last executing test programs: 11.591667372s ago: executing program 0 (id=815): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4276ef66ba420266b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x7, 0xf, 0x9, '\x00', 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11.190880321s ago: executing program 0 (id=817): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0600000004000000001000008500000000000000", @ANYRES32=0x0], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000980)=""/103, 0x0, &(0x7f0000000600), 0x80, r3, 0x0, 0x7}, 0x38) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, 0x0, 0x0, 0x4) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f00004d7000/0x1000)=nil, 0x1000, 0x1000000, 0x8010, 0xffffffffffffffff, 0x8000000) syz_io_uring_complete(r4) r5 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r5, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r7 = socket$inet_sctp(0x2, 0x400000000001, 0x84) sendto$inet(r7, &(0x7f0000000800)='u', 0x1, 0x4000800, &(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10) listen(r7, 0xda8c) accept4(r7, &(0x7f0000000340)=@nfc, 0x0, 0x0) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x3) mq_open(&(0x7f0000000100)='\xaa\xaa\xaa\xaa\xaa', 0x40, 0x40, &(0x7f0000000280)={0xfffffffffffffffd, 0x400, 0x70}) ioctl$UI_SET_ABSBIT(r6, 0x40045567, 0x0) write$uinput_user_dev(r6, &(0x7f0000000ec0)={'syz1\x00', {}, 0x0, [0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf486, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffc], [0x5, 0x0, 0x0, 0xb16, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x61f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8000, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x100e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e8c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbcd5, 0x2, 0x10, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x100, 0xffffffff, 0x0, 0x0, 0xffffffee, 0x4], [0x0, 0x0, 0x0, 0xc63, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffff9, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xdec, 0x0, 0x0, 0x0, 0xfffffffd, 0x1000, 0x0, 0x4, 0x80000003, 0x0, 0x5]}, 0x45c) syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) 10.154682762s ago: executing program 0 (id=819): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x7, 0x1, 0x3, 0x8, 0x5ad8, 0x4291, 0xd86f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x2, 0x90, 0x6, [{{0x9, 0x4, 0x72, 0x0, 0x0, 0x34, 0x3a, 0xcf}}]}}]}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0xd4}, 0x1, 0x0, 0x0, 0xc800}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x18000000000002a0, 0x7ee, 0x0, &(0x7f0000000e80)="b9e403c6631e39495aa05dc7cf1c", 0x0, 0x7ab, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000300)={0x325}, 0x8) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000340)="4347ce15282e863e3d92203dc24874f1734517007ae1e75a7724e0d23968f481c7767dfe475be455e5d44e14e6dc13527f29010e661f5304fbffe8042bd1073dc1d5250369e9b66551e6778dbfadb01df2e73c547d5b6ce6543331db999b56121700000000fb5b1473a2f71125ebbdcdccc17656cbe62792c204e32595667ffba2d48e332e9d897c8bf342f1d849447c04c82db7", 0xfffffffffffffeeb, 0xfffffffffffffffe) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) rt_sigsuspend(0x0, 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000) 8.548131444s ago: executing program 4 (id=826): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/15], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f00080000000000000000850000000e000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r7}, 0x10) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(r9, r9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r6, 0x100000000) mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00003eb000/0x1000)=nil) 7.550156044s ago: executing program 2 (id=827): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c"], 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x403, 0x1, 0x0, {0x0, 0x0, 0x4, 0x0, 0x10100, 0x1a724}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x40050814}, 0x4040844) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8, 0x2000, 0x400, 0xfffffff9}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000012009703000000000000000007"], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x880) unshare(0x26020480) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) prctl$PR_SET_IO_FLUSHER(0x41, 0x3) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, 0x0) pselect6(0x40, &(0x7f0000000180)={0x4, 0x8000000000000001, 0x10006, 0x1, 0x5, 0x1, 0x648, 0xfbad}, &(0x7f00000017c0)={0xf, 0x8000, 0x8, 0x8000000000000000, 0x80000001, 0xcc22, 0x5, 0x5}, 0x0, 0x0, 0x0) 7.463408928s ago: executing program 4 (id=828): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r0}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r2, 0x7ac, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000540)={0x7, @sdr={0x32314d54, 0x7f}}) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x3a, 0x4}, &(0x7f0000000180)=0x0) timer_settime(r4, 0x0, &(0x7f0000000040), &(0x7f0000000080)) 7.403871365s ago: executing program 1 (id=829): syz_emit_ethernet(0x65, &(0x7f0000000000)={@remote, @local, @void, {@x25={0x805, {0x3, 0x5, 0x13, "2f1cc1071b09eeace11603e68612a76f2f72bc53a2a0402f75913598a894d775453f1134b4dad5013c756e0056b6482f02927270e46e392bf3b5f0ca2ffab23d39876516ef394d5135ee42231aea27290f39d3fe"}}}}, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @none={0x0, 0x88e4d0d535da673d}}, 0x14) socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_set$uid(0x3, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x109042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x2}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r2, 0x2, &(0x7f0000000000)={0x2}, 0x0) landlock_restrict_self(r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016000f003f1b48013d030100000000009500000000000000bc26000000000000bf67000000000000070600000fff07006702000003000000360600000ee600f0bf052000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x20000811) syz_emit_ethernet(0x10c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000180c20000000800422100fe006700000b0290780a010102ac1e0101442483536401010100660004ac1414aa000007ffac141422000000e30000000000000008440c9ff36401010200010001442418016401010200000005ac1414bb00000004ac1e000100000003ac1414aa00000005070b81ffffff"], &(0x7f0000000200)={0x0, 0x3, [0xb50, 0xcd0, 0xcd5, 0xd8e]}) 7.275398543s ago: executing program 4 (id=830): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000900)={{}, {0x1, 0x2}, [{}, {0x2, 0x7}, {0x2, 0x4}, {}, {0x2, 0x4}], {0x4, 0x3}, [{0x8, 0x1}, {}, {}, {0x8, 0x6}, {0x8, 0x5}], {0x10, 0x4}, {0x20, 0x1}}, 0x74, 0x0) lstat(&(0x7f0000000600)='./bus\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x2020000, &(0x7f00000006c0)={[{}, {@mode={'mode', 0x3d, 0x2}}, {@gid={'gid', 0x3d, 0xee01}}, {@gid}], [{@euid_eq={'euid', 0x3d, r0}}, {@flag='posixacl'}, {@func={'func', 0x3d, 'FILE_CHECK'}}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000980)}, 0x40000) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000180)='cgroup\x00', 0x942400, 0x0) r5 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000440)="08001eb3b0335d0024e11aa721c573dbfbfee7687f7edc0ce5f94644fce2ad81144372724dd5662dcb210773e694689591993f2936257534c933c5992607f106d49ebda2195aed0812cd239f8737ed07c8fc3ada1b55856d9ae90ce3f878b1bf42891ea63d3adec7a3f89819417328658492f0d7f7e45ca08e41b6fe0d0b584398f23c1d92bb64473f72cea6971cd592365bf3bcf3ff9dd6e72cbf5b452caaef3a76edf63ab74c9f467c991d38c2f3114cd429", 0xb3}], 0x1, 0x0, 0x0, 0xe0000000}, 0x408d1) r7 = open(&(0x7f0000000140)='./bus\x00', 0x8000, 0x10b) mknodat$loop(r7, &(0x7f0000001600)='./file1\x00', 0x2000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r7, &(0x7f0000000000)='./file1\x00', r7, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000080)='./file0\x00') 6.600541751s ago: executing program 0 (id=831): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44080) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000000000/0x2000)=nil}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', r4, &(0x7f0000000000)='./file0\x00', 0x1) close(r0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="e3581f0ff14ad7000000"], 0xa) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x380000, @rand_addr=' \x01\x00'}, 0x1c) 6.434607687s ago: executing program 1 (id=832): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x4c}}, 0x0) add_key(0x0, 0x0, &(0x7f0000000100)="305c0605", 0x4, 0xfffffffffffffffe) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a98", 0x3, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ebffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 6.227251457s ago: executing program 4 (id=833): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendto$inet(r0, &(0x7f00000001c0)="b4979f35a50faecccd29a3094ac1f8", 0xf, 0x41, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="8040deff000001000c002b8008000100", @ANYRES32, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x1000000, 0x0, 0x0) 5.91705185s ago: executing program 4 (id=834): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) sendmmsg$inet6(r2, &(0x7f0000005dc0)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x8000, @local, 0xc}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000380)="f3", 0x1}], 0x1}}], 0x1, 0x4c040) syz_usb_control_io$printer(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c00", 0x4, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313b, r4, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x0, @void, @value}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r5, 0x4010744d, &(0x7f0000000180)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f000000ddc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r7, {0x7, 0x24, 0x0, 0x41046140, 0xffff, 0x0, 0xf7, 0x0, 0x0, 0x0, 0x9d5e236cac7a57c6}}, 0x50) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xbc, r8, 0x300, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6, 0x11, 0x8b}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x841}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4810}, 0x80) syz_usb_control_io(r0, 0x0, 0x0) r9 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r9, 0x707, &(0x7f0000000080)={&(0x7f00000000c0)=[{0x0, 0x9810, 0x155, &(0x7f00000004c0)="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"}], 0x1}) 5.861091987s ago: executing program 1 (id=835): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x40, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_SRC={0x8, 0x3, @multicast2}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 5.406326759s ago: executing program 2 (id=837): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0xff1) unshare(0x40600) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0xc0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x4) mkdir(0x0, 0x0) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1a, 0x0) ioprio_set$pid(0x2, 0x0, 0x2007) ioprio_get$pid(0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) unshare(0x64010e00) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, 0x0, 0x0) 5.001547662s ago: executing program 1 (id=838): pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x2, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x5}}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) (fail_nth: 1) 4.873057462s ago: executing program 3 (id=839): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) close_range(0xffffffffffffffff, r0, 0x0) 4.702051368s ago: executing program 0 (id=840): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000000000003b0000000800", @ANYRES32=r1, @ANYBLOB=')\x003'], 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 4.348956106s ago: executing program 2 (id=841): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, 0x0) 4.252442898s ago: executing program 0 (id=842): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = dup(r3) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0xfff5, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) unlink(0x0) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0502103, 0xfffffffffffffffe) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) write$UHID_CREATE(r6, &(0x7f0000000b00)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/15, 0xf, 0xa0, 0x8, 0x3, 0x5, 0x1635}}, 0x120) write$UHID_INPUT(r6, &(0x7f0000000c40)={0x8, {"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", 0x1000}}, 0x1006) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_udplite(0x2, 0x2, 0x88) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) 3.775672744s ago: executing program 1 (id=843): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f00000004c0)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYRESDEC=r0], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f042}) pread64(r4, &(0x7f0000000400)=""/42, 0x2a, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8923, &(0x7f0000000440)={'syz_tun\x00', 0x101}) 3.73832113s ago: executing program 3 (id=844): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendto$inet(r0, &(0x7f00000001c0)="b4979f35a50faecccd29a3094ac1f8", 0xf, 0x41, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="8040deff000001000c002b8008000100", @ANYRES32, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x1000000, 0x0, 0x0) 3.379390831s ago: executing program 2 (id=845): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r8 = fanotify_init(0x1, 0x80000) fanotify_mark(r8, 0xe, 0x40001011, 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r1, 0x4) r11 = creat(&(0x7f00000001c0)='./file0\x00', 0xac) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r13, &(0x7f00000007c0)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15) r14 = io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xfdcf, 0x2, 0x2}) r15 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) read$FUSE(r15, 0x0, 0x0) close_range(r14, 0xffffffffffffffff, 0x0) r16 = dup(r13) write$FUSE_BMAP(r16, &(0x7f0000000100)={0x18}, 0x18) r17 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r17, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x0) write$FUSE_NOTIFY_RETRIEVE(r16, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX=r11, @ANYRESHEX=r12, @ANYBLOB=',wfdno=', @ANYRESHEX=r16]) 3.16763973s ago: executing program 3 (id=846): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x24, 0x1402, 0x1, 0x70bd2a, 0x25dfdc02, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) (fail_nth: 1) 3.023548745s ago: executing program 2 (id=847): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x10, 0x0, 0x0, {0x0, 0x48, 0x0, 0x0, 0x21eae}}, 0x20}}, 0x62255bb730930cd9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r3) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) accept4(r4, &(0x7f00000001c0)=@caif=@util, &(0x7f0000000140)=0x80, 0x80400) r5 = socket$unix(0x1, 0x2, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000003e000701fcfffff7fddbdff6037c0000040036800c0001800600060086"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r7, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006000000aef4ee05abf9117cc6a03de0be5f"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@ctrl_frame=@cf_end={{}, {0x3}, @device_a, @random="bf7ade78ab73"}, 0x10) 3.023001586s ago: executing program 3 (id=848): io_setup(0x9, &(0x7f0000000b80)=0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0x0, 0x7fc00100}]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10) listen(0xffffffffffffffff, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r4, 0x1) sendto$packet(r4, 0x0, 0x0, 0x44, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000440)={0xffffffffffffffff, 0x2000, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200"}}) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 2.836604562s ago: executing program 1 (id=849): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = syz_io_uring_setup(0x234, &(0x7f0000000640)={0x0, 0x8d11, 0x40, 0x0, 0x40000373}, &(0x7f00000005c0)=0x0, &(0x7f00000001c0)=0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f00000007c0)={[0x4000000005]}, 0x8) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000100)={0x80000000, 0x0, &(0x7f00000005c0)}, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000200)=""/45, 0x2d) getdents(r4, &(0x7f0000000880)=""/166, 0xb7) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_usb_disconnect(r0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000000400)=""/202, 0xca}], 0x1}) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f0000000140)={0x5, 0x0, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = open(0x0, 0x0, 0x0) unlinkat(r5, 0x0, 0x200) r6 = io_uring_setup(0x357b, &(0x7f0000000700)={0x0, 0x3cfe, 0x2, 0xb733, 0x8260}) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\x10\xa9\f\x13\xf8\x98\x8c\x1b\xa7\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\xff\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\1\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5:\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18', 0x2) sendfile(r7, r8, &(0x7f00000006c0), 0xfffb) fcntl$addseals(r8, 0x409, 0x8) close_range(r6, 0xffffffffffffffff, 0x0) 2.722294879s ago: executing program 4 (id=850): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) (async) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_io_uring_setup(0x9e, &(0x7f0000000000)={0x0, 0x332b, 0x2, 0xfffffffc, 0x24d}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r6, r7, 0x0) (async) syz_io_uring_submit(r6, r7, 0x0) io_uring_enter(r5, 0x100847c0, 0xfffffffc, 0x1, 0x0, 0x0) (async) io_uring_enter(r5, 0x100847c0, 0xfffffffc, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=@newlink={0x40, 0x10, 0x503, 0x0, 0x200, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0x64010101}]}}}, @IFLA_MTU={0x8}]}, 0x40}}, 0x18000) (async) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=@newlink={0x40, 0x10, 0x503, 0x0, 0x200, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0x64010101}]}}}, @IFLA_MTU={0x8}]}, 0x40}}, 0x18000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newrule={0x30, 0x20, 0x400, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801c}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'bond0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000850) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000002c0)={0x0, 0x5, 0x6}) request_key(0x0, &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='y\xa9rustV\x1eS=\xd4\x16\x95:\x00\x01\x00\x00', 0x0) (async) request_key(0x0, &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='y\xa9rustV\x1eS=\xd4\x16\x95:\x00\x01\x00\x00', 0x0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="01002bbd7000fddbdf250c000000d3ab1f0ee4508b7071aa7d78d58c3e65fc86d6591eef75054bf3b50b1abfbd139ac7c3980aacc353a1f97b0cf1375619464fc94b3eaa771d266a30d2e2adaff4f843319e2e08b96aff5cd127ab6da75ebfa39df8fd9c3c00240d4f9ff7d169d0a5e4a6f645f55f80b863342a736497227416c4ae3f2314c7adaa2f16c7055b49222e01e239b89d31d36cca60845aadb679cc8e341c6d73"], 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_MTU={0x8}]}, 0x28}}, 0x0) mount(&(0x7f00000001c0), &(0x7f00000006c0)='./file0\x00', &(0x7f0000000800)='9p\x00', 0x0, &(0x7f0000000900)='trans=tcp,') (async) mount(&(0x7f00000001c0), &(0x7f00000006c0)='./file0\x00', &(0x7f0000000800)='9p\x00', 0x0, &(0x7f0000000900)='trans=tcp,') 1.779674094s ago: executing program 3 (id=851): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0xc018da6e238e1988) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x13, &(0x7f0000000200)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000200)={{0x87, @loopback, 0x4e23, 0x4, 'sh\x00', 0x37, 0x1, 0x31}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x4e21, 0x0, 0x4, 0x6, 0x3}}, 0x44) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {0x2}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x7}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}}, 0x2000004) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)={0x19c, 0x2, 0x2, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x31}, @CTA_EXPECT_NAT={0x94, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x17}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_NAT_TUPLE={0x34, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_NAT={0xc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0x58, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3f}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}]}, @CTA_EXPECT_MASTER={0x80, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @loopback}}}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x4}, 0x40081) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r3, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x8, 0x13, [{0x6, 0x1}, {0x30}, {0x1, 0x1}, {0x6, 0x1}]}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004885) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000004c00)=""/102392, 0x18ff8) r5 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x200, 0x0, 'nq\x00', 0x6, 0xfffffffe, 0xfffffffc}, 0x2c) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000002000010300000000400000000200000000000004000000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4044004) ioctl$TUNGETVNETLE(r0, 0x4010744d, 0x0) r6 = socket$kcm(0x2d, 0x2, 0x0) recvmmsg(r6, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0}, 0x14bc0}], 0x1, 0x40, 0x0) 1.330650558s ago: executing program 2 (id=852): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') read$FUSE(r5, &(0x7f00000001c0)={0x2020}, 0x2020) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x90}, 0x9c) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) chdir(&(0x7f0000002300)='./file0\x00') stat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x4b7f, 0x0) 0s ago: executing program 3 (id=853): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x88501, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) creat(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, 0x0) getgroups(0x2, &(0x7f00000001c0)=[0x0, 0x0]) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x0, &(0x7f0000000080)) r1 = syz_open_dev$MSR(&(0x7f0000000580), 0xa, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$FUSE(r2, &(0x7f0000000040)={0x2020}, 0x2084) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1817c1, 0x0) getsockname$packet(r0, &(0x7f0000002100)={0x11, 0x0, 0x0}, &(0x7f0000002140)=0x14) sendmsg$nl_route(r2, &(0x7f0000002200)={&(0x7f00000020c0), 0xc, &(0x7f00000021c0)={&(0x7f0000002180)=@bridge_newvlan={0x24, 0x70, 0x20, 0x70bd25, 0x25dfdbfb, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x4}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040021}, 0x1) mount$nfs4(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x2, &(0x7f0000002080)=ANY=[@ANYBLOB="6e6f61633d6fe98a630ebd5e63422d15b74058d8b412284d67d3f107246da32ece16ede51e5074"]) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000002c0)={0x4000000, 0x0, 0x0, 'queue0\x00', 0x9}) syz_open_dev$video4linux(&(0x7f0000000500), 0x0, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): 905] usb 1-1: config 0 descriptor?? [ 270.052677][ T5905] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 270.065332][ T5905] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 270.110973][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 270.792792][ T30] audit: type=1326 audit(1749571768.710:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7880 comm="syz.2.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f948318e929 code=0x7fc00000 [ 270.821405][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 270.832931][ T9] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 270.843166][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 270.852329][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.863371][ T7886] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 270.874104][ T5905] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 270.881945][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 271.182894][ T5892] usb 5-1: USB disconnect, device number 13 [ 271.297511][ T7898] overlayfs: failed to resolve './file1': -2 [ 271.379451][ T7899] netlink: 'syz.2.507': attribute type 9 has an invalid length. [ 271.387188][ T7899] netlink: 'syz.2.507': attribute type 7 has an invalid length. [ 271.394895][ T7899] netlink: 'syz.2.507': attribute type 8 has an invalid length. [ 272.640363][ T5905] em28xx 1-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 272.652956][ T5905] em28xx 1-1:0.0: board has no eeprom [ 272.690008][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 272.725169][ T5905] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 272.735110][ T5905] em28xx 1-1:0.0: dvb set to bulk mode. [ 272.743143][ T5943] em28xx 1-1:0.0: Binding DVB extension [ 272.754759][ T5905] usb 1-1: USB disconnect, device number 8 [ 272.761681][ T5905] em28xx 1-1:0.0: Disconnecting em28xx [ 272.841348][ T5943] em28xx 1-1:0.0: Registering input extension [ 272.847869][ T5905] em28xx 1-1:0.0: Closing input extension [ 272.863802][ T5905] em28xx 1-1:0.0: Freeing device [ 272.905209][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 272.922078][ T9] usb 2-1: config 7 has an invalid interface number: 66 but max is 0 [ 272.954071][ T9] usb 2-1: config 7 has no interface number 0 [ 273.385007][ T9] usb 2-1: config 7 interface 66 altsetting 4 bulk endpoint 0x82 has invalid maxpacket 8 [ 273.394928][ T9] usb 2-1: config 7 interface 66 has no altsetting 0 [ 273.416285][ T9] usb 2-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice=7e.90 [ 273.455211][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.477061][ T9] usb 2-1: Product: syz [ 273.484033][ T9] usb 2-1: Manufacturer: syz [ 273.493917][ T9] usb 2-1: SerialNumber: syz [ 273.524339][ T7897] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 274.534787][ T9] spcp8x5 2-1:7.66: SPCP8x5 converter detected [ 274.552012][ T9] usb 2-1: SPCP8x5 converter now attached to ttyUSB0 [ 274.572760][ T9] usb 2-1: USB disconnect, device number 8 [ 274.626277][ T9] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 274.642978][ T9] spcp8x5 2-1:7.66: device disconnected [ 276.322716][ T5822] Bluetooth: hci3: command 0x0405 tx timeout [ 276.353620][ T2022] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 276.474283][ T7937] 9pnet_virtio: no channels available for device 127.0.0.1 [ 276.912221][ T2022] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 276.923351][ T2022] usb 5-1: config 0 has no interface number 0 [ 276.982806][ T2022] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.995005][ T2022] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.006718][ T2022] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 277.522409][ T2022] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 277.531692][ T2022] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.557399][ T2022] usb 5-1: config 0 descriptor?? [ 278.151943][ T7951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.520'. [ 278.361160][ T42] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 278.368853][ T2022] input: HID 28bd:0042 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0042.0003/input/input19 [ 278.494005][ T2022] uclogic 0003:28BD:0042.0003: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.4-1/input1 [ 278.543786][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 278.610479][ T42] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 278.660208][ T7959] program syz.3.524 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 279.000308][ T2022] usb 5-1: USB disconnect, device number 14 [ 279.117849][ T42] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 279.170093][ T42] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 279.189416][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.201018][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 279.212571][ T9] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 279.230720][ T9] usb 3-1: config 0 has no interface number 0 [ 279.246129][ T9] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 279.266786][ T7964] Unsupported ieee802154 address type: 0 [ 279.312023][ T9] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 279.335727][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.596490][ T7950] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 279.713366][ T9] usb 3-1: Product: syz [ 279.719748][ T9] usb 3-1: Manufacturer: syz [ 279.730271][ T9] usb 3-1: SerialNumber: syz [ 279.742321][ T9] usb 3-1: config 0 descriptor?? [ 279.749304][ T9] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 279.759426][ T9] em28xx 3-1:0.132: Video interface 132 found: [ 280.222747][ T42] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 280.253205][ T7960] fido_id[7960]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 280.530959][ T9] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 280.637736][ T42] usb 2-1: USB disconnect, device number 9 [ 280.844009][ T5905] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 280.879165][ T30] audit: type=1400 audit(1749571778.790:302): avc: denied { append } for pid=7954 comm="syz.2.523" name="i2c-1" dev="devtmpfs" ino=3109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 281.011631][ T5905] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 281.022013][ T5905] usb 5-1: config 0 has no interface number 0 [ 281.028167][ T5905] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.085257][ T7982] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 281.102644][ T5905] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.126225][ T5905] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 281.139362][ T5905] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 281.149651][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.172439][ T5905] usb 5-1: config 0 descriptor?? [ 281.183665][ T7984] netlink: 4 bytes leftover after parsing attributes in process `syz.3.531'. [ 281.769995][ T9] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 281.783250][ T9] em28xx 3-1:0.132: board has no eeprom [ 281.919587][ T9] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 281.928247][ T9] em28xx 3-1:0.132: analog set to bulk mode. [ 281.944683][ T2022] em28xx 3-1:0.132: Registering V4L2 extension [ 281.972829][ T9] usb 3-1: USB disconnect, device number 13 [ 282.000398][ T9] em28xx 3-1:0.132: Disconnecting em28xx [ 282.233643][ T5905] usbhid 5-1:0.1: can't add hid device: -71 [ 282.241599][ T5905] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 282.687749][ T5905] usb 5-1: USB disconnect, device number 15 [ 282.853216][ T30] audit: type=1326 audit(1749571780.770:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7987 comm="syz.1.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bdb98e929 code=0x7fc00000 [ 283.079288][ T2022] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 283.249681][ T2022] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 283.256836][ T2022] em28xx 3-1:0.132: No AC97 audio processor [ 283.332661][ T2022] usb 3-1: Decoder not found [ 283.458791][ T2022] em28xx 3-1:0.132: failed to create media graph [ 283.479883][ T2022] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 283.503939][ T2022] em28xx 3-1:0.132: Remote control support is not available for this card. [ 283.542861][ T9] em28xx 3-1:0.132: Closing input extension [ 283.580885][ T9] em28xx 3-1:0.132: Freeing device [ 283.596928][ T8014] Unsupported ieee802154 address type: 0 [ 284.776784][ T30] audit: type=1326 audit(1749571782.690:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8006 comm="syz.1.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bdb98e929 code=0x7fc00000 [ 284.935809][ T8029] [U]  [ 284.938590][ T8029] [U] K{ [ 284.941588][ T8029] [U] t 1ŠFfˊ`GJgo/mC [ 284.948501][ T8029] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 284.964008][ T8029] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 284.974400][ T8029] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 285.009982][ T8029] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 285.033480][ T8029] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 285.044558][ T8029] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 285.056076][ T8029] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 285.145416][ T8029] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 285.153916][ T8029] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 285.167453][ T8029] [U] 22Ʃx?0;3u [ 285.171610][ T8029] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 285.196535][ T8029] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 285.205829][ T8029] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 285.214496][ T8029] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 285.220647][ T8029] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 285.232961][ T8029] [U] ec [ 285.236140][ T8029] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 285.837961][ T8029] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 285.854589][ T2022] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 285.966632][ T8042] overlay: Unknown parameter 'pcr' [ 286.042524][ T2022] usb 1-1: Using ep0 maxpacket: 16 [ 286.100670][ T2022] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 286.235256][ T2022] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 286.246595][ T2022] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.254949][ T2022] usb 1-1: Product: syz [ 286.259190][ T2022] usb 1-1: Manufacturer: syz [ 286.265922][ T2022] usb 1-1: SerialNumber: syz [ 286.280301][ T2022] usb 1-1: config 0 descriptor?? [ 286.294985][ T2022] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 286.305389][ T2022] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 286.869578][ T5951] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 286.953387][ T2022] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 287.003452][ T8055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.549'. [ 287.437171][ T5951] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.494368][ T5951] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.568292][ T5951] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 287.604304][ T5951] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.758198][ T2022] em28xx 1-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 287.838635][ T2022] em28xx 1-1:0.0: board has no eeprom [ 287.850415][ T5951] usb 2-1: config 0 descriptor?? [ 288.133660][ T2022] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 288.134946][ T5951] usbhid 2-1:0.0: can't add hid device: -71 [ 288.159242][ T2022] em28xx 1-1:0.0: dvb set to bulk mode. [ 288.273435][ T8062] netlink: 'syz.3.551': attribute type 9 has an invalid length. [ 288.281169][ T8062] netlink: 'syz.3.551': attribute type 7 has an invalid length. [ 288.288825][ T8062] netlink: 'syz.3.551': attribute type 8 has an invalid length. [ 288.594862][ T5827] em28xx 1-1:0.0: Binding DVB extension [ 288.625192][ T5951] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 288.661249][ T5951] usb 2-1: USB disconnect, device number 10 [ 288.702169][ T2022] usb 1-1: USB disconnect, device number 9 [ 288.757883][ T5827] em28xx 1-1:0.0: Registering input extension [ 288.793888][ T2022] em28xx 1-1:0.0: Disconnecting em28xx [ 288.807304][ T2022] em28xx 1-1:0.0: Closing input extension [ 288.927691][ T2022] em28xx 1-1:0.0: Freeing device [ 288.948267][ T8065] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 289.700684][ T8080] program syz.1.557 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 289.891902][ T8083] Unsupported ieee802154 address type: 0 [ 290.626623][ T8092] program syz.2.559 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 291.104815][ T8091] netlink: 16 bytes leftover after parsing attributes in process `syz.4.560'. [ 291.137284][ T8091] netlink: 'syz.4.560': attribute type 10 has an invalid length. [ 291.200384][ T8097] 9pnet_virtio: no channels available for device 127.0.0.1 [ 291.681347][ T8101] Unsupported ieee802154 address type: 0 [ 292.129620][ T5951] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 292.174425][ T8093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 292.233860][ T8111] Unsupported ieee802154 address type: 0 [ 292.359670][ T5951] usb 4-1: Using ep0 maxpacket: 16 [ 292.559793][ T5951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 292.601693][ T5951] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 292.637685][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.684114][ T5951] usb 4-1: Product: syz [ 292.714210][ T8120] [U]  [ 292.717001][ T8120] [U] K{ [ 292.720018][ T8120] [U] t 1ŠFfˊ`GJgo/mC [ 292.726957][ T8120] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 292.742489][ T8120] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 292.752908][ T8120] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 292.788554][ T8120] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 292.812080][ T8120] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 292.823191][ T8120] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 292.834731][ T8120] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 292.924138][ T8120] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 292.932633][ T8120] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 292.946161][ T8120] [U] 22Ʃx?0;3u [ 292.950319][ T8120] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 292.975234][ T8120] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 292.984507][ T8120] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 292.993083][ T8120] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 292.999230][ T8120] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 293.011537][ T8120] [U] ec [ 293.014641][ T8120] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 293.039230][ T5951] usb 4-1: Manufacturer: syz [ 293.057857][ T5951] usb 4-1: SerialNumber: syz [ 293.169623][ T5951] usb 4-1: config 0 descriptor?? [ 293.211776][ T5951] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 293.309071][ T5951] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 293.349893][ T42] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 293.384731][ T8120] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 293.626323][ T42] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 293.634431][ T42] usb 2-1: config 0 has no interface number 0 [ 293.640974][ T42] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.653859][ T42] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.682670][ T42] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 293.848880][ T42] usb 2-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 293.858032][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.869093][ T5951] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 293.877304][ T42] usb 2-1: config 0 descriptor?? [ 293.901161][ T8132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.564'. [ 294.879044][ T5951] em28xx 4-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 294.893492][ T5951] em28xx 4-1:0.0: board has no eeprom [ 294.969628][ T5951] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 294.977586][ T5951] em28xx 4-1:0.0: dvb set to bulk mode. [ 295.086959][ T5892] em28xx 4-1:0.0: Binding DVB extension [ 295.129054][ T5951] usb 4-1: USB disconnect, device number 10 [ 295.144483][ T5951] em28xx 4-1:0.0: Disconnecting em28xx [ 295.156873][ T42] input: HID 28bd:0042 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0042.0004/input/input21 [ 295.455635][ T5892] em28xx 4-1:0.0: Registering input extension [ 295.475993][ T5951] em28xx 4-1:0.0: Closing input extension [ 295.522731][ T42] uclogic 0003:28BD:0042.0004: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.1-1/input1 [ 295.586398][ T5951] em28xx 4-1:0.0: Freeing device [ 295.644105][ T42] usb 2-1: USB disconnect, device number 11 [ 295.759259][ T8148] fido_id[8148]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 295.919703][ T5951] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 296.595209][ T5951] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 296.629547][ T5951] usb 4-1: config 0 has no interface number 0 [ 296.754034][ T5951] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.832947][ T8158] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 296.840559][ T5951] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.859696][ T5951] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 296.872685][ T5951] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 296.882031][ T5951] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.957909][ T5951] usb 4-1: config 0 descriptor?? [ 298.070734][ T8171] overlayfs: failed to resolve './file0': -2 [ 298.417950][ T8170] netlink: 'syz.1.578': attribute type 9 has an invalid length. [ 298.425772][ T8170] netlink: 'syz.1.578': attribute type 7 has an invalid length. [ 298.433463][ T8170] netlink: 'syz.1.578': attribute type 8 has an invalid length. [ 298.729564][ T8176] Unsupported ieee802154 address type: 0 [ 298.743605][ T5951] usbhid 4-1:0.1: can't add hid device: -71 [ 298.777751][ T5951] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 298.950240][ T5951] usb 4-1: USB disconnect, device number 11 [ 299.037069][ T8186] overlayfs: failed to resolve './file0': -2 [ 299.113156][ T8187] netlink: 'syz.2.580': attribute type 9 has an invalid length. [ 299.121213][ T8187] netlink: 'syz.2.580': attribute type 7 has an invalid length. [ 299.128869][ T8187] netlink: 'syz.2.580': attribute type 8 has an invalid length. [ 300.159571][ T5827] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 300.239674][ T24] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 300.319648][ T5827] usb 1-1: Using ep0 maxpacket: 16 [ 300.340604][ T5827] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 300.352842][ T5827] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 300.362320][ T5827] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.370518][ T5827] usb 1-1: Product: syz [ 300.375208][ T5827] usb 1-1: Manufacturer: syz [ 300.380087][ T5827] usb 1-1: SerialNumber: syz [ 300.387730][ T5827] usb 1-1: config 0 descriptor?? [ 300.431784][ T8205] netlink: 4 bytes leftover after parsing attributes in process `syz.4.584'. [ 300.466757][ T5827] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 300.486192][ T5827] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 300.498667][ T24] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 300.506846][ T24] usb 3-1: config 0 has no interface number 0 [ 300.510826][ T8207] netlink: 4 bytes leftover after parsing attributes in process `syz.3.587'. [ 300.518912][ T24] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.641777][ T24] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.977808][ T24] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 301.003542][ T24] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 301.024343][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.092057][ T24] usb 3-1: config 0 descriptor?? [ 301.235417][ T5827] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 301.368019][ T8209] Unsupported ieee802154 address type: 0 [ 301.859786][ T24] input: HID 28bd:0042 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0042.0005/input/input23 [ 301.965670][ T8217] program syz.3.589 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 302.453208][ T5827] em28xx 1-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 302.462762][ T5827] em28xx 1-1:0.0: board has no eeprom [ 302.494519][ T24] uclogic 0003:28BD:0042.0005: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.2-1/input1 [ 302.529614][ T5827] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 302.552492][ T5827] em28xx 1-1:0.0: dvb set to bulk mode. [ 302.568910][ T9] em28xx 1-1:0.0: Binding DVB extension [ 302.583705][ T5827] usb 1-1: USB disconnect, device number 10 [ 302.706259][ T9] em28xx 1-1:0.0: Registering input extension [ 302.721002][ T5827] em28xx 1-1:0.0: Disconnecting em28xx [ 302.737353][ T30] audit: type=1400 audit(1749571800.640:305): avc: denied { write } for pid=8221 comm="syz.4.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 302.769692][ T5827] em28xx 1-1:0.0: Closing input extension [ 302.803917][ T5827] em28xx 1-1:0.0: Freeing device [ 302.901311][ T8227] 9pnet_fd: Insufficient options for proto=fd [ 302.919567][ T30] audit: type=1400 audit(1749571800.830:306): avc: denied { ioctl } for pid=8221 comm="syz.4.592" path="socket:[18715]" dev="sockfs" ino=18715 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 303.105602][ T8229] overlayfs: failed to resolve './file0': -2 [ 303.154150][ T8229] netlink: 'syz.1.590': attribute type 9 has an invalid length. [ 303.193508][ T8229] netlink: 'syz.1.590': attribute type 7 has an invalid length. [ 303.322200][ T8223] program syz.3.591 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 303.383738][ T8229] netlink: 'syz.1.590': attribute type 8 has an invalid length. [ 303.801718][ T24] usb 3-1: USB disconnect, device number 14 [ 304.464251][ T8251] 9pnet_virtio: no channels available for device 127.0.0.1 [ 305.323379][ T8263] Unsupported ieee802154 address type: 0 [ 305.373226][ T8259] netlink: 'syz.0.597': attribute type 9 has an invalid length. [ 305.381005][ T8259] netlink: 'syz.0.597': attribute type 7 has an invalid length. [ 305.388614][ T8259] netlink: 'syz.0.597': attribute type 8 has an invalid length. [ 305.950064][ T8270] program syz.4.602 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 306.449697][ T24] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 306.491974][ T8274] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 306.643186][ T24] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 306.798070][ T24] usb 3-1: config 0 has no interface number 0 [ 306.805493][ T24] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.816539][ T24] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.826422][ T24] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 306.845089][ T24] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 306.856958][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.875261][ T24] usb 3-1: config 0 descriptor?? [ 307.026593][ T8286] program syz.1.607 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 307.446329][ T8289] Unsupported ieee802154 address type: 0 [ 307.830903][ T8297] overlay: Unknown parameter 'pcr' [ 307.999660][ T5906] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 308.203803][ T24] input: HID 28bd:0042 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0042.0006/input/input26 [ 308.325006][ T24] uclogic 0003:28BD:0042.0006: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.2-1/input1 [ 308.346766][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 308.372780][ T5906] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 308.423571][ T5906] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 308.439844][ T24] usb 3-1: USB disconnect, device number 15 [ 308.463259][ T5906] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 308.503429][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.549792][ T8293] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 308.565367][ T5906] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 308.774752][ T5906] usb 5-1: USB disconnect, device number 16 [ 308.900436][ T5819] udevd[5819]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such device [ 308.930207][ T8306] fido_id[8306]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 308.971526][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.257281][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.267355][ T9] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 309.276980][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.287861][ T9] usb 2-1: config 0 descriptor?? [ 309.289487][ T8317] Unsupported ieee802154 address type: 0 [ 309.698289][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 309.792327][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 309.823475][ T9] usb 2-1: USB disconnect, device number 12 [ 310.080654][ T8330] [U]  [ 310.083468][ T8330] [U] K{ [ 310.086494][ T8330] [U] t 1ŠFfˊ`GJgo/mC [ 310.093434][ T8330] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 310.108972][ T8330] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 310.119390][ T8330] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 310.155019][ T8330] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 310.178560][ T8330] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 310.189663][ T8330] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 310.201202][ T8330] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 310.290545][ T8330] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 310.299043][ T8330] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 310.312613][ T8330] [U] 22Ʃx?0;3u [ 310.316773][ T8330] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 310.341691][ T8330] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 310.350967][ T8330] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 310.359542][ T8330] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 310.365695][ T8330] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 310.378092][ T8330] [U] ec [ 310.381198][ T8330] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 310.732208][ T8334] program syz.0.617 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 312.591911][ T8339] FAULT_INJECTION: forcing a failure. [ 312.591911][ T8339] name failslab, interval 1, probability 0, space 0, times 0 [ 312.618011][ T30] audit: type=1400 audit(1749571810.530:307): avc: denied { write } for pid=8335 comm="syz.3.619" name="001" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 312.669740][ T8339] CPU: 0 UID: 0 PID: 8339 Comm: syz.0.620 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(full) [ 312.669764][ T8339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 312.669774][ T8339] Call Trace: [ 312.669780][ T8339] [ 312.669787][ T8339] dump_stack_lvl+0x16c/0x1f0 [ 312.669819][ T8339] should_fail_ex+0x512/0x640 [ 312.669843][ T8339] ? fs_reclaim_acquire+0xae/0x150 [ 312.669863][ T8339] ? tomoyo_encode2+0x100/0x3e0 [ 312.669887][ T8339] should_failslab+0xc2/0x120 [ 312.669912][ T8339] __kmalloc_noprof+0xd2/0x510 [ 312.669933][ T8339] ? d_absolute_path+0x136/0x1a0 [ 312.669958][ T8339] tomoyo_encode2+0x100/0x3e0 [ 312.669985][ T8339] tomoyo_encode+0x29/0x50 [ 312.670008][ T8339] tomoyo_realpath_from_path+0x18f/0x6e0 [ 312.670040][ T8339] tomoyo_path_number_perm+0x245/0x580 [ 312.670060][ T8339] ? tomoyo_path_number_perm+0x237/0x580 [ 312.670083][ T8339] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 312.670105][ T8339] ? find_held_lock+0x2b/0x80 [ 312.670150][ T8339] ? find_held_lock+0x2b/0x80 [ 312.670170][ T8339] ? hook_file_ioctl_common+0x145/0x410 [ 312.670192][ T8339] ? __fget_files+0x20e/0x3c0 [ 312.670221][ T8339] security_file_ioctl+0x9b/0x240 [ 312.670247][ T8339] __x64_sys_ioctl+0xb7/0x210 [ 312.670269][ T8339] do_syscall_64+0xcd/0x4c0 [ 312.670297][ T8339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.670315][ T8339] RIP: 0033:0x7f61c978e929 [ 312.670329][ T8339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.670346][ T8339] RSP: 002b:00007f61ca624038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 312.670363][ T8339] RAX: ffffffffffffffda RBX: 00007f61c99b5fa0 RCX: 00007f61c978e929 [ 312.670373][ T8339] RDX: 0000200000000080 RSI: 0000000043403d0e RDI: 0000000000000004 [ 312.670384][ T8339] RBP: 00007f61ca624090 R08: 0000000000000000 R09: 0000000000000000 [ 312.670395][ T8339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.670405][ T8339] R13: 0000000000000000 R14: 00007f61c99b5fa0 R15: 00007ffe9f44dd48 [ 312.670431][ T8339] [ 312.670447][ T8339] ERROR: Out of memory at tomoyo_realpath_from_path. [ 312.892362][ T8327] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 314.656340][ T8361] Zero length message leads to an empty skb [ 315.150788][ T5943] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 315.387185][ T5943] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 315.419541][ T5943] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 315.429402][ T5943] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 315.445778][ T5943] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.509729][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 315.527902][ T8355] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 315.539106][ T5943] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 315.728006][ T8373] overlayfs: failed to resolve './file0': -2 [ 315.805536][ T8374] netlink: 'syz.1.630': attribute type 9 has an invalid length. [ 315.813296][ T8374] netlink: 'syz.1.630': attribute type 7 has an invalid length. [ 315.821127][ T8374] netlink: 'syz.1.630': attribute type 8 has an invalid length. [ 316.149556][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 316.159908][ T9] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 316.169091][ T9] usb 4-1: config 0 has no interface number 0 [ 316.374231][ T5943] usb 3-1: USB disconnect, device number 16 [ 316.382149][ T9] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 316.467132][ T9] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 316.487283][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.497410][ T9] usb 4-1: Product: syz [ 316.504842][ T9] usb 4-1: Manufacturer: syz [ 316.509563][ T9] usb 4-1: SerialNumber: syz [ 316.516385][ T9] usb 4-1: config 0 descriptor?? [ 316.600173][ T9] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 316.642484][ T9] em28xx 4-1:0.132: Video interface 132 found: [ 316.754759][ T8380] program syz.1.631 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 316.811647][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.821118][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.280487][ T9] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 317.297158][ T8382] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 317.512090][ T8386] netlink: 16 bytes leftover after parsing attributes in process `syz.1.634'. [ 317.546763][ T8386] netlink: 'syz.1.634': attribute type 10 has an invalid length. [ 317.626209][ T8386] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.734019][ T5906] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 317.941174][ T5906] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 317.949394][ T5906] usb 1-1: config 0 has no interface number 0 [ 317.955668][ T5906] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.966629][ T5906] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.977350][ T5906] usb 1-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 317.990273][ T5906] usb 1-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 317.999356][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.016373][ T5906] usb 1-1: config 0 descriptor?? [ 319.213568][ T9] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 319.230625][ T9] em28xx 4-1:0.132: board has no eeprom [ 319.312633][ T9] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 319.704330][ T9] em28xx 4-1:0.132: analog set to bulk mode. [ 319.715623][ T2022] em28xx 4-1:0.132: Registering V4L2 extension [ 320.230977][ T5906] input: HID 28bd:0042 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:28BD:0042.0007/input/input28 [ 321.119460][ T2022] em28xx 4-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 321.136431][ T2022] em28xx 4-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 321.146271][ T2022] em28xx 4-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 321.155319][ T2022] em28xx 4-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 321.321862][ T5906] uclogic 0003:28BD:0042.0007: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.0-1/input1 [ 321.346514][ T30] audit: type=1400 audit(1749571819.260:308): avc: denied { accept } for pid=8409 comm="syz.4.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 321.514898][ T5827] usb 4-1: USB disconnect, device number 12 [ 321.525785][ T5906] usb 1-1: USB disconnect, device number 11 [ 321.894446][ T5827] em28xx 4-1:0.132: Disconnecting em28xx [ 322.156275][ T8424] FAULT_INJECTION: forcing a failure. [ 322.156275][ T8424] name failslab, interval 1, probability 0, space 0, times 0 [ 322.169291][ T8424] CPU: 0 UID: 0 PID: 8424 Comm: syz.3.644 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(full) [ 322.169314][ T8424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 322.169324][ T8424] Call Trace: [ 322.169330][ T8424] [ 322.169337][ T8424] dump_stack_lvl+0x16c/0x1f0 [ 322.169368][ T8424] should_fail_ex+0x512/0x640 [ 322.169392][ T8424] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 322.169416][ T8424] should_failslab+0xc2/0x120 [ 322.169447][ T8424] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 322.169470][ T8424] ? getname_flags.part.0+0x4c/0x550 [ 322.169497][ T8424] getname_flags.part.0+0x4c/0x550 [ 322.169513][ T8424] ? find_held_lock+0x2b/0x80 [ 322.169538][ T8424] getname_flags+0x93/0xf0 [ 322.169560][ T8424] do_sys_openat2+0xb8/0x1d0 [ 322.169574][ T8424] ? __pfx_do_sys_openat2+0x10/0x10 [ 322.169587][ T8424] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 322.169614][ T8424] ? kvm_sched_clock_read+0x11/0x20 [ 322.169637][ T8424] ? sched_clock+0x38/0x60 [ 322.169663][ T8424] __x64_sys_openat+0x174/0x210 [ 322.169680][ T8424] ? __pfx___x64_sys_openat+0x10/0x10 [ 322.169699][ T8424] ? __pfx___rdmsr_safe_on_cpu+0x10/0x10 [ 322.169729][ T8424] do_syscall_64+0xcd/0x4c0 [ 322.169758][ T8424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.169776][ T8424] RIP: 0033:0x7fa145b8e929 [ 322.169790][ T8424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.169807][ T8424] RSP: 002b:00007fa146a3d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 322.169823][ T8424] RAX: ffffffffffffffda RBX: 00007fa145db6080 RCX: 00007fa145b8e929 [ 322.169834][ T8424] RDX: 0000000000002982 RSI: 0000200000001840 RDI: ffffffffffffff9c [ 322.169845][ T8424] RBP: 00007fa146a3d090 R08: 0000000000000000 R09: 0000000000000000 [ 322.169855][ T8424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.169864][ T8424] R13: 0000000000000000 R14: 00007fa145db6080 R15: 00007ffcd4d38338 [ 322.169889][ T8424] [ 322.178434][ T8417] fido_id[8417]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 322.606627][ T42] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 322.758441][ T2022] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 322.765920][ T2022] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 322.876051][ T2022] em28xx 4-1:0.132: No AC97 audio processor [ 322.894271][ T2022] usb 4-1: Decoder not found [ 322.903192][ T2022] em28xx 4-1:0.132: failed to create media graph [ 322.920127][ T2022] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 323.821104][ T2022] em28xx 4-1:0.132: Remote control support is not available for this card. [ 323.839625][ T5827] em28xx 4-1:0.132: Closing input extension [ 323.851772][ T5827] em28xx 4-1:0.132: Freeing device [ 323.910677][ T42] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 323.922474][ T42] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 323.962078][ T42] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 324.043073][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.061477][ T8423] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 324.090422][ T42] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 324.106424][ T8442] Unsupported ieee802154 address type: 0 [ 325.038525][ T42] usb 2-1: USB disconnect, device number 13 [ 325.919634][ T5822] Bluetooth: hci3: command 0x0405 tx timeout [ 326.182981][ T30] audit: type=1400 audit(1749571824.090:309): avc: denied { setopt } for pid=8450 comm="syz.4.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 326.277176][ T5832] udevd[5832]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 326.474607][ T30] audit: type=1400 audit(1749571824.160:310): avc: denied { ioctl } for pid=8450 comm="syz.4.651" path="socket:[18131]" dev="sockfs" ino=18131 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 326.503923][ T30] audit: type=1400 audit(1749571824.380:311): avc: denied { create } for pid=8450 comm="syz.4.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 327.069153][ T8465] 9pnet_virtio: no channels available for device 127.0.0.1 [ 327.477181][ T30] audit: type=1400 audit(1749571824.390:312): avc: denied { ioctl } for pid=8450 comm="syz.4.651" path="socket:[19165]" dev="sockfs" ino=19165 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 328.703562][ T30] audit: type=1400 audit(1749571826.620:313): avc: denied { bind } for pid=8467 comm="syz.3.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 328.960421][ T8476] program syz.4.655 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 329.526264][ T8481] [U]  [ 329.529082][ T8481] [U] K{ [ 329.532103][ T8481] [U] t 1ŠFfˊ`GJgo/mC [ 329.539040][ T8481] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 329.554577][ T8481] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 329.564994][ T8481] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 329.600619][ T8481] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 329.624156][ T8481] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 329.635263][ T8481] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 329.646810][ T8481] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 329.843549][ T8481] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 329.852109][ T8481] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 329.865638][ T8481] [U] 22Ʃx?0;3u [ 329.869800][ T8481] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 329.894805][ T8481] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 329.904114][ T8481] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 329.912697][ T8481] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 329.918848][ T8481] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 329.931159][ T8481] [U] ec [ 329.934269][ T8481] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 330.447776][ T8481] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 331.004439][ T8495] netlink: 'syz.3.662': attribute type 10 has an invalid length. [ 331.824815][ T8495] syz.3.662 (8495): drop_caches: 2 [ 331.860849][ T8495] syz.3.662 (8495): drop_caches: 2 [ 331.893680][ T8512] FAULT_INJECTION: forcing a failure. [ 331.893680][ T8512] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 332.001845][ T8512] CPU: 0 UID: 0 PID: 8512 Comm: syz.4.666 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(full) [ 332.001868][ T8512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 332.001875][ T8512] Call Trace: [ 332.001879][ T8512] [ 332.001884][ T8512] dump_stack_lvl+0x16c/0x1f0 [ 332.001905][ T8512] should_fail_ex+0x512/0x640 [ 332.001923][ T8512] _copy_to_user+0x32/0xd0 [ 332.001940][ T8512] simple_read_from_buffer+0xcb/0x170 [ 332.001956][ T8512] proc_fail_nth_read+0x197/0x270 [ 332.001970][ T8512] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 332.001985][ T8512] ? rw_verify_area+0xcf/0x680 [ 332.001997][ T8512] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 332.002010][ T8512] vfs_read+0x1e1/0xc60 [ 332.002026][ T8512] ? __pfx___mutex_lock+0x10/0x10 [ 332.002043][ T8512] ? __pfx_vfs_read+0x10/0x10 [ 332.002062][ T8512] ? __fget_files+0x20e/0x3c0 [ 332.002082][ T8512] ksys_read+0x12a/0x250 [ 332.002095][ T8512] ? __pfx_ksys_read+0x10/0x10 [ 332.002113][ T8512] do_syscall_64+0xcd/0x4c0 [ 332.002131][ T8512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.002142][ T8512] RIP: 0033:0x7f2c7398d33c [ 332.002151][ T8512] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 332.002162][ T8512] RSP: 002b:00007f2c74774030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 332.002173][ T8512] RAX: ffffffffffffffda RBX: 00007f2c73bb5fa0 RCX: 00007f2c7398d33c [ 332.002179][ T8512] RDX: 000000000000000f RSI: 00007f2c747740a0 RDI: 0000000000000004 [ 332.002186][ T8512] RBP: 00007f2c74774090 R08: 0000000000000000 R09: 0000000000000000 [ 332.002192][ T8512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.002198][ T8512] R13: 0000000000000000 R14: 00007f2c73bb5fa0 R15: 00007ffdfe461098 [ 332.002213][ T8512] [ 332.009588][ T5951] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 332.439617][ T5951] usb 4-1: Using ep0 maxpacket: 16 [ 332.447428][ T5951] usb 4-1: config 9 has an invalid interface number: 19 but max is 0 [ 332.455689][ T5951] usb 4-1: config 9 has an invalid descriptor of length 235, skipping remainder of the config [ 332.493457][ T5951] usb 4-1: config 9 has no interface number 0 [ 332.519783][ T5951] usb 4-1: config 9 interface 19 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 332.706011][ T5951] usb 4-1: config 9 interface 19 has no altsetting 0 [ 332.716978][ T5951] usb 4-1: New USB device found, idVendor=067b, idProduct=aaa2, bcdDevice=68.15 [ 332.726681][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.739551][ T5951] usb 4-1: Product: syz [ 332.743726][ T5951] usb 4-1: Manufacturer: syz [ 332.748333][ T5951] usb 4-1: SerialNumber: syz [ 332.857614][ T8530] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 332.921051][ T8530] netlink: 'syz.4.672': attribute type 9 has an invalid length. [ 332.928756][ T8530] netlink: 'syz.4.672': attribute type 7 has an invalid length. [ 332.936483][ T8530] netlink: 'syz.4.672': attribute type 8 has an invalid length. [ 333.060844][ T8531] Unsupported ieee802154 address type: 0 [ 333.089759][ T42] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 333.259585][ T42] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 333.329053][ T42] usb 2-1: config 0 has no interface number 0 [ 333.447176][ T5951] pl2303 4-1:9.19: required endpoints missing [ 333.465228][ T42] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.527055][ T5951] usb 4-1: USB disconnect, device number 13 [ 333.550160][ T42] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.636565][ T42] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 333.704851][ T42] usb 2-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 333.739948][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.760164][ T42] usb 2-1: config 0 descriptor?? [ 333.771373][ T8537] Unsupported ieee802154 address type: 0 [ 333.910947][ T8539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.670'. [ 334.016305][ T8539] 9pnet_fd: Insufficient options for proto=fd [ 334.441381][ T42] usbhid 2-1:0.1: can't add hid device: -71 [ 334.447422][ T42] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 334.472914][ T42] usb 2-1: USB disconnect, device number 14 [ 334.541342][ T30] audit: type=1326 audit(1749571832.460:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8534 comm="syz.4.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7398e929 code=0x7fc00000 [ 334.564539][ C1] vkms_vblank_simulate: vblank timer overrun [ 334.965711][ T8550] Unsupported ieee802154 address type: 0 [ 336.048418][ T8553] program syz.2.678 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 337.560190][ T8585] netlink: 4 bytes leftover after parsing attributes in process `syz.4.686'. [ 338.251958][ T8589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.689'. [ 338.367444][ T8589] 9pnet_fd: Insufficient options for proto=fd [ 338.736099][ T8599] program syz.2.692 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 339.374025][ T8600] program syz.4.691 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 339.602596][ T8601] [U]  [ 339.605400][ T8601] [U] K{ [ 339.608420][ T8601] [U] t 1ŠFfˊ`GJgo/mC [ 339.615360][ T8601] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 339.630896][ T8601] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 339.641314][ T8601] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 339.677017][ T8601] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 339.700540][ T8601] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 339.711836][ T8601] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 339.723377][ T8601] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 339.814136][ T8601] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 339.822648][ T8601] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 339.836198][ T8601] [U] 22Ʃx?0;3u [ 339.840358][ T8601] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 339.865269][ T8601] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 339.874545][ T8601] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 339.883121][ T8601] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 339.889273][ T8601] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 339.901584][ T8601] [U] ec [ 339.904691][ T8601] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 341.186597][ T8590] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 341.445615][ T8610] 9pnet_virtio: no channels available for device 127.0.0.1 [ 341.594303][ T8612] 9pnet_virtio: no channels available for device 127.0.0.1 [ 342.152895][ T8614] FAULT_INJECTION: forcing a failure. [ 342.152895][ T8614] name failslab, interval 1, probability 0, space 0, times 0 [ 342.220466][ T8614] CPU: 1 UID: 0 PID: 8614 Comm: syz.2.696 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(full) [ 342.220493][ T8614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 342.220503][ T8614] Call Trace: [ 342.220509][ T8614] [ 342.220517][ T8614] dump_stack_lvl+0x16c/0x1f0 [ 342.220549][ T8614] should_fail_ex+0x512/0x640 [ 342.220572][ T8614] ? fs_reclaim_acquire+0xae/0x150 [ 342.220591][ T8614] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 342.220615][ T8614] should_failslab+0xc2/0x120 [ 342.220639][ T8614] __kmalloc_noprof+0xd2/0x510 [ 342.220668][ T8614] tomoyo_realpath_from_path+0xc2/0x6e0 [ 342.220695][ T8614] ? tomoyo_profile+0x47/0x60 [ 342.220724][ T8614] tomoyo_path_number_perm+0x245/0x580 [ 342.220743][ T8614] ? tomoyo_path_number_perm+0x237/0x580 [ 342.220766][ T8614] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 342.220789][ T8614] ? find_held_lock+0x2b/0x80 [ 342.220840][ T8614] ? find_held_lock+0x2b/0x80 [ 342.220860][ T8614] ? hook_file_ioctl_common+0x145/0x410 [ 342.220884][ T8614] ? __fget_files+0x20e/0x3c0 [ 342.220915][ T8614] security_file_ioctl+0x9b/0x240 [ 342.220941][ T8614] __x64_sys_ioctl+0xb7/0x210 [ 342.220962][ T8614] do_syscall_64+0xcd/0x4c0 [ 342.220991][ T8614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.221010][ T8614] RIP: 0033:0x7f948318e929 [ 342.221023][ T8614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.221040][ T8614] RSP: 002b:00007f9483fcf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 342.221057][ T8614] RAX: ffffffffffffffda RBX: 00007f94833b5fa0 RCX: 00007f948318e929 [ 342.221068][ T8614] RDX: 00002000000002c0 RSI: 000000004040ae79 RDI: 0000000000000005 [ 342.221079][ T8614] RBP: 00007f9483fcf090 R08: 0000000000000000 R09: 0000000000000000 [ 342.221089][ T8614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.221099][ T8614] R13: 0000000000000000 R14: 00007f94833b5fa0 R15: 00007ffce3eb2408 [ 342.221124][ T8614] [ 342.221130][ T8614] ERROR: Out of memory at tomoyo_realpath_from_path. [ 342.579589][ T30] audit: type=1400 audit(1749571840.490:315): avc: denied { bind } for pid=8613 comm="syz.2.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 343.010298][ T8633] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 343.519621][ T8647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.705'. [ 344.331381][ T5951] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 344.546455][ T5951] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 344.570739][ T5951] usb 2-1: config 0 has no interface number 0 [ 344.590334][ T5951] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.625175][ T5951] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.663878][ T5951] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 344.708523][ T5951] usb 2-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 344.733387][ T5951] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.837175][ T5951] usb 2-1: config 0 descriptor?? [ 344.859335][ T30] audit: type=1326 audit(1749571842.770:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8648 comm="syz.0.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61c978e929 code=0x7fc00000 [ 345.403381][ T8652] 9pnet_fd: Insufficient options for proto=fd [ 345.412457][ T5951] usbhid 2-1:0.1: can't add hid device: -71 [ 345.421558][ T5951] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 345.433996][ T5951] usb 2-1: USB disconnect, device number 15 [ 345.786569][ T8673] overlay: Unknown parameter 'pcr' [ 346.229589][ T5905] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 346.240361][ T8675] program syz.3.713 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 346.471966][ T8683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.710'. [ 346.525759][ T30] audit: type=1400 audit(1749571844.400:317): avc: denied { write } for pid=8681 comm="syz.3.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 346.562798][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.583112][ T8686] 9pnet_fd: Insufficient options for proto=fd [ 346.592567][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.602324][ T5951] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 346.610040][ T5905] usb 1-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 346.619120][ T5905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.629362][ T5905] usb 1-1: config 0 descriptor?? [ 346.783204][ T5951] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 346.802844][ T5951] usb 5-1: config 0 has no interface number 0 [ 346.812360][ T5951] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.863231][ T5951] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.887601][ T5905] usbhid 1-1:0.0: can't add hid device: -71 [ 346.909867][ T5905] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 346.920934][ T5905] usb 1-1: USB disconnect, device number 12 [ 347.034920][ T5951] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 347.049414][ T5951] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 347.099578][ T5951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.214259][ T5951] usb 5-1: config 0 descriptor?? [ 348.021720][ T5951] input: HID 28bd:0042 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0042.0008/input/input30 [ 348.169575][ T5905] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 348.288245][ T8701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.717'. [ 348.494159][ T5905] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 348.502364][ T5905] usb 3-1: config 0 has no interface number 0 [ 348.509955][ T5905] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.546654][ T5905] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.569581][ T5905] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 348.714795][ T5905] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 348.795399][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.065639][ T5951] uclogic 0003:28BD:0042.0008: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.4-1/input1 [ 349.143260][ T5951] usb 5-1: USB disconnect, device number 17 [ 349.230449][ T5905] usb 3-1: config 0 descriptor?? [ 349.422870][ T8708] fido_id[8708]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 349.732120][ T5892] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 349.785849][ T8715] Unsupported ieee802154 address type: 0 [ 349.916840][ T5892] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 349.926147][ T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 350.011990][ T5892] usb 4-1: config 0 has no interface number 0 [ 350.060732][ T5892] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.120492][ T5905] input: HID 28bd:0042 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0042.0009/input/input31 [ 350.163918][ T5892] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.184487][ T5892] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 350.202035][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 350.230361][ T10] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 350.233638][ T5892] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 350.248588][ T5905] uclogic 0003:28BD:0042.0009: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.2-1/input1 [ 350.290010][ T30] audit: type=1400 audit(1749571848.200:318): avc: denied { name_bind } for pid=8718 comm="syz.0.724" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 350.290622][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 350.324651][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.358302][ T5905] usb 3-1: USB disconnect, device number 17 [ 350.367166][ T5892] usb 4-1: config 0 descriptor?? [ 350.416249][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 350.438509][ T8720] fido_id[8720]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 350.463215][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.515153][ T10] usb 2-1: Product: syz [ 350.522148][ T10] usb 2-1: Manufacturer: syz [ 350.537231][ T10] usb 2-1: SerialNumber: syz [ 350.889840][ T8727] program syz.4.725 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 351.436547][ T30] audit: type=1400 audit(1749571848.970:319): avc: denied { create } for pid=8721 comm="syz.0.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 351.457311][ T10] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 351.559018][ T10] usb 2-1: USB disconnect, device number 16 [ 351.569602][ T30] audit: type=1400 audit(1749571849.470:320): avc: denied { setopt } for pid=8721 comm="syz.0.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 351.626022][ T10] usblp0: removed [ 351.685956][ T5892] input: HID 28bd:0042 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0042.000A/input/input32 [ 351.794458][ T8735] overlay: Unknown parameter 'pcr' [ 352.055631][ T5892] uclogic 0003:28BD:0042.000A: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.3-1/input1 [ 352.100046][ T5827] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 352.178831][ T5892] usb 4-1: USB disconnect, device number 14 [ 352.338217][ T5827] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.368106][ T5827] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.458681][ T5827] usb 1-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 352.474123][ T8742] fido_id[8742]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 352.505607][ T5827] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.524661][ T5827] usb 1-1: config 0 descriptor?? [ 352.828929][ T5827] usbhid 1-1:0.0: can't add hid device: -71 [ 352.836420][ T5827] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 352.857129][ T5827] usb 1-1: USB disconnect, device number 13 [ 352.918947][ T8747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.729'. [ 353.016758][ T8749] 9pnet_fd: Insufficient options for proto=fd [ 353.932997][ T8762] program syz.4.734 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 354.187265][ T8768] netlink: 4 bytes leftover after parsing attributes in process `syz.0.733'. [ 355.191917][ T8775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 355.390887][ T30] audit: type=1400 audit(1749571853.020:321): avc: denied { setopt } for pid=8772 comm="syz.4.736" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 355.499675][ T5905] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 355.788989][ T5905] usb 1-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 64 [ 355.807082][ T5905] usb 1-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 355.822739][ T5905] usb 1-1: config 1 interface 0 has no altsetting 0 [ 355.831945][ T5905] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 355.841182][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.849262][ T5905] usb 1-1: Product: syz [ 355.854950][ T5905] usb 1-1: Manufacturer: syz [ 355.859778][ T5905] usb 1-1: SerialNumber: syz [ 355.873898][ T8771] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 355.929582][ T42] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 355.979589][ T5892] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 356.091435][ T42] usb 3-1: Using ep0 maxpacket: 16 [ 356.129843][ T5892] usb 4-1: Using ep0 maxpacket: 16 [ 356.164716][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 356.218578][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 356.239653][ T5892] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 356.239738][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.239800][ T5892] usb 4-1: Product: syz [ 356.239857][ T5892] usb 4-1: Manufacturer: syz [ 356.239906][ T5892] usb 4-1: SerialNumber: syz [ 356.300436][ T5892] usb 4-1: config 0 descriptor?? [ 356.354828][ T42] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 356.355212][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.355491][ T42] usb 3-1: Product: syz [ 356.355899][ T42] usb 3-1: Manufacturer: syz [ 356.356381][ T42] usb 3-1: SerialNumber: syz [ 356.433781][ T5892] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 356.434211][ T5892] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 356.470463][ T42] usb 3-1: config 0 descriptor?? [ 356.485287][ T42] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 356.485395][ T42] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 356.787877][ T8791] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.788901][ T8791] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.826539][ T8793] overlay: Unknown parameter 'pcr' [ 357.116390][ T5905] usb 1-1: USB disconnect, device number 14 [ 357.201472][ T5951] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 357.254742][ T42] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 357.333899][ T5892] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 357.362016][ T5951] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.373022][ T5951] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.382844][ T5951] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 357.392042][ T5951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.402753][ T5951] usb 5-1: config 0 descriptor?? [ 357.612820][ T5951] usbhid 5-1:0.0: can't add hid device: -71 [ 357.620170][ T5951] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 357.633902][ T5951] usb 5-1: USB disconnect, device number 18 [ 357.875559][ T42] em28xx 3-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 357.885115][ T42] em28xx 3-1:0.0: board has no eeprom [ 357.950006][ T42] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 357.963680][ T8802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.744'. [ 357.974974][ T42] em28xx 3-1:0.0: dvb set to bulk mode. [ 357.981124][ T5892] em28xx 4-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 358.022476][ T42] usb 3-1: USB disconnect, device number 18 [ 358.029957][ T5892] em28xx 4-1:0.0: board has no eeprom [ 358.040554][ T42] em28xx 3-1:0.0: Disconnecting em28xx [ 358.051859][ T5951] em28xx 3-1:0.0: Binding DVB extension [ 358.089914][ T5951] em28xx 3-1:0.0: Registering input extension [ 358.098046][ T42] em28xx 3-1:0.0: Closing input extension [ 358.117788][ T42] em28xx 3-1:0.0: Freeing device [ 358.139569][ T5892] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 358.171979][ T8804] 9pnet_fd: Insufficient options for proto=fd [ 358.180042][ T5892] em28xx 4-1:0.0: dvb set to bulk mode. [ 358.197437][ T5892] usb 4-1: USB disconnect, device number 15 [ 358.224729][ T5892] em28xx 4-1:0.0: Disconnecting em28xx [ 358.230566][ T5951] em28xx 4-1:0.0: Binding DVB extension [ 358.549224][ T8811] netlink: 'syz.1.746': attribute type 10 has an invalid length. [ 358.561911][ T8811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 358.688365][ T5951] em28xx 4-1:0.0: Registering input extension [ 358.793206][ T5892] em28xx 4-1:0.0: Closing input extension [ 358.835415][ T5892] em28xx 4-1:0.0: Freeing device [ 359.194587][ T8819] 9pnet_virtio: no channels available for device 127.0.0.1 [ 359.519755][ T5905] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 359.590348][ T30] audit: type=1400 audit(1749571857.470:322): avc: denied { write } for pid=8826 comm="syz.2.752" name="sg0" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 359.613770][ C0] vkms_vblank_simulate: vblank timer overrun [ 359.763712][ T5905] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 359.889546][ T5892] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 359.921742][ T5905] usb 2-1: config 0 has no interface number 0 [ 359.928646][ T5905] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.944105][ T5905] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.954017][ T5905] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 359.967073][ T5905] usb 2-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 359.976291][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.063367][ T5892] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 360.094172][ T5892] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 360.133509][ T5892] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 360.144619][ T5905] usb 2-1: config 0 descriptor?? [ 360.306974][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.333968][ T8823] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 360.405674][ T5892] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 360.759201][ T8825] 9pnet_fd: Insufficient options for proto=fd [ 360.783684][ T5905] usbhid 2-1:0.1: can't add hid device: -71 [ 360.809959][ T5905] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 360.859664][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 360.887676][ T5905] usb 2-1: USB disconnect, device number 17 [ 360.970104][ T5892] usb 1-1: USB disconnect, device number 15 [ 360.983319][ T5835] udevd[5835]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 361.019691][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 361.039752][ T10] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 361.039778][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 361.039793][ T10] usb 4-1: config 0 has no interfaces? [ 361.059690][ T10] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 361.059719][ T10] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 361.059739][ T10] usb 4-1: Product: syz [ 361.059752][ T10] usb 4-1: Manufacturer: syz [ 361.059765][ T10] usb 4-1: SerialNumber: syz [ 361.073272][ T10] usb 4-1: config 0 descriptor?? [ 361.438578][ T42] usb 4-1: USB disconnect, device number 16 [ 362.331179][ T2022] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 362.599638][ T2022] usb 5-1: Using ep0 maxpacket: 16 [ 362.615581][ T2022] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 362.628347][ T2022] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 362.637544][ T2022] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.646722][ T2022] usb 5-1: Product: syz [ 362.651852][ T2022] usb 5-1: Manufacturer: syz [ 362.662440][ T2022] usb 5-1: SerialNumber: syz [ 362.953858][ T2022] usb 5-1: config 0 descriptor?? [ 362.981063][ T2022] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 363.019543][ T2022] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 363.162477][ T8873] [U]  [ 363.165284][ T8873] [U] K{ [ 363.168305][ T8873] [U] t 1ŠFfˊ`GJgo/mC [ 363.175245][ T8873] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 363.190784][ T8873] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 363.201203][ T8873] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 363.236824][ T8873] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 363.260349][ T8873] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 363.271454][ T8873] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 363.282992][ T8873] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 363.375416][ T8873] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 363.383912][ T8873] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 363.397441][ T8873] [U] 22Ʃx?0;3u [ 363.401595][ T8873] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 363.426506][ T8873] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 363.435784][ T8873] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 363.444362][ T8873] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 363.450508][ T8873] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 363.462815][ T8873] [U] ec [ 363.465918][ T8873] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 363.708045][ T30] audit: type=1400 audit(1749571861.580:323): avc: denied { read } for pid=8866 comm="syz.2.763" name="mice" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 363.830358][ T30] audit: type=1400 audit(1749571861.580:324): avc: denied { open } for pid=8866 comm="syz.2.763" path="/dev/input/mice" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 363.857068][ T8874] process 'syz.2.763' launched './file0' with NULL argv: empty string added [ 363.971393][ T8873] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 364.597508][ T2022] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 364.621382][ T30] audit: type=1326 audit(1749571862.540:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8875 comm="syz.1.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bdb98e929 code=0x7fc00000 [ 364.765129][ T8890] netlink: 24 bytes leftover after parsing attributes in process `syz.1.769'. [ 364.794459][ T8890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.769'. [ 364.868575][ T8892] program syz.3.766 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 365.151248][ T8897] netlink: 4 bytes leftover after parsing attributes in process `syz.0.768'. [ 365.302765][ T8900] 9pnet_fd: Insufficient options for proto=fd [ 365.341012][ T2022] em28xx 5-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 365.430520][ T2022] em28xx 5-1:0.0: board has no eeprom [ 365.616589][ T2022] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 365.654447][ T2022] em28xx 5-1:0.0: dvb set to bulk mode. [ 365.676969][ T5905] em28xx 5-1:0.0: Binding DVB extension [ 365.691805][ T2022] usb 5-1: USB disconnect, device number 19 [ 365.720838][ T2022] em28xx 5-1:0.0: Disconnecting em28xx [ 365.846735][ T5905] em28xx 5-1:0.0: Registering input extension [ 365.876558][ T2022] em28xx 5-1:0.0: Closing input extension [ 366.034764][ T2022] em28xx 5-1:0.0: Freeing device [ 367.957026][ T8918] : renamed from syz_tun (while UP) [ 368.064758][ T8922] netlink: 28 bytes leftover after parsing attributes in process `syz.0.779'. [ 368.391049][ T8931] program syz.1.780 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 368.529099][ T8940] netlink: 20 bytes leftover after parsing attributes in process `syz.2.784'. [ 369.000338][ T5827] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 369.115652][ T30] audit: type=1400 audit(1749571867.030:326): avc: denied { read } for pid=8949 comm="syz.0.785" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 369.265774][ T30] audit: type=1400 audit(1749571867.030:327): avc: denied { open } for pid=8949 comm="syz.0.785" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 369.372741][ T8955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.785'. [ 369.381737][ T8955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.785'. [ 369.390671][ T8955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.785'. [ 369.399596][ T8955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.785'. [ 369.408499][ T8955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.785'. [ 369.780999][ T5827] usb 2-1: Using ep0 maxpacket: 16 [ 369.807078][ T5827] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 369.838888][ T8954] __nla_validate_parse: 47 callbacks suppressed [ 369.838904][ T8954] netlink: 256 bytes leftover after parsing attributes in process `syz.2.786'. [ 369.849193][ T5827] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 369.872331][ T5827] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.880886][ T5827] usb 2-1: Product: syz [ 369.881973][ T30] audit: type=1400 audit(1749571867.780:328): avc: denied { write } for pid=8958 comm="syz.3.788" name="mice" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 369.887415][ T5827] usb 2-1: Manufacturer: syz [ 369.914683][ T5827] usb 2-1: SerialNumber: syz [ 369.939619][ T30] audit: type=1400 audit(1749571867.830:329): avc: denied { ioctl } for pid=8958 comm="syz.3.788" path="/dev/input/mice" dev="devtmpfs" ino=917 ioctlcmd=0x6610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 369.959824][ T5827] usb 2-1: config 0 descriptor?? [ 370.035530][ T5827] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 370.080805][ T5822] Bluetooth: hci3: command 0x0405 tx timeout [ 370.099609][ T30] audit: type=1400 audit(1749571867.920:330): avc: denied { block_suspend } for pid=8956 comm="syz.4.787" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 370.132143][ T5827] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 370.423596][ T8964] netlink: 52 bytes leftover after parsing attributes in process `syz.3.790'. [ 370.486923][ T8968] FAULT_INJECTION: forcing a failure. [ 370.486923][ T8968] name failslab, interval 1, probability 0, space 0, times 0 [ 370.517541][ T30] audit: type=1400 audit(1749571868.430:331): avc: denied { bind } for pid=8956 comm="syz.4.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 370.539638][ T8968] CPU: 0 UID: 0 PID: 8968 Comm: syz.0.791 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(full) [ 370.539669][ T8968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 370.539679][ T8968] Call Trace: [ 370.539685][ T8968] [ 370.539692][ T8968] dump_stack_lvl+0x16c/0x1f0 [ 370.539727][ T8968] should_fail_ex+0x512/0x640 [ 370.539750][ T8968] ? __kmalloc_node_noprof+0xc5/0x500 [ 370.539777][ T8968] should_failslab+0xc2/0x120 [ 370.539802][ T8968] __kmalloc_node_noprof+0xd8/0x500 [ 370.539825][ T8968] ? qdisc_alloc+0xbb/0xc50 [ 370.539856][ T8968] qdisc_alloc+0xbb/0xc50 [ 370.539882][ T8968] ? trace_kmalloc+0x2b/0xd0 [ 370.539911][ T8968] qdisc_create_dflt+0x94/0x490 [ 370.539940][ T8968] taprio_init+0x48f/0x910 [ 370.539970][ T8968] ? __pfx_taprio_init+0x10/0x10 [ 370.539996][ T8968] ? __pfx_taprio_init+0x10/0x10 [ 370.540019][ T8968] qdisc_create+0x457/0xfc0 [ 370.540046][ T8968] tc_modify_qdisc+0x12bb/0x2130 [ 370.540075][ T8968] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 370.540121][ T8968] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 370.540144][ T8968] rtnetlink_rcv_msg+0x3c9/0xe90 [ 370.540174][ T8968] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 370.540209][ T8968] ? ref_tracker_free+0x37c/0x830 [ 370.540237][ T8968] netlink_rcv_skb+0x155/0x420 [ 370.540257][ T8968] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 370.540285][ T8968] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 370.540314][ T8968] ? netlink_deliver_tap+0x1ae/0xd30 [ 370.540337][ T8968] netlink_unicast+0x53d/0x7f0 [ 370.540359][ T8968] ? __pfx_netlink_unicast+0x10/0x10 [ 370.540386][ T8968] netlink_sendmsg+0x8d1/0xdd0 [ 370.540410][ T8968] ? __pfx_netlink_sendmsg+0x10/0x10 [ 370.540439][ T8968] ____sys_sendmsg+0xa98/0xc70 [ 370.540459][ T8968] ? copy_msghdr_from_user+0x10a/0x160 [ 370.540484][ T8968] ? __pfx_____sys_sendmsg+0x10/0x10 [ 370.540516][ T8968] ___sys_sendmsg+0x134/0x1d0 [ 370.540544][ T8968] ? __pfx____sys_sendmsg+0x10/0x10 [ 370.540567][ T8968] ? __lock_acquire+0x622/0x1c90 [ 370.540628][ T8968] __sys_sendmsg+0x16d/0x220 [ 370.540655][ T8968] ? __pfx___sys_sendmsg+0x10/0x10 [ 370.540714][ T8968] do_syscall_64+0xcd/0x4c0 [ 370.540742][ T8968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.540760][ T8968] RIP: 0033:0x7f61c978e929 [ 370.540774][ T8968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.540791][ T8968] RSP: 002b:00007f61ca624038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 370.540809][ T8968] RAX: ffffffffffffffda RBX: 00007f61c99b5fa0 RCX: 00007f61c978e929 [ 370.540820][ T8968] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000004 [ 370.540830][ T8968] RBP: 00007f61ca624090 R08: 0000000000000000 R09: 0000000000000000 [ 370.540845][ T8968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.540855][ T8968] R13: 0000000000000000 R14: 00007f61c99b5fa0 R15: 00007ffe9f44dd48 [ 370.540892][ T8968] [ 370.872984][ T5827] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 371.099549][ T2022] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 371.354135][ T8980] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 371.397407][ T8980] netlink: 'syz.0.793': attribute type 9 has an invalid length. [ 371.405128][ T8980] netlink: 'syz.0.793': attribute type 7 has an invalid length. [ 371.412806][ T8980] netlink: 'syz.0.793': attribute type 8 has an invalid length. [ 371.591386][ T2022] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 371.612654][ T2022] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 371.643602][ T2022] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 371.646311][ T8983] program syz.4.794 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 371.656986][ T2022] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.694960][ T2022] usb 3-1: Product: syz [ 371.700512][ T2022] usb 3-1: Manufacturer: syz [ 371.705192][ T2022] usb 3-1: SerialNumber: syz [ 371.783283][ T5827] em28xx 2-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 371.798301][ T5827] em28xx 2-1:0.0: board has no eeprom [ 371.907951][ T5827] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 371.918703][ T5827] em28xx 2-1:0.0: dvb set to bulk mode. [ 371.930798][ T5905] em28xx 2-1:0.0: Binding DVB extension [ 371.945620][ T5827] usb 2-1: USB disconnect, device number 18 [ 371.953360][ T5827] em28xx 2-1:0.0: Disconnecting em28xx [ 372.111149][ T5951] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 372.160957][ T5905] em28xx 2-1:0.0: Registering input extension [ 372.168279][ T5827] em28xx 2-1:0.0: Closing input extension [ 372.182937][ T5827] em28xx 2-1:0.0: Freeing device [ 372.209984][ T2022] usb 3-1: cannot find UAC_HEADER [ 372.451150][ T2022] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 372.576247][ T2022] usb 3-1: USB disconnect, device number 19 [ 372.729591][ T5951] usb 4-1: Using ep0 maxpacket: 8 [ 372.744517][ T5951] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 372.766605][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.767019][ T5835] udevd[5835]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 372.789451][ T5951] usb 4-1: Product: syz [ 372.795651][ T5951] usb 4-1: Manufacturer: syz [ 372.801867][ T5951] usb 4-1: SerialNumber: syz [ 372.837146][ T5951] usb 4-1: config 0 descriptor?? [ 373.068470][ T5951] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 373.192968][ T8999] Unsupported ieee802154 address type: 0 [ 373.196860][ T9000] FAULT_INJECTION: forcing a failure. [ 373.196860][ T9000] name failslab, interval 1, probability 0, space 0, times 0 [ 373.240670][ T9000] CPU: 0 UID: 0 PID: 9000 Comm: syz.2.799 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(full) [ 373.240697][ T9000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 373.240708][ T9000] Call Trace: [ 373.240714][ T9000] [ 373.240722][ T9000] dump_stack_lvl+0x16c/0x1f0 [ 373.240759][ T9000] should_fail_ex+0x512/0x640 [ 373.240787][ T9000] should_failslab+0xc2/0x120 [ 373.240813][ T9000] __kmalloc_cache_noprof+0x6a/0x3e0 [ 373.240832][ T9000] ? __pfx___might_resched+0x10/0x10 [ 373.240854][ T9000] ? __hw_addr_add_ex+0x3c9/0x7c0 [ 373.240878][ T9000] __hw_addr_add_ex+0x3c9/0x7c0 [ 373.240903][ T9000] ? __pfx___hw_addr_add_ex+0x10/0x10 [ 373.240923][ T9000] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 373.240955][ T9000] ? __pfx_vlan_setup+0x10/0x10 [ 373.240976][ T9000] dev_addr_init+0x161/0x250 [ 373.241000][ T9000] ? __pfx_dev_addr_init+0x10/0x10 [ 373.241031][ T9000] alloc_netdev_mqs+0x3d2/0x1570 [ 373.241065][ T9000] rtnl_create_link+0xc08/0xf90 [ 373.241095][ T9000] rtnl_newlink+0xb69/0x2000 [ 373.241130][ T9000] ? __pfx_rtnl_newlink+0x10/0x10 [ 373.241154][ T9000] ? find_held_lock+0x2b/0x80 [ 373.241177][ T9000] ? avc_has_perm_noaudit+0x117/0x3b0 [ 373.241199][ T9000] ? avc_has_perm_noaudit+0x149/0x3b0 [ 373.241220][ T9000] ? cred_has_capability.isra.0+0x193/0x2f0 [ 373.241272][ T9000] ? find_held_lock+0x2b/0x80 [ 373.241292][ T9000] ? __pfx_rtnl_newlink+0x10/0x10 [ 373.241317][ T9000] ? __pfx_rtnl_newlink+0x10/0x10 [ 373.241341][ T9000] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 373.241369][ T9000] ? __pfx_rtnl_newlink+0x10/0x10 [ 373.241396][ T9000] rtnetlink_rcv_msg+0x95b/0xe90 [ 373.241426][ T9000] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 373.241463][ T9000] ? ref_tracker_free+0x37c/0x830 [ 373.241493][ T9000] netlink_rcv_skb+0x155/0x420 [ 373.241512][ T9000] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 373.241541][ T9000] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 373.241574][ T9000] ? netlink_deliver_tap+0x1ae/0xd30 [ 373.241600][ T9000] netlink_unicast+0x53d/0x7f0 [ 373.241624][ T9000] ? __pfx_netlink_unicast+0x10/0x10 [ 373.241652][ T9000] netlink_sendmsg+0x8d1/0xdd0 [ 373.241678][ T9000] ? __pfx_netlink_sendmsg+0x10/0x10 [ 373.241711][ T9000] ____sys_sendmsg+0xa98/0xc70 [ 373.241733][ T9000] ? copy_msghdr_from_user+0x10a/0x160 [ 373.241759][ T9000] ? __pfx_____sys_sendmsg+0x10/0x10 [ 373.241794][ T9000] ___sys_sendmsg+0x134/0x1d0 [ 373.241822][ T9000] ? __pfx____sys_sendmsg+0x10/0x10 [ 373.241845][ T9000] ? __lock_acquire+0x622/0x1c90 [ 373.241914][ T9000] __sys_sendmsg+0x16d/0x220 [ 373.241940][ T9000] ? __pfx___sys_sendmsg+0x10/0x10 [ 373.241989][ T9000] do_syscall_64+0xcd/0x4c0 [ 373.242019][ T9000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.242037][ T9000] RIP: 0033:0x7f948318e929 [ 373.242051][ T9000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.242067][ T9000] RSP: 002b:00007f9483fcf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 373.242084][ T9000] RAX: ffffffffffffffda RBX: 00007f94833b5fa0 RCX: 00007f948318e929 [ 373.242096][ T9000] RDX: 0000000000000002 RSI: 0000200000000280 RDI: 0000000000000003 [ 373.242106][ T9000] RBP: 00007f9483fcf090 R08: 0000000000000000 R09: 0000000000000000 [ 373.242117][ T9000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.242127][ T9000] R13: 0000000000000000 R14: 00007f94833b5fa0 R15: 00007ffce3eb2408 [ 373.242154][ T9000] [ 373.584309][ T5906] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 373.631137][ T9004] Bluetooth: MGMT ver 1.23 [ 373.940321][ T5906] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 373.952985][ T8986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.075402][ T8986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.101222][ T5906] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 374.129137][ T5906] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 374.143214][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.154598][ T8994] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 374.165291][ T5906] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 374.184424][ T9009] netlink: 52 bytes leftover after parsing attributes in process `syz.1.803'. [ 374.508915][ T10] usb 1-1: USB disconnect, device number 16 [ 376.541612][ T5951] usb write operation failed. (-71) [ 376.556125][ T5951] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 376.599012][ T5951] dvbdev: DVB: registering new adapter (Terratec H7) [ 376.618274][ T5951] usb 4-1: media controller created [ 376.637543][ T5951] usb read operation failed. (-71) [ 376.657227][ T5951] usb write operation failed. (-71) [ 376.662138][ T9026] FAULT_INJECTION: forcing a failure. [ 376.662138][ T9026] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 376.678118][ T5951] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 376.680207][ T9026] CPU: 0 UID: 0 PID: 9026 Comm: syz.3.808 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(full) [ 376.680235][ T9026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 376.680243][ T9026] Call Trace: [ 376.680249][ T9026] [ 376.680255][ T9026] dump_stack_lvl+0x16c/0x1f0 [ 376.680282][ T9026] should_fail_ex+0x512/0x640 [ 376.680308][ T9026] _copy_to_user+0x32/0xd0 [ 376.680332][ T9026] simple_read_from_buffer+0xcb/0x170 [ 376.680353][ T9026] proc_fail_nth_read+0x197/0x270 [ 376.680373][ T9026] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 376.680394][ T9026] ? rw_verify_area+0xcf/0x680 [ 376.680411][ T9026] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 376.680430][ T9026] vfs_read+0x1e1/0xc60 [ 376.680451][ T9026] ? __pfx___mutex_lock+0x10/0x10 [ 376.680474][ T9026] ? __pfx_vfs_read+0x10/0x10 [ 376.680499][ T9026] ? __fget_files+0x20e/0x3c0 [ 376.680526][ T9026] ksys_read+0x12a/0x250 [ 376.680544][ T9026] ? __pfx_ksys_read+0x10/0x10 [ 376.680569][ T9026] do_syscall_64+0xcd/0x4c0 [ 376.680594][ T9026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.680610][ T9026] RIP: 0033:0x7fa145b8d33c [ 376.680623][ T9026] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 376.680637][ T9026] RSP: 002b:00007fa146a5e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 376.680652][ T9026] RAX: ffffffffffffffda RBX: 00007fa145db5fa0 RCX: 00007fa145b8d33c [ 376.680662][ T9026] RDX: 000000000000000f RSI: 00007fa146a5e0a0 RDI: 0000000000000010 [ 376.680671][ T9026] RBP: 00007fa146a5e090 R08: 0000000000000000 R09: 0000000000000000 [ 376.680680][ T9026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.680689][ T9026] R13: 0000000000000000 R14: 00007fa145db5fa0 R15: 00007ffcd4d38338 [ 376.680711][ T9026] [ 376.904468][ T5951] usb 4-1: USB disconnect, device number 17 [ 377.176106][ T9034] FAULT_INJECTION: forcing a failure. [ 377.176106][ T9034] name failslab, interval 1, probability 0, space 0, times 0 [ 377.259648][ T9034] CPU: 1 UID: 0 PID: 9034 Comm: syz.0.811 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(full) [ 377.259676][ T9034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 377.259686][ T9034] Call Trace: [ 377.259691][ T9034] [ 377.259698][ T9034] dump_stack_lvl+0x16c/0x1f0 [ 377.259727][ T9034] should_fail_ex+0x512/0x640 [ 377.259751][ T9034] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 377.259774][ T9034] should_failslab+0xc2/0x120 [ 377.259798][ T9034] __kmalloc_cache_noprof+0x6a/0x3e0 [ 377.259817][ T9034] ? __pfx___might_resched+0x10/0x10 [ 377.259839][ T9034] ? vhost_task_create+0xe5/0x2e0 [ 377.259856][ T9034] ? rcu_is_watching+0x12/0xc0 [ 377.259876][ T9034] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 377.259901][ T9034] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 377.259930][ T9034] vhost_task_create+0xe5/0x2e0 [ 377.259945][ T9034] ? __pfx_vhost_task_create+0x10/0x10 [ 377.259970][ T9034] ? __pfx_vhost_task_fn+0x10/0x10 [ 377.260000][ T9034] kvm_mmu_post_init_vm+0x1b7/0x370 [ 377.260024][ T9034] kvm_arch_vcpu_ioctl_run+0x66/0x18c0 [ 377.260045][ T9034] ? kvm_vcpu_ioctl+0x14c6/0x1690 [ 377.260070][ T9034] kvm_vcpu_ioctl+0x5eb/0x1690 [ 377.260093][ T9034] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 377.260124][ T9034] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 377.260152][ T9034] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 377.260184][ T9034] ? hook_file_ioctl_common+0x145/0x410 [ 377.260209][ T9034] ? selinux_file_ioctl+0x180/0x270 [ 377.260237][ T9034] ? selinux_file_ioctl+0xb4/0x270 [ 377.260262][ T9034] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 377.260284][ T9034] __x64_sys_ioctl+0x18e/0x210 [ 377.260307][ T9034] do_syscall_64+0xcd/0x4c0 [ 377.260335][ T9034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.260352][ T9034] RIP: 0033:0x7f61c978e929 [ 377.260366][ T9034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.260382][ T9034] RSP: 002b:00007f61ca624038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 377.260399][ T9034] RAX: ffffffffffffffda RBX: 00007f61c99b5fa0 RCX: 00007f61c978e929 [ 377.260410][ T9034] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 377.260419][ T9034] RBP: 00007f61ca624090 R08: 0000000000000000 R09: 0000000000000000 [ 377.260429][ T9034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.260439][ T9034] R13: 0000000000000000 R14: 00007f61c99b5fa0 R15: 00007ffe9f44dd48 [ 377.260464][ T9034] [ 377.805928][ T9051] overlayfs: failed to resolve './file0': -2 [ 377.823314][ T9051] netlink: 'syz.4.814': attribute type 9 has an invalid length. [ 377.831039][ T9051] netlink: 'syz.4.814': attribute type 7 has an invalid length. [ 377.838669][ T9051] netlink: 'syz.4.814': attribute type 8 has an invalid length. [ 377.868899][ T9036] program syz.3.810 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 378.241875][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.248184][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.644891][ T30] audit: type=1400 audit(1749571876.510:332): avc: denied { map } for pid=9058 comm="syz.0.817" path="socket:[21644]" dev="sockfs" ino=21644 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 378.756007][ T9064] nfs4: Unknown parameter 'noac' [ 379.129669][ T30] audit: type=1400 audit(1749571876.650:333): avc: denied { read write } for pid=9054 comm="syz.2.816" name="uhid" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 379.231584][ T30] audit: type=1400 audit(1749571876.650:334): avc: denied { open } for pid=9054 comm="syz.2.816" path="/dev/uhid" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 379.323434][ T9069] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 379.840015][ T5951] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 380.119539][ T5951] usb 1-1: Using ep0 maxpacket: 8 [ 381.028267][ T5951] usb 1-1: config 8 has an invalid interface number: 114 but max is 0 [ 381.038914][ T5951] usb 1-1: config 8 has no interface number 0 [ 381.048807][ T5951] usb 1-1: New USB device found, idVendor=5ad8, idProduct=4291, bcdDevice=d8.6f [ 381.180245][ T5951] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.212100][ T5951] usb 1-1: Product: syz [ 381.645393][ T30] audit: type=1400 audit(1749571879.210:335): avc: denied { map } for pid=9094 comm="syz.4.826" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 381.806785][ T30] audit: type=1400 audit(1749571879.210:336): avc: denied { execute } for pid=9094 comm="syz.4.826" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 381.808772][ T5951] usb 1-1: Manufacturer: syz [ 381.858133][ T30] audit: type=1400 audit(1749571879.760:337): avc: denied { ioctl } for pid=9099 comm="syz.4.828" path="socket:[22934]" dev="sockfs" ino=22934 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 382.050343][ T5951] usb 1-1: SerialNumber: syz [ 382.051276][ T30] audit: type=1400 audit(1749571879.760:338): avc: denied { write } for pid=9099 comm="syz.4.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 382.081655][ T9104] Unsupported ieee802154 address type: 0 [ 382.179852][ T24] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 382.495384][ T30] audit: type=1400 audit(1749571880.410:339): avc: denied { setopt } for pid=9105 comm="syz.4.830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 382.602850][ T5951] usb 1-1: USB disconnect, device number 17 [ 382.653956][ T30] audit: type=1400 audit(1749571880.440:340): avc: denied { write } for pid=9105 comm="syz.4.830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 382.705210][ T30] audit: type=1400 audit(1749571880.440:341): avc: denied { link } for pid=9105 comm="syz.4.830" name="file1" dev="overlay" ino=991 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 382.753616][ T24] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 382.799287][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 382.954946][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 382.968250][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 382.977363][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.985447][ T24] usb 3-1: Product: syz [ 382.992042][ T24] usb 3-1: Manufacturer: syz [ 382.996692][ T24] usb 3-1: SerialNumber: syz [ 383.465924][ T9121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.835'. [ 383.476575][ T9121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.835'. [ 383.487123][ T9121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.835'. [ 383.497461][ T9121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.835'. [ 383.533046][ T9121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.835'. [ 383.546835][ T9121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.835'. [ 383.557058][ T9121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.835'. [ 383.587216][ T9121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.835'. [ 383.646254][ T9121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.835'. [ 383.656893][ T9121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.835'. [ 383.681409][ T5951] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 383.879603][ T5951] usb 5-1: Using ep0 maxpacket: 32 [ 383.892446][ T5951] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 383.936313][ T9124] SELinux: Context system_u:object_r:fsadm_ex is not valid (left unmapped). [ 383.970489][ T30] audit: type=1400 audit(1749571881.870:342): avc: denied { relabelto } for pid=9122 comm="syz.2.837" name="157" dev="tmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_ex" [ 384.159790][ T5951] usb 5-1: config 0 has no interface number 0 [ 384.165932][ T5951] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 384.177334][ T24] usb 3-1: 0:2 : does not exist [ 384.309980][ T5951] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 384.312015][ T30] audit: type=1400 audit(1749571881.870:343): avc: denied { associate } for pid=9122 comm="syz.2.837" name="157" dev="tmpfs" ino=919 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_ex" [ 384.361155][ T24] usb 3-1: USB disconnect, device number 20 [ 384.389624][ T5951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.525421][ T5951] usb 5-1: Product: syz [ 384.534422][ T5951] usb 5-1: Manufacturer: syz [ 384.539036][ T5951] usb 5-1: SerialNumber: syz [ 384.566822][ T5951] usb 5-1: config 0 descriptor?? [ 384.635052][ T9133] FAULT_INJECTION: forcing a failure. [ 384.635052][ T9133] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 384.648278][ T9133] CPU: 1 UID: 0 PID: 9133 Comm: syz.1.838 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(full) [ 384.648302][ T9133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 384.648312][ T9133] Call Trace: [ 384.648318][ T9133] [ 384.648325][ T9133] dump_stack_lvl+0x16c/0x1f0 [ 384.648361][ T9133] should_fail_ex+0x512/0x640 [ 384.648389][ T9133] _copy_from_user+0x2e/0xd0 [ 384.648416][ T9133] copy_msghdr_from_user+0x98/0x160 [ 384.648442][ T9133] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 384.648473][ T9133] ? lock_acquire+0x179/0x350 [ 384.648505][ T9133] ___sys_sendmsg+0xfe/0x1d0 [ 384.648531][ T9133] ? __pfx____sys_sendmsg+0x10/0x10 [ 384.648570][ T9133] ? find_held_lock+0x2b/0x80 [ 384.648608][ T9133] __sys_sendmmsg+0x200/0x420 [ 384.648636][ T9133] ? __pfx___sys_sendmmsg+0x10/0x10 [ 384.648683][ T9133] ? fput+0x70/0xf0 [ 384.648698][ T9133] ? ksys_write+0x1ac/0x250 [ 384.648726][ T9133] __x64_sys_sendmmsg+0x9c/0x100 [ 384.648751][ T9133] ? lockdep_hardirqs_on+0x7c/0x110 [ 384.648776][ T9133] do_syscall_64+0xcd/0x4c0 [ 384.648804][ T9133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.648822][ T9133] RIP: 0033:0x7f7bdb98e929 [ 384.648836][ T9133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.648852][ T9133] RSP: 002b:00007f7bdc7fc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 384.648869][ T9133] RAX: ffffffffffffffda RBX: 00007f7bdbbb6160 RCX: 00007f7bdb98e929 [ 384.648881][ T9133] RDX: 0400000000000172 RSI: 0000200000003cc0 RDI: 0000000000000007 [ 384.648891][ T9133] RBP: 00007f7bdc7fc090 R08: 0000000000000000 R09: 0000000000000000 [ 384.648902][ T9133] R10: 0000000004001c00 R11: 0000000000000246 R12: 0000000000000001 [ 384.648912][ T9133] R13: 0000000000000000 R14: 00007f7bdbbb6160 R15: 00007ffdb401e458 [ 384.648937][ T9133] [ 384.802786][ T5835] udevd[5835]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 384.857479][ T5951] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 384.867448][ T5951] em28xx 5-1:0.132: Video interface 132 found: [ 384.894057][ T30] audit: type=1400 audit(1749571882.800:344): avc: denied { remove_name } for pid=5821 comm="syz-executor" name="binderfs" dev="tmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_ex" [ 384.942408][ T30] audit: type=1400 audit(1749571882.800:345): avc: denied { rmdir } for pid=5821 comm="syz-executor" name="157" dev="tmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_ex" [ 385.310869][ T9142] 9pnet_virtio: no channels available for device 127.0.0.1 [ 385.433017][ T5951] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 385.761314][ T30] audit: type=1400 audit(1749571883.640:346): avc: denied { create } for pid=9144 comm="syz.1.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 385.980197][ T5951] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 386.001942][ T24] hid-generic 00A0:0008:0003.000B: unknown main item tag 0x0 [ 386.094807][ T9159] FAULT_INJECTION: forcing a failure. [ 386.094807][ T9159] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 386.118597][ T5951] em28xx 5-1:0.132: board has no eeprom [ 386.127976][ T24] hid-generic 00A0:0008:0003.000B: unknown main item tag 0x0 [ 386.135470][ T9159] CPU: 0 UID: 0 PID: 9159 Comm: syz.3.846 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(full) [ 386.135496][ T9159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 386.135506][ T9159] Call Trace: [ 386.135512][ T9159] [ 386.135518][ T9159] dump_stack_lvl+0x16c/0x1f0 [ 386.135549][ T9159] should_fail_ex+0x512/0x640 [ 386.135576][ T9159] _copy_from_user+0x2e/0xd0 [ 386.135601][ T9159] copy_msghdr_from_user+0x98/0x160 [ 386.135624][ T9159] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 386.135657][ T9159] ___sys_sendmsg+0xfe/0x1d0 [ 386.135681][ T9159] ? __pfx____sys_sendmsg+0x10/0x10 [ 386.135701][ T9159] ? __lock_acquire+0x622/0x1c90 [ 386.135752][ T9159] __sys_sendmsg+0x16d/0x220 [ 386.135775][ T9159] ? __pfx___sys_sendmsg+0x10/0x10 [ 386.135812][ T9159] do_syscall_64+0xcd/0x4c0 [ 386.135837][ T9159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.135853][ T9159] RIP: 0033:0x7fa145b8e929 [ 386.135865][ T9159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 386.135880][ T9159] RSP: 002b:00007fa146a5e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 386.135895][ T9159] RAX: ffffffffffffffda RBX: 00007fa145db5fa0 RCX: 00007fa145b8e929 [ 386.135905][ T9159] RDX: 0000000000040810 RSI: 0000200000000140 RDI: 0000000000000003 [ 386.135914][ T9159] RBP: 00007fa146a5e090 R08: 0000000000000000 R09: 0000000000000000 [ 386.135923][ T9159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.135932][ T9159] R13: 0000000000000000 R14: 00007fa145db5fa0 R15: 00007ffcd4d38338 [ 386.135954][ T9159] [ 386.301183][ T30] audit: type=1400 audit(1749571883.640:347): avc: denied { ioctl } for pid=9144 comm="syz.1.843" path="socket:[21755]" dev="sockfs" ino=21755 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 386.359801][ T30] audit: type=1400 audit(1749571884.010:348): avc: denied { create } for pid=9157 comm="syz.3.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 386.450299][ T5951] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 386.489961][ T9165] netlink: 'syz.2.847': attribute type 10 has an invalid length. [ 386.509593][ T5951] em28xx 5-1:0.132: analog set to bulk mode. [ 386.615646][ T5906] em28xx 5-1:0.132: Registering V4L2 extension [ 386.747757][ T5906] em28xx 5-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 386.816286][ T5951] usb 5-1: USB disconnect, device number 20 [ 386.826340][ T9165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.988607][ T2022] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 386.998010][ T5906] em28xx 5-1:0.132: failed to trigger read from i2c address 0x48 (error=-19) [ 387.014161][ T5951] em28xx 5-1:0.132: Disconnecting em28xx [ 387.337220][ T30] audit: type=1326 audit(1749571885.250:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9163 comm="syz.3.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa145b8e929 code=0x7fc00000 [ 387.366749][ T2022] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 387.381348][ T2022] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 387.435638][ T2022] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 387.440809][ T24] hid-generic 00A0:0008:0003.000B: unknown main item tag 0x0 [ 387.493340][ T2022] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.514867][ T24] hid-generic 00A0:0008:0003.000B: unknown main item tag 0x0 [ 387.551965][ T9168] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 387.583598][ T2022] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 387.919590][ T24] hid-generic 00A0:0008:0003.000B: unknown main item tag 0x0 [ 387.975321][ T5906] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 387.984210][ T2022] usb 2-1: USB disconnect, device number 19 [ 388.003545][ T24] hid-generic 00A0:0008:0003.000B: unknown main item tag 0x0 [ 388.023891][ T5906] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 388.075378][ T24] hid-generic 00A0:0008:0003.000B: unknown main item tag 0x0 [ 388.085524][ T5906] em28xx 5-1:0.132: No AC97 audio processor [ 388.093843][ T24] hid-generic 00A0:0008:0003.000B: unknown main item tag 0x0 [ 388.103175][ T5906] usb 5-1: Decoder not found [ 388.108674][ T5906] em28xx 5-1:0.132: failed to create media graph [ 388.117331][ T24] hid-generic 00A0:0008:0003.000B: unknown main item tag 0x0 [ 389.234645][ T5906] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 392.149650][ T24] hid-generic 00A0:0008:0003.000B: unknown main item tag 0x0 [ 392.157074][ T24] hid-generic 00A0:0008:0003.000B: unknown main item tag 0x0 [ 392.166811][ T5906] em28xx 5-1:0.132: Remote control support is not available for this card. [ 392.175471][ T24] hid-generic 00A0:0008:0003.000B: unknown main item tag 0x0 [ 392.182960][ T5951] em28xx 5-1:0.132: Closing input extension [ 392.189585][ T5951] ================================================================== [ 392.197647][ T5951] BUG: KASAN: slab-use-after-free in media_device_unregister+0x598/0x5c0 [ 392.206067][ T5951] Read of size 8 at addr ffff888034044210 by task kworker/1:7/5951 [ 392.213937][ T5951] [ 392.216247][ T5951] CPU: 1 UID: 0 PID: 5951 Comm: kworker/1:7 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(full) [ 392.216267][ T5951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 392.216277][ T5951] Workqueue: usb_hub_wq hub_event [ 392.216298][ T5951] Call Trace: [ 392.216304][ T5951] [ 392.216310][ T5951] dump_stack_lvl+0x116/0x1f0 [ 392.216335][ T5951] print_report+0xcd/0x680 [ 392.216356][ T5951] ? __virt_addr_valid+0x81/0x610 [ 392.216373][ T5951] ? __phys_addr+0xe8/0x180 [ 392.216389][ T5951] ? media_device_unregister+0x598/0x5c0 [ 392.216410][ T5951] kasan_report+0xe0/0x110 [ 392.216429][ T5951] ? media_device_unregister+0x598/0x5c0 [ 392.216454][ T5951] media_device_unregister+0x598/0x5c0 [ 392.216479][ T5951] em28xx_release_resources+0xb2/0x2d0 [ 392.216498][ T5951] em28xx_usb_disconnect+0x1de/0x610 [ 392.216517][ T5951] usb_unbind_interface+0x1dd/0x9a0 [ 392.216537][ T5951] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 392.216552][ T5951] ? __pfx_usb_unbind_interface+0x10/0x10 [ 392.216571][ T5951] device_remove+0x125/0x170 [ 392.216590][ T5951] device_release_driver_internal+0x44b/0x620 [ 392.216614][ T5951] bus_remove_device+0x22f/0x420 [ 392.216633][ T5951] device_del+0x396/0x9f0 [ 392.216653][ T5951] ? __pfx_device_del+0x10/0x10 [ 392.216672][ T5951] ? kobject_put+0x210/0x5a0 [ 392.216687][ T5951] usb_disable_device+0x355/0x7d0 [ 392.216705][ T5951] usb_disconnect+0x2e1/0x920 [ 392.216722][ T5951] hub_event+0x1c57/0x4fa0 [ 392.216745][ T5951] ? __lock_acquire+0xb8a/0x1c90 [ 392.216768][ T5951] ? __pfx_hub_event+0x10/0x10 [ 392.216783][ T5951] ? assoc_array_insert+0x3d0/0x3970 [ 392.216810][ T5951] ? rcu_is_watching+0x12/0xc0 [ 392.216828][ T5951] process_one_work+0x9cf/0x1b70 [ 392.216846][ T5951] ? __pfx_hub_event+0x10/0x10 [ 392.216861][ T5951] ? __pfx_process_one_work+0x10/0x10 [ 392.216878][ T5951] ? assign_work+0x1a0/0x250 [ 392.216900][ T5951] worker_thread+0x6c8/0xf10 [ 392.216917][ T5951] ? __kthread_parkme+0x19e/0x250 [ 392.216935][ T5951] ? __pfx_worker_thread+0x10/0x10 [ 392.216949][ T5951] kthread+0x3c5/0x780 [ 392.216961][ T5951] ? __pfx_kthread+0x10/0x10 [ 392.216973][ T5951] ? rcu_is_watching+0x12/0xc0 [ 392.216996][ T5951] ? __pfx_kthread+0x10/0x10 [ 392.217008][ T5951] ret_from_fork+0x5d4/0x6f0 [ 392.217027][ T5951] ? __pfx_kthread+0x10/0x10 [ 392.217039][ T5951] ret_from_fork_asm+0x1a/0x30 [ 392.217061][ T5951] [ 392.217066][ T5951] [ 392.450770][ T5951] Allocated by task 5906: [ 392.455077][ T5951] kasan_save_stack+0x33/0x60 [ 392.459749][ T5951] kasan_save_track+0x14/0x30 [ 392.464415][ T5951] __kasan_kmalloc+0xaa/0xb0 [ 392.468996][ T5951] em28xx_v4l2_init+0x114/0x4080 [ 392.473925][ T5951] em28xx_init_extension+0x137/0x200 [ 392.479190][ T5951] request_module_async+0x61/0x70 [ 392.484210][ T5951] process_one_work+0x9cf/0x1b70 [ 392.489139][ T5951] worker_thread+0x6c8/0xf10 [ 392.493707][ T5951] kthread+0x3c5/0x780 [ 392.497757][ T5951] ret_from_fork+0x5d4/0x6f0 [ 392.502332][ T5951] ret_from_fork_asm+0x1a/0x30 [ 392.507079][ T5951] [ 392.509383][ T5951] Freed by task 5906: [ 392.513341][ T5951] kasan_save_stack+0x33/0x60 [ 392.518003][ T5951] kasan_save_track+0x14/0x30 [ 392.522666][ T5951] kasan_save_free_info+0x3b/0x60 [ 392.527673][ T5951] __kasan_slab_free+0x51/0x70 [ 392.532421][ T5951] kfree+0x2b4/0x4d0 [ 392.536296][ T5951] em28xx_v4l2_init+0x22b5/0x4080 [ 392.541307][ T5951] em28xx_init_extension+0x137/0x200 [ 392.546573][ T5951] request_module_async+0x61/0x70 [ 392.551582][ T5951] process_one_work+0x9cf/0x1b70 [ 392.556501][ T5951] worker_thread+0x6c8/0xf10 [ 392.561077][ T5951] kthread+0x3c5/0x780 [ 392.565122][ T5951] ret_from_fork+0x5d4/0x6f0 [ 392.569700][ T5951] ret_from_fork_asm+0x1a/0x30 [ 392.574445][ T5951] [ 392.576750][ T5951] The buggy address belongs to the object at ffff888034044000 [ 392.576750][ T5951] which belongs to the cache kmalloc-8k of size 8192 [ 392.590781][ T5951] The buggy address is located 528 bytes inside of [ 392.590781][ T5951] freed 8192-byte region [ffff888034044000, ffff888034046000) [ 392.604640][ T5951] [ 392.606941][ T5951] The buggy address belongs to the physical page: [ 392.613326][ T5951] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x34040 [ 392.622066][ T5951] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 392.630544][ T5951] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 392.638412][ T5951] page_type: f5(slab) [ 392.642374][ T5951] raw: 00fff00000000040 ffff88801b842280 ffffea00008de400 dead000000000003 [ 392.650938][ T5951] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 392.659508][ T5951] head: 00fff00000000040 ffff88801b842280 ffffea00008de400 dead000000000003 [ 392.668165][ T5951] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 392.676818][ T5951] head: 00fff00000000003 ffffea0000d01001 00000000ffffffff 00000000ffffffff [ 392.685469][ T5951] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 392.694115][ T5951] page dumped because: kasan: bad access detected [ 392.700502][ T5951] page_owner tracks the page as allocated [ 392.706193][ T5951] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5656, tgid 5656 (dhcpcd-run-hook), ts 48977701849, free_ts 48975603568 [ 392.727010][ T5951] post_alloc_hook+0x1c0/0x230 [ 392.731761][ T5951] get_page_from_freelist+0x1321/0x3890 [ 392.737289][ T5951] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 392.743165][ T5951] alloc_pages_mpol+0x1fb/0x550 [ 392.748001][ T5951] new_slab+0x23b/0x330 [ 392.752137][ T5951] ___slab_alloc+0xd9c/0x1940 [ 392.756799][ T5951] __slab_alloc.constprop.0+0x56/0xb0 [ 392.762155][ T5951] __kmalloc_cache_noprof+0xfb/0x3e0 [ 392.767419][ T5951] tomoyo_init_log+0xc8a/0x2140 [ 392.772272][ T5951] tomoyo_supervisor+0x302/0x13b0 [ 392.777301][ T5951] tomoyo_env_perm+0x191/0x200 [ 392.782056][ T5951] tomoyo_find_next_domain+0xec2/0x20b0 [ 392.787586][ T5951] tomoyo_bprm_check_security+0x12e/0x1d0 [ 392.793294][ T5951] security_bprm_check+0x1b9/0x1e0 [ 392.798396][ T5951] bprm_execve+0x810/0x1650 [ 392.802887][ T5951] do_execveat_common.isra.0+0x4a5/0x610 [ 392.808507][ T5951] page last free pid 5656 tgid 5656 stack trace: [ 392.814813][ T5951] __free_frozen_pages+0x7fe/0x1180 [ 392.819997][ T5951] __put_partials+0x16d/0x1c0 [ 392.824656][ T5951] qlist_free_all+0x4d/0x120 [ 392.829229][ T5951] kasan_quarantine_reduce+0x195/0x1e0 [ 392.834675][ T5951] __kasan_slab_alloc+0x69/0x90 [ 392.839512][ T5951] __kmalloc_noprof+0x1d4/0x510 [ 392.844351][ T5951] tomoyo_supervisor+0x45b/0x13b0 [ 392.849365][ T5951] tomoyo_env_perm+0x191/0x200 [ 392.854114][ T5951] tomoyo_find_next_domain+0xec2/0x20b0 [ 392.859647][ T5951] tomoyo_bprm_check_security+0x12e/0x1d0 [ 392.865360][ T5951] security_bprm_check+0x1b9/0x1e0 [ 392.870466][ T5951] bprm_execve+0x810/0x1650 [ 392.874957][ T5951] do_execveat_common.isra.0+0x4a5/0x610 [ 392.880579][ T5951] __x64_sys_execve+0x8e/0xb0 [ 392.885243][ T5951] do_syscall_64+0xcd/0x4c0 [ 392.889740][ T5951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.895616][ T5951] [ 392.897922][ T5951] Memory state around the buggy address: [ 392.903542][ T5951] ffff888034044100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 392.911585][ T5951] ffff888034044180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 392.919630][ T5951] >ffff888034044200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 392.927675][ T5951] ^ [ 392.932244][ T5951] ffff888034044280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 392.940286][ T5951] ffff888034044300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 392.948324][ T5951] ================================================================== [ 393.019844][ T24] hid-generic 00A0:0008:0003.000B: unknown main item tag 0x2 [ 393.043168][ T24] hid-generic 00A0:0008:0003.000B: unknown main item tag 0x0 [ 393.054840][ T24] hid-generic 00A0:0008:0003.000B: hidraw0: HID v0.05 Device [syz1] on syz0 [ 393.082396][ T30] audit: type=1400 audit(1749571890.990:350): avc: denied { read } for pid=5172 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 393.169812][ T30] audit: type=1400 audit(1749571890.990:351): avc: denied { search } for pid=5172 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 393.196779][ T9184] fido_id[9184]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 393.282840][ T30] audit: type=1400 audit(1749571890.990:352): avc: denied { search } for pid=5172 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 393.319013][ T5951] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 393.326240][ T5951] CPU: 1 UID: 0 PID: 5951 Comm: kworker/1:7 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(full) [ 393.338305][ T5951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 393.348350][ T5951] Workqueue: usb_hub_wq hub_event [ 393.353367][ T5951] Call Trace: [ 393.356625][ T5951] [ 393.359544][ T5951] dump_stack_lvl+0x3d/0x1f0 [ 393.364126][ T5951] panic+0x71c/0x800 [ 393.368012][ T5951] ? __pfx_panic+0x10/0x10 [ 393.372418][ T5951] ? irqentry_exit+0x3b/0x90 [ 393.376998][ T5951] ? lockdep_hardirqs_on+0x7c/0x110 [ 393.382186][ T5951] ? preempt_schedule_thunk+0x16/0x30 [ 393.387547][ T5951] ? media_device_unregister+0x598/0x5c0 [ 393.393174][ T5951] ? preempt_schedule_common+0x44/0xc0 [ 393.398624][ T5951] ? media_device_unregister+0x598/0x5c0 [ 393.404246][ T5951] check_panic_on_warn+0xab/0xb0 [ 393.409178][ T5951] end_report+0x107/0x170 [ 393.413499][ T5951] kasan_report+0xee/0x110 [ 393.417904][ T5951] ? media_device_unregister+0x598/0x5c0 [ 393.423532][ T5951] media_device_unregister+0x598/0x5c0 [ 393.428981][ T5951] em28xx_release_resources+0xb2/0x2d0 [ 393.434426][ T5951] em28xx_usb_disconnect+0x1de/0x610 [ 393.439701][ T5951] usb_unbind_interface+0x1dd/0x9a0 [ 393.444891][ T5951] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 393.450507][ T5951] ? __pfx_usb_unbind_interface+0x10/0x10 [ 393.456212][ T5951] device_remove+0x125/0x170 [ 393.460791][ T5951] device_release_driver_internal+0x44b/0x620 [ 393.466849][ T5951] bus_remove_device+0x22f/0x420 [ 393.471776][ T5951] device_del+0x396/0x9f0 [ 393.476101][ T5951] ? __pfx_device_del+0x10/0x10 [ 393.480948][ T5951] ? kobject_put+0x210/0x5a0 [ 393.485522][ T5951] usb_disable_device+0x355/0x7d0 [ 393.490536][ T5951] usb_disconnect+0x2e1/0x920 [ 393.495200][ T5951] hub_event+0x1c57/0x4fa0 [ 393.499611][ T5951] ? __lock_acquire+0xb8a/0x1c90 [ 393.504540][ T5951] ? __pfx_hub_event+0x10/0x10 [ 393.509286][ T5951] ? assoc_array_insert+0x3d0/0x3970 [ 393.514567][ T5951] ? rcu_is_watching+0x12/0xc0 [ 393.519318][ T5951] process_one_work+0x9cf/0x1b70 [ 393.524243][ T5951] ? __pfx_hub_event+0x10/0x10 [ 393.528995][ T5951] ? __pfx_process_one_work+0x10/0x10 [ 393.534356][ T5951] ? assign_work+0x1a0/0x250 [ 393.538937][ T5951] worker_thread+0x6c8/0xf10 [ 393.543514][ T5951] ? __kthread_parkme+0x19e/0x250 [ 393.548525][ T5951] ? __pfx_worker_thread+0x10/0x10 [ 393.553620][ T5951] kthread+0x3c5/0x780 [ 393.557671][ T5951] ? __pfx_kthread+0x10/0x10 [ 393.562240][ T5951] ? rcu_is_watching+0x12/0xc0 [ 393.566989][ T5951] ? __pfx_kthread+0x10/0x10 [ 393.571558][ T5951] ret_from_fork+0x5d4/0x6f0 [ 393.576137][ T5951] ? __pfx_kthread+0x10/0x10 [ 393.580715][ T5951] ret_from_fork_asm+0x1a/0x30 [ 393.585467][ T5951] [ 393.588655][ T5951] Kernel Offset: disabled [ 393.592957][ T5951] Rebooting in 86400 seconds..