(0x7f0000000100)={0x20, 0x3c, 0x8d, {0x8d, 0x6, "1bf8311a9f9e0b5eb6cd682ab83ad81fc141af3c63028aff6786f362e14b5a74838d53d04534408ef76237cf020a2a71d855fb06b2916f8b1c486cb5c6741725c91875cb4fae04708b6800dec570709cfe376a8a7c85c6eaeba45cd9c91f741c9397cadb92ee51779f34da88823faff45688f987365f5e5e1eb2a1e6e16a8475ffab66ccf58611d9b0c840"}}, &(0x7f0000000080)={0x0, 0x3, 0x25, @string={0x25, 0x3, "709c1ad13dc140b5be045d84f5389c1d7cbbf0e5fb4eda2cfec3fd64eeb5c0b8e0681d"}}}, &(0x7f0000000380)={0x34, &(0x7f0000000200)={0x40, 0x15, 0x33, "e21f965f7d2d33f6c43cf738d892ee5fc7d2da78c2b738b4709d9d296f82b3c4d9bcc640c66e4263c825c4bfa7c74657fd6e65"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000280)={0x0, 0x8, 0x1}, &(0x7f00000002c0)={0xc0, 0xa1, 0x4, 0x200}, &(0x7f0000000300)={0x40, 0xa0, 0x4, 0x1}, &(0x7f0000000340)={0xc0, 0xa2, 0x2f, "280089466cff0dcb54333285f87afbac931e7c0a158e0a8f4a74608d8f6f8d97a03a4483fe01f2750391a26f613ee1"}}) r2 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000400)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x60b, 0x700a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xc, 0xf0, 0xf7, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x3, 0x8, {0x9, 0x21, 0x6, 0xb, 0x1, {0x22, 0x6c7}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xe, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x6, 0x9, 0x8}}]}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x300, 0x3, 0x0, 0x75, 0x8}, 0xc, &(0x7f0000000480)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0x2, 0x200}]}, 0x1, [{0x44, &(0x7f0000000500)=@string={0x44, 0x3, "b886e18fd95127e311a10e6a61c0b843dac38306e60a5aaa760a3ae4b92596c4b7a8852c277ab78bf87730508975b1530679d254c853256c3a48072fd0c56a086b2f"}}]}) syz_usb_control_io$hid(r2, &(0x7f0000000840)={0x24, &(0x7f0000000640)={0x20, 0x22, 0x25, {0x25, 0x3, "c16f3af5e75d933cf992b53554f5054aaaf602286cd6d2c6f635b5a7f6abad1be8258a"}}, &(0x7f0000000680)={0x0, 0x3, 0x74, @string={0x74, 0x3, "abfd786cc9312e93fd290d5b7d1f0015d6e1f32b1c6f7cc12ca65a70e16833702ca4ecfc0e84b9aa9925e4453451e160cc3d2becc09ef1963751f4274fd7ce097c60d6a8e87c55b22c96f7955a8cd4433a297c7cf94033274e5fd12303a9b2ae08bbab3b4ed98d14d1799cb191b6dd6b0dae"}}, &(0x7f0000000700)={0x0, 0x22, 0x14, {[@global=@item_4={0x3, 0x1, 0x5, "a4c2d705"}, @main=@item_012={0x1, 0x0, 0x1, "aa"}, @main=@item_012={0x0, 0x0, 0x8}, @main=@item_4={0x3, 0x0, 0xb, "fba7a2e8"}, @local=@item_4={0x3, 0x2, 0x2, "b0554ded"}, @global=@item_012={0x0, 0x1, 0x4}, @main=@item_012={0x0, 0x0, 0x8}]}}, &(0x7f0000000800)={0x0, 0x21, 0x9, {0x9, 0x21, 0xfeff, 0x8, 0x1, {0x22, 0x3bb}}}}, &(0x7f0000000a40)={0x2c, &(0x7f0000000880)={0x0, 0x0, 0x25, "e69775abe9d7a02fa20ce7b9ee13d4cda0e1ee0ebf04b63c0108dd97a809f1249c00962cfd"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0xc2}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0xfa}, &(0x7f0000000ac0)={0x20, 0x1, 0x81, "ca9281f2216ae9a0215fada19620e2c2fe41648404a9b9516ed150ab4e2f7dc6a6b67cd2e3b87b6e7b9bb94e1876195d05d838b19f5c00545d9311634924a6c0a9f9c4adb3528fc01eea30b966b8980af9fbe5379a10c4abbf7475630a8f7cbcb6542d279cb1c8afc09045d9dbc3afd344d890cce67af0bdf7f28d18402f00d266"}, &(0x7f0000000a00)={0x20, 0x3, 0x1, 0x8}}) syz_usb_connect(0x2, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r3) 8.018742168s ago: executing program 0 (id=1156): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x1, 0x7fff0006}]}) fsopen(&(0x7f0000000140)='vfat\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080), 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r1], 0x24}}, 0xc000) r3 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000210000000000000000000000ed84000000"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x5, 0xffdffff8, 0xffffffff, 0x5, "ff000000000000000000000000000200"}) r6 = syz_open_pts(r5, 0x0) ioctl$TCXONC(r6, 0x540a, 0x0) ioctl$TCXONC(r6, 0x540a, 0x1) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000001fc0), 0x80c00, 0x0) r10 = dup(r8) ioctl$IOMMU_TEST_OP_ACCESS_RW(r9, 0x3ba0, &(0x7f0000003000)={0x48, 0x8, r10, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x1}) write$binfmt_misc(r10, &(0x7f00000005c0)="b0d9f0b0e5fd8b4c5b48372cc2953eb955a3af19e9938552468a235776fa45372d1809e97377bb8731f7b7a68ad49e049b6294ca29825067585b2534bd6e185e40acfc8e668bb929b4bf8195a3fabf57880485edd0bce3bddf5ce7edc4a44d9c1df8cae1e0d07dc570563286cc26e9333c70f3f1b084d01eacaf35e58e81ef28839e5e9cb2730e3d46e1701c86875438f6421cc59d258de628b146ccb1f8ab5b14bd6190cdbe559eef9461045021022b", 0xb0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, 0x0) r11 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r11, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r7, 0xc06864a2, &(0x7f0000000480)={&(0x7f0000000400)=[0x0], 0x1, r12, 0x0, 0x403e, 0xe6, 0x0, 0x0, {0x1ff, 0x5, 0x8, 0x2, 0x5, 0x3, 0x0, 0x200, 0xc81, 0x6, 0x200, 0x10, 0x9, 0x2, "ce7f3ab49e5e380faae116abee862b6f9fd9b490f1397c0cb721632c6ec1275a"}}) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r13}, 0x10) connect$can_bcm(r3, &(0x7f0000000100), 0x10) sendmmsg$inet6(r1, &(0x7f0000000a80)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @local, 0x8}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000780)="c2", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x10000, @remote, 0x40}, 0x1c, &(0x7f0000000f80)=[{&(0x7f0000000580)="18", 0x1}], 0x1}}], 0x2, 0x24000801) 7.7573468s ago: executing program 1 (id=1158): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e21, @remote}}}, &(0x7f0000000140)=0x84) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000340)={r3, 0x18a}, 0x8) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x65}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x25}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x80) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090024206d041cc140000000000109022400040000a00009040000010301010009210008000122d4000905810319"], 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) fcntl$lock(r4, 0x25, &(0x7f0000000380)={0x0, 0x0, 0x80004, 0x4}) preadv(r4, &(0x7f0000001100)=[{&(0x7f00000033c0)=""/4094, 0xffe}], 0x1, 0x34, 0x0) inotify_add_watch(r4, &(0x7f0000000200)='./file0\x00', 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000001c0)='team_slave_1\x00', 0x10) 7.087375752s ago: executing program 0 (id=1159): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) r2 = eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000880)=r2) (async) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000240)=0x1) (async) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe0b, 0x0, 0x0, 0x0, 0x800000}, [@call={0x85, 0x0, 0x0, 0x7e}]}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90, 0xf000}) (async) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) (async) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000780), 0x84000, 0x0) write$uinput_user_dev(r3, &(0x7f00000008c0)={'syz1\x00', {0x800, 0x6, 0x8, 0x8}, 0xb, [0x727, 0x6, 0x101, 0x2, 0x200, 0x5, 0xed, 0x0, 0x8, 0x6, 0x5, 0x2ee2, 0x2, 0x0, 0x9, 0x10001, 0x3, 0x2, 0x0, 0x7, 0x1, 0xef000000, 0x6, 0x6, 0x770, 0x0, 0x80000000, 0xe55, 0x2, 0x8, 0x6, 0x80000000, 0x4, 0x9, 0x1000, 0x3, 0x7, 0x0, 0x2, 0xfe, 0x2, 0xc44, 0xfffffff7, 0x1f7b, 0x0, 0xfffffff7, 0x7f, 0xb7, 0x10001, 0x5, 0x80, 0x9, 0x7, 0x8, 0x7ff, 0x0, 0x0, 0x9b4, 0x9, 0x561, 0x4, 0x3, 0x5, 0x8000], [0x8001, 0x80000000, 0x2c000000, 0xa990, 0x7, 0x7, 0x100, 0x2, 0xa, 0x2, 0xeea, 0x80, 0x500, 0x2, 0xbafe, 0xffffffff, 0x8, 0x4, 0x100, 0x16a, 0x3, 0x9, 0x0, 0x2, 0x3ff, 0xb, 0xb, 0x480, 0x8, 0x3, 0xfffffffd, 0x1, 0x10000, 0x10000, 0x49, 0x1, 0x3ff, 0x0, 0x9, 0x5, 0x13e, 0x8, 0x4, 0x7ff, 0x3, 0x5, 0x6, 0x90d0, 0x81, 0x7, 0x7fff, 0x8, 0x40, 0x2, 0x8, 0x2, 0x753, 0x30, 0x9, 0x10000, 0x1, 0x9, 0x4, 0x6], [0x9, 0x1, 0xca, 0x5823, 0x5, 0x3, 0x8, 0x1, 0x0, 0xa8000000, 0x8, 0x7, 0xab, 0x5, 0xd0, 0xa, 0xce, 0x9, 0x7fff, 0xcbe, 0xf733, 0x1ff, 0x516, 0x1, 0xfffffffe, 0x3ff, 0x8a, 0x7, 0x101, 0x6, 0x2, 0x6, 0x2, 0xe, 0x7fffffff, 0x8, 0x9, 0x0, 0x4, 0xcd57, 0xffffffff, 0x9, 0x1, 0x70ca, 0x8, 0x9, 0x5, 0x7, 0x4, 0x9, 0x9, 0x6e35, 0x0, 0xe, 0x10001, 0x7, 0x3, 0x9, 0x9, 0x2, 0xe73, 0xffffffff, 0x101], [0x401, 0x1, 0x7, 0x6, 0x2, 0x562, 0x0, 0x5, 0x4, 0x0, 0x6617, 0x5, 0x7, 0x3, 0x92, 0x6, 0x7, 0x7fe, 0x0, 0x7, 0x3, 0x3, 0xff, 0x1, 0xbba, 0x0, 0xb0, 0x4, 0x7, 0x1000, 0x8f, 0x9, 0x7ff, 0x10000, 0x2, 0x8000, 0x1, 0x101, 0x7a, 0x7, 0x2302, 0xb7, 0x9, 0x3, 0x446, 0xda41, 0xf0c, 0x5, 0x6, 0x6, 0x101, 0x9, 0xffffffff, 0x7fffffff, 0x4, 0x8, 0x7d32, 0x7fff, 0x6, 0xb65, 0x7fff, 0x90, 0x5, 0xc50]}, 0x45c) (async) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000040000106d041bc500000000000109022400010000000009048000010300000009210900000122050009058103"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) (async) syz_usb_control_io(r4, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4000) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c170000020000000000000000000013040000000000"], 0x0, 0x26}, 0x20) (async) r6 = open(&(0x7f0000000200)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r6, 0x400, 0x1) (async) fcntl$setlease(r6, 0x400, 0x0) (async) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r5, 0x1, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r7, &(0x7f0000000880), &(0x7f0000000340)=""/10, 0x2}, 0x20) (async) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000040)={0x1, 'vlan0\x00', {}, 0x2}) 6.653889488s ago: executing program 4 (id=1160): gettid() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) listen(r5, 0x8) sendto(0xffffffffffffffff, &(0x7f0000000000)="f6", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000001840)={0x0, 0x3}, 0x8) close_range(r4, 0xffffffffffffffff, 0x0) unshare(0x8000000) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000f00)={'veth1_to_team\x00', &(0x7f0000000580)=@ethtool_rx_ntuple={0x35, {0xe, @udp_ip4_spec={@local, @local, 0x4e22, 0x4e22, 0x7}, @tcp_ip4_spec={@multicast2, @local, 0x4e20, 0x4e24, 0x5}, 0x3, 0x8, 0xb, 0x9, 0xffffffffffffffff}}}) setns(r7, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 6.630782769s ago: executing program 3 (id=1161): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) mmap(&(0x7f00001eb000/0x1000)=nil, 0x1000, 0x1, 0x10, 0xffffffffffffffff, 0xefa3d000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x501a, 0x3, 0x3}, 0x18, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(r2, 0x806c4120, &(0x7f0000000240)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_io_uring_setup(0xa4f9, &(0x7f0000000080)={0x0, 0x5ca5, 0x200, 0xfffffffe, 0x8}, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000105, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140), r2) 5.807964434s ago: executing program 4 (id=1163): ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x3, 'bond_slave_0\x00', {0x5}}) r0 = add_key(&(0x7f0000000040)='cifs.spnego\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)="cc86eebf70954115be924982718b885771a4b151c80178db7395b1db7b44e90b71a8add017ea1f2434560bf5dc6a71e6d71fa650c6eb2d017a1093f9727828ea01802d9b38dfad50ab488fff7d9c90992652676e4ddcf1eb8618de4c0d2090d009bc62e16d77f5898bce7fb80682c0ade9a3998db9cec1918ad69eb3246f4c361ad09ac05320d300a95e954d51afef308d614dd6d817930221a710696e27b35131ce07f55cbf118cd525a978c1a56a17aac606808e166a52602dc60bb57c68c9643e6627d59adea70b0a8dd2dd", 0xcd, 0xfffffffffffffffe) keyctl$reject(0x13, 0x0, 0x8000, 0x8000000000000000, r0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x1e8, 0x0, 0x10, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffff7, 0x68}}}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x5}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_WME={0x44, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x81}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x7}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x81}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x3}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x79}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x6}, @NL80211_STA_WME_UAPSD_QUEUES={0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xf9}]}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xc8, 0xbe, "8addf3239f69b2059736925d08e7b25b9f74214b35769504bd6dd3c0c550d74fbdc96173d6b2ab2ed3798b655cb7a95bca10703a18bb7be8922306633e3fe43ff556492565db91296b412c039d4b9bf278c08cb035bfa6f8e9b071635b73a088549a2e13d530ca03371842d6a7657e6f0d495435aa0d0abbcadca81e506c10b76838fed45d7f998e2a68d15d6258e2b0a74ccf4f8091a1ef09cb86367ad0c75f36cf361e778d0a2af7c4f16df664c403f80b6144f5fffa372fbba41f2f0c51e6690faeb9"}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x10}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x100, 0x5}}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x6cc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x7f, 0xac, "c490b9f3daf4238b81e714f39067a24383c9372b20154a7031f29fcd0ee601b42eae64daa3df51a0e3c29990a80a85f2e832883aac01f98522dd93bdeb70505e772ab72c173d65c138c40d1f87abf52cc165beac7de72fa2464a674a298824eb2987d8820f17e7f76667c81e669c50d3666c8d3813ac843668058e"}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x9}]}, 0x1e8}}, 0x40) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, &(0x7f0000000480)=0x7, 0x4) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000500)={{0x4, 0x2e5}, 0x11}, 0x10) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000540)) mkdirat(r1, &(0x7f0000000580)='./file0\x00', 0x3a) r2 = socket$nl_generic(0x10, 0x3, 0x10) execveat(r1, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000740)={[&(0x7f0000000600)='&*/\'\x00', &(0x7f0000000640)=',\x00', &(0x7f0000000680)='cifs.spnego\x00', &(0x7f00000006c0)='\x00', &(0x7f0000000700)='syz']}, &(0x7f0000000840)={[&(0x7f0000000780)='*0,\t@\x00', &(0x7f00000007c0)='%^\x00', &(0x7f0000000800)=']],{\x00']}, 0x400) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000880)='bond_slave_0\x00') r3 = add_key$keyring(&(0x7f00000008c0), &(0x7f0000000900)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$restrict_keyring(0x1d, r3, &(0x7f0000000940)='rxrpc\x00', &(0x7f0000000980)='syz') keyctl$search(0xa, r3, &(0x7f00000009c0)='rxrpc_s\x00', &(0x7f0000000a00)={'syz', 0x2}, r0) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000a40)={@ipv4={""/10, ""/2, @loopback}, 0x0}, &(0x7f0000000a80)=0x14) connect$can_bcm(r1, &(0x7f0000000ac0)={0x1d, r4}, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x30, r5, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x61}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000c80), 0x20200, 0x0) poll(&(0x7f0000000cc0)=[{r2, 0x4008}], 0x1, 0xf07) keyctl$get_keyring_id(0x0, r0, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000d40), r1) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x30, r7, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000000) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000e40)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x34, r5, 0x300, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x44e}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x6}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x81}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x4004) 5.301943164s ago: executing program 1 (id=1164): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) syz_open_dev$radio(&(0x7f0000000440), 0x0, 0x2) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540), 0x228402, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000480)={0x5, 0x1, 0x3}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b21000000"], 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000e00)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x44080}, 0x8094) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x44800) syz_usb_connect$cdc_ecm(0x43911492ee50c44, 0x57, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x2, 0x10, 0xea, [{{0x9, 0x4, 0x0, 0x10, 0x3, 0x2, 0x6, 0x0, 0x3, {{0x6, 0x24, 0x6, 0x0, 0x0, 'p'}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x83, 0xfffc, 0x0, 0xe8}}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x5, 0xd, 0xf6}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x3c, 0x7f, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x5, 0x1, 0xda}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0xc, 0x8, 0x8, 0x10}, 0x42, &(0x7f00000001c0)={0x5, 0xf, 0x42, 0x5, [@ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0x0, 0x0, 0x5, 0xf000, 0x8}, @wireless={0xb, 0x10, 0x1, 0x4, 0xa2, 0x8, 0xb0, 0xb458, 0x7}, @ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x7f, 0x5, 0x5, 0x780f, 0xfff7, [0x3f3f, 0x0, 0x3f00, 0xc000, 0xffc03f]}]}, 0x2, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x3c01}}, {0xd7, &(0x7f0000000300)=@string={0xd7, 0x3, "9e910f3b3fcfe4f4199e3861ce88133f2c5c091ceae6e4842e4b925d80a8f90ff23d317758c10d05310004fc9fc8bf701c398a44bfeebd3c891ce511051b4ca9807a456b6ecd5dff4bd2e6e8a42c87af01a5dd42b31d59381d3557225410cd274f0a72c75db2f53cb561234771a2d1c540cc9a765db7c41b8f9dc73a286e4529032b29449820073295a231b2d99669c0012ea4cd6fed3fb9b0d3b185e6e4f2ba2e2fe2445f2042358bc9d47b1bff834174413b343a7e88f4c240ab817c95b8849d6c203e60756467e5db2ad719b5490c2edc69693a"}}]}) 5.260799238s ago: executing program 3 (id=1165): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{0x0, 0x14}], 0x1}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = io_uring_setup(0x773c, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) close(r0) bind$rxrpc(r4, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) close_range(r3, r4, 0x0) syz_io_uring_setup(0x83b, &(0x7f00000000c0)={0x0, 0x11e, 0x80, 0x3, 0x319}, &(0x7f0000000140)=0x0, &(0x7f0000000400)=0x0) r7 = socket$inet(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @remote}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) io_setup(0x7f, 0x0) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r8, &(0x7f0000000400)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d0000", 0x2b}, {0x0}], 0x2) r9 = socket(0x1d, 0x2, 0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r11, r13, 0x25, 0x2, @void}, 0x10) r14 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r14, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x40, 0x4, r9, 0x0, 0x0, 0x0, 0x80800}) 4.501223601s ago: executing program 4 (id=1167): r0 = syz_open_dev$evdev(&(0x7f0000000180), 0xf, 0x20000) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000200)=""/114) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8004}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b0000000800", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff08"], 0x6f4}}, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r5, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0xf8, r8, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000}, 0x800) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r3}, 0x4) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r9 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0xfffe, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, 0x108) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, 0x0, 0x0) close(r9) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x10b, 0x8000000000002}) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) 4.026489545s ago: executing program 0 (id=1169): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0xfffffffffffffcf8, 0x0, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) finit_module(r3, 0x0, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x118, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xef, 0x6, "2cbfeae791c41fa3fcba5ed9ca1230da8c3f6149a7670218672c5df90ee4d840d8961bc1e406f9216b43b46111c8fb42a512bccec247dacedce4a466f83ff2fc5289a5d27740cdce695184f91936a8d3ea9bda3fc3aa8fb179726244a5c7d6e7da812219aec748fed73af6fdcb3a00816f22352a7516f0681f08c4ca3e49c812a29738ba41d6fd541af312ac83f7129a1ff4334b0000a13327b598e2916f58f4c450240ac62a0cacb67cef98e24f387d693ad7e2ee865eee989da73e6b8d2693b192bd0bcbe9812d7d72203c9362fc37c859ff2fc9279aae87395248af027d27b3ae05089353d2901f1877"}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x1bc}}, 0x0) keyctl$read(0x20, r2, 0x0, 0x0) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="d4000000ed0300032cbd7000fcdbdf256ce0d85ddd3f519a47d84d36feb4d1b2897778d95d623f9425cbfdf9c7dc0bc1d90ead9a727334aa138d63a26d0684127f5cd04747d0ba2e3754feb358b1cdac4ec894833aa88d798462accf648052d85792a309d956fc14030fddeb9db309f3bca173b5593a118e97fddf572009e976a1b7fad5b7d35b261d2a9652fc0ca322d80edff93df62c99c2293f006f8d22738a4f1057195be1b8fbd0e25f6b0056a63844bb14ff56fba2fa39edef257afbcbc5f131bddecaf868dae373164f1c5919c1000000"], 0xd4}, 0x1, 0x0, 0x0, 0x80}, 0x4040010) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}], 0x10) sendto$inet6(r7, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r8, &(0x7f0000000b40)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="e9", 0x1}], 0x1}}], 0x1, 0x600c000) r9 = socket$netlink(0x10, 0x3, 0x4) r10 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r10, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2}) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x18, r6, 0x1, 0x0, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x2000c050) 3.894022049s ago: executing program 4 (id=1170): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000e9090400000103000000092105000001220500090581030002"], 0x0) r1 = dup(0xffffffffffffffff) syz_usb_connect$cdc_ecm(0x6, 0xf1, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdf, 0x1, 0x1, 0x5, 0xc0, 0xfb, [{{0x9, 0x4, 0x0, 0xf0, 0x2, 0x2, 0x6, 0x0, 0x1, {{0xa, 0x24, 0x6, 0x0, 0x0, "9ac12439d8"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x5, 0x9, 0x2}, [@country_functional={0xa, 0x24, 0x7, 0x1, 0x3585, [0x6, 0xf]}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0xe, 0x1, 0xff}, @obex={0x5, 0x24, 0x15, 0x1000}, @ncm={0x6, 0x24, 0x1a, 0x3, 0x8}, @mdlm_detail={0x7a, 0x24, 0x13, 0x0, "d13c735201a590a6daf0933b6d611017367bcab2500eb8cf5c99c54e4a467e0330e6c87ad90a146b6ae3b1287bba6ae712bb855710d0ecd4ee70bbce674c206a56182090fbd732a42b6e4c75fc3ca8f96868175ba6984fc142e33d3f98d67742f7a256c00e762b6ac8656c9699ada9f917ee74b1c3d6"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x4, 0x3, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x9, 0x6, 0x2c}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xb, 0x7, 0xa}}}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x81, 0xb, 0x7, 0x48, 0xf8}, 0x25, &(0x7f0000000180)={0x5, 0xf, 0x25, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xb, 0x81, 0x6, 0xa954}, @wireless={0xb, 0x10, 0x1, 0x1a, 0x6, 0xa, 0x2, 0x750, 0x7}, @wireless={0xb, 0x10, 0x1, 0x2, 0x6, 0x9, 0x1, 0x9, 0x9}]}, 0x7, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x449}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x405}}, {0xc0, &(0x7f0000000300)=@string={0xc0, 0x3, "da2ad4d3e9ff3de9dd0c0e4ce31846eb67ddcb53b85967aad834ac0adcebcd630e541d64ccb0851152c88c6c0bd2504b63e6447fb8a15f8dc4ea1276191982ae669b720a8db6fb1e4420e909a51ec4f74da8d4c73f912717dea3f779c591a1412b5f54c4988ad4c2ecb5a31e9d9196b7ecae887077306ecade40138e7545b27bf29ffcceccde45a1e244032cc768123bcad79ebbde37a4a2e00f75b7ac3741b9b85719b0522e93e8394215dba09b80863fd7f143eb09744c010bccbb3f38"}}, {0x90, &(0x7f0000000400)=@string={0x90, 0x3, "87927acb1876e6a8545e3adac4b6e1df775559fe54c7367ea4f6abdd8ed82d70b6aaddc65d6a0198d364962bbb423bf4a58b7c93b723cb5c9da74c45a03b846ac3503f591cf1b4a442df0e6b3392323ba5bfbeeeaea5ac735a6c4d6f5f0bf8d8a2855c84d6f74e30e9b2d654367a6afab5b48df3694e926162e44dc9f2a224f5bbab236ac5f95a84c02013307023"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x40a}}, {0x8a, &(0x7f0000000500)=@string={0x8a, 0x3, "f6299e8b598f371cac1c4e3e0f4ab69c7d09ea92360c3b50ec5433581a734266061b5ba3e392ae6239fa69dd732821587381f04c15010a4923730ffdb0fbe54cb51d879cf96aa4dba4c346ef7a15dbecf6d26cbb9c504b9babe8a69eb40b0724e95ae0cefc07ca87f091aedcdf0179fcf96c579b815cff4c0bdbcdf719e65f09b43acab381416275"}}]}) syz_usb_control_io(r0, 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f0000000280)="1000a8631eabc817ff") 3.793948251s ago: executing program 3 (id=1171): mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x80, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r0, &(0x7f00000000c0)='lp\x00', 0xfffffdef) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xf, {"a2e3ad21ed0d09f91b3d090987f70e06d038e7ff7fc6e5539b0d480e8b089b3f350068090890e0878f0e1ac6e7049b336d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d076d0936cd3b78130daa61d8e8040000005802b77f07227227b7fa67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e9871540000000000004ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e4843e2808d4743b95bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c6f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20e8911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab9d6203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edcad74b221cfec48000000000000000d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea50000000000000068987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c10900df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d8008d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c46bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78bb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bf340b17cfcfd9c52c9711937f79abb1a124f121fc65483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4f01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8650000878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95a498b562d71565f924779ca1f731b3346ff177050373d79ff7bc1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f79a598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015a08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b686081b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24ae918423922e4e0167584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f13a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307f561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0xfffffffffffffe40}}, 0x1047) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffe49}, 0x42) 3.790079021s ago: executing program 2 (id=1172): socket$nl_route(0x10, 0x3, 0x0) (async) pipe(0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) lsetxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000240)=@v1={0x1000000, [{0xfffffff4, 0x2}]}, 0xc, 0x1) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r2, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x0, 0x0, 0x2ce}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f0000000000)={'virt_wifi0\x00', @multicast}) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x0, 0x0, 0x1}) (async) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) (async) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x2}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) r8 = getpgid(0x0) r9 = syz_pidfd_open(r8, 0x0) pidfd_send_signal(r9, 0x21, 0x0, 0x4) socket(0x400000000010, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) r10 = socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000080000000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r11, @ANYBLOB="0a0001000000648a63ff"], 0x48}}, 0x0) 3.105930576s ago: executing program 2 (id=1173): socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$llc(0x1a, 0x1, 0x0) kexec_load(0x7, 0x3, &(0x7f0000000280)=[{&(0x7f00000001c0)="aca0cd89c6d86a1b721aac8bf24a78c03cb393fbd5d0536a59beaa2ba3938fa60d3c0f70a9dbd67a53e8022e67e50b01f6b505accf887fa40c90cefef626f4d6b896ead74562a90f0e686bc5bb360d670ff7134e2ef177e39b7e01776a57e8e8873198599a4cd5b94bceccfcc1f0370d7471fb", 0x73, 0xb5, 0xc}, {&(0x7f0000000080)="00ee817132552b25dcb923c8fde2faca42546ba23d41483745", 0x19, 0x9, 0x4}, {&(0x7f0000000240)="1b2f852def564606d51618", 0xb, 0xb77, 0x7}], 0x320000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280), 0x53) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000300)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500003bb500000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000180)={0xa30000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000700)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',cache=mmap']) chmod(&(0x7f0000000140)='./file0\x00', 0x0) 3.105530274s ago: executing program 3 (id=1174): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000440)=ANY=[@ANYBLOB="3a0004000000a7212277"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x42) 3.100524615s ago: executing program 1 (id=1175): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="21120000000000001808000300ac1414aa00"/32], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x51, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) fsetxattr$security_capability(r2, 0x0, 0x0, 0x0, 0x1) (async, rerun: 64) madvise(&(0x7f00004a7000/0x4000)=nil, 0x4000, 0x9) (async, rerun: 64) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async, rerun: 64) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) mkdir(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0xc, &(0x7f0000000480)=ANY=[@ANYRES32=r2, @ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, &(0x7f00000002c0), 0x0}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r5 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r5, &(0x7f0000000300)='asymmetric\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x3, @empty, 0x1}, 0x1c) listen(r7, 0x1) 2.434547235s ago: executing program 2 (id=1176): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) mmap(&(0x7f00001eb000/0x1000)=nil, 0x1000, 0x1, 0x10, 0xffffffffffffffff, 0xefa3d000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)={'#! ', './file0', [{0x20, '\tU\xc1\xa1\x9a\xdcG\r\b\xa9\xbeV?\xb2,\x8f\xe6\xaf.\xf44\x9f\x8d\xe0\xbc\x03\x96\x12S\xbb\xe2\x06*~\xdf\xf7\x92\x83\x88%\xdc}\xd2\xbep\x03\xcc\xdd&$\x04\xd9LF\xf9\xd6*\xe70\xd5\xa5<+\xea7@\xdd\x1a\xf0UT\xae'}, {0x20, '{[}%-{^-)'}, {0x20, ')}-\x02^!)^*'}, {0x20, ',:/]\xe8{'}, {0x20, '#! '}]}, 0x73) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100000a00000000fdffffff850000002000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7ebffff02000000850000007000"/96], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r2, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], 0x0, 0xcf, &(0x7f0000000600)=[{}], 0x8, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x93, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0xd, &(0x7f0000000140)=@raw=[@map_idx={0x18, 0xb, 0x5, 0x0, 0xc}, @exit, @ldst={0x0, 0x0, 0x3, 0x1, 0x4, 0xd50b2967f7d4fbbb, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x34}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}], &(0x7f00000001c0)='GPL\x00', 0x45, 0xfd, &(0x7f0000000500)=""/253, 0x40f00, 0x69, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000880)=[r2, r2, r2], &(0x7f00000008c0)=[{0x5, 0x3, 0x5, 0x7}, {0x0, 0x5, 0x3}, {0x0, 0x5, 0x7, 0x4}, {0x1, 0x1, 0x2, 0x3}, {0x1, 0x5, 0x5, 0xc}, {0x5, 0x2, 0xf}], 0x10, 0x6000000}, 0x94) landlock_create_ruleset(&(0x7f0000000040)={0x501a, 0x3, 0x3}, 0x18, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000380)="66baf80cb8b6371988ef66bafc0c66b8fb0d66ef260f01c966baf80cb8a3dd7f89ef66bafc0cb0c6eeb9670a00000f32b8010000000f01d9c4c19559b475c40000000f20d835200000000f22d866b829018ed0f30f090f35", 0x58}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_io_uring_setup(0xa4f9, &(0x7f0000000080)={0x0, 0x5ca5, 0x200, 0xfffffffe, 0x8}, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8000, &(0x7f00000024c0)=ANY=[@ANYBLOB='quota']) r6 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x250942, 0x1cd) quotactl_fd$Q_GETNEXTQUOTA(r6, 0xffffffff80000900, 0xee00, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000105, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.352223138s ago: executing program 0 (id=1177): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendto$inet6(0xffffffffffffffff, &(0x7f0000000340)="d4d7efad020efa27e4b5b271825ef53d030f992ff58468566c6fc090ac508f876b89a6004f4d6aa59f13c8afda4bfc2137c8a1d584595b77c2a5f6a72a6d627f3408143aae7315bb608e1557b707b38c30f447a288036c", 0x57, 0x10, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r5, 0x2c9ab000) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close(r3) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f00000001c0)={0x48, 0x4}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) 1.957838885s ago: executing program 2 (id=1178): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000001040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@mark={{0x14, 0x1, 0x4f, 0x22}}], 0x18}}], 0x1, 0x2404e880) getpid() socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sysfs$1(0x1, &(0x7f0000000380)='\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, 0xffffffffffffffff, 0x100000000) mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00003eb000/0x1000)=nil) socket$netlink(0x10, 0x3, 0x12) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r3, &(0x7f0000005e40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r3, &(0x7f0000005340)={0x78, 0x0, r4, {0x2000000007, 0x400, 0x0, {0x6, 0xfffe000000000000, 0xfffffffffffffffb, 0xff, 0x694, 0x3, 0x7f, 0x9, 0x800, 0x2000, 0x2, r5, r6, 0xb, 0x8, 0x1000000}}}, 0x78) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001100010027bd7000fddbff250000000009"], 0x20}, 0x1, 0x0, 0x0, 0x8855}, 0x80) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x48) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r8, 0x3ba0, &(0x7f0000000400)={0x48, 0x2, r10, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r8, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r11, r9, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x5}, 0x2f) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x3, 0x1, 0x89, 0xfffffffb}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x15, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r12}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.233748392s ago: executing program 4 (id=1179): syz_usb_connect(0x2, 0x4f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000e45aa5205b109917e9360102030109023d0001000000000904ef0404ff010100090502020800d0000909050800ff030700060705a902e86f4c0905d55f", @ANYRES32=0x0, @ANYRES8, @ANYRES32=0x0, @ANYRESOCT=0x0, @ANYBLOB="b98987894fe616c151f56c134548e9646dce397ccae1a752687e410fac65c6903fc3613e4ac46eadfe1cc5e91dfded937e78bd7eb21d4025c756eb4002617295a3c3c5b690be1a9c879ba5a413c885abd8d9e92052d842abf9b91e7ce233e668e17fd6f5599c2ee432fe22fdac2a4ddcb9a4bbe7372392e4f8dc98f6", @ANYRESHEX=0x0], 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x52, 0x101800) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f00000000c0)={0x0, 0x7, 0x9, '\x00', &(0x7f0000000080)=0xd}) (async, rerun: 64) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x100) (rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) (async, rerun: 32) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x145) (async, rerun: 32) ioctl$NBD_DO_IT(r1, 0xab03) 1.194812822s ago: executing program 1 (id=1180): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_getscheduler(r2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000211000/0x2000)=nil, &(0x7f00004a9000/0x2000)=nil, &(0x7f0000330000/0x2000)=nil, &(0x7f0000280000/0x2000)=nil, &(0x7f00002b9000/0x4000)=nil, &(0x7f00004c1000/0x3000)=nil, &(0x7f00001ec000/0x2000)=nil, &(0x7f00002a4000/0xe000)=nil, &(0x7f000002e000/0x1000)=nil, &(0x7f0000268000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000000c0)="b14fcd1c85ae432a427f0594d4e7fd15b30201", 0x13, r1}, 0x68) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) syz_clone(0xa2540400, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = timerfd_create(0x0, 0x0) timerfd_settime(r5, 0x3, &(0x7f0000000140)={{}, {0x0, 0x989680}}, 0x0) timerfd_settime(r5, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) connect$bt_sco(r4, &(0x7f0000000080)={0x1f, @none}, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r7}, 0x10) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r8, &(0x7f0000001240)=""/102400, 0x200000, 0x0) madvise(&(0x7f00005b8000/0x2000)=nil, 0x2000, 0xd) 749.606531ms ago: executing program 0 (id=1181): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, 0x0, 0x1, 0xfffffffd, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x28}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1c, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18b3e000000000000000c50d624fcd306b00000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="14010000340001000000000000000000010100800c"], 0x114}], 0x1}, 0x0) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000601, 0xee01, &(0x7f0000000040)={0x7e, 0x38000000, 0x0, 0x2}) 494.016787ms ago: executing program 0 (id=1182): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) pipe(&(0x7f0000000d00)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x4001, 0x0) splice(r1, 0x0, r2, 0x0, 0x714f, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)={0x20, 0x30}, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x81, 0x1, "ac"}, 0x0, 0x0, 0x0, 0x0}) 476.854027ms ago: executing program 3 (id=1183): r0 = socket(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="120000007d0000000800000002"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000740)={r1, &(0x7f0000000340), &(0x7f0000000200)=@tcp6=r0}, 0x20) recvmmsg(r0, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}, 0x3fc}], 0x1, 0x2100, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x10) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000014c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) 342.542682ms ago: executing program 2 (id=1184): r0 = getpid() syz_open_dev$usbmon(&(0x7f0000000900), 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r1, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_fuse_handle_req(r4, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r5, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') rename(&(0x7f0000000180)='./file1\x00', &(0x7f0000000200)='./file0\x00') 0s ago: executing program 2 (id=1185): mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x80, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r0, &(0x7f00000000c0)='lp\x00', 0xfffffdef) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xf, {"a2e3ad21ed0d09f91b3d090987f70e06d038e7ff7fc6e5539b0d480e8b089b3f350068090890e0878f0e1ac6e7049b336d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d076d0936cd3b78130daa61d8e8040000005802b77f07227227b7fa67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e9871540000000000004ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e4843e2808d4743b95bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c6f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20e8911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab9d6203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edcad74b221cfec48000000000000000d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea50000000000000068987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c10900df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d8008d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c46bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78bb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bf340b17cfcfd9c52c9711937f79abb1a124f121fc65483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4f01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8650000878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95a498b562d71565f924779ca1f731b3346ff177050373d79ff7bc1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f79a598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015a08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b686081b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24ae918423922e4e0167584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f13a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307f561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0xfffffffffffffe40}}, 0x1047) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffe49}, 0x42) kernel console output (not intermixed with test programs): MaxPacketSize 0 [ 341.588540][ T5822] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 341.602589][ T5822] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 341.614097][ T5822] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 341.626047][ T5822] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 341.637104][ T5822] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 341.652764][ T5822] usb 1-1: string descriptor 0 read error: -22 [ 341.661705][ T5822] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 341.674617][ T5822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.700614][ T5822] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 341.868938][ T9261] netlink: 4 bytes leftover after parsing attributes in process `syz.2.836'. [ 342.046777][ T9268] binder: 9254:9268 ioctl c0306201 200000000640 returned -22 [ 342.068930][ T9268] binder: 9254:9268 ioctl 4014563c 200000000180 returned -22 [ 342.337319][ T42] usb 1-1: USB disconnect, device number 29 [ 342.768043][ T5883] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -110 [ 344.178788][ T5822] usb 2-1: USB disconnect, device number 24 [ 344.215514][ T9296] netlink: 32 bytes leftover after parsing attributes in process `syz.2.844'. [ 344.240318][ T9291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.842'. [ 344.426709][ T9293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.841'. [ 344.705248][ T30] audit: type=1400 audit(1759714749.599:929): avc: denied { ioctl } for pid=9310 comm="syz.3.848" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1270 ioctlcmd=0xf507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 345.470070][ T9320] sctp: [Deprecated]: syz.3.851 (pid 9320) Use of int in maxseg socket option. [ 345.470070][ T9320] Use struct sctp_assoc_value instead [ 345.563558][ T30] audit: type=1400 audit(1759714750.459:930): avc: denied { create } for pid=9314 comm="syz.0.850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 346.544476][ T30] audit: type=1400 audit(1759714751.449:931): avc: denied { write } for pid=9337 comm="syz.2.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 346.750885][ T5883] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 346.983445][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.001101][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.018098][ T5883] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 347.032944][ T5883] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 347.043196][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.527871][ T5883] usb 2-1: config 0 descriptor?? [ 347.851361][ T30] audit: type=1400 audit(1759714752.749:932): avc: denied { write } for pid=9355 comm="syz.3.860" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 347.967796][ T5883] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 347.981695][ T5883] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 348.110606][ T5883] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 348.119534][ T5883] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 348.127041][ T5883] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 348.134747][ T5883] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 348.142162][ T5883] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 348.149520][ T5883] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 348.157180][ T5883] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 348.169383][ T5883] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 348.241542][ T9] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 348.552772][ T9369] tmpfs: Unknown parameter 'grpqufF' [ 348.822011][ T10] usb 2-1: USB disconnect, device number 25 [ 348.833670][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 348.881697][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 348.939318][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 348.978052][ T9371] fido_id[9371]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 349.009440][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 349.025856][ T9] usb 3-1: string descriptor 0 read error: -22 [ 349.042505][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 349.062589][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.094229][ T9] usb 3-1: 0:2 : does not exist [ 349.101628][ T9381] futex_wake_op: syz.0.866 tries to shift op by -1; fix this program [ 349.305198][ T9385] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.312565][ T9385] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.607367][ T9385] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 349.695187][ T9385] bridge_slave_1: left allmulticast mode [ 349.703491][ T9385] bridge_slave_1: left promiscuous mode [ 349.714653][ T9385] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.787892][ T9385] bridge_slave_0: left allmulticast mode [ 349.794508][ T9385] bridge_slave_0: left promiscuous mode [ 349.801566][ T9385] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.871996][ T5890] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 351.193818][ T9403] netlink: 16 bytes leftover after parsing attributes in process `syz.1.871'. [ 351.243525][ T9403] netlink: 16 bytes leftover after parsing attributes in process `syz.1.871'. [ 351.258331][ T5890] usb 4-1: config 0 has no interfaces? [ 351.288572][ T9] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 351.297160][ T5890] usb 4-1: New USB device found, idVendor=05ac, idProduct=1290, bcdDevice=dc.1b [ 351.312817][ T9] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 351.320757][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.337270][ T30] audit: type=1400 audit(1759714756.239:933): avc: denied { map } for pid=9402 comm="syz.1.871" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 351.371548][ T30] audit: type=1400 audit(1759714756.239:934): avc: denied { call } for pid=9402 comm="syz.1.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 351.393878][ T9] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 351.423996][ T9] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 351.451587][ T5890] apple-mfi-fastcharge 4-1: config 0 descriptor?? [ 351.569355][ T9] usb 3-1: USB disconnect, device number 23 [ 351.580964][ T42] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 352.252396][ T42] usb 2-1: config 0 has an invalid interface number: 130 but max is 0 [ 352.346855][ T42] usb 2-1: config 0 has no interface number 0 [ 352.353899][ T42] usb 2-1: config 0 interface 130 altsetting 0 endpoint 0x5 has invalid maxpacket 1007, setting to 64 [ 352.365354][ T42] usb 2-1: New USB device found, idVendor=06cd, idProduct=0108, bcdDevice=c7.5f [ 352.379973][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.399615][ T42] usb 2-1: config 0 descriptor?? [ 353.384327][ T42] keyspan 2-1:0.130: Keyspan 1 port adapter converter detected [ 353.395004][ T42] keyspan 2-1:0.130: found no endpoint descriptor for endpoint 87 [ 353.471364][ T42] keyspan 2-1:0.130: found no endpoint descriptor for endpoint 7 [ 353.542868][ T42] keyspan 2-1:0.130: found no endpoint descriptor for endpoint 81 [ 353.557724][ T42] keyspan 2-1:0.130: found no endpoint descriptor for endpoint 1 [ 353.565554][ T42] keyspan 2-1:0.130: found no endpoint descriptor for endpoint 2 [ 353.574034][ T42] keyspan 2-1:0.130: found no endpoint descriptor for endpoint 85 [ 353.582128][ T42] keyspan 2-1:0.130: unsupported endpoint type 0 [ 353.602349][ T42] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 354.134695][ T9423] tmpfs: Unknown parameter 'grpqufF' [ 354.682644][ T10] apple-mfi-fastcharge 4-1: USB disconnect, device number 29 [ 354.701584][ T42] usb 2-1: USB disconnect, device number 26 [ 354.866514][ T42] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 354.931328][ T42] keyspan 2-1:0.130: device disconnected [ 355.026908][ T9433] netlink: 104 bytes leftover after parsing attributes in process `syz.1.877'. [ 355.032959][ T9436] netlink: 'syz.0.878': attribute type 6 has an invalid length. [ 355.051268][ T30] audit: type=1400 audit(1759714759.929:935): avc: denied { nlmsg_read } for pid=9430 comm="syz.1.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 355.330587][ T30] audit: type=1400 audit(1759714760.079:936): avc: denied { ioctl } for pid=9443 comm="syz.0.881" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 355.613253][ T30] audit: type=1400 audit(1759714760.509:937): avc: denied { ioctl } for pid=9450 comm="syz.2.882" path="socket:[26657]" dev="sockfs" ino=26657 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 357.121008][ T30] audit: type=1400 audit(1759714761.989:938): avc: denied { mount } for pid=9457 comm="syz.4.884" name="/" dev="hugetlbfs" ino=26741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 359.744271][ T9485] tmpfs: Unknown parameter 'grpqufF' [ 359.810003][ T9488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.889'. [ 359.954257][ T30] audit: type=1326 audit(1759714764.849:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9487 comm="syz.4.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6c818eec9 code=0x7ffc0000 [ 360.026534][ T30] audit: type=1326 audit(1759714764.849:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9487 comm="syz.4.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7fa6c818eec9 code=0x7ffc0000 [ 360.083001][ T30] audit: type=1326 audit(1759714764.849:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9487 comm="syz.4.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6c818eec9 code=0x7ffc0000 [ 360.109438][ T30] audit: type=1326 audit(1759714764.849:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9487 comm="syz.4.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7fa6c818eec9 code=0x7ffc0000 [ 360.132567][ C1] vkms_vblank_simulate: vblank timer overrun [ 360.181444][ T30] audit: type=1326 audit(1759714764.849:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9487 comm="syz.4.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6c818eec9 code=0x7ffc0000 [ 360.368155][ T30] audit: type=1326 audit(1759714764.849:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9487 comm="syz.4.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa6c818eec9 code=0x7ffc0000 [ 360.634180][ T30] audit: type=1326 audit(1759714764.849:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9487 comm="syz.4.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6c818eec9 code=0x7ffc0000 [ 360.794728][ T30] audit: type=1326 audit(1759714764.849:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9487 comm="syz.4.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6c818eec9 code=0x7ffc0000 [ 360.819250][ T30] audit: type=1326 audit(1759714764.849:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9487 comm="syz.4.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7fa6c818eec9 code=0x7ffc0000 [ 361.744313][ T9519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.896'. [ 363.420984][ T42] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 363.439798][ T9533] netlink: 'syz.0.900': attribute type 10 has an invalid length. [ 363.468567][ T9533] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.481786][ T9533] bond0: (slave team0): Enslaving as an active interface with an up link [ 363.635013][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.648762][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.659134][ T42] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 363.672520][ T42] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 363.685231][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.006553][ T42] usb 2-1: config 0 descriptor?? [ 364.083395][ T9547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.145705][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 364.145720][ T30] audit: type=1400 audit(1759714768.929:964): avc: denied { read } for pid=9542 comm="syz.4.903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 364.169797][ T9547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.185176][ T9547] netlink: 8 bytes leftover after parsing attributes in process `syz.4.904'. [ 364.311462][ T5903] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 364.473242][ T42] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 364.480657][ T42] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 364.506031][ T9543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.901'. [ 364.521272][ T42] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 364.531940][ T42] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 364.546888][ T42] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 364.560863][ T42] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 364.571352][ T42] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 364.588952][ T42] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 364.596612][ T42] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 364.635675][ T5903] usb 5-1: device descriptor read/64, error -71 [ 364.652937][ T42] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 364.738776][ T42] usb 2-1: USB disconnect, device number 27 [ 365.236329][ T9554] fido_id[9554]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 365.330911][ T5903] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 365.868891][ T5903] usb 5-1: device descriptor read/64, error -71 [ 366.061595][ T5903] usb usb5-port1: attempt power cycle [ 366.696668][ T30] audit: type=1400 audit(1759714771.249:965): avc: denied { ioctl } for pid=9573 comm="syz.2.911" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 366.751794][ T5903] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 366.818659][ T5903] usb 5-1: device descriptor read/8, error -71 [ 367.586828][ T30] audit: type=1400 audit(1759714772.479:966): avc: denied { bind } for pid=9579 comm="syz.2.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 367.665668][ T9585] netlink: 24 bytes leftover after parsing attributes in process `syz.2.913'. [ 367.680869][ T5903] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 367.743080][ T9587] netlink: 'syz.1.914': attribute type 11 has an invalid length. [ 367.761080][ T9587] netlink: 20 bytes leftover after parsing attributes in process `syz.1.914'. [ 367.854153][ T9587] mkiss: ax0: crc mode is auto. [ 367.922347][ T5903] usb 5-1: device not accepting address 24, error -71 [ 368.217476][ T5903] usb usb5-port1: unable to enumerate USB device [ 368.329182][ T30] audit: type=1400 audit(1759714773.229:967): avc: denied { shutdown } for pid=9594 comm="syz.4.916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 368.352842][ T42] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 368.663274][ T42] usb 3-1: Using ep0 maxpacket: 8 [ 368.670305][ T9607] overlayfs: missing 'workdir' [ 368.672543][ T42] usb 3-1: unable to get BOS descriptor or descriptor too short [ 368.701542][ T42] usb 3-1: config 7 has an invalid interface number: 58 but max is 0 [ 369.216850][ T9606] tmpfs: Unknown parameter 'grpqufF' [ 369.230009][ T42] usb 3-1: config 7 has no interface number 0 [ 369.259322][ T42] usb 3-1: config 7 interface 58 altsetting 3 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 369.273785][ T42] usb 3-1: config 7 interface 58 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 369.287111][ T42] usb 3-1: config 7 interface 58 has no altsetting 0 [ 369.997516][ T42] usb 3-1: string descriptor 0 read error: -71 [ 370.020039][ T42] usb 3-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=48.0f [ 370.063488][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.234562][ T9619] netlink: 4 bytes leftover after parsing attributes in process `syz.0.922'. [ 370.246249][ T42] usb 3-1: can't set config #7, error -71 [ 370.295428][ T42] usb 3-1: USB disconnect, device number 24 [ 370.582827][ T9604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.917'. [ 370.751187][ T42] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 370.919480][ T42] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 370.942474][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 371.038415][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 371.204365][ T42] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 371.406154][ T42] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 371.651770][ T9643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.930'. [ 371.710737][ T42] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 371.804556][ T42] usb 3-1: Manufacturer: syz [ 371.838242][ T42] usb 3-1: config 0 descriptor?? [ 371.880784][ T30] audit: type=1400 audit(1759714776.779:968): avc: denied { read } for pid=9647 comm="syz.3.931" path="socket:[26432]" dev="sockfs" ino=26432 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 371.918713][ T9649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.929'. [ 371.943769][ T9649] bridge_slave_1: left allmulticast mode [ 371.997220][ T9649] bridge_slave_1: left promiscuous mode [ 372.004569][ T9649] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.140417][ T9649] bridge_slave_0: left allmulticast mode [ 372.148389][ T9649] bridge_slave_0: left promiscuous mode [ 372.158165][ T9649] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.755700][ T42] rc_core: IR keymap rc-hauppauge not found [ 372.945793][ T42] Registered IR keymap rc-empty [ 373.164855][ T42] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 373.301326][ T42] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 373.347858][ T42] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 373.860500][ T42] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input15 [ 373.988215][ T9671] netlink: 'syz.4.936': attribute type 72 has an invalid length. [ 374.109000][ T42] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 374.175330][ T9671] binder: 9667:9671 unknown command 0 [ 374.176058][ T9674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.937'. [ 374.181529][ T9671] binder: 9667:9671 ioctl c0306201 200000000080 returned -22 [ 374.431955][ T42] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 374.461213][ T42] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 374.470588][ T9677] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1544 sclass=netlink_route_socket pid=9677 comm=syz.3.938 [ 374.472996][ T9678] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1544 sclass=netlink_route_socket pid=9678 comm=syz.3.938 [ 374.513032][ T42] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 374.543292][ T42] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 374.574415][ T30] audit: type=1400 audit(1759714779.459:969): avc: denied { create } for pid=9657 comm="syz.1.933" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 374.878001][ T30] audit: type=1400 audit(1759714779.779:970): avc: denied { unlink } for pid=5820 comm="syz-executor" name="file0" dev="tmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 374.941753][ T42] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 374.971244][ T42] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 375.010943][ T42] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 375.120943][ T42] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 375.280379][ T42] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 375.330902][ T5883] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 375.332603][ T42] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 375.411908][ T42] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 375.428297][ T42] usb 3-1: USB disconnect, device number 25 [ 376.239175][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.257919][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.500092][ T5883] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 376.527268][ T5883] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 376.584114][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.961277][ T5883] usb 2-1: config 0 descriptor?? [ 378.062419][ T5883] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 378.104725][ T5883] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 378.143391][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.151744][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.157609][ T5883] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 378.258218][ T9727] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pid=9727 comm=syz.4.949 [ 378.394956][ T5883] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 378.404998][ T5883] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 378.578005][ T5883] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 379.051186][ T5883] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 379.082238][ T5883] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 379.093827][ T5883] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 379.150136][ T5883] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 379.231867][ T30] audit: type=1400 audit(1759714784.139:971): avc: denied { create } for pid=9737 comm="syz.2.952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 379.284248][ T5883] usb 2-1: USB disconnect, device number 28 [ 379.615896][ T30] audit: type=1400 audit(1759714784.519:972): avc: denied { bind } for pid=9753 comm="syz.1.955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 379.654357][ T9754] dvmrp1: entered allmulticast mode [ 381.206900][ T5883] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 381.719234][ T30] audit: type=1400 audit(1759714786.619:973): avc: denied { getopt } for pid=9778 comm="syz.0.960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 381.949520][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.973882][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.011081][ T42] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 382.177340][ T42] usb 1-1: device descriptor read/64, error -71 [ 382.400017][ T5883] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 382.409418][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.421870][ T5883] usb 3-1: config 0 descriptor?? [ 382.562675][ T42] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 382.693928][ T9803] netlink: 'syz.1.963': attribute type 4 has an invalid length. [ 382.711258][ T42] usb 1-1: device descriptor read/64, error -71 [ 382.858458][ T42] usb usb1-port1: attempt power cycle [ 382.880721][ T9803] netlink: 'syz.1.963': attribute type 4 has an invalid length. [ 382.912799][ T5883] hid-led 0003:1D34:000A.000A: unknown main item tag 0x2 [ 383.279832][ T42] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 383.431266][ T5883] hid-led 0003:1D34:000A.000A: probe with driver hid-led failed with error -71 [ 383.443750][ T5883] usb 3-1: USB disconnect, device number 26 [ 383.473037][ T42] usb 1-1: device descriptor read/8, error -71 [ 383.479366][ T30] audit: type=1400 audit(1759714788.379:974): avc: denied { bind } for pid=9814 comm="syz.3.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 383.553839][ T9815] ptrace attach of "./syz-executor exec"[9816] was attempted by "./syz-executor exec"[9815] [ 383.866115][ T42] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 383.901409][ T42] usb 1-1: device descriptor read/8, error -71 [ 384.043941][ T42] usb usb1-port1: unable to enumerate USB device [ 384.504572][ T42] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 385.283582][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.375905][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.887870][ T42] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 385.910870][ T42] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 385.920222][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.935826][ T42] usb 5-1: config 0 descriptor?? [ 386.102458][ T9842] netlink: 'syz.2.973': attribute type 72 has an invalid length. [ 386.192182][ T9842] binder: 9839:9842 unknown command 0 [ 386.197632][ T9842] binder: 9839:9842 ioctl c0306201 200000000080 returned -22 [ 386.425096][ T30] audit: type=1400 audit(1759714791.329:975): avc: denied { write } for pid=9843 comm="syz.3.974" name="001" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 387.233976][ T42] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 387.250763][ T42] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 387.258526][ T42] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 387.266521][ T42] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 387.274172][ T42] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 387.281800][ T42] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 387.289209][ T42] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 387.290003][ T30] audit: type=1400 audit(1759714792.189:976): avc: denied { load_policy } for pid=9852 comm="syz.1.977" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 387.298196][ T9853] SELinux: policydb magic number 0x4 does not match expected magic number 0xf97cff8c [ 387.328371][ T9853] SELinux: failed to load policy [ 387.338471][ T42] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 387.480657][ T42] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 387.481942][ T9859] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20001 [ 387.532281][ T9860] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20001 [ 387.550171][ T42] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 387.580114][ T42] usb 5-1: USB disconnect, device number 25 [ 387.800173][ T5903] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 387.901060][ T9865] syzkaller0: entered promiscuous mode [ 387.906662][ T9865] syzkaller0: entered allmulticast mode [ 388.102069][ T5903] usb 2-1: Using ep0 maxpacket: 32 [ 388.217305][ T5903] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 388.287074][ T5903] usb 2-1: can't read configurations, error -61 [ 388.424311][ T9864] fido_id[9864]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 388.553034][ T5903] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 388.875099][ T5903] usb 2-1: Using ep0 maxpacket: 32 [ 389.042150][ T5903] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 389.086841][ T9867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.981'. [ 389.130222][ T5903] usb 2-1: can't read configurations, error -61 [ 389.198252][ T24] kernel write not supported for file /binder/stats (pid: 24 comm: kworker/1:0) [ 389.264398][ T5903] usb usb2-port1: attempt power cycle [ 389.954231][ T5903] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 390.073097][ T5903] usb 2-1: Using ep0 maxpacket: 32 [ 390.092773][ T5903] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 390.113130][ T5903] usb 2-1: can't read configurations, error -61 [ 390.271757][ T5903] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 390.286081][ T9886] FAULT_INJECTION: forcing a failure. [ 390.286081][ T9886] name fail_futex, interval 1, probability 0, space 0, times 1 [ 390.299163][ T9886] CPU: 0 UID: 0 PID: 9886 Comm: syz.3.985 Not tainted syzkaller #0 PREEMPT(full) [ 390.299187][ T9886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 390.299200][ T9886] Call Trace: [ 390.299207][ T9886] [ 390.299214][ T9886] dump_stack_lvl+0x16c/0x1f0 [ 390.299236][ T9886] should_fail_ex+0x512/0x640 [ 390.299259][ T9886] get_futex_key+0x1d0/0x1560 [ 390.299295][ T9886] ? __pfx_get_futex_key+0x10/0x10 [ 390.299322][ T9886] ? __pfx___schedule+0x10/0x10 [ 390.299346][ T9886] ? lockdep_hardirqs_on+0x7c/0x110 [ 390.299377][ T9886] futex_wake_op+0x129/0xe40 [ 390.299405][ T9886] ? rcu_is_watching+0x12/0xc0 [ 390.299431][ T9886] ? __pfx_futex_wake_op+0x10/0x10 [ 390.299463][ T9886] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 390.299491][ T9886] do_futex+0x2e9/0x350 [ 390.299511][ T9886] ? __pfx_do_futex+0x10/0x10 [ 390.299536][ T9886] __x64_sys_futex+0x1e0/0x4c0 [ 390.299559][ T9886] ? __pfx___x64_sys_futex+0x10/0x10 [ 390.299586][ T9886] do_syscall_64+0xcd/0x4e0 [ 390.299605][ T9886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.299622][ T9886] RIP: 0033:0x7f21b598eec9 [ 390.299636][ T9886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.299652][ T9886] RSP: 002b:00007f21b6806038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 390.299669][ T9886] RAX: ffffffffffffffda RBX: 00007f21b5be6180 RCX: 00007f21b598eec9 [ 390.299680][ T9886] RDX: 0000000000000000 RSI: 0000000000000085 RDI: 0000000000000000 [ 390.299689][ T9886] RBP: 00007f21b6806090 R08: 0000000000000000 R09: 00000000c5fffffd [ 390.299700][ T9886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.299710][ T9886] R13: 00007f21b5be6218 R14: 00007f21b5be6180 R15: 00007ffe919c9b08 [ 390.299734][ T9886] [ 390.351206][ T42] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 390.767010][ T5903] usb 2-1: device descriptor read/8, error -71 [ 390.882724][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.894257][ T5903] usb usb2-port1: unable to enumerate USB device [ 390.901596][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.919917][ T42] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 390.987078][ T42] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 391.011164][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.029048][ T9895] futex_wake_op: syz.1.986 tries to shift op by -1; fix this program [ 391.048736][ T42] usb 5-1: config 0 descriptor?? [ 391.473945][ T42] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 391.487635][ T42] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 391.735260][ T9] usb 5-1: USB disconnect, device number 26 [ 392.181184][ T5883] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 392.331364][ T5883] usb 4-1: device descriptor read/64, error -71 [ 392.732458][ T5883] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 392.901048][ T5883] usb 4-1: device descriptor read/64, error -71 [ 393.023188][ T9] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 393.041147][ T5883] usb usb4-port1: attempt power cycle [ 393.065726][ T42] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 393.146089][ T10] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 393.221717][ T42] usb 5-1: Using ep0 maxpacket: 16 [ 393.236449][ T42] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 393.602643][ T42] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 393.615762][ T42] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 393.627321][ T42] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 393.636709][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 393.645611][ T42] usb 5-1: SerialNumber: syz [ 393.656142][ T42] cdc_acm 5-1:1.0: Zero length descriptor references [ 393.666954][ T42] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -22 [ 393.863509][ T42] usb 5-1: USB disconnect, device number 27 [ 394.211188][ T5883] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 394.244762][ T5883] usb 4-1: device descriptor read/8, error -71 [ 394.263173][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.284844][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 394.300112][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 394.509768][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 394.718064][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 394.734062][ T9918] futex_wake_op: syz.1.995 tries to shift op by -1; fix this program [ 394.796698][ T5883] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 394.812057][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.820989][ T9] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 394.860212][ T10] usb 3-1: config 0 descriptor?? [ 394.865303][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.878119][ T5883] usb 4-1: device descriptor read/8, error -71 [ 394.911700][ T9] usb 1-1: config 0 descriptor?? [ 394.935943][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 395.001339][ T5883] usb usb4-port1: unable to enumerate USB device [ 395.036497][ T9926] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 395.082128][ T9926] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 395.119071][ T9926] netlink: 'syz.1.997': attribute type 10 has an invalid length. [ 395.135743][ T9926] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 395.154990][ T9926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.165934][ T9926] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 395.175783][ T9933] ALSA: seq fatal error: cannot create timer (-22) [ 395.375578][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 395.382577][ T10] hid_parser_main: 8 callbacks suppressed [ 395.382595][ T10] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 395.402603][ T10] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 395.411418][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 395.421029][ T10] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 395.887259][ T9935] ======================================================= [ 395.887259][ T9935] WARNING: The mand mount option has been deprecated and [ 395.887259][ T9935] and is ignored by this kernel. Remove the mand [ 395.887259][ T9935] option from the mount to silence this warning. [ 395.887259][ T9935] ======================================================= [ 395.923314][ T9935] fuse: Bad value for 'fd' [ 395.931239][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 395.941555][ T10] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 395.949072][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 395.955599][ T10] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 395.965863][ T10] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 395.973502][ T10] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 395.985025][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 395.995412][ T10] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 396.007591][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 396.019997][ T10] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 396.029222][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 396.054747][ T9942] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1000'. [ 396.131392][ T9945] input: syz1 as /devices/virtual/input/input16 [ 396.140295][ T10] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 396.159079][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 396.173991][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 396.184231][ T10] usb 3-1: USB disconnect, device number 27 [ 396.195435][ T9] pwc: recv_control_msg error -32 req 02 val 2500 [ 396.208753][ T9] pwc: recv_control_msg error -32 req 02 val 2400 [ 396.241764][ T9] pwc: recv_control_msg error -32 req 02 val 2600 [ 396.256648][ T9] pwc: recv_control_msg error -32 req 02 val 2900 [ 396.278420][ T9] pwc: recv_control_msg error -32 req 02 val 2800 [ 396.293030][ T9] pwc: recv_control_msg error -32 req 04 val 1100 [ 396.294721][ T9947] fido_id[9947]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 396.323472][ T9] pwc: Registered as video103. [ 396.338723][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input17 [ 396.606784][ T10] usb 1-1: USB disconnect, device number 34 [ 396.760843][ T42] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 396.830850][ T5890] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 397.011460][ T5890] usb 5-1: Using ep0 maxpacket: 16 [ 397.019021][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.035873][ T5890] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 397.045999][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.056019][ T5890] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 397.064862][ T42] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 397.087232][ T5890] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 397.097793][ T5890] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 397.106905][ T42] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 397.116571][ T5890] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 397.125967][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.136054][ T5890] usb 5-1: config 0 has no interface number 0 [ 397.152455][ T5890] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 397.164942][ T5890] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 397.175724][ T42] usb 2-1: config 0 descriptor?? [ 397.181706][ T5890] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 397.195669][ T5890] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 397.209518][ T5890] usb 5-1: config 0 interface 125 has no altsetting 0 [ 397.216456][ T5890] usb 5-1: config 0 interface 125 has no altsetting 2 [ 397.231024][ T5890] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 397.242889][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.252160][ T5890] usb 5-1: Product: syz [ 397.256827][ T5890] usb 5-1: Manufacturer: syz [ 397.262107][ T5890] usb 5-1: SerialNumber: syz [ 397.295642][ T5890] usb 5-1: config 0 descriptor?? [ 397.321655][ T5890] usb 5-1: selecting invalid altsetting 2 [ 397.431234][ T30] audit: type=1800 audit(1759714802.329:977): pid=9969 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1005" name="/" dev="fuse" ino=0 res=0 errno=0 [ 397.633576][ T42] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 397.679979][ T42] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 398.262134][ T9987] FAULT_INJECTION: forcing a failure. [ 398.262134][ T9987] name failslab, interval 1, probability 0, space 0, times 1 [ 398.485607][ T5890] get_1284_register timeout [ 398.626988][ T9987] CPU: 0 UID: 0 PID: 9987 Comm: syz.1.1003 Not tainted syzkaller #0 PREEMPT(full) [ 398.627011][ T9987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 398.627020][ T9987] Call Trace: [ 398.627026][ T9987] [ 398.627033][ T9987] dump_stack_lvl+0x16c/0x1f0 [ 398.627051][ T9987] should_fail_ex+0x512/0x640 [ 398.627064][ T9987] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 398.627084][ T9987] should_failslab+0xc2/0x120 [ 398.627098][ T9987] kmem_cache_alloc_noprof+0x75/0x6e0 [ 398.627118][ T9987] ? alloc_empty_file+0x55/0x1e0 [ 398.627145][ T9987] ? alloc_empty_file+0x55/0x1e0 [ 398.627164][ T9987] alloc_empty_file+0x55/0x1e0 [ 398.627190][ T9987] path_openat+0xda/0x2cb0 [ 398.627207][ T9987] ? __pfx_path_openat+0x10/0x10 [ 398.627222][ T9987] do_filp_open+0x20b/0x470 [ 398.627234][ T9987] ? __pfx_do_filp_open+0x10/0x10 [ 398.627259][ T9987] ? alloc_fd+0x471/0x7d0 [ 398.627284][ T9987] do_sys_openat2+0x11b/0x1d0 [ 398.627306][ T9987] ? __pfx_do_sys_openat2+0x10/0x10 [ 398.627329][ T9987] ? __fget_files+0x20e/0x3c0 [ 398.627346][ T9987] __x64_sys_openat+0x174/0x210 [ 398.627362][ T9987] ? __pfx___x64_sys_openat+0x10/0x10 [ 398.627376][ T9987] ? ksys_write+0x1ac/0x250 [ 398.627392][ T9987] do_syscall_64+0xcd/0x4e0 [ 398.627407][ T9987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.627424][ T9987] RIP: 0033:0x7fcabe78d710 [ 398.627437][ T9987] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 398.627453][ T9987] RSP: 002b:00007fcabf6a5b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 398.627469][ T9987] RAX: ffffffffffffffda RBX: 0000000000044800 RCX: 00007fcabe78d710 [ 398.627479][ T9987] RDX: 0000000000044800 RSI: 00007fcabf6a5c10 RDI: 00000000ffffff9c [ 398.627486][ T9987] RBP: 00007fcabf6a5c10 R08: 0000000000000000 R09: 0000000000000000 [ 398.627492][ T9987] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 398.627498][ T9987] R13: 00007fcabe9e6128 R14: 00007fcabe9e6090 R15: 00007ffd954f7988 [ 398.627513][ T9987] [ 399.101820][ T5890] uss720 5-1:0.125: probe with driver uss720 failed with error -5 [ 399.101885][ C1] usb 5-1: async_complete: urb error -104 [ 399.102025][ C1] usb 5-1: async_complete: urb error -104 [ 399.102124][ C1] usb 5-1: async_complete: urb error -104 [ 399.102223][ C1] usb 5-1: async_complete: urb error -104 [ 399.138478][ T30] audit: type=1800 audit(1759714803.789:978): pid=9991 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.1008" name="bus" dev="overlay" ino=1168 res=0 errno=0 [ 399.140575][ T42] usb 2-1: USB disconnect, device number 33 [ 399.779320][T10001] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 1 [ 399.794570][ T12] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 399.805088][ T12] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 399.825571][T10007] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 399.846252][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 399.999546][T10013] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1013'. [ 400.013531][T10013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1013'. [ 400.121306][ T30] audit: type=1400 audit(1759714805.029:979): avc: denied { read } for pid=10018 comm="syz.1.1014" name="file0" dev="tmpfs" ino=987 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 400.147872][ T30] audit: type=1400 audit(1759714805.029:980): avc: denied { open } for pid=10018 comm="syz.1.1014" path="/180/file0" dev="tmpfs" ino=987 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 400.171231][ T42] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 400.270015][ T10] usb 5-1: USB disconnect, device number 28 [ 400.365351][ T42] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 400.369706][ T30] audit: type=1400 audit(1759714805.269:981): avc: denied { append } for pid=10030 comm="syz.1.1016" name="usbmon5" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 400.393289][ T42] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.415237][T10031] 9pnet_fd: Insufficient options for proto=fd [ 400.437905][ T42] usb 3-1: too many endpoints for config 1 interface 1 altsetting 145: 217, using maximum allowed: 30 [ 400.481079][ T42] usb 3-1: config 1 interface 1 altsetting 145 has 0 endpoint descriptors, different from the interface descriptor's value: 217 [ 400.507385][ T42] usb 3-1: config 1 interface 1 has no altsetting 0 [ 400.517561][ T42] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 400.529406][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.546306][ T42] usb 3-1: Product: syz [ 400.556038][ T42] usb 3-1: Manufacturer: syz [ 400.565110][ T42] usb 3-1: SerialNumber: syz [ 400.645388][ T42] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22 [ 400.809766][ T10] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 401.465747][ T30] audit: type=1400 audit(1759714806.359:982): avc: denied { bind } for pid=10010 comm="syz.2.1012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 401.550218][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.581152][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 401.592984][ T30] audit: type=1400 audit(1759714806.399:983): avc: denied { listen } for pid=10010 comm="syz.2.1012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 401.613049][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 402.269228][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 402.278881][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.307275][ T5829] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 402.341203][ T5827] Bluetooth: hci5: command 0x1003 tx timeout [ 402.494669][ T10] usb 5-1: config 0 descriptor?? [ 402.925223][T10045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1018'. [ 402.934408][T10045] netlink: 312 bytes leftover after parsing attributes in process `syz.3.1018'. [ 402.943567][T10045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1018'. [ 402.999113][ T9] usb 3-1: USB disconnect, device number 28 [ 403.070012][ T10] hid_parser_main: 8 callbacks suppressed [ 403.070030][ T10] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 403.106155][ T10] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 403.129285][ T10] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 403.166486][ T10] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 403.206107][ T10] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 403.257671][T10029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.280932][ T10] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 403.301467][T10029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.762708][ T10] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 403.789043][ T10] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 404.004937][ T10] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 404.019710][ T10] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 404.433948][ T10] usb 5-1: USB disconnect, device number 29 [ 404.590924][ T30] audit: type=1400 audit(1759714809.489:984): avc: denied { bind } for pid=10101 comm="syz.1.1028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 404.625169][T10096] fido_id[10096]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 404.843520][T10125] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1031'. [ 405.511527][ T5903] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 405.824789][ T5903] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 405.851394][ T5903] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.951199][ T5903] usb 3-1: too many endpoints for config 1 interface 1 altsetting 145: 217, using maximum allowed: 30 [ 405.991487][ T5903] usb 3-1: config 1 interface 1 altsetting 145 has 0 endpoint descriptors, different from the interface descriptor's value: 217 [ 406.011195][ T5903] usb 3-1: config 1 interface 1 has no altsetting 0 [ 406.041506][ T30] audit: type=1400 audit(1759714810.939:985): avc: denied { mount } for pid=10117 comm="syz.0.1029" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 406.093446][ T5903] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 406.102931][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.111055][ T5903] usb 3-1: Product: syz [ 406.115222][ T5903] usb 3-1: Manufacturer: syz [ 406.119819][ T5903] usb 3-1: SerialNumber: syz [ 406.436262][ T5903] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22 [ 406.661093][T10154] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 406.687568][T10154] CIFS mount error: No usable UNC path provided in device string! [ 406.687568][T10154] [ 406.697846][T10154] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 406.709892][T10154] binder: 10153:10154 ioctl c0046209 9999999999999999 returned -22 [ 407.961021][ T5903] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 408.347468][T10201] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1042'. [ 408.455788][T10202] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 408.520447][ T30] audit: type=1400 audit(1759714813.399:986): avc: denied { bind } for pid=10194 comm="syz.0.1042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 408.567402][T10199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.587426][ T30] audit: type=1400 audit(1759714813.399:987): avc: denied { node_bind } for pid=10194 comm="syz.0.1042" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 408.605081][T10199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.618439][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.633946][ T5883] usb 3-1: USB disconnect, device number 29 [ 408.639928][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.666786][ T5903] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 408.672050][ T10] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 408.684383][ T5903] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 408.698458][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.730588][ T5903] usb 5-1: config 0 descriptor?? [ 408.854217][ T10] usb 4-1: config 255 has an invalid interface number: 181 but max is 0 [ 408.888671][ T10] usb 4-1: config 255 has no interface number 0 [ 409.162856][ T5883] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 409.252741][ T10] usb 4-1: config 255 interface 181 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 409.277032][ T10] usb 4-1: config 255 interface 181 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1024 [ 409.293478][ T30] audit: type=1400 audit(1759714814.199:988): avc: denied { relabelfrom } for pid=10190 comm="syz.4.1041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 409.329300][ T10] usb 4-1: New USB device found, idVendor=110a, idProduct=1150, bcdDevice=43.b6 [ 409.340017][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.351642][ T10] usb 4-1: Product: syz [ 409.355905][ T30] audit: type=1400 audit(1759714814.199:989): avc: denied { relabelto } for pid=10190 comm="syz.4.1041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 409.376105][ T10] usb 4-1: Manufacturer: syz [ 409.382894][ T10] usb 4-1: SerialNumber: syz [ 409.391889][T10198] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 409.434321][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.454675][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.593510][ T5883] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 409.611395][ T5883] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 409.626133][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.631068][ T5903] plantronics 0003:047F:FFFF.0010: item fetching failed at offset 9/15 [ 409.635295][ T10] ti_usb_3410_5052 4-1:255.181: TI USB 3410 1 port adapter converter detected [ 409.662219][ T5883] usb 3-1: config 0 descriptor?? [ 409.667431][ T10] ti_usb_3410_5052 4-1:255.181: missing endpoints [ 409.690700][ T5903] plantronics 0003:047F:FFFF.0010: parse failed [ 409.699793][ T5903] plantronics 0003:047F:FFFF.0010: probe with driver plantronics failed with error -22 [ 410.089020][ T10] usb 4-1: USB disconnect, device number 34 [ 410.247155][ T5883] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 410.255240][ T5883] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 410.264087][ T5883] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 410.271674][ T5883] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 410.279282][ T5883] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 410.311770][ T5883] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 410.363236][ T5883] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 410.380572][ T5883] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 410.388342][ T5883] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 410.411093][ T5883] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 410.456557][ T5883] usb 3-1: USB disconnect, device number 30 [ 410.474855][ T5903] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 410.518148][T10221] fido_id[10221]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 410.623245][ T5890] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 410.631042][ T5903] usb 2-1: Using ep0 maxpacket: 8 [ 410.638882][ T5903] usb 2-1: unable to get BOS descriptor or descriptor too short [ 410.647794][ T5903] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 410.656432][ T5903] usb 2-1: config 0 has no interface number 0 [ 410.662902][ T5903] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 55, changing to 9 [ 410.674411][ T5903] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 8496, setting to 1024 [ 410.689203][ T5903] usb 2-1: config 0 interface 88 has no altsetting 0 [ 410.705994][ T5903] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 410.715553][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 410.723897][ T5903] usb 2-1: Product: syz [ 410.728156][ T5903] usb 2-1: SerialNumber: syz [ 410.762066][ T5903] usb 2-1: config 0 descriptor?? [ 410.782377][ T5890] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 410.795515][ T5890] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 410.809270][ T5890] usb 4-1: New USB device found, idVendor=05ac, idProduct=921c, bcdDevice=9d.fb [ 410.818601][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.841583][ T5890] usb 4-1: config 0 descriptor?? [ 410.853697][ T5890] appledisplay 4-1:0.0: Could not find int-in endpoint [ 410.862308][ T5890] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 411.029512][ T5903] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input18 [ 411.076414][ T30] audit: type=1400 audit(1759714815.969:990): avc: denied { listen } for pid=10219 comm="syz.3.1049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 411.279064][ T5903] usb 2-1: USB disconnect, device number 34 [ 411.279064][ C0] usb_acecad 2-1:0.88: can't resubmit intr, dummy_hcd.1-1/input0, status -19 [ 412.188747][ T5903] usb 4-1: USB disconnect, device number 35 [ 412.591435][ T5883] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 412.899562][ T5883] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 412.914529][ T5883] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.925853][ T5883] usb 2-1: too many endpoints for config 1 interface 1 altsetting 145: 217, using maximum allowed: 30 [ 412.936874][ T5883] usb 2-1: config 1 interface 1 altsetting 145 has 0 endpoint descriptors, different from the interface descriptor's value: 217 [ 412.959237][ T5883] usb 2-1: config 1 interface 1 has no altsetting 0 [ 412.977257][ T5883] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 412.991027][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.058828][ T5883] usb 2-1: Product: syz [ 413.097754][ T5883] usb 2-1: Manufacturer: syz [ 413.102842][ T5883] usb 2-1: SerialNumber: syz [ 413.125009][ T5883] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22 [ 413.669840][ T5883] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 413.853412][ T5883] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 413.863955][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 413.876047][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 413.886406][ T5883] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 413.900970][ T5883] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 413.910092][ T5883] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 413.918444][ T5883] usb 3-1: Manufacturer: syz [ 413.930890][ T5883] usb 3-1: config 0 descriptor?? [ 413.941707][ T9] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 414.124448][ T5903] usb 5-1: USB disconnect, device number 30 [ 414.127285][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.170078][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 414.202960][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 414.234019][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 414.246153][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.261283][ T9] usb 4-1: config 0 descriptor?? [ 414.270892][ T5883] rc_core: IR keymap rc-hauppauge not found [ 414.281866][ T5883] Registered IR keymap rc-empty [ 414.410876][ T5883] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 414.601597][ T5883] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 414.632129][ T5883] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 414.648359][ T5883] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input19 [ 414.665249][ T5883] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 414.784286][ T5883] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 414.817783][ T9] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 414.825589][ T5883] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 414.837206][ T9] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 414.851027][ T5883] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 415.362750][ T5903] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 415.850855][ T5883] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 415.873603][ T9] usb 2-1: USB disconnect, device number 35 [ 416.165715][ T5883] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 416.182385][T10257] FAULT_INJECTION: forcing a failure. [ 416.182385][T10257] name failslab, interval 1, probability 0, space 0, times 0 [ 416.234735][T10284] netlink: 'syz.0.1065': attribute type 10 has an invalid length. [ 416.250897][T10257] CPU: 1 UID: 0 PID: 10257 Comm: syz.3.1058 Not tainted syzkaller #0 PREEMPT(full) [ 416.250922][T10257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 416.250933][T10257] Call Trace: [ 416.250938][T10257] [ 416.250945][T10257] dump_stack_lvl+0x16c/0x1f0 [ 416.250966][T10257] should_fail_ex+0x512/0x640 [ 416.250986][T10257] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 416.251016][T10257] should_failslab+0xc2/0x120 [ 416.251037][T10257] kmem_cache_alloc_noprof+0x75/0x6e0 [ 416.251063][T10257] ? alloc_empty_file+0x55/0x1e0 [ 416.251091][T10257] ? alloc_empty_file+0x55/0x1e0 [ 416.251112][T10257] alloc_empty_file+0x55/0x1e0 [ 416.251136][T10257] path_openat+0xda/0x2cb0 [ 416.251164][T10257] ? __pfx_path_openat+0x10/0x10 [ 416.251190][T10257] do_filp_open+0x20b/0x470 [ 416.251209][T10257] ? __pfx_do_filp_open+0x10/0x10 [ 416.251247][T10257] ? alloc_fd+0x471/0x7d0 [ 416.251274][T10257] do_sys_openat2+0x11b/0x1d0 [ 416.251297][T10257] ? __pfx_do_sys_openat2+0x10/0x10 [ 416.251324][T10257] ? __fget_files+0x20e/0x3c0 [ 416.251348][T10257] __x64_sys_openat+0x174/0x210 [ 416.251377][T10257] ? __pfx___x64_sys_openat+0x10/0x10 [ 416.251399][T10257] ? ksys_write+0x1ac/0x250 [ 416.251426][T10257] do_syscall_64+0xcd/0x4e0 [ 416.251445][T10257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.251468][T10257] RIP: 0033:0x7f21b598d710 [ 416.251483][T10257] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 416.251500][T10257] RSP: 002b:00007f21b6847b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 416.251518][T10257] RAX: ffffffffffffffda RBX: 0000000000044800 RCX: 00007f21b598d710 [ 416.251529][T10257] RDX: 0000000000044800 RSI: 00007f21b6847c10 RDI: 00000000ffffff9c [ 416.251540][T10257] RBP: 00007f21b6847c10 R08: 0000000000000000 R09: 0000000000000000 [ 416.251550][T10257] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 416.251560][T10257] R13: 00007f21b5be6038 R14: 00007f21b5be5fa0 R15: 00007ffe919c9b08 [ 416.251583][T10257] [ 416.265504][ T5883] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 416.362521][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.391154][ T5831] usb 4-1: USB disconnect, device number 36 [ 416.427440][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 416.451265][ T5883] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 416.511585][ T5903] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 416.550153][ T5883] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 416.569447][ T5903] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 416.590149][ T5883] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 416.608331][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.624365][ T5883] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 416.640585][T10292] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 416.640610][ T5903] usb 5-1: config 0 descriptor?? [ 416.653529][T10292] IPv6: NLM_F_CREATE should be set when creating new route [ 416.671027][ T5883] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 416.685272][ T5883] usb 3-1: USB disconnect, device number 31 [ 417.259486][ T5903] hid_parser_main: 8 callbacks suppressed [ 417.259508][ T5903] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 417.278652][ T5903] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 417.286897][ T5903] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 417.340898][ T5903] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 417.465524][ T5903] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 417.484973][ T5903] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 417.529406][ T5903] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 417.752805][ T5903] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 417.806306][ T5903] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 417.860296][ T5903] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 418.142904][ T5903] usb 5-1: USB disconnect, device number 31 [ 418.363666][T10314] fido_id[10314]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 418.996734][ T5883] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 419.130875][ T5831] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 419.253155][ T5883] usb 3-1: device descriptor read/64, error -71 [ 419.598444][ T5903] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 419.859827][ T5883] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 419.868926][ T5831] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.899527][ T5831] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.920467][ T5831] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 419.930048][ T5831] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.963408][ T5831] usb 4-1: config 0 descriptor?? [ 420.017399][ T5883] usb 3-1: device descriptor read/64, error -71 [ 420.035087][ T5903] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 420.047542][ T5903] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.058527][ T5903] usb 1-1: too many endpoints for config 1 interface 1 altsetting 145: 217, using maximum allowed: 30 [ 420.070105][ T5903] usb 1-1: config 1 interface 1 altsetting 145 has 0 endpoint descriptors, different from the interface descriptor's value: 217 [ 420.084888][ T5903] usb 1-1: config 1 interface 1 has no altsetting 0 [ 420.094196][ T5903] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 420.103334][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.111344][ T5903] usb 1-1: Product: syz [ 420.115498][ T5903] usb 1-1: Manufacturer: syz [ 420.120068][ T5903] usb 1-1: SerialNumber: syz [ 420.130153][ T5903] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -22 [ 420.141763][ T5883] usb usb3-port1: attempt power cycle [ 420.251054][ T9] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 420.280878][ T24] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 420.402144][ T9] usb 5-1: config 1 interface 0 altsetting 7 endpoint 0x3 has invalid wMaxPacketSize 0 [ 420.412447][ T9] usb 5-1: config 1 interface 0 has no altsetting 0 [ 420.424576][ T5831] hid-led 0003:1D34:000A.0014: unknown main item tag 0x2 [ 420.434713][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 420.444263][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.452999][ T9] usb 5-1: Product: Ѓ [ 420.453014][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 420.453037][ T9] usb 5-1: Manufacturer: 饮巩귟琈鰢惃✚䄔ﲁ킔䀙鴅뚎侤氌拾裈聵泉璢쬌囃ꕧ૮ﱥ铉茐䪣툰釾⽠貨丹៚嚋侘巫溋旳顽탥熚랙鹟௪螚㄁⠪溱蘚觉䆴韂맿䪕羝㸦炐鋡쒓홦캹隲㞾鵑벧豬뛶螩쵭茫煘뿜 [ 420.458509][ T24] usb 2-1: config 160 has an invalid interface number: 251 but max is 0 [ 420.464819][ T9] usb 5-1: SerialNumber: 、 [ 420.504861][ T24] usb 2-1: config 160 has no interface number 0 [ 420.511162][ T24] usb 2-1: too many endpoints for config 160 interface 251 altsetting 80: 245, using maximum allowed: 30 [ 420.511323][ T5883] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 420.522535][ T24] usb 2-1: config 160 interface 251 altsetting 80 has 0 endpoint descriptors, different from the interface descriptor's value: 245 [ 420.541612][ T5883] usb 3-1: device descriptor read/8, error -71 [ 420.554685][ T24] usb 2-1: config 160 interface 251 has no altsetting 0 [ 420.563870][ T24] usb 2-1: New USB device found, idVendor=12d1, idProduct=ce42, bcdDevice= f.80 [ 420.573189][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.581245][ T24] usb 2-1: Product: syz [ 420.585402][ T24] usb 2-1: Manufacturer: syz [ 420.589989][ T24] usb 2-1: SerialNumber: syz [ 420.683776][ T5831] hid-led 0003:1D34:000A.0014: probe with driver hid-led failed with error -71 [ 420.701731][ T5831] usb 4-1: USB disconnect, device number 37 [ 420.792604][ T5883] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 420.808763][ T24] usb 2-1: USB disconnect, device number 36 [ 420.821745][ T5883] usb 3-1: device descriptor read/8, error -71 [ 420.912041][T10339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.921871][T10339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.932469][ T5883] usb usb3-port1: unable to enumerate USB device [ 420.942503][ T9] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 420.956607][ T9] usb 5-1: USB disconnect, device number 32 [ 422.004506][ T24] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 422.070999][ T9] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 422.099272][ T5903] usb 1-1: USB disconnect, device number 35 [ 422.179752][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.394568][ T24] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 422.412836][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.482945][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 422.488463][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.510840][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 422.513358][ T24] usb 4-1: config 0 descriptor?? [ 422.541741][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 422.554141][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 422.569611][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.610315][ T9] usb 3-1: config 0 descriptor?? [ 422.805653][ T5903] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 422.976012][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 423.007781][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 423.014736][ T5903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.032408][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 423.035628][ T9] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 423.040842][ T5903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.064986][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 423.068462][ T9] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 423.087044][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 423.094699][ T5903] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 423.107889][ T9] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 423.108322][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 423.130846][ T9] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 423.130994][ T5903] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 423.150201][ T24] pwc: recv_control_msg error -32 req 02 val 2000 [ 423.158923][ T24] pwc: recv_control_msg error -32 req 02 val 2100 [ 423.168275][ T24] pwc: recv_control_msg error -32 req 04 val 1500 [ 423.170432][ T9] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 423.175230][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.191917][ T24] pwc: recv_control_msg error -32 req 02 val 2500 [ 423.202920][ T24] pwc: recv_control_msg error -32 req 02 val 2400 [ 423.210213][ T24] pwc: recv_control_msg error -32 req 02 val 2600 [ 423.221450][ T24] pwc: recv_control_msg error -32 req 02 val 2900 [ 423.225176][ T9] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 423.228739][ T24] pwc: recv_control_msg error -32 req 02 val 2800 [ 423.236157][T10348] FAULT_INJECTION: forcing a failure. [ 423.236157][T10348] name failslab, interval 1, probability 0, space 0, times 0 [ 423.257043][ T24] pwc: recv_control_msg error -32 req 04 val 1100 [ 423.273441][ T5903] usb 2-1: config 0 descriptor?? [ 423.286898][ T24] pwc: Registered as video103. [ 423.301266][T10348] CPU: 1 UID: 0 PID: 10348 Comm: syz.2.1081 Not tainted syzkaller #0 PREEMPT(full) [ 423.301292][T10348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 423.301302][T10348] Call Trace: [ 423.301308][T10348] [ 423.301315][T10348] dump_stack_lvl+0x16c/0x1f0 [ 423.301339][T10348] should_fail_ex+0x512/0x640 [ 423.301358][T10348] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 423.301389][T10348] should_failslab+0xc2/0x120 [ 423.301412][T10348] kmem_cache_alloc_noprof+0x75/0x6e0 [ 423.301439][T10348] ? security_file_alloc+0x34/0x2b0 [ 423.301465][T10348] ? security_file_alloc+0x34/0x2b0 [ 423.301485][T10348] security_file_alloc+0x34/0x2b0 [ 423.301511][T10348] init_file+0x93/0x4c0 [ 423.301536][T10348] alloc_empty_file+0x73/0x1e0 [ 423.301561][T10348] path_openat+0xda/0x2cb0 [ 423.301590][T10348] ? __pfx_path_openat+0x10/0x10 [ 423.301616][T10348] do_filp_open+0x20b/0x470 [ 423.301637][T10348] ? __pfx_do_filp_open+0x10/0x10 [ 423.301675][T10348] ? alloc_fd+0x471/0x7d0 [ 423.301703][T10348] do_sys_openat2+0x11b/0x1d0 [ 423.301727][T10348] ? __pfx_do_sys_openat2+0x10/0x10 [ 423.301753][T10348] ? __fget_files+0x20e/0x3c0 [ 423.301777][T10348] __x64_sys_openat+0x174/0x210 [ 423.301801][T10348] ? __pfx___x64_sys_openat+0x10/0x10 [ 423.301824][T10348] ? ksys_write+0x1ac/0x250 [ 423.301851][T10348] do_syscall_64+0xcd/0x4e0 [ 423.301871][T10348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.301888][T10348] RIP: 0033:0x7f8b6098d710 [ 423.301903][T10348] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 423.301921][T10348] RSP: 002b:00007f8b618ecb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 423.301938][T10348] RAX: ffffffffffffffda RBX: 0000000000044800 RCX: 00007f8b6098d710 [ 423.301949][T10348] RDX: 0000000000044800 RSI: 00007f8b618ecc10 RDI: 00000000ffffff9c [ 423.301960][T10348] RBP: 00007f8b618ecc10 R08: 0000000000000000 R09: 0000000000000000 [ 423.301970][T10348] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 423.301981][T10348] R13: 00007f8b60be6038 R14: 00007f8b60be5fa0 R15: 00007fffc3ec67d8 [ 423.302005][T10348] [ 423.302189][ T9] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 423.322651][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input20 [ 423.350823][ T9] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 423.528951][ T24] usb 4-1: USB disconnect, device number 38 [ 423.533534][ T9] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 423.560895][ T5890] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 423.597414][ T9] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 423.639839][ T9] usb 3-1: USB disconnect, device number 36 [ 423.714950][T10375] fido_id[10375]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 423.768336][ T5903] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 423.787814][ T5903] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 423.816127][ T5890] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 423.825458][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.834167][ T5890] usb 5-1: Product: syz [ 423.839034][ T5890] usb 5-1: Manufacturer: syz [ 423.843868][ T5890] usb 5-1: SerialNumber: syz [ 423.949581][ T5890] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 423.974309][T10380] netlink: 'syz.2.1088': attribute type 2 has an invalid length. [ 423.984429][ T5903] usb 2-1: USB disconnect, device number 37 [ 423.992530][T10382] 8021q: adding VLAN 0 to HW filter on device bond2 [ 423.999742][T10380] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1088'. [ 424.006775][ T24] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 424.223745][T10371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.232472][T10371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.411123][ T9] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 424.442797][ T5831] usb 5-1: USB disconnect, device number 33 [ 424.571184][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 424.583971][ T9] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 424.591709][ T9] usb 1-1: can't read configurations, error -71 [ 424.760990][ T5903] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 424.816643][T10394] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1093'. [ 424.866582][ T6915] block nbd64: NBD_DISCONNECT [ 425.120328][ T24] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 425.245341][ T5903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.264957][ T24] ath9k_htc: Failed to initialize the device [ 425.272136][ T5903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.282115][ T5903] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 425.285312][ T5831] usb 5-1: ath9k_htc: USB layer deinitialized [ 425.341122][ T5903] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 425.370749][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.453741][ T6915] udevd[6915]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 425.465518][ T5903] usb 2-1: config 0 descriptor?? [ 425.637300][T10415] trusted_key: encrypted_key: insufficient parameters specified [ 425.814758][T10419] ntfs3(nullb0): Primary boot signature is not NTFS. [ 425.864286][T10419] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 425.894523][T10420] ntfs3(nullb0): Primary boot signature is not NTFS. [ 425.926021][T10420] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 425.952465][ T24] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 426.074644][ T5903] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 426.624269][T10426] tmpfs: Unknown parameter 'grpqufF' [ 426.665410][ T5903] usb 2-1: USB disconnect, device number 38 [ 426.706672][T10427] fido_id[10427]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 426.771103][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.850473][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.863168][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 426.880539][ T24] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 426.903089][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.922834][ T24] usb 1-1: config 0 descriptor?? [ 427.058822][ T30] audit: type=1400 audit(1759714831.959:991): avc: denied { append } for pid=10434 comm="syz.4.1105" name="card1" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 427.145544][T10437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1105'. [ 427.308216][ T5890] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 427.460647][ T24] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 427.512958][ T5890] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 427.553635][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 427.580934][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 427.604146][ T5890] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 427.618890][ T5890] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 427.631702][ T5890] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 427.640004][ T5890] usb 3-1: Manufacturer: syz [ 427.647025][ T5890] usb 3-1: config 0 descriptor?? [ 427.661923][T10417] FAULT_INJECTION: forcing a failure. [ 427.661923][T10417] name failslab, interval 1, probability 0, space 0, times 0 [ 427.676551][T10417] CPU: 1 UID: 0 PID: 10417 Comm: syz.0.1098 Not tainted syzkaller #0 PREEMPT(full) [ 427.676577][T10417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 427.676587][T10417] Call Trace: [ 427.676593][T10417] [ 427.676603][T10417] dump_stack_lvl+0x16c/0x1f0 [ 427.676626][T10417] should_fail_ex+0x512/0x640 [ 427.676645][T10417] ? fs_reclaim_acquire+0xae/0x150 [ 427.676670][T10417] should_failslab+0xc2/0x120 [ 427.676692][T10417] __kmalloc_noprof+0xdd/0x880 [ 427.676716][T10417] ? kfree+0x252/0x6d0 [ 427.676738][T10417] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 427.676763][T10417] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 427.676783][T10417] tomoyo_realpath_from_path+0xc2/0x6e0 [ 427.676807][T10417] tomoyo_check_open_permission+0x2ab/0x3c0 [ 427.676833][T10417] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 427.676884][T10417] ? do_raw_spin_lock+0x12c/0x2b0 [ 427.676911][T10417] tomoyo_file_open+0x6b/0x90 [ 427.676933][T10417] security_file_open+0x84/0x1e0 [ 427.676953][T10417] do_dentry_open+0x596/0x1530 [ 427.676978][T10417] vfs_open+0x82/0x3f0 [ 427.677004][T10417] path_openat+0x1de4/0x2cb0 [ 427.677032][T10417] ? __pfx_path_openat+0x10/0x10 [ 427.677058][T10417] do_filp_open+0x20b/0x470 [ 427.677078][T10417] ? __pfx_do_filp_open+0x10/0x10 [ 427.677114][T10417] ? alloc_fd+0x471/0x7d0 [ 427.677140][T10417] do_sys_openat2+0x11b/0x1d0 [ 427.677162][T10417] ? __pfx_do_sys_openat2+0x10/0x10 [ 427.677187][T10417] ? __fget_files+0x20e/0x3c0 [ 427.677208][T10417] __x64_sys_openat+0x174/0x210 [ 427.677231][T10417] ? __pfx___x64_sys_openat+0x10/0x10 [ 427.677252][T10417] ? ksys_write+0x1ac/0x250 [ 427.677277][T10417] do_syscall_64+0xcd/0x4e0 [ 427.677293][T10417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.677309][T10417] RIP: 0033:0x7ff352b8d710 [ 427.677323][T10417] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 427.677338][T10417] RSP: 002b:00007ff3539d0b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 427.677355][T10417] RAX: ffffffffffffffda RBX: 0000000000044800 RCX: 00007ff352b8d710 [ 427.677366][T10417] RDX: 0000000000044800 RSI: 00007ff3539d0c10 RDI: 00000000ffffff9c [ 427.677375][T10417] RBP: 00007ff3539d0c10 R08: 0000000000000000 R09: 0000000000000000 [ 427.677382][T10417] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 427.677389][T10417] R13: 00007ff352de6038 R14: 00007ff352de5fa0 R15: 00007ffd6fea5588 [ 427.677408][T10417] [ 427.680936][T10417] ERROR: Out of memory at tomoyo_realpath_from_path. [ 427.946790][ T5883] usb 1-1: USB disconnect, device number 38 [ 428.076519][ T5890] rc_core: IR keymap rc-hauppauge not found [ 428.097932][ T5890] Registered IR keymap rc-empty [ 428.111815][ T5890] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 428.142574][ T30] audit: type=1400 audit(1759714833.049:992): avc: denied { write } for pid=10444 comm="syz.4.1107" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 428.189511][ T5890] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 428.197835][ T30] audit: type=1400 audit(1759714833.069:993): avc: denied { open } for pid=10444 comm="syz.4.1107" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 428.219204][ C1] vkms_vblank_simulate: vblank timer overrun [ 428.226100][ T5890] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 428.238791][ T5890] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input21 [ 428.272544][ T5890] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 428.291121][ T5890] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 428.311530][T10441] netlink: 'syz.1.1106': attribute type 29 has an invalid length. [ 428.326382][ T5890] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 428.346047][T10441] netlink: 'syz.1.1106': attribute type 29 has an invalid length. [ 428.353356][ T5890] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 428.363632][T10441] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1106'. [ 428.371858][ T5890] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 428.403113][ T5890] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 428.431057][ T24] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 428.441169][ T5890] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 428.471369][ T5890] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 428.517190][ T5890] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 428.542425][ T5890] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 428.633748][ T5890] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 428.648329][ T24] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 428.657500][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.674617][ T5890] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 428.711500][ T24] usb 5-1: Product: syz [ 428.777432][ T24] usb 5-1: Manufacturer: syz [ 428.893408][ T24] usb 5-1: SerialNumber: syz [ 429.022279][ T5890] usb 3-1: USB disconnect, device number 37 [ 429.183469][ T30] audit: type=1400 audit(1759714834.089:994): avc: denied { bind } for pid=10458 comm="syz.1.1111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 429.231914][ T30] audit: type=1400 audit(1759714834.129:995): avc: denied { bind } for pid=10461 comm="syz.2.1112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 429.418223][T10445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.440685][T10445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.535051][ T24] rtl8150 5-1:1.0: couldn't reset the device [ 429.543239][ T24] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 429.651288][ T24] usb 5-1: USB disconnect, device number 34 [ 431.389458][T10494] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1119'. [ 431.500506][T10499] libceph: resolve '0..' (ret=-3): failed [ 431.550842][ T9] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 431.581151][ T5883] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 431.587286][ T30] audit: type=1326 audit(1759714836.489:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10502 comm="syz.4.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6c818eec9 code=0x7ffc0000 [ 431.811438][ T30] audit: type=1326 audit(1759714836.489:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10502 comm="syz.4.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6c818eec9 code=0x7ffc0000 [ 432.353132][ T30] audit: type=1326 audit(1759714836.529:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10502 comm="syz.4.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7fa6c818eec9 code=0x7ffc0000 [ 432.377334][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.388331][ T5883] usb 2-1: Using ep0 maxpacket: 8 [ 432.394082][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.440716][ T30] audit: type=1326 audit(1759714836.529:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10502 comm="syz.4.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6c818eec9 code=0x7ffc0000 [ 432.464649][ T30] audit: type=1326 audit(1759714836.529:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10502 comm="syz.4.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6c818eec9 code=0x7ffc0000 [ 432.498423][ T5883] usb 2-1: unable to get BOS descriptor or descriptor too short [ 432.507340][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 432.572885][ T30] audit: type=1326 audit(1759714836.549:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10502 comm="syz.4.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6c818eec9 code=0x7ffc0000 [ 432.596794][ T30] audit: type=1326 audit(1759714836.549:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10502 comm="syz.4.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6c818eec9 code=0x7ffc0000 [ 432.620325][ C1] vkms_vblank_simulate: vblank timer overrun [ 432.626831][ T30] audit: type=1326 audit(1759714836.549:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10502 comm="syz.4.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6c818eec9 code=0x7ffc0000 [ 432.650317][ C1] vkms_vblank_simulate: vblank timer overrun [ 432.656943][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 432.666876][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.816392][ T30] audit: type=1326 audit(1759714836.549:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10502 comm="syz.4.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6c818eec9 code=0x7ffc0000 [ 432.846370][ T5883] usb 2-1: unable to read config index 0 descriptor/all [ 432.856461][ T9] usb 3-1: config 0 descriptor?? [ 432.866015][ T5883] usb 2-1: can't read configurations, error -71 [ 432.877984][ T30] audit: type=1326 audit(1759714836.549:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10502 comm="syz.4.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6c818eec9 code=0x7ffc0000 [ 432.954265][ T30] audit: type=1326 audit(1759714836.549:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10502 comm="syz.4.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6c818eec9 code=0x7ffc0000 [ 432.983824][ T30] audit: type=1326 audit(1759714836.549:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10502 comm="syz.4.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6c818eec9 code=0x7ffc0000 [ 433.294038][ T9] hid_parser_main: 26 callbacks suppressed [ 433.294057][ T9] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 433.329046][ T9] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 433.339811][ T9] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 433.348387][ T9] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 433.377925][ T9] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 433.385986][ T9] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 433.394549][ T9] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 433.403330][ T9] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 433.411246][ T9] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 433.428190][ T9] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 433.551961][T10489] FAULT_INJECTION: forcing a failure. [ 433.551961][T10489] name failslab, interval 1, probability 0, space 0, times 0 [ 433.564888][T10489] CPU: 1 UID: 0 PID: 10489 Comm: syz.2.1118 Not tainted syzkaller #0 PREEMPT(full) [ 433.564912][T10489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 433.564922][T10489] Call Trace: [ 433.564927][T10489] [ 433.564934][T10489] dump_stack_lvl+0x16c/0x1f0 [ 433.564956][T10489] should_fail_ex+0x512/0x640 [ 433.564974][T10489] ? fs_reclaim_acquire+0xae/0x150 [ 433.564998][T10489] should_failslab+0xc2/0x120 [ 433.565020][T10489] __kmalloc_noprof+0xdd/0x880 [ 433.565042][T10489] ? tomoyo_encode2+0x100/0x3e0 [ 433.565065][T10489] ? tomoyo_encode2+0x100/0x3e0 [ 433.565081][T10489] tomoyo_encode2+0x100/0x3e0 [ 433.565101][T10489] tomoyo_encode+0x29/0x50 [ 433.565119][T10489] tomoyo_realpath_from_path+0x18f/0x6e0 [ 433.565146][T10489] tomoyo_check_open_permission+0x2ab/0x3c0 [ 433.565172][T10489] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 433.565231][T10489] ? do_raw_spin_lock+0x12c/0x2b0 [ 433.565260][T10489] tomoyo_file_open+0x6b/0x90 [ 433.565283][T10489] security_file_open+0x84/0x1e0 [ 433.565304][T10489] do_dentry_open+0x596/0x1530 [ 433.565330][T10489] vfs_open+0x82/0x3f0 [ 433.565356][T10489] path_openat+0x1de4/0x2cb0 [ 433.565384][T10489] ? __pfx_path_openat+0x10/0x10 [ 433.565410][T10489] do_filp_open+0x20b/0x470 [ 433.565429][T10489] ? __pfx_do_filp_open+0x10/0x10 [ 433.565464][T10489] ? alloc_fd+0x471/0x7d0 [ 433.565489][T10489] do_sys_openat2+0x11b/0x1d0 [ 433.565512][T10489] ? __pfx_do_sys_openat2+0x10/0x10 [ 433.565536][T10489] ? __fget_files+0x20e/0x3c0 [ 433.565555][T10489] __x64_sys_openat+0x174/0x210 [ 433.565570][T10489] ? __pfx___x64_sys_openat+0x10/0x10 [ 433.565585][T10489] ? ksys_write+0x1ac/0x250 [ 433.565601][T10489] do_syscall_64+0xcd/0x4e0 [ 433.565612][T10489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.565624][T10489] RIP: 0033:0x7f8b6098d710 [ 433.565634][T10489] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 433.565645][T10489] RSP: 002b:00007f8b618ecb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 433.565656][T10489] RAX: ffffffffffffffda RBX: 0000000000044800 RCX: 00007f8b6098d710 [ 433.565663][T10489] RDX: 0000000000044800 RSI: 00007f8b618ecc10 RDI: 00000000ffffff9c [ 433.565669][T10489] RBP: 00007f8b618ecc10 R08: 0000000000000000 R09: 0000000000000000 [ 433.565676][T10489] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 433.565682][T10489] R13: 00007f8b60be6038 R14: 00007f8b60be5fa0 R15: 00007fffc3ec67d8 [ 433.565696][T10489] [ 433.621175][T10489] ERROR: Out of memory at tomoyo_realpath_from_path. [ 433.901174][ T9] usb 3-1: USB disconnect, device number 38 [ 433.951240][ T24] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 434.111127][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 434.120875][ T24] usb 5-1: config 0 has an invalid interface number: 5 but max is 0 [ 434.129160][ T24] usb 5-1: config 0 has no interface number 0 [ 434.136472][ T24] usb 5-1: config 0 interface 5 has no altsetting 0 [ 434.146208][ T24] usb 5-1: New USB device found, idVendor=19d2, idProduct=0121, bcdDevice=c1.44 [ 434.165686][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.181477][ T24] usb 5-1: Product: syz [ 434.189560][ T24] usb 5-1: Manufacturer: syz [ 434.194266][ T24] usb 5-1: SerialNumber: syz [ 434.205420][ T24] usb 5-1: config 0 descriptor?? [ 434.210847][ T5883] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 434.390918][ T5883] usb 2-1: Using ep0 maxpacket: 32 [ 434.397378][ T5883] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 434.405819][ T5883] usb 2-1: config 0 has no interface number 0 [ 434.412166][ T5883] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 434.425608][ T5883] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 434.434906][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.461730][ T5883] usb 2-1: Product: syz [ 434.465934][ T5883] usb 2-1: Manufacturer: syz [ 434.470522][ T5883] usb 2-1: SerialNumber: syz [ 434.496060][ T5883] usb 2-1: config 0 descriptor?? [ 434.533451][ T5883] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 434.575019][ T5883] em28xx 2-1:0.132: Video interface 132 found: [ 434.832044][ T5883] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 435.073343][ T5883] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 435.101187][ T5883] em28xx 2-1:0.132: board has no eeprom [ 435.171275][ T5883] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 435.232510][ T5883] em28xx 2-1:0.132: analog set to bulk mode. [ 435.238553][ T9] em28xx 2-1:0.132: Registering V4L2 extension [ 435.282575][ T5883] usb 2-1: USB disconnect, device number 41 [ 435.322563][ T9] em28xx 2-1:0.132: failed to trigger read from i2c address 0x4a (error=-19) [ 435.355497][ T5883] em28xx 2-1:0.132: Disconnecting em28xx [ 435.552711][ T24] usb 5-1: USB disconnect, device number 35 [ 435.913573][ T9] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 435.963281][ T9] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 435.974621][T10576] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 435.986934][ T9] em28xx 2-1:0.132: No AC97 audio processor [ 436.019432][ T9] usb 2-1: Decoder not found [ 436.024190][ T9] em28xx 2-1:0.132: failed to create media graph [ 436.075301][ T9] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 436.096989][T10579] program syz.0.1141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 436.109737][ T9] em28xx 2-1:0.132: Remote control support is not available for this card. [ 436.126627][ T5883] em28xx 2-1:0.132: Closing input extension [ 436.353479][T10558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 436.437111][ T5883] em28xx 2-1:0.132: Freeing device [ 436.444189][T10588] netlink: 'syz.1.1143': attribute type 10 has an invalid length. [ 436.640955][ T9] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 436.814767][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.825815][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.835800][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 436.852163][ T9] usb 5-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 436.882846][ T5883] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 436.914132][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.972116][ T9] usb 5-1: config 0 descriptor?? [ 437.053164][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.065722][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 437.211321][ T5883] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 437.231325][ T5883] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 437.252032][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.265188][ T5883] usb 2-1: config 0 descriptor?? [ 437.709192][T10583] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1140'. [ 437.972774][ T9] pantherlord 0003:0810:0002.001A: unknown main item tag 0x1 [ 437.992277][ T9] pantherlord 0003:0810:0002.001A: hidraw0: USB HID v0.00 Device [HID 0810:0002] on usb-dummy_hcd.4-1/input0 [ 438.004217][ T9] pantherlord 0003:0810:0002.001A: Force feedback for PantherLord/GreenAsia devices by Anssi Hannula [ 438.020518][ T9] usb 5-1: USB disconnect, device number 36 [ 438.313999][ T5883] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 438.328967][ T5883] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 439.112500][T10591] FAULT_INJECTION: forcing a failure. [ 439.112500][T10591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 439.139406][ T24] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 439.167768][T10623] batman_adv: batadv0: Adding interface: dummy0 [ 439.222188][T10623] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.259832][T10591] CPU: 1 UID: 0 PID: 10591 Comm: syz.1.1144 Not tainted syzkaller #0 PREEMPT(full) [ 439.259858][T10591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 439.259868][T10591] Call Trace: [ 439.259874][T10591] [ 439.259881][T10591] dump_stack_lvl+0x16c/0x1f0 [ 439.259905][T10591] should_fail_ex+0x512/0x640 [ 439.259929][T10591] _copy_to_user+0x32/0xd0 [ 439.259952][T10591] simple_read_from_buffer+0xcb/0x170 [ 439.259985][T10591] proc_fail_nth_read+0x197/0x240 [ 439.260009][T10591] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 439.260033][T10591] ? rw_verify_area+0xcf/0x6c0 [ 439.260060][T10591] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 439.260082][T10591] vfs_read+0x1e1/0xcf0 [ 439.260104][T10591] ? __pfx___mutex_lock+0x10/0x10 [ 439.260122][T10591] ? __pfx_vfs_read+0x10/0x10 [ 439.260147][T10591] ? __fget_files+0x20e/0x3c0 [ 439.260175][T10591] ksys_read+0x12a/0x250 [ 439.260192][T10591] ? __pfx_ksys_read+0x10/0x10 [ 439.260223][T10591] do_syscall_64+0xcd/0x4e0 [ 439.260243][T10591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.260261][T10591] RIP: 0033:0x7fcabe78d8dc [ 439.260275][T10591] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 439.260292][T10591] RSP: 002b:00007fcabf6c7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 439.260309][T10591] RAX: ffffffffffffffda RBX: 00007fcabe9e5fa0 RCX: 00007fcabe78d8dc [ 439.260321][T10591] RDX: 000000000000000f RSI: 00007fcabf6c70a0 RDI: 0000000000000005 [ 439.260332][T10591] RBP: 00007fcabf6c7090 R08: 0000000000000000 R09: 0000000000000000 [ 439.260341][T10591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.260351][T10591] R13: 00007fcabe9e6038 R14: 00007fcabe9e5fa0 R15: 00007ffd954f7988 [ 439.260377][T10591] [ 439.284681][ T5883] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 439.294954][T10624] fido_id[10624]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 439.296092][ T5883] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 439.474303][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.485464][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.496713][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 440.259813][T10623] batman_adv: batadv0: Interface activated: dummy0 [ 440.267340][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 440.267355][ T30] audit: type=1400 audit(1759714844.869:1050): avc: denied { mount } for pid=10627 comm="syz.2.1152" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 440.383762][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.390061][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.410813][ T24] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 440.419865][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.492460][T10626] batadv0: mtu less than device minimum [ 440.542276][ T24] usb 1-1: config 0 descriptor?? [ 440.552514][T10626] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 440.564304][T10626] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 440.575689][T10626] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 440.587075][T10626] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 440.598449][T10626] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 440.609832][T10626] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 440.621246][T10626] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 440.632619][T10626] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 440.644556][T10626] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 440.678419][ T30] audit: type=1400 audit(1759714844.869:1051): avc: denied { remount } for pid=10627 comm="syz.2.1152" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 440.703830][T10636] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1153'. [ 440.713769][ T24] usb 1-1: can't set config #0, error -71 [ 440.748894][ T24] usb 1-1: USB disconnect, device number 39 [ 441.100849][ T5890] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 441.106610][ T5883] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 441.113114][T10638] sit1: entered promiscuous mode [ 441.121750][T10636] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1153'. [ 441.142526][T10636] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1153'. [ 441.157809][T10636] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1153'. [ 441.191320][T10636] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1153'. [ 441.215218][T10636] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1153'. [ 441.226331][ T5883] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 441.234808][ T5883] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 441.237739][ T30] audit: type=1400 audit(1759714846.139:1052): avc: denied { getopt } for pid=10644 comm="syz.0.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 441.242263][ T5883] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 441.270252][ T5883] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 441.275818][T10636] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1153'. [ 441.298475][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.309201][ T5890] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 441.311049][T10636] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1153'. [ 441.333865][ T5883] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 441.346601][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.352959][ T5890] usb 4-1: config 0 descriptor?? [ 441.355192][ T9] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 441.414254][ T5883] usb 2-1: USB disconnect, device number 42 [ 441.551408][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 441.558669][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 441.569316][ T9] usb 5-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 441.579021][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.591498][ T9] usb 5-1: config 0 descriptor?? [ 441.602557][ T9] usb 5-1: bad CDC descriptors [ 441.736039][ T30] audit: type=1400 audit(1759714846.639:1053): avc: denied { unmount } for pid=5828 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 441.784299][ T5890] greenasia 0003:0E8F:0012.001C: hidraw0: USB HID v0.07 Device [HID 0e8f:0012] on usb-dummy_hcd.3-1/input0 [ 441.810567][ T5890] greenasia 0003:0E8F:0012.001C: no inputs found [ 441.826333][ T30] audit: type=1400 audit(1759714846.729:1054): avc: denied { map } for pid=10625 comm="syz.4.1151" path="/dev/dri/card0" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 441.857186][ T30] audit: type=1400 audit(1759714846.729:1055): avc: denied { execute } for pid=10625 comm="syz.4.1151" path="/dev/dri/card0" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 441.908264][ T5883] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 441.988534][ T9] usb 5-1: USB disconnect, device number 37 [ 442.007023][T10643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.016109][T10643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.029530][ T5831] usb 4-1: USB disconnect, device number 39 [ 442.063039][ T5883] usb 2-1: Using ep0 maxpacket: 32 [ 442.070666][ T5883] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 4 [ 442.079787][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.091566][ T5883] usb 2-1: New USB device found, idVendor=046d, idProduct=c11c, bcdDevice= 0.40 [ 442.100666][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.119756][ T5883] usb 2-1: config 0 descriptor?? [ 442.144607][ T5883] hub 2-1:0.0: USB hub found [ 442.331169][ T5883] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 442.365521][ T5883] usb 2-1: USB disconnect, device number 43 [ 442.381224][ T5890] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 442.672801][ T5890] usb 1-1: Using ep0 maxpacket: 16 [ 442.701070][ T5890] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 443.660541][ T5890] usb 1-1: config 0 has no interface number 0 [ 443.666757][ T5890] usb 1-1: config 0 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.677986][ T5890] usb 1-1: config 0 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.688078][ T5890] usb 1-1: New USB device found, idVendor=046d, idProduct=c51b, bcdDevice= 0.00 [ 443.697115][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.777921][ T5890] usb 1-1: config 0 descriptor?? [ 444.151031][ T5883] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 444.180554][ T30] audit: type=1400 audit(1759714849.079:1056): avc: denied { bind } for pid=10677 comm="syz.3.1165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 444.230419][T10682] netlink: 'syz.3.1165': attribute type 4 has an invalid length. [ 444.266558][ T30] audit: type=1326 audit(1759714849.169:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10679 comm="syz.2.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b6098eec9 code=0x7ffc0000 [ 444.279128][ T5890] usbhid 1-1:0.128: can't add hid device: -71 [ 444.290015][ C0] vkms_vblank_simulate: vblank timer overrun [ 444.322220][ T5890] usbhid 1-1:0.128: probe with driver usbhid failed with error -71 [ 444.331178][ T30] audit: type=1326 audit(1759714849.169:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10679 comm="syz.2.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f8b6098eec9 code=0x7ffc0000 [ 444.354641][ C0] vkms_vblank_simulate: vblank timer overrun [ 444.366399][ T5890] usb 1-1: USB disconnect, device number 40 [ 444.384270][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.395611][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.418181][ T30] audit: type=1326 audit(1759714849.169:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10679 comm="syz.2.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b6098eec9 code=0x7ffc0000 [ 444.443079][ T5883] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 444.478485][ T5883] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 444.499813][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.528471][ T5883] usb 2-1: config 0 descriptor?? [ 444.876065][T10690] netlink: 'syz.4.1167': attribute type 72 has an invalid length. [ 444.977028][T10689] binder: 10687:10689 unknown command 0 [ 444.982854][T10689] binder: 10687:10689 ioctl c0306201 200000000080 returned -22 [ 445.204756][T10692] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1168'. [ 445.243599][ T5883] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 445.291056][ T5883] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 445.349098][ T5883] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 445.380966][ T5883] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 445.388398][ T5883] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 445.500914][ T5883] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 445.537473][T10708] Invalid ELF header magic: != ELF [ 445.558214][ T5883] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 445.559800][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 445.559812][ T30] audit: type=1400 audit(1759714850.439:1071): avc: denied { module_load } for pid=10696 comm="syz.0.1169" path="/sys/kernel/notes" dev="sysfs" ino=1407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 445.569613][ T5883] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 445.616614][ T5890] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 445.632525][ T5883] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 445.712100][ T5883] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 445.739320][ T5883] usb 2-1: USB disconnect, device number 44 [ 445.798650][ T5890] usb 5-1: Using ep0 maxpacket: 16 [ 445.809145][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.830633][ T5890] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 445.848607][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.892707][ T5890] usb 5-1: config 0 descriptor?? [ 446.248458][T10711] fido_id[10711]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 446.254290][T10716] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1175'. [ 446.647522][ T5890] mcp2221 0003:04D8:00DD.001E: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 446.730947][ T9] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 446.851524][ T5890] usb 5-1: USB disconnect, device number 38 [ 446.914520][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 446.932969][ T9] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 446.942837][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.954890][ T9] usb 4-1: Product: syz [ 446.959056][ T9] usb 4-1: Manufacturer: syz [ 446.966439][ T9] usb 4-1: SerialNumber: syz [ 446.982158][ T9] r8152-cfgselector 4-1: Unknown version 0x0000 [ 446.988513][ T9] r8152-cfgselector 4-1: config 0 descriptor?? [ 448.110268][ T9] r8152-cfgselector 4-1: USB disconnect, device number 40 [ 448.223645][T10739] CUSE: info not properly terminated [ 448.235634][T10739] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 448.260498][ T5890] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 448.467568][T10749] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1181'. [ 448.477722][ T5890] usb 5-1: config 0 has an invalid interface number: 239 but max is 0 [ 448.486447][ T5890] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 448.498144][ T5890] usb 5-1: config 0 has no interface number 0 [ 448.504324][ T5890] usb 5-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 448.515625][ T5890] usb 5-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 448.527457][ T5890] usb 5-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 64 [ 448.555858][ T5890] usb 5-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 448.567708][ T5890] usb 5-1: config 0 interface 239 altsetting 4 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 448.599042][ T5890] usb 5-1: config 0 interface 239 altsetting 4 endpoint 0x85 has invalid wMaxPacketSize 0 [ 448.729099][ T5890] usb 5-1: config 0 interface 239 has no altsetting 0 [ 448.765430][ T5890] usb 5-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 448.810137][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.851465][ T5890] usb 5-1: Product: syz [ 448.871068][ T5890] usb 5-1: Manufacturer: syz [ 448.875698][ T5890] usb 5-1: SerialNumber: syz [ 448.904304][ T5890] usb 5-1: config 0 descriptor?? [ 448.914182][T10741] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 448.980528][ T9] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 448.990730][ T5883] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 449.079702][ T5825] Bluetooth: hci5: urb ffff88802facc800 submission failed (90) [ 449.160589][ T5883] usb 4-1: Using ep0 maxpacket: 16 [ 449.176857][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 449.187049][ T5883] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 449.197080][ T9] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 449.208975][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.217427][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.228808][ T5883] usb 4-1: config 0 descriptor?? [ 449.236171][ T9] usb 1-1: config 0 descriptor?? [ 449.256241][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 449.264457][ T5883] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 449.334133][T10760] [ 449.336471][T10760] ====================================================== [ 449.343465][T10760] WARNING: possible circular locking dependency detected [ 449.350461][T10760] syzkaller #0 Not tainted [ 449.354857][T10760] ------------------------------------------------------ [ 449.361853][T10760] syz.4.1179/10760 is trying to acquire lock: [ 449.367911][T10760] ffffffff8e32eb28 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0xb4c/0x14c0 [ 449.377470][T10760] [ 449.377470][T10760] but task is already holding lock: [ 449.384810][T10760] ffff8880260b9e18 (&q->q_usage_counter(io)#53){++++}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x899/0x1200 [ 449.396190][T10760] [ 449.396190][T10760] which lock already depends on the new lock. [ 449.396190][T10760] [ 449.406570][T10760] [ 449.406570][T10760] the existing dependency chain (in reverse order) is: [ 449.415561][T10760] [ 449.415561][T10760] -> #2 (&q->q_usage_counter(io)#53){++++}-{0:0}: [ 449.424184][T10760] blk_alloc_queue+0x619/0x760 [ 449.429468][T10760] blk_mq_alloc_queue+0x172/0x280 [ 449.434997][T10760] __blk_mq_alloc_disk+0x29/0x120 [ 449.440531][T10760] nbd_dev_add+0x492/0xbb0 [ 449.445456][T10760] nbd_init+0x181/0x320 [ 449.450117][T10760] do_one_initcall+0x120/0x6e0 [ 449.455394][T10760] kernel_init_freeable+0x5c2/0x910 [ 449.461103][T10760] kernel_init+0x1c/0x2b0 [ 449.465934][T10760] ret_from_fork+0x56d/0x730 [ 449.471027][T10760] ret_from_fork_asm+0x1a/0x30 [ 449.476294][T10760] [ 449.476294][T10760] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 449.483478][T10760] fs_reclaim_acquire+0x102/0x150 [ 449.489006][T10760] prepare_alloc_pages+0x162/0x610 [ 449.494620][T10760] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 449.501027][T10760] __alloc_pages_noprof+0xb/0x1b0 [ 449.506556][T10760] pcpu_populate_chunk+0x110/0xb00 [ 449.512183][T10760] pcpu_alloc_noprof+0x86a/0x14c0 [ 449.517714][T10760] bpf_map_alloc_percpu+0x9a/0x4b0 [ 449.523589][T10760] htab_map_alloc+0x10ca/0x1570 [ 449.528940][T10760] map_create+0x659/0x27e0 [ 449.533859][T10760] __sys_bpf+0x3d9d/0x4980 [ 449.538771][T10760] __x64_sys_bpf+0x78/0xc0 [ 449.543685][T10760] do_syscall_64+0xcd/0x4e0 [ 449.548691][T10760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.555085][T10760] [ 449.555085][T10760] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 449.562790][T10760] __lock_acquire+0x12a6/0x1ce0 [ 449.568142][T10760] lock_acquire+0x179/0x350 [ 449.573144][T10760] __mutex_lock+0x193/0x1060 [ 449.578247][T10760] pcpu_alloc_noprof+0xb4c/0x14c0 [ 449.583775][T10760] sbitmap_init_node+0x2ff/0x770 [ 449.589238][T10760] sbitmap_queue_init_node+0x40/0x4a0 [ 449.595114][T10760] blk_mq_init_tags+0x17f/0x320 [ 449.600462][T10760] blk_mq_alloc_map_and_rqs+0x222/0xeb0 [ 449.606513][T10760] __blk_mq_alloc_map_and_rqs+0x128/0x1f0 [ 449.612738][T10760] __blk_mq_update_nr_hw_queues+0xcc1/0x1200 [ 449.619225][T10760] blk_mq_update_nr_hw_queues+0x3b/0x60 [ 449.625276][T10760] nbd_start_device+0x1b0/0xd70 [ 449.630635][T10760] nbd_ioctl+0x219/0xda0 [ 449.635378][T10760] blkdev_ioctl+0x274/0x6d0 [ 449.640391][T10760] __x64_sys_ioctl+0x18e/0x210 [ 449.645666][T10760] do_syscall_64+0xcd/0x4e0 [ 449.650668][T10760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.657059][T10760] [ 449.657059][T10760] other info that might help us debug this: [ 449.657059][T10760] [ 449.667264][T10760] Chain exists of: [ 449.667264][T10760] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#53 [ 449.667264][T10760] [ 449.680887][T10760] Possible unsafe locking scenario: [ 449.680887][T10760] [ 449.688314][T10760] CPU0 CPU1 [ 449.693653][T10760] ---- ---- [ 449.698991][T10760] lock(&q->q_usage_counter(io)#53); [ 449.704343][T10760] lock(fs_reclaim); [ 449.710818][T10760] lock(&q->q_usage_counter(io)#53); [ 449.718694][T10760] lock(pcpu_alloc_mutex); [ 449.723176][T10760] [ 449.723176][T10760] *** DEADLOCK *** [ 449.723176][T10760] [ 449.731299][T10760] 4 locks held by syz.4.1179/10760: [ 449.736488][T10760] #0: ffff8880260cf1c8 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x27/0x60 [ 449.747689][T10760] #1: ffff8880260cf0d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0x31/0x60 [ 449.758803][T10760] #2: ffff8880260b9e18 (&q->q_usage_counter(io)#53){++++}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x899/0x1200 [ 449.770618][T10760] #3: ffff8880260b9e50 (&q->q_usage_counter(queue)#37){+.+.}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x899/0x1200 [ 449.782693][T10760] [ 449.782693][T10760] stack backtrace: [ 449.788559][T10760] CPU: 1 UID: 0 PID: 10760 Comm: syz.4.1179 Not tainted syzkaller #0 PREEMPT(full) [ 449.788576][T10760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 449.788584][T10760] Call Trace: [ 449.788590][T10760] [ 449.788596][T10760] dump_stack_lvl+0x116/0x1f0 [ 449.788610][T10760] print_circular_bug+0x275/0x350 [ 449.788628][T10760] check_noncircular+0x14c/0x170 [ 449.788644][T10760] __lock_acquire+0x12a6/0x1ce0 [ 449.788662][T10760] lock_acquire+0x179/0x350 [ 449.788676][T10760] ? pcpu_alloc_noprof+0xb4c/0x14c0 [ 449.788698][T10760] ? __pfx___might_resched+0x10/0x10 [ 449.788718][T10760] ? mark_held_locks+0x49/0x80 [ 449.788732][T10760] ? pcpu_alloc_noprof+0xb4c/0x14c0 [ 449.788753][T10760] __mutex_lock+0x193/0x1060 [ 449.788767][T10760] ? pcpu_alloc_noprof+0xb4c/0x14c0 [ 449.788787][T10760] ? stack_depot_save_flags+0x3de/0x9c0 [ 449.788805][T10760] ? __pfx___mutex_lock+0x10/0x10 [ 449.788817][T10760] ? blk_mq_init_tags+0x87/0x320 [ 449.788829][T10760] ? blk_mq_alloc_map_and_rqs+0x222/0xeb0 [ 449.788848][T10760] ? __blk_mq_alloc_map_and_rqs+0x128/0x1f0 [ 449.788869][T10760] ? nbd_start_device+0x1b0/0xd70 [ 449.788888][T10760] ? nbd_ioctl+0x219/0xda0 [ 449.788911][T10760] ? pcpu_alloc_noprof+0xb4c/0x14c0 [ 449.788931][T10760] pcpu_alloc_noprof+0xb4c/0x14c0 [ 449.788956][T10760] sbitmap_init_node+0x2ff/0x770 [ 449.788976][T10760] sbitmap_queue_init_node+0x40/0x4a0 [ 449.788996][T10760] blk_mq_init_tags+0x17f/0x320 [ 449.789010][T10760] blk_mq_alloc_map_and_rqs+0x222/0xeb0 [ 449.789035][T10760] __blk_mq_alloc_map_and_rqs+0x128/0x1f0 [ 449.789056][T10760] __blk_mq_update_nr_hw_queues+0xcc1/0x1200 [ 449.789079][T10760] ? __pfx___blk_mq_update_nr_hw_queues+0x10/0x10 [ 449.789106][T10760] ? __pfx_down_write+0x10/0x10 [ 449.789122][T10760] blk_mq_update_nr_hw_queues+0x3b/0x60 [ 449.789142][T10760] nbd_start_device+0x1b0/0xd70 [ 449.789164][T10760] ? bpf_lsm_capable+0x9/0x10 [ 449.789183][T10760] nbd_ioctl+0x219/0xda0 [ 449.789202][T10760] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 449.789222][T10760] ? __pfx_nbd_ioctl+0x10/0x10 [ 449.789239][T10760] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 449.789258][T10760] ? __pfx_nbd_ioctl+0x10/0x10 [ 449.789277][T10760] blkdev_ioctl+0x274/0x6d0 [ 449.789296][T10760] ? __pfx_blkdev_ioctl+0x10/0x10 [ 449.789314][T10760] ? selinux_file_ioctl+0x180/0x270 [ 449.789327][T10760] ? selinux_file_ioctl+0xb4/0x270 [ 449.789341][T10760] ? __pfx_blkdev_ioctl+0x10/0x10 [ 449.789359][T10760] __x64_sys_ioctl+0x18e/0x210 [ 449.789379][T10760] do_syscall_64+0xcd/0x4e0 [ 449.789398][T10760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.789412][T10760] RIP: 0033:0x7fa6c818eec9 [ 449.789425][T10760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 449.789451][T10760] RSP: 002b:00007fa6c63ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 449.789464][T10760] RAX: ffffffffffffffda RBX: 00007fa6c83e6180 RCX: 00007fa6c818eec9 [ 449.789473][T10760] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000005 [ 449.789481][T10760] RBP: 00007fa6c8211f91 R08: 0000000000000000 R09: 0000000000000000 [ 449.789489][T10760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 449.789498][T10760] R13: 00007fa6c83e6218 R14: 00007fa6c83e6180 R15: 00007ffc2910d1b8 [ 449.789511][T10760] [ 450.114742][ T5883] gspca_sonixj: reg_w1 err -110 [ 450.119656][ T5883] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 450.359402][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 450.366317][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 450.373346][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 450.380146][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 450.387024][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 450.394039][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 450.400946][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 450.407764][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 450.414859][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 450.421703][ T9] pwc: recv_control_msg error -32 req 02 val 2500 [ 450.428481][ T9] pwc: recv_control_msg error -32 req 02 val 2400 [ 450.435530][ T9] pwc: recv_control_msg error -32 req 02 val 2600 [ 450.443413][ T9] pwc: recv_control_msg error -32 req 02 val 2900 [ 450.450200][ T9] pwc: recv_control_msg error -32 req 02 val 2800 [ 450.457263][ T9] pwc: recv_control_msg error -32 req 04 val 1100 [ 450.464573][ T9] pwc: Registered as video103. [ 450.476811][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input22 [ 450.668713][ T9] usb 1-1: USB disconnect, device number 41 [ 450.998594][T10760] block nbd4: shutting down sockets [ 451.013076][ T5890] usb 5-1: USB disconnect, device number 39 [ 452.211924][ T9] usb 4-1: USB disconnect, device number 41