last executing test programs: 10.193501978s ago: executing program 1 (id=1398): r0 = syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x983a, 0x2, 0x1003, 0xea}, &(0x7f0000000240)=0x0, &(0x7f0000000540)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x51, 0x0, 0x80, 0x2, 0x0, 0x127}) r3 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) readv(r4, &(0x7f0000001140)=[{&(0x7f0000000700)=""/206, 0x18}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) io_uring_enter(r0, 0x3058, 0xdf5e, 0x7, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) 8.869287446s ago: executing program 1 (id=1405): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f00000006c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$netlink(0x10, 0x3, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r2, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x2000) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, r4}}, 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, r6}}, 0x48) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 7.993153607s ago: executing program 0 (id=1410): syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) creat(&(0x7f0000000580)='./file1\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) getpeername(r1, 0x0, &(0x7f0000000180)) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f00000002c0)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d3078303030303030303030303030346532342c74696d656f75743d307830303030303030303030f657303030"]) r2 = syz_pidfd_open(0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) close_range(r2, 0xffffffffffffffff, 0x0) r4 = io_uring_setup(0x5923, &(0x7f0000000080)={0x0, 0xdf01, 0x80, 0x0, 0x22f}) io_uring_register$IORING_REGISTER_PBUF_STATUS(r4, 0x1a, &(0x7f0000000100)={0x30}, 0x1) 7.533553471s ago: executing program 0 (id=1411): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10001, 0x1}, 0x1c) ioctl$TIOCGSID(r0, 0x5429, 0x0) 7.371423807s ago: executing program 0 (id=1413): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) accept$inet(r1, 0x0, &(0x7f0000000480)=0xfffffffffffffcfc) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) shutdown(r0, 0x1) 7.257987821s ago: executing program 0 (id=1414): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r2, @ANYBLOB="24005a80200003800500040001000000140005"], 0x40}}, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="97905000fd61140000001a0000002bbd7000ffdbdf2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008080) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r7, 0x0, 0xd}, 0x18) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a300000000040000380080001400000000008000240000000002c0003801400010063616966300000000000000000000000140001006d6163766c616e3100000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001007465616d3000"], 0x110}}, 0x800) ioctl$int_in(r6, 0x40000000af01, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0x4008af13, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) getpeername$netrom(r9, &(0x7f0000000240)={{}, [@default, @rose, @default, @null, @bcast, @null, @null]}, &(0x7f0000000100)=0x48) r10 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r10, 0xaf01, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(r10, 0x4008af03, &(0x7f0000000f80)={0x4, 0x0, [{0x80a7000, 0x0, 0x0}, {0xdddd1000, 0x0, 0x0}, {0x3000, 0x0, 0x0}, {0xeeee8000, 0x0, 0x0}]}) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000440)={r3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c18e8438ef2a565ef1e83323695c58d66500", "a1163939c787a16c1ca43f85391100000037f0376c72a964a0193b3e8772fd29f3a276d200000000000000000000002a00", "24431a3977a68e174f005e95ac6a00", [0x0, 0x9]}}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@deltfilter={0x38, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x4c09, 0x0) 5.995551286s ago: executing program 2 (id=1417): r0 = syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x983a, 0x2, 0x1003, 0xea}, &(0x7f0000000240)=0x0, &(0x7f0000000540)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x51, 0x0, 0x80, 0x2, 0x0, 0x127}) r3 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) readv(r4, &(0x7f0000001140)=[{&(0x7f0000000700)=""/206, 0x18}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) io_uring_enter(r0, 0x3058, 0xdf5e, 0x7, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) 5.810246487s ago: executing program 0 (id=1418): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001d906e20501dc6609b018000000109021b0001000001000904f7000176246700090582020002"], 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000300)={0x1fe, 0x340, 0x380, &(0x7f0000000980)=[0x4b83, 0x8001, 0x800, 0xa6, 0xfffffffffffff801, 0xd, 0xe2b, 0x3, 0x3, 0x3, 0xc01, 0x80000001, 0xac, 0xffffffffffff2f66, 0xe0a9, 0xf, 0x7, 0x5b, 0x7, 0x6, 0x80, 0x4e27, 0x400, 0x64c1, 0x9c3, 0x0, 0x1, 0xfff, 0x4, 0xa0af5e8, 0xffff, 0xffffffffffffcc8c, 0x1, 0xd1c, 0x6, 0x1ff, 0x1c, 0x3, 0x40, 0xffffffff, 0x4, 0xfffffffffffffc01, 0x8000000000000001, 0x1ff, 0x1e7, 0x102b, 0x2, 0xfffffffffffffffc, 0xfffffffffffffff1, 0x5, 0x28, 0x4, 0x0, 0x3, 0x7, 0x8000000000000001, 0xfffffffffffff5d5, 0xfffffffffffffffa, 0x6, 0x3, 0x0, 0x2, 0x3, 0x4, 0x0, 0x65b5, 0x4, 0x9, 0xffffffffffffffff, 0xbac, 0x7, 0x8, 0x101, 0xe, 0x56cfa03c, 0x1, 0x7, 0x9, 0x9, 0x9, 0xfdb, 0x1, 0x5, 0x7, 0x0, 0x1, 0x7, 0xd71, 0x5, 0x81, 0x9, 0x5, 0x80, 0x7, 0x100, 0x401, 0x5, 0x40, 0x9, 0x2, 0xf6, 0xffffffffffffffff, 0x1, 0xffffffffffff8000, 0x8000000000000000, 0x8000000000000000, 0x80000001, 0x8, 0xc, 0x0, 0x6e, 0x7f, 0x20000000, 0x4ff7, 0x2, 0x40, 0x7d7f, 0xb, 0x2, 0xffffffffffffffff, 0x858f, 0x3, 0x5, 0x400, 0x1e, 0x4, 0xffffffffffff6c8d, 0x5c256116]}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{}, 0x0, &(0x7f0000000880)}, 0x20) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000340)=[{0x2, 0x0, 0x0, 0x81}]}) vmsplice(r2, 0x0, 0x0, 0x0) r3 = semget(0x0, 0x2, 0xf30f5608788147b1) semctl$GETPID(r3, 0x1, 0xb, &(0x7f0000000180)=""/36) capset(0x0, 0x0) pivot_root(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='.\x00') syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) capget(&(0x7f0000000080)={0x20071026}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r5, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x44084) syz_usb_connect(0x3, 0x4f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e45aa5205b109917e9360102030109023d0001000000000904ef0404ff010100090502020800d0000909050800ff030700060705a902e86f4c0905d5bb"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000006e4908009500000000000000d1a7cffd24eea9f3ad5553aae509479ec758370544fd8280048548d903a1e2bdd1620000af1cb54ad82ee60259754091a52ca3"], &(0x7f0000000100)='GPL\x00', 0x1}, 0x94) 5.029886479s ago: executing program 1 (id=1420): sched_setscheduler(0x0, 0x1, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000061121c00000002009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x94) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x1, 0x80) lseek(r1, 0xfffffffffffffbf3, 0x3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20080, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r3}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r3, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) 5.017325691s ago: executing program 4 (id=1421): syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="9115463ecc79fffffff7ffff08060001080006040002aaaaaaaaaad0c1"], 0x0) socket$packet(0x11, 0x3, 0x300) r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x3b, 0x5a, 0x3d, 0x40, 0x1de1, 0xc102, 0x56c3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0xc0, 0xc, 0x40, 0xe, [{{0x9, 0x4, 0xa2, 0x5, 0x2, 0xb1, 0x5, 0xc, 0x14, [], [{{0x9, 0x5, 0x2, 0x10, 0x40, 0x4, 0x2, 0x7}}, {{0x9, 0x5, 0x5, 0x2, 0x20, 0xa, 0xfe, 0xa}}]}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x2a, &(0x7f0000002280)=ANY=[@ANYBLOB="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"], 0x4, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x411}}, {0x0, 0x0}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x827}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x402}}]}) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x200, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000d80)={0x14, &(0x7f0000000cc0)={0x0, 0x6, 0x45, {0x45, 0xb, "963d3c2edf9a7ff2124479a481db2afe2690b47fa7853b87aa5cab56fbfda5f7f922eeeef6c3e57a446eaa0af3383bc1a18cd27efe78beb199a48b4512932c4f144b24"}}, &(0x7f0000000d40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2401}}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006000)={0x2020}, 0x2020) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) inotify_init() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 4.946671424s ago: executing program 2 (id=1422): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000300)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48) listen(r3, 0x1ad72f7) accept4(r3, 0x0, 0x0, 0x80000) r5 = accept4$netrom(r3, 0x0, 0x0, 0x80000) writev(r5, &(0x7f0000001180)=[{&(0x7f0000000800)="024914a5ee3efdb4e5", 0x9}], 0x1) 4.935673865s ago: executing program 3 (id=1423): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x280449c, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x0) writev(r2, &(0x7f0000000040), 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000000)={r7, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r6, 0x107, 0x2, &(0x7f00000005c0)={r7, 0x1, 0x6, @broadcast}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0x0, 0xfff1}, {0xfff3, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 4.891441876s ago: executing program 1 (id=1424): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) accept$inet(r1, 0x0, &(0x7f0000000480)=0xfffffffffffffcfc) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) shutdown(r0, 0x1) 4.764568717s ago: executing program 1 (id=1425): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x70bd26, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048050}, 0x0) 4.203863142s ago: executing program 1 (id=1426): sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x1420dd89f05ae40d}, 0x4004000) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000140)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x40, 0x13, 0x5e, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "0200"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000000c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 3.879511051s ago: executing program 3 (id=1427): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000006240), 0x42, 0x0) r1 = syz_io_uring_setup(0x82e, &(0x7f0000000500), &(0x7f0000000100), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f000000b000)={[{0x0}]}, 0x1}, 0x1) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000004c0)={&(0x7f0000004000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r2, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.86452373s ago: executing program 3 (id=1428): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='.\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000080009efff000000100000000000000041e5ebcc54f30dbcf9c9e1d8258e54d96aceba50007d210ff9e5d5788bd927b132a311efbb8c724a9636b8b4893ef9cfbdfff4ebe5b7441b85f2d271ff7bb3fe6d86cf5b894f530d105c11445f99c9a5371a09bfd86a4d873560d2eb8cd523447baaef8363dfb2a070"], 0x24, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000002000010329bd7000100000000200000403000007020000001400110069616376746170300000000000000000080006002503"], 0x38}, 0x1, 0x0, 0x0, 0x240480c4}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3800000010003704feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="8b040400000000001800128008000100736974000c00028008000300ff"], 0x38}, 0x1, 0x0, 0x0, 0x4c050}, 0x20000000) pipe(0x0) io_setup(0x4, 0x0) io_cancel(0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x20, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0xc, 0x1a, 0x0, 0x0, @u64=0x9}]}, 0x20}, 0x1, 0x0, 0x0, 0x2406c089}, 0x20000000) 3.182677303s ago: executing program 2 (id=1429): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r0 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000000)=0x100) r1 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r3, @ANYBLOB="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"], 0x1d8}, 0x1, 0x0, 0x0, 0x20}, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="60100000", @ANYRES16=0x0, @ANYBLOB="010004000000fcdbdf252100000008000300", @ANYRES32=r6, @ANYBLOB="04007d80"], 0x20}, 0x1, 0x0, 0x0, 0x4004014}, 0x4000) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, &(0x7f00000003c0)='./file0/../file0\x00', 0x0, 0x22000, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000702, 0xee00, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000), 0x0) add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r8 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r9, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) request_key(&(0x7f0000000c00)='asymmetric\x00', &(0x7f0000000c40)={'syz', 0x2}, &(0x7f0000000c80)='gcm(aes)\x00', 0x0) 2.817821807s ago: executing program 3 (id=1430): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000010000000080007000300000018000180140002006e657464657673696d30000000000000080006009288dd4e080008"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) unshare(0x28000600) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40000141) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x80}}, {{0xa, 0x0, 0x0, @empty, 0x4}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e24, 0xa4ffffff, @loopback}}}, 0x108) getsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xe) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/igmp6\x00') preadv(r4, &(0x7f0000000b40)=[{&(0x7f0000000a40)=""/104, 0x68}], 0x1, 0x801f, 0x0) 2.680401072s ago: executing program 0 (id=1431): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f00000006c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r3, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x2000) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, r5}}, 0x48) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, r7}}, 0x48) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 2.654979595s ago: executing program 2 (id=1432): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x51, 0x0, 0x80, 0x2, 0x0, 0x127}) r0 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) readv(r1, &(0x7f0000001140)=[{&(0x7f0000000700)=""/206, 0x18}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) io_uring_enter(0xffffffffffffffff, 0x3058, 0xdf5e, 0x7, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(0xffffffffffffffff, 0x12, 0x0, 0x0) 2.385275559s ago: executing program 4 (id=1433): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) 2.319947893s ago: executing program 3 (id=1434): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = getuid() quotactl_fd$Q_GETNEXTQUOTA(r5, 0xffffffff80000901, r6, 0x0) setresuid(r6, r6, r6) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, 0x0) pwritev(r7, &(0x7f0000000040)=[{&(0x7f0000000300)="80fd0fa67941", 0x6}], 0x1, 0x0, 0x0) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r9, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000100)) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=ANY=[@ANYBLOB="3012000042000701feffffff00000000017c0000040042809c00018008008200", @ANYRES32, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="0800930000000000e810c180e210b3809f0d66943c513e2ee959f15ce80fda3443b548eba4dc6af3f8dad2dbee30f188178f58447a9a03bfbbf4d2af746fd028b55889965e0c5c1525610fc79fcbc107c5db5b02744861e4c6efaa3a59fb421eabaaf965a4a1805a62013af69f7c68762ab973256921312d7a3f97e43b0e39958ba915cc27190e6affa00b64ad70ba0c6f670ed907f671ef4547bec5527c6ae10ca6b7dbb18375702623caf1abcfd6b2a8991067c15bf98753df2b5883c2ed13fa8eca0b2f0f7e7ede611c8d3d9a08982520d5439ab90400c08004003280040012808ce5a6632fe10249e6d199c64b30984951fee16360dce9dd4b87a0ed6f6ed799df6bbd6dfab3f73d6a52fabbb924b63523ab89f34229987d2374eea7803e19be24af251b510a7f1d6bb1fb439463f5945a50fc7d75662b4bd0d2eb568e8855c955b3ddcefd761c613f1ff9c3ff72cefe93ba1aaa9d18a0f9838ff33fbde7e7664ab1d0e107dae6dbcac39dcc748788043c1e556944de54c75085d8c2fa4d851ba985de9ae586ecc4af1c5434dab4f1f93c6e636ed4516cc1c70e27228746f4802b5782eb84073a811e3edd0f3d90086011f35f73f582cda57b3c92acf1a6b28225d52ef2a146c969855945dda4ce166816f831030930b96f0438b638f5297afc05a4dc07d3ed25d106cbf8846d4c25e6000234d6e18c2d698abd098a34db1d180eb56180dbd503e195d1e2864fda458eee6a4e0cbc5330749ba4ed1b31c0e5de52bc6ab8dfa14c8390d05c236b92e5242178325b1b568cb9f9b7c2ba03f239c7f558df0792af5919bfdfbf68f669a764c5df7312ba41a0e2004c868e0051b0fde7edac7793adf3d43c39d8dfe49951db5f2583acd037cb6ff35a1be2470e8a48c030f004deb4af7d7da80e6e2106a99b400b95a639b147f38a8a7856a92215d6bf2b199dc8cf948a6c71078cc729c74ee22d91788b016fb0acd7b203785ec136db508b43af04bb623025525fd40bb41c82c5e0939f1200d5d8ec681ee49a3f06ae5db7f755869b9a7caaef91ea789feb22286fcdb2a2c4d779a0dc5f46c946ad3adf2e8d5aa3794163188814ba445a9cf76fd1eebd75de9b06b5a7262009c39ddc2bd5452c2932cfcb94ccfc480737de27962e69f4f09f075809c7abb772087109c8dc613d1ea0738b927e0eeb9c3b8bc5d7bb3fe37b8da4a160cd2ed7ce0386cf834c6dc6b27f0a35fb073fb2b687d4a971e0eea02b2a17492be0581dfd58768a8441d4b64f553720ef9daf453ca3e599bcae656b0a00804f68ff9df776cfff4e1ed9921c55128713834e78c87820a990dad6b6b669c8171a60b0c473ae9012ffb20f995271dc3a744aa4268a0162fd5430bacf2203cb0be808e84cac59265ea16060c6198bd6b0f22c2142d3d6947c7511cc8b49c14762a9a3cd77d8def8cb42a413f3d5ec24e21557af19ef4e2a57a19953230f2849f57df6c579ba6cc67f712562733587de63f54c934bf43771da960e2ede76e699360781ccc126c2043c82039d025719c2a5d3508e35f8dd5808743e9ebdee6b882a31951cb2ea08b54a4026579715e75d227683e61d091d5cf1f11d8f08c0f6271aae221639009894d9911429c090ecaebae7a54e4ceb022279efbde05c2b42094eeee3a9a1a27f03993e78c44015c423bf600ed1f6069edb95dec13194d4bd3813d39a114ec9797508973c516963aa3e0551f23f955ec58aef37835fdfd01ee1d0958f2ceb351549222e44359884d28149b3f677095256f4676937069977617f613b6a83ca64e9ac54a88eae955bdd4cb4d3b03094a09f2cdbf8d41d9ff5459dd1bac85a2877b18405a82ddd0227ca8a791bcf5599856f88494552b80185365cb7505d6b77e5343e1f384e058364118015e1f613b63ac6ae2664f2d150a51bf03c46afb0d5ff3e8b92e8a2cbf96168aceb43b9a9d7f745a4acba1115140cf38364d71daa0726ccbb391cc663bc32f3c6f2ae7b1f5e413776bb6fbf7d1eb02ff307c4af5106bff3742c42cb1f1e7bcbb595e06df2953edd0bc870fab7a7bca269c41f2d3da9c40925aa192a2ff74653c76e0fdbd9c404504e1f7a772bf2958ec18831324b5c93b73b15747858152f265601bf333f7227d8fae2dfdcaaa1a38452d1b1b2946e802255438543c923ef8ae893e489e24c4285923d2e7f4465fe23f567148475a34331b12c8e076d7011d180111c5eeee42adaafd83662fd0006f3d57382031b01f3abcd2aa9a518d18d5ce64fe4719f3e4e79b1b33104da4f45ac7429b9af6eeb953391f0cb78e6a73dcafe0693f6c8a02329952c2c3bc6db21aa5d29e108336443bec415d21c844a9beb5778b06a689e3f98a752474ba5d9a2cc29cd747b3c46214573f9bf0dc2d53773d5c65853e449e317fce86ae0880d8903f6e62afd1fdc9df3284befc791cc8e19c4e048064a46c621fb16c8a833f0ee6e6e76902514da5c992adf33a437bbde4448a92e7f7e375fb5312ad254d58358387445e469d5e1f22a71385aa31dbf66c644b2df83a89a0d5bb83305b6d79ee0289ebb2df6d7acc5b88e297980e8a80f3c2946595419d469ce20e8b0ede73e8ef2a116a1484923f973fdde1d6cfb81d2883c8969fa0d6e57e8123761af3f90320cbd21ba673b0427fbcd5941df99352d926047dae9440f8bc20e89c5e917dbecdb9bb9ceed1e4052a82e3e59093eeda5ac2478f837a2b8d3cc070a688a1d0a80f8a2a7d61ce24ed37db8dfa04dcf09eb23e20bc48732770ccf6cd8eb915e67f028af1b750828e4876eaae48b35daea7635ee39a0d3d4172242a0e25c04dc9ec0117e9cfef30d7013815a18dd2b6566e3b4611cf1b0845511d3549a9fb0c2e8ead24b0d587f863e2bd3e173f5f273504f0ecd54b2d7fe13bffdf3e133124bd961cf8b63e01d2c6da43206d15e34ae1ef1a896ad9606badcfd13d708a1a5737e36d0c45a78a5b1ad8ba5e3956108031664e4f36149e0bb71fbf356dcbbc70d9e052559ee3cfd698d90ad2c987a2bd32f1b1b9fa1ab9db37e89ba38fcd88645975923f975cc508d88403cef9d91335928ad6decb718bdd1491b028165a0560945e07b1fa77c14389664a1f6b0b0815cab6667488618755a31c88430e9e37a9c15b55f4d9bba3273c7ab9dc03851d1389c31ef2f42113ea94c0d1d9bd7205110fb94d35fd042d33718d5e65772fee14e7889178a2e0666914c08bad3a263820507320d81d5982ef6a69b85cc14a86185fa5bbf98a3613dc86a5627bc4b547e00fc5345f4f852d2b39b07e749e2a9c4dfd9f325b0d4692a64f38f9f48ce7a92249c8c5f1e27d3abe0177527f30aadd96051c37f79f3daf7dd1062bdd0b6e9368c5b4fd92ad8ca1ec2ae9b6d2cb180d88673654ad83871e49876e949e0314e52c9b358bad6cc988349793617e4b27dc12e54d4826a53c9e624f75661259f8a7972e71a4f838e0061e0cabc18e09ed19cd8dccd1d0489a18982907e76d95760f0118fb8238902ee547a822c96dd72c97db0c9a716a72784fe41fe8aba27852168ad2577cda8fe2f307ffbf43c5bf5e05f3fb6a7b94c5707e58b0be4dcf1c0fd1cebcf712bbf604be9b564c9c09a74ef328cf02a1418465dcba60275075eb8a506c976220bdb0eac892150d9000c48812e687632427f95cb27e9d5dda7c9a6e686629feb71c1aec7779b7774eab726f9e0f80850ee7c10d85801f2eacac192bb6fc24a240e8dd272603509e44330c5a85c87db691d2edcafc83281ac8e4f5fc4cbb2e743f1adb8569e523ca8ef1b3e66fd70ba5bef676dd3525f478d0d208557f040642599dce3f97a93b09c39f687a78d8fd7cc0eb0cc6ebcd3dcbe13f59c65de3bde01270b40870b17123daa0f538233202daa57c534a0a2d2033d6492b6f80e150aeda18b73781287823b7957b8b97a915a926485c0bb01799afd76a1fc4ceaa52031c761c96b407cefadda8da2415ac75136b9b2d7d6a61a7de8faa97eef8c48414f78afd379d19251a03640af89dda2fb66514ded4d56d62e6d74d72d99922afd4a9112c268033fbebc351ac88735ffecb776a0c81459c3a332488c1ba8ffe72a15d2c4153fcefe9c78b7de69f4416a1d0abdb2ee0f3bca8b30a08f8444a859da215e1580ae63643969f570f924a3a5a50df3c617e2ba91e1dbf1bd96d08a99fd1a7a163b18b46ad56e8017ce5fb74203e49f8cb6dad68bf56d6cefe0be34e9dfb0f6e67aeb316a6e4aebc57675ec51a028d95f7c251f81005c1edc5ea54be778e781245db7ea1b091b21170f772762ea8c57f4555a9c09dde36018e2322b62aba915f285229ccc36b3de14739824c7733d36500353eed1fa668631ed9252e97f75bfbca02c50284613c66d72fb9f55ef58f79f34d2bbcf1d0cc7bc6118370219c80f4f7d1dcc51ca6bc96ab88dd949d2b797e91aa7f40f239baef517e57304701776d7ebb1cabe8d64ccbd7b4d34ef123e2e1921e0e5d173a4d66f8470bdb88c29e5cb5f77308ba38c3de811b3ad1f8c1ca0f3e1a7973941e1339b567f87439116cea18e8f7d3206cc9317b776c993eaeb978bee931aa6559f3013d33e210266127171ff1710df6f399d32983d450f53fcded395431db216fd994b894127d49492d691b61b785c2af0775d425b160643674feef8b01731a9163ca76e00b88c8883693aedd0ed4da516dae8c070c1022eb95ae26141f5788a4aa97a7a51d303c89a4877d70e6b010fa576dab421b38094d73af45d42ff5465aba67c668110a94290e46a1847593d0b96648075dca991957d4dcf0b7e97664f410dc5b6a332f97b991860555b23e4bcfd28513771acc53b2aca4ead91cc47a7880e4aac0895763f8aee0192f3733772a9e585f96212b81ede76d218b54d5ef918646b82a3ddab691e2f625ce5e656f677fbfb238c7f73fb07b697b6e75221644f58aebfb65df3a8bdafaccabd91b61f0c7e9a0814a83f0c23c45f803ae19c100fc9227641971f31b1115f81f9a7571b0b6d926f2de7cde18858ee7470ac5a381bae0d2dcdf41321bd7e8a07ad1beca02a2e0a062642bb7027102015c45ce3ba1206baa6f559a0b325a0d5cd92ac64c3760f1ff067a3742ba2fac59cf78f6c5d2d82d47f00082b6716fc98ab475e087087c2b6f48de4fa369a8539c4b55036216caf46b2a13e543baa70d3f2a74ace1a2e56805edb6aa536b1e91bb4432d1e4b432f16e4895b2c3afbe76a7bfeb9125b6df580464b5e85ce362a23d34ec390433a66469d30652c812d2ef3f0e50718cac3821df85bedaf6200074a0a50f40af1a56d13e09790ef8a71dea24980a6e085310cd4fcf4a67032d6d6d18cb08f055bf57c030ac5cc3468f2ee24d7b0c685294ef8dad62460233cd1a5f3061932e9384ea7c412f67078e4b029e67df2a2b226cb336683f760dffeb8496d1e2254708cd13d01482728a8cde298103726a4cb1d58449ff7eb04ac9d92f93618eb44c2615cc19961173b38070134b0e01553ba5cd48bc42f96074b93b605f549c279071fac2e30b6ac1a6c7e9fd4720ab202f64dfb5470b674a46d0e958cd115e820d518c3a8d0d132de333f7e28c12a1f443cc4c11de4389709f00475ef44ad7a531fbe01ea5c0256f5a116b2a1426a2c8bce26a7badb2247c2faaacffd3972884c5659d78839c02b5468487b615da52e35b10819f6a4858d5ccc1a54c08c3315c84d68937cb8dc926ae6fa21d869c4ffe701af407b76651d7eea13dfc407d9250fc09d8eba7a7eb3cfca416b3401d8ed6f2961344acb50916a6b7f9b47dfcecf1407017e7af31ce1ea099cae64132bb0d8737d0b6b4515f06735cb9241194a19c2b5dbe67bbbe08e0a355eaff17a2fc04260cecfef31c648e41dc05fefa9218c6f8bd50ae2b89124a9280912410da264af19324db63557f8688b948fc0e9376695bd0854b5fa6510155792af6a5a63c14ce34b28e3993874a70ad63a44c5b8ba8ca26a46969de440c37106000e9a8c0b82c3a780b8dfeae6512b3b9bec66f7bb63ac3ad5ee6d7c609cfda41aa3efe1bc566684af57e7152bd18b19329716a1d34d80f43830da2ee0ba97c702bf3b8bed2823bb5e14c2040400818004008d000400f2800000"], 0x1230}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c000) 2.319499712s ago: executing program 4 (id=1435): write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000300)={0x16, 0x98, 0xfa00, {&(0x7f0000000140), 0x0, 0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x3, 0xfff, @mcast2, 0x4}}}, 0xa0) r0 = syz_io_uring_setup(0x82e, &(0x7f0000000500), &(0x7f0000000100), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f000000b000)={[{0x0}]}, 0x1}, 0x1) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f00000004c0)={&(0x7f0000004000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r1, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ccc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6b3f0000f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784753f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a748cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d9f95e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.167454846s ago: executing program 4 (id=1436): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) io_uring_enter(0xffffffffffffffff, 0x66a8, 0x4000, 0xf, 0x0, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x40, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_SRC={0x8, 0x3, @multicast2}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000240)) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000280)={0x0, 0xfffa}, 0x8) socket$netlink(0x10, 0x3, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000180)={0x1, 0x8, 0xb, 0xfffffffb, @vifc_lcl_ifindex, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getregset(0x4212, r7, 0x1, 0x0) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001f80), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000002e00000005002b00010000000a0001007770616e3100000005002e00f90000000c0005"], 0x3c}}, 0x0) 1.399353891s ago: executing program 2 (id=1437): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)) r4 = socket$packet(0x11, 0x2, 0x300) r5 = dup(r2) r6 = fcntl$dupfd(r3, 0x406, r4) read$FUSE(r5, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r1], 0xcc}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0, 0x4000}) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000080)={0x0, r5}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b9800000c00f3235002000000f30c4e3450b860b0000006f0f21edb8030000000f23c00f21f835000000000f23f8b9830800000f32640f01cf660f388084737cb9000081ff304e00000f35b8b93cdcba0f23c00f21f835000006000f23f8", 0x5e}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) mount$fuse(0x0, 0x0, 0x0, 0xa02002, &(0x7f00000004c0)=ANY=[@ANYBLOB="66643dc6953bd340e3272b71d8f75d2e259bf1b1641dbb07e599bb12e499abcbe83cb20c3beb0dfa38c10e940b6828039ec26a486cc445322e0a22037201a9aafdefaad479199cd361137641824dfeb422ab103c6a236f4c9ae516aaf718425b7cbf0a21a98a672989ebb66211460e26e8d8f0a8338d62ea54b8dbc1492deefab8989d8802bb1b8c5d61349a79922cad342e87ed63595e043a81fa36feb0f49bca508854", @ANYRESDEC, @ANYBLOB="40ef35a971d35097635122028eb919802534a9e95b3ca94bf84415370e72798ba993e10be6a82eee4caa011b2c213a3a032f32435692c0ba1dc1f06b1de6bc83e6d684a1f35cf6c3d5", @ANYRES32=r5]) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r10, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r10, &(0x7f0000000600)="6c3b01c0352785418c0b21740f1c1f085a0ce2dc54621a42a6b6c27cc459acc168582a", 0x23) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r10, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x4, 0x845, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c0a000000009e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a000", [0xfffffffffffffffe]}}) syz_open_dev$swradio(0x0, 0x1, 0x2) ioctl$KVM_RUN(r9, 0xae80, 0x0) splice(r2, &(0x7f0000000280)=0x4, r6, &(0x7f0000000400)=0x9, 0x1, 0x0) 219.420853ms ago: executing program 3 (id=1438): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000841, 0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) (fail_nth: 10) 154.750346ms ago: executing program 4 (id=1439): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)}], 0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000001c0)={0x0, 0xf, 0x1, '}'}, 0x9) sendto$inet6(r1, &(0x7f0000000100)="b8", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00'}) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) 66.9984ms ago: executing program 2 (id=1440): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0d, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async, rerun: 64) r4 = socket$inet6(0xa, 0x1, 0x0) (rerun: 64) getsockopt$inet6_int(r4, 0x29, 0x46, 0x0, &(0x7f0000000140)) (async) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r7, 0x0, 0x0) (async, rerun: 32) listen(r7, 0x0) (async, rerun: 32) accept4(r7, 0x0, 0x0, 0x80800) r8 = socket$inet_sctp(0x2, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r6, @ANYRES32=r5, @ANYRESDEC=r8, @ANYRES32=r7, @ANYRES64=r5, @ANYRES64], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000280), &(0x7f00000002c0)=0x10) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) (rerun: 32) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r8, 0x84, 0x6c, &(0x7f0000000080)={r10}, &(0x7f0000000140)=0x8) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000240)={0x5, 0x10, 0x1, 0x2208, 0x93, 0x7fff, 0x7, 0x3, r10}, 0x20) (async) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef) (async) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) writev(r11, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) (async, rerun: 64) r12 = syz_io_uring_setup(0x5f7c, &(0x7f0000000080)={0x0, 0x1906, 0x80, 0x1, 0x1a7}, &(0x7f0000000100), &(0x7f0000000140)) (rerun: 64) io_uring_register$IORING_UNREGISTER_PBUF_RING(r12, 0x17, &(0x7f0000000180)={&(0x7f0000001000)={[{&(0x7f0000000400)="2c8e71079d02e4fbe8f9bef3de8bafec877925b65455a0247c1840aeb0153c98087e4caf8d4fff6c1a61c3fec3986be73bbf0124716b211d613d77c7257310fe7d74eee163fef14aab09b64c1470896971fadb051b0840b5eef51b5d737d72e5decd2cde69f3fb3dc6da648942b77fd110280d3ca6a05d0522f3efbee2226230f50608a1b7f3d72c1f611e2cfe0c375e6f24fbcbffb3e0316258bfee31eb1fc34fe03ea395abc7cd9e94feaeae5c15ff0cabc7f6b6bf6504080751e7f07e4ea7572d0a91113c119978d8d00d765a2042eb1411f6e4cec785b84544213b3839b5798cc68f28ad21e7f475", 0xea}, {&(0x7f0000000500)="4fbcd6d736b9631425a498da235fd3d9d4a3f49d37d7f585e23a503dfae381890b4a25a38761c97a5c6e036ef0228330ab6cb7a24b4d1feeace81b007a629b687988eebe44b728fae1c8d8de953fb5eda030647a3c24cd12494e6f93284012747772222179ce01ce5b2b230bf835f7c533920030f0b1e6cc4cdacece9fffb95db7f08bd9d52b558a810cdd3a6b0348335814256b2a75a087a9651fbf987061813c50c355e0da36ff22d6dafa5879425f34eb54f6b2625d05d624f6dfe020c2e2612b201ece45994f2a3bca20025557a0433e4614bbd2b44922d2fef3ceb388ea2c188e81cce2d8ac2db9c83c2578366802ebd735", 0xf4, 0x1}]}, 0x2, 0x2}, 0x1) 0s ago: executing program 4 (id=1441): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001d906e20501dc6609b018000000109021b0001000001000904f7000176246700090582020002"], 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000300)={0x1fe, 0x340, 0x380, &(0x7f0000000980)=[0x4b83, 0x8001, 0x800, 0xa6, 0xfffffffffffff801, 0xd, 0xe2b, 0x3, 0x3, 0x3, 0xc01, 0x80000001, 0xac, 0xffffffffffff2f66, 0xe0a9, 0xf, 0x7, 0x5b, 0x7, 0x6, 0x80, 0x4e27, 0x400, 0x64c1, 0x9c3, 0x0, 0x1, 0xfff, 0x4, 0xa0af5e8, 0xffff, 0xffffffffffffcc8c, 0x1, 0xd1c, 0x6, 0x1ff, 0x1c, 0x3, 0x40, 0xffffffff, 0x4, 0xfffffffffffffc01, 0x8000000000000001, 0x1ff, 0x1e7, 0x102b, 0x2, 0xfffffffffffffffc, 0xfffffffffffffff1, 0x5, 0x28, 0x4, 0x0, 0x3, 0x7, 0x8000000000000001, 0xfffffffffffff5d5, 0xfffffffffffffffa, 0x6, 0x3, 0x0, 0x2, 0x3, 0x4, 0x0, 0x65b5, 0x4, 0x9, 0xffffffffffffffff, 0xbac, 0x7, 0x8, 0x101, 0xe, 0x56cfa03c, 0x1, 0x7, 0x9, 0x9, 0x9, 0xfdb, 0x1, 0x5, 0x7, 0x0, 0x1, 0x7, 0xd71, 0x5, 0x81, 0x9, 0x5, 0x80, 0x7, 0x100, 0x401, 0x5, 0x40, 0x9, 0x2, 0xf6, 0xffffffffffffffff, 0x1, 0xffffffffffff8000, 0x8000000000000000, 0x8000000000000000, 0x80000001, 0x8, 0xc, 0x0, 0x6e, 0x7f, 0x20000000, 0x4ff7, 0x2, 0x40, 0x7d7f, 0xb, 0x2, 0xffffffffffffffff, 0x858f, 0x3, 0x5, 0x400, 0x1e, 0x4, 0xffffffffffff6c8d, 0x5c256116]}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{}, 0x0, &(0x7f0000000880)}, 0x20) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000340)=[{0x2, 0x0, 0x0, 0x81}]}) vmsplice(r2, 0x0, 0x0, 0x0) r3 = semget(0x0, 0x2, 0xf30f5608788147b1) semctl$GETPID(r3, 0x1, 0xb, &(0x7f0000000180)=""/36) capset(0x0, 0x0) pivot_root(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='.\x00') syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) capget(&(0x7f0000000080)={0x20071026}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r5, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x44084) syz_usb_connect(0x3, 0x4f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e45aa5205b109917e9360102030109023d0001000000000904ef0404ff010100090502020800d0000909050800ff030700060705a902e86f4c0905d5bb"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000006e4908009500000000000000d1a7cffd24eea9f3ad5553aae509479ec758370544fd8280048548d903a1e2bdd1620000af1cb54ad82ee60259754091a52ca3"], &(0x7f0000000100)='GPL\x00', 0x1}, 0x94) kernel console output (not intermixed with test programs): 71.852793][ T30] audit: type=1326 audit(1751052968.028:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9673 comm="syz.2.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92fc78e929 code=0x50000 [ 371.875954][ C1] vkms_vblank_simulate: vblank timer overrun [ 372.432825][ T30] audit: type=1326 audit(1751052968.028:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9673 comm="syz.2.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92fc78e929 code=0x50000 [ 372.456815][ T30] audit: type=1326 audit(1751052968.028:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9673 comm="syz.2.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92fc78e929 code=0x50000 [ 372.482374][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.506830][ T30] audit: type=1326 audit(1751052968.128:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9673 comm="syz.2.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92fc78e929 code=0x50000 [ 372.536765][ T24] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 372.560578][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.630009][ T24] usb 5-1: config 0 descriptor?? [ 372.655519][ T30] audit: type=1326 audit(1751052968.128:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9673 comm="syz.2.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f92fc78e929 code=0x50000 [ 372.703691][ T9702] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 372.888620][ T30] audit: type=1326 audit(1751052968.128:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9673 comm="syz.2.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92fc78e929 code=0x50000 [ 372.925467][ T30] audit: type=1326 audit(1751052968.128:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9673 comm="syz.2.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92fc78e929 code=0x50000 [ 372.985361][ T30] audit: type=1326 audit(1751052968.128:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9673 comm="syz.2.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92fc78e929 code=0x50000 [ 373.673165][ T9711] netlink: 'syz.1.1012': attribute type 9 has an invalid length. [ 373.681000][ T9711] netlink: 211988 bytes leftover after parsing attributes in process `syz.1.1012'. [ 373.692255][ T9711] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1012'. [ 373.710969][ T9707] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1013'. [ 373.729388][ T30] audit: type=1326 audit(1751052968.128:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9673 comm="syz.2.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92fc78e929 code=0x50000 [ 373.975257][ T24] keytouch 0003:0926:3333.000F: fixing up Keytouch IEC report descriptor [ 374.018070][ T24] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.000F/input/input30 [ 374.183570][ T9688] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1008'. [ 374.385880][ T9721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1016'. [ 374.825177][ T24] keytouch 0003:0926:3333.000F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 375.356588][ T9727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.376104][ T9727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.613637][ T2134] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 376.321567][ T24] usb 5-1: USB disconnect, device number 40 [ 376.865950][ T3483] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 377.840650][ T3483] Bluetooth: hci5: Frame reassembly failed (-84) [ 377.847930][ T3483] Bluetooth: hci5: Frame reassembly failed (-84) [ 378.198366][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.681449][ T9772] overlayfs: failed to resolve './file0': -2 [ 379.230223][ T9779] set match dimension is over the limit! [ 379.243599][ T9779] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1026'. [ 379.562950][ T9] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 379.744363][ T5827] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 379.745465][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 379.823934][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 379.909031][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 379.971485][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.325350][ T9792] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1029'. [ 380.511374][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.591220][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 380.619521][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 380.982999][ T9] usb 1-1: Product: syz [ 380.987251][ T9] usb 1-1: Manufacturer: syz [ 381.100919][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 381.135397][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 381.169255][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 381.190931][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [ 381.352509][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 381.373013][ T5818] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 381.667545][ T9] usb 1-1: USB disconnect, device number 58 [ 381.676638][ T5818] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.710542][ T5818] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.740585][ T5818] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 381.760043][ T5818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.828251][ T5818] usb 2-1: config 0 descriptor?? [ 382.063144][ T24] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 382.213311][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 382.220795][ T24] usb 4-1: config 0 has an invalid interface number: 247 but max is 0 [ 382.231742][ T24] usb 4-1: config 0 has no interface number 0 [ 382.239961][ T24] usb 4-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice= 1.9b [ 382.252541][ T24] usb 4-1: New USB device strings: Mfr=128, Product=0, SerialNumber=0 [ 382.261416][ T24] usb 4-1: Manufacturer: syz [ 382.296456][ T5818] pyra 0003:1E7D:2CF6.0010: item fetching failed at offset 6/7 [ 382.311832][ T24] usb 4-1: config 0 descriptor?? [ 382.326790][ T5818] pyra 0003:1E7D:2CF6.0010: parse failed [ 382.332569][ T5818] pyra 0003:1E7D:2CF6.0010: probe with driver pyra failed with error -22 [ 382.369016][ T9815] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1035'. [ 382.386595][ T9815] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1035'. [ 382.506377][ T24] usb 2-1: USB disconnect, device number 42 [ 382.796476][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 382.817926][ T9822] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1039'. [ 382.843562][ T9] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 383.042771][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 383.042788][ T30] audit: type=1400 audit(1751052979.328:680): avc: denied { shutdown } for pid=9823 comm="syz.0.1038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 383.103199][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 383.113786][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 383.229302][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 383.272814][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 383.335305][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.353046][ T9809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.361655][ T9809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.376073][ T5818] usb 4-1: USB disconnect, device number 52 [ 383.426015][ T9] usb 3-1: Product: syz [ 383.430265][ T9] usb 3-1: Manufacturer: syz [ 383.439104][ T9] usb 3-1: SerialNumber: syz [ 383.449884][ T9] usb 3-1: config 0 descriptor?? [ 383.467291][ T9834] input: syz0 as /devices/virtual/input/input31 [ 383.468514][ T9] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 383.486162][ T9] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 383.514530][ T30] audit: type=1400 audit(1751052979.808:681): avc: denied { getopt } for pid=9835 comm="syz.1.1042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 383.630376][ T30] audit: type=1400 audit(1751052979.918:682): avc: denied { append } for pid=9835 comm="syz.1.1042" name="video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 383.653423][ C1] vkms_vblank_simulate: vblank timer overrun [ 383.809874][ T30] audit: type=1326 audit(1751052980.098:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9841 comm="syz.4.1044" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4a8518e929 code=0x0 [ 384.108865][ T9] em28xx 3-1:0.0: chip ID is em2874 [ 384.221906][ T9852] netlink: 'syz.3.1045': attribute type 1 has an invalid length. [ 385.104575][ T9854] overlayfs: failed to resolve './file0': -2 [ 386.655328][ T5924] usb 3-1: USB disconnect, device number 41 [ 386.785600][ T5924] em28xx 3-1:0.0: Disconnecting em28xx [ 386.838417][ T2134] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 386.915701][ T5924] em28xx 3-1:0.0: Freeing device [ 387.926827][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 388.732937][ T30] audit: type=1400 audit(1751052985.018:684): avc: denied { create } for pid=9892 comm="syz.2.1056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 388.792481][ T30] audit: type=1400 audit(1751052985.018:685): avc: denied { setopt } for pid=9892 comm="syz.2.1056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 388.938156][ T30] audit: type=1400 audit(1751052985.118:686): avc: denied { listen } for pid=9890 comm="syz.1.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 388.957782][ T30] audit: type=1400 audit(1751052985.118:687): avc: denied { accept } for pid=9890 comm="syz.1.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 389.000629][ T9909] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1550 sclass=netlink_route_socket pid=9909 comm=syz.1.1054 [ 389.152379][ T9907] fuse: Unknown parameter 'group_g»B+zC•jÜÑ [ 389.152379][ T9907] Rïál¸ç’ôDQôJ“áï2f‡ [ 390.051668][ T9925] dump_stack_lvl+0x16c/0x1f0 [ 390.051700][ T9925] should_fail_ex+0x512/0x640 [ 390.051722][ T9925] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 390.051745][ T9925] should_failslab+0xc2/0x120 [ 390.051770][ T9925] __kmalloc_cache_noprof+0x6a/0x3e0 [ 390.051790][ T9925] ? cred_has_capability.isra.0+0x193/0x2f0 [ 390.051813][ T9925] ? kernfs_get_tree+0xcb/0xb20 [ 390.051836][ T9925] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 390.051863][ T9925] kernfs_get_tree+0xcb/0xb20 [ 390.051888][ T9925] ? __pfx_kernfs_get_tree+0x10/0x10 [ 390.051911][ T9925] ? cap_capable+0xb3/0x250 [ 390.051935][ T9925] sysfs_get_tree+0x41/0x140 [ 390.051960][ T9925] vfs_get_tree+0x8b/0x340 [ 390.051978][ T9925] path_mount+0x1414/0x2020 [ 390.052006][ T9925] ? kmem_cache_free+0x2d1/0x4d0 [ 390.052027][ T9925] ? __pfx_path_mount+0x10/0x10 [ 390.052057][ T9925] ? putname+0x154/0x1a0 [ 390.052085][ T9925] __x64_sys_mount+0x28d/0x310 [ 390.052111][ T9925] ? __pfx___x64_sys_mount+0x10/0x10 [ 390.052138][ T9925] ? ksys_write+0x1ac/0x250 [ 390.052164][ T9925] do_syscall_64+0xcd/0x4c0 [ 390.052191][ T9925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.052209][ T9925] RIP: 0033:0x7f4a8518e929 [ 390.052223][ T9925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.052240][ T9925] RSP: 002b:00007f4a8601c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 390.052257][ T9925] RAX: ffffffffffffffda RBX: 00007f4a853b6160 RCX: 00007f4a8518e929 [ 390.052268][ T9925] RDX: 0000200000000080 RSI: 0000200000000180 RDI: 0000000000000000 [ 390.052278][ T9925] RBP: 00007f4a8601c090 R08: 0000000000000000 R09: 0000000000000000 [ 390.052289][ T9925] R10: 0000000001214040 R11: 0000000000000246 R12: 0000000000000002 [ 390.052299][ T9925] R13: 0000000000000000 R14: 00007f4a853b6160 R15: 00007ffd726506b8 [ 390.052323][ T9925] [ 390.265921][ T9923] overlayfs: overlapping lowerdir path [ 390.307781][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 390.354157][ T9] usb 1-1: Product: syz [ 390.372587][ T9] usb 1-1: Manufacturer: syz [ 390.420006][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 390.439697][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 390.485464][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 390.599779][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [ 391.104639][ T24] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 391.240406][ T5924] usb 1-1: USB disconnect, device number 59 [ 391.445583][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.457078][ T24] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 391.466389][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.475898][ T24] usb 4-1: config 0 descriptor?? [ 391.561696][ T9935] futex_wake_op: syz.1.1062 tries to shift op by -1; fix this program [ 391.922764][ T9939] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1063'. [ 391.938589][ T9939] hfsplus: unable to find HFS+ superblock [ 392.298754][ T24] keytouch 0003:0926:3333.0011: fixing up Keytouch IEC report descriptor [ 392.320820][ T24] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0011/input/input32 [ 392.591254][ T24] keytouch 0003:0926:3333.0011: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 392.876794][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 393.505437][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 393.702775][ T30] audit: type=1400 audit(1751052989.988:688): avc: denied { read } for pid=9970 comm="syz.4.1071" path="socket:[25199]" dev="sockfs" ino=25199 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 394.339927][ T5818] usb 4-1: USB disconnect, device number 53 [ 395.907290][ T9996] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1075'. [ 395.927232][ T9996] hfsplus: unable to find HFS+ superblock [ 398.514123][ T5881] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 398.628971][ T24] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 398.673316][ T6182] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 398.743001][ T5881] usb 1-1: Using ep0 maxpacket: 8 [ 398.760663][ T5881] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 398.777591][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.802018][ T5881] usb 1-1: Product: syz [ 398.880299][T10037] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1080'. [ 398.904918][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 399.054619][ T5881] usb 1-1: Manufacturer: syz [ 399.060054][ T24] usb 2-1: config 0 has an invalid interface number: 247 but max is 0 [ 399.069586][ T24] usb 2-1: config 0 has no interface number 0 [ 399.082605][ T5881] usb 1-1: SerialNumber: syz [ 399.088899][ T24] usb 2-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice= 1.9b [ 399.125103][ T24] usb 2-1: New USB device strings: Mfr=128, Product=0, SerialNumber=0 [ 399.138127][ T5881] usb 1-1: config 0 descriptor?? [ 399.143819][ T24] usb 2-1: Manufacturer: syz [ 399.157024][ T24] usb 2-1: config 0 descriptor?? [ 399.263932][ T6182] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 400.086201][ T5881] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 400.145497][T10041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.181770][T10041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.442967][ T8446] usb 2-1: USB disconnect, device number 43 [ 400.816322][T10047] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1088'. [ 401.207388][T10047] hfsplus: unable to find HFS+ superblock [ 401.239275][T10046] lo speed is unknown, defaulting to 1000 [ 402.852470][T10074] netlink: 'syz.4.1095': attribute type 1 has an invalid length. [ 402.882200][ T30] audit: type=1400 audit(1751052999.138:689): avc: denied { name_bind } for pid=10070 comm="syz.4.1095" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 403.045237][ T5881] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 403.617919][ T5924] usb 1-1: USB disconnect, device number 60 [ 403.744707][ T3483] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 404.060632][ T5881] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 404.211225][T10098] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1100'. [ 404.232315][T10098] hfsplus: unable to find HFS+ superblock [ 404.636423][ T5924] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 404.662958][ T5881] usb 2-1: Using ep0 maxpacket: 32 [ 404.670480][ T5881] usb 2-1: config 0 has an invalid interface number: 247 but max is 0 [ 404.678871][ T5881] usb 2-1: config 0 has no interface number 0 [ 404.686192][ T5881] usb 2-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice= 1.9b [ 404.695427][ T5881] usb 2-1: New USB device strings: Mfr=128, Product=0, SerialNumber=0 [ 404.703788][ T5881] usb 2-1: Manufacturer: syz [ 404.710612][ T5881] usb 2-1: config 0 descriptor?? [ 404.862944][ T5924] usb 3-1: Using ep0 maxpacket: 16 [ 404.871588][ T5924] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 404.890185][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 404.905510][ T5924] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 404.915993][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.924514][ T5924] usb 3-1: Product: syz [ 404.929226][ T5924] usb 3-1: Manufacturer: syz [ 404.955101][ T5924] usb 3-1: SerialNumber: syz [ 404.961922][ T5924] usb 3-1: config 0 descriptor?? [ 404.988679][ T5924] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 404.998515][ T5924] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 405.116930][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 405.419306][T10079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.427925][T10079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.446275][ T8446] usb 2-1: USB disconnect, device number 44 [ 405.528836][T10111] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1104'. [ 405.592832][ T30] audit: type=1400 audit(1751053001.878:690): avc: denied { create } for pid=10112 comm="syz.0.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 406.212931][ T30] audit: type=1400 audit(1751053002.128:691): avc: denied { write } for pid=10112 comm="syz.0.1105" path="socket:[24496]" dev="sockfs" ino=24496 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 406.322377][T10117] netlink: 'syz.2.1099': attribute type 2 has an invalid length. [ 406.330579][T10117] netlink: 'syz.2.1099': attribute type 8 has an invalid length. [ 406.342068][T10117] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1099'. [ 406.404750][T10119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1106'. [ 406.423901][T10119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1106'. [ 406.527644][T10119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1106'. [ 406.560005][T10120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1106'. [ 406.612130][T10120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1106'. [ 406.656740][T10126] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=10126 comm=syz.0.1107 [ 406.853948][ T5924] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 407.013193][ T5924] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 407.082788][ T5924] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 407.103202][ T5924] em28xx 3-1:0.0: No AC97 audio processor [ 407.694853][ T8446] usb 3-1: USB disconnect, device number 42 [ 407.701915][ T8446] em28xx 3-1:0.0: Disconnecting em28xx [ 407.725525][ T8446] em28xx 3-1:0.0: Freeing device [ 407.907510][T10137] vlan2: entered allmulticast mode [ 407.927601][T10141] FAT-fs (nullb0): bogus number of reserved sectors [ 407.942986][T10137] macsec0: entered allmulticast mode [ 408.340990][T10141] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 408.451126][T10147] rdma_rxe: rxe_newlink: failed to add lo [ 408.888335][ T30] audit: type=1400 audit(1751053005.178:692): avc: denied { getopt } for pid=10151 comm="syz.0.1117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 409.306010][T10157] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1116'. [ 409.323634][T10157] hfsplus: unable to find HFS+ superblock [ 409.512542][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 410.073258][ T5923] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 410.087869][ T5881] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 410.399362][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.410578][ T5923] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 410.422363][ T5881] usb 1-1: Using ep0 maxpacket: 32 [ 410.427551][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.438514][ T5881] usb 1-1: config 0 has an invalid interface number: 247 but max is 0 [ 410.456783][ T5881] usb 1-1: config 0 has no interface number 0 [ 410.465033][ T5923] usb 4-1: config 0 descriptor?? [ 410.506492][ T5881] usb 1-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice= 1.9b [ 410.531062][ T5881] usb 1-1: New USB device strings: Mfr=128, Product=0, SerialNumber=0 [ 410.539532][ T5924] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 410.550129][ T5881] usb 1-1: Manufacturer: syz [ 410.565511][ T5881] usb 1-1: config 0 descriptor?? [ 410.715670][ T5924] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 410.779878][ T5924] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 410.796649][ T2134] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 410.881930][T10182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.893125][T10182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.155888][ T5924] usb 5-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 411.168737][ T5923] keytouch 0003:0926:3333.0012: fixing up Keytouch IEC report descriptor [ 411.178440][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.193558][ T5923] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0012/input/input33 [ 411.225019][ T5924] usb 5-1: config 0 descriptor?? [ 411.232510][ T5924] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 411.403192][ T9] usb 1-1: USB disconnect, device number 61 [ 411.492274][ T5923] keytouch 0003:0926:3333.0012: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 411.923249][ T9] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 412.093753][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 412.119125][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 412.129144][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.141129][ T9] usb 2-1: Product: syz [ 412.146584][ T9] usb 2-1: Manufacturer: syz [ 412.151860][ T9] usb 2-1: SerialNumber: syz [ 412.159441][ T9] usb 2-1: config 0 descriptor?? [ 412.269133][T10200] lo speed is unknown, defaulting to 1000 [ 412.578695][T10198] x_tables: duplicate underflow at hook 3 [ 412.633291][ T8446] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 412.762789][ T9] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 412.793238][ T8446] usb 1-1: Using ep0 maxpacket: 16 [ 412.799932][ T8446] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 412.812655][ T8446] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 413.013242][ T8446] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 413.029070][ T8446] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.042272][ T8446] usb 1-1: Product: syz [ 413.046675][ T8446] usb 1-1: Manufacturer: syz [ 413.051370][ T8446] usb 1-1: SerialNumber: syz [ 413.076906][ T8446] usb 1-1: config 0 descriptor?? [ 413.090641][ T8446] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 413.102799][ T8446] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 413.176577][ T8448] usb 4-1: USB disconnect, device number 54 [ 413.778281][ T8446] em28xx 1-1:0.0: chip ID is em2874 [ 413.902471][ T9] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 413.923731][ T9] usb 2-1: USB disconnect, device number 45 [ 413.944460][ T8448] usb 5-1: USB disconnect, device number 41 [ 414.932187][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 415.614102][T10230] loop6: detected capacity change from 0 to 7 [ 415.710104][T10230] Dev loop6: unable to read RDB block 7 [ 415.717268][T10230] loop6: unable to read partition table [ 415.725134][T10230] loop6: partition table beyond EOD, truncated [ 415.731414][T10230] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 416.391409][T10241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1136'. [ 416.785619][ T30] audit: type=1400 audit(1751053012.478:693): avc: denied { map } for pid=10237 comm="syz.4.1138" path="/dev/nvme-fabrics" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 416.872713][ T6182] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 417.956764][ T24] usb 1-1: USB disconnect, device number 62 [ 418.135730][ T24] em28xx 1-1:0.0: Disconnecting em28xx [ 418.218995][ T24] em28xx 1-1:0.0: Freeing device [ 418.722976][ T5924] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 418.883000][ T5924] usb 2-1: Using ep0 maxpacket: 8 [ 418.924413][T10271] hfsplus: unable to find HFS+ superblock [ 418.990018][ T5923] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 419.148909][ T5924] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 419.226301][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.243547][ T5923] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 419.257200][ T5924] usb 2-1: config 0 descriptor?? [ 419.263792][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.320388][ T5923] usb 1-1: Product: syz [ 419.325328][ T5923] usb 1-1: Manufacturer: syz [ 419.329994][ T5923] usb 1-1: SerialNumber: syz [ 419.337683][ T5923] usb 1-1: config 0 descriptor?? [ 419.541287][ T30] audit: type=1400 audit(1751053015.828:694): avc: denied { mount } for pid=10275 comm="syz.2.1149" name="/" dev="9p" ino=12201485589810046722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 419.554234][T10278] trusted_key: encrypted_key: insufficient parameters specified [ 419.588832][ T30] audit: type=1400 audit(1751053015.828:695): avc: denied { write } for pid=10275 comm="syz.2.1149" dev="9p" ino=12201485589810046722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 419.593393][ T5923] usb-storage 1-1:0.0: USB Mass Storage device detected [ 419.611193][ C0] vkms_vblank_simulate: vblank timer overrun [ 419.620238][ T30] audit: type=1400 audit(1751053015.828:696): avc: denied { open } for pid=10275 comm="syz.2.1149" name="/" dev="9p" ino=12201485589810046722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 419.647572][ C0] vkms_vblank_simulate: vblank timer overrun [ 419.710546][ T30] audit: type=1400 audit(1751053015.828:697): avc: denied { read } for pid=10275 comm="syz.2.1149" dev="9p" ino=12201485589810046722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 419.759405][ T30] audit: type=1400 audit(1751053015.908:698): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 419.801196][ T30] audit: type=1400 audit(1751053015.998:699): avc: denied { setopt } for pid=10272 comm="syz.3.1148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 419.841546][ T5923] usb 1-1: USB disconnect, device number 63 [ 419.983209][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 421.477682][T10314] Bluetooth: MGMT ver 1.23 [ 421.664577][ T24] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 421.675112][ T5924] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x8001: -71 [ 421.730242][ T5924] asix 2-1:0.0: probe with driver asix failed with error -71 [ 421.753183][ T5881] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 421.937386][ T5924] usb 2-1: USB disconnect, device number 46 [ 421.949726][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 422.036591][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 422.059293][ T5881] usb 4-1: Using ep0 maxpacket: 32 [ 422.138858][ T5881] usb 4-1: config 0 has an invalid interface number: 247 but max is 0 [ 422.203094][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 422.219013][ T5881] usb 4-1: config 0 has no interface number 0 [ 422.232190][ T5881] usb 4-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice= 1.9b [ 422.253080][ T5881] usb 4-1: New USB device strings: Mfr=128, Product=0, SerialNumber=0 [ 422.262638][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 422.272894][ T5881] usb 4-1: Manufacturer: syz [ 422.280466][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.289476][ T5881] usb 4-1: config 0 descriptor?? [ 422.296576][ T24] usb 1-1: Product: syz [ 422.301453][ T24] usb 1-1: Manufacturer: syz [ 422.314214][ T24] usb 1-1: SerialNumber: syz [ 422.325985][ T24] usb 1-1: config 0 descriptor?? [ 422.334402][ T24] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 422.343842][ T24] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 422.924444][ T8446] usb 4-1: USB disconnect, device number 55 [ 422.944048][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 422.978313][ T24] em28xx 1-1:0.0: chip ID is em2874 [ 423.088974][T10333] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1160'. [ 423.098235][T10333] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1160'. [ 423.110436][T10333] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1160'. [ 423.394157][T10338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1161'. [ 424.567133][T10343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1162'. [ 425.035708][T10345] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1163'. [ 425.066561][ T24] usb 1-1: USB disconnect, device number 64 [ 425.210704][ T24] em28xx 1-1:0.0: Disconnecting em28xx [ 425.730764][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 425.742983][ T24] em28xx 1-1:0.0: Freeing device [ 426.656440][T10373] 9pnet_fd: Insufficient options for proto=fd [ 427.614888][T10384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1173'. [ 427.943208][ T5924] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 428.251220][ T5924] usb 1-1: Using ep0 maxpacket: 16 [ 428.264918][ T5924] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 428.275603][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 428.289673][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 428.299579][ T5924] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 428.309367][ T24] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 428.317255][ T5924] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 428.334042][ T5924] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 428.352996][ T5924] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 428.363978][ T5924] usb 1-1: Manufacturer: syz [ 428.458928][ T5924] usb 1-1: config 0 descriptor?? [ 428.539961][ T24] usb 4-1: config 192 has an invalid interface number: 162 but max is 0 [ 428.626579][ T24] usb 4-1: config 192 has no interface number 0 [ 428.673929][ T24] usb 4-1: config 192 interface 162 altsetting 5 bulk endpoint 0x5 has invalid maxpacket 32 [ 428.714280][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 428.785227][ T24] usb 4-1: config 192 interface 162 has no altsetting 0 [ 428.895843][ T24] usb 4-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=56.c3 [ 429.031394][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.101650][ T24] usb 4-1: Product: à § [ 429.150764][ T24] usb 4-1: SerialNumber: Ђ [ 429.256802][T10388] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 429.473691][T10390] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 429.713131][ T5924] rc_core: IR keymap rc-hauppauge not found [ 429.719467][ T5924] Registered IR keymap rc-empty [ 429.727756][ T5924] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 429.797036][ T5924] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 429.927416][T10413] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 429.935528][T10413] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 429.943998][T10413] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 429.951731][T10413] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 429.967926][ T5924] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 429.982557][ T5924] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input34 [ 430.019862][ T5924] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 430.027844][ C1] mceusb 1-1:0.0: long-range (0x4) receiver active [ 430.063132][ T5924] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 430.093019][ T5881] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 430.111089][ T5924] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 430.143215][ T5924] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 430.181292][ T5924] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 430.320766][ T24] usb-storage 4-1:192.162: USB Mass Storage device detected [ 430.863090][ T5881] usb 2-1: Using ep0 maxpacket: 32 [ 430.883073][ T5881] usb 2-1: config 0 has an invalid interface number: 247 but max is 0 [ 430.914862][ T5881] usb 2-1: config 0 has no interface number 0 [ 430.935760][ T5924] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 430.961070][ T24] usb-storage 4-1:192.162: device ignored [ 430.987125][ T5881] usb 2-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice= 1.9b [ 431.063385][ T5924] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 431.183208][ T5881] usb 2-1: New USB device strings: Mfr=128, Product=0, SerialNumber=0 [ 431.194358][ T24] usb 4-1: USB disconnect, device number 56 [ 431.201152][ T5881] usb 2-1: Manufacturer: syz [ 431.206000][ T5924] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 431.247166][ T5924] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 431.256840][ T5881] usb 2-1: config 0 descriptor?? [ 431.423191][ T5924] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 431.594559][T10433] hfsplus: unable to find HFS+ superblock [ 431.740983][T10435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1190'. [ 432.335061][ T5924] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 432.353842][ T5924] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x4 active) [ 432.389195][ T5924] usb 1-1: USB disconnect, device number 65 [ 432.542996][ T24] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 432.607880][T10437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.621476][T10437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.782974][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 432.851261][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.911307][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 432.926538][ T5923] usb 2-1: USB disconnect, device number 47 [ 432.947722][ T24] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 432.984733][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.035189][ T24] usb 4-1: config 0 descriptor?? [ 433.165737][T10449] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 433.263200][ T30] audit: type=1400 audit(1751053029.448:700): avc: denied { mount } for pid=10443 comm="syz.0.1193" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 433.290443][T10448] sock: sock_timestamping_bind_phc: sock not bind to device [ 433.300827][T10448] netlink: 'syz.4.1195': attribute type 4 has an invalid length. [ 433.308728][ T30] audit: type=1400 audit(1751053029.448:701): avc: denied { mounton } for pid=10443 comm="syz.0.1193" path="/219/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 433.513076][ T30] audit: type=1400 audit(1751053029.708:702): avc: denied { firmware_load } for pid=10450 comm="syz.2.1196" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 433.537930][ C1] vkms_vblank_simulate: vblank timer overrun [ 433.716634][ T30] audit: type=1400 audit(1751053029.838:703): avc: denied { listen } for pid=10450 comm="syz.2.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 433.844578][ T30] audit: type=1400 audit(1751053030.138:704): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 433.963280][T10456] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 434.043489][ T30] audit: type=1400 audit(1751053030.308:705): avc: denied { accept } for pid=10458 comm="syz.2.1199" laddr=172.20.20.170 lport=42064 faddr=172.20.20.170 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 434.095688][ T24] HID 045e:07da: Invalid code 65791 type 1 [ 434.124695][ T24] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0013/input/input35 [ 434.158353][ T24] microsoft 0003:045E:07DA.0013: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 434.197623][T10462] fuse: Unknown parameter '184467440737095516150x0000000000000005' [ 434.450676][T10429] syzkaller1: entered promiscuous mode [ 434.456896][T10429] syzkaller1: entered allmulticast mode [ 434.465319][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 434.492962][ T8446] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 434.645735][ T8446] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.659063][ T8446] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 434.670487][ T8446] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 434.681552][ T8446] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.713839][ T8446] usb 2-1: config 0 descriptor?? [ 434.836081][ T9] usb 4-1: USB disconnect, device number 57 [ 435.143491][T10472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1202'. [ 435.237060][ T2134] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 435.539431][ T8446] pyra 0003:1E7D:2CF6.0014: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 435.552241][ T8446] pyra 0003:1E7D:2CF6.0014: couldn't init struct pyra_device [ 435.572089][ T8446] pyra 0003:1E7D:2CF6.0014: couldn't install mouse [ 435.605481][ T8446] pyra 0003:1E7D:2CF6.0014: probe with driver pyra failed with error -32 [ 436.202466][T10498] hfsplus: unable to find HFS+ superblock [ 436.250488][ T8446] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 436.393648][ T8446] usb 4-1: device descriptor read/64, error -71 [ 436.692972][ T8446] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 436.832995][ T8446] usb 4-1: device descriptor read/64, error -71 [ 437.006907][ T8446] usb usb4-port1: attempt power cycle [ 437.272289][ T24] usb 2-1: USB disconnect, device number 48 [ 437.319353][T10506] FAULT_INJECTION: forcing a failure. [ 437.319353][T10506] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 437.379285][T10506] CPU: 0 UID: 0 PID: 10506 Comm: syz.4.1211 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(full) [ 437.379313][T10506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 437.379324][T10506] Call Trace: [ 437.379330][T10506] [ 437.379336][T10506] dump_stack_lvl+0x16c/0x1f0 [ 437.379369][T10506] should_fail_ex+0x512/0x640 [ 437.379397][T10506] _copy_from_iter+0x29f/0x16f0 [ 437.379428][T10506] ? __pfx__copy_from_iter+0x10/0x10 [ 437.379456][T10506] ? __pfx___might_resched+0x10/0x10 [ 437.379477][T10506] ? iov_iter_revert+0x264/0x5a0 [ 437.379505][T10506] file_tty_write.constprop.0+0x488/0x9b0 [ 437.379538][T10506] vfs_write+0x6c4/0x1150 [ 437.379561][T10506] ? __pfx_tty_write+0x10/0x10 [ 437.379587][T10506] ? __pfx_vfs_write+0x10/0x10 [ 437.379605][T10506] ? find_held_lock+0x2b/0x80 [ 437.379641][T10506] ksys_write+0x12a/0x250 [ 437.379662][T10506] ? __pfx_ksys_write+0x10/0x10 [ 437.379707][T10506] do_syscall_64+0xcd/0x4c0 [ 437.379733][T10506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.379749][T10506] RIP: 0033:0x7f4a8518e929 [ 437.379762][T10506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 437.379778][T10506] RSP: 002b:00007f4a8603d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 437.379794][T10506] RAX: ffffffffffffffda RBX: 00007f4a853b6080 RCX: 00007f4a8518e929 [ 437.379804][T10506] RDX: 00000000ffffff5c RSI: 00002000000001c0 RDI: 0000000000000003 [ 437.379814][T10506] RBP: 00007f4a8603d090 R08: 0000000000000000 R09: 0000000000000000 [ 437.379824][T10506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.379834][T10506] R13: 0000000000000000 R14: 00007f4a853b6080 R15: 00007ffd726506b8 [ 437.379857][T10506] [ 437.483345][ T30] audit: type=1400 audit(1751053033.748:706): avc: denied { module_load } for pid=10511 comm="syz.0.1214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 437.586202][ T8446] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 437.743633][ T8446] usb 4-1: device descriptor read/8, error -71 [ 438.208937][T10522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1216'. [ 438.595945][ T8446] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 438.678845][ T8446] usb 4-1: device descriptor read/8, error -71 [ 438.680146][ T30] audit: type=1400 audit(1751053034.968:707): avc: denied { append } for pid=10523 comm="syz.1.1217" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 438.708309][ C1] vkms_vblank_simulate: vblank timer overrun [ 438.938603][ T8446] usb usb4-port1: unable to enumerate USB device [ 438.951363][T10526] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1218'. [ 438.951502][T10530] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1218'. [ 439.247627][T10533] lo speed is unknown, defaulting to 1000 [ 440.192421][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.223659][ T6182] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 441.205156][ T6182] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 441.242950][ T8446] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 442.482945][ T8446] usb 4-1: device not accepting address 62, error -71 [ 442.552185][T10550] input: syz0 as /devices/virtual/input/input36 [ 443.712993][ T5818] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 443.770327][ T30] audit: type=1400 audit(1751053040.058:708): avc: denied { accept } for pid=10560 comm="syz.0.1229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 443.843057][ T30] audit: type=1400 audit(1751053040.058:709): avc: denied { ioctl } for pid=10560 comm="syz.0.1229" path="socket:[27835]" dev="sockfs" ino=27835 ioctlcmd=0x8b14 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 443.895993][ T5818] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.907297][ T8448] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 443.935317][ T5818] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.971473][ T5818] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 444.005528][ T5818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.043782][ T5818] usb 3-1: config 0 descriptor?? [ 444.080817][ T8448] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 444.091755][ T8448] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 444.113880][ T8448] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 444.133138][ T9] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 444.140914][ T8448] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 444.185682][ T8448] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 444.195662][ T8448] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 444.213421][ T8448] usb 5-1: Product: syz [ 444.217755][ T8448] usb 5-1: Manufacturer: syz [ 444.248690][ T8448] cdc_wdm 5-1:1.0: skipping garbage [ 444.257962][ T8448] cdc_wdm 5-1:1.0: skipping garbage [ 444.273950][ T8448] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 444.292962][ T9] usb 1-1: device descriptor read/64, error -71 [ 444.403161][ T5895] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 444.422922][ T8446] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 444.471230][ T5818] pyra 0003:1E7D:2CF6.0015: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 444.554570][ T5895] usb 2-1: Using ep0 maxpacket: 8 [ 444.583897][ T8446] usb 4-1: Using ep0 maxpacket: 16 [ 444.590438][ T9] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 444.743998][ T5895] usb 2-1: config index 0 descriptor too short (expected 178, got 18) [ 444.850339][ T5818] pyra 0003:1E7D:2CF6.0015: couldn't init struct pyra_device [ 444.863127][ T5818] pyra 0003:1E7D:2CF6.0015: couldn't install mouse [ 444.873690][ T5895] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 444.893200][ T5923] usb 5-1: USB disconnect, device number 42 [ 444.894676][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.913347][ T5818] pyra 0003:1E7D:2CF6.0015: probe with driver pyra failed with error -32 [ 444.952985][ T9] usb 1-1: device descriptor read/64, error -71 [ 444.959661][ T5895] usb 2-1: Product: syz [ 444.973106][ T5895] usb 2-1: Manufacturer: syz [ 444.977784][ T5895] usb 2-1: SerialNumber: syz [ 444.999188][ T5895] usb 2-1: config 0 descriptor?? [ 445.063402][ T9] usb usb1-port1: attempt power cycle [ 445.261117][ T5895] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 445.269240][ T5895] dvb_usb_af9015 2-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 445.279404][ T5895] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 445.285879][ T5895] dvb_usb_af9035 2-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 445.301617][ T5895] usb 2-1: USB disconnect, device number 49 [ 445.403089][ T9] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 445.423755][ T9] usb 1-1: device descriptor read/8, error -71 [ 445.698298][ T9] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 445.889863][ T9] usb 1-1: device descriptor read/8, error -71 [ 446.046732][ T5881] usb 3-1: USB disconnect, device number 43 [ 446.106298][ T9] usb usb1-port1: unable to enumerate USB device [ 446.678341][T10582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1234'. [ 447.090130][ T3483] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 447.102090][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 447.386680][T10587] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1235'. [ 447.541756][T10594] hfsplus: unable to find HFS+ superblock [ 447.997646][T10595] input: syz0 as /devices/virtual/input/input37 [ 448.032948][ T24] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 448.278198][ T8446] usb 4-1: unable to get BOS descriptor or descriptor too short [ 448.448221][ T8446] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 448.451042][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 448.456274][ T8446] usb 4-1: can't read configurations, error -71 [ 448.468164][ T8446] usb usb4-port1: attempt power cycle [ 448.502452][ T24] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 448.531449][ T24] usb 1-1: config 0 has no interface number 0 [ 448.577172][ T24] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 448.603180][ T24] usb 1-1: config 0 interface 85 has no altsetting 0 [ 448.622806][ T24] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 448.640101][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.655946][ T24] usb 1-1: Product: syz [ 448.660750][ T24] usb 1-1: Manufacturer: syz [ 448.668483][ T24] usb 1-1: SerialNumber: syz [ 448.680609][ T24] usb 1-1: config 0 descriptor?? [ 448.792941][ T5895] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 448.969687][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.020337][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.048367][ T5895] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 449.080035][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.193901][ T5895] usb 3-1: config 0 descriptor?? [ 449.428629][ T24] appletouch 1-1:0.85: Geyser mode initialized. [ 449.436554][ T24] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input38 [ 449.552957][ T5923] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 449.671229][ T5924] usb 1-1: USB disconnect, device number 70 [ 449.677040][ T5895] pyra 0003:1E7D:2CF6.0016: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 449.700599][ T5924] appletouch 1-1:0.85: input: appletouch disconnected [ 449.742724][ T5923] usb 5-1: config 192 has an invalid interface number: 162 but max is 0 [ 449.764204][ T5923] usb 5-1: config 192 has no interface number 0 [ 449.770806][ T5923] usb 5-1: config 192 interface 162 altsetting 5 bulk endpoint 0x5 has invalid maxpacket 32 [ 449.783138][ T5923] usb 5-1: config 192 interface 162 has no altsetting 0 [ 449.793177][ T24] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 449.801381][ T5923] usb 5-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=56.c3 [ 449.811075][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.821654][ T5923] usb 5-1: Product: à § [ 449.825920][ T5923] usb 5-1: SerialNumber: Ђ [ 449.834436][T10614] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 449.870121][ T5895] pyra 0003:1E7D:2CF6.0016: couldn't init struct pyra_device [ 449.882218][ T5895] pyra 0003:1E7D:2CF6.0016: couldn't install mouse [ 449.891686][ T5895] pyra 0003:1E7D:2CF6.0016: probe with driver pyra failed with error -32 [ 449.973793][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 449.980252][ T24] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 449.992909][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.002598][ T24] usb 4-1: config 0 descriptor?? [ 450.103016][ T5881] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 450.238604][ T30] audit: type=1400 audit(1751053046.528:710): avc: denied { ioctl } for pid=10627 comm="syz.0.1250" path="socket:[27150]" dev="sockfs" ino=27150 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 450.251730][T10628] xt_CT: You must specify a L4 protocol and not use inversions on it [ 450.272064][ T5881] usb 2-1: Using ep0 maxpacket: 32 [ 450.294604][ T5881] usb 2-1: config 0 has an invalid interface number: 247 but max is 0 [ 450.307448][ T5881] usb 2-1: config 0 has no interface number 0 [ 450.316082][ T5881] usb 2-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice= 1.9b [ 450.325485][ T5881] usb 2-1: New USB device strings: Mfr=128, Product=0, SerialNumber=0 [ 450.334056][ T5881] usb 2-1: Manufacturer: syz [ 450.357453][ T5881] usb 2-1: config 0 descriptor?? [ 450.366132][ T5923] usb-storage 5-1:192.162: USB Mass Storage device detected [ 450.390073][ T5923] usb-storage 5-1:192.162: device ignored [ 450.559952][ T5923] usb 5-1: USB disconnect, device number 43 [ 450.820785][T10634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.832416][T10634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.250215][ T5923] usb 2-1: USB disconnect, device number 50 [ 451.769748][ T5895] usb 3-1: USB disconnect, device number 44 [ 452.064985][ C1] raw-gadget.3 gadget.3: ignoring, device is not running [ 452.078559][ T24] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x8001: -32 [ 452.101473][ T24] asix 4-1:0.0: probe with driver asix failed with error -32 [ 452.471651][ T3483] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 452.674261][ T24] usb 4-1: USB disconnect, device number 65 [ 453.283712][T10666] hfsplus: unable to find HFS+ superblock [ 453.292996][T10665] hfsplus: unable to find HFS+ superblock [ 453.349115][ T6069] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 453.666067][ T24] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 453.997884][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 454.005027][ T24] usb 3-1: config 0 has an invalid interface number: 247 but max is 0 [ 454.030232][ T24] usb 3-1: config 0 has no interface number 0 [ 454.051871][ T24] usb 3-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice= 1.9b [ 454.067987][ T24] usb 3-1: New USB device strings: Mfr=128, Product=0, SerialNumber=0 [ 454.080979][ T24] usb 3-1: Manufacturer: syz [ 454.089051][ T24] usb 3-1: config 0 descriptor?? [ 454.569911][T10687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.580048][T10687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.815623][ T9] usb 3-1: USB disconnect, device number 45 [ 455.223047][ T8448] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 455.434529][ T8448] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.546206][ T8448] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 455.652953][T10704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1267'. [ 456.148332][ T8448] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 456.201352][ T8448] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.483820][ T8448] usb 1-1: config 0 descriptor?? [ 456.520036][T10712] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 456.998789][T10722] fuse: Bad value for 'user_id' [ 457.018461][T10722] fuse: Bad value for 'user_id' [ 457.070688][T10725] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 457.125295][ T8448] pyra 0003:1E7D:2CF6.0017: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 457.323837][ T8448] pyra 0003:1E7D:2CF6.0017: couldn't init struct pyra_device [ 457.352671][T10733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1277'. [ 457.368573][ T8448] pyra 0003:1E7D:2CF6.0017: couldn't install mouse [ 457.386740][ T8448] pyra 0003:1E7D:2CF6.0017: probe with driver pyra failed with error -32 [ 457.413232][T10733] FAULT_INJECTION: forcing a failure. [ 457.413232][T10733] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 457.450025][T10733] CPU: 0 UID: 0 PID: 10733 Comm: syz.4.1277 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(full) [ 457.450052][T10733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 457.450063][T10733] Call Trace: [ 457.450069][T10733] [ 457.450076][T10733] dump_stack_lvl+0x16c/0x1f0 [ 457.450108][T10733] should_fail_ex+0x512/0x640 [ 457.450135][T10733] _copy_to_user+0x32/0xd0 [ 457.450162][T10733] simple_read_from_buffer+0xcb/0x170 [ 457.450188][T10733] proc_fail_nth_read+0x197/0x270 [ 457.450211][T10733] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 457.450236][T10733] ? rw_verify_area+0xcf/0x680 [ 457.450255][T10733] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 457.450278][T10733] vfs_read+0x1e1/0xc60 [ 457.450303][T10733] ? __pfx___mutex_lock+0x10/0x10 [ 457.450330][T10733] ? __pfx_vfs_read+0x10/0x10 [ 457.450359][T10733] ? __fget_files+0x20e/0x3c0 [ 457.450390][T10733] ksys_read+0x12a/0x250 [ 457.450412][T10733] ? __pfx_ksys_read+0x10/0x10 [ 457.450441][T10733] do_syscall_64+0xcd/0x4c0 [ 457.450469][T10733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.450488][T10733] RIP: 0033:0x7f4a8518d33c [ 457.450502][T10733] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 457.450519][T10733] RSP: 002b:00007f4a8605e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 457.450536][T10733] RAX: ffffffffffffffda RBX: 00007f4a853b5fa0 RCX: 00007f4a8518d33c [ 457.450548][T10733] RDX: 000000000000000f RSI: 00007f4a8605e0a0 RDI: 0000000000000004 [ 457.450558][T10733] RBP: 00007f4a8605e090 R08: 0000000000000000 R09: 0000000000000000 [ 457.450568][T10733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 457.450579][T10733] R13: 0000000000000000 R14: 00007f4a853b5fa0 R15: 00007ffd726506b8 [ 457.450603][T10733] [ 457.632242][ C0] vkms_vblank_simulate: vblank timer overrun [ 457.756060][T10744] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1279'. [ 457.774474][T10744] hfsplus: unable to find HFS+ superblock [ 458.144627][ T3483] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 458.303475][ T5881] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 458.502993][ T5881] usb 2-1: Using ep0 maxpacket: 16 [ 458.552398][ T5881] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 458.635242][ T5922] usb 1-1: USB disconnect, device number 71 [ 458.651067][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 458.687566][ T5881] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 458.706828][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.718585][T10752] !: renamed from dummy0 (while UP) [ 458.725311][ T5881] usb 2-1: Product: syz [ 458.729493][ T5881] usb 2-1: Manufacturer: syz [ 458.775567][ T5881] usb 2-1: SerialNumber: syz [ 459.008088][ T9] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 459.015886][ T30] audit: type=1400 audit(1751053055.138:711): avc: denied { ioctl } for pid=10753 comm="syz.4.1285" path="socket:[28445]" dev="sockfs" ino=28445 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 459.016689][ T5881] usb 2-1: config 0 descriptor?? [ 459.041328][ T6069] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 459.158056][ T5881] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 459.264431][ T30] audit: type=1400 audit(1751053055.558:712): avc: denied { setopt } for pid=10760 comm="syz.4.1288" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 459.264634][T10761] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1288'. [ 459.289300][ T9] usb 3-1: config 0 has an invalid interface number: 53 but max is 0 [ 459.301543][ T9] usb 3-1: config 0 has no interface number 0 [ 459.748712][ T9] usb 3-1: config 0 interface 53 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 459.778520][ T5881] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 459.782384][ T9] usb 3-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=48.83 [ 459.804659][ T8448] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 459.829636][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.858329][ T9] usb 3-1: Product: syz [ 459.872968][ T9] usb 3-1: Manufacturer: syz [ 459.893751][ T9] usb 3-1: SerialNumber: syz [ 459.916987][ T9] usb 3-1: config 0 descriptor?? [ 459.972975][ T8448] usb 1-1: Using ep0 maxpacket: 16 [ 459.998603][ T8448] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 460.012019][ T8448] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 460.025650][ T8448] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 460.042163][ T8448] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 460.124538][ T8448] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 460.143283][T10748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1283'. [ 460.167497][ T30] audit: type=1400 audit(1751053056.438:713): avc: denied { ioctl } for pid=10747 comm="syz.2.1283" path="socket:[28434]" dev="sockfs" ino=28434 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 460.217595][ T8448] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 460.218574][ T5881] em28xx 2-1:0.0: chip ID is em2874 [ 460.236243][ T8448] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 460.351350][ T8448] usb 1-1: Manufacturer: syz [ 460.361880][ T8448] usb 1-1: config 0 descriptor?? [ 462.380088][ T24] usb 2-1: USB disconnect, device number 51 [ 462.413857][ T24] em28xx 2-1:0.0: Disconnecting em28xx [ 462.458907][ T24] em28xx 2-1:0.0: Freeing device [ 462.533295][ T8448] rc_core: IR keymap rc-hauppauge not found [ 462.540278][ T8448] Registered IR keymap rc-empty [ 462.551215][ T8448] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 462.683055][ T8448] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 462.743583][ T8448] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 462.764243][ T8448] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input39 [ 462.835970][ T8448] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 462.873032][ T8448] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 463.000512][ T9] metro_usb 3-1:0.53: Metrologic USB to Serial converter detected [ 463.033013][ T8448] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 463.101746][T10785] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1293'. [ 463.119885][T10785] hfsplus: unable to find HFS+ superblock [ 463.273286][ T8446] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 463.583371][ T8448] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 463.591494][ T9] usb 3-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 463.703036][ T8448] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 463.710411][ T9] usb 3-1: USB disconnect, device number 46 [ 463.767475][ T9] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 463.783800][ T8446] usb 4-1: unable to get BOS descriptor or descriptor too short [ 463.791640][ T8448] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 463.824651][ T8446] usb 4-1: config 1 has an invalid interface number: 83 but max is 0 [ 463.832776][ T8446] usb 4-1: config 1 has no interface number 0 [ 463.843531][ T9] metro_usb 3-1:0.53: device disconnected [ 463.864310][ T8448] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 463.880209][ T8446] usb 4-1: config 1 interface 83 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 463.912129][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 463.913853][ T8448] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 463.932235][ T8446] usb 4-1: config 1 interface 83 has no altsetting 0 [ 463.934794][T10787] netlink: 'syz.1.1295': attribute type 10 has an invalid length. [ 463.971507][ T8446] usb 4-1: config 1 has an invalid interface number: 83 but max is 0 [ 463.988667][T10787] bond0: (slave wlan1): Opening slave failed [ 463.993087][ T8446] usb 4-1: config 1 has no interface number 0 [ 464.013406][ T8448] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 464.030801][ T8446] usb 4-1: config 1 interface 83 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 464.203105][ T24] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 464.222937][ T8448] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 464.336059][ T8446] usb 4-1: config 1 interface 83 has no altsetting 0 [ 464.363919][ T8448] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 464.376786][ T8448] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 464.388748][ T8446] usb 4-1: config 1 has an invalid interface number: 83 but max is 0 [ 464.415668][ T8448] usb 1-1: USB disconnect, device number 72 [ 464.422129][ T8446] usb 4-1: config 1 has no interface number 0 [ 464.441998][ T8446] usb 4-1: config 1 interface 83 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 464.480522][ T8446] usb 4-1: config 1 interface 83 has no altsetting 0 [ 464.520852][ T8446] usb 4-1: config 1 has an invalid interface number: 83 but max is 0 [ 464.543949][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.545723][ T8446] usb 4-1: config 1 has no interface number 0 [ 464.593654][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 464.632667][ T8446] usb 4-1: config 1 interface 83 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 464.668154][ T8446] usb 4-1: config 1 interface 83 has no altsetting 0 [ 464.677360][ T24] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 464.684103][ T8446] usb 4-1: config 1 has an invalid interface number: 83 but max is 0 [ 464.708149][ T8446] usb 4-1: config 1 has no interface number 0 [ 464.723013][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.723052][ T8446] usb 4-1: config 1 interface 83 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 464.762301][ T8446] usb 4-1: config 1 interface 83 has no altsetting 0 [ 464.763111][ T24] usb 5-1: config 0 descriptor?? [ 464.775371][ T8446] usb 4-1: string descriptor 0 read error: -22 [ 464.791948][ T8446] usb 4-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=a2.c5 [ 464.812078][ T8446] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.848295][ T8446] usb 4-1: probing VID:PID(2201:012C) [ 464.861552][ T8446] usb 4-1: vub300 testing UNKNOWN EndPoint(0) 08 [ 464.873306][ T8448] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 464.892486][ T8446] usb 4-1: vub300 ignoring EndPoint(0) 08 [ 464.908833][ T8446] usb 4-1: Could not find two sets of bulk-in/out endpoint pairs [ 464.945659][ T8446] vub300 4-1:1.83: probe with driver vub300 failed with error -22 [ 464.948724][ T5881] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 465.033362][ T8448] usb 1-1: Using ep0 maxpacket: 16 [ 465.064476][ T8448] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 465.082909][ T8448] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.293989][ T5881] usb 2-1: Using ep0 maxpacket: 8 [ 465.310552][ T5881] usb 2-1: config index 0 descriptor too short (expected 178, got 18) [ 465.394407][ T8448] usb 1-1: config 0 descriptor?? [ 465.401231][ T5881] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 465.413417][ T24] pyra 0003:1E7D:2CF6.0018: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 465.425724][ T8448] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 465.435633][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.464130][ T5923] usb 4-1: USB disconnect, device number 66 [ 465.480051][ T5881] usb 2-1: Product: syz [ 465.487044][ T5881] usb 2-1: Manufacturer: syz [ 465.491688][ T5881] usb 2-1: SerialNumber: syz [ 465.501299][ T8448] usb 1-1: Detected FT232A [ 465.501987][ T5881] usb 2-1: config 0 descriptor?? [ 465.558770][ T8448] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 465.633840][ T24] pyra 0003:1E7D:2CF6.0018: couldn't init struct pyra_device [ 465.641279][ T24] pyra 0003:1E7D:2CF6.0018: couldn't install mouse [ 465.656250][ T8448] usb 1-1: USB disconnect, device number 73 [ 465.696349][ T8448] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 465.707935][ T24] pyra 0003:1E7D:2CF6.0018: probe with driver pyra failed with error -32 [ 465.737935][ T8448] ftdi_sio 1-1:0.0: device disconnected [ 465.780714][ T5881] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 465.790597][ T5881] dvb_usb_af9015 2-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 465.810872][ T5881] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 465.830549][ T5881] dvb_usb_af9035 2-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 465.862790][ T5881] usb 2-1: USB disconnect, device number 52 [ 465.963999][T10806] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 465.970559][T10806] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 466.033511][T10811] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1300'. [ 466.045140][T10806] vhci_hcd vhci_hcd.0: Device attached [ 466.293117][ T8448] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 466.452956][ T5881] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 466.464022][ T9] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 466.628240][ T5881] usb 4-1: config 192 has an invalid interface number: 162 but max is 0 [ 466.637749][ T5881] usb 4-1: config 192 has no interface number 0 [ 466.645657][ T5881] usb 4-1: config 192 interface 162 altsetting 5 bulk endpoint 0x5 has invalid maxpacket 32 [ 466.656991][ T5881] usb 4-1: config 192 interface 162 has no altsetting 0 [ 466.657368][ T9] usb 3-1: config 0 has no interfaces? [ 466.670131][ T5881] usb 4-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=56.c3 [ 466.680555][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.682979][ T9] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 466.690368][ T5881] usb 4-1: Product: à § [ 466.705306][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.705824][ T5881] usb 4-1: SerialNumber: Ђ [ 466.722318][T10816] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 466.723788][ T9] usb 3-1: config 0 descriptor?? [ 466.854455][ T8446] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 467.012947][ T8446] usb 2-1: Using ep0 maxpacket: 16 [ 467.220994][ T5923] usb 5-1: USB disconnect, device number 44 [ 467.723650][ T8446] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 467.735598][ T8446] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 467.749138][ T8446] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 467.758495][ T8446] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.766679][ T8446] usb 2-1: Product: syz [ 467.770918][ T8446] usb 2-1: Manufacturer: syz [ 467.775678][ T8446] usb 2-1: SerialNumber: syz [ 467.785385][ T8446] usb 2-1: config 0 descriptor?? [ 467.793819][ T8446] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 467.803306][ T8446] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 468.084568][ T5881] usb-storage 4-1:192.162: USB Mass Storage device detected [ 468.554701][ T5881] usb-storage 4-1:192.162: device ignored [ 468.661423][ T8446] em28xx 2-1:0.0: chip ID is em2874 [ 468.766938][T10835] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1307'. [ 468.774455][ T5881] usb 4-1: USB disconnect, device number 67 [ 469.667503][ T2134] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 469.793345][ T8446] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 470.000834][ T8446] usb 5-1: Using ep0 maxpacket: 16 [ 470.092568][ T8446] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 470.111741][ T5818] usb 2-1: USB disconnect, device number 53 [ 470.141080][ T5818] em28xx 2-1:0.0: Disconnecting em28xx [ 470.189204][ T8446] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 470.215060][ T5818] em28xx 2-1:0.0: Freeing device [ 470.246114][ T8446] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 470.278371][ T8446] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 470.290229][ T5881] usb 3-1: USB disconnect, device number 47 [ 470.322016][ T8446] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 470.355982][T10807] vhci_hcd: connection reset by peer [ 470.361495][ T36] vhci_hcd: stop threads [ 470.364247][ T8446] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 470.382205][ T36] vhci_hcd: release socket [ 470.382565][ T8446] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 470.399606][ T8446] usb 5-1: Manufacturer: syz [ 470.443074][ T9] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 470.493884][ T36] vhci_hcd: disconnect device [ 470.561458][ T8446] usb 5-1: config 0 descriptor?? [ 470.623326][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 470.675074][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 470.789140][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 470.927218][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 471.018511][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 471.031251][T10866] input: syz0 as /devices/virtual/input/input40 [ 471.119614][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 471.195990][ T30] audit: type=1400 audit(1751053067.488:714): avc: denied { read } for pid=10872 comm="syz.1.1314" path="socket:[28735]" dev="sockfs" ino=28735 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 471.236946][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 471.296721][ T9] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 471.308381][ T9] usb 4-1: Manufacturer: syz [ 471.324867][ T9] usb 4-1: config 0 descriptor?? [ 471.332324][T10876] option changes via remount are deprecated (pid=10875 comm=syz.2.1315) [ 471.430982][ T8448] vhci_hcd: vhci_device speed not set [ 471.453014][ T8446] rc_core: IR keymap rc-hauppauge not found [ 471.459028][ T8446] Registered IR keymap rc-empty [ 471.485742][ T8446] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 471.523430][ T8446] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 471.563987][ T8446] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 471.605994][ T5818] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 471.710518][ T8446] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input41 [ 471.754318][T10890] vlan1: entered promiscuous mode [ 471.760533][T10890] vlan1: entered allmulticast mode [ 471.765855][T10890] veth0_vlan: entered allmulticast mode [ 471.771527][T10890] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 471.889159][ T5818] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.058936][ T5818] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.171042][ T5818] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 472.182682][ T8446] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 472.279372][ T5818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.290105][ T8446] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 472.388787][ T8446] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 472.494552][ T5818] usb 1-1: config 0 descriptor?? [ 472.554190][ T8446] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 472.669510][ T8446] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 472.724419][ T8446] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 472.783339][ T9] rc_core: IR keymap rc-hauppauge not found [ 472.789377][ T9] Registered IR keymap rc-empty [ 472.796083][ T8446] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 472.813778][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 472.838103][ T8446] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 472.845826][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 472.883368][ T8446] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 472.893769][ T9] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1 [ 472.913066][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1/input42 [ 472.925790][ T8446] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 472.954673][ T8446] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 472.964044][ T8446] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 472.973279][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 472.991117][ T8446] usb 5-1: USB disconnect, device number 45 [ 473.025186][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 473.045176][T10902] 9pnet_fd: Insufficient options for proto=fd [ 473.051332][ T30] audit: type=1400 audit(1751053069.338:715): avc: denied { map } for pid=10901 comm="syz.2.1320" path="pipe:[28778]" dev="pipefs" ino=28778 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 473.076359][ T5818] pyra 0003:1E7D:2CF6.0019: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 473.089775][ T30] audit: type=1400 audit(1751053069.338:716): avc: denied { mounton } for pid=10901 comm="syz.2.1320" path="/283/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 473.112341][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 473.133515][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 473.183025][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 473.216511][T10908] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=10908 comm=syz.1.1321 [ 473.230333][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 473.333118][ T5818] pyra 0003:1E7D:2CF6.0019: couldn't init struct pyra_device [ 473.356528][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 473.384144][ T5818] pyra 0003:1E7D:2CF6.0019: couldn't install mouse [ 473.393432][ T5818] pyra 0003:1E7D:2CF6.0019: probe with driver pyra failed with error -32 [ 473.403027][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 473.423316][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 473.484315][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 473.579806][ T9] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 473.590620][ T9] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 473.612503][ T9] usb 4-1: USB disconnect, device number 68 [ 473.952094][T10924] input: syz0 as /devices/virtual/input/input43 [ 473.972962][ T24] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 474.865575][ T5818] usb 1-1: USB disconnect, device number 74 [ 475.008502][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 475.043387][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 475.055134][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 475.075649][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 475.093250][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.124999][ T24] usb 5-1: Product: syz [ 475.129285][ T24] usb 5-1: Manufacturer: syz [ 475.231360][ T24] usb 5-1: SerialNumber: syz [ 475.262928][ T9] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 475.380671][ T24] usb 5-1: config 0 descriptor?? [ 475.422154][ T24] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 475.434778][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 475.475544][ T24] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 475.773045][ T5923] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 476.021542][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.044490][ T9] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 476.053716][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.073329][ T9] usb 4-1: config 0 descriptor?? [ 476.118438][ T5923] usb 1-1: config 192 has an invalid interface number: 162 but max is 0 [ 476.134346][ T5923] usb 1-1: config 192 has no interface number 0 [ 476.149635][ T5923] usb 1-1: config 192 interface 162 altsetting 5 bulk endpoint 0x5 has invalid maxpacket 32 [ 476.167822][ T5923] usb 1-1: config 192 interface 162 has no altsetting 0 [ 476.188109][ T5923] usb 1-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=56.c3 [ 476.197993][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.216407][ T5923] usb 1-1: Product: à § [ 476.221629][ T5923] usb 1-1: SerialNumber: Ђ [ 476.259880][ T24] em28xx 5-1:0.0: chip ID is em2874 [ 476.277462][T10938] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 476.478026][T10948] Cannot find add_set index 0 as target [ 476.646586][ T9] keytouch 0003:0926:3333.001A: fixing up Keytouch IEC report descriptor [ 476.768725][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.001A/input/input44 [ 477.252741][ T5923] usb-storage 1-1:192.162: USB Mass Storage device detected [ 477.681502][ T9] keytouch 0003:0926:3333.001A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 478.629543][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 478.661663][T10956] FAULT_INJECTION: forcing a failure. [ 478.661663][T10956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 478.675749][ T24] usb 5-1: USB disconnect, device number 46 [ 478.684904][ T24] em28xx 5-1:0.0: Disconnecting em28xx [ 478.704844][ T5923] usb-storage 1-1:192.162: device ignored [ 478.714294][ T24] em28xx 5-1:0.0: Freeing device [ 478.768281][T10956] CPU: 1 UID: 0 PID: 10956 Comm: syz.2.1333 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(full) [ 478.768300][T10956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 478.768308][T10956] Call Trace: [ 478.768314][T10956] [ 478.768320][T10956] dump_stack_lvl+0x16c/0x1f0 [ 478.768350][T10956] should_fail_ex+0x512/0x640 [ 478.768376][T10956] _copy_from_user+0x2e/0xd0 [ 478.768397][T10956] iommufd_fops_ioctl+0x2e7/0x4e0 [ 478.768413][T10956] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 478.768429][T10956] ? hook_file_ioctl_common+0x145/0x410 [ 478.768451][T10956] ? selinux_file_ioctl+0x180/0x270 [ 478.768473][T10956] ? selinux_file_ioctl+0xb4/0x270 [ 478.768495][T10956] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 478.768517][T10956] __x64_sys_ioctl+0x18b/0x210 [ 478.768537][T10956] do_syscall_64+0xcd/0x4c0 [ 478.768554][T10956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.768566][T10956] RIP: 0033:0x7f92fc78e929 [ 478.768574][T10956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 478.768585][T10956] RSP: 002b:00007f92fd5ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 478.768601][T10956] RAX: ffffffffffffffda RBX: 00007f92fc9b5fa0 RCX: 00007f92fc78e929 [ 478.768612][T10956] RDX: 0000200000000100 RSI: 0000000000003b87 RDI: 0000000000000003 [ 478.768628][T10956] RBP: 00007f92fd5ef090 R08: 0000000000000000 R09: 0000000000000000 [ 478.768639][T10956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 478.768649][T10956] R13: 0000000000000000 R14: 00007f92fc9b5fa0 R15: 00007ffc8625dde8 [ 478.768671][T10956] [ 478.995439][ T5923] usb 1-1: USB disconnect, device number 75 [ 479.582957][ T5923] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 479.729766][ T9] usb 4-1: USB disconnect, device number 69 [ 479.783092][ T5923] usb 3-1: Using ep0 maxpacket: 8 [ 479.840527][ T5923] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 480.003439][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.084332][ T5818] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 480.154482][ T5923] usb 3-1: config 0 descriptor?? [ 480.316243][ T5818] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.341573][ T5818] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.361209][ T5818] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 480.371089][ T5818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.390746][ T5818] usb 2-1: config 0 descriptor?? [ 480.398181][T10990] @: renamed from vlan0 (while UP) [ 481.266391][ T9] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 481.301643][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 481.472994][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 481.480930][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 481.496149][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 481.539221][ T5818] pyra 0003:1E7D:2CF6.001B: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 481.554429][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 481.564082][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.572196][ T9] usb 4-1: Product: syz [ 481.577392][ T9] usb 4-1: Manufacturer: syz [ 481.582055][ T9] usb 4-1: SerialNumber: syz [ 481.673023][ T8446] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 481.708188][ T9] usb 4-1: config 0 descriptor?? [ 481.759357][ T5818] pyra 0003:1E7D:2CF6.001B: couldn't init struct pyra_device [ 481.863006][ T5818] pyra 0003:1E7D:2CF6.001B: couldn't install mouse [ 481.908417][ T9] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 481.923756][ T8446] usb 1-1: Using ep0 maxpacket: 32 [ 482.036385][ T9] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 482.046731][ T5818] pyra 0003:1E7D:2CF6.001B: probe with driver pyra failed with error -5 [ 482.056856][ T8446] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 482.069499][ T8446] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.079455][ T8446] usb 1-1: Product: syz [ 482.084119][ T8446] usb 1-1: Manufacturer: syz [ 482.088944][ T8446] usb 1-1: SerialNumber: syz [ 482.095848][ T8446] usb 1-1: config 0 descriptor?? [ 482.104235][ T8446] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 482.457742][ T9] em28xx 4-1:0.0: chip ID is em2874 [ 482.916491][ T5923] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x8001: -71 [ 482.944735][ T5923] asix 3-1:0.0: probe with driver asix failed with error -71 [ 482.967053][ T5923] usb 3-1: USB disconnect, device number 48 [ 483.419030][ T5923] usb 2-1: USB disconnect, device number 54 [ 484.679863][ T3483] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 484.799687][T11021] xt_hashlimit: size too large, truncated to 1048576 [ 484.809054][ T5923] usb 4-1: USB disconnect, device number 70 [ 484.844383][ T5923] em28xx 4-1:0.0: Disconnecting em28xx [ 484.857184][ T8446] gspca_stk1135: reg_w 0x203 err -71 [ 484.872645][ T8446] gspca_stk1135: serial bus timeout: status=0x00 [ 484.874143][ T5923] em28xx 4-1:0.0: Freeing device [ 484.907708][ T8446] gspca_stk1135: Sensor write failed [ 484.929016][ T8446] gspca_stk1135: serial bus timeout: status=0x00 [ 484.945898][ T8446] gspca_stk1135: Sensor write failed [ 484.966115][ T8446] gspca_stk1135: serial bus timeout: status=0x00 [ 484.987275][ T8446] gspca_stk1135: Sensor read failed [ 484.992588][ T8446] gspca_stk1135: serial bus timeout: status=0x00 [ 485.002598][ T8446] gspca_stk1135: Sensor read failed [ 485.008132][ T8446] gspca_stk1135: Detected sensor type unknown (0x0) [ 485.017077][ T8446] gspca_stk1135: serial bus timeout: status=0x00 [ 485.022994][ T5924] usb 2-1: new low-speed USB device number 55 using dummy_hcd [ 485.023517][ T8446] gspca_stk1135: Sensor read failed [ 485.056011][ T8446] gspca_stk1135: serial bus timeout: status=0x00 [ 485.070261][ T8446] gspca_stk1135: Sensor read failed [ 485.082976][ T8446] gspca_stk1135: serial bus timeout: status=0x00 [ 485.093856][ T8446] gspca_stk1135: Sensor write failed [ 485.108956][ T8446] gspca_stk1135: serial bus timeout: status=0x00 [ 485.121448][ T8446] gspca_stk1135: Sensor write failed [ 485.127239][ T8446] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 485.140254][ T8446] usb 1-1: USB disconnect, device number 76 [ 485.215801][ T5924] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 485.233115][ T5924] usb 2-1: config 0 has no interface number 0 [ 485.242821][ T5924] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 485.258018][ T5924] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 485.271152][ T5924] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 485.373009][ T9] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 485.399970][ T5924] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 485.420297][ T5924] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 485.434071][ T5924] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 485.449298][ T5924] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 485.459884][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.471917][ T5924] usb 2-1: config 0 descriptor?? [ 485.494880][T11019] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 485.503134][T11019] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 485.523249][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 485.543585][ T9] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 485.564618][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.586336][ T9] usb 4-1: config 0 descriptor?? [ 485.625141][ T5924] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 485.627700][ T9] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 485.639548][ T5818] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 486.231142][ T8448] usb 2-1: USB disconnect, device number 55 [ 486.248671][ T8448] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 486.288157][ T5818] usb 3-1: config 192 has an invalid interface number: 162 but max is 0 [ 486.313771][ T5818] usb 3-1: config 192 has no interface number 0 [ 486.323390][ T5818] usb 3-1: config 192 interface 162 altsetting 5 bulk endpoint 0x5 has invalid maxpacket 32 [ 486.339980][ T5818] usb 3-1: config 192 interface 162 has no altsetting 0 [ 486.365112][ T8446] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 486.377832][T11053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.391219][ T5818] usb 3-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=56.c3 [ 486.403927][ T5818] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.412458][T11053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.425732][ T5818] usb 3-1: Product: à § [ 486.429917][ T5818] usb 3-1: SerialNumber: Ђ [ 486.450568][T11042] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 486.527524][ T8446] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.549039][ T8446] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 486.559708][ T8446] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 486.597392][ T8446] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.773910][ T24] usb 4-1: USB disconnect, device number 71 [ 486.809634][ T8446] usb 1-1: config 0 descriptor?? [ 486.954380][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 487.052787][ T5818] usb-storage 3-1:192.162: USB Mass Storage device detected [ 487.063439][ T5818] usb-storage 3-1:192.162: device ignored [ 487.107422][ T5818] usb 3-1: USB disconnect, device number 49 [ 487.274570][ T5924] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 487.355571][ T8446] pyra 0003:1E7D:2CF6.001C: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 487.385252][T11078] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1370'. [ 487.442900][ T5924] usb 5-1: Using ep0 maxpacket: 16 [ 487.449542][ T5924] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 487.461900][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 487.529276][ T9] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 487.547826][ T8446] pyra 0003:1E7D:2CF6.001C: couldn't init struct pyra_device [ 487.559166][ T8446] pyra 0003:1E7D:2CF6.001C: couldn't install mouse [ 487.628381][ T5924] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 487.638322][ T8446] pyra 0003:1E7D:2CF6.001C: probe with driver pyra failed with error -5 [ 487.638371][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.689670][ T5924] usb 5-1: Product: syz [ 487.704774][ T5924] usb 5-1: Manufacturer: syz [ 487.709421][ T5924] usb 5-1: SerialNumber: syz [ 487.730501][ T5924] usb 5-1: config 0 descriptor?? [ 487.738766][ T5924] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 487.751594][ T5924] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 487.753425][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 487.766850][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 487.778770][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 487.788949][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 487.798587][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.813441][ T9] usb 2-1: config 0 descriptor?? [ 487.823864][ T9] hub 2-1:0.0: USB hub found [ 487.924922][ T8446] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 487.972959][ T8448] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 488.022705][ T9] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 488.084852][ T8446] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 488.096092][ T8446] usb 4-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 488.105601][ T8446] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.118708][ T8446] usb 4-1: config 0 descriptor?? [ 488.124584][T11082] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 488.133029][ T8448] usb 3-1: Using ep0 maxpacket: 8 [ 488.139839][ T8448] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 488.151393][ T8448] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.161771][ T8448] usb 3-1: config 0 descriptor?? [ 488.223752][T11075] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1369'. [ 488.232799][T11075] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1369'. [ 488.243076][T11075] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1369'. [ 488.278440][T11075] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1369'. [ 488.287675][T11075] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1369'. [ 488.296729][T11075] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1369'. [ 488.355546][ T5924] em28xx 5-1:0.0: chip ID is em2874 [ 488.393770][T11075] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1369'. [ 488.406431][T11075] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1369'. [ 488.415888][T11075] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1369'. [ 488.490362][ T9] hid-generic 0003:046D:C31C.001D: item fetching failed at offset 0/1 [ 488.499077][ T9] hid-generic 0003:046D:C31C.001D: probe with driver hid-generic failed with error -22 [ 488.574893][ T5924] usb 5-1: USB disconnect, device number 47 [ 488.581592][ T5924] em28xx 5-1:0.0: Disconnecting em28xx [ 488.594492][ T5924] em28xx 5-1:0.0: Freeing device [ 488.595236][ T30] audit: type=1400 audit(1751053084.888:717): avc: denied { ioctl } for pid=11081 comm="syz.3.1372" path="socket:[29222]" dev="sockfs" ino=29222 ioctlcmd=0x8902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 488.624099][ C0] vkms_vblank_simulate: vblank timer overrun [ 488.777526][ T8443] usb 1-1: USB disconnect, device number 77 [ 488.794444][ T9] usb 2-1: USB disconnect, device number 56 [ 488.826412][T11091] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 488.842628][ T8446] usbhid 4-1:0.0: can't add hid device: -71 [ 488.851574][ T8446] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 488.873643][ T8446] usb 4-1: USB disconnect, device number 72 [ 489.009004][ T30] audit: type=1400 audit(1751053085.298:718): avc: denied { setopt } for pid=11083 comm="syz.2.1373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 490.344095][ T6069] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 490.353081][ T8448] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 490.386273][ T8448] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 490.727219][ T8448] asix 3-1:0.0: probe with driver asix failed with error -71 [ 490.745056][ T8448] usb 3-1: USB disconnect, device number 50 [ 492.122975][ T5923] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 492.303037][ T5923] usb 3-1: Using ep0 maxpacket: 16 [ 492.309994][ T5923] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 492.366845][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 492.385076][ T5923] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 492.398295][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.409690][ T5923] usb 3-1: Product: syz [ 492.416665][ T5923] usb 3-1: Manufacturer: syz [ 492.421276][ T5923] usb 3-1: SerialNumber: syz [ 492.436534][ T5923] usb 3-1: config 0 descriptor?? [ 492.449943][ T5923] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 492.464556][ T5923] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 492.493193][ T5924] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 492.673177][ T5924] usb 5-1: Using ep0 maxpacket: 32 [ 492.706608][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 492.833457][ T5924] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 492.848659][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 492.860589][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 492.875422][ T5924] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 492.885048][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.901425][ T5924] usb 5-1: config 0 descriptor?? [ 492.912386][T11131] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 492.941810][ T5924] hub 5-1:0.0: USB hub found [ 493.058853][ T5881] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 493.206619][T11147] __nla_validate_parse: 1 callbacks suppressed [ 493.206672][T11147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1390'. [ 493.250739][ T5881] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 493.260235][ T5881] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 493.491313][ T5923] em28xx 3-1:0.0: chip ID is em2874 [ 493.498971][ T5881] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 493.518051][ T5881] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 493.526480][ T5924] hub 5-1:0.0: 2 ports detected [ 493.531799][ T5881] usb 4-1: Manufacturer: syz [ 493.542038][ T5881] usb 4-1: config 0 descriptor?? [ 493.613308][ T5881] rc_core: IR keymap rc-hauppauge not found [ 493.619295][ T5881] Registered IR keymap rc-empty [ 493.625711][ T5881] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 493.637144][ T5881] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input45 [ 493.718867][ T5881] usb 3-1: USB disconnect, device number 51 [ 493.730717][ T5881] em28xx 3-1:0.0: Disconnecting em28xx [ 493.740311][ T5881] em28xx 3-1:0.0: Freeing device [ 494.510860][ T5924] usb 5-1: USB disconnect, device number 48 [ 494.969841][ T30] audit: type=1400 audit(1751053091.258:719): avc: denied { read write } for pid=11133 comm="syz.3.1387" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 494.993487][ C1] vkms_vblank_simulate: vblank timer overrun [ 495.030885][ T30] audit: type=1400 audit(1751053091.258:720): avc: denied { open } for pid=11133 comm="syz.3.1387" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 495.054509][ C1] vkms_vblank_simulate: vblank timer overrun [ 495.906280][ T3483] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 496.405903][ T5881] usb 4-1: USB disconnect, device number 73 [ 496.466028][T11196] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1401'. [ 496.482986][T11196] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1401'. [ 496.606256][ T9] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 496.639958][T11203] 9pnet_fd: Insufficient options for proto=fd [ 496.763221][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 496.775002][ T9] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 496.791387][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.818219][ T9] usb 5-1: config 0 descriptor?? [ 496.833495][ T5881] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 497.083267][ T5881] usb 4-1: Using ep0 maxpacket: 16 [ 497.132750][ T5881] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 497.154353][ T5881] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 497.169585][ T5881] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 497.182538][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.190805][ T5881] usb 4-1: Product: syz [ 497.195377][ T5881] usb 4-1: Manufacturer: syz [ 497.199980][ T5881] usb 4-1: SerialNumber: syz [ 497.208790][ T5881] usb 4-1: config 0 descriptor?? [ 497.217375][ T5881] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 497.226738][ T5881] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 497.572276][ T30] audit: type=1400 audit(1751053093.858:721): avc: denied { accept } for pid=11217 comm="syz.2.1407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 497.614328][ T5924] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 497.902934][ T5924] usb 2-1: Using ep0 maxpacket: 16 [ 497.909383][ T5881] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 497.923560][ T5881] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 497.937785][ T5924] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 497.962873][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 497.977995][T11224] /dev/nullb0: Can't open blockdev [ 497.986432][ T5924] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 497.995943][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.004994][ T5924] usb 2-1: Product: syz [ 498.011479][ T5924] usb 2-1: Manufacturer: syz [ 498.032539][ T5924] usb 2-1: SerialNumber: syz [ 498.039899][ T5924] usb 2-1: config 0 descriptor?? [ 498.050756][ T5924] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 498.060070][ T5924] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 498.429742][ T5881] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 498.499325][ T5881] em28xx 4-1:0.0: No AC97 audio processor [ 498.530543][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 498.581247][ T5881] usb 4-1: USB disconnect, device number 74 [ 498.713126][ T5881] em28xx 4-1:0.0: Disconnecting em28xx [ 498.720912][ T5881] em28xx 4-1:0.0: Freeing device [ 498.881479][ T5924] em28xx 2-1:0.0: chip ID is em2874 [ 498.922492][T11238] loop6: detected capacity change from 0 to 524288000 [ 498.997207][T11241] FAULT_INJECTION: forcing a failure. [ 498.997207][T11241] name failslab, interval 1, probability 0, space 0, times 0 [ 499.010020][T11241] CPU: 0 UID: 0 PID: 11241 Comm: syz.2.1412 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(full) [ 499.010044][T11241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 499.010055][T11241] Call Trace: [ 499.010061][T11241] [ 499.010068][T11241] dump_stack_lvl+0x16c/0x1f0 [ 499.010098][T11241] should_fail_ex+0x512/0x640 [ 499.010122][T11241] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 499.010148][T11241] should_failslab+0xc2/0x120 [ 499.010173][T11241] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 499.010196][T11241] ? getname_kernel+0x52/0x370 [ 499.010227][T11241] getname_kernel+0x52/0x370 [ 499.010255][T11241] kern_path+0x1d/0x50 [ 499.010277][T11241] tomoyo_mount_acl+0x624/0x850 [ 499.010300][T11241] ? rcu_is_watching+0x12/0xc0 [ 499.010321][T11241] ? finish_task_switch.isra.0+0x221/0xc10 [ 499.010345][T11241] ? finish_task_switch.isra.0+0x221/0xc10 [ 499.010368][T11241] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 499.010389][T11241] ? trace_sched_exit_tp+0xde/0x130 [ 499.010413][T11241] ? __schedule+0x1181/0x5de0 [ 499.010460][T11241] ? tomoyo_domain+0xbb/0x150 [ 499.010475][T11241] ? tomoyo_profile+0x47/0x60 [ 499.010509][T11241] tomoyo_mount_permission+0x16d/0x420 [ 499.010531][T11241] ? tomoyo_mount_permission+0x14f/0x420 [ 499.010555][T11241] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 499.010586][T11241] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 499.010612][T11241] security_sb_mount+0x9b/0x260 [ 499.010634][T11241] path_mount+0x128/0x2020 [ 499.010662][T11241] ? kmem_cache_free+0x2d1/0x4d0 [ 499.010686][T11241] ? __pfx_path_mount+0x10/0x10 [ 499.010715][T11241] ? putname+0x154/0x1a0 [ 499.010744][T11241] __x64_sys_mount+0x28d/0x310 [ 499.010770][T11241] ? __pfx___x64_sys_mount+0x10/0x10 [ 499.010804][T11241] do_syscall_64+0xcd/0x4c0 [ 499.010832][T11241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.010849][T11241] RIP: 0033:0x7f92fc78e929 [ 499.010864][T11241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 499.010880][T11241] RSP: 002b:00007f92fd5ad038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 499.010897][T11241] RAX: ffffffffffffffda RBX: 00007f92fc9b6160 RCX: 00007f92fc78e929 [ 499.010908][T11241] RDX: 0000200000000300 RSI: 0000200000000340 RDI: 0000200000000480 [ 499.010919][T11241] RBP: 00007f92fd5ad090 R08: 0000000000000000 R09: 0000000000000000 [ 499.010929][T11241] R10: 000000000000d29d R11: 0000000000000246 R12: 0000000000000002 [ 499.010939][T11241] R13: 0000000000000000 R14: 00007f92fc9b6160 R15: 00007ffc8625dde8 [ 499.010962][T11241] [ 499.895961][ T8448] usb 2-1: USB disconnect, device number 57 [ 499.907595][ T8448] em28xx 2-1:0.0: Disconnecting em28xx [ 499.935532][ T9] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x8001: -71 [ 499.959135][ T8448] em28xx 2-1:0.0: Freeing device [ 500.065560][ T9] asix 5-1:0.0: probe with driver asix failed with error -71 [ 500.085898][ T9] usb 5-1: USB disconnect, device number 49 [ 501.030779][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.103073][ T5881] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 501.275102][ T5881] usb 1-1: Using ep0 maxpacket: 32 [ 501.349040][ T5881] usb 1-1: config 0 has an invalid interface number: 247 but max is 0 [ 501.360236][ T5881] usb 1-1: config 0 has no interface number 0 [ 501.368356][ T5881] usb 1-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice= 1.9b [ 501.382661][ T5881] usb 1-1: New USB device strings: Mfr=128, Product=0, SerialNumber=0 [ 501.393629][ T5881] usb 1-1: Manufacturer: syz [ 501.459812][T11275] overlayfs: failed to resolve './file0': -2 [ 501.682346][ T3483] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 501.869829][ T5924] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 501.883361][ T5881] usb 1-1: config 0 descriptor?? [ 501.894829][T11276] batadv_slave_1: entered promiscuous mode [ 502.026489][ T5924] usb 5-1: config 192 has an invalid interface number: 162 but max is 0 [ 502.035123][ T5924] usb 5-1: config 192 has no interface number 0 [ 502.041408][ T5924] usb 5-1: config 192 interface 162 altsetting 5 bulk endpoint 0x5 has invalid maxpacket 32 [ 502.046947][T11266] batadv_slave_1: left promiscuous mode [ 502.051967][ T5924] usb 5-1: config 192 interface 162 has no altsetting 0 [ 502.069928][ T5924] usb 5-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=56.c3 [ 502.079216][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.095063][T11258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.103674][T11258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.116456][ T5924] usb 5-1: Product: à § [ 502.116575][ T8448] usb 1-1: USB disconnect, device number 78 [ 502.120622][ T5924] usb 5-1: SerialNumber: Ђ [ 502.133155][T11263] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 502.192953][ T5881] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 502.462955][ T5881] usb 2-1: Using ep0 maxpacket: 8 [ 502.478929][ T5881] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 502.488532][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.562463][T11290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1428'. [ 502.904039][ T5881] usb 2-1: config 0 descriptor?? [ 503.107557][ T5924] usb-storage 5-1:192.162: USB Mass Storage device detected [ 503.285804][ T5924] usb-storage 5-1:192.162: device ignored [ 503.501716][ T5924] usb 5-1: USB disconnect, device number 50 [ 503.663431][ T6069] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 503.762921][ T9] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 503.976287][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 503.989381][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 504.734378][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 505.260935][T11319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1436'. [ 505.269870][T11319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1436'. [ 505.278782][T11319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1436'. [ 505.287672][T11319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1436'. [ 505.296568][T11319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1436'. [ 505.305420][T11319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1436'. [ 505.314289][T11319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1436'. [ 505.323146][T11319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1436'. [ 505.331981][T11319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1436'. [ 505.397385][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 505.410310][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.421009][ T9] usb 1-1: Product: syz [ 505.431119][ T9] usb 1-1: Manufacturer: syz [ 505.436543][ T9] usb 1-1: SerialNumber: syz [ 505.556783][ T9] usb 1-1: config 0 descriptor?? [ 505.573240][ T9] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 505.610770][ T9] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 505.865559][ T5881] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x8001: -71 [ 505.957975][ T5881] asix 2-1:0.0: probe with driver asix failed with error -71 [ 505.978657][ T5881] usb 2-1: USB disconnect, device number 58 [ 506.208491][T11336] random: crng reseeded on system resumption [ 506.216178][T11336] FAULT_INJECTION: forcing a failure. [ 506.216178][T11336] name failslab, interval 1, probability 0, space 0, times 0 [ 506.229465][T11336] CPU: 0 UID: 0 PID: 11336 Comm: syz.3.1438 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(full) [ 506.229491][T11336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 506.229501][T11336] Call Trace: [ 506.229507][T11336] [ 506.229515][T11336] dump_stack_lvl+0x16c/0x1f0 [ 506.229550][T11336] should_fail_ex+0x512/0x640 [ 506.229578][T11336] should_failslab+0xc2/0x120 [ 506.229603][T11336] __kmalloc_cache_noprof+0x6a/0x3e0 [ 506.229623][T11336] ? do_raw_spin_lock+0x12c/0x2b0 [ 506.229642][T11336] ? find_held_lock+0x2b/0x80 [ 506.229660][T11336] ? async_schedule_node_domain+0x54/0x120 [ 506.229687][T11336] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 506.229714][T11336] async_schedule_node_domain+0x54/0x120 [ 506.229739][T11336] dev_cache_fw_image+0x38e/0x490 [ 506.229762][T11336] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 506.229784][T11336] ? dev_cache_fw_image+0x398/0x490 [ 506.229802][T11336] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 506.229823][T11336] dpm_for_each_dev+0x5d/0xb0 [ 506.229842][T11336] fw_pm_notify+0x81/0x150 [ 506.229859][T11336] notifier_call_chain+0xb9/0x410 [ 506.229881][T11336] ? __pfx_fw_pm_notify+0x10/0x10 [ 506.229905][T11336] blocking_notifier_call_chain_robust+0xc8/0x160 [ 506.229931][T11336] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 506.229966][T11336] pm_notifier_call_chain_robust+0x27/0x60 [ 506.229993][T11336] snapshot_open+0x218/0x2b0 [ 506.230017][T11336] ? __pfx_snapshot_open+0x10/0x10 [ 506.230041][T11336] misc_open+0x35d/0x420 [ 506.230060][T11336] ? __pfx_misc_open+0x10/0x10 [ 506.230078][T11336] chrdev_open+0x234/0x6a0 [ 506.230102][T11336] ? file_set_fsnotify_mode_from_watchers+0x59/0x640 [ 506.230125][T11336] ? __pfx_chrdev_open+0x10/0x10 [ 506.230148][T11336] ? file_set_fsnotify_mode_from_watchers+0xec/0x640 [ 506.230173][T11336] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 506.230200][T11336] do_dentry_open+0x744/0x1c10 [ 506.230223][T11336] ? __pfx_chrdev_open+0x10/0x10 [ 506.230252][T11336] vfs_open+0x82/0x3f0 [ 506.230282][T11336] path_openat+0x1de4/0x2cb0 [ 506.230314][T11336] ? __pfx_path_openat+0x10/0x10 [ 506.230346][T11336] do_filp_open+0x20b/0x470 [ 506.230370][T11336] ? __pfx_do_filp_open+0x10/0x10 [ 506.230414][T11336] ? alloc_fd+0x471/0x7d0 [ 506.230445][T11336] do_sys_openat2+0x11b/0x1d0 [ 506.230461][T11336] ? __pfx_do_sys_openat2+0x10/0x10 [ 506.230481][T11336] ? __fget_files+0x20e/0x3c0 [ 506.230510][T11336] __x64_sys_openat+0x174/0x210 [ 506.230527][T11336] ? __pfx___x64_sys_openat+0x10/0x10 [ 506.230542][T11336] ? ksys_write+0x1ac/0x250 [ 506.230574][T11336] do_syscall_64+0xcd/0x4c0 [ 506.230602][T11336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.230619][T11336] RIP: 0033:0x7f590498e929 [ 506.230634][T11336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 506.230651][T11336] RSP: 002b:00007f590575d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 506.230668][T11336] RAX: ffffffffffffffda RBX: 00007f5904bb6160 RCX: 00007f590498e929 [ 506.230680][T11336] RDX: 0000000000000481 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 506.230697][T11336] RBP: 00007f590575d090 R08: 0000000000000000 R09: 0000000000000000 [ 506.230708][T11336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 506.230719][T11336] R13: 0000000000000000 R14: 00007f5904bb6160 R15: 00007ffd003fad38 [ 506.230745][T11336] [ 506.570264][ T9] em28xx 1-1:0.0: chip ID is em2874 [ 506.570718][T11336] [ 506.577802][T11336] ============================================ [ 506.583947][T11336] WARNING: possible recursive locking detected [ 506.590095][T11336] 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 Not tainted [ 506.597184][T11336] -------------------------------------------- [ 506.603314][T11336] syz.3.1438/11336 is trying to acquire lock: [ 506.609377][T11336] ffffffff8f5148a8 (fw_lock){+.+.}-{4:4}, at: assign_fw+0x4e/0x640 [ 506.617281][T11336] [ 506.617281][T11336] but task is already holding lock: [ 506.624623][T11336] ffffffff8f5148a8 (fw_lock){+.+.}-{4:4}, at: fw_pm_notify+0x69/0x150 [ 506.632784][T11336] [ 506.632784][T11336] other info that might help us debug this: [ 506.640821][T11336] Possible unsafe locking scenario: [ 506.640821][T11336] [ 506.648267][T11336] CPU0 [ 506.651529][T11336] ---- [ 506.654786][T11336] lock(fw_lock); [ 506.658490][T11336] lock(fw_lock); [ 506.662192][T11336] [ 506.662192][T11336] *** DEADLOCK *** [ 506.662192][T11336] [ 506.670314][T11336] May be due to missing lock nesting notation [ 506.670314][T11336] [ 506.678625][T11336] 5 locks held by syz.3.1438/11336: [ 506.683800][T11336] #0: ffffffff8f302768 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 506.692236][T11336] #1: ffffffff8e487e48 (system_transition_mutex){+.+.}-{4:4}, at: lock_system_sleep+0x87/0xa0 [ 506.702587][T11336] #2: ffffffff8e4c85f0 ((pm_chain_head).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain_robust+0xa8/0x160 [ 506.714427][T11336] #3: ffffffff8f5148a8 (fw_lock){+.+.}-{4:4}, at: fw_pm_notify+0x69/0x150 [ 506.723051][T11336] #4: ffffffff8f50f2a8 (dpm_list_mtx){+.+.}-{4:4}, at: dpm_for_each_dev+0x2d/0xb0 [ 506.732362][T11336] [ 506.732362][T11336] stack backtrace: [ 506.738513][T11336] CPU: 1 UID: 0 PID: 11336 Comm: syz.3.1438 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(full) [ 506.738532][T11336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 506.738542][T11336] Call Trace: [ 506.738548][T11336] [ 506.738555][T11336] dump_stack_lvl+0x116/0x1f0 [ 506.738578][T11336] print_deadlock_bug+0x1e9/0x240 [ 506.738600][T11336] __lock_acquire+0x1106/0x1c90 [ 506.738622][T11336] ? __kasan_slab_free+0x51/0x70 [ 506.738643][T11336] lock_acquire+0x179/0x350 [ 506.738662][T11336] ? assign_fw+0x4e/0x640 [ 506.738678][T11336] ? __pfx___might_resched+0x10/0x10 [ 506.738702][T11336] ? do_sys_openat2+0x11b/0x1d0 [ 506.738714][T11336] ? __x64_sys_openat+0x174/0x210 [ 506.738727][T11336] ? do_syscall_64+0xcd/0x4c0 [ 506.738748][T11336] __mutex_lock+0x199/0xb90 [ 506.738768][T11336] ? assign_fw+0x4e/0x640 [ 506.738783][T11336] ? assign_fw+0x4e/0x640 [ 506.738797][T11336] ? __pfx___mutex_lock+0x10/0x10 [ 506.738820][T11336] ? kasan_quarantine_put+0x10a/0x240 [ 506.738837][T11336] ? lockdep_hardirqs_on+0x7c/0x110 [ 506.738856][T11336] ? assign_fw+0x4e/0x640 [ 506.738870][T11336] assign_fw+0x4e/0x640 [ 506.738884][T11336] ? _request_firmware+0x957/0x1470 [ 506.738900][T11336] _request_firmware+0x988/0x1470 [ 506.738918][T11336] ? __pfx__request_firmware+0x10/0x10 [ 506.738934][T11336] ? dump_stack_lvl+0x197/0x1f0 [ 506.738952][T11336] ? dump_stack_lvl+0x1a3/0x1f0 [ 506.738972][T11336] __async_dev_cache_fw_image+0xb1/0x340 [ 506.738989][T11336] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 506.739006][T11336] ? mark_held_locks+0x49/0x80 [ 506.739026][T11336] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 506.739044][T11336] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 506.739061][T11336] async_schedule_node_domain+0xd1/0x120 [ 506.739081][T11336] dev_cache_fw_image+0x38e/0x490 [ 506.739096][T11336] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 506.739111][T11336] ? dev_cache_fw_image+0x398/0x490 [ 506.739125][T11336] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 506.739140][T11336] dpm_for_each_dev+0x5d/0xb0 [ 506.739154][T11336] fw_pm_notify+0x81/0x150 [ 506.739166][T11336] notifier_call_chain+0xb9/0x410 [ 506.739184][T11336] ? __pfx_fw_pm_notify+0x10/0x10 [ 506.739199][T11336] blocking_notifier_call_chain_robust+0xc8/0x160 [ 506.739220][T11336] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 506.739243][T11336] pm_notifier_call_chain_robust+0x27/0x60 [ 506.739264][T11336] snapshot_open+0x218/0x2b0 [ 506.739291][T11336] ? __pfx_snapshot_open+0x10/0x10 [ 506.739311][T11336] misc_open+0x35d/0x420 [ 506.739326][T11336] ? __pfx_misc_open+0x10/0x10 [ 506.739340][T11336] chrdev_open+0x234/0x6a0 [ 506.739359][T11336] ? file_set_fsnotify_mode_from_watchers+0x59/0x640 [ 506.739378][T11336] ? __pfx_chrdev_open+0x10/0x10 [ 506.739396][T11336] ? file_set_fsnotify_mode_from_watchers+0xec/0x640 [ 506.739415][T11336] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 506.739435][T11336] do_dentry_open+0x744/0x1c10 [ 506.739453][T11336] ? __pfx_chrdev_open+0x10/0x10 [ 506.739474][T11336] vfs_open+0x82/0x3f0 [ 506.739495][T11336] path_openat+0x1de4/0x2cb0 [ 506.739517][T11336] ? __pfx_path_openat+0x10/0x10 [ 506.739537][T11336] do_filp_open+0x20b/0x470 [ 506.739555][T11336] ? __pfx_do_filp_open+0x10/0x10 [ 506.739579][T11336] ? alloc_fd+0x471/0x7d0 [ 506.739599][T11336] do_sys_openat2+0x11b/0x1d0 [ 506.739610][T11336] ? __pfx_do_sys_openat2+0x10/0x10 [ 506.739623][T11336] ? __fget_files+0x20e/0x3c0 [ 506.739643][T11336] __x64_sys_openat+0x174/0x210 [ 506.739655][T11336] ? __pfx___x64_sys_openat+0x10/0x10 [ 506.739667][T11336] ? ksys_write+0x1ac/0x250 [ 506.739692][T11336] do_syscall_64+0xcd/0x4c0 [ 506.739713][T11336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.739727][T11336] RIP: 0033:0x7f590498e929 [ 506.739740][T11336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 506.739753][T11336] RSP: 002b:00007f590575d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 506.739767][T11336] RAX: ffffffffffffffda RBX: 00007f5904bb6160 RCX: 00007f590498e929 [ 506.739777][T11336] RDX: 0000000000000481 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 506.739786][T11336] RBP: 00007f590575d090 R08: 0000000000000000 R09: 0000000000000000 [ 506.739794][T11336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 506.739802][T11336] R13: 0000000000000000 R14: 00007f5904bb6160 R15: 00007ffd003fad38 [ 506.739815][T11336] SYZFAIL: failed to send rpc fd=3 want=40592 sent=0 n=-1 (errno 32: Broken pipe) [ 507.519364][ T6182] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 507.642901][ T5924] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 508.703277][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 512.543586][ T6182] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 512.842938][ T5924] usb 3-1: device descriptor read/64, error -110 [ 513.093399][ T5924] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 513.223039][ T5924] usb 3-1: device descriptor read/64, error -32 [ 513.343174][ T5924] usb usb3-port1: attempt power cycle [ 513.683527][ T5924] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 513.703536][ T5924] usb 3-1: device descriptor read/8, error -32 [ 513.753290][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 513.943473][ T5924] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 513.963672][ T5924] usb 3-1: device descriptor read/8, error -32 [ 514.073499][ T5924] raw-gadget.1 gadget.2: failed to queue suspend event [ 514.080466][ T5924] usb usb3-port1: unable to enumerate USB device